Privacy Notice

Cárdenas Rioseco, Martínez & Asociados, hereinafter "the Firm", with domicile at Paseo de la Reforma 2608, Piso 14, Despacho 1403, Lomas Altas, Miguel Hidalgo, Ciudad de México, is responsible for the processing, use, protection and safekeeping of the personal data collected through this website, in accordance with applicable personal data protection legislation.

For any matter related to the processing of your personal data, you may contact us at the following email address: contacto@crmya.com.

Phone: 55 5570 5170

Through our website and, in particular, through the contact or consultation request forms, we may collect the following personal data:

• Full name.
• Name of the company or organization, when applicable.
• Email address.
• Phone number.
• Legal area of interest.
• Information you voluntarily provide in the description field of your inquiry.
• Information related to the communication you maintain with the Firm.

Likewise, when you use our website, certain technical data related to your browsing may be automatically generated, such as:

• IP address.
• Browser type.
• Device type.
• Operating system.
• Date and time of access.
• Pages visited.
• Technical information related to the operation and security of the site.

This information may be obtained through cookies and other similar technologies, in accordance with our Cookie Policy.

The Firm does not intentionally request sensitive personal data through the general contact form on the website.

For this reason, we recommend not including in your initial communication information related to:

• Health status.
• Genetic information.
• Racial or ethnic origin.
• Religious or philosophical beliefs.
• Political opinions.
• Sexual preferences.
• Biometric information.
• Especially sensitive information relating to a judicial proceeding or investigation.

Where the nature of a legal matter subsequently requires the processing of sensitive personal data, such processing will be carried out in accordance with applicable legislation and the corresponding security and confidentiality measures.

The personal data we collect will be used for purposes directly related to attending to your request, including:

1. Receiving and attending to requests for information.
2. Identifying the legal area related to your inquiry.
3. Contacting you to follow up on your request.
4. Coordinating calls, meetings or consultations.
5. Preliminarily assessing whether the Firm can handle the matter raised.
6. Responding to questions or communications sent through the website.
7. Keeping an administrative record of the communications received.
8. Complying with legal or regulatory obligations or requirements issued by competent authorities.
9. Maintaining the security, integrity and proper functioning of the website.

Sending information through the website does not by itself imply acceptance of a matter or the creation of a professional attorney-client relationship.

The provision of legal services will be subject, as applicable, to the express acceptance of the matter by the Firm and the formalization of the corresponding instruments.

Unless the data subject expressly authorizes otherwise, the data provided through the contact form will not be used to send advertising, promotions or commercial communications unrelated to your inquiry.

If the Firm implements newsletters, legal publications, event invitations or other optional informational communications in the future, the corresponding consent will be requested and a mechanism will be provided to stop receiving them.

The Firm does not commercialize, sell or rent personal data.

Personal data may be disclosed to third parties when necessary to comply with legal obligations or when the law permits such disclosure without the data subject's consent.

Among other cases, the information may be provided:

• To judicial or administrative authorities when there is a legal obligation or a valid request.
• To competent authorities when necessary for the recognition, exercise or defense of a right.
• In any other case expressly permitted by applicable legislation.

Where the technological operation of the site requires the use of hosting, email, technology infrastructure, storage or IT security providers, such providers must process the information solely to provide the contracted services and in accordance with the corresponding confidentiality and protection obligations.

If, as a result of a professional relationship, additional transfers of personal data become necessary, such transfers will be handled in accordance with the privacy notice or documentation corresponding to that relationship.

You may exercise your access, rectification, cancellation and opposition (ARCO) rights at any time:

• Access: know what personal data we hold and how it is used.
• Rectification: request the correction of inaccurate, incomplete or outdated personal data.
• Cancellation: request, when legally applicable, the deletion of your personal data.
• Opposition: object to the processing of your data for certain purposes in the cases permitted by applicable legislation.

To exercise any of these rights, you may send a request to: contacto@crmya.com, indicating in the subject line "ARCO Rights Request".

The request must contain, at a minimum:

• Name of the data subject.
• A means to receive notifications.
• Documentation to verify your identity and, if applicable, the authority of your representative.
• A clear description of the personal data with respect to which you wish to exercise a right.
• The right you wish to exercise.
• Any additional information that facilitates locating your data.

In rectification requests, you must also indicate the data you wish to modify and provide, when applicable, documentation supporting the requested modification.

The Firm will attend to requests within the timeframes established by applicable legislation.

Where the processing of your personal data depends on your consent, you may request its revocation.

The request may be sent to contacto@crmya.com with the subject line "Revocation of consent".

Revocation will not have retroactive effects and may be subject to the limitations established by applicable legislation.

The data subject may, at any time, request the limitation of the use or disclosure of their personal data by sending an email to contacto@crmya.com.

The request must contain sufficient information to identify the data subject and the data with respect to which the limitation is requested.

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal or administrative obligations and, where applicable, to protect or exercise rights.

Once the corresponding period has ended, the data will be deleted, blocked, anonymized or retained in accordance with applicable legal obligations.

The Firm will implement reasonable administrative, technical and physical measures to protect personal data against:

• Loss.
• Damage.
• Alteration.
• Destruction.
• Unauthorized use.
• Unauthorized access.
• Improper disclosure.

However, no system for transmitting or storing information over the Internet can guarantee absolute security.

For this reason, we recommend not sending especially sensitive or confidential information through public forms until an appropriate communication channel with the Firm has been established.

The website may use cookies and similar technologies to enable its proper functioning, maintain its security, remember certain preferences and, where enabled and authorized, obtain statistical information about the use of the site.

You can find more information about these technologies, the categories used and the options available to manage them in our Cookie Policy.

The website may contain links to or integrations with services provided by third parties.

The Firm does not control the privacy practices of external sites or services.

We recommend reviewing the corresponding privacy notices before providing information to third parties.

The Firm may update or modify this Privacy Notice as a result of:

• Legislative or regulatory changes.
• New legal requirements.
• Changes to the services.
• Technological changes.
• New privacy practices.
• Changes to the operation of the website.

Any modifications will be made available on this same website. The date of the last update appears at the beginning of this document.

For any questions related to this Privacy Notice or the processing of your personal data:

Cárdenas Rioseco, Martínez & Asociados
Paseo de la Reforma 2608
Piso 14, Despacho 1403
Lomas Altas, Miguel Hidalgo, Ciudad de México

Phone: 55 5570 5170
Email: contacto@crmya.com

Last updated: September 2, 2026