Personal data that ChessMap® processes in accordance with its relationship with each data subject, whether an individual and/or a legal entity.

1. Identification data: first name, last name, pseudonyms, aliases, nickname, business name, business name, type of entity (natural or legal person), unique population registry code or its equivalent, voter ID card, passport, driver’s license, national identity card, birth certificate or its equivalent, death certificate or its equivalent, social security numbers, age, username on social media and applications, federal taxpayer registry, tax identification number or its equivalent.
2. Contact information: home address in Mexico and/or abroad, personal landline and/or cell phone number, fax, personal email address, references for the home address in Mexico and/or abroad and/or their references, precise or approximate geolocation of the home address in Mexico and/or abroad, browser information from the electronic device, electronic device information.
3. Employment/Professional Data: activity, occupation, profession, line of business, economic activity, position, assignment, and/or role held, work address and/or references, institutional address and/or references, registered office address and/or references, tax address and/or references, institutional phone number, work phone number, institutional email address, work email address, employment and/or personal references.
4. Academic data: professional license, degrees, certificates, awards, educational and/or professional background.

Purposes necessary for the processing of personal and/or sensitive data.

1. Issuing and following up on service quotes.
2. To provide the requested legal and/or consulting services.
3. Requesting and managing quotes, proposals, and/or purchase orders from third parties.
4. Verify the identity of data subjects.
5. Refer data subjects to licensed professionals and/or competent third parties.
6. Schedule, conduct, analyze, and follow up on interviews, appointments, and meetings.
7. Conduct and/or analyze interviews, investigations, forms, and questionnaires.
8. Build and maintain professional relationships within and outside of Mexico.
9. Send and receive notifications related to services.
10. Integrate, safeguard, and transmit information and documentation to managers or third parties.
11. Issue opinions, audits, analyses, and technical and/or legal reports.
12. To enter into, maintain, terminate, and enforce contractual rights and/or obligations, including labor-related ones.
13. Comply with tax, accounting, and/or auditing obligations.
14. Verify the background and/or conflicts of interest of licensees, partners, and/or suppliers.
15. Retain data for the legally required periods and, once these periods have expired, securely block or delete it.
16. Defend rights and interests in the event of complaints, claims, and/or litigation.
17. Notify data subjects of material changes to the privacy notice and/or the terms of service.
18. Ensure security in the offices and/or control access (video surveillance).
19. Safeguard communications sent and/or received through email accounts managed by ChessMap®; monitor, back up, and audit said infrastructure and/or associated systems for the purposes of cybersecurity, fraud prevention and detection, compliance with legal obligations, and continuous improvement of service quality; To allow access to messages, attachments, metadata, and/or logs solely to ChessMap®, the licensee responsible for serving the data subject and their team, the external information technology team, and internal and/or external auditors, all of whom are subject to confidentiality obligations; retain the full content of emails for the maximum period permitted by applicable law, counted from the conclusion of the relationship with the data subject, and delete or block them in advance when there is a request or express agreement from the data subject and there is no legal impediment.
20. Process personal data using artificial intelligence solutions or platforms, including those offered by Microsoft®, Alphabet Inc., Anthropic, Anysphere, Inc., DeepL SE, and OpenAI, as well as any others contracted by ChessMap and/or its licensees to generate analyses, summaries, translations, drafts, and other deliverables essential for the proper provision of the requested legal and/or consulting services.
21. Implement pseudonymization, encryption, and/or access controls for processing via artificial intelligence solutions or platforms, including those offered by Microsoft®, Alphabet Inc., Anthropic, Anysphere, Inc., DeepL SE, and OpenAI, as well as any others contracted by ChessMap and/or its licensees.
22. Detect, contain, document, and report personal data breaches.
23. Manage risks of fraud, cybercrime, and identity theft.
24. Back up and/or restore databases to ensure business continuity.
25. Use work, productivity, and/or translation applications.
26. Recruit, select, and/or hire staff.
27. Manage the employment relationship and/or related obligations.
28. Record, investigate, and/or resolve requests for access, rectification, erasure, and objection, restriction of use, revocations, and/or complaints.

Note: The trade names, trademarks, logos, and other distinctive signs of Microsoft®, Alphabet Inc., Anthropic, Anysphere, Inc., DeepL SE, and OpenAI are the exclusive property of their respective owners and are mentioned in this privacy notice solely for descriptive purposes; this document does not imply any license, assignment, authorization, sponsorship, or corporate relationship with them.

Transfers of personal and/or sensitive data.

ChessMap® only transfers personal and/or sensitive data that is strictly necessary for the fulfillment of its purposes in Mexico and/or abroad to the third parties listed below: 1) Licensees; 2) Business and professional partners; 3) Licensees, Business and Professional Partners, Service and Product Providers (certified public accountants, attorneys, administrative agencies, advertising, information backup and/or storage services, productivity, labor, translation, Information Technology, artificial intelligence solutions and/or platforms, in the latter case including those offered by Microsoft®, Alphabet Inc., Anthropic, Anysphere, Inc., DeepL SE, and OpenAI, as well as any others contracted by ChessMap and/or its licensees); 4) Customers; 5) Authorities (Mexican and/or foreign); and 6) in cases provided for by law. ChessMap and/or its licensees shall ensure that the privacy policies of third-party artificial intelligence solutions and/or platforms are, at a minimum, equivalent to those offered by Microsoft®, Alphabet Inc., Anthropic, Anysphere, Inc., DeepL SE, and OpenAI regarding their artificial intelligence products or services, and will adopt the necessary technical, administrative, and physical measures to protect personal data in accordance with the principles established in the Federal Law on the Protection of Personal Data Held by Private Parties. The processing will be carried out exclusively for the necessary purposes described in the comprehensive privacy notice of ChessMap and/or its licensees, as well as for non-necessary processing purposes when the respective data anonymization is performed beforehand.

The data transfers carried out by ChessMap® are intended to fulfill the processing purposes set forth below, as applicable:

Non-necessary purposes of transfer.

Personal and/or sensitive data transferred by ChessMap® to third parties must be processed by them in accordance with: 1) This Privacy Notice; 2) The terms agreed upon with ChessMap®; 3) The terms required by the data subject where applicable; and 4) In compliance with legal requirements.

Requirements for requests.

All requests made by data subjects must include the following:

1. Provide the data subject’s full name and, if applicable, the full name of their legal representative;
2. Provide an address for receiving notifications, including: street, house number and/or apartment number, neighborhood, city or district, state, country, and ZIP code;
3. Provide an email address for receiving notifications;
4. Provide a cell phone number for receiving notifications;
5. Specify the type of request being made;
6. State the reasons for the request and the intended purposes;
7. List the elements and documents related to the location of the personal or sensitive data regarding which you wish to exercise a right;
8. Provide the signature of the data subject or, if applicable, the legal representative; and
9. Attach the following to the request:
10. A simple copy of the data subject’s valid official identification document and, where applicable, that of the legal representative (voter ID, passport, or driver’s license);
11. When the request is made through a legal representative, the document certifying such status must be attached;
12. A simple copy of any documents you deem necessary; and
13. A simple copy of the documents that facilitate the identification of the personal or sensitive data on which your request is based; if you do not have them, you must state so.

Retention, blocking, and deletion of personal data.

Retain personal and/or sensitive data for up to the maximum period established by applicable law for each category of information, for example, 10 years for tax purposes, counting from the conclusion of the relationship with the data subject; then, block such data through administrative and logical controls that restrict access to it when it is no longer necessary for the described purposes and during the statute of limitations period; so that the data may subsequently be securely deleted or anonymized once that period has elapsed, or earlier, upon prior notification and/or agreement with the data subject, provided there is no legal prohibition, and document each stage of retention, blocking, and deletion in an internal control log.

ChessMap® operates the website www.chessmap.mx, which uses first-party and third-party cookies, as well as web beacons, through which it collects the following categories of personal data: i) Identification data; ii) Contact data; and iii) Employment/professional data. These categories of personal data are collected to fulfill the following processing purposes:

i. Issue and follow up on service quotes; ii) Provide the requested legal and/or consulting services; iii) Verify the identity of data subjects; iv) Refer data subjects to licensees and/or competent third parties; v) Schedule, conduct, analyze, and follow up on interviews, appointments, and meetings; vi) Establish and maintain professional relationships within and outside Mexico; vii) Compile, safeguard, and transmit information and documentation to data processors or third parties; viii) Issue opinions, audits, analyses, and technical and/or legal reports; ix) Enter into, maintain, terminate, and enforce contractual rights and/or obligations, including labor-related ones; x) Verify the background and/or conflicts of interest of licensees, partners, and/or suppliers; xi) Retain data for the legally required periods and, upon expiration of such periods, securely block or delete it; xii) Defend rights and interests in the event of complaints, claims, and/or litigation; xiii) Notify data subjects of material changes to the privacy notice and/or terms of service; xiv) Safeguard communications sent and/or received through email accounts managed by ChessMap®; monitor, back up, and audit said infrastructure and/or associated systems for the purposes of cybersecurity, fraud prevention and detection, compliance with legal obligations, and continuous improvement of service quality; allow access to messages, attachments, metadata, and/or logs solely to ChessMap®, the licensee responsible for the data subject’s service, the external information technology team, and internal and/or external auditors, all of whom are subject to confidentiality obligations; retain the full content of emails for the maximum period permitted by applicable law, counted from the conclusion of the relationship with the data subject, and delete or block them in advance when there is a request or express agreement from the data subject and there is no legal impediment; xv) Process personal data using artificial intelligence solutions or platforms, including those offered by Microsoft®, Alphabet Inc., Anthropic, Anysphere, Inc., DeepL SE, and OpenAI, as well as any others contracted by ChessMap and/or its licensees to generate analyses, summaries, translations, drafts, and other deliverables essential for the proper provision of the requested legal and/or consulting services; xvi) Implement pseudonymization, encryption, and/or access controls for processing in artificial intelligence solutions and/or platforms, including those offered by Microsoft®, Alphabet Inc., Anthropic, Anysphere, Inc., DeepL SE, and OpenAI, as well as others contracted by ChessMap and/or its licensees; xvii) Detect, contain, document, and report personal data breaches; xviii) Manage risks of fraud, cybercrime, and identity theft; xix) Back up and/or restore databases to ensure business continuity; xx) Use work, productivity, and/or translation applications; xxi) Recruit, select, and/or hire personnel; xxii) Record, investigate, and/or resolve requests for access, rectification, erasure, and objection, restriction of use, revocations, and/or complaints.

i.i. – Necessary purposes: i) Issuing and following up on service quotes; ii) Providing the requested legal and/or consulting services; iii) Verifying the identity of data subjects; iv) Referring data subjects to licensees and/or competent third parties; v) Schedule, conduct, analyze, and follow up on interviews, appointments, and meetings; vi) Establish and maintain professional relationships within and outside Mexico; vii) Compile, safeguard, and transmit information and documentation to data processors or third parties; viii) Issue opinions, audits, analyses, and technical and/or legal reports; ix) Enter into, maintain, terminate, and enforce contractual rights and/or obligations, including labor-related ones; x) Verify the background and/or conflicts of interest of licensees, partners, and/or suppliers; xi) Retain data for the legally required periods and, upon expiration of such periods, securely block or delete it; xii) Defend rights and interests in the event of complaints, claims, and/or litigation; xiii) Notify data subjects of material changes to the privacy notice and/or terms of service; xiv) Safeguard communications sent and/or received through the email accounts managed by ChessMap®; monitor, back up, and audit said infrastructure and/or associated systems for the purposes of cybersecurity, fraud prevention and detection, compliance with legal obligations, and continuous improvement of service quality; allow access to messages, attachments, metadata, and/or logs solely to ChessMap®, the licensee responsible for the data subject’s service, the external information technology team, and internal and/or external auditors, all of whom are subject to confidentiality obligations; retain the full content of emails for the maximum period permitted by applicable law, counted from the conclusion of the relationship with the data subject, and delete or block them in advance when there is a request or express agreement from the data subject and there is no legal impediment; xv) Process personal data using artificial intelligence solutions or platforms, including those offered by Microsoft®, Alphabet Inc., Anthropic, Anysphere, Inc., DeepL SE, and OpenAI, as well as any others contracted by ChessMap and/or its licensees to generate analyses, summaries, translations, drafts, and other deliverables essential for the proper provision of the requested legal and/or consulting services; xvi) Implement pseudonymization, encryption, and/or access controls for processing in artificial intelligence solutions and/or platforms, including those offered by Microsoft®, Alphabet Inc., Anthropic, Anysphere, Inc., DeepL SE, and OpenAI, as well as others contracted by ChessMap and/or its licensees; xvii) Detect, contain, document, and report personal data breaches; xviii) Manage risks of fraud, cybercrime, and identity theft; xix) Back up and/or restore databases to ensure business continuity; xx) Use work, productivity, and/or translation applications; xxi) Recruit, select, and/or hire personnel; xxii) Record, investigate, and/or resolve requests for access, rectification, erasure, and objection, restriction of use, revocations, and/or complaints.

i.ii.- Non-essential purposes: i) Send information or documentation issued by authorities for informational purposes; ii) Send analyses, opinions, and studies—whether our own, those of licensees, or third parties—for informational purposes; iii) Send information about advertising campaigns and events—whether our own or those of licensees; iv) Monitor user behavior on the website and/or applications; v) Conducting satisfaction surveys and obtaining metrics on visits and interaction; vi) Using anonymized datasets to improve the algorithms and/or models of artificial intelligence solutions and/or platforms employed and/or contracted by ChessMap® and/or its licensees, including those offered by Microsoft®, Alphabet Inc., Anthropic, Anysphere, Inc., DeepL SE, and OpenAI.

If the user so desires, they may block ChessMap®’s own cookies and/or third-party cookies, as well as web beacons, by following the instructions found in the user manuals and/or terms and conditions provided by the browser they are using. Below, ChessMap® provides guides for certain browsers for the purposes of this paragraph (visiting or clicking on the links listed below is the sole responsibility of the user):

1. If you use the Google Chrome browser, please consult the following link: https://support.google.com/chrome/answer/95647?hl=es-419&co=GENIE.Platform%3DDesktop.
2. If you use the Mozilla Firefox browser, please consult the following link: https://support.mozilla.org/es/kb/impedir-que-los-sitios-web-guarden-sus-preferencia.
3. If you are using the Safari browser, please refer to the following link: https://support.apple.com/es-mx/guide/safari/sfri11471/mac#:~:text=In%20the%20Safari%20app,%20tap%20Delete%20or%20Delete%20All.
4. If you are using the Microsoft Edge browser, please refer to the following link: https://support.microsoft.com/es-es/microsoft-edge/eliminar-las-cookies-en-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09#:~:text=In%20Edge,%20select%20Settings%20and%20more %20%3E%20Settings%20%3E%20Privacy%2C%20and%20other%20site%20data%20.

Furthermore, ChessMap®, at its premises located at ADDRESS, has surveillance cameras as well as electronic devices that record video and/or audio, in color and black and white, and such recordings are retained by ChessMap® for a period of 30 calendar days from the date of recording, unless, for legal reasons, such recordings must remain in its possession for a period longer than that indicated. In each specific case, these recordings collect the personal and sensitive data indicated in points 1 and 2 of this privacy notice to fulfill the following necessary processing purposes described below:

• To provide the requested legal and/or consulting services.
• To verify the identity of the data subjects.
• Conduct and/or analyze interviews, investigations, forms, and questionnaires.
• Integrate, safeguard, and transmit information and documentation to data processors or third parties.
• To defend rights and interests in the event of complaints, claims, and/or litigation.
• Ensure security in the offices and/or control access (video surveillance).
• Detect, contain, document, and report personal data breaches.
• Manage risks related to fraud, cybercrime, and identity theft.
• Administer the employment relationship and/or related obligations.

If the data subject objects and/or requests any modification to the processing of their personal and/or sensitive data as mentioned in sections 8.1, 8.2, and 8.3 of this privacy notice, they must submit the corresponding request in accordance with section 6.- of this privacy notice at: i) the address located at 31 Sur, 915, La Paz, Puebla, Puebla, Mexico, postal code 72160, between 10:00 a.m. and 1:00 p.m., Monday through Friday, except on days designated as non-working days under federal labor law, by official order, or as non-banking days; or ii) by sending an email to “info@chessmap.mx ”.