AVISO DE PRIVACIDAD

In compliance with the provisions of Article 16 of the Political Constitution of the United Mexican States, as well as Articles 15, 16 and related articles of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter, the “Law”), its Regulations (hereinafter referred to as the “Regulations”), the Privacy Notice Guidelines issued by the Ministry of Economy, and other applicable legal provisions, DOS CORAZONES S.A. DE C.V. (hereinafter referred to as “DOS CORAZONES”) with address at Av. Santa Fe, No. 505, Floor 7, Office 704, Col. Cruz Manca, Cuajimalpa de Morelos, Mexico City, C.P. 05349, is responsible for obtaining, using, disclosing, storing, accessing, handling, exploiting, transferring and disposing of (hereinafter collectively referred to as the “Processing”) any information provided concerning an identified or identifiable natural person (hereinafter referred to as the “Personal Data”).
For the above reasons and in order to guarantee the privacy and right to informational self-determination of individuals, DOS CORAZONES makes this privacy notice available to you (hereinafter referred to as the “Privacy Notice”).

In compliance with the Law, the Regulation and other applicable legal provisions, DOS CORAZONES will be obliged to observe, at all times, the principles of legality, purpose, loyalty, consent, quality, proportionality, information and responsibility.

CONSENT

This Privacy Notice must be consulted by the owner of the Personal Data (hereinafter referred to as the “Owner”) before providing any type of Personal Data to DOS CORAZONES.

The mere fact that the Owner provides Personal Data to DOS CORAZONES will imply:

(i) the granting of your tacit consent for its Treatment in the terms provided in this Privacy Notice;

(ii) that you are aware of the purpose of the Processing of your Personal Data; and

(iii) that you know the procedure for exercising your ARCO Rights (as said term is defined below), as well as for limiting the use and disclosure of your Personal Data.

In order to revoke consent, the Data Subject must send his/her request to the following email address: comunicacion@2corazones.com or by going directly to the offices of DOS CORAZONES located at the address indicated above. The same procedure will be applicable in the event that the Data Subject wishes to express his/her refusal to the Processing of his/her Personal Data for purposes that are not necessary for the legal relationship with DOS CORAZONES.
PERSONAL DATA COLLECTED BY DOS CORAZONES.
Personal Data will be collected through the formats established on the page https://doscorazonesfilms.org (hereinafter the “website”) and/or where appropriate through the means that DOS CORAZONES makes available to you, said data will be collected directly from its owner.

You are hereby informed that the Personal Data that will be collected are as follows:
- Full name;
- Email address;
- Home;
- Billing data.
- Digital information: information related to your use of our website and access to our content or publications.

DOS CORAZONES does not collect sensitive personal data. If this type of information is required, DOS CORAZONES will require the express written consent of the Data Subject.

Since the Personal Data is provided directly by the Owner, it will be presumed that it complies with the quality principle until the Owner states and proves otherwise, or until DOS CORAZONES has objective evidence in this regard.

PURPOSE OF PROCESSING PERSONAL DATA.

Personal Data will be used for the following main purposes, necessary to maintain the legal relationship between DOS CORAZONES and the Owner:
- To identify the Owner as a user of the services provided by DOS CORAZONES.
- To contact the Owner in relation to his/her user account or the requested services.
- Facilitate the Owner's access to the DOS CORAZONES Website.
- Provide the services that the Owner has requested.
- Respond to comments, questions, suggestions, complaints and recommendations from the Owner.
- Inform the Owner about new products and/or services.
- Inform the Owner about changes in the policies or services of DOS CORAZONES.
- Billing for services provided.
- Compliance with legal obligations to authorities of various kinds.
- Respond to and address requests to exercise ARCO Rights (as defined below) submitted by the Owner.
As secondary purposes, DOS CORAZONES uses Personal Data to:
- Promote the various services and projects of DOS CORAZONES.
- Conduct periodic evaluations of our services in order to improve their quality.
- Research and information purposes for TWO HEARTS.
- For statistical and commercial prospecting purposes.
- Notify the Owner about new services or products, promotions, offers, discounts, among others that are related to those already contracted or acquired.
- Develop studies and programs that are necessary to determine consumer habits.
- Make invitations to events organized by DOS CORAZONES or in which it participates.

DOS CORAZONES may carry out investigations and actions by its own means that it deems necessary, so that through any third party, agency or authority it can verify the accuracy of the data provided to it.

In the event that information is needed for a purpose other than that established in this Notice, said information will be requested from the Owner, presenting a new notice regulating the handling of said additional information.

Likewise, you may express your refusal to the processing of your personal data for any of the secondary purposes by sending an email to comunicacion@2corazones.com. Refusal in this regard will not affect in any way the legal relationship established between the Owner and DOS CORAZONES.
DOS CORAZONES informs the Owners that, when the Personal Data are no longer necessary for the fulfillment of the aforementioned purposes or for the fulfillment of the legal obligations under its responsibility, DOS CORAZONES will proceed with the cancellation of the same.

TRANSFER OF PERSONAL DATA BY TWO HEARTS.

DOS CORAZONES declares that the Personal Data to which it has access may be transferred to Mexican or foreign third parties in terms of article 37 of the Law, when the transfer:
(i) is provided for in a law or Treaty to which Mexico is a party;
(ii) is necessary for medical prevention or diagnosis, the provision of healthcare, medical treatment or the management of healthcare services;
(iii) is made to controlling companies, subsidiaries or affiliates under the common control of DOS CORAZONES, to a parent company or to its associates;
(iv) is necessary by virtue of a contract entered into or to be entered into in the interest of the Owner, by DOS CORAZONES and a third party or by the Owner and a third party;
(v) is necessary or legally required for the safeguarding of a public interest, or for the prosecution or administration of justice;
(vi) is necessary for the recognition, exercise or defense of a right in a judicial process; and
(vii) is necessary for the maintenance or fulfillment of a legal relationship between the Owner and DOS CORAZONES.

In any other case, DOS CORAZONES will require the Owner's authorization to carry out the data transfer that is necessary for the provision of the requested services.

DOS CORAZONES declares that it will extend the obligations defined in this Notice to the transferred third parties listed above.

ARCO RIGHTS, USE AND DISCLOSURE.
The Holder shall have the rights indicated below (hereinafter referred to as the “ARCO Rights”):
1. Right to know what Personal Data DOS CORAZONES has about the Owner (Access);
2. Right to request the rectification of your Personal Data when it is outdated, inaccurate or incomplete (Rectification);
3. Right to have your Personal Data deleted from DOS CORAZONES records or databases (Cancellation).
4. Right to object, for legitimate reasons, to the processing of your Personal Data (Opposition). If such opposition is admissible, DOS CORAZONES will not be able to process the Personal Data relating to the Data Subject.
Additionally, the Owner will have the right to limit the use and disclosure of his/her Personal Data, as well as revoke consent for the processing of the same by means of a request addressed to the Personal Data Area of ​​DOS CORAZONES.
To exercise any of the ARCO Rights, as well as the rights indicated in the previous paragraph, the Owner must submit the respective request to the Personal Data Area of ​​DOS CORAZONES at the email address comunicacion@2corazones.com.
The application will have the following requirements:
1. The name of the Owner and address or other means to communicate the response to your request;
2. Documents proving the identity or, where applicable, the legal representation of the Owner;
3. A clear and precise description of the Personal Data in respect of which you seek to exercise any of the aforementioned rights;
4. Any other element or document that facilitates the location of the Personal Data; and
5. The right you intend to exercise.
Once the request has been received, DOS CORAZONES will have a period of 20 days to respond to the Data Subject. The response will be sent to the Data Subject's registered email address. The aforementioned period may be extended once for an equal period, provided that the circumstances of the case justify it.
The obligation to access information will be deemed fulfilled once it is made available to the Data Subject, either by electronic means or by issuing simple copies. In the event that the Data Subject considers that there has been a violation of his or her right to the protection of Personal Data, he or she has the right to go to the competent authority, without prejudice to exercising the rights he or she considers pertinent.

MODIFICATIONS TO THE PRIVACY NOTICE.
This Privacy Notice may be subject to modifications, changes or updates derived from new legal requirements; from the needs of DOS CORAZONES; from its privacy practices; from changes in its business models or for other reasons.

Any type of modification to this Privacy Notice will be communicated to the Holders by making the Privacy Notice available to them on the page www.DOSCORAZONES.com.mx.
It is the responsibility of the Owner to read the Privacy Notice, because, by using the DOS CORAZONES Website, he/she automatically accepts the terms of this Notice, since, in the event of not receiving opposition from the Owner within a period of five business days, it will be understood that he/she accepts in accordance with the changes that may occur in this Privacy Notice.

This Privacy Notice is available on the aforementioned website.

Last update date of this Privacy Notice: January 2025