In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (the Data Protection Law), and in order to ensure the protection, privacy, and proper handling of personal data, as well as the exercise of the rights of access, rectification, cancellation, and opposition, safeguarding the right to informational self-determination.

To exercise the rights of access, rectification, cancellation, opposition, limitation of use, or withdrawal of consent, a request must be sent via email to contact@melkor.com.mx

The Data Protection Law defines Personal Data as: Any information concerning an identified or identifiable natural person. It also defines Sensitive Personal Data as: Any personal data that affects the most intimate sphere of its owner or whose improper use may result in discrimination or pose a serious risk. Sensitive data includes, but is not limited to, information revealing racial or ethnic origin, present and future health status, genetic information, religious, philosophical, and moral beliefs, trade union affiliation, political opinions, or sexual preference.

In accordance with Article 15 of the LFPDPPP, Melkor will be responsible for your personal information (personal data). By submitting your personal data to Melkor, the owner accepts and authorizes Melkor to use their personal data and information for the proper provision of Melkor’s services. This data will be stored in our database and may be used, among others, for the following purposes: conducting due diligence and investor verification processes, ensuring the proper provision of our management services, and identifying, locating, communicating with, and/or sending you information related to Melkor’s activities or events. It is important to emphasize that your personal data will never be disclosed or shared, nor will they be used for any purpose other than those stated in this privacy notice, unless there is a modification to it.

Personal data will be stored indefinitely from the date they are provided. However, you may object to their processing and handling at any time.

As the entity responsible for processing your personal data and in compliance with the LFPDPPP, Melkor adheres to the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility. In this regard, we commit to maintaining strict confidentiality of your personal data and implementing administrative, technical, and physical security measures to protect them against any damage, loss, alteration, unauthorized access, or processing.

Melkor guarantees the rights of access, rectification, cancellation, and opposition regarding the processing of your personal data at all times. You may submit a request at any time by emailing contact@melkor.com.mx. It is important to note that, in accordance with Article 29 of the LFPDPPP, your request must include:

The name of the data owner and their address or another means of receiving a response to the request.
Documents proving the identity of the owner or, where applicable, their legal representative.
A clear and precise description of the personal data concerning which the aforementioned rights are to be exercised.
Any other element or document that facilitates the location of the personal data.
If the request involves the rectification of personal data, the owner must indicate the modifications to be made and provide the documentation supporting such a request. The response to the request will be communicated to the owner within a maximum period of twenty business days, counted from the date the request for access, rectification, cancellation, or opposition was received. If the request is granted, the necessary measures will be implemented within fifteen business days from the date of notification. Requests for access to personal data will only be granted upon verification of the requester’s or legal representative’s identity, as applicable. The aforementioned timeframes may be extended once for an equal period if circumstances justify it.

Melkor reserves the right to modify and/or update this Privacy Notice and privacy policies at any time. Any changes will be duly notified.

Last updated: March 18, 2025