Privacy Notice

Last updated: February 18th, 2026

In compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations and other aplicable provisions (hereinafter the “Applicable Law”), REPRESENTACIONES ARTISTICAS APODACA, S.A. DE C.V. (hereinafter “Apodaca Group”), with tax address at Jerónimo Treviño Oriente #1549, Colonia Centro en Monterrey, Nuevo León C.P. 64000, makes available this Privacy Notice, by means of which you are informed about the processing that will be given to your personal data.

Apodaca Group is responsible for the legitimate, controlled and informed processing of the personal data it collects from its clientes attending events and festivals; staff; talents; users of its website and digital platforms, including social networks; collaborators; business partners; sponsors; suppliers; general public and any other individual or legal entity that directly and/or indirectly provides their personal data by any means, as well as the use given to such data and its due protection.

Apodaca Group may collect your data or that of your represented party through physical, electronic, digital, telephone, videographic means, web platforms, social networks, mobile applications, ticketing systems, video surveillance systems, registration at events and festivals or directly.

For any matter related to this Privacy Notice, you may contact us through the following:

CONTACT INFORMATION

Address: Jerónimo Treviño Oriente #1549, Col. Centro en Monterrey, Nuevo León. Telephone: 81 82 622700

Website: www.apodaca.com.mx

Email: [email protected]

Business hours: Monday through Thursday from 10:00 to 15:00.

PERSONAL DATA WE COLLECT

To fulfill the purposes described in this Privacy Notice, Apodaca Group collects the following personal data, depending on the nature of the relationship maintained with you or with the company you represent:

  1. Identification and Contact Data:
    Full name, copy of valid oficial identification (voter ID card, Passport, professional license), birth certificate, Unique Populaiton Registry Code (CURP), Social Security Number (NSS), marital status, place and date of birth, home address and proof of address, landline and cell phone number, email address, personal and professional references, handwritten signature, photograph, image captured by video surveillance systems.
  2. Employment and Academic Data:
    Profession, activity or trade, certificates, degrees, professional licenses or credentials, professional experience, services provided or goods marketed, name of the company or institution where you work.
  3. Tax and Financial Data:
    Tax address, Federal Taxpayer Registry (RFC), tax compliance certificate, compliance opinion and banking informaiton (when necessary for payments, contracts, or reimbursements).
  4. Data collected through digital means:
    IP address, browsing data, cookies and similar technologies, information provided in electronic forms, surveys, event and festival registrations, digital platforms and/or social networks.
  5. Biometric or audiovisual data:
    Image captured by security cameras, audio and video recordings.

PURPOSES OF PROCESSING

The purposes are those that motivate the processing of your personal data. For your understanding and by provision of law, they are classified as primary and secondary purposes. Primary purposes are those that are necessary for the performance of a legal obligation or the main reason for which a relationship exists between the Data Subject (you) and the Data Controller (us); secondary purposes are those that are not necessary for the performance of a legal relationship, therefore may indicate that you do not authorize the processing of your personal data for some or all of the purposes mentioned below.

Your personal data and that of your represented party (if aplicable) have been provided voluntarily.

Primary Purposes

(i) Identification, verification and contact;

(ii) Evaluation and selection to participate in hiring processes;

(iii) Potential contracting of services, acquisition of products, purchase or lease of equipment, materials and goods necessary for the operation of Apodaca Group;

(iv) Formalization of the comercial relationship through the execution of contracts, service orders, purchase orders and confidentiality agreements;

(v) Issuance and receipt of invoices;

(vi) Tax compliance.

Secondary Purposes

(i) Advertising, marketing and promotions;

(ii) Sending newsletters and invitations;

(iii) Satisfaction surveys;

(iv) Commercial profiling;

(v) Statistics and consumption analysis;

(vi) Use of image, voice or video for promotional, advertising or dissemination purposes.

If you do not wish for your data to be used for these secondary purposes, you may request it by email at: [email protected]

USE OF COOKIES

Apodaca Group through its website uses cookies and other similar technologies to enhance your browsing experience, analyze site traffic and personalize content. Cookies are small text files that are stored on your device. You may configure your browser to reject or disable cookies; however, some website functionalities may be affected.

USE OF IMAGE, VOICE AND AUDIOVISUAL CONTENT

During events and festivals or activities organized by Apodaca Group, recordings, photographs and live broadcasts may be made directly and/or indirectly for different media outlets, digital platforms, social networks and/or any other means of dissemination.

By entering the facilities where the event takes place and/or by participating in the activities carried out therein, you authorize the use of your image and voice for informational, promotional, advertising and/or comercial purposes without any compensation.

COLLECTION OF PERSONAL DATA

Apodaca Group may collect your personal data in the following ways:

  • When you provide it directly by any physical, electronic, digital and/or telephone means.
  • Through our digital platforms, social networks, satisfaction surveys, mobile applications and websites.
  • By email.
  • Through video surveillance systems installed in our facilities for security reasons.
  • Through images and videos collected during events and/or festivals that you attend or participate in.
  • From public and generally accessible sources permitted by law.
  • From authorized third parties or legitimate sources when permitted by law.

DATA TRANSFER

The data collected by Apodaca Group may be transferred to its affiliated or subsidiary companies, national or foreign business partners and competent authorities, as well as in the cases established in Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties, for which your consent is not required.

WHAT ARE ARCO RIGHTS?

ARCO Rights are the legal mechanism that allows you to exercise your Rights of Access, Rectification, Cancellation and Opposition.

You have the right to access your personal data that we possess and know the details of its processing; rectify it if its inaccurate, incomplete or not updated; you may also cancel it when you consider that it is not required for any of the stated purposes, is being used for purposes not consented to, or the relationship has ended; and oppose its processing for specific purposes. For this purpose, you may consult the “PROCEDURE TO EXERCISE YOUR ARCO RIGHTS” section, which is detailed below.

PROCEDURE TO EXERCISE YOUR ARCO RIGHTS

To exercise any of the ARCO Rights, you must submit a request as described below to the email address provided:

Your request must contain at least the following information

(i) Date of the request;

(ii) Full name of the data subject, date of birth, RFC, address for hearing and receiving notifications (including postal code) and/or email address to receive a response; (iii) Documents proving your identity or, as aplicable, the legal representation of the data subject (copy of valid oficial identification);

(iv) Clear and precise description of the personal data with respect to which you seek to exercise any of the ARCO rights;

(v) Any other element or document that facilitates the location of the personal data; (vi) In the case of Rectification requests, you must indicate the modifications to be made and provide the documentation supporting your request.

Response timeframes

Apodaca Group will inform you within 5 (five) business days from receipt of your request if additional information is required to process it. You will have 10 (ten) business days to provide the requested information. If you fail to provide the required information within said period, the corresponding request will be deemed not filed.

Once all necessary information is available, Apodaca Group will communicate the decisión adopted within a maximum period of 20 (twenty) business days from the date the complete request was received. If the request is deemed appropriate, it will become effective within 15 (fifteen) business days following the date the response was communicated.

The aforementioned periods may be extended once for an equal period when justified by the circumstances.

Means of response

Apodaca Group may respond to your request through:

a. Email: to the address you provided in your request b. In person: by appointment at our offices located in Jerónimo Treviño Oriente 1549, Col. Centro in Monterrey, Nuevo León, C.P. 64000.

REVOCATION OF CONSENT

Any time you may revoke the consent you have granted for the processing of your personal data. It is important to note that we will not be able to compply with your request or immediately cease use in all cases, as it is possible that due to a legal or contractual obligation we may need to continue processing your personal data.

To revoke your consent, you must submit a written request via email to [email protected] including the information indicated in items (i) through (v) of the ARCO RIGHTS section, specifying in the subject line “REVOCATION OF CONSENT” and clearly indicating the purposes for which you revoke your consent.

Apodaca Group will respond to your request within a maximum period of 20 (twenty) business days and will inform you about its appropriateness in accordance with the provisions of the Applicable Law.

RETENTION PERIOD

Your personal data will be retained for the time necessary to fulfill the purposes established in this Privacy Notice and, subsequently, for the legally required periods in accordance with applicable legislation on tax, labor, comercial and other applicable matters.

AMENDMENTS TO THE PRIVACY NOTICE

Apodaca Group reserves the right to make modifications or updates to this Privacy Notice at any time, arising from new legal requirements, changes in the business model, internal policies, new services or products, or any other cause.

Amendments to this Privacy Notice will be made known through the website www.apodaca.com.mx/ indicating the date of the last update, therefore we recommend that you periodically consult this Privacy Notice to be informed of any changes.

CONSENT

*By providing your personal data to Apodaca Group voluntarily, whether physically, electronically or any other means, you expressly accept and acknowledge having read, understood and accepted the terms set forth in this Privacy Notice, granting your consent for Apodaca Group to process your personal data in accordance with the provisions herein.*