JS ROKA, S.A. de C.V.

Privacy Notice

Last updated: March 30, 2026

In compliance with Mexican legislation on personal data protection, particularly the Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), its Regulations, and other applicable provisions, JS ROKA, S.A. de C.V. (“JS ROKA”), in its capacity as data controller, hereby makes this Privacy Notice available to its clients, prospects, suppliers, business partners, website users, and any other individuals who interact with the company.

1. Identity and address of the data controller

The entity responsible for processing your personal data is:

JS ROKA, S.A. de C.V.

Address: Street Ricarte 525, Apartment 8, Neighborhood Valle del Tepeyac, Borough Gustavo A. Madero, Mexico City, Zip Code 07740.

For any matters related to the processing of personal data, JS ROKA provides the following contact:

Email: contacto@jsroka.com.mx

2. Personal data collected

JS ROKA may collect and process the following personal data, depending on the nature of its relationship with the data subject:

Identification and contact data:

Full name.

Email.

Mobile phone number.

Additionally, when the data subject communicates with JS ROKA through electronic, telephone, or digital means, the company may collect information related to requests, inquiries, quotations, commercial follow-up, or any other activity linked to the relationship between the parties.

In the event of interaction through JS ROKA’s website or other digital means, technical or browsing data may also be collected, including IP address, browser type, operating system, visited pages, access times, and other information generated through tracking technologies.

JS ROKA does not collect sensitive personal data in the ordinary course of its business activities, unless strictly necessary and subject to the applicable legal requirements for obtaining consent.

3. Purposes of personal data processing

The personal data collected by JS ROKA will be used for the following primary purposes, which are necessary for the development of the legal, commercial, or contact relationship with the data subject:

To identify and contact the data subject.

To respond to information requests, inquiries, or concerns.

To prepare, send, and follow up on quotations, commercial proposals, service orders, agreements, or related documents.

To manage the provision, commercialization, coordination, or integration of products and services.

To monitor projects, services, orders, deliveries, incidents, or administrative matters.

To maintain communication with clients, prospects, suppliers, strategic partners, or third parties involved in JS ROKA’s operations.

To comply with applicable contractual, commercial, legal, or regulatory obligations.

To respond to any lawful request from competent authorities.

4. Secondary purposes

Additionally, JS ROKA may use the data subject’s personal data for the following secondary purposes, which are not essential to the primary legal relationship but allow for improved commercial interaction and user experience:

To send commercial, corporate, or promotional information regarding JS ROKA’s products, services, solutions, or projects.

To carry out commercial prospecting activities.

To share news, updates, corporate presentations, or information related to JS ROKA’s divisions, services, or capabilities.

To generate statistics, internal analyses, or business metrics aimed at improving service processes and business development.

The data subject may object to the processing of personal data for these secondary purposes at any time by sending a request to the email indicated in this Privacy Notice.

5. Transfers of personal data

JS ROKA may transfer personal data to national or foreign third parties only when such transfer is necessary to fulfill the purposes described in this Privacy Notice, including, but not limited to, the following cases:

To suppliers, strategic partners, contractors, subcontractors, or third parties involved in the provision, coordination, integration, commercialization, or execution of products and services requested by the data subject or contracted with JS ROKA.

To external advisors or service providers related to technology, hosting, support, document management, communications, or digital infrastructure.

To financial institutions, payment gateways, or third parties involved in collection processes or fulfillment of financial obligations, when applicable.

To competent authorities when the transfer is required by law, official request, or duly grounded and reasoned legal mandate.

Such transfers shall be carried out in accordance with applicable legislation and, where required, with the data subject’s consent.

JS ROKA does not sell, assign, or commercially exploit personal data beyond what is necessary for its operations and legal compliance.

6. Means to exercise Access, Rectification, Cancellation, and Objection rights

The data subject, or its duly authorized legal representative, may at any time exercise its rights of Access, Rectification, Cancellation, and Objection ("ARCO Rights"), as well as revoke any consent granted for the processing of personal data.

To exercise these rights, the data subject must submit a request to:

contacto@jsroka.com.mx

The request must include at least the following:

Full name of the data subject.

Means to communicate the response.

Documents proving identity or legal representation, as applicable.

Clear and precise description of the personal data regarding which the rights are to be exercised.

Any information that facilitates the identification of the personal data.

JS ROKA will process the request in accordance with the timelines and terms established under applicable law.

7. Revocation of consent

The data subject may revoke at any time the consent granted for the processing of personal data, provided that such processing is not necessary for compliance with legal or contractual obligations of JS ROKA.

Revocation must be requested through the email address indicated in this Privacy Notice. Revocation will not have retroactive effects and may result in JS ROKA being unable to continue providing certain services, responding to requests, or maintaining certain operational or commercial relationships.

8. Limitation on use or disclosure of personal data

The data subject may at any time request the limitation of the use or disclosure of personal data, particularly with respect to secondary purposes or promotional communications.

Likewise, the data subject may request to be included in exclusion lists maintained by JS ROKA in order to limit the use of personal data for promotional or commercial prospecting purposes.

To do so, the data subject must submit a request to the email address indicated in this Privacy Notice. JS ROKA will evaluate the request and, where appropriate, implement reasonable and legally feasible measures.

9. Use of tracking technologies

JS ROKA’s website, currently identified under the domain www.jsroka.com.mx, may use cookies, web beacons, or similar technologies that allow the automatic collection of information about user navigation.

These technologies may be used to:

Improve the browsing experience.

Analyze the use and functionality of the website.

Remember user preferences.

Generate traffic and behavioral statistics.

Optimize content, functionality, and security measures.

The use of these technologies does not allow the individual identification of users, except where users voluntarily provide personal data through enabled channels.

Users may configure their browser to limit or disable these technologies; however, certain website features may not function properly as a result.

10. Security measures

JS ROKA implements reasonable administrative, technical, and physical measures to protect personal data against damage, loss, alteration, destruction, unauthorized access, or improper processing.

However, the data subject acknowledges that no security system is completely infallible. Therefore, JS ROKA cannot guarantee absolute security in all cases, although it undertakes to implement reasonable measures appropriate to the nature of the data collected.

11. Retention of personal data

Personal data will be retained only for the period necessary to fulfill the purposes described in this Privacy Notice, as well as to comply with legal, contractual, administrative, tax, commercial, or defense-related obligations arising from the relationship between the parties.

Once the applicable retention period has elapsed, personal data will be deleted or, where appropriate, blocked and safeguarded in accordance with applicable regulations.

12. Changes to the Privacy Notice

JS ROKA may modify, update, or adjust this Privacy Notice at any time due to legal, regulatory, operational, commercial, or internal policy changes.

Any modifications will be made available through JS ROKA’s website, digital means, or any other reasonable mechanism to inform the data subject.

13. Competent authority

If the data subject believes that their right to personal data protection has been violated by any act or omission attributable to JS ROKA, they may file a complaint before the National Institute for Transparency, Access to Information, and Personal Data Protection (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales) or the competent authority under applicable law.

14. Language

This Privacy Notice may be made available in other languages. In the event of any discrepancy between versions, the Spanish version shall prevail.