PRIVACY NOTICE

I (the owner of personal data, hereinafter the "Holder") hereby freely and explicitly authorize Zuma Energía, S.A. of C.V. and/or its affiliated companies, domiciled at Pedregal 24, 3rd floor, Colonia Molino del Rey, Delegation Miguel Hidalgo, C.P. 11040, Mexico City, (responsible for the safekeeping of personal data, henceforth either the "Responsible" or "Zuma") to decide on the  obtaining , access, use, dissemination, transfer, discard and/or storage (hereinafter all and each of these activities, jointly named as the "Treatment") of my personal data (including my sensitive personal information) hereinafter the "Personal Data". These terms are defined in the Federal Law on Protection of Personal Data in Possession of Individuals and its Regulations (the "Law"), the above by any means known or to be known, for as long as it is necessary in accordance with the applicable legal provisions. This authorization for the Treatment of Personal Data will be revocable by its Holder in accordance with the pertinent provisions of the Law.

The Treatment of Personal Data will be carried out so that the Responsible will be able to create the records regarding its relationship with the Holder (candidates for job positions at Zuma, employees, customers, suppliers, any type of collaborators, business prospects, service providers and any individual who stablishes a relationship with Zuma).

The Treatment of Personal Data will have as its purpose to carry out all the necessary activities for Zuma to grant, included, but not limited to, professional, administrative, technical, human resources, financial, operational, managerial, marketing, consulting, design, management, construction and acquisition services, in general all the acts that its statutory activities contemplate the limits applicable by law.

The Treatment of Personal Data will be carried out for as long as it is necessary for the Responsible and / or the Holder to fully comply with each and every one of their obligations according to the contract (s), agreement (s) or any type of relationship established between the Holder and Zuma for the time they agree and for the additional time planned in advance in accordance with the applicable legal provisions.

The Treatment of Personal Data will be carried out solely and exclusively by the following parties: Zuma, its partners or shareholders, its administrators, managers, employees and attorneys-in-fact, its consultants, counterparties in bilateral and multilateral contracts and representatives, as well as its related companies, being understood as such each and every one of the companies that belong to the same corporate group of the Responsible, including the partners or shareholders, administrators, managers, employees, attorneys, consultants and the representatives of these companies.

By accepting the terms in this Privacy Notice, you expressly authorize Zuma to transfer my Personal Data to the aforementioned third parties, whether national or foreign. Any transfer of data will be subject to the purposes indicated in this Privacy Notice. However, it is worth mentioning that the Zuma has the necessary means and safety measures to protect and limit the use or disclosure of this Personal Data.

It is established that the Holder of the Personal Data will have the rights of Access, Rectification, Cancellation or Opposition (ARCO) in accordance with the provisions of the Law.

To make these rights effective, the Holder of the Personal Data must follow the procedure described below: The request for access, rectification, cancellation or opposition must be made in writing and addressed to Zuma Energía, S.A. of C.V. and / or its affiliated companies, domiciled at Pedregal number 24, 3rd floor, Colonia Molino del Rey, Delegación Miguel Hidalgo, C.P. 11040, Mexico City, with telephone number: +52 (55) 5280-6207 Ext. 818,  email: avisoprivacidad@zumaenergia.com, recipient: Executive Assistant. The request must contain and attend the following: (i) the name of the Holder and contact information to inform the response to the request; (ii) the documents that prove the identity or, where appropriate, the legal representation of the Holder; (iii) the clear and precise description of the Personal Data intended to exercise any of the aforementioned rights on; (iv) any other element, reference or document that eases the location of the Personal Data; (v) when applicable, the modifications to be made and the provision of documentation that supports the request.

The Responsible will inform the Holder the taken decision within a maximum period of 20 (twenty) business days, starting from the date on which the Responsible receives the corresponding duly integrated related request, so that, if appropriate, this decision becomes effective within the following 15 (fifteen) business days after the date on which the answer has been communicated to the Holder. In accordance with the provisions of the Law, the aforementioned periods may be extended only once and for an equal period of time, as long as the circumstances of the case so warrant.

This Privacy Notice may be subject to modifications, changes or updates resulting from new legal requirements; our own needs regarding the services we offer; our own privacy practices; changes in our business model, or due to other reasons, so we promise to keep you promptly informed through our website at the following electronic address: http://www.zumaenergia.com/aviso-de-privacidad/where, for a period of 30 (thirty) calendar days before the effective date of the modification, the two versions of the Privacy Notice will coexist so that the Holder, in absence of agreement with the modifications, will be able make use of their right of opposition in the terms specified above.