Privacy Notice

Centro Camionero Montajes (CCM): Centro Camionero Montajes de Chiapas S.A. de C.V., the company responsible for the processing of your personal data and owner of the Flotal platform.

Flotal: Digital fleet management platform developed and operated by CCM, accessible via website and mobile application.

Client: Natural or legal person that contracts CCM's services or purchases products through the Flotal platform.

User: Natural person who accesses and uses the Flotal platform through a registered account.

Data Subject: Natural person to whom the personal data processed by CCM belongs.

Consent: Free, specific and informed expression of will by the Data Subject by which the processing of their personal data is authorized.

Personal Data: Any information concerning an identified or identifiable natural person, including name, address, phone, email, tax ID, employment and financial information.

Sensitive Personal Data: Data that affects the most intimate sphere of the Data Subject, or whose improper use may give rise to discrimination or entails a serious risk.

Database: Ordered set of personal data relating to one or more natural persons, processed by CCM for the fulfillment of its activities.

ARCO Rights: Rights of Access, Rectification, Cancellation and Opposition recognized by the LFPDPPP to holders of personal data.

Ministry: Mexico's Ministry of Economy (Secretaría de Economía), the regulatory authority for the protection of personal data held by private parties.

The controller responsible for the processing of your personal data is Centro Camionero Montajes de Chiapas S.A. de C.V., with registered address at Carretera Panamericana #5831, Col. Plan de Ayala, Tuxtla Gutiérrez, Chiapas, C.P. 29040, México. For any queries related to the processing of your personal data, you may contact us at: privacidad@flotal.com.mx or call (961) 123-4567.

CCM collects personal data from different sources and by different means, always with the purpose of providing you with a quality service. The data we may collect includes:

When creating a Flotal account: full name, email address, phone number, company name and job title.

When contracting services: business name, tax ID (RFC), fiscal address, legal representative contact details and billing information.

For fleet management services we may require: number of vehicles, license plates, driver information and vehicle-related documentation.

We do not voluntarily collect sensitive personal data (health, ethnic origin, religious beliefs, political opinions). If required for a specific service, we will request your express written consent.

Additionally, when browsing our platform, we may automatically collect: IP address, device type, browser, operating system, pages visited and browsing time.

Platform usage data includes: report history, alert configurations, GPS location of registered vehicles and TPMS sensor readings.

When requesting a quote: name, company, email, phone, approximate number of units and type of service required.

Collection of identity and business documents is required only for the initiation of the business relationship and the issuance of contracts and tax receipts.

If you provide personal data of third parties (such as drivers or employees), you declare that you have their consent to share their information with CCM and that they have been informed of this Privacy Notice.

By providing your personal data through any of our channels and by using our platform, you consent to the processing of your data as established in this Privacy Notice.

Primary purposes (necessary for the contractual relationship):

• Creating and managing your user account on the Flotal platform.
• Providing contracted fleet vehicle administration and monitoring services.
• Managing the installation and configuration of TPMS sensors in your fleet vehicles.
• Issuing quotes, contracts, invoices and tax receipts for services purchased.
• Processing payments and managing billing for services and products.
• Providing technical support and customer service related to contracted services.
• Sending alerts, notifications and reports on the status of your vehicle fleet.
• Fulfilling obligations arising from the service contract entered into with you.
• Managing the delivery and logistics of purchased products and sensors.
• Verifying your identity and that of your representatives for the conclusion of contracts.
• Conducting post-sale follow-up and product warranty management.
• Maintaining accounting and tax records in accordance with applicable legislation.
• Preventing fraud, misuse of the platform and illegal activities.
• Complying with requirements from competent authorities.

Secondary purposes (you may object to these):

• Sending you information about new Flotal services, products and updates.
• Inviting you to participate in satisfaction surveys and market research.
• Sending newsletters on the transportation and fleet management industry.
• Presenting special offers and promotions for CCM products and services.
• Conducting aggregate statistical analysis on platform usage (in anonymized form).
• Contacting you to invite you to events, webinars or fleet management training sessions.

If you do not wish your data to be processed for secondary purposes, you may express your objection by sending an email to privacidad@flotal.com.mx with "Opt-out secondary purposes" in the subject line. This will not affect the provision of contracted services.

You may limit the use or disclosure of your personal data by sending a request to privacidad@flotal.com.mx. Once received, we will inform you within 20 business days of the outcome of your request. Please note that limiting the processing of data necessary for the provision of contracted services may result in the impossibility of continuing to provide such services.

You have the right to Access, Rectify and Cancel your personal data, as well as to Object to its processing (ARCO Rights). To exercise any of these rights, you must submit a written request to our privacy department.

Your request must contain the following information:

• Full name of the Data Subject and contact email address.
• Clear and precise description of the personal data for which you seek to exercise one of the ARCO rights.
• Documents proving your identity (copy of valid government-issued ID).
• If acting as a legal representative, documents proving such representation.

Send your request to privacidad@flotal.com.mx with the subject "ARCO Rights Request".

We will respond within a maximum of 20 business days from the date of receipt of your request. If the request is granted, we will enforce the exercise of the right within an additional maximum of 15 business days.

If you wish to revoke the consent you have given for the processing of your personal data, you may also do so through the same email address, as long as there is no legal or contractual obligation that prevents us from attending to your request.

If you believe your request was not properly addressed, you may file a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) at www.inai.org.mx.

CCM may transfer your personal data, without requiring your consent, in the following cases provided for in Article 37 of the LFPDPPP:

• When the transfer is provided for in a Law or Treaty to which Mexico is a party.
• When the transfer is necessary for the prevention or medical diagnosis.
• When the transfer is made to parent companies, subsidiaries or affiliates under common control of CCM.
• When the transfer is necessary by virtue of a contract entered into or to be entered into in the interest of the Data Subject.
• When the transfer is necessary for the maintenance or fulfillment of a legal relationship between CCM and the Data Subject.

Your personal data may be shared with third-party service providers that assist us in operating the platform (cloud servers, payment gateways, email services), who are obligated to maintain strict confidentiality and process data only for authorized purposes.

We do not transfer your personal data to third parties for commercial purposes without your express consent. Any international transfer of data is carried out with adequate safeguards as required by the LFPDPPP.

This Privacy Notice may be modified, changed, supplemented or updated at any time. CCM is committed to keeping this notice up to date and informing you of any relevant changes through the Flotal platform, by email or through a notice on our website. The date of the last update will be indicated at the beginning of the document. We recommend that you review this notice periodically.

Our platform uses cookies and similar technologies to improve the user experience, analyze traffic and personalize content. Essential cookies (necessary for session functionality and authentication) are always active. Analytical and preference cookies require your consent.

You can manage your cookie preferences through the consent banner on our site, or configure your browser to reject the storage of cookies. However, disabling certain cookies may affect the functionality of the platform.