Privacy Notice

GRUMA, S.A.B. DE C.V. and/or subsidiaries, (hereinafter “GRUMA”), with domicile for purposes of this Privacy Notice atCalzada del Valle número 407 Ote., Colonia Del Valle, San Pedro Garza García, Nuevo León, C.P. 66220, is responsible for the treatment of the personal data provided to it by the individuals (hereinafter, “Titleholder”/ “Titleholders”) to whom such data correspond.

“GRUMA” is engaged in the business of elaboration, production, trading, distribution, import and export of grains and oilseeds and other food products; “GRUMA” is also engaged in the management of all kinds of companies, providing and receiving all kinds of consultancy or advisory services in management, technical and supervisory matters from individuals and entities; therefore, “GRUMA” interacts and has interacted with several individuals, who are the “Titleholders” of the Personal Data (hereinafter, “Data”) that at any time were collected from them, or which are collected herein, therefore, “GRUMA” hereby informs you the type of “Data” that it collects, the profile of each individual and the treatment and/or purpose given to them, as follows:

With respect to “Data” of the PERSONNEL (employment applicants, employees, former employees, service providers, interns), “GRUMA” collects information in a personal manner and/or in a direct manner from the referred “Titleholders” with respect to the services and/or tasks to be performed, which are the full name, address, Federal Taxpayers’ Identification Number (RFC, for its acronym in Spanish), Individuals’ Single Registration Identification Number (CURP, for its acronym in Spanish), Social Security number (IMSS, for its acronym in Spanish), telephone, email, career experience, non-criminal records certificate, union membership, proof of studies, proof of domicile and copy of an official ID; in order to determine the consideration and/or remuneration for the services rendered and to make the determined payment, as well as to communicate with and to locate the individual, to identify the individual, to prepare a career profile for examination and training purposes, as well as to make an employment recommendation. “GRUMA” may request the full name and telephone number of direct relatives (ascendants and/or descendants and/or collateral relatives and/or spouse) for employment references purposes. In the event that “GRUMA” collects information regarding any bank account of the PERSONNEL, such data that is of financial type, will be collected solely for the purpose of facilitating the payment, whether at the bank or through wire transfer, of any service rendered and/or supply of any good provided. “GRUMA”, at any time, may request from any of the referred “Titleholders” any information and/or make evaluations of socioeconomic, psychometric and/or medical (health) type for institutional purposes, in order to aid in defining a profile of the “Titleholder” for purposes of determining and/or providing some kind of allowance in the employment benefits and/or support in particular cases. “GRUMA” may also request and/or collect “Data” from the PERSONNEL and/or from their direct relatives (ascendants and/or descendants and/or collateral relatives and/or spouse) information regarding suffered illnesses and/or accidents (health) of the referred “Titleholders”, as well as of the automobiles which they use; the foregoing, in order to evaluate, quote and, if applicable, to provide any type of Medical Insurance and/or Life Insurance and/or Automobile Insurance, as some sort of employment benefit attending to their title and/or position and/or duties. From among all the “Data” collected from the “Titleholders” and/or their relatives, there is information deemed as “Sensitive Personal Data”, the treatment of which is hereby authorized in favor of “GRUMA” upon acceptance of this Privacy Notice or upon not opposing thereto nor refusing treatment thereof.

With respect to the “Data” of CUSTOMERS, “GRUMA” collects personal information from two types of customers: 1.- Customer-Dealer, from whom it is requested full name, address, telephone and/or email, Federal Taxpayers’ Identification Number (RFC, for its acronym in Spanish), Individuals’ Single Registration Identification Number (CURP, for its acronym in Spanish), website, bank account data, copy of an official ID; in order to determine the consideration and/or remuneration for the supply of the products and/or the services provided by “GRUMA”, to make the corresponding collection and payment, as well as to communicate with and to locate the Customer-Dealer. 2.- Customer-Consumer, from whom it is requested full name, address, telephone and/or email, date of birth, for evaluation purposes of the products and/or brands and/or services of “GRUMA”; in order to obtain a result in market surveys, as well as to contact them to send them advertising material and/or notices, via email and/or any other media.

With respect to the “Data” of SUPPLIERS, “GRUMA” collects information which consists in full name, address, Federal Taxpayers’ Identification Number (RFC, for its acronym in Spanish), telephone, email, quotation and/or budget, proof of domicile and copy of an official ID; in order to identify, to locate the “Titleholder”, to determine the consideration and/or remuneration for the services rendered and/or the goods supplied to “GRUMA”, as well as to make the payment referred above. In the event that it is collected information regarding any bank account of the above referred “Titleholders”, such data that is of financial type, will be collected solely for the purpose of facilitating the payment, whether at the bank or through wire transfer, of any service and/or supply.

“GRUMA” will maintain and implement the adequate protection actions and mechanisms, which will consist in the necessary Administrative, Physical and Technical Measures, in view of its capacity and the type of “Data” being treated, the foregoing, in order to ensure the security, integrity and privacy of the “Data”.

Treatment of the “Data” submitted to “GRUMA”, whether in personal, direct and/or indirect manner by the “Titleholder”, can be made in accordance with these terms and conditions, therefore, from the moment hereof, it is deemed that the “Titleholders” grant their consent for such treatment, unless there is an express notice, in the same manner as the Data was collected, in which the “Titleholder” informs to “GRUMA” the refusal for the treatment of the “Data”, following the mechanisms that are mentioned below, by means of the ARCO Rights application.

“GRUMA” is responsible for the collection, safeguard and treatment of the “Data”. At any time you may exercise your ARCO rights (access, rectification, cancellation or opposition) with respect to your “Data” by means of written request addressed to “GRUMA”, Personal Data Department, notified in the following domicile: Calzada del Valle número 407 Ote., Colonia Del Valle, San Pedro Garza García, Nuevo León, C.P. 66220, in business days and hours, or via email to datos.personales@gruma.com.  Through such means, you may also inform of your refusal to the treatment and transfer of your “Data”, as well as to revoke the consent to their treatment and the limitations to the use or disclosure of your “Data”. You will have, at all times, access to the ARCO Rights Application at the above mentioned address, requesting it via email to the address referred above, as well as in our website: www.gruma.com.

The right of the “Titleholder” to access his/her “Data” may be made effective by “GRUMA” by making them available to the “Titleholder” at its domicile for a period no longer than 15 business days, or by means of photocopies, access to its website using a unique identification that clearly identifies the applicant, as well as through magnetic, optic, audio, visual or holographic means.

“GRUMA” may assign and/or transfer the “Data”, both to individuals and entities, either national or foreign. If you, as a “Titleholder”, sign this Notice or do not exercise an opposition right as provided in this Privacy Notice, it shall be deemed, for all the corresponding legal purposes, that You, as a “Titleholder”, hereby authorize, if necessary, at the discretion of “GRUMA”, the assignment and/or transfer of your “Data”. The recipients of such “Data” will be subject to the provisions of this Privacy Notice; therefore, it is possible that “GRUMA” requires to transfer your “Data” to third parties with whom it maintains business or professional relations, likewise, “GRUMA” may transfer “Data” corresponding to its employees, interns and/or service providers to third parties such as external firms, laboratories and/or clinics, only for the purpose of making examinations, evaluations, medical examinations, selection, opinions related to its personnel. Such third parties will receive the “Data” only and exclusively as part of the business and/or professional relationship with “GRUMA”, as part of the scope and/or as information that is necessary to perfect the internal, business and/or professional relations created among “GRUMA” and the “Titleholders”. “GRUMA” will only select third parties who formally agree to implement the necessary security measures to ensure the adequate level of privacy of the “Data”. “GRUMA” will be responsible for notifying to the third parties the content of this Notice, as well as any modification or cancellation of “Data” arising from the exercise of the rights made at any time by any of the “Titleholders”.

“GRUMA”, in view of the technologies implemented for the day to day performance of its duties, may collect information containing “Personal Data” through its website; however, it does not collect this type of information using cookies and/or web beacons, nor through social networking media.

Any amendment to the scope of this Privacy Notice may be consulted through the website: www.gruma.com