Política de privacidad

1. Identity and Address of the Responsible Party

RFC: GTG230410246 | Capital Regime: Simplified Stock Company | Tax Name: GRUPO TECNO GUARDIANES

Grupo Tecno Guardianes, doing business as GTG Tracking (hereinafter "GTG"), located in Solidaridad, Quintana Roo, Mexico, is responsible for the processing of your personal data in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.

GTG operates the following lines of service covered by this Notice:

• GTG Core — Standardized GPS tracking with national coverage, Basic and Premium plans.
• GTG Legacy — Historical installed base in the process of standardization.
• GTG One — Individual tracking service. Formal definition in process.
• GTG Vision — Service with imaging and video capabilities. Formal definition in process.
• GTG Satellite — Satellite connectivity for areas without cellular coverage. Formal definition in process.

Contact of the Responsible Party:

• Privacy email:privacidad@grupotecnoguardianes.com
• Business WhatsApp: +52 55 5505 6782
• Address: Playa del Carmen, Quintana Roo, Mexico.

2. Personal Data We Collect

2.1 Identification and Contact Information

• Full name (individual) or business name (legal entity).
• RFC / CURP (for issuing electronic invoices to the SAT).
• Landline and/or mobile phone.
• Email address.
• Tax and/or service address.

2.2 Vehicle and Tracked Asset Information

• License plates.
• Vehicle identification number (NIV / VIN).
• Make, model, year, and color of the vehicle.
• Photographs of the vehicle (exterior, dashboard, installation location).
• IMEI of the installed GPS device.
• ICCID / SIM number associated with the device.
• Photographs of the technical installation process (operational evidence).

2.3 GPS Location Data

• Real-time geographic coordinates of the vehicle or tracked asset.
• History of routes, stops, and platform events (ignition, power disconnection, panic button, among others).

The processing of location data is the main and essential purpose of the contracted service. Without this data, the service cannot be provided.

2.4 Tax and Financial Information

• Electronic invoicing data (tax name, RFC, tax regime, email for CFDI).
• Direct debit payment method (card token managed by payment gateway; GTG does not store raw card data).
• Payment receipts and transaction references.

2.5 Communication Data

• Messages sent via WhatsApp Business to GTG's official number.
• Emails exchanged with the support or operations area.
• Tickets registered in the GTG service management system.

GTG does not deliberately collect sensitive personal data (health, biometric, ethnic origin, political affiliation, etc.). If they are identified in any operational context, they will be handled with the enhanced security measures provided in the LFPDPPP.

3. Purposes of Processing

3.1 Primary Purposes (necessary for the service)

• Provide the contracted GPS tracking service (Core, Legacy, One, Vision, Satellite).
• Create and maintain the operational file of the service, linked to the sales order.
• Issue electronic invoices (CFDI) in accordance with SAT regulations.
• Manage recurring billing through a direct debit payment gateway.
• Register the GPS device on the tracking platform and manage its operation.
• Provide technical and administrative support in case of service failures or incidents.
• Comply with applicable legal, tax, and contractual obligations.

3.2 Secondary Purposes (not necessary for the service)

• Sending communications about new services, updates, and commercial promotions from GTG.
• Internal statistical analysis of service usage for process improvement.

If you do not wish for your data to be processed for these secondary purposes, you can express this by sending an email toprivacidad@grupotecnoguardianes.comindicating: 'Opposition to secondary purposes — [your name and service number]'. Your refusal does not affect the provision of the contracted service.

4. Data Transfer to Third Parties

GTG shares personal data only with third-party providers necessary for the proper operation of the service, under confidentiality agreements and compliance with legal obligations. Data is transmitted under principles of restricted access according to the functional role of each provider, limiting the information shared to what is strictly necessary for the provision of the service.

The categories of third parties with whom data is shared include:

• Technology and tracking platform providers — for activation, management, and visualization of devices.
• Connectivity providers — for the operation of communication devices.
• Hardware and equipment providers — for warranties and technical support.
• Enterprise management system providers — for comprehensive management of operations, billing, and services.
• Cloud storage providers — for secure storage of operational documentation.
• Payment processing providers — for secure processing of recurring transactions.
• External technicians and specialists — for the execution of installations and specialized services, with limited access to specific service data.
• External tax advisor — for tax classification and compliance with tax obligations.
• Competent authorities — when required by judicial, legal, or regulatory mandate.

GTG does not sell, transfer, or commercialize personal data to third parties for advertising purposes unrelated to its operation. All data transfers are made under confidentiality agreements that ensure the protection of personal information.

5. ARCO Rights and Exercise Mechanism

You have the right to Access, Rectify, Cancel, or Oppose (ARCO rights) the processing of your personal data, as well as to revoke the consent granted.

To exercise any of these rights, please send a request to:

• Email:privacidad@grupotecnoguardianes.com
• Subject: ARCO Request — [Full Name] — [Service Number / S0]

The request must include:

• Full name and contact details of the data subject.
• Clear description of the right you wish to exercise and the data involved.
• Copy of a valid official identification.

GTG will respond within a maximum of 20 business days from the receipt of the complete request. If applicable, changes will take effect within the following 15 business days.

6. Use of Cookies and Digital Tracking Technologies

The GTG website and monitoring platform may use cookies and similar technologies to enhance user experience, analyze traffic, and maintain active sessions. The use of these technologies does not imply the collection of personal data beyond what is described in this Notice.

You can configure your browser to reject cookies; however, this may affect the functionality of some online services.

7. Security Measures

GTG implements technical, administrative, and physical measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction, including:

• Layered access and defined roles across all systems.
• Secure storage of documentation with access control.
• Payment data transmission exclusively through certified gateways with high security standards.
• Confidentiality agreements with external technicians and service providers.
• Strong passwords and two-factor authentication in critical systems.

8. Changes to the Privacy Notice

GTG reserves the right to update this Notice when deemed necessary, in response to legislative, operational, or service changes. Any modification will be notified through:

• Publication on the official GTG Tracking website.
• Email to the registered contact.
• Communication via WhatsApp Business to the customer's registered number.

Continued use of the service after notification implies acceptance of the changes.

9. Applicable Law and Jurisdiction

This Privacy Notice is governed by the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and the Guidelines of the Privacy Notice issued by the INAI.

For any disputes arising from the processing of your personal data, you may contact the National Institute of Transparency, Access to Information and Protection of Personal Data (INAI):www.inai.org.mx

GTG Tracking · Grupo Tecno Guardianes
Playa del Carmen, Quintana Roo, Mexico
Version 1.0 — April 2026
privacidad@grupotecnoguardianes.com · www.grupotecnoguardianes.com/privacy