In compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares – LFPDPPP), its Regulations, and applicable Privacy Notice Guidelines in Mexico, Iron Vektor (hereinafter, the “Responsible Party”) provides this Comprehensive Privacy Notice to the data subject (hereinafter, the “User” or “Client”).

1. Identity and Address of the Responsible Party

Iron Vektor, an entity established and formally domiciled in Mexico, is responsible for the use, processing, safekeeping, and protection of the personal data provided through the website ironvektor.com, ensuring at all times the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality, and responsibility provided under the law.

2. Personal Data Collected

To carry out the purposes described in this Privacy Notice, the Responsible Party may collect the following categories of personal data, either directly via online forms, email, or automated interactions:

• Identification and Contact Data: Full name, corporate or personal email address, contact telephone numbers, job title, and name of the company or organization represented.
• Labor and Professional Data: Industrial activity sector (manufacturing, logistics, agriculture, mining, energy), automation and robotic infrastructure technology requirements, corporate project history, and billing data in case of commercial transactions.
• Navigation and Technological Usage Data: IP address, browser type, operating system, date, time, and duration of the visit, as well as digital interaction records via cookies, web beacons, and similar technologies.

Note: The Responsible Party informs you that it does not collect sensitive personal data for the standard operation of the services offered through the website.

3. Data Processing via Third-Party Technological Platforms (Infrastructure and Automation)

The processing, storage, automated management, and handling of personal data collected through the forms and interactive workflows of the Platform are carried out using technological infrastructure hosted and supported by the platform avedi.io (operated under a secure white-label technological architecture). Iron Vektor oversees that such providers implement high standards of protection, encryption, and confidentiality to safeguard the integrity of the User’s information against unauthorized access.

4. Purposes of Personal Data Processing

The personal data we collect is used for the following primary and secondary purposes necessary to maintain the legal or commercial relationship with you:

• Primary Purposes:

• Provide, manage, and administer technological solutions, robotic workforce deployments (WaaS), and required consulting services.
• Comply with contractual, fiscal, and legal obligations entered into with our clients and commercial partners.
• Attend to, register, and follow up on information requests, commercial proposals, technical support, or inquiries submitted through our digital channels managed via our operational systems.
• Maintain fluid and effective communication regarding project status and operational service delivery.

• Secondary Purposes:

• Evaluate the quality of professional services rendered through satisfaction surveys.
• Send informative communications, technical newsletters, corporate event invitations, webinars, and updates regarding our automation offerings for the Americas market.
• Perform statistical, market, and digital performance analyses for the continuous optimization of our platform.

If the User does not wish their personal data to be processed for the aforementioned secondary purposes, they may express their refusal by sending an email to our official contact channels. Refusal to use data for secondary purposes shall not be grounds for denying the primary services requested.

5. Transfer of Personal Data

Iron Vektor undertakes to safeguard information security and not to sell, assign, lease, or transfer your personal data to unauthorized third parties without prior consent, except under the exceptions provided in Article 37 of the LFPDPPP, or when strictly necessary to comply with mandates from competent judicial or administrative authorities, as well as for the operation of technological infrastructure providers (such as the operational management platform avedi.io) and payment gateways under equivalent confidentiality and data protection agreements.

6. Security Measures and Data Protection

The Responsible Party implements rigorous administrative, technical, and physical security measures —such as SSL encryption protocols, restricted database access controls, and internal security audits in coordination with our technological infrastructure— aimed at protecting your personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

7. Exercise of ARCO Rights (Access, Rectification, Cancellation, and Opposition)

As the holder of personal data, you have the irrevocable right to know what data we hold about you, what we use it for, and the conditions of use (Access); to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); to have it removed from our records or databases when you consider it is no longer required pursuant to the principles and purposes of this notice (Cancellation); as well as to object to the use of your data for specific purposes (Opposition).

To exercise any of the ARCO rights, or to revoke consent granted for data processing, the User must submit a formal request via the official contact email available on ironvektor.com, which must contain:

• Full name of the holder and email address to receive responses.
• Official documents proving identity or, where applicable, legal representation.
• Clear and precise description of the personal data regarding which you seek to exercise any of the ARCO rights.
• Any other element or document facilitating the location of the personal data.

The Responsible Party shall communicate the determination adopted within the deadlines established by applicable legislation (generally a maximum of 20 business days from receipt of the request).

8. Modifications to the Privacy Notice

This Privacy Notice may be amended, changed, or updated due to new legal requirements, our own operational needs for the services we offer, or privacy practices. Any modification will be published timely on the ironvektor.com Platform.