I. Identity and address of the Responsible Party.

ZSEA INVESTIGACIÓN, S.C., also commercially known as "ZEA INVESTIGACIÓN S.C." (hereinafter, the "Company"), located at Miguel Laurent Street 923, Santa Cruz Atoyac neighborhood, Benito Juárez borough, C.P. 03310, Mexico City, is responsible for the processing of personal data gathered by virtue of the legal relationship it maintains with you, whether as a participant in market studies, surveys, or visitor to our facilities.

The personal data may be collected directly or through our collaborators, managers, or third parties who, in compliance with their functions, send such information to the Company. The collection may be carried out through printed forms, electronic means, optical, sound, visual, or any other available technology.

II. Personal Data to be Processed

The categories of personal data that the Company may request and use for the purposes it provides are the following: identification data; contact and address data; data related to educational background; data related to occupation; and data about interests and hobbies.

· The Company does not collect sensitive personal data.

III. Means of Obtaining Personal Data

The personal data, in accordance with the previously mentioned categories, may be obtained:

Directly: when you provide them personally at our offices, through authorized officials or employees, by email, via telephone, or through forms on our website.

Indirectly: through public access sources or transfers from third parties with whom the Company maintains an ongoing legal relationship.

IV. Primary Purposes of Processing

The personal data collected will be processed to fulfill the purposes linked to the legal relationship with the Company. In particular, they will be used to:

· Verify your identity when invited to market studies.

· Conduct qualitative or quantitative surveys.

· Generate statistical analysis and reports.

· Evaluate consumption habits and market preferences.

V. Secondary Purposes of Processing

Your data may be used, with your consent, to:

· Invite you to participate in future studies.

· Provide you with information about services, products, or events of interest related to our activities.

· Understand who is interested in our services.

The personal data we obtain from these tracking technologies are the following:

1. Preferred language of the user.

2. Region where the user is located.

3. User's browser type.

4. Type of operating system of the user.

5. Date and time of the start and end of a user session.

6. Web pages visited by a user.

7. Searches made by a user.

8. Advertisements reviewed by a user.

We also inform you that the Company has a website (https://zeasocial.com), where tracking technologies such as cookies, web beacons, or other similar technologies are used, which allow monitoring your behavior as an online user for the purpose of providing you with a better browsing experience and improving the quality of our services.

Transfers for primary purposes do not require your consent. For other transfers, your authorization will be requested beforehand.

VI. Means for Exercising ARCO Rights

You, or your duly accredited legal representative, may exercise at any time your rights of Access, Rectification, Cancellation, or Opposition (ARCO) regarding your personal data by requesting it to the following email address: info@zeainvestigacion.com Phone: +52 (55) 5131 3971, Responsible: Karina Calderón Address: Miguel Laurent 923, Santa Cruz Atoyac, Benito Juárez, C.P. 03310, Mexico City, or request it at our offices), accompanied by the documentation specified therein: Access, Rectification, or Cancellation of the personal data of which you are the owner, as well as oppose its processing.

The exercise of ARCO rights allows you to request the Company the following:

Access - The holder of the personal data may request that we inform them of the personal data that is processed by the Company. Your data may be provided by the Company through simple printed copies or by electronic means.

Rectification - The holder may request the Company to rectify one or more of their personal data, for which the documentation that proves the origin of the rectification must be provided.

Opposition - The holder of the personal data may oppose the processing of their data for a specific purpose, for which they must consider that the processing of PRIMARY purposes is essential for fulfilling the obligations of the Company arising from the insurance contract and the laws that regulate it.

Cancellation - The holder of the personal data may request that their personal data processed by the Company be canceled, provided that such data is no longer used for the relationship established with the holder and is not required to be processed by the Company for a minimum period of seventy-two months by law. For this purpose, the following procedure will be followed: The cancellation of personal data will give rise to a blocking period after which the data will be deleted, the responsible party may keep them solely for the purposes of liabilities arising from the processing. The blocking period will be equivalent to the statute of limitations for actions arising from the legal relationship that grounds the processing according to applicable law, and once the data is canceled, the Owner or their representative will be notified.

The exercise of your ARCO rights is free of charge; however, the Company may request the Holder to pay only for the justified shipping expenses or reproduction costs of the information requested.

Once your request has been submitted in the required format and with the complete required documentation, the Company will communicate to the holder, within 20 (twenty) days at most, the determination made by the Company, so that, if it is granted, it is made effective within the following 15 (fifteen) days from the date the response is communicated.

If your ARCO rights or any of these are not valid according to the causes cited in Article 33 of the Federal Law on the Protection of Personal Data Held by Private Parties, the Responsible Party may partially or totally deny the request, in which case it will process the request diligently. For this, the Responsible Party will inform the Owner or their representative of the reason for their decision by the same means and within the corresponding deadlines, attaching, if applicable, the pertinent evidence. 

VII. Means to Limit the Use and Disclosure of Personal Data

You can limit the use of your data for secondary purposes by requesting it to the email address: info@zeasocial.com or you may request the inclusion of your data in the exclusion lists maintained by the Company for this purpose to limit the use and processing of your personal data for Secondary Purposes. 

VIII. Revocation of Consent

You may revoke, at any time, the consent granted for the processing of your personal data by sending a request to: info@zeasocial.com

You have the right to revoke the consent that, if any, you have granted us for the processing of your personal data. However, it is important to keep in mind that, under certain circumstances, we may not be able to address your request immediately since we may be obligated by legal provisions to continue processing your personal data. You should also consider that, for certain specific purposes, the revocation of your consent could result in the inability to continue providing you with the requested service or the termination of your relationship with us.

IX. Means to Limit the Use and Disclosure of Personal Data

You can limit the use of your data for secondary purposes by requesting it to the email address: info@zeasocial.com or requesting your inclusion in exclusion lists such as the REPEP (Public Registry to Avoid Advertising) of PROFECO.

X. Means to Communicate the Privacy Notice and its Modifications

This Privacy Notice, as well as its modifications, will be available for your consultation on the website: https://zeasocial.com. Changes will be communicated through publication on that site.

XI. Consent to the Privacy Notice

Having read and explained this Privacy Notice to the Holder, they give their express consent for the processing of their personal data according to the described purposes. In the same way, I give my express consent for my personal data to be transferred under the terms of this document.

Update date: July 2025