Privacy Notice

Last updated: March 2026

In compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and the Privacy Notice Guidelines issued by the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI), Construcciones y Proyectos Gones SA de CV makes this Privacy Notice available to you.

I. Identity and Address of the Data Controller

Construcciones y Proyectos Gones SA de CV, with address in Tampico, Tamaulipas, Mexico, is responsible for the processing of your personal data.

• Email: ventas@gones.com.mx
• Phone: (833) 211-9399
• Website: https://gones.com.mx

II. Personal Data Collected

For the purposes described in this notice, Gones may collect the following categories of personal data:

• Identification data: full name, company or organization.
• Contact data: email address, phone number, address.
• Project or service data: description, location, technical requirements.

Gones does not collect sensitive personal data for the development of its commercial activities.

III. Purposes of Processing

Primary purposes (necessary for the legal relationship):

• Attending requests for quotes, information or contact submitted through the website, email or phone.
• Managing the contractual relationship with clients, suppliers and contractors.
• Preparing proposals, budgets and construction or service contracts.
• Complying with legal, tax and accounting obligations.

Secondary purposes (not essential, but of our interest):

• Sending information about our services, projects and news.
• Conducting satisfaction surveys.

If you do not wish your data to be processed for secondary purposes, you may express this by sending an email to ventas@gones.com.mx with the subject "Opposition to secondary purposes".

IV. Transfer of Personal Data

Gones does not sell, assign or transfer your personal data to third parties, except in the following cases permitted by the LFPDPPP:

• When required by a competent authority through a legal mandate.
• When necessary for the execution of a contract to which you are a party.
• To business partners, subcontractors or suppliers directly involved in providing the service, who will be required to maintain the same confidentiality.

In these cases your consent is not required, pursuant to Article 37 of the LFPDPPP.

V. ARCO Rights

You have the right to Access, Rectify, Cancel or Object (ARCO) to the processing of your personal data. To exercise these rights you must send a written request to:

• Email: ventas@gones.com.mx
• Subject: Exercise of ARCO Rights

The request must include: full name, clear description of the right you wish to exercise, address or email to receive the response, and a copy of official ID. We will respond within a maximum period of 20 business days from receipt of your request.

VI. Revocation of Consent

At any time you may revoke the consent you have given for the processing of your personal data, by sending your request to ventas@gones.com.mx with the subject "Revocation of consent". The revocation will not have retroactive effects on processing carried out previously.

VII. Use of Cookies and Tracking Technologies

Our website may use cookies and similar technologies to improve the user experience and analyze site traffic. These technologies do not directly collect personally identifiable data. You can configure your browser to block or delete cookies at any time.

VIII. Modifications to the Privacy Notice

Gones reserves the right to update this Privacy Notice at any time. Modifications will be published on this same page with the date of last update. We recommend you consult it periodically.

IX. Competent Authority

If you believe your rights have been violated regarding the protection of personal data, you may contact the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI), website: www.inai.org.mx.