Privacy Notice

1.Identity and address of the controller

The controller of your personal data is Iván Erick Tlatecatl Morales, with address at C. 2 Sur 308, La Santísima Trinidad, 72810 San Andrés Cholula, Pue., and contact email info@geenessys.com (hereinafter, the "Controller").

The Controller is responsible for collecting, using, and safeguarding the personal data you provide through this website, in accordance with the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality, and accountability established by applicable law.

2.Personal data we collect

Through this website’s contact form, we collect, directly and by electronic means, only the following personal data:

• Full name.
• Company or organization.
• Email address.
• Any information you choose to include in the message field, as well as the selected interest type (NDA, licensing, acquisition, integration, or technical inquiry).

We do not collect sensitive personal data, nor financial or asset-related data, through this website.

3.Purposes of processing

Primary purposes (necessary)

Your data is used for the following purposes that give rise to and are necessary for our relationship with you:

• Process, follow up, and respond to your request for information, NDA, licensing, acquisition, or integration.
• Contact you by electronic or phone means to coordinate technical conversations, due diligence, or intellectual property transfer.
• Identify and qualify the applicant as a potential counterpart or partner.
• Comply with obligations arising from the relationship that may be established.

Secondary purposes (optional)

We currently do not use your personal data for secondary purposes, such as sending institutional information, advertising, or newsletters. If this changes in the future, you will be informed and you may object as described in Section 7 of this notice.

4.Consent

By providing your personal data through this website’s form and submitting your request, you acknowledge that you have read this Privacy Notice and you consent to the processing of your data for the purposes described herein. Consent may be revoked at any time as described in Section 6.

5.Transfers of personal data

The Controller will not transfer your personal data to third parties without your consent, except in the cases permitted by law; for example, when the transfer is required by a legal provision, is necessary for the prosecution or administration of justice, or is carried out among companies within the same corporate group under common policies.

If the Controller needs to transfer data to third parties other than the foregoing (currently, no data is shared with third parties), you will be informed and, where required by law, your consent will be obtained.

6.How to exercise ARCO rights and revoke consent

You have the right to know what personal data we hold, what we use it for, and the conditions of its use (Access); to request correction when it is inaccurate or incomplete (Rectification); to request deletion from our records when you consider it is not being used in accordance with applicable rules (Cancellation); and to object to the use of your data for specific purposes (Opposition). These are known as ARCO rights.

To exercise any of these rights, or to revoke your consent, send a request to info@geenessys.com stating:

• Name of the data subject and a means to communicate the response.
• Document proving your identity (or legal representation, if applicable).
• Clear and precise description of the right you wish to exercise or the specific request.
• Any element that facilitates locating the personal data.

The Controller will respond to your request within the timeframes established by applicable law.

7.How to limit the use or disclosure of your data

You may request to limit the use or disclosure of your personal data by sending your request to info@geenessys.com. In addition, any communication you receive from us will include a mechanism for you to request to stop receiving it.

8.Use of cookies and tracking technologies

This website does not use cookies or tracking technologies that automatically collect personal data.

9.Changes to this Privacy Notice

This Privacy Notice may be modified due to legal changes, our internal practices, or new requirements. Any change will be published on this page, indicating the date of the last update. We recommend reviewing it periodically.

10.Data protection authority

If you believe your right to the protection of personal data has been violated, you may contact the competent authority for the protection of personal data held by private parties in Mexico.