Privacy notice for candidates of CJ Logistics México, S.A. de C.V. (“CJLM”)

In compliance with the Federal Law for the Protection of Personal Data in Possession of Individuals (hereinafter the “Law”), this Privacy Notice describes the way in which CJ Logistics México, S.A. de C.V. (hereinafter “CJLM”) with address located at Av. Manufactura, Number 502, Parque Industrial Querétaro, Santa Rosa Jáuregui, state of Querétaro, municipality of Querétaro, Zip Code 76220 is the responsible for the use and protection of your personal data, and in this regard informs that it collects and uses the personal data of its candidates (“candidate’s personal information”) in accordance with the Law and this Privacy Notice.

Personal data

To carry out the purposes described in this Privacy Notice, CJLM collects and processes the candidate's personal information detailed in the chart below.

CJLM will not process candidate’s sensitive personal data.

Purposes

Main purposes

CJLM collects and uses the candidate’s personal information for the following main purposes:

• To identify and locate candidates.
• To carry out the registration of candidates in CJLM's internal systems.
• To enable internal and external communication via email, telephone, chat, instant messaging, video, and audio conferences.
• To maintain candidates’ records in accordance with accounting and legal requirements and internal policies of CJLM. Should you require to consult the above policies, you can consult them at CJLM’s Department of Human Resources.
• To carry out the recruitment and selection process, including internal human resources processes.
• To position candidates for available positions, according to their background, experience and skills.
• To maintain the security and safety of CJLM’s facilities and of the people within such facilities (identification of the candidate, protection of CJLM’s Candidates, suppliers, visitors, preserving the security of CJLM’s goods and facilities).
• To comply with applicable and valid laws and to comply with requests derived from the authorities.

These purposes are necessary to conduct the personnel recruitment and selection process between CJLM and the candidate. Therefore, and in terms of the Law, CJLM does not require the consent of the candidates to process personal data for such main purposes.

Secondary purposes

CJLM does not use the candidate's personal information for any secondary, marketing or advertising purposes.

Transfers of personal data

CJLM informs that it shares the candidate’s personal information with:

• Holding companies, subsidiaries, affiliates, parent companies or companies of the same group of CJLM.
• Governmental authorities, in response to a subpoena, as part of a judicial order or process, governmental investigation or request, legal or regulatory process, or as required by law.

These transfers are carried out for the following purposes:

• To comply with internal CJLM processes and policies.
• To comply with subpoenas, orders or requirements indicated by law or competent governmental authorities.

Retention period

CJLM undertakes to process the candidate’s personal information only for the time necessary to achieve the purposes set out in this Privacy Notice, or until such time as the candidate exercises the right of Cancellation and it is applicable in accordance with the provisions of the Law.

Once the processing of the candidate’s personal information has been completed, when the exercise of the right of Cancellation is applicable or the retention period established by current and applicable laws has expired, CJLM will proceed to block the personal data until the legal or contractual limitation period for any liabilities has expired, and will subsequently delete the personal data.

Options and means to limit the use or disclosure of personal data

Candidates may limit the use or disclosure of their personal data in CJLM's possession by sending an email to aviso.privacidad@cj.net, stating the request.

Mechanisms and procedures for revoking consent to processing

Candidates may revoke the consent given to CJLM for the processing of their personal data. The revocation of consent may be made by sending an email to aviso.privacidad@cj.net.

The requirements and procedure to revoke the consent is the same as for the exercise of ARCO rights, as detailed in this Privacy Notice.

It is important that candidates take into account that CJLM may continue to process their personal data when legally required to do so.

ARCO Rights

You have the right to know which of your personal data is in our possession, what uses we give to such information and the conditions of the use we make of it (Access). Likewise, it is your right to request the rectification or correction of your personal data in case it is outdated or inaccurate (Rectification); to request the erasure from our records, files or systems (Cancellation); as well as to object to the processing or demand that it cease when they fall under the provisions of Article 26 of the Law (Objection). These rights are known as ARCO rights.

To exercise any of the ARCO rights, please contact CJLM’s Department of Human Resources, through the following email: aviso.privacidad@cj.net.

The request for the exercise of your ARCO rights shall contain at least the following information:

• Name of the data subject and, if applicable, of his/her legal representative.
• Domicile or email address of the data subject, to receive a response to his or her request.
• Official identification (INE or passport) that proves the identity of the data subject and, if applicable, that of his/her legal representative.
• If applicable, a public deed, a power of attorney signed before two witnesses or a statement in personal appearance by the data subject, to prove the existence of the representation.
• Clear and precise description of the personal data with respect to which you wish to exercise any of the ARCO rights, except in the case of the right of Access.
• The description of the ARCO right that you intend to exercise, or the request of the data subject.
• If you wish to exercise the right of Access, indicate the address or means for the response to be notified.
• In case of exercising the right of Rectification, indicate what personal data you are referring to and the modifications to be made, as well as provide the necessary documentation to support your request.
• In case of exercising the right of Cancellation, clearly and precisely state the personal data you wish to cancel or indicate whether the cancellation will proceed with respect to all your personal data.
• In case of exercising the right of Objection, justify the origin of the right, in terms of Article 26 of the Law.

Please note that the maximum term of response to your requests is 20 (twenty) business days from the date of sending of the request, or up to 40 (forty) business days when the circumstance of the particular case justifies so, in terms of the Law. As of the notification of the resolution, CJLM will have 15 (fifteen) days, or up to 30 (thirty) days when justified by the circumstances of the particular case, to implement the decision adopted.

In the event that the request for the exercise of ARCO rights omits any of the points indicated above, or when it is necessary for processing the request, CJLM may request additional information from the data subject within the first 5 (five) days, in which case the data subject will have 10 (ten) days to respond to the requirement, and the response deadlines will be adjusted in accordance with the provisions of the Law.

The contact details of CJLM’s Department of Human Resources that will process the requests for the exercise of ARCO rights, as well as receive and attend to any questions or complaints that the data subject may have regarding the processing of his or her personal data are the following:

CJLM’s Department of Human Resources, with address located at Av. Manufactura, Number 502, Parque Industrial Querétaro, Santa Rosa Jáuregui, state of Querétaro, municipality of Querétaro, Zip Code 76220, email aviso.privacidad@cj.net and phone number 442 2409 301 EXT 01.

Changes and updates to the Privacy Notice

This Privacy Notice may be modified, changed, or updated as a result of new legal requirements, CJLM’s needs, our privacy practices, or for any other cause.

CJLM undertakes to inform candidates about the changes to this Privacy Notice through its publication on CJLM’s website or by sending individual mails to candidates.

Likewise, candidates may consult the updated Privacy Notice at any time in person at CJLM’s facilities, directly with the Department of Human Resources, or request it by email addressed to aviso.privacidad@cj.net.

Last updated on February 12, 2026