Privacy Notice.

BMW de México, S. A. de C.V. (BMW Mexico), with address at Avenida Javier Barros Sierra 495, 14th floor, office 1401, Park Plaza III, Colonia Santa Fe, C.P. 01376, Alvaro Obregón Mayor's Office, Mexico City, is responsible for the processing of your personal data in terms of the provisions of the Federal Law on the Protection of Personal Data Held by Individuals (LFPDPPP).

General, sensitive and asset personal data obtained as part of the recruitment and selection process personally, directly (through your curriculum vitae, internal recruitment sources, internal job boards, face-to-face or virtual interviews, forms, documentation, socioeconomic study, psychometric and projective tests), and indirect (BMW AG recruitment platforms, portfolio exchange, job boards, university platforms, work and personal references, and background searches), will be used for the following essential purposes: identifying and knowing the candidate's profile; preliminary evaluating whether he meets the requirements of the position and, if necessary, schedule face-to-face interviews; apply psychometric and projective tests and carry out socioeconomic studies; request references from the candidate (in this case, the interested party must have authorization to contact the people indicated as a personal reference); verify the veracity of the information provided by the candidate; obtain their work references from previous jobs; evaluate your information to determine if the candidate meets the profile required for the corresponding vacancy; generate an economic offer; identify if there is a conflict of interest due to a family member who works in a BMW company or in a company in the same sector, and if it is necessary to implement measures to prevent such a conflict from materializing, the above does not affect the hiring process; know if you previously participated in a recruitment process with the company and the reasons why that the contract did not take place; BMW Mexico does not require you to provide data classified as sensitive when answering what are hobbies or hobbies, if you voluntarily and spontaneously provide this type of information, it will be treated confidentially and will not give rise to discrimination. If the candidate is not selected, their information may be integrated into our internal job board in order to determine if their profile fits any other vacancy within the company, or it may be shared in a portfolio exchange with prior authorization, then their information will be deleted. If you are hired, your general, financial and sensitive information will be integrated into your work file and used in accordance with the Privacy Notice for Employees of BMW de México, S.A. de C.V. Under no circumstances will your personal data be used for advertising, marketing and/or commercial prospecting purposes.

• Virtual. When conducting a virtual interview, it will be recorded, this video will be used to carry out a technical evaluation and to pre-assess whether your profile fits the vacancy. This video, your image and/or your voice will not be used for advertising purposes, transferred to third parties or disseminated in public media.
• Face-to-face (foreigners). If the candidate does not live in Mexico City, in some cases we can support him in his transfer to the interview, for which we will use his general information to: verify that he has the documentation to travel; organize the logistics of flights and accommodation (if applicable); report any emergency situation to his designated contact, for which you guarantee that this contact is of legal age and that he obtained his authorization to provide his personal information.

• Psychometric and projective tests. We can apply different psychometric and/or projective tests, focused on knowing your personality traits, projective behavioral profile, intelligence, aptitudes for job development and integrity (specific vacancies), which will allow us to determine if you are suitable for the position offered, as well as identify your areas of opportunity to design strategies to develop your skills and improve your work performance if you are selected for hiring. BMW Mexico does not require you to provide data classified as sensitive when answering these evaluations, however, this type of information could be revealed in the interpretation of these tests, so BMW Mexico ensures the strictest confidentiality in its handling. The tests will be applied through third-party platforms where you must generate a user, the information you enter on the platform will be your responsibility and will be subject to this third party's Privacy Notice.
• Candidate background. In order to verify the veracity of the information provided by the candidate in his statement of integrity (in relation to the fact that he has not been convicted or is under investigation, or has been separated from a job for bribery, violations of economic competition, trade and exports, money laundering, terrorist financing, fraud, breach of trust, falsification of documents, disclosure or trade in industrial secrets), BMW Mexico may search for information to ensure a high level of integrity within the organization, in compliance with the policies established by the BMW Group, the information that emerges from these searches will be evaluated taking into account the specific case and the profile of the vacancy. We also inform you that as part of the socioeconomic study, we will request work references and documentation (proof of address, voting credentials, payroll receipts, degree and professional identification) in order to corroborate your address, previous jobs, salary and degree of education.

• Face-to-face interviews. We will request information about your current salary and benefits or your last job (wealth data) to pre-evaluate whether the vacancy offered fits the candidate's economic profile.
• Socioeconomic study. As part of the study, personal wealth data will be collected (monthly salary, payroll receipts, initial and final salary of his last job, weeks of social security contributions, area in which he lives and type of housing), to assess whether the vacancy offered fits the candidate's economic profile and, if necessary, make an economic offer, as well as to corroborate the veracity of the data previously provided by the candidate.

In compliance with the provisions of articles 8 and 9 of the LFPDPPP, you are informed that in order to collect and process your sensitive personal and property data in the terms indicated in section II of this notice, you must have your express consent, so we will request your authorization when we obtain this information or at the first face-to-face contact we have with you.

If you authorize it, your general personal data (name, education, experience and contact details) and assets (salary) will be incorporated into our integrated candidate portfolio with third parties, to whom we can send your information if it covers the profile required for any of the vacancies they offer in order to generate recruitment opportunities for candidates. In the first face-to-face contact we have with you, we will ask you to indicate whether or not you accept this communication of information, refusing this transfer will not affect your participation in our recruitment and selection process, and at any time you can revoke the consent granted for this transfer, for which you must follow the process detailed in number V of this Notice.

BMW de México, S. A. de C.V., may transfer your personal data without requesting your express consent, in the event that any of the exceptional cases provided for in article 37 of the LFPDPPP are updated.

In accordance with the LFPDPPP, you may exercise before BMW de México, S. A. de C.V., your rights of access, rectification, cancellation or opposition, as well as revoke your consent, for which you must follow the procedure detailed below:

1) Send an email to rhbmw@oficinadeprivacidad.mx, requesting the ARCO application form. Fill out the form, stating the following: (a) your full name and the relationship you have or have had with BMW Mexico (if applicable, stating that you participated in one of our recruitment and selection processes, or that you applied through our job board); (b) the address or medium in which you want the response to be communicated to you; (c) the type of right you want to exercise; (d) the precise description of the data in respect of which you request access, rectification, cancellation or opposition, or those with respect to whom they wish to revoke their consent; (e) provide any other element or document that facilitates the location of personal data; (f) in the case of the exercise of the right of rectification, it is necessary for the owner to indicate precisely what modification must be made, attaching the documentation that supports their request; (g) in the case of cancellation, he must indicate whether his request is with respect to all the data or specify with respect to which ones; and (h) for requests for opposition, he must indicate the reasons that support it. Once you have filled out this form, you must send it to the indicated email address, attaching a copy of your official identification in order to prove your identity, or a power of attorney to prove your personality as a legal representative if you submit the request in the name of the data subject.

2) If your request was submitted on a non-business day, it will be processed from the business day following the date you submitted it.

3) If your request does not meet the legal requirements, within five business days after it was received in the email from the Privacy Office, you will be required to correct your request within ten business days, otherwise it will be considered not submitted. If your request meets the requirements established by the LFPDPPP or if you have fulfilled the information requirement, an Acknowledgment of Receipt will be sent to you with the appropriate date of receipt.

4) Your request will be answered via email within twenty business days from the date of receipt indicated in the Acknowledgment of Receipt. This period may be extended by an additional twenty business days when there are reasons that justify it. This situation will be notified to the holder in accordance with the provisions of article 97 of the LFPDPPP Regulations.

5) If your request is in accordance with the LFPDPPP and other current regulations, access will be granted, your data will be rectified or canceled, your right to object will be effective or your consent will be revoked, within fifteen business days of the date on which your request is answered. This period may be extended by an additional fifteen business days when there are reasons that justify it. This situation will be notified to the holder in accordance with the provisions of article 97 of the LFPDPPP Regulations.

If your request for access is appropriate, in terms of the provisions of article 35 of the LFPDPPP, the delivery of personal data will be made free of charge, sending the requested information to the email address you have indicated for this purpose. If you require the information to be delivered to you in a different way, you must cover only the justified shipping costs and/or the cost of reproduction in copies or other formats that are generated.

The personal data collected in this process will be used to respond to and respond to your ARCO request or to revoke your consent, generate a folio number for control and follow-up, request additional information if necessary, keep in contact with you to follow up on your request and send you the corresponding response. The information in your request will be stored for internal control, as well as to meet the requirements of the relevant authority (National Institute for Transparency, Access to Information and Protection of Personal Data).

If you have any questions about the content, interpretation or scope of our privacy notice, policies, the management of your personal information and how to express your privacy preferences, you can contact our Privacy Office via email at rhbmw@oficinadeprivacidad.mx.

If you consider that your right to the protection of personal data has been violated by any conduct, omission, action or response of BMW Mexico, or you presume that in the processing of your personal data there is a violation of the provisions provided for in the LFPDPPP, you can file the corresponding complaint or complaint with the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI), for more information visit www.inai.org.mx.

This Privacy Notice will be effective as of the last update date and may be modified by the responsible party in terms of the applicable regulations. Any changes will be communicated through the publication of the new Candidate Privacy Notice on the website www.bmw.com.mx.

Last updated: May 2025