COMPREHENSIVE PRIVACY NOTICE

NSP CLINIC, S. DE RL DE CV, commercially known as NEURO SPINE AND PAIN CLINIC, with address at Carretera Transpeninsular km. 24.5, premises 2-B, level 1, Torre de Especialidades Koral Center Building, Ciudad San José del Cabo, Los Cabos, CP 23406, Baja California Sur, Mexico, and internet portal https://www.nsp.clinic, es the person responsible for the use and protection of your personal data, this Privacy Notice is intended to inform you how we use the personal data that you provide us through requests, statements, notices, contracts and/or other means, whether printed and/or or electronic; our efforts to protect you, the options you have to control your personal data and protect your privacy.

In compliance with the Federal Law on Protection of Personal Data Held by Private Parties and its regulations, as well as in accordance with the Privacy Notice Guidelines published in the Official Gazette of the Federation on January 17, 2013, we inform you of the following :

I. For what purposes will we use your personal data?

We will use the personal data that we collect from you for the following purposes that are necessary for the service you request:

• Identify and guarantee the veracity of the information
• Know your medical history
• Offer you a more accurate diagnosis
• In case of contingency, implement the appropriate treatment
• Provision of medical-hospital services, hospitalization, surgery, nursing care, pharmaceutical services, studies and analysis, therapy, rehabilitation.
• Studies, records, statistics and analysis of health information.
• Maintaining records for future service provision.
• Billing and collection for services.

II. What personal data will we use for these purposes?

To carry out the purposes described in this privacy notice, we will collect the following data:

Personal information:

• Name
• Birthdate
• Home
• place of birth
• Nationality
• Age
• Height
• Weight
• Civil status
• Unique Population Registry Key (CURP)
• Personal phone
• Cell phone
• Email
• Autograph signature
• Photography
• Immigration quality (only for foreigners)
• Time spent in the country

Labor data:

• Work address
• Position or position held
• Income

Financial data:

• Bank accounts (if applicable)
• Standardized Bank Code (CLABE) (if applicable)
• Number of credit cards (if applicable)
• Federal Taxpayer Registry (RFC)
• Insurance

General data:

• Hobbies
• Hobbies
• Sports you practice

SENSITIVE DATA. In addition to the personal data mentioned above, for the purposes reported in this privacy notice we will use the following personal data considered sensitive, which require special protection:

• Religion you profess
• Present, past or future physical health status
• Present, past or future mental health status
• Hospitals where he was treated
• Blood type
• Previous medical studies
• Surgeries or interventions
• Personal and family medical history
• Personal pathological history
• Addictions
• Genetic information
• sexual preferences
• Sexual practices or habits
• Belonging to a town, ethnic group or region

III. Who do we share your personal information with and for what purposes?

We inform you that your personal data may be shared with third parties inside and outside the country for the purpose of providing medical-hospital services, hospitalization, surgery, nursing care, studies and analysis, therapy, rehabilitation, updating and maintaining clinical files. . The third parties to whom such data may be transferred are laboratories, clinics, hospitals, research centers, and insurance companies.

• Recipient of personal data: Other doctors or health institutions, laboratories, clinics, hospitals, research centers, insurance companies.
• Purpose: The provision of medical-hospital services, hospitalization, surgery, nursing care, studies and analysis, therapy, rehabilitation, updating and maintenance of clinical files.
• Requires consent: Yes

Regarding transfers that require your consent, please indicate below whether you grant it to us:

I give my consent for the following transfers of my personal data:

• Recipient of personal data: Other doctors or health institutions
• Purpose: Know the patient's clinical history
• Select: Yes ( ) No ( )

IV. How can you access, rectify or cancel your personal data, or oppose its use?

You have the right to know what personal data we have about you, what we use it for and the conditions of use we give it (Access). Likewise, it is your right to request the correction of your personal information if it is outdated, inaccurate or incomplete (Rectification); that we delete it from our records or databases when we consider that it is not being used appropriately (Cancellation); as well as oppose the use of your personal data for specific purposes (Opposition). These rights are known as ARCO rights.

To exercise any of the ARCO rights, you must submit the respective request through the following means:

In person, by phone or email

Regarding the procedure and requirements for the exercise of your ARCO rights, we inform you of the following:

a) Through what means can the owner and, where applicable, his representative, as well as the personality of the latter, prove their identity? Written request, email, ID
b) What information and/or documentation should the application contain?
Data of the owner, identification of the owner and/or legal representative, means of notification, right to exercise.
c) In how many days will we respond to your request? 15 days
d) By what means will we communicate the response to your request?
Email, telephone, at your home address or to receive notifications.
e) In what media can the personal data that you request be reproduced?
Files, records, database of the trafficker

The contact details of the person or personal data department, who is in charge of processing ARCO rights requests, are as follows:

a) Name of the person or department of personal data: CP Laura Rincón Navarro
b) Address: Transpeninsular Highway km. 24.5, premises 2-B, level 1, neighborhood Edificio Torre de Especialidades Koral Center, San José del Cabo, Los Cabos, CP 23406, Baja California Sur, Mexico.
c) Email: administracion@nsp.clinic
d) Telephone number: 6241243487

V. You can revoke your consent for the use of your personal data

You can revoke the consent that, if applicable, you have given us for the processing of your personal data by sending your request to the email administracion@nsp.clinic, following up on it, receiving a confirmation and you will receive the response within a period of 15 working days.

However, it is important that you keep in mind that not in all cases we will be able to respond to your request or terminate the use immediately, since it is possible that due to some legal obligation we require to continue processing your personal data.

Likewise, you must consider that, for certain purposes, the revocation of your consent will imply that we will not be able to continue providing the service you requested from us, or the conclusion of your relationship with us.

To revoke your consent you must submit your request through the following means:

Email

To know the procedure and requirements for revoking consent, we provide you with the following means:

Directly at the manager's office or by phone or email

SAW. How can you limit the use or disclosure of your personal information?

To limit the use or disclosure of your personal data, you must request it through a written request duly signed and submitted via email to the account administracion@nsp.clinic. However, if you limit the use or disclosure in question, NEURO SPINE AND PAIN CLINIC will take the measures it deems appropriate so that processes and practices are not interrupted.

VII. The use of tracking technologies on our internet portal

NEURO SPINE AND PAIN CLINIC informs you that it collects and stores information through your entry to the website on our website https://www.nsp.clinic, information about the visitor's IP address, domain name, behavior and time. length of stay on the website, pages browsed, tools used, browser type and operating system. So in order to provide you with a better service and experience when browsing our page. We will use the personal data that we collect through these technologies for the following purposes:

• To verify and confirm your identity, the personal data we obtain from these tracking technologies is as follows:
• User preferred language
• User browser type
• Used tools
• Time spent on the website
• Type of user operating systemThese technologies can be disabled by following the following steps:
• By clicking on the option close or disable cookies.

Most browsers will allow you to delete the use of cookies, block the acceptance of cookies, or receive a warning before cookies are stored. We suggest you consult your browser's instructions for using cookies.

Cookies are small text files that are stored on your computer or mobile device when you visit our website. For convenience, we use cookies as a general term for techniques such as cookies, flash cookies, and web beacons. They don't take up too much space and will be automatically deleted when they expire. Some cookies expire at the end of your online session, while others are stored for a limited period of time.

VIII. How can you find out about changes to this privacy notice?

• Last update: 08/22/2021

This privacy notice may be modified, changed or updated due to new legal requirements; of our own needs for the products or services we offer; of our privacy practices; Changes in our business model, or other causes. Any modification that is made will be announced immediately on our internet portal https://www.nsp.clinic/privacidad, where it will be available twenty-four hours for you to know.

We are committed to keeping you informed about any changes that may occur to this privacy notice, by phone call and/or email.

The procedure through which notifications about changes or updates to this privacy notice will be carried out is as follows:

• Informing the owner directly by phone call or email

NSP CLINIC, S. DE RL DE CV