Comprehensive Privacy Notice

1.Identity and address of the controller

The controller of your personal data is Iván Erick Tlatecatl Morales, with address C. 2 Sur 308, La Santísima Trinidad, 72810 San Andrés Cholula, Pue., and contact email info@atomb.com (the "Controller").

The Controller is responsible for collecting, using, and protecting the personal data you provide through this website, in accordance with the principles of lawfulness, consent, information, quality, purpose limitation, loyalty, proportionality, and accountability established by applicable law.

2.Personal data we collect

Through this site's contact form, we collect directly and by electronic means only the following personal data:

• Full name.
• Company or organization.
• Email address.
• Any information you voluntarily include in the message field, as well as the selected interest type (NDA, licensing, acquisition, integration, or technical conversation).

We do not collect sensitive personal data, nor financial or asset-related data, through this site.

3.Purposes of processing

Primary purposes (necessary)

Your data is used for the following purposes that give rise to and are necessary for our relationship with you:

• To handle, follow up on, and respond to your request for information, NDA, licensing, acquisition, or integration.
• To contact you by electronic or telephone means to coordinate technical conversations, due diligence, or IP transfer discussions.
• To identify and qualify the requester as a potential counterparty or partner.
• To comply with obligations arising from the relationship that may be established.

Secondary purposes (optional)

We currently do not use your personal data for secondary purposes, such as sending institutional updates, newsletters, or promotional communications. If this changes in the future, this notice will be updated accordingly. This does not affect the primary purposes necessary to respond to your request.

4.Consent

By providing your personal data through this site's form and sending your request, you acknowledge that you have read this Privacy Notice and give your consent for the processing of your data in accordance with the purposes described herein. Consent may be revoked at any time as described in section 6.

5.Transfers of personal data

The Controller will not transfer your personal data to third parties without your consent, except in the cases provided by law (for example, when a transfer is required by law, necessary for the administration of justice, or carried out within the same corporate group under common policies).

If the Controller needs to transfer data to third parties outside the cases above (for example legal counsel or specialized service providers strictly necessary to process your request), you will be informed and, when required by law, your consent will be obtained.

6.How to exercise ARCO rights and revoke consent

You have the right to know what personal data we hold, what we use it for, and the conditions of its use (Access); to request correction when it is inaccurate or incomplete (Rectification); to request deletion from our records when you consider it is not being used in accordance with the law (Cancellation); and to object to the use of your data for specific purposes (Opposition). These are known as ARCO rights.

To exercise any of these rights, or to revoke your consent, send a request to info@atomb.com indicating:

• Name of the data subject and a means to communicate the response.
• Document proving identity (or legal representation, if applicable).
• Clear and precise description of the right you wish to exercise or the specific request.
• Any element that helps locate the personal data.

The Controller will respond within the timeframes established by applicable law.

7.Limiting use or disclosure of data

You may request that we limit the use or disclosure of your personal data by sending your request to info@atomb.com. Additionally, any communication you receive from us will include a mechanism to request that you stop receiving it.

8.Cookies and tracking technologies

This site does not use cookies or tracking technologies that automatically collect personal data.

9.Changes to this Privacy Notice

This Privacy Notice may be modified due to legal changes, internal practices, or new requirements. Any update will be published on this page, indicating the last updated date. We recommend reviewing it periodically.

10.Data protection authority

If you believe your right to personal data protection has been violated, you may contact the competent authority in Mexico for the protection of personal data held by private parties.