At PENSKE, we are committed to safeguarding the privacy of your personal data. This notice applies to Penske Logística, S.A. de C.V., Penske Servicios de Administración, S.A. de C.V., and Penske Truck Arrendadora de México, S.A. de C.V. (hereinafter, “Penske”). In accordance with Article 16, Section II of the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), we inform you that “Penske” will process the personal data collected from you under the terms of this privacy notice:

Address

For purposes of this privacy notice, “Penske” designates the following address: Antonio Dovali Jaime No. 70, 3rd Floor, Santa Fe, Álvaro Obregón, Mexico City, CP 01210.

Personal Data That May Be Collected and Processed

To fulfill the purposes described in this privacy notice, the following personal data may be processed:

  • Full name
  • Full address
  • Tax address
  • Phone number
  • Email
  • ID/CURP
  • Photograph and video recording of your person

The personal data you provide to “Penske” will be treated confidentially and exclusively for the purposes for which they were collected. Regarding sensitive personal data mentioned previously, “Penske” commits to processing them only when absolutely necessary for the purposes outlined, and to treating them with appropriate security measures to protect confidentiality.

Purpose of Processing Your Personal Data

Primary Purposes

  • Maintain your information in our visitor access log (records)
  • Identify you
  • Grant you access to our facilities
  • Ensure control and security of individuals visiting the company

Secondary Purposes

  • Transfer your personal data to Penske group companies or subsidiaries

ARCO Rights

Beginning January 6, 2012, you have the right to: (i) Access your personal data and learn details of its processing; (ii) Rectify it if it is inaccurate or incomplete; (iii) Cancel it when it is no longer necessary for the purposes stated, is being used without consent, or when the contractual or service relationship has ended; (iv) Object to its processing for specific purposes, as permitted by law (Collectively, the ARCO Rights) “Penske” has designated a Personal Data Officer (thePrivacy Officer). You may limit the use or disclosure of your personal data by contacting the Privacy Officer at: oficialdeprivacidad@penske.com The Privacy Officer will respond to your ARCO Request and provide the reasons for the decision by certified mail (with an additional cost) or in person at corporate offices within a maximum of 20 business days from receipt of the request. Your request must include all requirements listed in Article 29 of the Law.

Penske may deny access to ARCO Rights in the following situations:

  1. You are not the owner of the data or cannot prove representation
  2. Your data is not found in Penske’s database
  3. Rights of a third party would be affected
  4. A legal impediment exists or an authority restricts ARCO Rights
  5. Rectification, cancellation, or objection was previously performed

Exercising ARCO Rights is free, but if you repeat the request within 12 months, costs equivalent to three days of the Current General Minimum Wage in Mexico City plus VAT may apply, unless substantial modifications to the privacy notice justify a new request. You must also cover justified shipping or reproduction costs.

Requirements To Exercise ARCO Rights

Your request must include:

  1. Full name and complete address (street, interior/exterior number, neighborhood, postal code, city, state)
  2. Documents proving your identity (IFE/INE, valid passport, professional license, or immigration document) or legal representation
  3. Clear and precise description of the personal data for which ARCO Rights are sought
  4. Any information or document that facilitates locating your data
  5. If requesting rectification, specify the changes sought and attach supporting documents

Revocation of Consent

You may revoke your consent for the processing of your personal data at any time (free of charge). The request can be found on Penske’s website or requested at any Penske subsidiary. Revocation may apply when there is a legitimate reason, when you no longer wish your data to be used for specific purposes, or when your personal situation requires it. However, revocation does not apply when processing is required to comply with a legal obligation of Penske.

ARCO Rights or revocation requests may be restricted for national security, public order, public health, protection of third-party rights, or by authority resolution.

Notification of Changes to the Privacy Notice

Penske reserves the right to modify this Privacy Notice to comply with legislative updates, case law, internal policies, or new requirements from authorities. Any modification will be communicated via: Email, Notices at Penske subsidiaries, Publication in the privacy policy section of the following website: https://www.pensketruckleasing.com/northamerica/mexico/

This Privacy Notice complies with the requirements of the current Federal Law on the Protection of Personal Data Held by Private Parties.

Last revision date: February 2026