Russia

CONFIDENTIALITY NOTICE

The information contained in all emails belonging to Grupo Bimbo or any entities of its group, including, BIMBO QSR  RUS, LLC., including any attachments, is confidential, proprietary, and/or legally privileged and is only for the exclusive use of the recipient. Any unauthorized partial or total use, reproduction, retransmission or dissemination is forbidden. If you are not the intended recipient of this email, you are notified that any dissemination, distribution, retransmission, copying or use of the information contained in or attached, is strictly prohibited. If you have received this email in error, please immediately notify the sender and delete the email and any attachments permanently, including any digital and/or printed versions.

PRIVACY POLICY ("Policy ")

Who is responsible for the processing of your data?

Identity: BIMBO QSR RUS, LLC., a legal entity established under the laws of the Russian Federation, located at the address: 3 Novoorlovkaya Str., build. 1, Moscow, 119633, Russia

By accepting this Policy, you give your consent to the above legal entities for the processing of your personal data as specified below.

For any questions related to the use of this Policy and processing of the Personal Data by us you may contact: datospersonales@grupobimbo.com

To whom are the contents of this web site addressed?

Only people over 14 years of age can give their consent. Automated decisions will not be made based on the information.

The forms contained in this website are not directed to people under 14 years old. By pressing the "Submit" or any similar button you represent that you are at least 14 years old or that you act under the consent of your legal representative.

BIMBO QSR RUS, LLC. is not responsible for cases in which minors have sent personal data through it. In that case, whoever has parental authority and / or is the guardian or legal representative of the minor, may exercise the rights set forth in the corresponding paragraph of this Policy and/or under applicable legislation.

For what purpose do we treat your personal data?

In EAST BALT RUS, LLC. we treat the personal data and other information provided by interested persons in order to:

• attend your inquiries and inform you about our products, services, news, sweepstakes, contests and BIMBO events as well as

• the management of your registration and participation in raffles, competitions or events that request to participate.

How long will we keep your personal data?

The personal data provided will be kept and otherwise processed by us: (a) until the expiry of the term of your consent (if any), or (b) until the purposes of personal data processing are no longer existent or are achieved, or (c) until the personal data is requested by you / your authorized representative to be deleted, or (d) until you / your authorized representative revokes your consent to the processing of your personal data, whichever is earlier, unless we have other legitimate grounds to process your personal data.

To revoke your consent, you can submit your request to the email account: datospersonales@grupobimbo.com. If you revoke your consent, we must cease processing the personal data within 30 days upon receiving the above revocation, unless we have other legal grounds to continue processing your Personal Data.

What is the legitimacy for the processing of your personal data?

The legal basis for the processing of your personal data for the purpose of being able to attend your inquiries and inform you by mail and electronically about our products, services, news, raffles, contests and BIMBO events as well as the management of your registration and participation in raffles, contests or events that you request, is the contribution of consent. The consent will be valid till you decide to revoke it.

To which recipients will your personal data be communicated?

Your personal data may only be communicated to the companies linked to BIMBO QSR RUS, LLC., such as controlling companies, subsidiaries or intermediaries, for the same purposes mentioned above.

Security measures

We take all appropriate technical and organizational security measures in accordance with applicable legislation to prevent unauthorized access, disclosure, modification, or unauthorized destruction of your personal data and other illegal actions. Such measures include, in particular:

• appointment of a person responsible for organizing the processing of personal data;

• issuance of necessary documents on processing of personal data;

• implementation of internal control of processing of personal data to ensure compliance with applicable legislation on the protection of personal data; and

• other measures established by applicable legislation.

We also ensure that, where required under applicable law, personal data of Russian citizens are recorded, systematized, accumulated, stored, corrected (updated, altered), retrieved with use of databases located on the territory of the Russian Federation.

What are your rights when you provide us your personal data?

• You / your authorized representative have the right to obtain confirmation about whether we are processing personal data concerning you or not as well as the information on such processing.

• You / your authorized representative have the right to access to the personal data, including the right to receive copies of any record containing the personal data, except as required by applicable legislation, as well as to request the deletion or correction of inaccurate or incomplete personal data as well as personal data processed in violation of applicable legislation or when personal data is not necessary for the set purposes of its processing.

• In certain circumstances, you / your authorized representative may request the limitation of the processing of the personal data by revoking your consent to its processing as indicated above.

• You / your authorized representative may appeal to the court any our unlawful actions or omissions within processing and protecting the Personal Data and have other rights set out by applicable legislation.

You can consult more information about the exercise of your rights directly to our data protection department by sending an email to datospersonales@grupobimbo.com