1.     Who We Are?

Gestión Integral de Proyectos de Energía, S.A.P.I. de C.V. (hereinafter referred to as “Solar180” or the “Data Controller”), with registered address at Solón 210 – 502, Col. Polanco II Sección, Miguel Hidalgo Borough, C.P. 11530, Mexico City, Mexico, is responsible for the processing of your personal data in accordance with applicable Mexican legislation.

2.     What Personal Data Do We Collect?

For the purposes described in this Notice, Solar180 may collect, including but not limited to, the following categories of personal data from clients, prospects, and website visitors:

• Identification and contact information: Name, email address, telephone number, address.
• Property and installation data: Installation address and general site characteristics (when applicable).
• Tax and billing information: Tax ID (RFC), Tax Status Certificate, billing details.
• Energy consumption information: Electricity bills and related consumption data.
• Credit information: Only when necessary to assess creditworthiness or commercial conditions (e.g., references or credit bureau reports, when applicable).

Solar180 does not request or process sensitive personal data through its website for these purposes.

3.     How Do We Collect Your Data?

Solar180 may collect your personal data directly when you:

• Complete forms on our website (e.g., contact, quotation, or registration);
• Contact us via email, telephone, or messaging platforms;
• Request a quotation, technical visit, installation, maintenance, or other services; and/or
• Provide documentation for billing or credit evaluation (when applicable).

4.     What Do We Use Your Personal Data For?

The personal data we collect will be used for the following primary purposes (necessary):

1. To identify you and communicate with you.
2. To respond to requests for information, contact, quotations, and commercial follow-up.
3. To prepare, formalize, and fulfill contracts or agreements (e.g., sale, installation, supply, maintenance, or related services).
4. To coordinate technical visits, installation, operation, maintenance, warranty services, and support.
5. To carry out billing, collection, and payment processes.
6. To assess legal capacity and, when necessary, creditworthiness or commercial conditions.
7. To comply with legal obligations and respond to requests from competent authorities.
8. To manage obligations with suppliers, partners, and creditors when necessary for the execution of contractual relationships.

Secondary Purposes (Non-Essential):

1. Sending commercial information, promotions, marketing campaigns.
2. Internal market research, statistical analysis, and service improvement.

If you do not wish your data to be processed for secondary purposes, you may request this at any time by sending an email to: privacidad@solar180.mx

5.     How Do We Store and Protect Your Data?

Solar180 safeguards your personal data in accordance with reasonable standards of confidentiality and security and requires its personnel and service providers to maintain confidentiality obligations.

Your personal data is protected through technological, administrative, and physical security measures designed to prevent alteration, loss, unauthorized access, or improper processing.

6.     Transfers of Personal Data

Solar180 may transfer your personal data, within or outside Mexico, as permitted by law and when necessary to fulfill the purposes described herein, to:

• Service providers supporting operations (e.g., installation, maintenance, support, billing, cloud storage, technological tools), acting as data processors under confidentiality obligations.
• Financial institutions and payment platforms to process payments and fund disbursements.
• Credit bureaus and/or third parties assisting in the evaluation of creditworthiness, when applicable and in accordance with regulations.
• Administrative, tax, labor, and social security authorities (e.g., IMSS, INFONAVIT, SAT), or other competent authorities when required.
• Banking institutions for payment disbursement.
• Service providers (e.g., legal, accounting, audit services, technology platforms, cloud storage, training, and certification), under confidentiality and data processing obligations.
• Related companies or entities within the same corporate group, solely when necessary for service provision, internal administration, and compliance, under appropriate security and confidentiality measures.

When a transfer requires consent under applicable law, Solar180 will obtain such consent beforehand.

7.     ARCO Rights and How to Exercise Them

You have the right to Access, Rectify, Cancel, or Object (ARCO rights) to the processing of your personal data, as well as to revoke your consent or limit the use or disclosure of your data in accordance with applicable regulations.

To exercise your rights, please send a request to: privacidad@solar180.mx, including:

• Name of the data subject and means to communicate the response;
• Documents proving identity (and, if applicable, legal representation);
• Clear description of the right you wish to exercise and the data involved; and
• Any information that facilitates locating the data.

8.     Revocation and Limitation

You may revoke the consent you have granted. However, Solar180 may be required to retain certain information to comply with legal obligations or for the defense of claims. Revocation will not have retroactive effects.

9.     Cookies and Tracking Technologies

Our website may use cookies, web beacons, and similar technologies to enable functionality, analyze website usage, and improve your experience.

You may disable or adjust cookies through your browser settings. Certain cookies may be necessary for the proper functioning of the website.

10.  Modifications to This Notice

Solar180 may update or modify this Privacy Notice to reflect legislative changes, internal policies, or new requirements.

Any modifications will be published in the Privacy Notice section of the Solar180 website:
www.solar180.mx

11.  Complaints Before the Authority

If you believe your right to personal data protection has been violated, you may file a complaint before the National Institute for Transparency, Access to Information, and Personal Data Protection (INAI), in accordance with applicable procedures.