This privacy notice explains how Emirates Global Aluminium Latin America, Sociedad de Responsabilidad Limitada de Capital Variable (S. de R.L. de C.V.) (hereinafter, “EGA Latin America”, “we”, “our” or “us”) collects, uses, discloses and/or processes your personal data when you interact with us. It also describes the rights that you have and the steps that we take to keep your personal data safe.

When EGA Latin America collects, uses, discloses and/or processes your personal data for the reasons described in this privacy notice, EGA Latin America is known as the ‘data controller’.

If you have any questions about the content of this privacy notice, you can contact us by using the details provided in the ‘Contact us for more information’ section at the bottom of this page.

What personal data do we process, and what reasons do we process it for?

When you browse our website

When you use this website, we use cookies to record:

• the areas of the website that you visit; and
• information about your computer, such as which browser you are using, your network location, the type of connection you are using (e.g., broadband, ADSL etc.) and your IP address.

We do this so that we can collect and analyse information on our site's performance, which helps us to develop and improve the site, and allows us and our partners to show you relevant advertisements when you visit our site and other third party websites, including social networks.

Processing your personal data for these purposes is based on your consent, unless the cookies are strictly necessary to the website’s functionality.

You can control which cookies you consent to through the cookie banner on our website, or by visiting the Cookie Policy , which also provides more information on how we use cookies, and how you can opt out of them.

When you submit an enquiry

If you submit an enquiry, either through this website, through another contact option (such as a contact email address or telephone number), or directly to one of our employees, we will process your personal data for the purposes of responding to, and managing, your query. This could include queries relating to our products, or to seeking employment with us.

The personal data we process for these purposes includes your name and contact details, including your email address and telephone number, as well as any other personal data that you provide when you submit your enquiry.

Processing your personal data for these purposes is necessary to protect our legitimate interests, or in some circumstances may be based on your consent to the processing.

When you are in contact with us as part of your role as an employee of one of our partners

If you are communicating with us on behalf of your employer, we will process your personal data so that we can manage the relationship with your employer, such as administering any orders that have been, or will be, placed. This includes activities such as emailing or calling us to discuss orders that have been placed for our products, or discussing our products in meetings and at trade shows.

The personal data we process for these purposes includes your name and contact details, including your email address and telephone number.

Processing your personal data for these purposes is necessary to protect our legitimate interests, or in some circumstances may be based on our right to defend legal claims against us.

When you submit a complaint

If you make a complaint to us, either through this website, through another contact option (such as a contact email address or telephone number), directly to one of our employees, or to a relevant authority, we will process your personal data for the purposes of investigating and managing your complaint.

Processing your personal data for these purposes is necessary to protect our legitimate interests, or in some circumstances may be based on our right to defend legal claims against us.

To comply with legal or regulatory obligations

In some circumstances, we may be obliged to process your personal data for the purposes of complying with legal and regulatory requirements applicable to us, such as for record-keeping and reporting obligations, conducting audits, compliance with government inspections and/or other requests from governments or other public authorities.

Processing your personal data for these purposes is necessary to comply with legal obligations and may in some cases be necessary to protect our legitimate interests.

For marketing and research purposes

We will process your personal data for the purposes of sending you marketing materials when you sign up to receive such marketing communications from us.

We may also process your personal data to seek your input on market research that we are conducting.

The personal data we process for these purposes includes your name and contact details, including your email address and telephone number.

Processing your personal data for these purposes is based on your consent. If you wish to withdraw your consent to marketing communications, you can contact us using the details at the end of this privacy notice.

To improve our products and services

In some circumstances, we will use your personal data to help improve our products and services. This may involve conducting analytics to understand how we have performed in delivering our services to you, and reviewing how we can improve for the future.

This may require us to process personal data you have provided to us, such as your contact details or information relating to queries and complaints.

Processing your personal data for these purposes is necessary to protect our legitimate interests or, where appropriate, may be based on your consent.

When you engage with us on social media

When you interact with us on social media, such as by liking or commenting on posts made by us, we are able to view the personal data that you have made publicly available, such as your name, profile picture and comment, and will process this personal data to respond and interact with you accordingly.

Processing this personal data for these purposes is necessary to protect our legitimate interests or, depending on your location, may also be lawful as you will have made the data publicly available.

To protect EGA from fraud and other illegal activities

We use personal data in order to maintain a safe environment for our partners and employees, and to protect the interests of our shareholders and the wider public. This includes, for example, monitoring the emails that are sent to EGA Latin America email accounts to detect fraud and phishing attempts.

The personal data we process for these purposes includes your name and contact details, including your email address and telephone number.

Processing this personal data for these purposes is necessary to protect our legitimate interests, to comply with legal obligations and to enable us to defend ourselves against legal claims.

Who do we share or transfer your information with?

As a wholly owned subsidiary of Emirates Global Aluminium PJSC (hereinafter “EGA”), we may share your personal data with EGA and other subsidiaries or affiliates of EGA for internal reasons, primarily for business and operational purposes. In such a case, your personal data will be processed under the same processes and internal policies.

By accepting this privacy notice, you consent that we share your personal data with trusted third parties who perform functions on our behalf and who also provide services to us, such as professional advisors, IT consultants carrying out testing and development work on our business technology systems, research, media and mailing houses and function co-ordinators. These third parties comply with the same undertakings of privacy and confidentiality, and we have back-to-back confidentiality agreements with them.

As we continue to develop our business, we may sell or purchase assets. If another entity acquires us or merges with us your personal data may be disclosed to such entity. Also, if any bankruptcy or reorganisation proceeding is brought by or against us, all such information will be considered an asset of ours and as such it is possible they will be sold or transferred to third parties. By accepting this privacy notice, you consent that we share your personal data with the entities and third parties that might participate in such a process.

As noted above, we may also need to share your personal data with third parties when we are obliged to do so; where it is necessary to protect EGA Latin America’s interests; to comply with a legal obligation; when we believe in good faith that an applicable law requires it; to comply with the request of government authorities conducting an investigation; to verify or enforce our website terms and conditions or other applicable policies; to detect and protect against fraud, or any technical or security vulnerabilities; to respond to an emergency or otherwise to protect the rights, property, safety, or security of third parties, visitors to the our website, our business, the public; or auditing purposes. In such cases, by accepting this privacy notice, you consent that we share your personal data.

We make best efforts to ensure that we have confidentiality agreements in place with the parties with whom we share information with and that they comply with our information protection requirements.

Transfers of your personal data outside of your home country

Your personal data may be processed by EGA Latin America and those other parties described above, outside the country in which you are based.

If your personal data is transferred to another country, we will ensure that there are adequate mechanisms in place to protect your personal data. This includes the use of data transfer agreements and implementing standard data protection clauses where appropriate to help ensure that your personal data is subject to the same standards of protection as it is in your own country.

Security

We are committed to ensuring that your personal data is kept secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and administrative procedures to safeguard and secure the information we collect.

We are also certified to ISO27001:2013 standard which is a globally accepted standard for managing risks to the security of information an entity holds.

If at any point you suspect or become aware of a security incident (e.g., you receive a suspicious communication from someone holding themselves out to be an EGA Latin America employee or from a unauthorised website claiming to be affiliated with EGA Latin America), please report the incident by email to informationcenter@ega.ae as soon as possible.

How long will we keep your personal data?

We will only keep your personal data for the period necessary to fulfil the purposes outlined above. Once such purposes are fulfilled, your personal data will be blocked in terms of the Federal Law for the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) and after the corresponding blocked period expires, we will delete your information or keep it exclusively for purposes of the responsibilities arising from the information processing.

What are your rights?

By law, you have a number of rights when it comes to your personal data. These rights vary depending on the country that you are located in and may include those as set out below:

Right	What does this mean?
The right to be informed	You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we’re providing you with the information in this notice.
The right to object to processing	You have the right to object to certain types of processing, including processing for direct marketing (i.e. if you no longer want to be contacted with potential opportunities).
The right of access	You have the right to obtain access to your personal data (if we’re processing it), and certain other information (similar to that provided in this notice). This is so you’re aware and can check that we’re using your personal data in accordance with applicable law.
The right to rectification	You are entitled to have your personal data corrected if it’s inaccurate or incomplete.
The right to erasure	This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
The right to restrict processing	You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
The right to data portability	You have rights to obtain and reuse your personal data for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
The right to lodge a complaint	You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection regulator, but we would ask that you contact us in the first instance so that we can try to resolve your complaint.
The right to withdraw consent	If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal data for marketing purposes.

You (directly or through a legal representative) may request the exercise of any of your rights to EGA Latin America through a notice sent to egaprivacy@ega.ae that shall contain the following information:

• Your name and domicile or other means to receive notices;
• Documents evidencing your identity or the capacity and identity of your legal representative;
• Clear and precise description of the personal data in relation to which any of the referred rights are sought to be exercised, unless it concerns the right of access;
• The description of the right you intend to exercise;
• If you are exercising your right to rectification, you shall include the amendments to be made and any documents supporting your request; and
• Any other element or document that facilitates the localization of your personal data.

We usually act on requests and provide information free of charge. Charges may only be made to cover the costs of reproduction, copies or delivery of the information or to cover costs of providing the information for repeated requests within a year.

Please consider your request responsibly before submitting it. We will respond as soon as we can. If we need more information to process your request, EGA Latin America will send you a request for additional information to the email address you provided. You will have ten business days to respond. If you don’t reply within that time, your request will be dismissed.

EGA Latin America will inform you of the decision made regarding your request within a maximum period of twenty business days from the date the request or any additional information pursuant to the above paragraph was received. If the request is granted, EGA Latin America will execute it within fifteen business days from the date the response is communicated.

The time periods mentioned above may be extended once for an equal period, provided that the circumstances of the case justify the extension.

If your request consists of the right to access to your personal data, we will deliver the information upon prior verification of your identity or the identity of your legal representative.

Your request may be dismissed in whole or in part for any of the following causes:

• If you or your legal representative are not properly accredited for purposes of submitting the request;
• If the relevant personal data is not being held by EGA Latin America;
• If third party rights are affected;
• In case there is legal impediment, or a resolution from a competent authority, that restricts access to personal data, or prevents the rectification, cancellation, or opposition of the same; and
• In case the corresponding rectification, cancellation or opposition has been previously made.

If your request is dismissed, EGA Latin America will inform you of the reasons for the dismissal and send to you any supporting evidence for the dismissal.

Linking to other websites

Our website or marketing email messages sometimes include links to other websites which are not within our control. Once you have left our website/marketing email message, we cannot be held responsible for the content of other websites or the protection and privacy of any information which you provide to those websites. You should exercise caution and look at the privacy notice applicable to the website in question.

How to find more information about our website

For more information, you can view our website terms and conditions which explain the terms on which you are allowed to use this website (https://www.egalatam.com/en) here

Contact us

If you have questions or concerns about this privacy notice or about the processing of your personal data, or need additional information, please contact us at informationcenter@ega.ae or at our offices located in Av. P.º de la Reforma 483, 14^th floor, Cuauhtemoc, 06500, Mexico City, Mexico.

You can also use EGA’s ‘Your Voice’ report line to ask a question or to report a concern. The Your Voice platform is hosted by an external provider bound by strict obligations of confidentiality. It is available 24/7, in multiple languages, and has the option for the reporter to remain anonymous.

To use the Your Voice report line, please visit https://ega.ethicspoint.com. Please note that the Your Voice page is hosted on EthicsPoint's secure servers and is not part of EGA’s website or intranet.

Changes to this privacy notice

EGA Latin America will regularly review and update this privacy notice when changes are made to the ways in which we collect, use, disclose and/or process personal data. In such a case, EGA Latin America will notify you of the updated privacy notice through EGA Latin America’s website.

This privacy notice was last updated on 12 May 2025.