In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter, the “Law”), its Regulations, and other applicable provisions, and in order for you to make an informed decision regarding the processing of your information or that of your family members, we hereby make available to you this notice concerning the use of your personal data. This notice identifies the entity responsible for your information; the purposes or activities that require the collection, use, and storage of your personal data; the third parties to whom your personal data will or may be transferred; the mechanisms through which you may exercise your rights; and other relevant information.

This Comprehensive Privacy Notice (the “Privacy Notice”) will be made available to individuals interested in purchasing or obtaining, or who have already obtained, health insurance from AUNA SEGUROS, S.A. (formerly Dentegra Seguros Dentales, S.A.).

This Privacy Notice will be available in both physical and electronic formats and may be consulted at any time on the following websites: www.dentegra.com.mx, under the “Privacy Policies” section, and www.auna.org/mx, under the “Legal” section.

Identity and Address of the Data Controller

AUNA SEGUROS, S.A. (formerly DENTEGRA SEGUROS DENTALES, S.A.), hereinafter and interchangeably referred to as “Auna,” “Auna Seguros,” or the “Data Controller,” is the entity responsible for the personal data provided or obtained for the purposes disclosed herein.

Auna Seguros designates the following address for receiving notices and communications:

Insurgentes Sur 1458, Floor 20, Colonia Actipan, Benito Juárez Borough, Postal Code 03230, Mexico City, Mexico.

What Personal Data Do We Use and May We Request?

For the purposes established in this Privacy Notice, Auna Seguros may process the following categories or types of personal data:

• Identification and contact information.

• Employment information.

• Financial and asset-related information.

• Physical characteristics data.

• Electronic data.

• Sensitive personal data, specifically information concerning a person’s current, past, or future health status and personal data belonging to minors.

Personal data belonging to third parties, such as beneficiaries and/or insured persons, provided by the data subject to Auna Seguros for the fulfillment of the purposes identified in this Privacy Notice, may only be disclosed if the data subject has previously informed such third parties of the processing of their personal data by Auna Seguros, or if you have the legal authority to represent such person as their legal representative, guardian, or parent.

Sensitive Personal Data

Information concerning a person’s current, past, or future health status, as well as personal data relating to a minor—that is, children under twelve years of age and adolescents who are twelve years of age or older but under eighteen—is classified as “sensitive personal data.”

The Data Controller will process such information confidentially and in accordance with the security measures required under applicable laws and regulations. We may request sensitive personal data to evaluate your application for any of the health insurance products offered by Auna Seguros that meet your specific needs or are of interest to you, provided that you authorize such processing.

When legally required or when determined by Auna Seguros, we will request your express written consent before processing any sensitive personal data. Such consent may be obtained through any physical or electronic means that provides evidence that it was granted.

Personal Data of Third Parties

Under certain circumstances, you may wish to provide Auna Seguros with personal data belonging to third parties for the purpose of designating beneficiaries or obtaining information regarding health insurance products related to the interests of such third parties.

In such cases, you will be responsible for informing them that you have provided their personal data to Auna Seguros, or you will be responsible for providing such information as the legal representative, guardian, or parent of the data subject.

In all cases, you must inform such third parties of the existence and contents of this Privacy Notice.

By providing personal data belonging to third parties, you represent that there is no legal restriction preventing you from providing such information to Auna Seguros or, alternatively, that you have previously obtained the consent of the relevant data subjects to share their information with Auna Seguros, and that such information is accurate and complete.

Personal Data of Minors

For the purposes established in this Privacy Notice, the Data Controller will not collect personal data belonging to minors, except when you purchase insurance for, or designate as a beneficiary, a minor, and such information is necessary to provide medical care to a person under eighteen years of age.

The Data Controller will only process personal data belonging to minors when such data is provided personally or directly by their parents and/or guardians, with the latter’s express written consent.

Parents and/or guardians may exercise the rights of Access, Rectification, Cancellation, and Objection, collectively referred to as “ARCO Rights,” at any time, or withdraw their consent to the processing of personal data belonging to minors that they have provided for any of the purposes established in this Privacy Notice, whenever permitted under applicable law.

For What Purposes Will We Use Your Personal Data?

The personal data you provide to the Data Controller will be processed for the purposes described in this section.

When you request information regarding health insurance products of interest to you or purchase an insurance policy, we may process your personal data for the following purposes:

Primary Purposes

• To receive and analyze your insurance application.

• To authenticate and verify your identity in accordance with Auna Seguros’ internal procedures.

• To analyze and evaluate your insurance application in order to identify and determine any associated risks.

• To prepare and provide quotations that include premiums, deductibles, and copayments for the insurance products previously requested.

• To select and assign insurance coverage or programs appropriate to your specific needs.

• To issue the insurance policy establishing the terms and conditions agreed upon with Auna Seguros and to make any requested amendments to such policy.

• To review, consult, and store information concerning your medical records and health status in order to determine whether coverage is applicable.

• To communicate with you through established channels, including email, telephone, or instant messaging applications such as WhatsApp, for assistance, follow-up, and, where applicable, guidance and support.

• To comply with the obligations arising from insurance agreements entered into between you and Auna Seguros, in accordance with the Insurance Contract Law and other applicable laws and regulations.

• To carry out billing and collection processes relating to insurance products purchased from Auna Seguros.

• To manage, control, and administer communications between the policyholder, beneficiaries and/or insured persons, and Auna Seguros in connection with requests for information, clarifications, complaints, disputes, and/or claims.

• To ensure compliance with legal provisions regarding the prevention and identification of transactions involving funds of unlawful origin, anti-corruption requirements, and other applicable laws and regulations through the implementation of administrative and technical procedures established by Auna Seguros for such purposes.

• To manage and carry out judicial and out-of-court debt collection activities.

• To communicate with a family member or third party designated by the policyholder in medical emergencies requiring that such person be notified or informed.

• To prevent, detect, and correct breaches of applicable laws and regulations and Auna Seguros’ internal policies.

• To manage and coordinate administrative and/or judicial proceedings in order to protect Auna Seguros’ interests.

• To maintain historical and statistical records of policyholders.

• To make medical referrals or refer you to third-party healthcare professionals, clinics, or laboratories in order to ensure timely care, diagnosis, treatment, or continuity of medical care, in accordance with your profile, needs, and express request.

Secondary Purposes

• To promote, market, and conduct commercial prospecting activities regarding the products and services of Auna Seguros and subsidiaries or affiliates belonging to the same corporate group, Grupo AUNA.

• To send promotions, advertising information, or campaigns relating to hospital products and services by email, telephone calls, SMS messages, or instant messaging applications such as WhatsApp, in accordance with your interests and preferences.

• To send personalized advertising regarding products or services offered by the Data Controller or affiliated companies, based on results obtained through services such as the “Wellness Test” or similar tools.

• To generate statistical health analyses in order to improve the services offered and conduct health-related studies.

• With your consent, to record, photograph, or otherwise capture your image, voice, and opinions for promotional, advertising, or institutional communication purposes through the Data Controller’s physical media, electronic media, and social media accounts.

• To analyze data using analytics, artificial intelligence, and/or big data technologies in order to communicate offers, promotions, and marketing materials from the Data Controller, Grupo Auna companies, and, where applicable, their business partners, in accordance with the interests of the data subject.

• To analyze data through analytics, artificial intelligence, and/or big data technologies in order to offer and design insurance products for prospective clients and policyholders, improve previously purchased insurance products, and personalize our product and service offerings in accordance with your history and profile.

• To apply assessment tools such as the Wellness Test in order to generate personalized recommendations, send preventive health information, manage communications with the data subject, analyze the use of such tools, and conduct statistical and historical studies related to health and well-being.

Should you not wish for your personal data to be processed for any of the secondary purposes, you will have five (5) business days from the date on which this Privacy Notice was made available to you to communicate your refusal by sending an email to une.mx@auna.org.

Your refusal will not affect the provision of any services or products that you request or purchase from us.

Consent to the Processing of Your Personal Data

For the purposes disclosed herein and in connection with the different categories of personal data that we may request and obtain, the Data Controller will obtain the consent required by law. For such purposes, we will make physical or electronic means available to you through which you may provide your consent.

With Whom May We Share Your Personal Data?

Your personal data, including sensitive personal data, may be transferred within or outside Mexican territory to the recipients and for the purposes listed below:

• Holding companies, subsidiaries, or affiliates belonging to the same corporate group as Auna Seguros, collectively referred to as Grupo AUNA: To centralize the storage of information, prepare statistics, maintain historical records of policyholders, carry out commercial prospecting, send promotions concerning Grupo AUNA products or services, and conduct other marketing activities.

• Administrative and/or judicial authorities, agencies, registries, and government or public entities: To comply with obligations established under applicable laws and regulations or to respond to duly justified and reasoned requests issued by such entities.

• Insurance companies, insurance agents and brokers, reinsurance companies, bonding companies, assistance and legal advisory companies, associations, civil organizations, and statistical associations: To select risks, verify eligibility, process claims arising from insured events, detect and prevent irregular activities or fraud, verify that the insured amounts of policyholders have not been affected by irregularities, and, in certain cases, conduct commercial prospecting activities.

• Laboratories, pharmacies, medical and hospital care centers, and healthcare professionals other than Auna Seguros: When recommended for the provision or follow-up of healthcare treatments provided to Auna Seguros.

• Employer companies and workplaces: To comply with obligations arising from group insurance policies purchased from Auna Seguros.

The transfers described above may be carried out without your consent in accordance with Article 36 of the Law. In all other cases, your personal data will not be transferred to third parties without your prior consent.

Your personal data may also be transferred to the following category of recipients for the purposes identified below:

• Nonprofit associations and organizations and/or entities related to the insurance industry: For the purpose of exchanging statistical information related to the insurance sector.

When legally required or when determined by the Data Controller, we will request your express written consent before carrying out any transfer. Such consent may be obtained through any physical or electronic means that provides evidence that it was granted.

ARCO Rights

As the holder of your personal data, you have the right to exercise your rights of Access, Rectification, Cancellation, and Objection, collectively referred to as “ARCO Rights.”

These ARCO Rights include:

• Access: Your right to know what personal data we hold about you and to obtain information regarding the conditions and general characteristics of its processing.

• Rectification: Your right to request the correction of your personal data at any time when, for any reason, it is incorrect, inaccurate, or incomplete in our databases.

• Cancellation: Your right to request that we delete your personal data through its initial blocking and subsequent permanent deletion.

• Objection: Your right to provide a legitimate reason why we must cease processing your personal data.

To exercise any of your ARCO Rights, you may submit a request by sending an email to une.mx@auna.org or by delivering it to the following address:

Insurgentes Sur 1458, Floor 20, Colonia Actipan, Benito Juárez Borough, Postal Code 03230, Mexico City, Mexico.

Your request must include:

• Your full name and address, or another means through which we may communicate our response to your request.

• A copy of a document proving your identity and, where applicable, proof of legal representation if another person is exercising the right on your behalf.

• A clear and precise description of the ARCO Right you wish to exercise and the personal data related to your request.

• Where applicable, any other information or documentation that may help Auna Seguros locate your personal data or support your request when requesting rectification or objecting to its processing.

Auna Seguros will respond to your request within twenty (20) business days following the date on which it is sent and received.

Should the request be approved, it will be implemented within fifteen (15) business days following the date on which our response is communicated to you.

Should the information and/or documentation provided with your request be incomplete, incorrect, and/or insufficient, or should the documents required to prove your identity or the applicable legal representation not be included, we will request that you correct and remedy the relevant deficiencies before the request can be processed.

You will have ten (10) business days to respond to the request for additional information and correct your application. Otherwise, the request will be deemed not to have been submitted.

The use of electronic means to exercise your ARCO Rights authorizes Auna Seguros to respond to the corresponding request through the same means, unless you clearly and expressly indicate another means of contact in your request.

Please note that ARCO Rights are not absolute and may be partially or entirely denied in certain circumstances, in accordance with the general exceptions established under the Law. In all cases, Auna Seguros will explain the reasons and grounds supporting its decisions.

Withdrawal of Consent

In certain cases, you may withdraw your consent to the processing of your personal data. However, such withdrawal cannot have retroactive effects and therefore cannot affect situations, procedures, or transfers carried out before your consent was withdrawn.

Please note that certain public-policy provisions may require us to retain your information for a legally mandated minimum period. In such cases, we will retain your information solely for the purpose of complying with those legal requirements.

Should you wish to withdraw your consent, you may submit a request by sending an email to une.mx@auna.org, following the instructions applicable to the exercise of ARCO Rights.

Restrictions on the Use or Disclosure of Your Personal Data

You may restrict the use or disclosure of your personal data by submitting the corresponding request in accordance with the procedure and instructions applicable to the exercise of ARCO Rights.

Auna Seguros has mechanisms and procedures in place to ensure the inclusion of certain personal data in its internal exclusion lists in order to prevent such data from being disclosed.

In such cases, data subjects who request registration on an exclusion list will be provided with the corresponding registration certificate.

Use of Cookies and Other Technologies

Should you access our services or contact Auna Seguros through websites, portals, or mobile applications, please review the specific information contained in this section.

To improve our policyholders’ experience and collect information concerning the use of our websites, portals, and mobile applications, we use cookies and/or web beacons.

Cookies are text files that are automatically downloaded and stored on the device through which you access Auna Seguros services.

Web beacons are images embedded in a website or email and are used to monitor website activity and the manner in which users interact with it.

These technologies allow us to collect information such as your IP address, the length of time you interact with a webpage, the type of browser used, and whether you open our emails, among other information.

These operations allow our systems to recognize you, store your browsing preferences, and enable technological functionalities necessary for the operation of our websites, portals, or mobile applications, including video playback, audio file downloads, device location features, and interactive forms.

Cookies and other technologies may be disabled. For instructions on how to disable them, please consult the help menu of the browser on the device through which you are accessing Auna Seguros websites, portals, or mobile applications.

Please note that disabling cookies may prevent Auna Seguros websites, portals, or mobile applications from being displayed or operating correctly.

Changes to This Privacy Notice

Auna reserves the right to modify, update, expand, and/or otherwise change the contents and scope of this Privacy Notice at any time and at its sole discretion.

In such cases, we will publish the changes on our websites at www.dentegra.com.mx, under the “Privacy Policies” section, or at www.auna.org/mx, under the “Legal” section.

Should you have any questions or require clarification regarding this Privacy Notice, you may contact us by email at une.mx@auna.org.

Last updated: November 19, 2025