Privacy Policy

Effective as of March 20, 2026

I. INTRODUCTION

CEMEX (“CEMEX” or “we”) recognizes that individuals need to understand how their privacy is protected, so we have established the following privacy statement (this “Privacy Statement”) for our users. This Privacy Statement describes how CEMEX will collect, access, use and disclose your personal information and information related to your use of the CEMEX Autodesk Plug-in (the “Plug-in”).

For purposes of this Privacy Statement, “Personal Information” is data specifically about you, which you typically provide on a voluntary basis. Aggregate or combined information includes data that is related to you but studied as a group and does not identify you specifically. You cannot “opt-out” from having aggregate information collected except as otherwise specified in this Privacy Statement.

Cemex Innovation Holding Ltd. (“CIH”), a Swiss company that has a registered address at General Guissan Strasse 6300 Zug, Switzerland is the controller of your Personal Information. This means that it determines the purpose for which, and the means by which, your Personal Information is used and it is responsible for handling your information in accordance with any applicable law.

For the purpose of this Privacy Statement, Cemex Research Group AG (“CRG”), a Swiss affiliate of CIH that has a registered address at Römerstrasse 13, 2555 Brügg bei Biel, Switzerland and Cemex Operaciones México, S.A. de C.V. (“Cemex Operaciones Mexico”), a Mexican affiliate of CIH that has a registered address at Avenida Ricardo Margain Zozaya #325, Colonia Valle del Campestre, San Pedro Garza Garcia, Nuevo Leon, 66265, Mexico, are also joint controllers in respect of your Personal Information. Since CRG and Cemex Operaciones Mexico provide certain back office services to CIH, in certain circumstances, they will jointly decide how your Personal Information is held and used; nevertheless, CIH will be responsible for answering any data subject request as set forth in this Privacy Statement. This Privacy Statement is issued by CIH on behalf of CRG and Cemex Operaciones Mexico.

II. YOUR RIGHTS IN RELATION TO YOUR PERSONAL INFORMATION

You may review, correct and update certain Personal Information (such as your name and contact information) by contacting us using the information in the “Contact Us” section below.

Under certain circumstances, you can also:

  1. Request access to your Personal Information. You can request to receive a copy of the Personal Information we hold about you and to check that we are lawfully processing it.
  2. Request correction of your Personal Information. You can ask us to correct any incomplete or inaccurate information we hold about. We encourage you to provide us with accurate Personal Information and to let us know if your Personal Information changes. We will not assume any liability in respect of incorrect Personal Information you provide to us.
  3. Request erasure of your Personal Information. You can request to delete or remove Personal Information where there is no good reason for us to continue using or storing it. You also have the right to ask us to delete or remove your Personal Information where you have exercised your right to object to us using it, as described below.
  4. Object to our use of your Personal Information where we are relying on our legitimate interest (or those of a third party) to do so and there is something about your particular situation which makes you want to object to us using it on this ground.
  5. Request restriction of the use of your Personal Information. You can ask us to suspend the use of your Personal Information, for example if you want us to establish its accuracy.
  6. Request the transfer of your Personal Information in an accessible format to you or another organization.
  7. Withdraw your consent to the use of your Personal Information. Where you have consented to our use of your Personal Information for a specific purpose, you have the right to withdraw your consent for that specific use at any time. Once you have withdrawn your consent, we will no longer process your Personal Information for the purpose(s) you originally consented to, unless we are required to keep it to comply with the law. Please note that the withdrawal of your consent will not affect the lawfulness of our use of your Personal Information before you withdrew your consent.

In order to exercise any of the rights mentioned above, you should send us a request, through any of the means mentioned in the “Contact Us” section, that includes the following:

(i) your name, address, phone number and e-mail address (our response to your request will be sent to this e-mail address);

(ii) when applicable, the name of your legal representative including a copy of the document evidencing the validity of the such legal representation;

(iii) an indication of the right(s) mentioned above you wish to exercise as well as a clear and precise description of the Personal Information upon which such rights will be exercised, including any changes to be made to your Personal Information if applicable, and

(iv) any other element or document which relates to your request and/or which may help us in locating your Personal Information.

Exercising one of your rights mentioned above is not a prerequisite for and does not preclude you from exercising any other right. We will not discriminate against you for exercising your rights.

In case the information provided is erroneous or insufficient, or the required documentation in order to confirm your identity are not attached, within 5 business days following the receipt of your request, we may solicit that you provide us the necessary elements or documents to process your request. You will have 10 business days from the date in which you receive our solicitation in order to fulfill it. If you do not respond in the aforementioned period, your request will be considered as not submitted.

Cemex will inform you of the resolution within 20 business days (or the period established by applicable law, if shorter) from the date in which we received your request, so that, if resolved favorably, it is executed within 15 business days from the date in which we inform you of the resolution.

For more information on the process or requirements to exercise any of the abovementioned rights, as well as for any questions you may have in relation to the processing of your Personal Information, please contact us by using the information in the “Contact Us” section below.

III. COLLECTED INFORMATION

In order to provide you with the benefits of utilizing the BIM Concrete Studio / Plug-in, CEMEX and certain third parties as described below collect certain information from you and your devices. By using the BIM Concrete Studio / Plug-in or otherwise providing Personal Information to CEMEX, you consent to the collection, use and sharing of the data as described in this Privacy Statement.

Currently, the BIM Concrete Studio / Plug-in asks any user, in order to access any feature, their e-mail address and country of residence. In addition to the foregoing, you may also provide certain Personal Information to CEMEX in relation to your communications with us, including your name.

We do not intend to collect any Personal Information deemed sensible by Law, as it is not necessary for fulfilling any of the purposes for using your Personal Information described below.

Information collected by cookies and similar technologies

The website does not use any cookies collecting personal information or track your behaviour while using the site.

IV. USE AND SHARING OF PERSONAL INFORMATION 1. Use of Personal Information

CEMEX may use your Personal Information to communicate with you in relation to the BIM Concrete Studio / Plug-in, perform data analytics in relation to your Personal Information as well as the information you input in the BIM Concrete Studio / Plug-in, identify potential customers and send you marketing communications only when you have expressly consented to it. We rely on a number of legal bases to process the Personal Information of European Union (“EU”) users as described in the table below. We have also identified what our legitimate interests are where appropriate.

Purpose / Activity – Lawful basis for processing including basis of legitimate interest To communicate with you in relation to the BIM Concrete Studio / Plug-in — Performance of a contract with you To manage our relationship with you which may include: (a) Answering any questions or comments you in relation to the BIM Concrete Studio / Plug-in (b) Notifying you about changes to our terms or privacy policy (c) Asking you to leave a review or take a survey — (a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services to develop them and grow our business) To use data analytics on your Personal Information and information you input in the BIM Concrete Studio / Plug-in — Necessary for our legitimate interest (to better understand the construction market and our customers and to develop our business) To send you any newsletter or other marketing communications — Data subject consent

Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us using the “Contact Us” information below if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table above. Additionally, if you are an EU user and wish to learn more about our legitimate interests in using the Personal Information and how we have balanced our interests against your fundamental rights and interests, please contact us using the “Contact Us” information below. If you provide Personal Information to CEMEX, you agree to the use, collection and disclosure of the Personal Information by CEMEX for the purposes described in this Privacy Statement.

2. Sharing of Personal Information In order to provide the services in relation to the BIM Concrete Studio / Plug-in, CEMEX may share certain Personal Information with third parties acting on our behalf, including:

Third Party – Purpose Autodesk — The Plug-in integrates with Autodesk’s applications and they may have access to your Personal Information in certain cases, e.g. in certain cases where CEMEX requests support, in relation to the provision or improvement of services by Autodesk, or in connection with legal obligations or proceedings.

If CEMEX is involved in any merger, acquisition, sale of company assets, transition of service to another provider, or insolvency, bankruptcy or receivership, we have a legitimate interest in transferring your Personal Information in connection with such transaction. Also, CEMEX may disclose your information (including your Personal Information), as necessary, to regulators, courts, legal advisers and law enforcement authorities (1) if we determine a policy violation has occurred; (2) if we believe such disclosure is necessary to identify, contact or bring legal action regarding injury or interference with the rights and property of CEMEX, including to enforce CEMEX’s rights against unauthorized access or attempted unauthorized access to CEMEX’s information technology assets or against other inappropriate use of the Website; (3) to comply with laws, regulations, court orders and subpoenas or similar requests for information by authorities, or as otherwise required by law; (4) to protect your safety and the safety of others; and (5) to assist us in fraud prevention or investigation. We have a legitimate interest in sharing the Personal Information of EU users for purposes (1) and (2).

V. OPTING-OUT OF OUR MAILING LIST

CEMEX will only send you marketing or promotional communications and/or communications about other topics if you have provided your consent to receive these types of communications. To contact you, CEMEX may use the information you provide to us, including email, address, fax or phone. You may, at any time, inform us that you no longer want CEMEX to contact you for marketing purposes by sending your request to us using the contact information in the “Contact Us” section below. You may also opt-out of promotional email communications by clicking on a link provided in the promotional email message. After opting-out, you will no longer receive marketing or promotional communications but will continue to receive other messages, such as emails relating to your account or use of the BIM Concrete Studio / Plug-in.

VI. SAFEGUARDING YOUR INFORMATION

CEMEX is committed to maintaining the security of the data you provide us. However, please note that there is always some risk in transmitting information over the Internet. When you use the Plug-in, your communications may be intercepted by others. For this reason, CEMEX cannot guarantee the security and privacy of transmissions via the Internet, and we will not be liable for any lack of security relating to the use of the Website by you. You agree that you will not hold CEMEX liable for any damages resulting from any loss of privacy or security occurring in connection with any communications over such networks.

VII. TRANSFERS OF PERSONAL INFORMATION OUTSIDE OF THE EU

CEMEX is a worldwide corporate group. By using our BIM Concrete Studio / Plug-in, you authorize us to transfer and store your information outside of your home country, including in the EU, for the purposes described in this Privacy Statement. Where we transfer Personal Information from the EU to a country that do not provide an adequate level of protection, we will only do so under appropriate safeguards put in place to protect your information, such as standard contractual clauses or Privacy Shield certification. Outside of the EU, Personal Information may be transferred mainly to Switzerland, Mexico and the United States. If you would like more information about these safeguards or where to gain access to a copy of these safeguards, please contact us using the information in the “Contact Us” section below.

IX. AUTOMATED DECISION-MAKING

We do not envisage that any decisions will be taken about you using automated means.

X. HOW LONG WE KEEP YOUR PERSONAL INFORMATION FOR

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for your Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable requirements. When we no longer need to use your Personal Information as mentioned above and there is no need for us to keep it to comply with our legal or regulatory obligations, we’ll either remove it from our systems or depersonalize it so that we can’t identify you. For further information on retention periods please contact us by using the information in the “Contact Us” section below.

XI. EXCLUSIONS
This Privacy Statement addresses CEMEX’s procedures for handling the Personal Information of customers who have reached the age of majority. We do not seek to, nor do we knowingly collect, information from children. If a child has provided us with Personal Information, a parent or guardian of that child may contact us to have the information deleted from our records. To do so, contact CEMEX through the information provided below in the “Contact Us” section.

XII. CONTACT US

CEMEX has a Chief Privacy Officer located in Mexico, as well as Data Protection Officers in European countries where we have operations. You may contact CEMEX’s data privacy office at any time if you have questions, general concerns about the processing of your personal information, or any data protection issue, by sending an e-mail to dataprivacy@cemex.com. If you are an EU user and you feel that we have not answered your concerns appropriately you have the right to make a complaint to your local data protection authority. Contact details for EU data protection authorities can be found here <https://edpb.europa.eu/aboutedpb/board/members_en&gt;. If you are located elsewhere and consider we have infringed upon your personal data protection rights, please contact your local data protection authority for more information on how to exercise your right to file a complaint. In any case, we would appreciate the chance to deal with your concerns before you approach the corresponding data protection authority, so please contact us in the first instance.

XIII. UPDATES TO PRIVACY STATEMENT

From time to time, we may update this Privacy Statement, you may find the current version in bimcemex.com. If we do, we will note near the top of this page the date that any changes are made and/or when they become effective. If the changes being made are material, we may alert you to the changes in a more prominent way. Your inaction or continued use of the BIM Concrete Studio / Plug-in, after any such notices, will tell us that you agree to these changes.