GLOBAL PRIVACY NOTICE

Constellation Brands Inc., together with its subsidiaries listed in Annex A (hereinafter, the "Controller"), with address at 207 High Point, Victor, NY 14564, is responsible for the processing of your personal data in accordance with this Privacy Notice.

This Notice also applies to participants located in the United States (including Texas and Illinois) and Mexico.

For participation in the "1000 Brewers" contest, the Controller may collect the following categories of personal data:

Identification data:

• Full name
• Employee ID

Contact data:

• Email address
• Phone number
• Location
• Photo (optional)

The Controller does not collect sensitive personal data for this contest.

3.1 Primary purposes (necessary)

Personal data will be used to:

• Manage registration and participation in the contest
• Verify the identity and eligibility of participants
• Administer the contest platform
• Contact participants (notifications, results, logistics)
• Deliver prizes or recognition
• Comply with legal and regulatory obligations

3.2 Secondary purposes (not necessary)

Additionally, and subject to your consent where applicable, your data may be used for:

• Sending email notifications related to the contest (round openings, reminders, results, and official communications) during the contest and until prize delivery.

You may opt out of secondary purposes at any time in accordance with the mechanisms indicated in this Notice.

To fulfill the purposes described above, the Controller may share your personal data with:

• The contest platform provider (data processor), which will process data exclusively for contest administration
• Technology or administrative service providers related to the contest
• Competent authorities when required by law

In all cases, the Controller ensures that such third parties:

• Comply with confidentiality obligations
• Implement adequate security measures
• Process data in accordance with the Controller's instructions

Where transfers require consent under applicable law (particularly in Mexico), such consent will be obtained in advance.

Due to the global nature of the contest, personal data may be transferred to and processed in countries other than your country of residence, including the United States and Mexico.

The Controller implements contractual and organizational measures to ensure an adequate level of protection in such transfers in accordance with applicable regulations.

6.1 For individuals in Mexico (ARCO rights)

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Cancel your data
• Object to its use

6.2 For individuals in the United States

Depending on your state of residence, you may have rights such as:

• Access to personal information held about you
• Request correction or deletion of data
• Limit the use or disclosure of your information

6.3 Exercise of rights

To exercise your rights in Mexico, you must submit a request to protecciondedatos@cbrands.com

Your request must include:

• Full name
• Contact method
• Clear description of the request
• Information that allows identifying your data

To exercise your rights in the United States, you must submit a request to privacy@cbrands.com

You may limit the use of your data for secondary purposes by sending a request to the emails listed above, depending on your geographic location.

The Controller implements reasonable technical, administrative, and physical measures to protect your personal data against:

• Unauthorized access
• Loss, alteration, or improper disclosure

Personal data will be retained only for the time necessary to fulfill the purposes described in this Notice and in accordance with applicable legal obligations.

The Controller reserves the right to modify this Privacy Notice at any time. Changes will be published through the contest platform or via email.

By registering for and participating in the "1000 Brewers" contest, you acknowledge that you have read and understood this Privacy Notice and consent to the processing of your personal data for primary purposes.

Where applicable, you grant consent for secondary purposes when permitted by applicable law.

For any questions regarding this Privacy Notice or the processing of your personal data, you may send an email in Mexico to protecciondedatos@cbrands.com or in the United States to privacy@cbrands.com