In accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter referred to as "the Law"), this Privacy Notice is issued on the following terms:
DATA CONTROLLER Luis Angel Rodríguez Pérez, with an address at Frontera 32, Interior 300, Colonia Roma Norte, Cuauhtémoc, C.P. 06700, Mexico City, Mexico, is responsible for the collection, disclosure, storage, use, handling, processing, and/or disposal of your personal data (hereinafter the "Controller").
PERSONAL DATA COLLECTED The personal data collected from data subjects includes:
Identification Data: A copy of official identification, full name, date and place of birth, nationality, Federal Taxpayer Registry (RFC), Unique Population Registry Key (CURP), and for foreigners, a valid temporary or permanent resident card issued by the National Institute of Migration.
Contact Data: Fiscal address, residential address, email address, and telephone number.
MEANS OF COLLECTING PERSONAL DATA Your personal data may be collected through the following means: a) Email b) Website c) Telephone d) Optical and electronic media
PURPOSE OF PERSONAL DATA PROCESSING The personal data collected from data subjects will be used for the following purposes: (i) To contact you and follow up on your comments, complaints, and service proposals; (ii) to provide you with advice and information regarding the services offered by the Controller; (iii) for the Controller to provide you with its services; (iv) to create and update client files; (v) to build a database of the Controller's clients and create a client directory for statistical purposes and the Controller's internal control; (vi) to draft the service agreement between you and the Controller; (vii) to comply with the terms of contracts entered into with the Controller; (viii) to fulfill legal obligations and requirements from competent authorities; (ix) to send offers, promotions, event notifications, news, articles of interest, and new information related to the services provided by the Controller; (x) to inform you about changes made to any of the services you have contracted; (xi) to inform you of any changes to this Privacy Notice.
EXCEPTIONS It should be noted that in accordance with the Law, there are instances where your consent is not necessary for the processing of your personal data. Therefore, the absence or refusal of your consent will not prevent the Controller from processing your personal data in accordance with the Law and other applicable regulations.
OPTIONS AND MEANS OFFERED BY THE CONTROLLER TO LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA The personal data of data subjects will be treated with the strictest confidentiality. The Controller will implement administrative, physical, and technical security measures in its internal security policies and procedures to prevent unlawful disclosure of data and limit its use to what is established in this Privacy Notice.
TRANSFER TO THIRD PARTIES The Controller will not transfer the personal data collected from data subjects to third parties. However, in accordance with Article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties, there are instances where the Controller may transfer your personal data without your consent being necessary for such a transfer. If your personal data is transferred to third parties, the Controller will inform the recipients of this Privacy Notice and the purposes for which your data was collected. The recipient's processing of the transferred data must also comply with the terms of this Privacy Notice, assuming the same obligations outlined herein.
MEANS TO EXERCISE DATA SUBJECT'S RIGHTS At any time, you or your duly accredited legal representative may exercise your rights of Access, Rectification (if you believe the data is wrong or inaccurate), Cancellation (if you believe the data is not being processed correctly), Opposition (if you do not want your data processed for specific purposes), and/or Revocation (if you no longer wish for the Controller to use your personal data). The exercise of one right does not preclude the exercise of another, and none is a prerequisite for exercising another.
To exercise your aforementioned rights, you must send your request to our personal data department at the email address lrodriguez@lcb.mx or directly to our address at Frontera 32, Interior 300, Colonia Roma Norte, Cuauhtémoc, C.P. 06700, Mexico City, Mexico. The request to exercise your rights must contain the following information: (i) your name; (ii) an email address for us to notify you of the response; (iii) a clear and precise description of the data for which you seek to exercise the corresponding right; (iv) the purpose of the request; (v) any element that facilitates the location of the data; and (vi) if the request is sent by your legal representative, they must prove their identity with the corresponding document. The response time for your request will be 20 business days from the day the request for access, rectification, cancellation, or opposition is received. The response will be communicated to you within the aforementioned period at the email address you provided in your request. Once you receive this notification, you will have 15 business days to make it effective if it is deemed appropriate. You may revoke your consent for us to process your personal data at any time, so that we stop using it. To do so, you must submit a request in the terms mentioned for exercising your ARCO rights. The procedure will be the same as that for exercising ARCO rights. If your request is granted, your data will no longer be processed by the Controller.
CHANGES TO THE PRIVACY NOTICE Any changes to this Privacy Notice will be communicated to you through the following means: i. Via email, which will be sent by the Controller to the email address registered for contact with you. ii. On the website www.lcb.mx. Data subjects are also informed that the Privacy Notice may be modified at any time to address legislative changes or modifications to the Controller's internal policies. If the purposes for which your personal data is processed are modified, your express or implied consent will be requested again, if necessary, depending on the specific case.
DATA SUBJECT'S CONSENT If the data subject does not express opposition to the processing of their personal data in accordance with the terms of this Privacy Notice, it will be understood that they have read, understood, and agreed to the terms set forth herein and, consequently, have implicitly given their consent for these purposes. If you partially or fully disagree with the content of this Privacy Notice, please notify us of your objection and disagreement by sending an email to lrodriguez@lcb.mx, addressed to the personal data protection department.
