PRIVACY NOTICE PRO CONTACTO3 SERVICES, S.C.

PRIVACY NOTICE

This privacy notice (the "Notice") is disclosed in accordance with Articles 16 and 17 of the Federal Law on the Protection of Personal Data in Possession of Individuals (the "Law"). The Law aims to protect personal data held by individuals, in order to regulate their legitimate, controlled and informed processing and in order to guarantee the privacy and the right to information self-determination of individuals.

En virtud de lo anterior y del presente Aviso, usted tendrá pleno control y decisión sobre sus datos personales. Por lo tanto, le recomendamos que lea atentamente la siguiente información.

1. Definitions

The concepts used in this Notice, defined in accordance with the Law, shall be indicated below. Personal Data: Personal Data means any information concerning You. Sensitive Personal Data: Sensitive personal data means personal data that affects the most intimate sphere of You, or whose misuse may give rise to discrimination, or poses a serious risk to you. Data: Personal data and sensitive personal data shall mean data. You: You will mean the natural person to whom the personal data and sensitive personal data correspond Responsible: Pro Contacto3 Servicios S.C., who will carry out the processing of your data, means Responsible for Pro Contacto3 Services S.C., who will carry out the processing of your data. ARCO Rights: ARCO Rights to the rights of access, rectification, cancellation and opposition provided for in article 22 of the Law.

2. Data of the Responsible

The Responsible is a company legally constituted under Mexican law and designates as a conventional domicile for the legal effects to which there is in relation to this Notice the one located in Avenida Revolución 779 int 2, Colonia Nonoalco, Benito Juárez Delegation, Mexico Federal District, C.P. 03700. The Controller is committed to the protection of all personal data and sensitive personal data that you provide to him/ her.

3. Information provided by you

You will provide the Controller with the following personal data and sensitive personal data: Identification: full name, email, address, telephone number, mobile phone number, signature, date of birth, age, nationality, RFC, CURP, identification document number. Academics: level of schooling, degree, card number, among others. Assets and financial data: bank account details. Personal data that will allow the Controller to identify you and the data related to the transactions between You and the Controller. Sensitive personal data will be processed under strict security measures provided for by law and other special laws, guaranteeing its confidentiality at all times. You represent that the Data provided to the Controller are truthful and you are responsible for communicating to the Controller any modification thereof through the formats designated for this purpose, which the Controller will make available to you. You empower the Data Controller to become close to Data through third parties that you have authorized against the Data Controller as references. It will be your responsibility to inform these third parties about the information you provided to the Controller and the purposes thereof, and it is not the Responsibility of the Controller to inform those third parties about the content of this Notice.

  • Academics: level of schooling, degree, card number, among others.

  • Assets and financial data: bank account details. Personal data that will allow the Controller to identify you and the data related to the transactions between You and the Controller. Sensitive personal data will be processed under strict security measures provided for by law and other special laws, guaranteeing its confidentiality at all times. You represent that the Data provided to the Controller are truthful and you are responsible for communicating to the Controller any modification thereof through the formats designated for this purpose, which the Controller will make available to you. You empower the Data Controller to become close to Data through third parties that you have authorized against the Data Controller as references. It will be your responsibility to inform these third parties about the information you provided to the Controller and the purposes thereof, and it is not the Responsibility of the Controller to inform those third parties about the content of this Notice.

    • Current official identification of the legal representative.

    • Poder notarial correspondiente, carta poder firmada ante dos testigos o declaración en comparecencia de Usted

    • In cases of the right of rectification, the documentation proving the requested change according to the Data to be rectified must be included.

The response to such request will be carried out by the Responsible within a maximum period of 20 (Twenty) working days, counted from the date on which the request was received. The Controller may extend this period by up to 20 (Twenty) more business days, where the case so warrants, upon notification to You. The response to the request will be communicated to you through the options you have chosen. The options are set in the ARCO Rights exercise request. The delivery of the Data, in case of exercise of the right of access, will be free, and you must cover only the justified shipping costs or the cost of reproduction of copies or other formats. For any doubt or clarification regarding the procedure established to exercise arco rights, you must contact the Controller.

4. Purpose of data processing

The Data that you provide to the Responsible Party will be used for the purpose of: i. ii. iii. iv. v. saw. vii. Verify and confirm your identity. Evaluate the request presented by you through which you request the services provided by the Responsible. Provide you services in relation to your account. Offer other products and services. Conduct satisfaction surveys. Support the fulfillment of the Responsible's obligations. Those activities required to carry out the object of the services provided. The treatment of the Data provided by you to the Responsible Party will be limited to fulfilling the purposes set forth in this Notice and for different purposes that are compatible or analogous to those established in said Notice, without requiring your consent again. By making this Notice available to you and not expressing any opposition, it will be understood, in accordance with article 8 of the Law, that you grant the Responsible party your consent to carry out the treatment of the Data that had been provided and / or those that for any of the purposes established in this Notice provide in the future, either personally or through agents, promoters, commission agents or business partners, as well as any electronic, optical, sound, audiovisual means or through of any other technology or medium with which the Responsible comes to count. Express consent will not be necessary for the processing of Data when its handling has the purpose of fulfilling obligations derived from a legal relationship between You and the Responsible, nor in the other cases contemplated in article 10 of the Law. The foregoing without prejudice to the power you have to exercise ARCO Rights in terms of the Law. The Responsible Party informs that any unprotected email communication made through the internet may be subject to interception, theft, loss or possible alterations in which case, You may not demand any compensation from the Responsible for any damage resulting from the interception, theft, loss or alteration related to an email message between the parties.

5. Means to exercise ARCO Rights

You, by yourself or through a duly accredited legal representative, may exercise the rights of access, rectification, cancellation and opposition to the Responsible Party. To do this, you or your legal representative may go to the offices of Pro contacto3 Servicios S.C. to request a request for the exercise of ARCO Rights. You must make a request and deliver it to the Responsible, accompanied by the following documentation: Current official identification In cases where the exercise of ARCO Rights is carried out through your legal representative, you must provide: o Current official identification of the legal representative. o Corresponding power of attorney, power of attorney signed before two witnesses or statement in your appearance o In cases of the right to rectification, the documentation that proves the requested change according to the Data to be rectified must be included. The response to said request will be carried out by the Responsible within a maximum period of 20 (Twenty) business days, counted from the date the request was received. The Responsible Party may extend this period for up to 20 (Twenty) more business days, when the case so warrants, after notifying you. The answer to the request will be communicated to you through the options that you have chosen. The options are established in the request to exercise ARCO Rights. The delivery of the Data, in case of exercise of the right of access, will be free, and you must only cover the justified shipping costs or the cost of reproducing copies or other formats. For any doubt or clarification in relation to the procedure established to exercise ARCO Rights, you should contact the Responsible Party.

  • Current official identification

  • In cases where the exercise of ARCO Rights is done through your legal representative, you must provide:

6. Transfer of Data

The Responsible Party undertakes to ensure compliance with all the legal principles of protection regarding the transfer of the Data provided by you. Likewise, it expresses its commitment so that this Notice is respected at all times by the natural or legal persons to whom the Data provided could be transferred. The Responsible Party may transfer the Data between its Business Partners and their subsidiaries, as well as their affiliates, for the purposes indicated in section 4 of this Notice. National or international data transfers may be carried out without your consent, provided that the transfer is made to holding companies, subsidiaries or affiliates of the Business Partners of the Responsible; and when the transfer is necessary for the maintenance or fulfillment of a legal relationship between the Responsible and you. .

7. Disclosure and limitation of data usage

Usted podrá limitar el uso y divulgación de sus datos, realizando una solicitud al Responsable, explicando qué datos y su deseo de que los mismos no sean utilizados para recibir comunicados o promociones a través de su inscripción al Registro Público de Usuarios (REUS), padrón que está a cargo de la Comisión Nacional para la Protección y Defensa de los Usuarios de Servicios Financieros (Condusef), cuya dirección es: http://www.condusef.gob.mx.

8. Cambios al Aviso de privacidad

El presente aviso de privacidad puede sufrir modificaciones, cambios o actualizaciones derivadas de nuevos requerimientos legales; de nuestras propias necesidades por los productos o servicios que ofrecemos; de nuestras prácticas de privacidad; de cambios en nuestro modelo de negocio, o por otras causas. El Responsable se compromete a mantenerlo informado sobre los cambios que pueda sufrir el presente aviso de privacidad, a través de nuestra página de Internet http://www.procontacto.com Asimismo, Usted cuenta con el derecho a oponerse al tratamiento de sus Datos en caso de no estar de acuerdo con las modificaciones que pudiera presentar este Aviso. Para ejercer su derecho de oposición, Usted deberá enviar una solicitud de ejercicio de Derechos ARCO, de conformidad con lo señalado en la sección 5 del presente Aviso.