1. Responsible for the processing of your personal data.

Grupo Panjosa, S.A. de C.V. (the "Responsible Party") is the legal entity that, according to the Federal Law on the Protection of Personal Data Held by Private Parties (the “LFPDPPP”), is considered the Responsible Party because it decides on the processing of the personal data collected from the data subject (the “Data Subject”), understood as the individual to whom the personal data belongs, and by the latter, any information concerning an identified or identifiable individual (the “Data”). For the Responsible Party, processing your data legitimately and in accordance with the LFPDPPP is a priority. This privacy notice complements any other simplified or brief privacy notices that the Responsible Party may have made available to the Data Subject and serves as a supplement to anything not expressly mentioned in such notices (the “Privacy Notice”).

2. Address of the Responsible Party to receive notifications.

Av. Acueducto 6075, Puerta de Hierro neighborhood, Zapopan, Jalisco, postal code 45116, Mexico.

3. Contact information of the Responsible Party.

Phone: 3326410836 and/or email: ventas@panjosa.com.

4. Purposes of processing the Data provided by the Data Subject.

The Responsible Party collects the Data for the following purposes (the “Purposes of Processing”):

  • a. Establishing a commercial relationship with the Data Subject.
  • b. Complying with the obligations acquired with the Data Subject.
  • c. Identifying the Data Subject.
  • d. Evaluating potential clients, employees, and suppliers.
  • e. Assessing the quality of the activities carried out by the Responsible Party.
  • f. Keeping in contact with the Data Subject to invite them to events related to the activities organized and promoted by the Responsible Party.
  • g. Sending reminders of events that the Responsible Party considers important due to the relationship with the Data Subject.
  • h. Marketing or advertising from the Responsible Party.
  • i. Statistical and market analysis.
  • j. Offering products and services from the Responsible Party.
  • k. Creating databases.

5. Personal data collected by the Responsible Party from the Data Subject.

To carry out the Purposes of Processing in this Privacy Notice, the Responsible Party may request the following identification Data: contact, employment, academic, banking information, account statements, patrimonial, financial, legal data, among others, as applicable.

6. Sensitive personal data.

The Responsible Party informs you that to comply with the Purposes of Processing outlined in this Privacy Notice, it does not need to collect sensitive personal data.

7. Cookies and weblogs/web beacons.

Cookies may be used on some web pages and/or applications (collectively referred to as the “Website”) of the Responsible Party. Cookies are small text files stored on your hard drive that help the Responsible Party offer a more personalized experience on its Website (the “Cookies”). For example, a Cookie may be used to store login information in an area of the Website so that the user does not have to re-enter it on subsequent visits to that area. It is the Responsible Party's policy to use Cookies to simplify navigation on its Website and facilitate registration processes.

Most browsers allow users to reject Cookies; in most cases, a visitor can reject a Cookie and continue browsing the Responsible Party's Website.

To manage the Responsible Party's Website properly, the Data Subject expressly agrees that the Responsible Party may anonymously include information about operating systems and identify categories of visitors by aspects such as types of domains and browsers. These statistics are reported in their entirety to the Website administrators. This is done to ensure that the Responsible Party's Website offers the best web experience for visitors and serves as an effective information resource.

8. Manifestation of consent.

The content of this Privacy Notice and all related information will be made available to the Data Subject, and in the event that they do not express their refusal to the processing of their Data within a maximum period of 5 days from the date the Responsible Party makes this Privacy Notice or its modifications available, it will be understood that they grant their tacit consent to the Responsible Party to process the Data based on the Purposes of Processing established in this Privacy Notice.

9. Options and means to limit the use or disclosure of the Data.

To limit the use or disclosure of the Data, the Data Subject may express their refusal directly to the contact of the Responsible Party and/or by any means of contact indicated in this Privacy Notice.

10. Means to exercise the Rights of Access, Rectification, Cancellation, and Opposition (the “ARCO Rights”).

The Data Subject has the right to access their Data held by the Responsible Party and to the details of its processing, as well as to rectify it in case it is inaccurate or incomplete; cancel it when they consider it is no longer necessary for any of the Purposes of Processing indicated in this Privacy Notice, if it is being used for non-consented purposes, or to oppose the processing for specific purposes. The Responsible Party's data area will provide the Data Subject with all necessary information to exercise their ARCO Rights.

The procedure implemented to exercise the ARCO Rights begins with the submission of the respective request, whose format and information regarding the timeframes for its attention can be obtained from the Responsible Party's contact, through any means of contact indicated in this Privacy Notice.

11. Procedure for the Data Subject to revoke their consent for the processing of their Data.

At any time, the Data Subject may revoke the consent that they may have granted to the Responsible Party for the processing of their Data. However, it is important to note that in all cases, their request may not be attended to immediately, as it is possible that due to some legal obligation, the processing of their Data must continue. Likewise, the Data Subject should consider that for certain purposes, the revocation of their consent will imply that they may not continue to receive the service they requested or the conclusion of their relationship with the Responsible Party.

To learn about the procedure and requirements to revoke their consent regarding the processing of their Data, it is necessary to contact the Responsible Party's contact, whose details are included in this Privacy Notice.

12. Transfers of Data within Mexico and abroad.

The Data of the Data Subject may be transferred and processed within and outside of Mexico if necessary for the Purposes of Processing outlined in this Privacy Notice. In this case, their Data may be shared outside of Mexico, with the company or companies that the Responsible Party deems necessary. Therefore, it is important for the Data Subject to be aware that their Data is protected as those companies, should their Data need to be sent, will operate under the same personal data protection policy.

The Responsible Party commits not to transfer their Data to other third parties unless it is required to fulfill legal obligations before competent authorities, such as tax or judicial authorities, whether federal or local. Likewise, their Data may be transferred without their consent in the cases provided for in Article 37 of the LFPDPPP, and in the cases mentioned in the preceding paragraph that fall under the assumptions of the aforementioned Article 37, with the understanding that transfers will be made under the terms established by the aforementioned law.

13. Security measures implemented.

To protect the Data of the Data Subject, the Responsible Party has implemented administrative, physical, and technical security measures to prevent loss, misuse, or alteration of the Data.

14. Modifications to the Privacy Notice.

This Privacy Notice may undergo modifications, changes, or updates due to new legal requirements, the Responsible Party's needs for the services it offers, privacy practices, or for any other reasons. The Responsible Party reserves the right to make any necessary modifications or updates to this Privacy Notice at any time, at its sole discretion.

The Responsible Party will make the updated version of the Privacy Notice available to the Data Subject on the following website: https://www.panjosa.com/.

15. Right to promote procedures for the protection of rights and verification carried out by the National Institute for Transparency, Access to Information, and Personal Data Protection (the “INAI”).

Any complaint or additional information regarding the processing of the Data or questions related to the LFPDPPP or its regulations may be directed by the Responsible Party directly to the INAI.

LEGAL NOTICE

This Privacy Notice was updated on September 22, 2022.