Privacy Notice

Del Castillo Elorza Abogados, S.C. (“DCCA” or “we”) respects your privacy and, therefore, is committed to protecting and keeping confidential the personal data that you provide us and that, for any reason, is in the possession of DCCA (the “Personal Data ”). This Privacy Notice (the “Notice”) is made available to you in accordance with the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations (hereinafter the “Law”), in order to explain the treatment that will be given to your Personal Data.

I. Personal Data that is collected. The Personal Data that we may process belongs to the following categories:

    1. Identification data: full name, address, nationality, Federal Taxpayer Registry, tax certificate, official identification, signature.
    2. Contact details: full address, email, mobile and/or landline phone number.
    3. Financial or patrimonial data: bank account information, copies of account statements.
    4. Employment data: resume, job performance, information related to previous jobs.
    5. Identification and contact data of third parties: name, telephone or cell phone, email, position, place of work, relationship with you, of people who may be asked for references (personal and work).

Additionally, DCCA may ask you to show original documentation and to deliver a copy of it, as evidence that supports the information you have provided.

II. Purposes of the treatment. The Personal Data that DCCA obtains from you, as well as its use, access, management, exploitation, transfer, disposal, storage, or disclosure (“Treatment”), will be to comply with the following necessary purposes and that derive from the employment relationship between DCCA and you: (i) analyze the origin of your contracting and registration as a supplier; (ii) develop the commercial relationship and identify you as a supplier, (iii) verify the information you have provided, (iv) internal or external audits, (v) integrate your file, (vi) guarantee the security of the facilities and protect the property and rights of DCCA, as well as the confidentiality of the information of DCCA and its clients, (vii) process payments, (viii) carry out studies, analyzes or reviews, in order to guarantee security within the workplace and the confidentiality of information owned by DCCA and its clients. For these purposes, we may, where appropriate: (i) verify compliance with policies and manuals, (ii) grant you access to the facilities and computer systems, (iii) contact and evaluate you (including your performance) for commercial purposes, (iv) verify and confirm your identity and request references, (v) conduct investigations of violations of the law and/or DCCA policies, (vi) invite you to DCCA events, (vii) DCCA advertising on social media .

III. Transfer of personal data. Your Personal Data may be transferred, inside and outside the country, for the following purposes: (i) to comply with legal requirements or requests from authorities; to safeguard the public interest or for the procurement or administration of justice; or, for the recognition, exercise or defense of a right in a judicial process, as well as in the cases specifically allowed by the Law; and (ii) customer prospects.

IV. Security measures. DCCA is committed to safeguarding the confidentiality of your Personal Data; therefore, in compliance with corporate policies and what is established in the Law, DCCA maintains the necessary security measures in order to protect DCCA’s databases and to prevent their loss, alteration, destruction, use, access or unauthorized treatment. authorized. Likewise, by signing this Privacy Notice, you agree to treat in a strictly confidential manner any information that DCCA provides you or any information to which you have access by virtue of the potential or current relationship with DCCA.

V. Exercise of rights and contact. DCCA assumes (i) that you complied with the obligations established in the Law regarding the confidentiality of personal data protection; (ii) that the Personal Data that you have provided and that you provide in the future, from time to time, is clear, correct, and up-to-date for the purposes for which it was collected and (iii) that you are empowered or authorized to provide to DCCA Personal Data. At any time, you may (i) access the Personal Data held by DCCA (right of access), (ii) rectify it when it is inaccurate or incomplete, excessively inadequate, as long as it is not impossible or requires disproportionate efforts (right of rectification), (iii) oppose the processing of Personal Data for legitimate reasons (right of opposition), (iv) cancel them, except when it could cause damage to the rights or legitimate interests of third parties or in the cases provided by Law (right cancellation), (v) limit its use and disclosure, and (vi) revoke your consent (although this may not be appropriate or mean the termination of the commercial relationship with DCCA). Said rights must be exercised by means of a written request sent to the email or physically with the attention of Mariana Arrubarrena at the address located at Av. Santa Fe No. 428. Torre III, Piso 16, Col. Desarrollo Santa Faith, Mayor Cuajimalpa, 05348, CDMX, Mexico. The request must contain and accompany: (i) full name, address and any other means to communicate the response, (ii) the documents that prove your identity (and, where appropriate, personality and identity of your legal representative); (iii) the clear and precise description of the Personal Data with respect to which one seeks to exercise any of the aforementioned rights (in the case of rectification requests, you must indicate the modifications to be made and provide the documentation that supports your request), and (iv) any other element or document that facilitates the location of Personal Data. DCCA will notify you within a period of no more than 20 business days from the date your request was received, the determination adopted, so that, if appropriate, it becomes effective within the following 15 business days. as of the date DCCA communicated the response to you. In the case of requests for access to Personal Data, the delivery will proceed prior accreditation of your identity or your legal representative, as appropriate. It will be considered that access to your Personal Data has been granted when they are made available to you, regardless of the means or format; or, plain copies of the requested Personal Data will be provided, at DCCA’s option. Regarding the revocation of your consent, please keep in mind that this will only proceed in certain cases and/or could result in the termination of the commercial relationship, since the Personal Data is necessary for its development. In case of doubts regarding the Treatment of Personal Data, or the procedure for exercising rights, we would appreciate it if you contact the “Personal Data Department” through the means indicated above in this section V.

VI. Changes to the privacy notice. Changes to this Privacy Notice will be published and made available to you through the email that you have provided us or the institutional one that was provided to you by the employment relationship.

VII. Consent. With your signature below, you state that you are aware of the content of this Privacy Notice and that you consent to the processing of your Personal Data under the terms and conditions indicated in this Notice. Said consent is also granted for the transfer of your Personal Data, in accordance with the aforementioned.