A. IDENTITY AND ADDRESS OF THE RESPONSIBLE PARTY

MGJL Proveedor (hereinafter "the responsible"), located at Aldama 24-2, Col. El Llano Segunda Sección, C.P. 42803, Tula de Allende, Hgo. Mexico, is responsible for this Privacy Notice.

B. PERSONAL DATA TO BE PROCESSED

Personal data (hereinafter "data") will be processed in accordance with the applicable legal standards.

The "responsible" directly obtains from the "data subject" some of the following personal data when visiting our website or using our online services and through other sources:

We collect your personal data directly when you provide it to us through various means, such as when you give us information to provide you with a service. The data we obtain in this manner includes:

Name, Address, Gender, Date of Birth, ID Number, Federal Taxpayers Registry, phone number, email address, relevant data, profession and occupation, professional license, passport number, any other information for registering in the "owner's" programs or fulfilling the "owner's" business activities within the categories of data: identification, labor, patrimonial, academic, and physical characteristics.

According to the principles of responsibility, information, certainty, good faith, and trust, the "responsible" presumes that the data provided by the "data subject" is accurate, truthful, and personal.

SENSITIVE PERSONAL DATA

We inform you that, to fulfill the purposes outlined in this Privacy Notice, sensitive personal data will be collected and processed, such as: information related to your current and future health, racial or ethnic origin, genetic information, religious, philosophical, and moral beliefs, sexual preference, or any other data deemed sensitive by law.

We are committed to processing such data under the strictest security measures to ensure confidentiality. We require your explicit consent for the processing of your sensitive personal data. By sending sensitive personal data through the "responsible" sites, you grant your explicit consent and accept that this data will be processed according to the terms and conditions of this Privacy Notice.

C. PURPOSES OF DATA PROCESSING

NECESSARY PURPOSES

The collection of data will be through the website provided by the "responsible" or directly for the "responsible" database. Occasionally, data provided by phone when requesting information about MGJL Proveedor is also protected and collected solely to ensure the service you request from the "responsible".

The data collected by the "responsible" will be used for the purposes notified at the time of collection, which include:

Compliance with applicable and current legislation and authority requirements; personnel management; generation of studies, statistics, metrics, programs, reports, and projects; sending advertising material; sending information about services and their updates; receiving and following up on complaints and requests; access and security registration; promotional visits; coordination of congresses and events; providing services and products.

ADDITIONAL NON-NECESSARY PURPOSES

During the "responsible" activities, academic, social, cultural, leisure, recreational, or sports events will be held, as well as surveys, polls, or the receipt of informational newsletters and/or invitations to activities conducted by the "responsible."

The "data subject" must expressly state their refusal for the processing of personal data for additional non-necessary purposes. Data such as images or voices obtained by the internal security systems of the event venues conducted by MGJL Proveedor are not collected, requested, or processed by the "responsible party."

During the "responsible" activities, they may capture and/or record personal images or voices, but such recordings will be used solely for academic, research, and/or dissemination purposes related to the activity.

The "responsible" does not request data from minors. If a minor provides data, their parents or guardians must contact the "responsible" directly to make the corresponding request according to this Privacy Notice.

D. TRANSFER OF PERSONAL DATA

Unless expressly stated otherwise by the data subject, they authorize the "responsible" to share or transfer data nationally with a limited number of the "responsible" employees and its affiliates, subsidiaries, or plant, certain companies with which MGJL Proveedor might have joint programs, and third parties contracted by the "responsible" to perform activities for MGJL Proveedor who may access personal information.

The "responsible" understands that you grant consent when enrolling in a program conducted jointly with another company that may require access to your personal information. Therefore, all personnel are trained on the importance of privacy and how to handle personal data appropriately and securely. Additionally, the "owner" requires its suppliers or contractors to keep personal information confidential and use it only to perform MGJL Proveedor's functions.

E. CONSENT FOR THE TRANSFER OF PERSONAL DATA

The data subject expressly consents to the "responsible" transferring their data to the specified legal entities to fulfill the purposes outlined in this Privacy Notice. If the data subject does not consent, they must expressly indicate which transfers they do not consent to and will exempt the "responsible" from any lack of service or activities by the non-consented third party.

The data will be protected with administrative, technical, and physical security measures to prevent damage, loss, alteration, destruction, use, access, or disclosure prohibited by the Law, the Regulation, or the Guidelines.

Data provided to the "responsible" will be temporarily stored to fulfill obligations related to our services or products, unless there is a legal provision, administrative or judicial mandate, or personal request to the contrary.

F. METHODS FOR EXERCISING ARCO RIGHTS

To exercise your rights of access, rectification, cancellation, or opposition (ARCO), you must submit your request in writing or electronically as an attached file in .jpg or .pdf format, addressed to the Data Protection Officer: LUIS GERARDO RODRIGUEZ PEREZ, at Calle Aldama 24-2, Col. El Llano Segunda Sección, C.P. 42803, Tula de Allende, Hidalgo, Mexico, during office hours from 9:00 AM to 2:00 PM or via email: privacidad@mgjlproveedor.com

Your request must include at least: 1) full name, address, and email address for communication with the requester or their legal representative; 2) documents proving identity (ID Card or passport) or that of the legal representative, including a power of attorney; 3) a clear and precise description of each data item for which ARCO rights are exercised; 4) any other data or elements that assist in locating the data; and 5) signature of the data subject or their legal representative.

If any data is inaccurate, incorrect, or incomplete, the data subject or their legal representative must clearly state in their request the modifications or updates the "responsible" should make and provide the necessary documentation to support the request.

The "responsible" will decide on the request within 20 business days following receipt of the ARCO request, and within the following 15 business days, the decision regarding the data will be communicated by postal response to the address provided in the ARCO request or the email address indicated or from the email address used to send the request.

The deadlines set in this Privacy Notice may be extended by equal periods only once.

G. MECHANISMS AND PROCEDURE FOR REVOCATION OF CONSENT

The data subject may revoke their consent to the "responsible". To revoke consent, the data subject must submit their request in writing or electronically as an attached file in .jpg or .pdf format, addressed to the Data Protection Officer: LUIS GERARDO RODRIGUEZ PEREZ, at Calle Aldama 24-2, Col. El Llano Segunda Sección, C.P. 42803, Tula de Allende, Hidalgo, Mexico, during office hours from 9:00 AM to 2:00 PM or via email: privacidad@mgjlproveedor.com

The request must include at least: 1) full name, address, and email address for communication with the requester or their legal representative; 2) documents proving identity (ID Card or passport) or that of the legal representative, including a power of attorney; 3) a clear and precise description of the purpose for which you wish to revoke consent or restrict its use; 4) any other data or elements that assist in locating the data; and 5) signature of the data subject or their legal representative.

The "responsible" will decide on your request within 20 business days following the receipt of the ARCO request, and within the following 15 business days, the decision regarding the data will be communicated by postal response to the address provided in the ARCO request or the indicated email address or from the email address used to send the request.

The deadlines established in this Privacy Notice may be extended by equal periods only once.

Under the "Law", it is understood that the data subject tacitly consents to the processing of their data if they do not express opposition at the time of presenting the Privacy Notice.

H. CHANGES TO THE PRIVACY NOTICE

The conditions and specifications of this Privacy Notice may be modified by the "responsible." If there are any changes to this Privacy Notice, they will be communicated via email.

Version 1.0 C: July 18, 2024.

Privacy policy
for MGJL Proveedor