MASSAT & GARCÍA CONSULTING SERVICIOS, S.C. (hereinafter «MGCS«) in compliance with the Mexican federal law on the Protection of Data held by Private Parties («LFPDPP») and regulation 2016/679 of the European Parliament and of the council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data («RGPD»), is responsible for your data and is committed to ensuring that your personal information is protected and not misused.
The purpose of this Privacy Notice is to inform our prospects, customers, suppliers, candidates, employees maintaining a working or commercial relationship with MGCS, the data that MGCS may collect, the purposes for which we will handle your personal data, the term of conservation of your data and other aspects that are of essential importance regarding your personal data and/or sensitive data.
MASSAT & GARCÍA CONSULTING SERVICIOS, S.C.
Oxford No. 30, Col. Juárez, Cuauhtémoc, 06600, Mexico City, Mexico.
MGCS has a Delegate for protecting personal data whose mission is to enforce the rules in force on personal data protection. You can contact him at the following email: firstname.lastname@example.org
TYPES OF DATA COLLECTED AND CONSENT
Under the provisions of the RGPD and the LFPDPP, by accepting this Privacy Notice, the Client and User GIVE THEIR informed, express, free and unequivocal CONSENT to process the personal data collected through our website.
MGCS collects the personal data set forth hereinafter from its prospects, clients, job applicants (hereinafter «Clients and Users») through any lawful means: website, direct collection, emails, phone calls, etc., the context of providing its services.
MGCS collects, under its legal and regulatory obligations, the following information and only with the consent of its Clients and Users:
These data are collected by MGCS when requesting information, quotations, receiving applications or when offering or contracting any product, operation, or service. The data will be updated throughout the relationship with its Clients and Users.
The Clients and Users guarantee that the data provided are true, accurate, complete, and updated, being these responsible for any damage or prejudice, direct or indirect, that could be caused as a result of the breach of such obligation, beyond the possibility that Clients and Users can exercise their right of rectification.
Suppose a Customer or User provides us with data from third parties, as the person responsible or in charge of processing. In that case, they will be responsible for compliance with all applicable data protection regulations. Also, the interested party guarantees that it has obtained all legally required consents, authorizations, and/or approvals before including the personal data of third parties on our website.
Refusal to communicate to MGCS or part of this personal data may lead to the impossibility of continuing the business or work relationship with MGCS.
MGCS cannot guarantee the absolute invulnerability of the systems. Therefore, it assumes no responsibility for damages resulting from alterations that third parties could cause in computer systems, electronic documents, or files.
CONTACT FORMS AND JOB OFFERS
The data collected in the contact forms (name and email address required) and job offers on our website are not recorded in an automated file.
PURPOSE OF THE PROCESSING OF PERSONAL DATA
Under the applicable regulation, any treatment carried out by MGCS meets specific, explicit, and legitimate objectives.
These purposes are essential to answer your requests/mails/emails as prospects, job applicants and for the conclusion and execution of our services, for the respect of our legal and regulatory obligations, or meet to an objective of safeguarding our interests injustice:
Contractual and pre-contractual purposes.
Legal and Regulatory Purposes
The treatment of data that MGCS can carry out includes evaluating, analysis, use, manipulation, exploitation, transfer, elimination, conservation, safeguard, access, and any other analogous treatment that may be necessary for MGCS.
RECIPIENTS OF PERSONAL DATA
In terms of the applicable legislation, MGCS may share your personal data, only with your permission, with the following authorities and/or persons only if necessary for the performance of its mission:
MGCS does not transfer to third parties its Clients or Users’ personal data without their consent, safeguarding in this way the protection and confidentiality of their personal data under the terms of article 37 of the LFPDPPP. Nevertheless, MGCS may transfer your personal data when this transfer is provided for the LFPDPPP and/or the RGPD.
DURATION OF CONSERVATION OF PERSONAL DATA
Clients’ personal data, firm communications, personnel files, prospects files, payroll documents are retained for 5 to 10 years from the expiration of the contract, the termination of commercial or labor relations, or the last contact, in accordance with the applicable Mexican tax legislation.
Concerning newsletters, data will be kept until the Client or User withdraws their consent.
The information generated, manipulated, and stored in the company’s equipment in the ordinary course of its activities, is the Customer and Users’ property and the responsibility of MGCS.
MGCS has adopted and will maintain the necessary security, administrative, technical, and material measures to protect Customers’ and Users’ personal data against damage, loss, modification, destruction, unauthorized use, access, or processing of the latter.
INTERNATIONAL DATA TRANSFER
MGCS will not transfer Customers’ or Users’ personal data to third parties located outside the European Union.
LIMITATION OF THE USE OR DISCLOSURE OF PERSONAL DATA, REVOCATION OF CONSENT AND EXERCISE OF THE RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION, AND OPPOSITION
As the owner of your personal data, you have the right : (i) to access your personal data held by MGCS and know the details of their processing, (ii) to rectify them in case they are outdated, inaccurate, or incomplete, (iii) to cancel them when you consider that they are not used in accordance with the applicable principles, duties, and obligations, or (iv) to object to their processing for specific purposes. These rights are known as «ARCO Rights». (V) limit the use or disclosure of personal data or object to the use of personal data provided to MGCS.
EXERCISE OF RIGHTS
You may exercise your rights by submitting your written request to our address or by mail to the following email address email@example.com, enclosing the following information and documents with your request:
If the exercise of ARCO’s rights is by email, expressly indicate your wish to receive MGCS‘s response to your request by email, indicating the appropriate email address.
Once the request to exercise ARCO rights has been delivered to MGCS, regardless of the form in which it is received, MGCS will have 5 (five) days to collect additional information. If additional information is not required, MGCS will publish the corresponding response within a maximum of 20 (twenty) business days from receipt. We will inform you by the chosen means of contact. Once MGCS‘s response is received, you have 15 (fifteen) business days to provide your response. In case of dissatisfaction, you can contact MGCS immediately by the means indicated.
In case you do not respond to MGCS‘s answer within the indicated term, MGCS will consider in good faith that you agree with the answer.
Last published update date, _____ of 2021.