COPIISA OFFSHORE, S.A. DE C.V
COMPREHENSIVE PRIVACY NOTICE FOR CLIENTS
- IDENTIFICATION OF THE RESPONSIBLE PARTY AND THE DATA PROCESSOR
- FOR THE PURPOSES OF THIS NOTICE, THE FOLLOWING IS UNDERSTOOD:
- PURPOSES AND/OR USES OF PERSONAL DATA
- LIMITATION OF THE USE OR DISCLOSURE OF YOUR PERSONAL DATA
- REVOCATION OF CONSENT FOR DATA PROCESSING
- TRANSFER OF YOUR PERSONAL INFORMATION TO THIRD PARTIES
- MODIFICATIONS TO THE PRIVACY NOTICE
RIGHTS OF THE DATA SUBJECT
1.- IDENTIFICATION OF THE RESPONSIBLE PARTY:
COPIISA OFFSHORE, S.A. DE C.V., located at Callejón Manuel Luis Stampa 38, Col. Nueva Industrial Vallejo, C.P. 07700, Mexico City, Gustavo A. Madero Borough, has developed a privacy policy to help you understand how your personal information is collected, used, transferred, and stored, in compliance with Article 16 of the Constitution and the Federal Law on Protection of Personal Data Held by Private Parties. Therefore, we inform you that we are the Responsible Party for the processing, use, and protection of your Personal Data in our possession. In exercising this responsibility, we have designated as the Data Processor: ARA SOFTWARE DESIGN, S.A. DE C.V., located at Calle Zacatecas #24, Piso 6 Int. 602, Col. Roma Norte, Cuauhtémoc Borough, C.P. 06700, Mexico City. This entity is responsible for handling your request to revoke consent for the processing of your personal information or to exercise your ARCO rights. You may contact them at the aforementioned address, by phone at 01 (55) 5514-8850, or via email at: operaciones@vydp.org
2.-FOR THE PURPOSES OF THIS NOTICE, THE FOLLOWING IS UNDERSTOOD:
■ Personal Data:
Any information concerning an identified or identifiable individual. We collect your personal data directly when you provide it to us through various means, such as in person at our facilities, over the phone, when participating in our promotions, or when providing information for us to offer you a service or sell you a product.
■ Applicable Legislation:
We collect your personal data for the purposes mentioned in this Privacy Notice. These will be processed in accordance with the principles of legality, quality, consent, information, purpose, loyalty, proportionality, and responsibility, as established by the Law.
■ Principles Governing the Processing of Your Personal Information:
Any information concerning an identified or identifiable individual. We collect your personal data directly when you provide it to us through various means, such as in person at our facilities, over the phone, when participating in our promotions, or when providing information for us to offer you a service or sell you a product.
■ Sensitive Personal Data:
Personal data that affects the most intimate sphere of its owner or whose improper use may lead to discrimination or pose a serious risk to them. Specifically, sensitive data includes information that may reveal racial or ethnic origin, present and future health status, genetic information, religious, philosophical, and moral beliefs, union membership, political opinions, and sexual preferences.
■ Financial or Asset-Related Personal Data:
If your payment method is a bank card, the following data will be requested, which, under Article 8 of the Federal Law on Protection of Personal Data Held by Private Parties, are considered financial or asset-related personal data: the cardholder’s name, card number, card expiration date, and bank name. The Law requires that if the collected personal data includes sensitive or financial/asset-related data, the Responsible Party must obtain the express consent of the data subject, as stipulated in the second paragraph of Article 8 of the Law and other applicable regulations. This can be done through signing a corresponding form, either in print or electronically, through direct responses, and their corresponding consent processes, including but not limited to express consent and provision of personal data by the data subject.
Tacit and Express Consent:
If your payment method is a bank card, the following data will be requested, which, under Article 8 of the Federal Law on Protection of Personal Data Held by Private Parties, are considered financial or asset-related personal data: the cardholder’s name, card number, card expiration date, and bank name. The Law requires that if the collected personal data includes sensitive or financial/asset-related data, the Responsible Party must obtain the express consent of the data subject, as stipulated in the second paragraph of Article 8 of the Law and other applicable regulations. This can be done through signing a corresponding form, either in print or electronically, through direct responses, and their corresponding consent processes, including but not limited to express consent and provision of personal data by the data subject.
Duration of Personal Data Processing:
Your personal information will be processed only for the time necessary to fulfill the purposes described in the Privacy Notice provided to you and, where applicable, in accordance with the respective legal provisions. However, notwithstanding any provision of this Privacy Notice, the data subject acknowledges that their consent will not be required for the processing of their personal data by the Responsible Party or third parties in any of the cases outlined in Article 10 of the LFPDPPP.
Personal Data of Minors:
We recognize the importance of protecting the privacy and personal data of minors. Therefore, we do not obtain, use, disclose, or store information related to minors without the prior consent of their parents or guardians. If you are a parent or guardian and become aware that a minor has provided their personal data without your consent, you may request the cancellation of such data.
3.-PURPOSES AND USES OF PERSONAL DATA
The personal data we collect from you will be used for the following purposes, which are necessary for the service you request:
To fulfill obligations arising from a commercial legal relationship with you, whether existing or future.
Identification.
To provide the services and products you require.
To enforce and/or execute a contract.
To grant benefits and fulfill obligations to our clients.
To create client files.
To ensure compliance with confidentiality obligations.
Billing.
To exchange information for internal, external, and regulatory audits.
Additionally, we will use your personal information for the following secondary purposes, which are not necessary for the requested service but allow us to provide you with better attention:
For statistical purposes.
To inform you about changes or new products or services related to those contracted or acquired by our clients.
To evaluate service quality.
For commercial, marketing, advertising, and/or business prospecting purposes.
Regarding Confidentiality under ISO 17025:2017: “General Requirements for the Competence of Testing and Calibration Laboratories”:
The laboratory is responsible, through legally enforceable agreements, for managing all information obtained or created during laboratory activities. The laboratory informs the client in advance about the information it intends to make public. Except for information that the client makes publicly available or when agreed upon by the laboratory and the client (e.g., to respond to complaints), any other information is considered proprietary and confidential. (Clause 4.2.1).
When the laboratory is required by law or authorized by contractual provisions to disclose confidential information, the client or interested party is notified of the information provided, unless prohibited by law. (Clause 4.2.2).
Information about the client obtained from sources other than the client (e.g., a complainant, regulatory agencies) is confidential between the client and the laboratory. The provider (source) of this information remains confidential and is not shared with the client unless agreed upon with the source. (Clause 4.2.3).
If you do not wish for your personal data to be used for these secondary purposes, indicate below: I do not consent to my personal data being used for the following purposes:
( ) For statistical purposes.
( ) To inform about changes or new products or services related to those contracted or acquired by our clients.
( ) To evaluate service quality.
( ) For commercial, marketing, advertising, and/or business prospecting purposes.
How We Collect Your Personal Information:
We collect personal data directly from the data subject through personal delivery or any means of contact between the data subject and the Responsible Party or its representatives. Data may also be collected indirectly through publicly accessible sources and other legally permitted sources, such as telephone directories or public databases on the internet, and their use will be for the previously consented purpose.
The personal data to be collected and processed are:
(i) Identification data;
(ii) Contact data;
(iii) Financial and/or asset-related data;
(iv) Employment data;
No sensitive data is collected.
Your Personal Data will be processed based on the principles and duties outlined in the law, which include legality, consent, information, quality, purpose, loyalty, proportionality, responsibility, confidentiality, and security. Confidentiality of your personal data will be maintained by establishing and effectively implementing administrative, technical, and physical security measures to prevent damage, loss, alteration, destruction, misuse, unauthorized access, or disclosure.
ON OUR WEBSITE:
We inform you that on our website, we use cookies, web beacons, or other technologies to monitor your behavior as an internet user and provide you with a better service and experience while browsing our site. The personal data we collect through these technologies will be used for statistical, marketing purposes, and to facilitate faster access to the site for users. Cookies from http://www.copiisaoffshore.com.mx are associated only with an anonymous user and their computer and do not provide references that allow the deduction of the user’s personal data.
The personal data we obtain from these tracking technologies are as follows: Identifiers, preferred language, user’s region, browser type, operating system type, date and time of session start and end, pages visited by the user, searches performed by the user, advertisements viewed by the user.
To learn how to disable these technologies in major browsers, consult the following:
Google Chrome:
Select the Chrome menu icon > Select Settings > At the bottom of the page, select Show advanced settings > Under “Privacy,” select Content settings > Select Do not allow sites to save data > Select Done.
Internet Explorer:
Click the Tools button and then Internet Options > Click the Privacy tab > Settings > Block all cookies and then click OK.
Safari:
To configure cookie blocking in Safari on iOS 8, go to Settings > Safari > Block cookies and select Block always. On iOS 7 or earlier, select Never, From advertisers and third parties, or Always.
Firefox:
Click the Menu button and choose Options > Select the Privacy panel > Under Firefox will: choose Use custom settings for history > Uncheck Accept cookies to disable them > Close the page. Any changes made will be saved automatically.
For other browsers or versions, consult the help section of your browser.
FOR ACCESS TO OUR FACILITIES:
To enter our facilities, we request that you register in a logbook, which includes the date, full name, name and department of the person being visited, entry time, company of origin, exit time, and signature. To verify your identity, we may request a valid official ID, which will remain in our custody while we provide you with a visitor badge.
IV. LIMITATION OF USE OR DISCLOSURE OF YOUR PERSONAL DATA
If you wish to limit the use or disclosure of your personal information in our possession, the mechanism implemented to exercise these rights is through the submission of the respective request by sending an email to the following address:
operaciones@vydp.org with the subject: REQUEST FOR LIMITATION OR DISCLOSURE OF PERSONAL DATA and the following information:
Name of the data subject.
Statement of facts.
Address or email address to communicate the response to the request.
Documents proving identity or authority to submit the request. The documents to prove identity may include:
National Electoral Institute credential.
Passport.
National Military Service card.
Professional license.
The original document must be presented for verification. Verification of the identity document can be done by prior appointment at Calle Zacatecas #24, Piso 6 Int. 602, Col. Roma Norte, Alcaldía Cuauhtémoc, C.P. 06700, Mexico City.
If the data subject exercises their limitation of use or disclosure of personal data through a representative, in addition to verifying the identity of both parties as mentioned above, we must identify the representation through the following means:
Public instrument proving representation;
Power of attorney signed before two witnesses; or
Declaration in the presence of the data subject.
You may also register in the following registry if you do not wish to receive advertising from us:
Public Registry to Avoid Advertising. For more information, consult the PROFECO website.
V. REVOCATION OF CONSENT FOR DATA PROCESSING
You have the right to revoke the consent you have granted us for the processing of your personal information, whether tacit or express and in writing. However, it is important to note that we may not always be able to immediately comply with your request or cease use, as we may be required by law to continue processing your personal data. Additionally, you should consider that for certain purposes, revoking your consent may result in us being unable to continue providing the service you requested or the termination of your relationship with us. The mechanism implemented is through the submission of the respective request by sending an email to the following address:
operaciones@vydp.org with the subject: REQUEST FOR REVOCATION OF CONSENT FOR THE PROCESSING OF PERSONAL DATA and the following information:
Name of the data subject.
Statement of facts.
Address or email address to communicate the response to the request.
Documents proving identity or authority to submit the request. The documents to prove identity may include:
National Electoral Institute credential.
Passport.
National Military Service card.
Professional license.
The original document must be presented for verification. Verification of the identity document can be done by prior appointment at Calle Zacatecas #24, Piso 6 Int. 602, Col. Roma Norte, Alcaldía Cuauhtémoc, C.P. 06700, Mexico City.
If the data subject exercises their limitation of use or disclosure of personal data through a representative, in addition to verifying the identity of both parties as mentioned above, we must identify the representation through the following means:
Public instrument proving representation;
Power of attorney signed before two witnesses; or
Declaration in the presence of the data subject.
The deadline to address your request is 20 business days, and we will inform you of the outcome through the means you provided for notification.
VI. TRANSFER OF YOUR PERSONAL INFORMATION TO THIRD PARTIES
We are committed to not transferring your personal information to third parties without your consent, taking into account the exceptions provided in Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties, and to carry out such transfers in accordance with the terms established by that law.
Except in the cases outlined in Article 37 of the Law:
When the transfer is provided for in a law or treaty to which Mexico is a party.
When the transfer is necessary for medical prevention or diagnosis, the provision of healthcare, medical treatment, or the management of health services.
When the transfer is made to controlling, subsidiary, or affiliated companies under common control, or to a parent company or any company within the same group as the responsible party that operates under the same processes and internal policies.
When the transfer is necessary under a contract entered into or to be entered into in the interest of the data subject by the responsible party and a third party.
When the transfer is necessary or legally required to safeguard public interest or for the administration of justice.
When the transfer is necessary for the recognition, exercise, or defense of a right in a legal proceeding.
When the transfer is necessary for the maintenance or fulfillment of a legal relationship between the responsible party and the data subject.
We will only transfer your personal data to third parties, domestic or foreign, who are legally or commercially related to us to fulfill the purposes described in this Privacy Notice and its updates made available to you. Therefore, we may transfer your personal data in the cases provided and authorized by law and in accordance with the following:
To the Tax Administration Service, as part of the processes for issuing and sending Digital Tax Receipts via the Internet.
To various authorities to comply with requirements or as required by legislation or regulations.
Your personal data will be processed only for the time necessary to fulfill the purposes described in the Privacy Notice provided to you and, where applicable, in accordance with the respective legal provisions.
VII. MODIFICATIONS TO THE PRIVACY NOTICE
We reserve the right to make modifications or updates to this Privacy Notice at any time to address legislative changes, internal policies, or new requirements for the provision or offering of our services or products.
These modifications will be made available to the public through the following means:
On our website: http://www.copiisaoffshore.com.mx
On the website of our Data Processor: http://vydp.org/inicio/marcas-protegidas/
VIII. RIGHTS OF THE DATA SUBJECT
You may exercise your rights of access, rectification, cancellation, and opposition (“ARCO rights”) regarding your personal and/or sensitive data. Additionally, you may limit the use or disclosure of your personal data and revoke the consent you have granted for its processing, provided that the processing is not necessary or arises from a legal relationship.
ARCO RIGHTS INCLUDE:
ACCESS: To be informed about which of your personal data is contained in our database system, how it is used, its origin, and any communications made with it, as well as the general conditions of its processing. The obligation of access will be considered fulfilled when:
The data is made available to the data subject; or
Through the issuance of simple copies, magnetic, optical, sound, visual, holographic, electronic documents, or any other appropriate medium or technology.
RECTIFICATION: To correct or update your personal data if it is inaccurate or incomplete.
CANCELLATION: To have your personal data deleted, in whole or in part, from our database system. This request may result in a blocking period, after which the data will be deleted.
OPPOSITION: To object, for legitimate reasons, to the processing of your personal data by our company.
If you wish to access, rectify, cancel, or oppose the use of your personal data, the mechanism implemented to exercise these rights is through the submission of the respective request by sending an email to the following address:
operaciones@vydp.org with the subject: REQUEST FOR: ACCESS, RECTIFICATION, CANCELLATION, OR OPPOSITION (as applicable), and with the following information:
Name of the data subject.
Statement of facts.
Address or email address to communicate the response to the request.
Documents proving identity or authority to submit the request.
Description of the personal data for which you wish to exercise ARCO rights.
Any other element that allows the location of the personal data and the processing of the request.
The deadline to address your request is 20 business days, and we will inform you of the outcome through the means you provided for notification.
If you believe your right to the protection of personal data has been violated by any action of our employees or in our responses, or if you suspect that the processing of your personal data violates the provisions of the Federal Law on Protection of Personal Data Held by Private Parties, you may file the corresponding complaint or report with the INAI. For more information, visit:
The processing of your personal data in our possession will be carried out in accordance with these terms and conditions. Therefore, from this moment, you expressly authorize the Responsible Party and the Data Processor to process your personal information for this purpose, until you express your opposition through any of the means indicated by law. For any matter related to the processing of your personal information not addressed in this Comprehensive Privacy Notice, please contact the Data Processor, whose details are provided at the beginning of this document.