PRIVACY
NOTICE
PROCESYS, S.A. DE C.V., hereinafter “PROCESYS”, address Convento de Acolman 7, Interior 14, Colonia Jardines de Santa Mónica, Código Postal 54050, Municipio de Tlalnepantla de Baz, Estado de México, is responsible for processing the personal data you provide us.
PROCESYS, respects your right to privacy and protection of personal data, sensitive personal data, including financial or property data, which are protected by Law. PROCESYS is responsible for databases recording your information, likewise your information is duly protected in accordance to administrative, technical and physical security provisions established in the Law of matter, to protect it from possible damage, loss, alteration or unauthorized access, and that is why it informs you this Privacy Notice, which establishes the way your information will be treated by PROCESYS, as well as the collecting purpose, foregoing in accordance with Articles 15 and 16 from Federal Data Protection Law Personal Data in Possession of Private Parties (the “Law”).
TREATMENT PURPOSES
Personal data we collect from you will be used for the following purposes:
1) Commercial Purpose
Information Holder name, address, RFC, telephone, billing account number, birth date, bank details, email, IP address, browser and operating system used to access our website.
This information may be used, but not limited to:
i) Offer you products and services, whether physically, by telephone, electronically or by any other technology or means available to PROCESYS.
ii) Make you aware of new products or services that may be of interest in relation to the contracted service.
iii) Carry out any type of collection procedures on payment pending balances derived from commercial relationship.
iv) For your convenience, perform billed charges automatically,
v) As appropriate issue purchase orders or work request and/or
vi) Any other action necessary to comply PROCESYS interest regarding agreement reached with Information Holder.
2) Work purpose
In relation to job offers or applications submitting a resume, we will request information such as, name, address, contact telephone number, email, education level, personal references, professional experience, RFC, social security number, CURP, official identification.
This information may be used in an enunciative but not limited way to:
i) Evaluation as possible candidate to fill vacant position,
ii) If applicable, preparation of corresponding Service Provision Contract,
iii) To provide candidates references in case another person or company requests them.
3) Security in facilities access purpose.
Regarding information requested for PROCESYS facilities entry, we will request full name, signature, official identification, as well as information about electronic equipment that will be entered into PROCESYS facilities.
This information may be used in an enunciative but not limited way to:
i) Support, register and/or control registering of people who access or visit PROCESYS facilities.
ii) Comply security guidelines established in PROCESYS internal policies.
Similarly, information holder accepts that PROCESYS uses technology to collect and store information about website visitors, which may include sending one or more cookies or other anonymous identifiers to your computer.
This type of technology purpose is allowing PROCESYS to monitor website activity. This information can be used to improve user experience and to carry out analyzes related to our page (such as pages user visits and how long they stay on them).
PERSONAL DATA COLLECTED
As part of its business activity, to complaint with primary and necessary purposes indicated in this Comprehensive Privacy Notice, PROCESYS requires collecting and processing personal data, these data are obtained directly from holder, indirectly through physical, electronic or face-to-face means, as well as from authorized public sources.
Personal data that will be treated according to holder type are:
a) For Customers and/or Suppliers (Physical Persons), identification data, addresses, fiscal data, contact data, as well as personal, credit, commercial references, financial and asset data. In case of customers and/or suppliers, sensitive personal data is not processed.
b) For Candidates, Employees and/or Professional Services, identification data, address, contact data, academic data, courses, diplomas, certifications, languages, skills, knowledge, experience and interest areas, extra-academic data, employment reference data, personal and family information, property and financial data, as well as the following Sensitive Personal Data: personal health data and union affiliation.
c) For Contractors (Physical Persons), identification data, contact data, labor data, data proving rights validity for social security or major medical expenses insurance. In case of contractors, sensitive personal data is not collected.
d) For visitors in internet portals, identification data and contact data. In case of users who visit internet portals, sensitive personal data is not collected.
e) For facilities visitors, identification data, contact data, if applicable, representing company and visit reason.
f) In case of visitors, sensitive personal data is not processed.
In all cases, personal sensitive data, property and financial data purpose is that PROCESYS comply arising obligations from legal relationship established with Holder.
It is our commitment that they will be treated under strict security measures, always guaranteeing confidentiality.
For this privacy notice purposes, in case of providing any type of personal data related to another person as reference, you declare and accept that you have obtained the corresponding prior consent of said person for it.
Personal Data processing consent will not be necessary when:
It is Law provided;
Data appears in publicly accessible sources;
Personal Data is subjected to prior dissociation procedure;
Has the purpose of fulfilling obligations from legal relationship between Personal Data Holder and PROCESYS;
There is an emergency situation that could potentially harm an individual to their property or person; or
A resolution issued by competent authority.
PERSONAL DATA TRANSFER
Information Holder understands and accepts that PROCESYS may transfer their personal data to third parties that have been contracted by PROCESYS to carry out certain tasks related to commercial activities and their products and/or services promotion on their behalf. These third parties may treat data in compliance with PROCESYS instructions, or make decisions about them as part of their services provision. PROCESYS does not transfer Sensitive, Property or Financial Personal Data. If required, it will not be carried out without prior express consent in writing by the Holder.
Based on articles 36 and 37 in Federal Law on Protection of Personal Data Held by Private Parties, for purposes set forth in this Privacy Note Personal Data may be lawfully transferred to:
a) Subsidiaries, affiliates, controllers and/or contracted PROCESYS companies within national territory or abroad,
b) When transfer is necessary to provide products and services or to comply contracted labor or commercial relations.
c) To third parties in matters of customer service and studies related to products and services provided by PROCESYS.
d) Third parties such as marketing agencies that participate with PROCESYS so they can be able to offer their products and services in terms established by applicable regulation regarding Personal Data.
Holder accepts that providing Personal Data they Will be subject to transfers mentioned in this Privacy Notice.
In accordance with previous paragraph provisions, if Holder no longer accepts personal data transmission, he can contact PROCESYS by any means established in this Privacy Notice.
USE OF COOKIES
SECURITY
EXCEPTIONS
a) It is Law provided;
b) Data appears in publicly accessible sources;
c) Personal Data is subjected to prior dissociation procedure;
d) Has the purpose of fulfilling obligations from legal relationship between Personal Data Holder and responsible;
e) There is an emergency situation that could potentially harm an individual to their property or person;
f) They are essential for medical care, prevention, diagnosis, provision of health care, medical treatment or health services management;
g) There is a resolution issued by competent authority;
h) Transfer is necessary for recognition, exercise or defense of a right in a judicial process.
i) Transfer is necessary for maintenance or fulfillment of a legal relationship between responsible and holder.
ARCO RIGHTS (ACCESS, RECTIFICATION, CANCELLATION OR OPPOSITION)
You have the right to know what personal data is held about you, what it is used for, and use conditions we give it (Access). Likewise, it is your right to request personal data correction in case it is outdated, inaccurate or incomplete (Rectification); that we remove it from our records or databases when you consider it is not being used according principles, duties and obligations provided by law (Cancellation); as well as oppose for your personal data to be used for specific purposes (Opposition). These are known as ARCO rights.
To exercise your ARCO rights, as well as to limit their use or disclosure or request consent revocation, you must contact PROCESYS by free writing at Legal Department, at Paseo Tollocan, número 306 A, Colonia Altamirano, Toluca, Estado de México, C.P. 50130 or by email contacto@procesys.mx; Monday through Friday from 09:00 a.m. to 06:00 p.m., Monday through Friday and on business days, as appropriate.
In order to process any request for access, rectification, cancellation, opposition, as well as to limit use/disclosure or to request consent revocation, it must be received at indicated above address, as well as contain and accompany the following:
a) Holder’s name, address and/or any other means to communicate response to your request;
b) Documents that prove identity or, when appropriate, legal Holder’s representation;
c) Clear and precise description of Personal data respect to which one seeks to exercise any of the aforementioned rights;
d) Any other element or document that facilitates Data Holder’s location, as well as RFC and/or CURP to avoid any homonymy;
e) Clearly specify if request is for access, rectification, cancellation, opposition; limit use/disclosure or withdraw consent;
f) Request reason;
g) In case of rectification request for Personal Data, modifications to be made and provide request supporting documentation.
In the event that information provided in ARCO request is insufficient or erroneous to attend to it, or if necessary documents are not attached to process it, for a single time, within 5 business days following ARCO application reception, PROCESYS will request to data holder or his representative to provide elements or documents necessary to process it. To respond, data holder or his representative will have 10 business days from day after request reception.
PROCESYS will respond ARCO request with determination reached, within a 20 business days period from request reception, or if additional information or documents have been requested, within a 20 business days period counting from the day following request response submission.
If ARCO request is appropriate, PROCESYS will make reached determination effective within 15 business day period from response date communication to data holder or his representative. In case ARCO request is related on the right of personal data access, delivery will be done after data holder or his representative identity proof. Provided it is justified by case circumstances, only once, PROCESYS may extend deadlines to respond an ARCO request, and/or to make reached determination effective, this extend will be for periods equal to those indicated in each case.
In such cases, PROCESYS will notify data holder or his representative circumstance(s) that justify extension within each original deadline to respond or make reached determination effective. Answers to ARCO requests will be delivered to data holder or to his legal representative in simple copies or in electronic file, depending on documents type and quantity.
For consent revocation, it will suffice that holder presents his request at PROCESYS address. PROCESYS will make said request effective, as long as it is not about personal data necessary for its legal relationship existence, maintenance and fulfillment with data holder. In the following cases PROCESYS may deny access, rectification, cancellation or opposition to their process:
i) When applicant is not personal data holder, or if legal representative is not duly accredited for it;
ii) When applicant’s personal data is not found in its database;
iii) When it violates third party rights;
iv) When there is legal impediment, or competent authority resolution that restricts personal data access or that does not allow rectification, cancellation or opposition;
v) When rectification, cancellation or opposition has been previously made.
CHANGES TO PRIVACY NOTICE
1) Web site www.procesys.mx
2) Publications in national newspaper.
ATTENTIVELY
PROCESYS, S.A. DE C.V.
June/2020
