Privacy Notice

COMPREHENSIVE PRIVACY NOTICE FOR THE ALSEA® WEBSITE

 

I. IDENTITY AND REGISTERED OFFICES OF THE DATA CONTROLLER

 

Alsea S.A.B de C.V. (hereinafter Alsea®), with registered offices in Avenida Revolución Número 1267, Torre Corporativa, Piso 21, Colonia Los Alpes, Delegación Álvaro Obregón, Postal Code 01040 in Mexico City, is the Data Controller for the processing of Personal Data that may be collected through the following means: (i) directly when the Holder of Personal Data enters their Personal Data through our website, (ii) directly through our customer service call center, (iii) indirectly when they transfer their Personal Data to us, either under the assumptions of article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations (Law), or by having given their consent to said transfer, and (iv) indirectly when the information is obtained through public access sources as permitted by the Law.

 

This Comprehensive Privacy Notice is made available to the Holder of Personal Data prior to providing their Personal Data, in strict accordance with the principles of information, legality, consent, quality, purpose, loyalty, proportionality, and responsibility contemplated in the Law.

 

II. WHAT PERSONAL DATA DO WE OBTAIN?

 

To comply with the purposes described in this Comprehensive Privacy Notice, the Data Controller may request the following data:

 

Full name

Telephone and/or mobile phone number

Email address

Company and title/position

 

Alsea S.A.B de C.V. will not collect or process any sensitive personal data. If you contact us through social networks, we may collect data from your public social network profile to address your inquiries concerning our offered products.

 

III. FOR WHAT PURPOSES WILL WE USE PERSONAL DATA?

 

The personal data that we collect will be used by the Data Controller for the following primary purposes, which are necessary to provide the service you request from the Data Controller:

 

a) To provide general information about our Company to:

- General public interested in learning more about our brands and organization.

- Media entities interested in the Company’s activities and maintaining contact regarding organizational matters.

- Analysts, investors, financial organizations, and general public.

b) To receive and respond to complaints and reports related to violations of the Code of Ethics by collaborators, as well as to report faults in our service to clients and suppliers (through the appropriate support line “Linea Correcta”).

c) To send and receive electronic invoices.

d) To provide information about our social and business events.

g) To respond to requests for the exercise of ARCO Rights and Revocation of Consent.

h) To verify the identity of users.

 

If you do not want your personal data to be processed for secondary purposes, you can send an email to privacidadinfo@alsea.com.mx stating your refusal and specifying that said refusal is directed to Alsea S.A.B de C.V.®. We will respond to your request within a maximum of 20 business days.

 

IV. WITH WHOM AND FOR WHAT PURPOSES DO WE SHARE YOUR INFORMATION?

 

The Data Controller may transfer your personal data to third parties, without the need to obtain your consent, in the cases established in article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties.

 

V. HOW CAN YOU EXERCISE YOUR ARCO RIGHTS AND/OR REVOKE YOUR CONSENT?

 

At any time, you or your duly accredited legal representative may exercise any of the rights of Access, Rectification, Cancellation, or Opposition (hereinafter “ARCO Rights”), as well as revoke your consent for the processing of your personal data.

 

To exercise your rights mentioned above, you must send your request to our Data Privacy department at the email address privacidadinfo@alsea.com.mx

 

In your email, you must specify if you are requesting to exercise any of your ARCO rights or to Revoke your consent, and specify that your request is directed to Alsea S.A.B de C.V.®. Upon receiving your request, we will send you the ARCO Request Form along with its procedure, or the Revocation of Consent Form along with its procedure, as appropriate.

 

The request to exercise your rights as the Holder of Personal Data must contain the following information: (i) Name of the Holder of the Personal Data, (ii) address and email address to receive the response to your request, (iii) a clear and precise description of the data for which you wish to exercise your rights as the Holder of the Personal Data, (iv) the object of the request, (v) any element that facilitates the location of the data and a copy of your ID must be attached and, in its case, the document accrediting your legal representation.

 

The response time for your request will be 20 business days from the day on which the request for access, rectification, cancellation, and opposition is received. The response will be communicated to you within the aforementioned period to the email address provided in your request or by letter to the address provided in your request. Once said notification is received, the Data Controller will have a period of 15 business days to make the request effective, if determined valid.

 

The Data Controller may deny access to Personal Data or to rectify, cancel, or grant opposition to the processing thereof, in the following cases:

 

1.- When the requesting person is not the Holder of Personal Data, or the legal representation is not duly accredited.

2.- When the Personal Data is not found in the Data Controller’s database.

3.- When the rights of a third party are violated.

4.- When there is a legal impediment or a resolution by a competent authority that restricts access to Personal Data or does not allow rectification, cancellation, or opposition thereof, and

5.- When access, rectification, cancellation, or opposition have already been made effective.

 

VI. NATIONAL INSTITUTE OF TRANSPARENCY, ACCESS TO INFORMATION, AND PROTECTION OF PERSONAL DATA (THE “INAI”)

 

In the event that the Holder of Personal Data considers that their right to protection of his/her Personal Data has been harmed by improper treatment thereof by the Data Controller and/or its personnel, the Holder of the Personal Data may file a claim or complaint with the INAI. For more information, refer to their website https://home.inai.org.mx/

 

VII. USE OF TRACKING TECHNOLOGIES ON OUR INTERNET PORTAL

 

We inform you that on our website we use cookies, web beacons, and other technologies through which it is possible to monitor your behavior as an Internet user, with the purpose of providing you with a better service and experience when browsing our website, as well as to offer you new products and services based on your preferences.

 

The personal data that we obtain from these tracking technologies are the following: (i) Type of web browser used, (ii) server name, (iii) IP address, (iv) date, time, and duration of your browsing on the Internet and on our website or mobile app, (v) website sections visited, and (vi) Internet pages accessed prior to visiting our website.

 

These technologies can be disabled by the following steps: 1. Access our website, 2. Click on the “Cookies” subsection of your browser; 3. Click on the button to Activate the cookie disabling mechanism.

 

VIII. UPDATES TO OUR PRIVACY NOTICE

 

This privacy notice may be modified, amended, or updated due to: (i) new legal requirements; (ii) our own needs in relation to the products or services we offer; (iii) our privacy practices; changes in our business model, or other causes.

 

We will notify you of any changes to our Privacy Notice through our website http://www.alsea.com.mx For this reason, we ask you to review our website periodically.

 

IX. ACCEPTANCE OF PRIVACY NOTICE

 

By using our website and entering your personal data for our services, you consent to the processing of your personal information as per the terms specified in this notice.