Privacy Notice
GRUPO CORCIMEX HOLDING, S.A. DE C.V., hereinafter “THE COMPANY,” with registered office at Gutenberg 162, Col. Nueva Anzurez, Zip Code 11560, Mexico City, is responsible for the use and protection of your personal data, and in this regard, provides the following information: How to contact us:
Privacy Office. Address: Gutenberg 162, Colonia Nueva Anzurez, Miguel Hidalgo District, ZIP Code 11560, Mexico City.
Email: avisodeprivacidad@corcimex.com
Phone numbers: 55 5262 5290 and 800 267 2463
FOR WHAT PURPOSES DO WE COLLECT AND USE YOUR PERSONAL DATA?
Your personal identification, contact, and reference information, as well as information related to financial data and sensitive health information—when “THE COMPANY” expressly informs you of this—is used for the following Primary Purposes, which gave rise to and are necessary for the existence, maintenance, and fulfillment of the legal relationship between you and “THE COMPANY”:
a. To recruit personnel for its own use with the aim of placing them in any of the companies with which the Company has a shareholding relationship and which operate under the same data protection policies.
b. For the procurement of specialized professional products and services for the purpose of producing deliverables required by “THE COMPANY”’s clients.
c. For the creation, management, maintenance, and retention of digital and/or physical records pertaining to employees, suppliers, customers, and third parties with whom we have commercial, business, or contractual relationships. This purpose may include the creation and management of a personalized user account to be used on the computer systems of “THE COMPANY” and/or any of the companies with which it has a shareholding relationship, to allow access to your profile in accordance with the authorizations granted to you pursuant to the contractual relationship between you and “THE COMPANY.”
d. For the performance of all activities related to the operation, management, and administration of the Company, including specific activities such as processing payroll payments, payments for other services, maintaining accounting records, billing, managing collections, preparing employee payroll, and complying with obligations to competent authorities, whether national or international.
e. To fulfill the payment purposes set forth in this Privacy Notice, Financial Personal Data—such as the name of the banking institution, bank account number, and the currency in which the account operates—will be collected and processed.
f. To inform you of any changes regarding the purposes mentioned herein that could affect the processing of your personal data.
g. To fulfill the obligations we have undertaken toward you under contracts and/or agreements to be performed within the country or abroad.
h. To comply with the legal obligation to identify individuals and legal entities with whom “THE COMPANY” enters into transactions and contracts, and/or to verify their identity for the provision of services contracted by “THE COMPANY”.
i. To execute the agreements and contracts entered into between “THE COMPANY,” the holder of the Personal Data, and third parties with whom the Company has entered into agreements, contracts, and arrangements for the provision of services on its behalf, including legal, auditing, administrative, and accounting services, for the recruitment and selection of personnel, the safekeeping and custody of documents, and commercial representation, as well as the communication and transmission of your Personal Data for the fulfillment of any or all purposes contracted on behalf of “THE COMPANY”
j. To address any requests you submit to us and to respond to your comments, complaints, or requests for information.
k. If you are a job applicant or an employee of “THE COMPANY,” the personal data requested from you is used for the following main purposes, which are detailed in the Privacy Notice titled “Annex to the Employment Contract”
To carry out the necessary recruitment, selection, and placement processes, as well as the administrative procedures required to finalize your employment and place you with any of the companies that have a shareholding relationship with this Company and that operate under the same data protection policies, whether within the country or abroad.
To comply with legal, contractual, tax, labor, social security, housing fund, and consumer obligations arising from the employment relationship between the Data Subject (you) and “THE COMPANY” as the employer, including the collection, use, management, and retention of your employment records;
To execute contracts and agreements with third parties acting on our behalf:
To comply with legal obligations regarding the processing of personal health data classified as sensitive and requiring special protection, as well as to comply with specific legal obligations under labor law and the Official Mexican Standards issued by the Ministry of Health and the Ministry of Labor and Social Welfare regarding occupational health.
l. To provide you with information related to the service you have contracted or purchased.
m. When you visit our offices or plant facilities:
m.1 To control access to facilities and maintain security at those facilities.
m.2 If you are an employee of “THE COMPANY,” biometric data will be collected for identification and attendance tracking at the workplace, consisting of fingerprint scans to monitor your entry and exit from the workplace, in accordance with the terms of your employment contract regarding the agreed-upon work schedule.
n. When you download a technology application owned by “THE COMPANY”,
To confirm the attributes assigned by the Institution to the individual that identify him or her as a “guest” using this technological tool.
Secondary or incidental purposes that are not necessary for the legal relationship between you and “THE COMPANY”:
Assess the quality of the services we provide.
For statistical purposes.
To provide you with information related to marketing, advertising, social media, entertainment, sports, education, culture, and promotions, and/or to offer you new services and products.
Whether you are a job applicant or an employee of “THE COMPANY,” the personal data that may be requested for secondary purposes—which are not necessary for the existence of the employment relationship with “THE COMPANY” and are detailed in the Privacy Notice titled“Annex to the Employment Contract”—will be used to fulfill one or more of the following purposes:
Secondary or ancillary purposes that are not necessary for the existing legal relationship between the employee and “THE COMPANY” and for which we require your consent throughthe “Specific Authorization Addendum” provided in the contractual documentation used by “THE COMPANY”
For promotional, sales prospecting, advertising, and marketing purposes, in order to offer you services and products from “THE COMPANY”;
For promotional, sales prospecting, advertising, and marketing purposes, in order to offer you services and products from affiliated companies that operate under the same personal data protection policies as “THE COMPANY.”
To conduct market analysis and research;
To receive feedback on any information you choose to share with us.
To collect, process, store, and transfer Sensitive Health Personal Data—which requires special protection—that you choose to share at your workplace with the attending physician acting on behalf of “THE COMPANY” in order to address medical consultations, medical emergencies, initial care for accidents and illnesses, and preventive measures in this area, with the purpose of issuing a diagnosis and treatment plan to maintain, restore, or preserve your health.
If you request this medical service for your dependents and “THE COMPANY” agrees to provide such services, for all applicable legal purposes, you hereby confirm that you have given your consent and authorization for the sharing of your personal health information.
The absence of the Specific Authorization Form referred to in subsection (p) of this Notice means that your information may not be used for all or some of the secondary or ancillary purposes listed herein.
Notwithstanding the foregoing, by checking the boxes below, you confirm your refusal to allow your personal data to be used for these purposes:
I do not consent to the use of my personal data for the following purposes:
- Secondary objective 1.
- Secondary objective 2.
- Secondary objective 3.
- Secondary objective 4.
- Secondary objective 5.
- Secondary objective 6.
If you have any questions or concerns, you may submit a written request at any time to the privacy office of “THE COMPANY,” using the contact information provided at the beginning of this Notice, reiterating your refusal to provide consent for these secondary purposes.
Refusing to allow us to use your personal data for these purposes will not be grounds for us to deny you the services and products you request or purchase from us.
WHAT PERSONAL INFORMATION DO WE COLLECT, HOW IS IT COLLECTED, AND WHERE DOES IT COME FROM?
For the purposes set forth in this Privacy Notice, your information is collected through various means depending on the service, contract, or transaction to be entered into with “THE COMPANY,” the specific circumstances under which Personal Data is collected, and the means through which you provide it, whether through:
Directly via (electronic, optical, audio, visual, or any other means, such as regular mail, certified mail, the Internet, or by phone); or at:
Indirectly (from a publicly accessible source) and/or when you personally provide your Personal Data in the physical presence of a representative of “THE COMPANY” at any of the following times:
- Prior to entering into any contract or agreement, or when entering into any type of contract, agreement, or transaction with “THE COMPANY,” and you provide your information personally and directly through any means made available for this purpose—whether via email, when visiting our website, or when using our online services;
- When you provide Personal Data by logging in to conduct transactions on a website, app, and/or system owned by “THE COMPANY”;
- When we obtain information from other sources permitted by law.
The types of data we collect from you include those that “THE COMPANY” is legally required to collect for the purpose of compiling identification records for the individual and/or entity with whom a contract and/or transaction is entered into.
Not all contracts are published on the websites owned by “THE COMPANY”; therefore, you should contact the Privacy Office at the email address provided in this notice to request more information about a specific contract.
Please note that only adults may purchase services.
The information we collect may be combined to help us get to know you better and develop outreach strategies that allow us to stay in closer touch with you.
To fulfill the purposes described in this privacy notice, we will use the following categories of personal data that are necessary to document the commercial, business, or contractual relationship we have established with you:
- Identification information: Full name, age, gender, photograph, current employment, fax number, home address, office phone number, work email address, handwritten signature, advanced electronic signature (AES), RFC (Federal Taxpayer Registry), CURP (Unique Population Registry Card), nationality, home phone number, cell phone number, email address, copy of a valid official ID; proof of address, and any additional information required by law. If you are an employee of “THE COMPANY,” biometric identification data (authentication) will be collected for the purpose of recording attendance at the workplace, consisting of fingerprint scanning, in accordance with the work schedule agreed upon between the Employer and the Employee; as well as for the provision of food services at the workplace and, if your profile requires it, for access to the data center using the same technology.
- Employment information: Work email address and phone number; proof of address from the employer;
- Asset information: Information regarding the assets of individuals who enter into service and supply contracts with “THE COMPANY” for the purpose of ensuring compliance with contractual obligations related to the pursuit of its corporate purpose.
- Financial data: any financial information obtained about an identified or identifiable individual in connection with the provision of services related to financial institutions, such as banks and institutions that are part of the financial system of the United Mexican States. Payroll account number, bank account number, savings account number, full name of the account holder, and the bank branch where the account is held.
- Contact information: Home address, personal email address, home phone number, and cell phone number.
- Reference information, including details about family members and/or acquaintances/personal references who have previously authorized you to share some of their personal information.
- Sensitive health data: Personal data that pertains to the most intimate aspects of the data subject’s life and that is required to comply with any legal obligation(s) regarding labor matters and/or the content of Official Mexican Standards issued by the Ministry of Health and the Ministry of Labor and Social Welfare concerning worker health and other past, present, and future health data of the employee of “THE COMPANY” relating to illnesses and medications pertaining to the individual, or those of their family members, and which they decide to share with the medical staff in charge of the clinic at their workplace.
Please be advised that on some of “THE COMPANY’s” websites and online platforms, you may be invited to upload personal information generated by you as a user for publication in specific sections, such as letters, photographs, press releases, newsletters, or other information that will become public and over which “THE COMPANY” will have no control.
PERSONAL, ASSET-RELATED, AND/OR FINANCIAL INFORMATION
Please be advised that, in order to fulfill certain purposes outlined in this privacy notice, we will collect and process your Personal Data relating to financial and asset-related matters. We commit to ensuring that such data is processed under the strictest security measures to guarantee its confidentiality, and that this data is requested for the purpose of fulfilling obligations arising from the existing legal relationship between you and “THE COMPANY” and set forth in the various contract(s) that may be entered into for the provision of services and/or payroll payments to employees, for which we require your express consent.
If you do not wish to share this information, please send an email to privacidad@corcimex.com, and you will receive a reply confirming that you have been removed from our database, provided that this removal does not interfere with the performance of the contract, agreement, or transaction entered into with you and that it is appropriate to do so.
SENSITIVE HEALTH INFORMATION
One of the main purposes stated by “THE COMPANY” in this Privacy Notice is to comply with labor and social security regulations, which involve the processing of Sensitive Personal Data falling under the category of Employee Health Data, for which the Employer is responsible within an employment relationship.
Given the special handling required for this type of data, “THE COMPANY” considers it necessary for you to understand its definition as: Data that affects the most intimate aspects of the data subject’s life, or whose misuse could lead to discrimination or pose a serious risk to the data subject. In particular, data is considered sensitive if it may reveal aspects such as racial or ethnic origin, current and future health status, genetic information, religious, philosophical, and moral beliefs, trade union membership, political opinions, or sexual orientation.
For the processing of sensitive personal data, we are legally required to obtain the data subject’s express written consent.
If you are an employee of “THE COMPANY,” your express consent will be obtained through your handwritten signature on the addendum to your employment contract.
In that annex, you will find a clause that states:
I hereby consent to the processing of my sensitive personal data in accordance with the terms of this privacy notice:
|
Name and signature of the account holder |
Similarly, “THE COMPANY,” concerned for the health and well-being of its employees, has included among its internal services for the benefit of its workers—and as a Secondary Purpose set forth in subsection p. of this Privacy Notice, the provision of medical services through its own staff to assist in complying with legal obligations in this area before labor and health authorities, as well as to address medical consultations, medical emergencies, first aid in accidents, diseases, and preventive measures in this regard so that a diagnosis and treatment plan may be issued to maintain, restore, or preserve your health and that of your family members, provided that “THE COMPANY” expressly extends this coverage to the employees’ dependents, who may receive these medical services at the workplace.
HOW CAN YOU LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA?
When the processing of your Personal Data does not involve data necessary to comply with a legal or contractual obligation (such as compliance with legal obligations arising from the existing legal relationship between you, as the data subject, and “THE COMPANY”), you may request to stop receiving messages by any means by sending an email to the address provided at the beginning of this Privacy Notice.
TRANSFER AND/OR DISCLOSURE AND/OR USE OF DATA
a. DATA SUBMISSION:
Your Personal Data may be disclosed to individuals or entities other than “THE COMPANY,” located within or outside the country, with whom “THE COMPANY” has a legal relationship through agreements, contracts, and arrangements entered into to provide various services on its behalf, including all consequences arising from these legal relationships, such as DATA PROCESSORS who are obligated to respect your Personal Data at all times in accordance with this same privacy policy of “THE COMPANY”; therefore, you can trust that your information will always be protected and will be processed in accordance with applicable law.
Therefore, your information may be shared with companies that provide services on our behalf, such as legal services, specialized labor law services, administrative services, accounting and auditing services, processed food supply services, and recruitment and selection services for hiring staff.
b. DATA TRANSFER
Similarly, “THE COMPANY” may only transfer your data to other third parties—that is, other DATA CONTROLLERS— when such parties are authorized government agencies, such as the Ministry of Finance and Public Credit, the Ministry of Labor and Social Welfare, or the Mexican Social Security Institute, based on the legal authority they possess, request such transfers, as well as in cases where there is a court order, and/or where applicable laws require the transfer of Personal Data by “THE COMPANY.”
When processing Sensitive Health Personal Data, at the request of the competent national authorities in the Mexican Republic—such as the Ministry of Health and the Ministry of Labor—in accordance with the powers granted to them by law, “THE COMPANY” may transfer employee data in compliance with legal obligations.
Depending on the type of service you have purchased, we may share some of your data; however, we only provide third parties with the information that is strictly necessary, and we require them to protect that information and not use it for any purpose other than the one for which it was requested.
Similarly, we may share your information for statistical purposes, such as the number of users or visitors to “THE COMPANY” websites, provided that this information does not include any data that could identify you.
With whom do we share your information, and for what purposes?
Please be advised that your personal data is shared both within and outside the country with the following individuals, companies, organizations, and authorities other than us, for the following purposes:
Recipient of the personal data | Country | Purpose |
Internal Revenue Service | Mexico | Payment and settlement of applicable taxes (Income Tax (ISR), Value-Added Tax (VAT), and Payroll Tax) and social security contributions |
Federal District Health Department | Mexico | To comply with the health-related obligations imposed on us by law |
Ministry of Labor and Social Welfare | Mexico | To comply with our legal obligations regarding occupational health, in accordance with applicable Mexican official standards. |
Mexican Social Security Institute | Mexico | To comply with the obligations regarding the payment of employer-employee social security contributions imposed on us by law |
National Workers' Housing Fund Institute | Mexico | To comply with the obligations regarding the payment of housing contributions imposed on us by law |
National Workers' Consumer Fund Institute | Mexico | To fulfill the obligations imposed by law regarding the management and administration of loans granted by FONACOT to employees of “THE COMPANY” |
Insurance Company | Mexico | In your case, to complete the necessary procedures to enroll you in the Major Medical Expense Insurance and Life Insurance plans that “THE COMPANY” provides to its employees. |
Recruitment, Selection, and Training Service Provider | Mexico | To carry out processes on behalf of “THE COMPANY” related to recruitment, personnel selection, and socioeconomic studies for hiring purposes. |
The Data Subject's bank | Mexico and/or abroad | In this case, to make payments due from “THE COMPANY” to bank accounts for services received from suppliers and service providers, as well as to pay employee salaries. |
Branch of “THE COMPANY” in another country | Mexico and/or abroad | To comply with legal obligations as an employee in a country other than the United Mexican States. |
In cases where there is a legal obligation, and except for the cases mentioned above, we undertake not to transfer your personal information to third parties without your consent; therefore, if you do not object to this Personal Data Disclosure Policy by sending an email to oficinadeprivacidad@corcimex.com, it will be understood that you have given your consent to do so.
SAFETY
The privacy of the collected data is guaranteed because, in addition to the legal confidentiality obligations established in applicable special laws, the information provided to “THE COMPANY” through its websites is transmitted to them via a secure session using VPN-protected (Virtual Private Network) connections—an encrypted channel between your computer and “THE COMPANY’s” systems—meaning that the communication is visible only between “THE COMPANY’s” server and your device as THE USER. Similarly, information provided in physical form to “THE COMPANY” is only visible to those individuals who require such information to perform the duties entrusted to them, in accordance with the institutional confidentiality and privacy policies established by “THE COMPANY.”
A "cookie" cannot read data or information from the user's hard drive, nor can it read "cookies" created by other websites or pages.
Web beacons, on the other hand, are images embedded in a web page or email that can be used to track a visitor’s behavior, store information about the user’s IP address, the duration of their interaction with the page, and the type of browser used, among other things.
Please be advised that we do not use cookies or web beacons to obtain your password or any personal information from you, such as the following:
- Your browser type and operating system
- Pages visited within the portal
- The presence of links within the portal
- The moment he steps out of the doorway
These cookies and other technologies can be disabled. For instructions on how to do so, please visit the following link:http://windows.microsoft.com/es-ES/windows-vista/Block-or-allow-cookies.
Please be advised that we use analytics scripts to track user activity on the pages and links of our website; however, there is no link between users and specific events. To disable these scripts, please visit the following page:http://uaoc.org/es/usuarios/setup_browser.html.
QUALITY OF INFORMATION
“THE COMPANY” states that the information collected is processed in a timely, accurate, and complete manner and that it has taken reasonable, necessary, and feasible measures to protect Personal Data against damage, loss, alteration, destruction, or unauthorized use, access, or processing. Notwithstanding the foregoing, in the event of a breach of these security measures, provided that such breach significantly affects your economic or moral rights as the data subject, “THE COMPANY” will notify you as soon as possible at the physical and/or electronic address you have provided for this purpose so that you may take the necessary steps to defend your rights.
“THE COMPANY” will store and retain such information in temporary or permanent databases for as long as necessary to fulfill its contractual and legal obligations, as well as to comply with agreements and/or contracts entered into with third parties, in order to provide various services on its behalf, unless otherwise required by law or court order.
Please note that various laws apply to the services contracted with “THE COMPANY”; therefore, the retention periods for Personal Data will be subject to the regulations established in various areas, such as those contained in the Federal Consumer Protection Law, as well as commercial, tax, and e-commerce laws, and/or any other applicable legislation.
HOW CAN YOU ACCESS OR CORRECT YOUR PERSONAL DATA, OR DELETE IT OR OBJECT TO ITS USE?
You may access the Personal Data we hold about you and the processing thereof to view, update, or correct it if it is inaccurate or incomplete; or exercise any of your rights regarding your personal information held by “THE COMPANY” in accordance with the rights of access, correction, deletion, and objection established by the Federal Law on the Protection of Personal Data Held by Private Parties, should you consider that such data is no longer required for any of the purposes outlined in this notice, is being used for unauthorized purposes, the contractual relationship has ended, and the legal retention periods established by law have expired; the legal or contractual limitation periods have expired, or when you deem it necessary to object to the processing of such data for specific purposes by submitting the ARCO form to the email address oficinadeprivacidad@corcimex.com
Your application must include the ARCO form with the following information: your name as the account holder or the name of the contract holder, the date of the contracted service and/or the type of service contracted, landline and/or cell phone number, and email address.
The deadlines for processing your request are:
“THE COMPANY,” as the data controller, will notify you, as the data subject, within a maximum of twenty days from the date the request for access, correction, deletion, or objection was received, so that, if the request is deemed valid, it may be carried out within fifteen days of the date the response is communicated. In the case of requests for access to Personal Data, the information will be provided upon verification of the identity of the requester or legal representative, as applicable.
WITHDRAWAL OF CONSENT
You may notify “THE COMPANY” at any time of your decision to revoke the consent you have given for the processing of your Personal Data so that we may cease to use it, provided that the consent you wish to revoke does not stem from a contractual legal relationship or an agreed-upon transaction with “THE COMPANY,” that the law permits it, or that it has been expressly agreed upon in writing between “THE COMPANY” and you. In all cases, the revocation of consent will not have retroactive effect.
Simply send us an email to the address provided at the beginning of this Privacy Notice or submit your request to the physical address provided by “THE COMPANY” in this document.
To whom can you submit complaints and reports regarding the improper processing of your personal data?
If you believe that your right to the protection of personal data has been violated by the conduct of our employees or by our actions or responses, the authority responsible for ensuring the proper enforcement of the Federal Law on the Protection of Personal Data Held by Private Parties, to which you may file a complaint or report, is the NATIONAL INSTITUTE FOR TRANSPARENCY, ACCESS TO INFORMATION, AND PROTECTION OF PERSONAL DATA (INAI), with the website www.ifai.org.mx.
CHANGES TO THIS PRIVACY NOTICE
Any changes or updates to this Privacy Notice will be posted on “THE COMPANY”’s website. We reserve the right to modify or update this Privacy Notice at any time to address new legislation, internal policies, or new requirements for the provision or offering of our services or products; unless it is determined that, due to the nature of the modification, it is appropriate to send you an email informing you of any substantial changes to these privacy policies and/or through any other means deemed necessary.
Effective January 2018