Privacy Notice
COMPREHENSIVE PRIVACY NOTICE
CONTACTS
We protect your personal data.
Just as we are concerned about your safety, the protection of your privacy and your personal data is also a priority for us. In this Privacy Notice, we explain and update you on the type of personal information we request or gather, how, and for what purposes it can be shared.
- Who is the Party Responsible for treatment?
The Party Responsible for treatment is an individual or legal entity that determines the purposes for which your personal data is requested, gathered and used, as well as what data is treated and which third parties can be authorized to access it.
With respect to your personal data when you contact us, Fundación Aleatica para la Seguridad Vial, A.C. is the Party Responsible for treatment. Our address to hear and receive notifications is Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
- What personal data can we request or gather from you?
To comply with the purposes described in this Privacy Notice, the Party Responsible shall treat the following categories of personal data:
- Identification information; and
- Contact information.
To comply with the purposes described in this Privacy Notice, the Party Responsible shall not request or treat sensitive personal data.
- Why do we obtain and treat your data?
The personal data you provide to us or we obtain from you shall be treated for the purposes indicated in this section. The Party Responsible may treat your personal data for 2 (two) types of purposes, Primary and Secondary.
Primary Purposes:
- Attention and response to your requests, consultations and information requests.
- Communication with those requesting information, in follow-up on their consultations or requests.
- Statistics and historical log of consultations.
The Party Responsible shall not use your personal data for Secondary Purposes.
- Who can we share your personal data with?
Your personal data can be communicated in order to comply with legal obligations, to the following entities:
- To our parent company and/or controlling companies, controlled companies, subsidiaries, affiliates, related parties and/or any company of the same group as the Party Responsible that acts under the same internal processes and policies (Grupo Aleatica), for purposes of management, administration and centralized safeguarding of the information; for attention to consultations related to companies of the Party Responsible’s corporate group; and for statistics purposes and a historical record of consultations. You can request more information through the following email account: dpo@aleatica.com.
- Public organizations; federal, state and/or municipal public administrations; commissions; institutes; regulatory entities; judicial or administrative authorities; domestic and/or foreign government entities, for compliance with information obligations, transparency obligations and the prevention of illegal activities; as well as for compliance with legal or administrative requirements issued by competent authorities that are duly grounded and motivated.
The Federal Law for Protection of Personal Data in Possession of Third Parties, its Regulations and the rest of the standards applicable to the treatment of personal data (jointly, “LFPD”) establish that the transfer of the aforementioned personal data does not require your consent to be performed, but the Party Responsible is required to inform you about them. Any transfer of your personal data that does require your consent shall be notified to you in advance through the communication and updating of this Privacy Notice, and prior to performing the referred communication of your personal data.
- What rights do you have over your personal information?
The LFPD recognizes the following rights, namely:
- Access: Access to the personal data we treat on your behalf, and knowing the origin of such, the purposes of the treatment and the duration of such; information on the party(ies) responsible, and third parties to which the personal data may have been disclosed.
- Correction: Update or correct your personal data to guarantee it is accurate and up to date.
- Cancellation: Cancel your personal data that is not necessary or relevant for the purposes indicated in this Privacy Notice.
- Opposition: Right to oppose the treatment of your personal data or request that treatment end. When you exercise this right, the Party Responsible shall not treat your personal data beyond the extent permitted by the applicable Mexican legislation.
- Revocation: Revoke your consent at any time when the treatment of your personal data requires your authorization. However, this revocation cannot have retroactive effect; that is, it cannot affect situations, proceedings and/or transfers performed prior to the revocation of your consent; nor also in cases where such revocation would involve violation of the general provisions protecting public order that establish the obligation to maintain the treatment of your personal data for a certain period of time. Revocation of your consent may result in the Party Responsible ceasing to treat your personal data for the purposes indicated in this Privacy Notice and in the Party Responsible ceasing to communicate your data to Grupo Aleatica; however, such revocation cannot have the guaranteed objective of ensuring that the Grupo Aleatica companies that have or had access to your personal data will cease to treat it. In these cases, you must follow the personal data cancellation procedure established by such companies.
- Limitation: Limit the use or disclosure of your personal data at the time you provide your information, or even after such time. You can ask that the Party Responsible limit the use of your personal data to certain sectors or geographic spaces, by indicating whether or not you authorize the Party Responsible to share your personal data with Grupo Aleatica. The Party Responsible has measures and procedures to ensure the inclusion of some of your personal data on its own exclusion lists, to avoid the disclosure of such data. In these cases, the Party Responsible shall grant the owners requesting registration with proof of the corresponding registration.
- Formalize claims against the Party Responsible and/or the personal data protection authorities.
- For how long will we treat your data?
Your personal data will be kept until the time of compliance with the legal obligations arising from the relationship with you. After this period has passed, your personal information will remain blocked, limiting the treatment of such to attention to potential responsibilities arising from the treatment thereof and during the term of the corresponding statute of limitations.
- How can you contact the Party Responsible and exercise your rights?
If you have any questions or consultations about how we will treat your personal data, or if you would like to exercise any of the rights indicated in Section 5 of this Privacy Notice, you can contact us at the following addresses:
Fundación Aleatica para la Seguridad Vial, A.C.
Address: Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
Email: dpo@aleatica.com
The request must contain and be accompanied by the following:
- Your full name and address or another method to communicate the response to your request to you;
- Copy of a document that verifies your identity and, if applicable, legal representation if someone else is exercising the right on your behalf;
- Clear and accurate description of the right you want to exercise and the personal data related to your request; and
- If applicable, any other information that helps us locate your personal data.
The Party Responsible shall respond to your request within the 20 (twenty) business days following the date on which it is sent. If your request is applicable, we will comply with it within the 15 (fifteen) business days following the date on which we communicate the response to you. If your request is incomplete or incorrect, we will ask you to correct it, having 10 (ten) business days to do so. The use of electronic methods of communication authorizes the Party Responsible to attend to your request using the same method, unless you indicate another method of contact in your request.
You can obtain the information or personal data requested through copies, electronic documents in conventional formats (Word, PDF, etc.), or through any other legal means that guarantees and support the effective exercise of the requested right.
The right to cancellation is not absolute. Please keep in mind that the Party Responsible must retain information in order to comply with various legal obligations and to do so we may share personal data with other entities or organizations. In these cases, it is possible that the cancellation right must be requested from the entity that received the personal data.
You can also obtain access to your competent data protection authority through the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI).
- How often is this Privacy Notice updated?
The Party Responsible reserves the right to modify, update, extend and/or in any other way change the contents and scope of this Privacy Notice at any time and at the sole discretion of the Party Responsible. You may request a copy of the latest version of this Privacy Notice at any time from our Personal Data Department, through the email: dpo@aleatica.com.
The Privacy Notice that regulates treatment of your personal data shall be the one that is published on the website www.fundacionaleatica.org.
We review this Privacy Notice regularly.
The date of last update to this Privacy Notice is November 2022.
COMPREHENSIVE PRIVACY NOTICE
SOCIAL MEDIA
We protect your personal information.
Just as we are concerned about your safety, the protection of your privacy and your personal data is also a priority for us. In this Privacy Notice, we explain and update you on the type of personal information we request or gather, how, and for what purposes it can be shared.
- Who is the Party Responsible for treatment?
The Party Responsible for treatment is an individual or legal entity that determines the purposes for which your personal data is requested, gathered and used, as well as what data is treated and which third parties can be authorized to access it.
With respect to your personal data as a social media user, Fundación Aleatica para la Seguridad Vial, A.C. is the Party Responsible for treatment. Our address to hear and receive notifications is Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
- What personal data can we request or gather from you?
To comply with the purposes described in this Privacy Notice, the Party Responsible shall treat the following categories of personal data:
- Identification information;
- Contact information; and
- Social circumstances data.
To comply with the purposes described in this Privacy Notice, the Party Responsible shall not request or treat sensitive personal data.
Responsibilities of the Party Responsible, of the owners-users of social media and of the social media service providers.
The Party Responsible treats the personal data of the owners-users of social media through access and handling of the information that such owners-users publish or communicate through the profiles they have created in each social media platform they use to communicate with or contact the Party Responsible. This treatment also covers leveraging of your personal data for purposes of communicating the activities of the Party Responsible and/or its group of companies (Grupo Aleatica). The Party Responsible accesses, handles and leverages the personal data of owners-users of social media only during the time for which the owners-users remain in contact with the profiles managed by the Party Responsible on each of the social media platforms or when such owners interact with the Party Responsible through open or private messages sent through the social media platforms.
The owners-users are responsible for the accuracy, truthfulness and updating of their personal data published on their social media networks; as well as the level of communication of their information and access to such permitted or allowed for third parties through such profiles. We recommend that all owners-users of social media continually review the privacy setting of their profiles for each of the websites they use to contact with the Party Responsible. We also recommend that owners-users of social media avoid publishing their personal data through open messages that can be created on certain social media platforms.
Social media service providers are responsible for the databases created with the personal data of the users of such networks. The service providers are also responsible for the security measures they adopt to safeguard the personal data of their users.
Based on the above, the Party Responsible agrees to provide appropriate access, handling and leveraging of the personal data of the owners-users tied to the profiles managed by the Party Responsible on various social media networks or that send information through private messages. Databases are not created with the information and/or personal data of the owners-users of social media. You are responsible for the personal data you publish on forums, messages and other social media platforms and not sent to the Party Responsible through private messaging.
- Why do we obtain and treat your data?
The personal data you provide to us or we obtain from you shall be treated for the purposes indicated in this section. The Party Responsible may treat your personal data for 2 (two) types of purposes, Primary and Secondary.
Primary Purposes:
- Attention and response to your requests, consultations and information requests.
- Communication with those requesting information, in follow-up on their consultations or requests.
- Management of social media followers and communication of the activities of the Party Responsible through such platforms.
- Attention and response to requests, consultations and information requests through social media platforms used by the Party Responsible for such purposes.
- Statistics on followers and users of social media where the Party Responsible has information profiles.
- Statistics and historical log of consultations.
The Party Responsible shall not use your personal data for Secondary Purposes.
- Who can we share your personal data with?
Your personal data can be communicated in order to comply with legal obligations, to the following entities:
- To our parent company and/or controlling companies, controlled companies, subsidiaries, affiliates, related parties and/or any company of the same group as the Party Responsible that acts under the same internal processes and policies (Grupo Aleatica), for purposes of management, administration and centralized safeguarding of the information; for attention to consultations related to companies of the Party Responsible’s corporate group; and for statistics purposes and a historical record of consultations. You can request more information through the following email account: dpo@aleatica.com.
- Public organizations; federal, state and/or municipal public administrations; commissions; institutes; regulatory entities; judicial or administrative authorities; domestic and/or foreign government entities, for compliance with information obligations, transparency obligations and the prevention of illegal activities; as well as for compliance with legal or administrative requirements issued by competent authorities that are duly grounded and motivated.
The Federal Law for Protection of Personal Data in Possession of Third Parties, its Regulations and the rest of the standards applicable to the treatment of personal data (jointly, “LFPD”) establish that the transfer of the aforementioned personal data does not require your consent to be performed, but the Party Responsible is required to inform you about them. Any transfer of your personal data that does require your consent shall be notified to you in advance through the communication and updating of this Privacy Notice, and prior to performing the referred communication of your personal data.
- What rights do you have over your personal information?
The LFPD recognizes the following rights, namely:
- Access: Access to the personal data we treat on your behalf, and knowing the origin of such, the purposes of the treatment and the duration of such; information on the party(ies) responsible, and third parties to which the personal data may have been disclosed.
- Correction: Update or correct your personal data to guarantee it is accurate and up to date.
- Cancellation: Cancel your personal data that is not necessary or relevant for the purposes indicated in this Privacy Notice.
- Opposition: Right to oppose the treatment of your personal data or request that treatment end. When you exercise this right, the Party Responsible shall not treat your personal data beyond the extent permitted by the applicable Mexican legislation.
- Revocation: Revoke your consent at any time when the treatment of your personal data requires your authorization. However, this revocation cannot have retroactive effect; that is, it cannot affect situations, proceedings and/or transfers performed prior to the revocation of your consent; nor also in cases where such revocation would involve violation of the general provisions protecting public order that establish the obligation to maintain the treatment of your personal data for a certain period of time. Revocation of your consent may result in the Party Responsible ceasing to treat your personal data for the purposes indicated in this Privacy Notice and in the Party Responsible ceasing to communicate your data to Grupo Aleatica; however, such revocation cannot have the guaranteed objective of ensuring that the Grupo Aleatica companies that have or had access to your personal data will cease to treat it. In these cases, you must follow the personal data cancellation procedure established by such companies.
- Limitation: Limit the use or disclosure of your personal data at the time you provide your information, or even after such time. You can ask that the Party Responsible limit the use of your personal data to certain sectors or geographic spaces, by indicating whether or not you authorize the Party Responsible to share your personal data with Grupo Aleatica. The Party Responsible has measures and procedures to ensure the inclusion of some of your personal data on its own exclusion lists, to avoid the disclosure of such data. In these cases, the Party Responsible shall grant the owners requesting registration with proof of the corresponding registration.
- Formalize claims against the Party Responsible and/or the personal data protection authorities.
- For how long will we treat your data?
Your personal data will be kept until the time of compliance with the legal obligations arising from the relationship with you. After this period has passed, your personal information will remain blocked, limiting the treatment of such to attention to potential responsibilities arising from the treatment thereof and during the term of the corresponding statute of limitations.
- How can you contact the Party Responsible and exercise your rights?
If you have any questions or consultations about how we will treat your personal data, or if you would like to exercise any of the rights indicated in Section 5 of this Privacy Notice, you can contact us at the following addresses:
Fundación Aleatica para la Seguridad Vial, A.C.
Address: Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
Email: dpo@aleatica.com
The request must contain and be accompanied by the following:
- Your full name and address or another method to communicate the response to your request to you;
- Copy of a document that verifies your identity and, if applicable, legal representation if someone else is exercising the right on your behalf;
- Clear and accurate description of the right you want to exercise and the personal data related to your request; and
- If applicable, any other information that helps us locate your personal data.
The Party Responsible shall respond to your request within the 20 (twenty) business days following the date on which it is sent. If your request is applicable, we will comply with it within the 15 (fifteen) business days following the date on which we communicate the response to you. If your request is incomplete or incorrect, we will ask you to correct it, having 10 (ten) business days to do so. The use of electronic methods of communication authorizes the Party Responsible to attend to your request using the same method, unless you indicate another method of contact in your request.
You can obtain the information or personal data requested through copies, electronic documents in conventional formats (Word, PDF, etc.), or through any other legal means that guarantees and support the effective exercise of the requested right.
The right to cancellation is not absolute. Please keep in mind that the Party Responsible must retain information in order to comply with various legal obligations and to do so we may share personal data with other entities or organizations. In these cases, it is possible that the cancellation right must be requested from the entity that received the personal data.
You can also obtain access to your competent data protection authority through the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI).
- How often is this Privacy Notice updated?
The Party Responsible reserves the right to modify, update, extend and/or in any other way change the contents and scope of this Privacy Notice at any time and at the sole discretion of the Party Responsible. You may request a copy of the latest version of this Privacy Notice at any time from our Personal Data Department, through the email: dpo@aleatica.com.
The Privacy Notice that regulates treatment of your personal data shall be the one that is published on the website www.fundacionaleatica.org.
We review this Privacy Notice regularly.
The date of last update to this Privacy Notice is November 2022.
COMPREHENSIVE PRIVACY NOTICE
VISITORS
We protect your personal information.
Just as we are concerned about your safety, the protection of your privacy and your personal data is also a priority for us. In this Privacy Notice, we explain and update you on the type of personal information we request or gather, how, and for what purposes it can be shared.
- Who is the Party Responsible for treatment?
The Party Responsible for treatment is an individual or legal entity that determines the purposes for which your personal data is requested, gathered and used, as well as what data is treated and which third parties can be authorized to access it.
With respect to your personal data as a social media user, Fundación Aleatica para la Seguridad Vial, A.C. is the Party Responsible for treatment. Our address to hear and receive notifications is Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
- What personal data can we request or gather from you?
To comply with the purposes described in this Privacy Notice, the Party Responsible shall treat the following categories of personal data:
- Identification information;
- Contact information; and
- Commercial information data.
To comply with the purposes described in this Privacy Notice, the Party Responsible shall not request or treat sensitive personal data.
- Why do we obtain and treat your data?
The personal data you provide to us or we obtain from you shall be treated for the purposes indicated in this section. The Party Responsible may treat your personal data for 2 (two) types of purposes, Primary and Secondary.
Primary Purposes:
- Security of visitors, employees, supplier personnel and other people who access the Party Responsible’s facilities.
- Access control for visitors and, when applicable, IT equipment brought into the Party Responsible’s facilities.
The Party Responsible shall not use your personal data for Secondary Purposes.
- Who can we share your personal data with?
Your personal data can be communicated in order to comply with legal obligations, to the following entities:
- To our parent company and/or controlling companies, controlled companies, subsidiaries, affiliates, related parties and/or any company of the same group as the Party Responsible that acts under the same internal processes and policies (Grupo Aleatica), for purposes of management, administration and centralized safeguarding of the information; for attention to consultations related to companies of the Party Responsible’s corporate group; and for statistics purposes and a historical record of consultations. You can request more information through the following email account: dpo@aleatica.com.
- Public organizations; federal, state and/or municipal public administrations; commissions; institutes; regulatory entities; judicial or administrative authorities; domestic and/or foreign government entities, for compliance with information obligations, transparency obligations and the prevention of illegal activities; as well as for compliance with legal or administrative requirements issued by competent authorities that are duly grounded and motivated.
The Federal Law for Protection of Personal Data in Possession of Third Parties, its Regulations and the rest of the standards applicable to the treatment of personal data (jointly, “LFPD”) establish that the transfer of the aforementioned personal data does not require your consent to be performed, but the Party Responsible is required to inform you about them. Any transfer of your personal data that does require your consent shall be notified to you in advance through the communication and updating of this Privacy Notice, and prior to performing the referred communication of your personal data.
In terms of the above, your personal data shall not be transferred to third parties without your consent, except in the cases of the exceptions established in Article 37 of the LFPD, and, in all cases, in compliance with the conditions set forth in Article 17 of the LFPD Regulations.
- What rights do you have over your personal information?
The LFPD recognizes the following rights, namely:
- Access: Access to the personal data we treat on your behalf, and knowing the origin of such, the purposes of the treatment and the duration of such; information on the party(ies) responsible, and third parties to which the personal data may have been disclosed.
- Correction: Update or correct your personal data to guarantee it is accurate and up to date.
- Cancellation: Cancel your personal data that is not necessary or relevant for the purposes indicated in this Privacy Notice.
- Opposition: Right to oppose the treatment of your personal data or request that treatment end. When you exercise this right, the Party Responsible shall not treat your personal data beyond the extent permitted by the applicable Mexican legislation.
- Revocation: Revoke your consent at any time when the treatment of your personal data requires your authorization. However, this revocation cannot have retroactive effect; that is, it cannot affect situations, proceedings and/or transfers performed prior to the revocation of your consent; nor also in cases where such revocation would involve violation of the general provisions protecting public order that establish the obligation to maintain the treatment of your personal data for a certain period of time. Revocation of your consent may result in the Party Responsible ceasing to treat your personal data for the purposes indicated in this Privacy Notice and in the Party Responsible ceasing to communicate your data to Grupo Aleatica; however, such revocation cannot have the guaranteed objective of ensuring that the Grupo Aleatica companies that have or had access to your personal data will cease to treat it. In these cases, you must follow the personal data cancellation procedure established by such companies.
- Limitation: Limit the use or disclosure of your personal data at the time you provide your information, or even after such time. You can ask that the Party Responsible limit the use of your personal data to certain sectors or geographic spaces, by indicating whether or not you authorize the Party Responsible to share your personal data with Grupo Aleatica. The Party Responsible has measures and procedures to ensure the inclusion of some of your personal data on its own exclusion lists, to avoid the disclosure of such data. In these cases, the Party Responsible shall grant the owners requesting registration with proof of the corresponding registration.
- Formalize claims against the Party Responsible and/or the personal data protection authorities.
- For how long will we treat your data?
Your personal data will be kept until the time of compliance with the legal obligations arising from the relationship with you. After this period has passed, your personal information will remain blocked, limiting the treatment of such to attention to potential responsibilities arising from the treatment thereof and during the term of the corresponding statute of limitations.
- How can you contact the Party Responsible and exercise your rights?
If you have any questions or consultations about how we will treat your personal data, or if you would like to exercise any of the rights indicated in Section 5 of this Privacy Notice, you can contact us at the following addresses:
Fundación Aleatica para la Seguridad Vial, A.C.
Address: Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
Email: dpo@aleatica.com
The request must contain and be accompanied by the following:
- Your full name and address or another method to communicate the response to your request to you;
- Copy of a document that verifies your identity and, if applicable, legal representation if someone else is exercising the right on your behalf;
- Clear and accurate description of the right you want to exercise and the personal data related to your request; and
- If applicable, any other information that helps us locate your personal data.
The Party Responsible shall respond to your request within the 20 (twenty) business days following the date on which it is sent. If your request is applicable, we will comply with it within the 15 (fifteen) business days following the date on which we communicate the response to you. If your request is incomplete or incorrect, we will ask you to correct it, having 10 (ten) business days to do so. The use of electronic methods of communication authorizes the Party Responsible to attend to your request using the same method, unless you indicate another method of contact in your request.
You can obtain the information or personal data requested through copies, electronic documents in conventional formats (Word, PDF, etc.), or through any other legal means that guarantees and support the effective exercise of the requested right.
The right to cancellation is not absolute. Please keep in mind that the Party Responsible must retain information in order to comply with various legal obligations and to do so we may share personal data with other entities or organizations. In these cases, it is possible that the cancellation right must be requested from the entity that received the personal data.
You can also obtain access to your competent data protection authority through the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI).
- How often is this Privacy Notice updated?
The Party Responsible reserves the right to modify, update, extend and/or in any other way change the contents and scope of this Privacy Notice at any time and at the sole discretion of the Party Responsible. You may request a copy of the latest version of this Privacy Notice at any time from our Personal Data Department, through the email: dpo@aleatica.com.
The Privacy Notice that regulates treatment of your personal data shall be the one that is published on the website www.fundacionaleatica.org.
We review this Privacy Notice regularly. The date of last update to this Privacy Notice is November 2022.
COMPREHENSIVE PRIVACY NOTICE
EMPLOYEES, DIRECTORS AND EXECUTIVES
We protect your personal information.
Just as we are concerned about your safety, the protection of your privacy and your personal data is also a priority for us. In this Privacy Notice, we explain and update you on the type of personal information we request or gather, how, and for what purposes it can be shared.
- Who is the Party Responsible for treatment?
The Party Responsible for treatment is an individual or legal entity that determines the purposes for which your personal data is requested, gathered and used, as well as what data is treated and which third parties can be authorized to access it.
With respect to your personal data as a social media user, Fundación Aleatica para la Seguridad Vial, A.C. is the Party Responsible for treatment. Our address to hear and receive notifications is Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
- What personal data can we request or gather from you?
To comply with the purposes described in this Privacy Notice, the Party Responsible shall treat the following categories of personal data:
- Identification and contact information;
- Personal characteristics information;
- Academic and professional data;
- Employment data and details;
- Economic, financial and insurance information;
- Social circumstances data;
- Data on criminal background; and
- Sensitive personal data (health and union affiliation).
To comply with the legal provisions related to social security and labor; management actions for the benefits granted by the Party Responsible; application of medical and health questionnaires; and application and execution of medical tests and toxicological tests, the Party Responsible must treat personal data that the legislation classifies as “sensitive”. Specifically, and in accordance with the labor relationship you have with the Party Responsible, the Party Responsible may ask you to provide information on your health condition and union affiliation. When the Party Responsible must request this information, it will obtain your express consent in writing, through the corresponding physical or electronic methods.
Third party personal data.
If you provide the Party Responsible with personal data on third parties (for example, family members) in order to comply with the purposes indicated in this Privacy Notice, you must inform them of the existence of this treatment of their personal data and the contents of this Privacy Notice. If you provide third party personal data, you declare through such delivery that you have previously obtained the consent of the owners thereof to provide their information to the Party Responsible and that such data is correct and complete.
Personal data of minors.
For the purposes established in this Privacy Notice, the Party Responsible does not gather personal data on minors (individuals under the age of 18). The Party Responsible shall only request the personal data of minors provided by their parents and/or guardians for purposes related to the labor relationship between you and the Party Responsible, including, when applicable, management of labor benefits.
Parents and/or guardians may at all times exercise the rights established in this Privacy Notice on behalf of their children or wards, or cancel their consent for the treatment of the personal data provided to the Party Responsible for the purposes indicated above, in those cases where the current legislation so allows.
- Why do we obtain and treat your data?
The personal data you provide to us or we obtain from you shall be treated for the purposes indicated in this section. The Party Responsible may treat your personal data for 2 (two) types of purposes, Primary and Secondary.
Primary Purposes:
- Management and Administration of Human Resources: Management of the labor activities and the workforce in general, including the selection of personnel, payment and review of salaries, bonuses, reimbursements, pensions and/or insurance and other benefits, such as social benefits and flexible retribution; performance evaluations; maintenance and updating of employee files; maintenance of records of absences due to illness and control of absenteeism; management of disciplinary matters, complaints and contract resolutions; contracting of collective insurance policies to designate our employees as beneficiaries, if they decide to participate in them; organization of business trips; management of professional expenses and reimbursements; creation of work email accounts, assignment of profiles in the systems of the Party Responsible and registration in the corporate directory, including the assignment of work tools, codes and passwords; planning and follow-up on training needs or professional development activities and skills; delivery of uniforms and other work materials; management of workforce directories; creation and implementation of analytical and statistics processes; verification of personal and/or labor references; and statistics and a historical record of employees.
We can also treat your personal data, particularly your health data, for the provision of labor disability contingency service coverage, professional illnesses and/or work accidents, within the limits established in the current legislation.
We will receive the conclusions reached with respect to the employer’s ability to perform the functions of the work position, as well as the need to introduce and/or improve the protection and prevention measures for such in order to correctly carry out its functions on a preventive basis.
- Security: Facilitate communication with the employee; guarantee business continuity; protect employee health and safety; access control and security; safeguard the information technology systems, including infrastructure and communications; control and safeguard office materials and other assets; monitor the correct and legal use of the Party Responsible’s IT resources; regulate physical access to the Party Responsible’s facilities; and facilitate communication with the employee and the designated emergency contacts.
- Commercial operations: Management and protection of the Party Responsible’s assets (including any intellectual and industrial property rights, confidential information and IT systems); strategic planning; project management; gathering of audit incidents; maintenance of records related to business activities; budgets; financial management; communications; management of company reorganizations; and mergers and acquisitions of our shares and/or business with potential buyers.
- Compliance and Monitoring: Compliance with internal policies; compliance with any legal or contractual obligation; compliance with labor, union, health, wellness and/or labor risk prevention requirements; compliance with legal requirements, administrative requirements, legal proceedings and/or exercise of legal rights and recourses; defense at trial; management of any internal complaints or claims; follow-up and monitoring of audits and investigations, including monitoring and audits of worker use of IT system tools and access to the content treated, used, uploaded, downloaded and/or stored using such; compliance and follow-up on investigations of complaints made through the Ethics Channel to verify compliance with the internal policies and other obligations of a labor nature; and compliance with all legal and contractual obligations for the prevention of crime, money laundering and fraud.
- Corporate management: Management, control and administration of the corporate books of the Party Responsible, including corporate books of any of its subsidiaries, agreements approved by partners and/or shareholders of the Party Responsible, board members of the Board of Directors and/or members of the Boards of the Party Responsible. Communication of reports, assessments and/or statements made to the administrative bodies of the Party Responsible, its parent company, controlling companies, controlled companies, subsidiaries, affiliates, related parties and/or any member of the same corporate group as the Party Responsible (Grupo Aleatica).
Secondary Purposes:
- Communications: Make communications about the activities of the Party Responsible and Grupo Aleatica aimed at fostering integration of its employees through recognitions, congratulations, invitations to corporate events and any other corporate communication associated with social use.
- Who can we share your personal data with?
Your personal data can be communicated in order to comply with legal obligations, to the following entities:
- To our parent company and/or controlling companies, controlled companies, subsidiaries, affiliates, related parties and/or any company of the same group as the Party Responsible that acts under the same internal processes and policies (Grupo Aleatica), for purposes of management, administration and centralized safeguarding of the information; for attention to consultations related to companies of the Party Responsible’s corporate group; and for statistics purposes and a historical record of consultations. You can request more information through the following email account: dpo@aleatica.com.
- Banks or other financial entities, for compliance with payment obligations.
- Insurance companies and insurance agents, for the contracting and management of insurance policies for employees that decide to join them.
- Professional advisors and/or service providers, in order for them to support the Party Responsible in complying with the labor benefits offered to its employees.
- When legally required, to unions, in order to pay the fees payable by the Party Responsible’s employees.
- Public organizations; federal, state and/or municipal public administrations; commissions; institutes and/or regulatory entities, for compliance with information obligations, transparency obligations and the prevention of illegal activities; to communicate illegal actions arising from complaints communicated through the Ethics Channel established by Grupo Aleatica, as well as for compliance with legal and/or administrative requirements issued by competent authorities.
- Foreign organizations, entities or authorities, to communicate illegal actions arising from complaints communicated through the Ethics Channel established by the Party Responsible’s corporate group and for compliance with requirements or requests with effects in Mexico, or required in accordance with the International Treaties to which Mexico is party.
- Domestic or foreign third parties, when such transfer is necessary for medical attention, prevention, diagnosis, provision of health assistance, medical treatments and/or management of health services, in the terms established in the General Health Law and other applicable and valid legal provisions.
- Service providers, to verify labor, financial and/or legal background, or to perform medical tests, provided such services require the service provider to retain evidence of the provision of the services.
The Federal Law for Protection of Personal Data in Possession of Third Parties, its Regulations and the rest of the standards applicable to the treatment of personal data (jointly, “LFPD”) establish that the transfer of the aforementioned personal data does not require your consent to be performed, but the Party Responsible is required to inform you about them. Any transfer of your personal data that does require your consent shall be notified to you in advance through the communication and updating of this Privacy Notice, and prior to performing the referred communication of your personal data.
- What rights do you have over your personal information?
The LFPD recognizes the following rights, namely:
- Access: Access to the personal data we treat on your behalf, and knowing the origin of such, the purposes of the treatment and the duration of such; information on the party(ies) responsible, and third parties to which the personal data may have been disclosed.
- Correction: Update or correct your personal data to guarantee it is accurate and up to date.
- Cancellation: Cancel your personal data that is not necessary or relevant for the purposes indicated in this Privacy Notice.
- Opposition: Right to oppose the treatment of your personal data or request that treatment end. When you exercise this right, the Party Responsible shall not treat your personal data beyond the extent permitted by the applicable Mexican legislation.
- Revocation: Revoke your consent at any time when the treatment of your personal data requires your authorization. However, this revocation cannot have retroactive effect; that is, it cannot affect situations, proceedings and/or transfers performed prior to the revocation of your consent; nor also in cases where such revocation would involve violation of the general provisions protecting public order that establish the obligation to maintain the treatment of your personal data for a certain period of time. Revocation of your consent may result in the Party Responsible ceasing to treat your personal data for the purposes indicated in this Privacy Notice and in the Party Responsible ceasing to communicate your data to Grupo Aleatica; however, such revocation cannot have the guaranteed objective of ensuring that the Grupo Aleatica companies that have or had access to your personal data will cease to treat it. In these cases, you must follow the personal data cancellation procedure established by such companies.
- Limitation: Limit the use or disclosure of your personal data at the time you provide your information, or even after such time. You can ask that the Party Responsible limit the use of your personal data to certain sectors or geographic spaces, by indicating whether or not you authorize the Party Responsible to share your personal data with Grupo Aleatica. The Party Responsible has measures and procedures to ensure the inclusion of some of your personal data on its own exclusion lists, to avoid the disclosure of such data. In these cases, the Party Responsible shall grant the owners requesting registration with proof of the corresponding registration.
- Formalize claims against the Party Responsible and/or the personal data protection authorities.
- For how long will we treat your data?
Your personal data will be kept until the time of compliance with the legal obligations arising from the labor relationship with you. After this period has passed, your personal information will remain blocked, limiting the treatment of such to attention to potential responsibilities arising from the treatment thereof and during the term of the corresponding statute of limitations.
- How can you contact the Party Responsible and exercise your rights?
If you have any questions or consultations about how we will treat your personal data, or if you would like to exercise any of the rights indicated in Section 5 of this Privacy Notice, you can contact us at the following addresses:
Fundación Aleatica para la Seguridad Vial, A.C.
Address: Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
Email: dpo@aleatica.com
The request must contain and be accompanied by the following:
- Your full name and address or another method to communicate the response to your request to you;
- Copy of a document that verifies your identity and, if applicable, legal representation if someone else is exercising the right on your behalf;
- Clear and accurate description of the right you want to exercise and the personal data related to your request; and
- If applicable, any other information that helps us locate your personal data.
The Party Responsible shall respond to your request within the 20 (twenty) business days following the date on which it is sent. If your request is applicable, we will comply with it within the 15 (fifteen) business days following the date on which we communicate the response to you. If your request is incomplete or incorrect, we will ask you to correct it, having 10 (ten) business days to do so. The use of electronic methods of communication authorizes the Party Responsible to attend to your request using the same method, unless you indicate another method of contact in your request.
You can obtain the information or personal data requested through copies, electronic documents in conventional formats (Word, PDF, etc.), or through any other legal means that guarantees and support the effective exercise of the requested right.
The right to cancellation is not absolute. Please keep in mind that the Party Responsible must retain information in order to comply with various legal obligations and to do so we may share personal data with other entities or organizations. In these cases, it is possible that the cancellation right must be requested from the entity that received the personal data.
You can also obtain access to your competent data protection authority through the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI).
- How often is this Privacy Notice updated?
The Party Responsible reserves the right to modify, update, extend and/or in any other way change the contents and scope of this Privacy Notice at any time and at the sole discretion of the Party Responsible. You may request a copy of the latest version of this Privacy Notice at any time from our Personal Data Department, through the email: dpo@aleatica.com.
Any changes to this Privacy Notice shall be communicated via email or through another form of communication if you do not have an email account.
The Privacy Notice that regulates treatment of your personal data shall be the one that is published on the website www.fundacionaleatica.org.
We review this Privacy Notice regularly. The date of last update to this Privacy Notice is November 2022.
COMPREHENSIVE PRIVACY NOTICE
SUPPLIERS
We protect your personal information.
Just as we are concerned about your safety, the protection of your privacy and your personal data is also a priority for us. In this Privacy Notice, we explain and update you on the type of personal information we request or gather, how, and for what purposes it can be shared.
- Who is the Party Responsible for treatment?
The Party Responsible for treatment is an individual or legal entity that determines the purposes for which your personal data is requested, gathered and used, as well as what data is treated and which third parties can be authorized to access it.
With respect to your personal data as a social media user, Fundación Aleatica para la Seguridad Vial, A.C. is the Party Responsible for treatment. Our address to hear and receive notifications is Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
- What personal data can we request or gather from you?
To comply with the purposes described in this Privacy Notice, the Party Responsible shall treat the following categories of personal data:
- Identification information;
- Contact information;
- Commercial and transaction data;
- Labor information; and
- Asset, economic and financial data.
To comply with the purposes described in this Privacy Notice, the Party Responsible shall not request or treat sensitive personal data.
Third party personal data.
If you provide the Party Responsible with personal data on third parties (for example, family members) in order to comply with the purposes indicated in this Privacy Notice, you must inform them of the existence of this treatment of their personal data and the contents of this Privacy Notice. If you provide third party personal data, you declare through such delivery that you have previously obtained the consent of the owners thereof to provide their information to the Party Responsible and that such data is correct and complete.
In addition, if you become a standardized supplier, for signing of the Contract, the Party Responsible will ask you to confirm the identity of the individuals that, based on the powers of representation provided, act as the supplier’s authorized legal representatives, and who will sign on behalf thereof; specifically:
- Singing of contract through certified email issued by an official authority, upon verification of the identity of the owner thereof (in countries and jurisdictions where this is valid); or
- Otherwise, a legible copy (of both sides, for documents that so require) of a valid official ID (Voter ID card [INE], passport, professional certificate; among others).
- Why do we obtain and treat your data?
The Federal Law for Protection of Personal Information in Possession of Third Parties, its Regulations and the other standards applicable to the treatment of personal data (jointly “LFPD”) allow us to treat the personal data of the individuals referred to in Section 2 of this Privacy Notice without needing to obtain the consent of its owners, to comply with our legal obligations, contractual obligations, or based on our legitimate interest in executing compliance controls and due diligence, both prior to contract execution and during the term of the commercial and/or contractual relationship.
The personal data you provide to us or we obtain from you shall be treated for the purposes indicated in this section. The Party Responsible may treat your personal data for 2 (two) types of purposes, Primary and Secondary.
Primary Purposes:
- Management, control and administration of the supplier contracting processes for the provision of services or products to the Party Responsible.
- Management, control and administration of registration, cancellation, changes and updates to information on suppliers in the Party Responsible’s systems and the Platform, including information for the use and handling of the Platform functions; as well as attention, follow-up and prompt and efficient response to questions or consultations about such functions.
- Creation of user accounts allowing access to the Platform.
- Management and payment of invoices issued by suppliers, to be paid by the Party Responsible.
- Management of standardization of suppliers by the Party Responsible, including administrative, commercial, tax, accounting, risk assessment, formal signing of contract conditions and/or any other matter related to the standardization of a supplier.
- Compliance with confidentiality, honor and transparency obligations; as well as domestic or international legal provisions addressing the prevention of illegal activities and other sector standards, through the implementation of and compliance with administrative and technical procedures established for such purposes.
- Control, assessment and audit of compliance with the Code of Ethics and Anti-Corruption Policies of Grupo Aleatica.
- Management of communications between You and the Party Responsible.
- Verification of labor and professional references.
- If applicable, documentation and control of the assignment of computer assets and electronic communications for use by supplier personnel.
- If applicable, assignment of codes and passwords for supplier personnel.
- Management and administration of supplier documents safeguarded by the Party Responsible.
- Statistics and historical log of representatives and contacts for the Party Responsible’s suppliers.
- Analysis of data using analytics technology in order to improve the supplier registration processes.
The Party Responsible shall not use your personal data for Secondary Purposes.
- Who can we share your personal data with?
Your personal data can be communicated in order to comply with legal obligations, to the following entities:
- To our parent company and/or controlling companies, controlled companies, subsidiaries, affiliates, related parties and/or any company of the same group as the Party Responsible that acts under the same internal processes and policies (Grupo Aleatica), for purposes of management, administration and centralized safeguarding of the information; for attention to consultations related to companies of the Party Responsible’s corporate group; and for statistics purposes and a historical record of consultations. You can request more information through the following email account: dpo@aleatica.com.
- Public organizations; federal, state and/or municipal public administrations; commissions; institutes; regulatory entities; judicial or administrative authorities; domestic and/or foreign government entities, for compliance with information obligations, transparency obligations and the prevention of illegal activities; as well as for compliance with legal or administrative requirements issued by competent authorities that are duly grounded and motivated.
- IT service providers that treat the personal data on behalf and based on the instructions of the Party Responsible (such as data storage service providers, IT maintenance and support, cybersecurity controls, etc.) for centralized control and maintenance of the information.
- Advisory services and external firms that work on compliance investigations and audits, for centralized control and maintenance of the information.
- Financial entities, for fee payment.
The LFPD establishes that transfers of the personal data indicated above does not require your consent, but the Party Responsible is required to inform you of such. Any transfer of your personal data that does require your consent shall be notified to you in advance through the communication and updating of this Privacy Notice, and prior to performing the referred communication of your personal data.
- What rights do you have over your personal information?
The LFPD recognizes the following rights, namely:
- Access: Access to the personal data we treat on your behalf, and knowing the origin of such, the purposes of the treatment and the duration of such; information on the party(ies) responsible, and third parties to which the personal data may have been disclosed.
- Correction: Update or correct your personal data to guarantee it is accurate and up to date.
- Cancellation: Cancel your personal data that is not necessary or relevant for the purposes indicated in this Privacy Notice.
- Opposition: Right to oppose the treatment of your personal data or request that treatment end. When you exercise this right, the Party Responsible shall not treat your personal data beyond the extent permitted by the applicable Mexican legislation.
- Revocation: Revoke your consent at any time when the treatment of your personal data requires your authorization. However, this revocation cannot have retroactive effect; that is, it cannot affect situations, proceedings and/or transfers performed prior to the revocation of your consent; nor also in cases where such revocation would involve violation of the general provisions protecting public order that establish the obligation to maintain the treatment of your personal data for a certain period of time. Revocation of your consent may result in the Party Responsible ceasing to treat your personal data for the purposes indicated in this Privacy Notice and in the Party Responsible ceasing to communicate your data to Grupo Aleatica; however, such revocation cannot have the guaranteed objective of ensuring that the Grupo Aleatica companies that have or had access to your personal data will cease to treat it. In these cases, you must follow the personal data cancellation procedure established by such companies.
- Limitation: Limit the use or disclosure of your personal data at the time you provide your information, or even after such time. You can ask that the Party Responsible limit the use of your personal data to certain sectors or geographic spaces, by indicating whether or not you authorize the Party Responsible to share your personal data with Grupo Aleatica. The Party Responsible has measures and procedures to ensure the inclusion of some of your personal data on its own exclusion lists, to avoid the disclosure of such data. In these cases, the Party Responsible shall grant the owners requesting registration with proof of the corresponding registration.
- Formalize claims against the Party Responsible and/or the personal data protection authorities.
- For how long will we treat your data?
Your personal data will be kept until the time of compliance with the legal obligations arising from the commercial and/or contractual relationship with you. After this period has passed, your personal information will remain blocked, limiting the treatment of such to attention to potential responsibilities arising from the treatment thereof and during the term of the corresponding statute of limitations.
- How can you contact the Party Responsible and exercise your rights?
If you have any questions or consultations about how we will treat your personal data, or if you would like to exercise any of the rights indicated in Section 5 of this Privacy Notice, you can contact us at the following addresses:
Fundación Aleatica para la Seguridad Vial, A.C.
Address: Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
Email: dpo@aleatica.com
Contracting company:
Address: At the mailing address indicated in the services contract.
Email: dpo@aleatica.com
The request must contain and be accompanied by the following:
- Your full name and address or another method to communicate the response to your request to you;
- Copy of a document that verifies your identity and, if applicable, legal representation if someone else is exercising the right on your behalf;
- Clear and accurate description of the right you want to exercise and the personal data related to your request; and
- If applicable, any other information that helps us locate your personal data.
The Party Responsible shall respond to your request within the 20 (twenty) business days following the date on which it is sent. If your request is applicable, we will comply with it within the 15 (fifteen) business days following the date on which we communicate the response to you. If your request is incomplete or incorrect, we will ask you to correct it, having 10 (ten) business days to do so. The use of electronic methods of communication authorizes the Party Responsible to attend to your request using the same method, unless you indicate another method of contact in your request.
You can obtain the information or personal data requested through copies, electronic documents in conventional formats (Word, PDF, etc.), or through any other legal means that guarantees and support the effective exercise of the requested right.
The right to cancellation is not absolute. Please keep in mind that the Party Responsible must retain information in order to comply with various legal obligations and to do so we may share personal data with other entities or organizations. In these cases, it is possible that the cancellation right must be requested from the entity that received the personal data.
You can also obtain access to your competent data protection authority through the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI).
- How often is this Privacy Notice updated?
The Party Responsible reserves the right to modify, update, extend and/or in any other way change the contents and scope of this Privacy Notice at any time and at the sole discretion of the Party Responsible. You may request a copy of the latest version of this Privacy Notice at any time from our Personal Data Department, through the email: dpo@aleatica.com.
Any changes to this Privacy Notice shall be communicated via email or through another form of communication if you do not have an email account.
The Privacy Notice that regulates treatment of your personal data shall be the one that is published on the website www.fundacionaleatica.org.
We review this Privacy Notice regularly. The date of last update to this Privacy Notice is November 2022.
COMPREHENSIVE PRIVACY NOTICE
CONTACTS
We protect your personal data.
Just as we are concerned about your safety, the protection of your privacy and your personal data is also a priority for us. In this Privacy Notice, we explain and update you on the type of personal information we request or gather, how, and for what purposes it can be shared.
- Who is the Party Responsible for treatment?
The Party Responsible for treatment is an individual or legal entity that determines the purposes for which your personal data is requested, gathered and used, as well as what data is treated and which third parties can be authorized to access it.
With respect to your personal data when you contact us, Fundación Aleatica para la Seguridad Vial, A.C. is the Party Responsible for treatment. Our address to hear and receive notifications is Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
- What personal data can we request or gather from you?
To comply with the purposes described in this Privacy Notice, the Party Responsible shall treat the following categories of personal data:
- Identification information; and
- Contact information.
To comply with the purposes described in this Privacy Notice, the Party Responsible shall not request or treat sensitive personal data.
- Why do we obtain and treat your data?
The personal data you provide to us or we obtain from you shall be treated for the purposes indicated in this section. The Party Responsible may treat your personal data for 2 (two) types of purposes, Primary and Secondary.
Primary Purposes:
- Attention and response to your requests, consultations and information requests.
- Communication with those requesting information, in follow-up on their consultations or requests.
- Statistics and historical log of consultations.
The Party Responsible shall not use your personal data for Secondary Purposes.
- Who can we share your personal data with?
Your personal data can be communicated in order to comply with legal obligations, to the following entities:
- To our parent company and/or controlling companies, controlled companies, subsidiaries, affiliates, related parties and/or any company of the same group as the Party Responsible that acts under the same internal processes and policies (Grupo Aleatica), for purposes of management, administration and centralized safeguarding of the information; for attention to consultations related to companies of the Party Responsible’s corporate group; and for statistics purposes and a historical record of consultations. You can request more information through the following email account: dpo@aleatica.com.
- Public organizations; federal, state and/or municipal public administrations; commissions; institutes; regulatory entities; judicial or administrative authorities; domestic and/or foreign government entities, for compliance with information obligations, transparency obligations and the prevention of illegal activities; as well as for compliance with legal or administrative requirements issued by competent authorities that are duly grounded and motivated.
The Federal Law for Protection of Personal Data in Possession of Third Parties, its Regulations and the rest of the standards applicable to the treatment of personal data (jointly, “LFPD”) establish that the transfer of the aforementioned personal data does not require your consent to be performed, but the Party Responsible is required to inform you about them. Any transfer of your personal data that does require your consent shall be notified to you in advance through the communication and updating of this Privacy Notice, and prior to performing the referred communication of your personal data.
- What rights do you have over your personal information?
The LFPD recognizes the following rights, namely:
- Access: Access to the personal data we treat on your behalf, and knowing the origin of such, the purposes of the treatment and the duration of such; information on the party(ies) responsible, and third parties to which the personal data may have been disclosed.
- Correction: Update or correct your personal data to guarantee it is accurate and up to date.
- Cancellation: Cancel your personal data that is not necessary or relevant for the purposes indicated in this Privacy Notice.
- Opposition: Right to oppose the treatment of your personal data or request that treatment end. When you exercise this right, the Party Responsible shall not treat your personal data beyond the extent permitted by the applicable Mexican legislation.
- Revocation: Revoke your consent at any time when the treatment of your personal data requires your authorization. However, this revocation cannot have retroactive effect; that is, it cannot affect situations, proceedings and/or transfers performed prior to the revocation of your consent; nor also in cases where such revocation would involve violation of the general provisions protecting public order that establish the obligation to maintain the treatment of your personal data for a certain period of time. Revocation of your consent may result in the Party Responsible ceasing to treat your personal data for the purposes indicated in this Privacy Notice and in the Party Responsible ceasing to communicate your data to Grupo Aleatica; however, such revocation cannot have the guaranteed objective of ensuring that the Grupo Aleatica companies that have or had access to your personal data will cease to treat it. In these cases, you must follow the personal data cancellation procedure established by such companies.
- Limitation: Limit the use or disclosure of your personal data at the time you provide your information, or even after such time. You can ask that the Party Responsible limit the use of your personal data to certain sectors or geographic spaces, by indicating whether or not you authorize the Party Responsible to share your personal data with Grupo Aleatica. The Party Responsible has measures and procedures to ensure the inclusion of some of your personal data on its own exclusion lists, to avoid the disclosure of such data. In these cases, the Party Responsible shall grant the owners requesting registration with proof of the corresponding registration.
- Formalize claims against the Party Responsible and/or the personal data protection authorities.
- For how long will we treat your data?
Your personal data will be kept until the time of compliance with the legal obligations arising from the relationship with you. After this period has passed, your personal information will remain blocked, limiting the treatment of such to attention to potential responsibilities arising from the treatment thereof and during the term of the corresponding statute of limitations.
- How can you contact the Party Responsible and exercise your rights?
If you have any questions or consultations about how we will treat your personal data, or if you would like to exercise any of the rights indicated in Section 5 of this Privacy Notice, you can contact us at the following addresses:
Fundación Aleatica para la Seguridad Vial, A.C.
Address: Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
Email: dpo@aleatica.com
The request must contain and be accompanied by the following:
- Your full name and address or another method to communicate the response to your request to you;
- Copy of a document that verifies your identity and, if applicable, legal representation if someone else is exercising the right on your behalf;
- Clear and accurate description of the right you want to exercise and the personal data related to your request; and
- If applicable, any other information that helps us locate your personal data.
The Party Responsible shall respond to your request within the 20 (twenty) business days following the date on which it is sent. If your request is applicable, we will comply with it within the 15 (fifteen) business days following the date on which we communicate the response to you. If your request is incomplete or incorrect, we will ask you to correct it, having 10 (ten) business days to do so. The use of electronic methods of communication authorizes the Party Responsible to attend to your request using the same method, unless you indicate another method of contact in your request.
You can obtain the information or personal data requested through copies, electronic documents in conventional formats (Word, PDF, etc.), or through any other legal means that guarantees and support the effective exercise of the requested right.
The right to cancellation is not absolute. Please keep in mind that the Party Responsible must retain information in order to comply with various legal obligations and to do so we may share personal data with other entities or organizations. In these cases, it is possible that the cancellation right must be requested from the entity that received the personal data.
You can also obtain access to your competent data protection authority through the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI).
- How often is this Privacy Notice updated?
The Party Responsible reserves the right to modify, update, extend and/or in any other way change the contents and scope of this Privacy Notice at any time and at the sole discretion of the Party Responsible. You may request a copy of the latest version of this Privacy Notice at any time from our Personal Data Department, through the email: dpo@aleatica.com.
The Privacy Notice that regulates treatment of your personal data shall be the one that is published on the website www.fundacionaleatica.org.
We review this Privacy Notice regularly.
The date of last update to this Privacy Notice is November 2022.
COMPREHENSIVE PRIVACY NOTICE
SOCIAL MEDIA
We protect your personal information.
Just as we are concerned about your safety, the protection of your privacy and your personal data is also a priority for us. In this Privacy Notice, we explain and update you on the type of personal information we request or gather, how, and for what purposes it can be shared.
- Who is the Party Responsible for treatment?
The Party Responsible for treatment is an individual or legal entity that determines the purposes for which your personal data is requested, gathered and used, as well as what data is treated and which third parties can be authorized to access it.
With respect to your personal data as a social media user, Fundación Aleatica para la Seguridad Vial, A.C. is the Party Responsible for treatment. Our address to hear and receive notifications is Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
- What personal data can we request or gather from you?
To comply with the purposes described in this Privacy Notice, the Party Responsible shall treat the following categories of personal data:
- Identification information;
- Contact information; and
- Social circumstances data.
To comply with the purposes described in this Privacy Notice, the Party Responsible shall not request or treat sensitive personal data.
Responsibilities of the Party Responsible, of the owners-users of social media and of the social media service providers.
The Party Responsible treats the personal data of the owners-users of social media through access and handling of the information that such owners-users publish or communicate through the profiles they have created in each social media platform they use to communicate with or contact the Party Responsible. This treatment also covers leveraging of your personal data for purposes of communicating the activities of the Party Responsible and/or its group of companies (Grupo Aleatica). The Party Responsible accesses, handles and leverages the personal data of owners-users of social media only during the time for which the owners-users remain in contact with the profiles managed by the Party Responsible on each of the social media platforms or when such owners interact with the Party Responsible through open or private messages sent through the social media platforms.
The owners-users are responsible for the accuracy, truthfulness and updating of their personal data published on their social media networks; as well as the level of communication of their information and access to such permitted or allowed for third parties through such profiles. We recommend that all owners-users of social media continually review the privacy setting of their profiles for each of the websites they use to contact with the Party Responsible. We also recommend that owners-users of social media avoid publishing their personal data through open messages that can be created on certain social media platforms.
Social media service providers are responsible for the databases created with the personal data of the users of such networks. The service providers are also responsible for the security measures they adopt to safeguard the personal data of their users.
Based on the above, the Party Responsible agrees to provide appropriate access, handling and leveraging of the personal data of the owners-users tied to the profiles managed by the Party Responsible on various social media networks or that send information through private messages. Databases are not created with the information and/or personal data of the owners-users of social media. You are responsible for the personal data you publish on forums, messages and other social media platforms and not sent to the Party Responsible through private messaging.
- Why do we obtain and treat your data?
The personal data you provide to us or we obtain from you shall be treated for the purposes indicated in this section. The Party Responsible may treat your personal data for 2 (two) types of purposes, Primary and Secondary.
Primary Purposes:
- Attention and response to your requests, consultations and information requests.
- Communication with those requesting information, in follow-up on their consultations or requests.
- Management of social media followers and communication of the activities of the Party Responsible through such platforms.
- Attention and response to requests, consultations and information requests through social media platforms used by the Party Responsible for such purposes.
- Statistics on followers and users of social media where the Party Responsible has information profiles.
- Statistics and historical log of consultations.
The Party Responsible shall not use your personal data for Secondary Purposes.
- Who can we share your personal data with?
Your personal data can be communicated in order to comply with legal obligations, to the following entities:
- To our parent company and/or controlling companies, controlled companies, subsidiaries, affiliates, related parties and/or any company of the same group as the Party Responsible that acts under the same internal processes and policies (Grupo Aleatica), for purposes of management, administration and centralized safeguarding of the information; for attention to consultations related to companies of the Party Responsible’s corporate group; and for statistics purposes and a historical record of consultations. You can request more information through the following email account: dpo@aleatica.com.
- Public organizations; federal, state and/or municipal public administrations; commissions; institutes; regulatory entities; judicial or administrative authorities; domestic and/or foreign government entities, for compliance with information obligations, transparency obligations and the prevention of illegal activities; as well as for compliance with legal or administrative requirements issued by competent authorities that are duly grounded and motivated.
The Federal Law for Protection of Personal Data in Possession of Third Parties, its Regulations and the rest of the standards applicable to the treatment of personal data (jointly, “LFPD”) establish that the transfer of the aforementioned personal data does not require your consent to be performed, but the Party Responsible is required to inform you about them. Any transfer of your personal data that does require your consent shall be notified to you in advance through the communication and updating of this Privacy Notice, and prior to performing the referred communication of your personal data.
- What rights do you have over your personal information?
The LFPD recognizes the following rights, namely:
- Access: Access to the personal data we treat on your behalf, and knowing the origin of such, the purposes of the treatment and the duration of such; information on the party(ies) responsible, and third parties to which the personal data may have been disclosed.
- Correction: Update or correct your personal data to guarantee it is accurate and up to date.
- Cancellation: Cancel your personal data that is not necessary or relevant for the purposes indicated in this Privacy Notice.
- Opposition: Right to oppose the treatment of your personal data or request that treatment end. When you exercise this right, the Party Responsible shall not treat your personal data beyond the extent permitted by the applicable Mexican legislation.
- Revocation: Revoke your consent at any time when the treatment of your personal data requires your authorization. However, this revocation cannot have retroactive effect; that is, it cannot affect situations, proceedings and/or transfers performed prior to the revocation of your consent; nor also in cases where such revocation would involve violation of the general provisions protecting public order that establish the obligation to maintain the treatment of your personal data for a certain period of time. Revocation of your consent may result in the Party Responsible ceasing to treat your personal data for the purposes indicated in this Privacy Notice and in the Party Responsible ceasing to communicate your data to Grupo Aleatica; however, such revocation cannot have the guaranteed objective of ensuring that the Grupo Aleatica companies that have or had access to your personal data will cease to treat it. In these cases, you must follow the personal data cancellation procedure established by such companies.
- Limitation: Limit the use or disclosure of your personal data at the time you provide your information, or even after such time. You can ask that the Party Responsible limit the use of your personal data to certain sectors or geographic spaces, by indicating whether or not you authorize the Party Responsible to share your personal data with Grupo Aleatica. The Party Responsible has measures and procedures to ensure the inclusion of some of your personal data on its own exclusion lists, to avoid the disclosure of such data. In these cases, the Party Responsible shall grant the owners requesting registration with proof of the corresponding registration.
- Formalize claims against the Party Responsible and/or the personal data protection authorities.
- For how long will we treat your data?
Your personal data will be kept until the time of compliance with the legal obligations arising from the relationship with you. After this period has passed, your personal information will remain blocked, limiting the treatment of such to attention to potential responsibilities arising from the treatment thereof and during the term of the corresponding statute of limitations.
- How can you contact the Party Responsible and exercise your rights?
If you have any questions or consultations about how we will treat your personal data, or if you would like to exercise any of the rights indicated in Section 5 of this Privacy Notice, you can contact us at the following addresses:
Fundación Aleatica para la Seguridad Vial, A.C.
Address: Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
Email: dpo@aleatica.com
The request must contain and be accompanied by the following:
- Your full name and address or another method to communicate the response to your request to you;
- Copy of a document that verifies your identity and, if applicable, legal representation if someone else is exercising the right on your behalf;
- Clear and accurate description of the right you want to exercise and the personal data related to your request; and
- If applicable, any other information that helps us locate your personal data.
The Party Responsible shall respond to your request within the 20 (twenty) business days following the date on which it is sent. If your request is applicable, we will comply with it within the 15 (fifteen) business days following the date on which we communicate the response to you. If your request is incomplete or incorrect, we will ask you to correct it, having 10 (ten) business days to do so. The use of electronic methods of communication authorizes the Party Responsible to attend to your request using the same method, unless you indicate another method of contact in your request.
You can obtain the information or personal data requested through copies, electronic documents in conventional formats (Word, PDF, etc.), or through any other legal means that guarantees and support the effective exercise of the requested right.
The right to cancellation is not absolute. Please keep in mind that the Party Responsible must retain information in order to comply with various legal obligations and to do so we may share personal data with other entities or organizations. In these cases, it is possible that the cancellation right must be requested from the entity that received the personal data.
You can also obtain access to your competent data protection authority through the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI).
- How often is this Privacy Notice updated?
The Party Responsible reserves the right to modify, update, extend and/or in any other way change the contents and scope of this Privacy Notice at any time and at the sole discretion of the Party Responsible. You may request a copy of the latest version of this Privacy Notice at any time from our Personal Data Department, through the email: dpo@aleatica.com.
The Privacy Notice that regulates treatment of your personal data shall be the one that is published on the website www.fundacionaleatica.org.
We review this Privacy Notice regularly.
The date of last update to this Privacy Notice is November 2022.
COMPREHENSIVE PRIVACY NOTICE
VISITORS
We protect your personal information.
Just as we are concerned about your safety, the protection of your privacy and your personal data is also a priority for us. In this Privacy Notice, we explain and update you on the type of personal information we request or gather, how, and for what purposes it can be shared.
- Who is the Party Responsible for treatment?
The Party Responsible for treatment is an individual or legal entity that determines the purposes for which your personal data is requested, gathered and used, as well as what data is treated and which third parties can be authorized to access it.
With respect to your personal data as a social media user, Fundación Aleatica para la Seguridad Vial, A.C. is the Party Responsible for treatment. Our address to hear and receive notifications is Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
- What personal data can we request or gather from you?
To comply with the purposes described in this Privacy Notice, the Party Responsible shall treat the following categories of personal data:
- Identification information;
- Contact information; and
- Commercial information data.
To comply with the purposes described in this Privacy Notice, the Party Responsible shall not request or treat sensitive personal data.
- Why do we obtain and treat your data?
The personal data you provide to us or we obtain from you shall be treated for the purposes indicated in this section. The Party Responsible may treat your personal data for 2 (two) types of purposes, Primary and Secondary.
Primary Purposes:
- Security of visitors, employees, supplier personnel and other people who access the Party Responsible’s facilities.
- Access control for visitors and, when applicable, IT equipment brought into the Party Responsible’s facilities.
The Party Responsible shall not use your personal data for Secondary Purposes.
- Who can we share your personal data with?
Your personal data can be communicated in order to comply with legal obligations, to the following entities:
- To our parent company and/or controlling companies, controlled companies, subsidiaries, affiliates, related parties and/or any company of the same group as the Party Responsible that acts under the same internal processes and policies (Grupo Aleatica), for purposes of management, administration and centralized safeguarding of the information; for attention to consultations related to companies of the Party Responsible’s corporate group; and for statistics purposes and a historical record of consultations. You can request more information through the following email account: dpo@aleatica.com.
- Public organizations; federal, state and/or municipal public administrations; commissions; institutes; regulatory entities; judicial or administrative authorities; domestic and/or foreign government entities, for compliance with information obligations, transparency obligations and the prevention of illegal activities; as well as for compliance with legal or administrative requirements issued by competent authorities that are duly grounded and motivated.
The Federal Law for Protection of Personal Data in Possession of Third Parties, its Regulations and the rest of the standards applicable to the treatment of personal data (jointly, “LFPD”) establish that the transfer of the aforementioned personal data does not require your consent to be performed, but the Party Responsible is required to inform you about them. Any transfer of your personal data that does require your consent shall be notified to you in advance through the communication and updating of this Privacy Notice, and prior to performing the referred communication of your personal data.
In terms of the above, your personal data shall not be transferred to third parties without your consent, except in the cases of the exceptions established in Article 37 of the LFPD, and, in all cases, in compliance with the conditions set forth in Article 17 of the LFPD Regulations.
- What rights do you have over your personal information?
The LFPD recognizes the following rights, namely:
- Access: Access to the personal data we treat on your behalf, and knowing the origin of such, the purposes of the treatment and the duration of such; information on the party(ies) responsible, and third parties to which the personal data may have been disclosed.
- Correction: Update or correct your personal data to guarantee it is accurate and up to date.
- Cancellation: Cancel your personal data that is not necessary or relevant for the purposes indicated in this Privacy Notice.
- Opposition: Right to oppose the treatment of your personal data or request that treatment end. When you exercise this right, the Party Responsible shall not treat your personal data beyond the extent permitted by the applicable Mexican legislation.
- Revocation: Revoke your consent at any time when the treatment of your personal data requires your authorization. However, this revocation cannot have retroactive effect; that is, it cannot affect situations, proceedings and/or transfers performed prior to the revocation of your consent; nor also in cases where such revocation would involve violation of the general provisions protecting public order that establish the obligation to maintain the treatment of your personal data for a certain period of time. Revocation of your consent may result in the Party Responsible ceasing to treat your personal data for the purposes indicated in this Privacy Notice and in the Party Responsible ceasing to communicate your data to Grupo Aleatica; however, such revocation cannot have the guaranteed objective of ensuring that the Grupo Aleatica companies that have or had access to your personal data will cease to treat it. In these cases, you must follow the personal data cancellation procedure established by such companies.
- Limitation: Limit the use or disclosure of your personal data at the time you provide your information, or even after such time. You can ask that the Party Responsible limit the use of your personal data to certain sectors or geographic spaces, by indicating whether or not you authorize the Party Responsible to share your personal data with Grupo Aleatica. The Party Responsible has measures and procedures to ensure the inclusion of some of your personal data on its own exclusion lists, to avoid the disclosure of such data. In these cases, the Party Responsible shall grant the owners requesting registration with proof of the corresponding registration.
- Formalize claims against the Party Responsible and/or the personal data protection authorities.
- For how long will we treat your data?
Your personal data will be kept until the time of compliance with the legal obligations arising from the relationship with you. After this period has passed, your personal information will remain blocked, limiting the treatment of such to attention to potential responsibilities arising from the treatment thereof and during the term of the corresponding statute of limitations.
- How can you contact the Party Responsible and exercise your rights?
If you have any questions or consultations about how we will treat your personal data, or if you would like to exercise any of the rights indicated in Section 5 of this Privacy Notice, you can contact us at the following addresses:
Fundación Aleatica para la Seguridad Vial, A.C.
Address: Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
Email: dpo@aleatica.com
The request must contain and be accompanied by the following:
- Your full name and address or another method to communicate the response to your request to you;
- Copy of a document that verifies your identity and, if applicable, legal representation if someone else is exercising the right on your behalf;
- Clear and accurate description of the right you want to exercise and the personal data related to your request; and
- If applicable, any other information that helps us locate your personal data.
The Party Responsible shall respond to your request within the 20 (twenty) business days following the date on which it is sent. If your request is applicable, we will comply with it within the 15 (fifteen) business days following the date on which we communicate the response to you. If your request is incomplete or incorrect, we will ask you to correct it, having 10 (ten) business days to do so. The use of electronic methods of communication authorizes the Party Responsible to attend to your request using the same method, unless you indicate another method of contact in your request.
You can obtain the information or personal data requested through copies, electronic documents in conventional formats (Word, PDF, etc.), or through any other legal means that guarantees and support the effective exercise of the requested right.
The right to cancellation is not absolute. Please keep in mind that the Party Responsible must retain information in order to comply with various legal obligations and to do so we may share personal data with other entities or organizations. In these cases, it is possible that the cancellation right must be requested from the entity that received the personal data.
You can also obtain access to your competent data protection authority through the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI).
- How often is this Privacy Notice updated?
The Party Responsible reserves the right to modify, update, extend and/or in any other way change the contents and scope of this Privacy Notice at any time and at the sole discretion of the Party Responsible. You may request a copy of the latest version of this Privacy Notice at any time from our Personal Data Department, through the email: dpo@aleatica.com.
The Privacy Notice that regulates treatment of your personal data shall be the one that is published on the website www.fundacionaleatica.org.
We review this Privacy Notice regularly. The date of last update to this Privacy Notice is November 2022.
COMPREHENSIVE PRIVACY NOTICE
EMPLOYEES, DIRECTORS AND EXECUTIVES
We protect your personal information.
Just as we are concerned about your safety, the protection of your privacy and your personal data is also a priority for us. In this Privacy Notice, we explain and update you on the type of personal information we request or gather, how, and for what purposes it can be shared.
- Who is the Party Responsible for treatment?
The Party Responsible for treatment is an individual or legal entity that determines the purposes for which your personal data is requested, gathered and used, as well as what data is treated and which third parties can be authorized to access it.
With respect to your personal data as a social media user, Fundación Aleatica para la Seguridad Vial, A.C. is the Party Responsible for treatment. Our address to hear and receive notifications is Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
- What personal data can we request or gather from you?
To comply with the purposes described in this Privacy Notice, the Party Responsible shall treat the following categories of personal data:
- Identification and contact information;
- Personal characteristics information;
- Academic and professional data;
- Employment data and details;
- Economic, financial and insurance information;
- Social circumstances data;
- Data on criminal background; and
- Sensitive personal data (health and union affiliation).
To comply with the legal provisions related to social security and labor; management actions for the benefits granted by the Party Responsible; application of medical and health questionnaires; and application and execution of medical tests and toxicological tests, the Party Responsible must treat personal data that the legislation classifies as “sensitive”. Specifically, and in accordance with the labor relationship you have with the Party Responsible, the Party Responsible may ask you to provide information on your health condition and union affiliation. When the Party Responsible must request this information, it will obtain your express consent in writing, through the corresponding physical or electronic methods.
Third party personal data.
If you provide the Party Responsible with personal data on third parties (for example, family members) in order to comply with the purposes indicated in this Privacy Notice, you must inform them of the existence of this treatment of their personal data and the contents of this Privacy Notice. If you provide third party personal data, you declare through such delivery that you have previously obtained the consent of the owners thereof to provide their information to the Party Responsible and that such data is correct and complete.
Personal data of minors.
For the purposes established in this Privacy Notice, the Party Responsible does not gather personal data on minors (individuals under the age of 18). The Party Responsible shall only request the personal data of minors provided by their parents and/or guardians for purposes related to the labor relationship between you and the Party Responsible, including, when applicable, management of labor benefits.
Parents and/or guardians may at all times exercise the rights established in this Privacy Notice on behalf of their children or wards, or cancel their consent for the treatment of the personal data provided to the Party Responsible for the purposes indicated above, in those cases where the current legislation so allows.
- Why do we obtain and treat your data?
The personal data you provide to us or we obtain from you shall be treated for the purposes indicated in this section. The Party Responsible may treat your personal data for 2 (two) types of purposes, Primary and Secondary.
Primary Purposes:
- Management and Administration of Human Resources: Management of the labor activities and the workforce in general, including the selection of personnel, payment and review of salaries, bonuses, reimbursements, pensions and/or insurance and other benefits, such as social benefits and flexible retribution; performance evaluations; maintenance and updating of employee files; maintenance of records of absences due to illness and control of absenteeism; management of disciplinary matters, complaints and contract resolutions; contracting of collective insurance policies to designate our employees as beneficiaries, if they decide to participate in them; organization of business trips; management of professional expenses and reimbursements; creation of work email accounts, assignment of profiles in the systems of the Party Responsible and registration in the corporate directory, including the assignment of work tools, codes and passwords; planning and follow-up on training needs or professional development activities and skills; delivery of uniforms and other work materials; management of workforce directories; creation and implementation of analytical and statistics processes; verification of personal and/or labor references; and statistics and a historical record of employees.
We can also treat your personal data, particularly your health data, for the provision of labor disability contingency service coverage, professional illnesses and/or work accidents, within the limits established in the current legislation.
We will receive the conclusions reached with respect to the employer’s ability to perform the functions of the work position, as well as the need to introduce and/or improve the protection and prevention measures for such in order to correctly carry out its functions on a preventive basis.
- Security: Facilitate communication with the employee; guarantee business continuity; protect employee health and safety; access control and security; safeguard the information technology systems, including infrastructure and communications; control and safeguard office materials and other assets; monitor the correct and legal use of the Party Responsible’s IT resources; regulate physical access to the Party Responsible’s facilities; and facilitate communication with the employee and the designated emergency contacts.
- Commercial operations: Management and protection of the Party Responsible’s assets (including any intellectual and industrial property rights, confidential information and IT systems); strategic planning; project management; gathering of audit incidents; maintenance of records related to business activities; budgets; financial management; communications; management of company reorganizations; and mergers and acquisitions of our shares and/or business with potential buyers.
- Compliance and Monitoring: Compliance with internal policies; compliance with any legal or contractual obligation; compliance with labor, union, health, wellness and/or labor risk prevention requirements; compliance with legal requirements, administrative requirements, legal proceedings and/or exercise of legal rights and recourses; defense at trial; management of any internal complaints or claims; follow-up and monitoring of audits and investigations, including monitoring and audits of worker use of IT system tools and access to the content treated, used, uploaded, downloaded and/or stored using such; compliance and follow-up on investigations of complaints made through the Ethics Channel to verify compliance with the internal policies and other obligations of a labor nature; and compliance with all legal and contractual obligations for the prevention of crime, money laundering and fraud.
- Corporate management: Management, control and administration of the corporate books of the Party Responsible, including corporate books of any of its subsidiaries, agreements approved by partners and/or shareholders of the Party Responsible, board members of the Board of Directors and/or members of the Boards of the Party Responsible. Communication of reports, assessments and/or statements made to the administrative bodies of the Party Responsible, its parent company, controlling companies, controlled companies, subsidiaries, affiliates, related parties and/or any member of the same corporate group as the Party Responsible (Grupo Aleatica).
Secondary Purposes:
- Communications: Make communications about the activities of the Party Responsible and Grupo Aleatica aimed at fostering integration of its employees through recognitions, congratulations, invitations to corporate events and any other corporate communication associated with social use.
- Who can we share your personal data with?
Your personal data can be communicated in order to comply with legal obligations, to the following entities:
- To our parent company and/or controlling companies, controlled companies, subsidiaries, affiliates, related parties and/or any company of the same group as the Party Responsible that acts under the same internal processes and policies (Grupo Aleatica), for purposes of management, administration and centralized safeguarding of the information; for attention to consultations related to companies of the Party Responsible’s corporate group; and for statistics purposes and a historical record of consultations. You can request more information through the following email account: dpo@aleatica.com.
- Banks or other financial entities, for compliance with payment obligations.
- Insurance companies and insurance agents, for the contracting and management of insurance policies for employees that decide to join them.
- Professional advisors and/or service providers, in order for them to support the Party Responsible in complying with the labor benefits offered to its employees.
- When legally required, to unions, in order to pay the fees payable by the Party Responsible’s employees.
- Public organizations; federal, state and/or municipal public administrations; commissions; institutes and/or regulatory entities, for compliance with information obligations, transparency obligations and the prevention of illegal activities; to communicate illegal actions arising from complaints communicated through the Ethics Channel established by Grupo Aleatica, as well as for compliance with legal and/or administrative requirements issued by competent authorities.
- Foreign organizations, entities or authorities, to communicate illegal actions arising from complaints communicated through the Ethics Channel established by the Party Responsible’s corporate group and for compliance with requirements or requests with effects in Mexico, or required in accordance with the International Treaties to which Mexico is party.
- Domestic or foreign third parties, when such transfer is necessary for medical attention, prevention, diagnosis, provision of health assistance, medical treatments and/or management of health services, in the terms established in the General Health Law and other applicable and valid legal provisions.
- Service providers, to verify labor, financial and/or legal background, or to perform medical tests, provided such services require the service provider to retain evidence of the provision of the services.
The Federal Law for Protection of Personal Data in Possession of Third Parties, its Regulations and the rest of the standards applicable to the treatment of personal data (jointly, “LFPD”) establish that the transfer of the aforementioned personal data does not require your consent to be performed, but the Party Responsible is required to inform you about them. Any transfer of your personal data that does require your consent shall be notified to you in advance through the communication and updating of this Privacy Notice, and prior to performing the referred communication of your personal data.
- What rights do you have over your personal information?
The LFPD recognizes the following rights, namely:
- Access: Access to the personal data we treat on your behalf, and knowing the origin of such, the purposes of the treatment and the duration of such; information on the party(ies) responsible, and third parties to which the personal data may have been disclosed.
- Correction: Update or correct your personal data to guarantee it is accurate and up to date.
- Cancellation: Cancel your personal data that is not necessary or relevant for the purposes indicated in this Privacy Notice.
- Opposition: Right to oppose the treatment of your personal data or request that treatment end. When you exercise this right, the Party Responsible shall not treat your personal data beyond the extent permitted by the applicable Mexican legislation.
- Revocation: Revoke your consent at any time when the treatment of your personal data requires your authorization. However, this revocation cannot have retroactive effect; that is, it cannot affect situations, proceedings and/or transfers performed prior to the revocation of your consent; nor also in cases where such revocation would involve violation of the general provisions protecting public order that establish the obligation to maintain the treatment of your personal data for a certain period of time. Revocation of your consent may result in the Party Responsible ceasing to treat your personal data for the purposes indicated in this Privacy Notice and in the Party Responsible ceasing to communicate your data to Grupo Aleatica; however, such revocation cannot have the guaranteed objective of ensuring that the Grupo Aleatica companies that have or had access to your personal data will cease to treat it. In these cases, you must follow the personal data cancellation procedure established by such companies.
- Limitation: Limit the use or disclosure of your personal data at the time you provide your information, or even after such time. You can ask that the Party Responsible limit the use of your personal data to certain sectors or geographic spaces, by indicating whether or not you authorize the Party Responsible to share your personal data with Grupo Aleatica. The Party Responsible has measures and procedures to ensure the inclusion of some of your personal data on its own exclusion lists, to avoid the disclosure of such data. In these cases, the Party Responsible shall grant the owners requesting registration with proof of the corresponding registration.
- Formalize claims against the Party Responsible and/or the personal data protection authorities.
- For how long will we treat your data?
Your personal data will be kept until the time of compliance with the legal obligations arising from the labor relationship with you. After this period has passed, your personal information will remain blocked, limiting the treatment of such to attention to potential responsibilities arising from the treatment thereof and during the term of the corresponding statute of limitations.
- How can you contact the Party Responsible and exercise your rights?
If you have any questions or consultations about how we will treat your personal data, or if you would like to exercise any of the rights indicated in Section 5 of this Privacy Notice, you can contact us at the following addresses:
Fundación Aleatica para la Seguridad Vial, A.C.
Address: Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
Email: dpo@aleatica.com
The request must contain and be accompanied by the following:
- Your full name and address or another method to communicate the response to your request to you;
- Copy of a document that verifies your identity and, if applicable, legal representation if someone else is exercising the right on your behalf;
- Clear and accurate description of the right you want to exercise and the personal data related to your request; and
- If applicable, any other information that helps us locate your personal data.
The Party Responsible shall respond to your request within the 20 (twenty) business days following the date on which it is sent. If your request is applicable, we will comply with it within the 15 (fifteen) business days following the date on which we communicate the response to you. If your request is incomplete or incorrect, we will ask you to correct it, having 10 (ten) business days to do so. The use of electronic methods of communication authorizes the Party Responsible to attend to your request using the same method, unless you indicate another method of contact in your request.
You can obtain the information or personal data requested through copies, electronic documents in conventional formats (Word, PDF, etc.), or through any other legal means that guarantees and support the effective exercise of the requested right.
The right to cancellation is not absolute. Please keep in mind that the Party Responsible must retain information in order to comply with various legal obligations and to do so we may share personal data with other entities or organizations. In these cases, it is possible that the cancellation right must be requested from the entity that received the personal data.
You can also obtain access to your competent data protection authority through the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI).
- How often is this Privacy Notice updated?
The Party Responsible reserves the right to modify, update, extend and/or in any other way change the contents and scope of this Privacy Notice at any time and at the sole discretion of the Party Responsible. You may request a copy of the latest version of this Privacy Notice at any time from our Personal Data Department, through the email: dpo@aleatica.com.
Any changes to this Privacy Notice shall be communicated via email or through another form of communication if you do not have an email account.
The Privacy Notice that regulates treatment of your personal data shall be the one that is published on the website www.fundacionaleatica.org.
We review this Privacy Notice regularly. The date of last update to this Privacy Notice is November 2022.
COMPREHENSIVE PRIVACY NOTICE
SUPPLIERS
We protect your personal information.
Just as we are concerned about your safety, the protection of your privacy and your personal data is also a priority for us. In this Privacy Notice, we explain and update you on the type of personal information we request or gather, how, and for what purposes it can be shared.
- Who is the Party Responsible for treatment?
The Party Responsible for treatment is an individual or legal entity that determines the purposes for which your personal data is requested, gathered and used, as well as what data is treated and which third parties can be authorized to access it.
With respect to your personal data as a social media user, Fundación Aleatica para la Seguridad Vial, A.C. is the Party Responsible for treatment. Our address to hear and receive notifications is Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
- What personal data can we request or gather from you?
To comply with the purposes described in this Privacy Notice, the Party Responsible shall treat the following categories of personal data:
- Identification information;
- Contact information;
- Commercial and transaction data;
- Labor information; and
- Asset, economic and financial data.
To comply with the purposes described in this Privacy Notice, the Party Responsible shall not request or treat sensitive personal data.
Third party personal data.
If you provide the Party Responsible with personal data on third parties (for example, family members) in order to comply with the purposes indicated in this Privacy Notice, you must inform them of the existence of this treatment of their personal data and the contents of this Privacy Notice. If you provide third party personal data, you declare through such delivery that you have previously obtained the consent of the owners thereof to provide their information to the Party Responsible and that such data is correct and complete.
In addition, if you become a standardized supplier, for signing of the Contract, the Party Responsible will ask you to confirm the identity of the individuals that, based on the powers of representation provided, act as the supplier’s authorized legal representatives, and who will sign on behalf thereof; specifically:
- Singing of contract through certified email issued by an official authority, upon verification of the identity of the owner thereof (in countries and jurisdictions where this is valid); or
- Otherwise, a legible copy (of both sides, for documents that so require) of a valid official ID (Voter ID card [INE], passport, professional certificate; among others).
- Why do we obtain and treat your data?
The Federal Law for Protection of Personal Information in Possession of Third Parties, its Regulations and the other standards applicable to the treatment of personal data (jointly “LFPD”) allow us to treat the personal data of the individuals referred to in Section 2 of this Privacy Notice without needing to obtain the consent of its owners, to comply with our legal obligations, contractual obligations, or based on our legitimate interest in executing compliance controls and due diligence, both prior to contract execution and during the term of the commercial and/or contractual relationship.
The personal data you provide to us or we obtain from you shall be treated for the purposes indicated in this section. The Party Responsible may treat your personal data for 2 (two) types of purposes, Primary and Secondary.
Primary Purposes:
- Management, control and administration of the supplier contracting processes for the provision of services or products to the Party Responsible.
- Management, control and administration of registration, cancellation, changes and updates to information on suppliers in the Party Responsible’s systems and the Platform, including information for the use and handling of the Platform functions; as well as attention, follow-up and prompt and efficient response to questions or consultations about such functions.
- Creation of user accounts allowing access to the Platform.
- Management and payment of invoices issued by suppliers, to be paid by the Party Responsible.
- Management of standardization of suppliers by the Party Responsible, including administrative, commercial, tax, accounting, risk assessment, formal signing of contract conditions and/or any other matter related to the standardization of a supplier.
- Compliance with confidentiality, honor and transparency obligations; as well as domestic or international legal provisions addressing the prevention of illegal activities and other sector standards, through the implementation of and compliance with administrative and technical procedures established for such purposes.
- Control, assessment and audit of compliance with the Code of Ethics and Anti-Corruption Policies of Grupo Aleatica.
- Management of communications between You and the Party Responsible.
- Verification of labor and professional references.
- If applicable, documentation and control of the assignment of computer assets and electronic communications for use by supplier personnel.
- If applicable, assignment of codes and passwords for supplier personnel.
- Management and administration of supplier documents safeguarded by the Party Responsible.
- Statistics and historical log of representatives and contacts for the Party Responsible’s suppliers.
- Analysis of data using analytics technology in order to improve the supplier registration processes.
The Party Responsible shall not use your personal data for Secondary Purposes.
- Who can we share your personal data with?
Your personal data can be communicated in order to comply with legal obligations, to the following entities:
- To our parent company and/or controlling companies, controlled companies, subsidiaries, affiliates, related parties and/or any company of the same group as the Party Responsible that acts under the same internal processes and policies (Grupo Aleatica), for purposes of management, administration and centralized safeguarding of the information; for attention to consultations related to companies of the Party Responsible’s corporate group; and for statistics purposes and a historical record of consultations. You can request more information through the following email account: dpo@aleatica.com.
- Public organizations; federal, state and/or municipal public administrations; commissions; institutes; regulatory entities; judicial or administrative authorities; domestic and/or foreign government entities, for compliance with information obligations, transparency obligations and the prevention of illegal activities; as well as for compliance with legal or administrative requirements issued by competent authorities that are duly grounded and motivated.
- IT service providers that treat the personal data on behalf and based on the instructions of the Party Responsible (such as data storage service providers, IT maintenance and support, cybersecurity controls, etc.) for centralized control and maintenance of the information.
- Advisory services and external firms that work on compliance investigations and audits, for centralized control and maintenance of the information.
- Financial entities, for fee payment.
The LFPD establishes that transfers of the personal data indicated above does not require your consent, but the Party Responsible is required to inform you of such. Any transfer of your personal data that does require your consent shall be notified to you in advance through the communication and updating of this Privacy Notice, and prior to performing the referred communication of your personal data.
- What rights do you have over your personal information?
The LFPD recognizes the following rights, namely:
- Access: Access to the personal data we treat on your behalf, and knowing the origin of such, the purposes of the treatment and the duration of such; information on the party(ies) responsible, and third parties to which the personal data may have been disclosed.
- Correction: Update or correct your personal data to guarantee it is accurate and up to date.
- Cancellation: Cancel your personal data that is not necessary or relevant for the purposes indicated in this Privacy Notice.
- Opposition: Right to oppose the treatment of your personal data or request that treatment end. When you exercise this right, the Party Responsible shall not treat your personal data beyond the extent permitted by the applicable Mexican legislation.
- Revocation: Revoke your consent at any time when the treatment of your personal data requires your authorization. However, this revocation cannot have retroactive effect; that is, it cannot affect situations, proceedings and/or transfers performed prior to the revocation of your consent; nor also in cases where such revocation would involve violation of the general provisions protecting public order that establish the obligation to maintain the treatment of your personal data for a certain period of time. Revocation of your consent may result in the Party Responsible ceasing to treat your personal data for the purposes indicated in this Privacy Notice and in the Party Responsible ceasing to communicate your data to Grupo Aleatica; however, such revocation cannot have the guaranteed objective of ensuring that the Grupo Aleatica companies that have or had access to your personal data will cease to treat it. In these cases, you must follow the personal data cancellation procedure established by such companies.
- Limitation: Limit the use or disclosure of your personal data at the time you provide your information, or even after such time. You can ask that the Party Responsible limit the use of your personal data to certain sectors or geographic spaces, by indicating whether or not you authorize the Party Responsible to share your personal data with Grupo Aleatica. The Party Responsible has measures and procedures to ensure the inclusion of some of your personal data on its own exclusion lists, to avoid the disclosure of such data. In these cases, the Party Responsible shall grant the owners requesting registration with proof of the corresponding registration.
- Formalize claims against the Party Responsible and/or the personal data protection authorities.
- For how long will we treat your data?
Your personal data will be kept until the time of compliance with the legal obligations arising from the commercial and/or contractual relationship with you. After this period has passed, your personal information will remain blocked, limiting the treatment of such to attention to potential responsibilities arising from the treatment thereof and during the term of the corresponding statute of limitations.
- How can you contact the Party Responsible and exercise your rights?
If you have any questions or consultations about how we will treat your personal data, or if you would like to exercise any of the rights indicated in Section 5 of this Privacy Notice, you can contact us at the following addresses:
Fundación Aleatica para la Seguridad Vial, A.C.
Address: Boulevard Manuel Ávila Camacho No. 5 Edificio Toreo Parque Central Corporativo Torre A, Piso 12, Colonia Lomas de Sotelo, Naucalpan de Juárez, Código Postal 53390, Estado de México, México.
Email: dpo@aleatica.com
Contracting company:
Address: At the mailing address indicated in the services contract.
Email: dpo@aleatica.com
The request must contain and be accompanied by the following:
- Your full name and address or another method to communicate the response to your request to you;
- Copy of a document that verifies your identity and, if applicable, legal representation if someone else is exercising the right on your behalf;
- Clear and accurate description of the right you want to exercise and the personal data related to your request; and
- If applicable, any other information that helps us locate your personal data.
The Party Responsible shall respond to your request within the 20 (twenty) business days following the date on which it is sent. If your request is applicable, we will comply with it within the 15 (fifteen) business days following the date on which we communicate the response to you. If your request is incomplete or incorrect, we will ask you to correct it, having 10 (ten) business days to do so. The use of electronic methods of communication authorizes the Party Responsible to attend to your request using the same method, unless you indicate another method of contact in your request.
You can obtain the information or personal data requested through copies, electronic documents in conventional formats (Word, PDF, etc.), or through any other legal means that guarantees and support the effective exercise of the requested right.
The right to cancellation is not absolute. Please keep in mind that the Party Responsible must retain information in order to comply with various legal obligations and to do so we may share personal data with other entities or organizations. In these cases, it is possible that the cancellation right must be requested from the entity that received the personal data.
You can also obtain access to your competent data protection authority through the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI).
- How often is this Privacy Notice updated?
The Party Responsible reserves the right to modify, update, extend and/or in any other way change the contents and scope of this Privacy Notice at any time and at the sole discretion of the Party Responsible. You may request a copy of the latest version of this Privacy Notice at any time from our Personal Data Department, through the email: dpo@aleatica.com.
Any changes to this Privacy Notice shall be communicated via email or through another form of communication if you do not have an email account.
The Privacy Notice that regulates treatment of your personal data shall be the one that is published on the website www.fundacionaleatica.org.
We review this Privacy Notice regularly. The date of last update to this Privacy Notice is November 2022.
