Privacy Policy

In compliance with the Federal Law for the Protection of Personal Data held by Private Parties and its Regulations, we make this Privacy Notice available to our Prospects, Clients, Visitors, and Suppliers.

CONTENTS.

DATA CONTROLLER AND PROCESSOR
EFFECTS OF THE PRIVACY NOTICE.
PERSONAL DATA AND/OR PURPOSES OF USE.
LIMITATION OF USE AND DISCLOSURE OF PERSONAL DATA.
TRANSFER OF PERSONAL INFORMATION TO THIRD PARTIES.
REVOCATION FOR DATA PROCESSING.
MODIFICATIONS TO THE PRIVACY NOTICE.
RIGHTS OF THE DATA SUBJECT.

1.- DATA CONTROLLER AND PROCESSOR

INDUSTRIALIZADORA INTEGRAL DEL AGAVE, S.A.P.I. DE C.V. located at AV. PERIFÉRICO SUR 7750, COLONIA SANTA MARIA TEQUEPEXPAN, ZIP CODE 45601, SAN PEDRO TLAQUEPAQUE, JALISCO, MEXICO.

In accordance with Constitutional Article 16, and in compliance with the Federal Law for the Protection of Personal Data held by Private Parties, we have created a privacy policy which we hope shall help you understand how your personal information is collected, used, transferred, and stored. Therefore, we inform you that we are responsible and in charge of processing, using, and protecting your Personal Data under our care. If you wish to consult it by email, request it to: juridico@iidea.com.mx.

2.- EFFECTS OF THE PRIVACY NOTICE.

Any information concerning an identified or identifiable individual. We collect your personal data directly when you provide them to us yourself by various means: at our premises, by telephone, when you participate in our promotions, giveaways, campaigns, or when you provide us with information in order for us to provide you with a service or purchase our products.

Law: Federal Law for the Protection of Personal Data held by Private Parties. (FLPPDHPP)

Regulations of the Federal Law for the Protection of Personal Data held by Private Parties. (RFLPPDHPP)

Principles and duties governing the processing of your personal information:

We collect your personal data for the purposes mentioned in this Privacy Notice. These shall be processed according to the principles and duties set forth by law, which are: legality, consent, information, quality, purpose, loyalty, proportionality, responsibility, confidentiality, and security.

Sensitive personal data:

Those personal data that affect the most intimate sphere of the data subject, or whose misuse may give rise to discrimination or entail serious risk to them. In particular, sensitive data are considered to be those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical, and moral beliefs, union membership, political opinions, and sexual orientation.

Personal financial or asset-related data.

If your method of payment is by bank card and/or check, the following data will be requested, which, in terms of Article 8 of the Federal Law on the Protection of Personal Data held by Private Parties, are considered within the category of financial or asset-related personal data: The name of the cardholder and/or checkbook holder, the card number and/or check number, the expiration date of the card, and the name of the bank. The Law requires that if the personal data collected includes sensitive or financial and/or asset-related data, the Data Controller shall carry out acts that collect and constitute the express consent of the data subject as provided in the second paragraph of Article 8 of the Law and other applicable legislation, either by signing the corresponding format, whether printed or using electronic means, through direct responses, and their corresponding processes for the formation of consent, including but not limited to, through express consent and provision by the Data Subject of personal data.

Express and Implied Consent.

Implicit consent results from facts or acts that imply it. Therefore, in the absence of your refusal, we will consider your consent on those terms. In accordance with the provisions of Article 9 of the Federal Law on the Protection of Personal Data held by Private Parties, your express consent is requested for the processing of sensitive, financial, and asset-related personal data, indicating whether you accept or reject the processing. Remembering that in accordance with Article 1803 of the Federal Civil Code, consent is express when it is manifested verbally, in writing, or by unequivocal signs of such acceptance.

Duration of the processing of your personal data.

Your personal information will be used for the time necessary to fulfill the purposes described in the Privacy Notice provided to you and, if applicable, in accordance with the provisions of the respective legal regulations. However, notwithstanding any provision of this Privacy Notice, the Data Subject acknowledges that their consent will not be required for the processing of their personal data by the Data Controller or third parties in any of the cases indicated in Article 10 of the FLPPDHPP

Special data.

Given the importance of protecting privacy and personal data, we do not collect information from individuals with disabilities or elderly individuals without prior consent from their legal guardian. For minors, consent from the parent or guardian is required. You may request the cancellation of personal data at any time in accordance with the provisions of this notice.

3.- PERSONAL DATA AND/OR USE PURPOSES.

Your personal data will be used depending on the particular case in which they are provided or collected, always in accordance with this Privacy Notice or its updates that may be made available to you from time to time to fulfill the following necessary purposes:

If you are our client or potential client.
If you are our supplier or in the process of becoming one.

III. If you work in our organization or are in the selection process.

For video surveillance within our premises
For access to our premises.
On our website.

VII. In contracts with third parties.

VIII. In subcontracting contracts related to our clients.

If the Data Subject does not express any opposition when upon receiving this privacy notice, it shall be understood that the Data Subject grants their consent to the Data Controller to the processing of the Personal Data provided and/or those provided in the future for any of the purposes set forth in this notice.

We collect your personal information:

We collect personal data from the Data Subject directly and/or personally by any contact means between the Data Subject and the Data Controller or its Officers. Personal data can also be indirectly collected through sources of public access and other available sources permitted by law, such as telephone directories or public databases on the Internet and their use shall be for the purpose previously consented to.

The personal data that shall be collected and processed are:

Identification data (including those related to your physical characteristics).
Contact information.
Asset related data.
Financial data.
Academic data, and
Employment data.

The investigations and actions deemed necessary may be carried out through any third party, agency, or authority to verify the accuracy of the data provided.

Additionally, as Secondary or Accessory Purposes, i.e., which are not necessary, but allow us to provide a better service, your personal data shall be used for:

Informing about new products and/or services, changes thereof and promotions.
Sending general and/or personalized advertising with marketing and statistical purposes.
Inviting you to participate in our or third-party promotions, offers, and advertising campaigns.
Performing studies and programs necessary to determine use and consumption habits.
Consulting about the quality of our service and to understand your specific needs, so that we can better serve you.

Your Personal Data will be processed only for the time necessary to fulfil the purposes described in this Privacy Notice that is made available to you, and where applicable, in accordance with the respective legal provisions. Security and Protection of Personal Data: The personal data you provide to the Controller will be properly protected through technological, physical, and administrative security measures, as well as mechanisms designed to protect personal data from damage, loss, alteration, destruction, or unauthorized use, access, or processing. Your personal data will only be available to personnel authorized by the Controller for the processing of information and only for the purposes described in this notice. When it is no longer necessary for the purposes described above, your personal data will be cancelled by the Controller unless legally required.

Your Personal Data will be processed based on the principles and duties set forth in the law, and the confidentiality of your personal data will be maintained by establishing and effectively maintaining administrative, technical, and physical security measures to prevent their damage, loss, alteration, destruction, unauthorized use, access, or disclosure.

I.- IF YOU ARE OUR CLIENT OR POTENTIAL CLIENT:

If you are our client or potential client, your personal data will be used for the following purposes to fulfill obligations derived from a business relationship that you may have or may establish, that is, to provide the services and products required by you, to enforce and/or demand performance of an agreement, for statistical purposes, to inform about changes or new products or services related to those hired or acquired by our clients, to evaluate the quality of service, determine the quality of our products and services, exchange necessary information to attend internal, external audits and by authorities, as well as for business, marketing, advertising and/or commercial prospecting purposes and to grant benefits and fulfill obligations with our clients as well as to conduct internal studies on consumption habits.

II.- FOR OUR SUPPLIERS OR IN THE PROCESS OF BECOMING SUPPLIERS:

Your personal data will be used for:

Everything necessary for the business relationship with data controller. Additionally, to evaluate and, if applicable, to hire them as a supplier, to keep track of our contracted suppliers and their services for subsequent registration and management in our systems, and to make transfers with [sic] your personal data to third parties in terms of the privacy notice.

III.- IF YOU WORK IN OUR ORGANIZATION OR ARE IN THE SELECTION PROCESS. –

Your personal data will be used for the following purposes:

To fulfill the obligations arising from the employment relationship between us, as well as for personnel administration; to set up employee files; to create medical records for employees; payroll processing and administration; payment of benefits, salaries and allowances, bonuses, reimbursements, pensions, insurance, and others; hiring of insurance; documenting and controlling the allocation of computing and communication assets; internal audits; creation of a work email account; preparation of the company directory; allocation of work tools; assignment of keys and passwords, ensuring compliance with confidentiality obligations and other employment obligations; verifying personal and employment references; contacting your family members, dependents, and/or beneficiaries in case of emergency. Similarly, we inform you that we may use your personal data for other purposes, provided that such purposes are compatible and can be considered similar to the above.

IV.- WHEN OBTAINED BY VIDEO SURVEILLANCE INSIDE OR OUTSIDE OUR FACILITIES.

The images obtained by the permanent supervision or monitoring of the video cameras located inside our facilities are for the security of all our visitors, collaborators, and yours. The images are kept for a maximum of 30 days for security reasons, after which they are permanently deleted.

V.- WHEN IT IS TO ACCESS TO OUR FACILITIES.

To access our facilities, we ask you to write down your identity information in a logbook, which includes your personal information, and the date and time of your visit. This is to ensure preventive measures for the safety of all our visitors, collaborators, and yours. To validate your identity, we request a valid official identification that we will keep.

VI.- ON OUR WEBSITE.

We inform you that on our website, we use cookies, web beacons, or other technologies, through which it is possible to monitor your behavior as an internet user, as well as to provide you with better service and experience while browsing our site. The personal data we collect through these technologies will be used for statistical purposes, marketing, and to facilitate faster access to the site for the user. The cookies from http://www.theiideacompany.com and any others derived from this domain are associated only with an anonymous User and their computer and do not provide references that allow deduction of personal data from the User.

The personal data we obtain from these tracking technologies include the following: Identifiers, User’s preferred language, User’s region, User’s browser type, User’s operating system type, Date and time of the start and end of a user session, Web pages visited by a user, Searches made by a user, Advertising viewed by a user.

To learn how to disable these technologies in the main browsers, please consult the following means:

Google Chrome:

Select the Chrome menu icon > Select Settings > At the bottom of the page, select Show advanced settings > In the “Privacy” section, select Content settings > Select Do not allow sites to save data > Select Done.

Internet Explorer

Click on the Tools button and then click Internet Options > Tap or click on the Privacy tab > Settings > Block all cookies and then tap or click on OK.

Safari

To set up Safari cookie blocking in iOS 8, Settings > Safari > Block Cookies and select Always Block. In iOS 7 or earlier versions, in From advertising and third parties, select Never or Always.

Firefox

Click on the Menu button and choose Options > Select the Privacy panel > In Firefox you must: choose Use custom settings for history > Uncheck the Accept cookies option to disable cookies > Close the page. Any changes you have made will be automatically saved. For other browsers or versions, please consult the help section in your browser.

VII.- IN THE EXECUTION OF OUR CONTRACTS OR CONTRACTS WITH THIRD PARTIES.

In drawing up our own or third-party contracts, such as leasing agreements and contracts for the provision of professional services, among others of a similar nature, we undertake to respect and appropriately handle the personal information obtained and necessary for the execution of such contracts, in compliance with the provisions of the Federal Law for the Protection of Personal Data held by Private Parties. The parties to this privacy notice acknowledge receipt of the notice, and without expressing any objection to its content, they expressly consent to its terms by signing such contract.

4.- LIMITATION OF USE OR DISCLOSURE OF YOUR PERSONAL DATA.

If you wish to restrict the use or disclosure of personal information in our possession, you can do so by submitting a request via email to the following address: juridico@iidea.com.mx. Please use “REQUEST TO RESTRICT OR DISCLOSE PERSONAL DATA” as the subject and include the following information:

Name of the data subject.

Statement of facts.

The data subject’s address or email address to receive the response.

Documents proving identity or authorization to submit the request.

Acceptable documents for identity verification may include:

National Electoral Institute credential.

Passport.

National Military Service Card.

Professional license.

Postal identity card (issued by SEPOMEX).

Certificate or proof of studies.

Proof of residence.

IMSS affiliation card.

ISSSTE affiliation card.

Migratory document proving legal stay in the country.

Original documents must be provided for comparison. Identity document verification can be arranged by appointment at the following address: AV. PERIFÉRICO SUR 7750, COLONIA SANTA MARIA TEQUEPEXPAN, ZIP CODE 45601, SAN PEDRO TLAQUEPAQUE, JALISCO, MEXICO.

If the data subject chooses to have a representative handle the limitation of their personal data, both parties must submit identification documents as described above. Additionally, representation can be confirmed through:

Public instrument demonstrating representation.

Power of attorney signed before two witnesses.

Statement of representation by the data subject.

V.- TRANSFER OF PERSONAL INFORMATION TO THIRD PARTIES.

By means of this notice, we undertake not to transfer your personal information to third parties without your consent and take into account the exceptions set forth by Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties. We additionally undertake to perform this transfer in the terms set forth in such law.

Except in the cases of Article 37 of the Law:

When the transfer is established in a Law or Treaty to which Mexico is a party.

When the transfer is necessary for prevention or medical diagnosis, the provision of health care, medical treatment, or the management of health services.

When the transfer is made to holding companies, subsidiaries, or affiliates under the common control of the data controller, or to a parent company or any company of the same group of the data controller that operates under the same internal processes and policies.

When the transfer is necessary by virtue of a contract executed or to be entered into by the data controller and a third party, in the interest of the data subject.

When the transfer is necessary or legally required for the safeguarding of a public interest, or the procurement or administration of justice.

When the transfer is necessary for the recognition, exercise, or defense of a right in a court proceeding.

When the transfer is necessary for the maintenance or fulfillment of a legal relationship between the controller and the data subject.

We shall only disclose your personal data to third parties, whether national or foreign, who are legally or commercially associated with us, for the sole purpose of fulfilling the purposes indicated in the Privacy Notice and any subsequent updates provided to you. Such transfers shall be conducted in accordance with the cases stipulated and authorized by law, and in compliance with the following:

To the Tax Administration Service, for issuing and submitting Digital Tax Receipts via Internet.

To entities affiliated with us or with whom we have a commercial relationship.

To various authorities to fulfill legal requirements or obligations stipulated in legislation or regulations.

Your personal data will be processed only for the duration necessary to achieve the objectives specified in the Privacy Notice provided to you, and, where applicable, in compliance with the provisions of relevant legal regulations.

VI.- REVOCATION FOR DATA PROCESSING.

You have the right to revoke any consent previously granted for the processing of your personal information, whether given implicitly or expressly in writing. To exercise this right, you may submit a request by sending an email to the following address:

juridico@iidea.com.mx with the subject: REQUEST TO REVOKE CONSENT TO THE PROCESSING OF PERSONAL DATA and the following information:

Name of the data subject.

Statement of facts.

The data subject’s address or email address to receive the response.

Documents proving identity or authorization to submit the request.

The documents to prove identity can be:

National Electoral Institute credential.

Passport.

National Military Service Card.

Professional license.

Postal identity card (issued by SEPOMEX).

Certificate or proof of studies.

Proof of residence.

IMSS affiliation card.

ISSSTE affiliation card.

A migratory document that proves the legal stay of the foreigner in the country.

Remembering that:

Public instrument demonstrating representation.

Power of attorney signed before two witnesses.

Statement of representation by the data subject.

The processing time for your request is 25 business days, during which we will inform you of the status and outcome of your request using the contact information you provided for notification purposes.

VII.- MODIFICATIONS TO THE PRIVACY NOTICE.

We reserve the right to modify or update this privacy notice at any time, in order to comply with new legislation, internal policies, or new requirements for the provision or offering of our services or products.

These modifications will be available to the public through the following means:

On the website of our Personal Data Processor, and/or by e-mail to juridico@iidea.com.mx.

VIII.- RIGHTS OF THE DATA SUBJECT.

You have the right to exercise your ARCO rights (Access, Rectification, Cancellation, and Opposition) regarding your personal and/or sensitive data. Additionally, you can request to limit the use or disclosure of your personal data and revoke any consent you have previously given for the processing of your personal data, except in cases where such processing is necessary or arises from a legal relationship.

THE ARCO RIGHTS CONSIST OF:

ACCESS.- You have the right to be informed about which of your personal data are stored in our personal databases, their purposes, origin, any communications made with them, and other relevant details about their treatment. The obligation to provide access will be considered performed when:

The personal data is made available directly to you, the data subject.

Simple copies, whether in magnetic, optical, sound, visual, holographic, electronic documents, or any other appropriate means or technology, are provided to you.

RECTIFICATION.- Have your personal information corrected or updated if it is inaccurate or incomplete.

CANCELLATION. – Have your personal data removed, in whole or in part, from our database system” [sic]. This request may result in a blocking period after which the data will be deleted.

OPPOSITION.- Object for legitimate reasons to the processing of your personal data by our company.

If you wish to access the content of your personal data, rectify them, cancel them, or oppose their use, the mechanism that has been implemented for the exercise of such rights is through the presentation of the respective request, by sending an e-mail to the following address:

juridico@iidea.com.mx with the subject: REQUEST FOR: ACCESS, RECTIFICATION, CANCELLATION OR OPPOSITION, (as applicable), and with the following information:

Name of the data subject.

Statement of facts.

The data subject’s address or email address to receive the response.

Documents proving identity or authorization to submit the request.

The documents to prove identity can be:

National Electoral Institute credential.

Passport.

National Military Service Card.

Professional license.

Postal identity card (issued by SEPOMEX).

Certificate or proof of studies.

Proof of residence.

IMSS affiliation card.

ISSSTE affiliation card.

A migratory document that proves the legal stay of the foreigner in the country.

Public instrument demonstrating representation.

Power of attorney signed before two witnesses.

Statement of representation by the data subject.

Description of personal data for which ARCO rights are intended to be exercised.

Any other element that allows the location of the personal data and attention to the request.

If you believe that your right to the protection of personal data has been violated by any conduct of our employees, actions, or responses, or if you suspect that there has been any violation of the provisions of the Federal Law on Protection of Personal Data Held by Private Parties in the processing of your data, you may file a complaint with the INAI. For more information, please visit www.inai.org.mx.

The processing of your personal data under our possession shall be carried out in accordance with these terms and conditions. Therefore, by accepting this, you expressly authorize the data controller and the data processor to process your personal information for the stated purpose until you express your opposition through any of the means indicated by law. For any matters related to the processing of your personal information not addressed in this Comprehensive Privacy Notice, please contact the data controller, whose contact information can be found at the beginning of this document.