Notice Of Privacy
Tools y Servicios Automotrices S.A. de C.V., (“HERSA”), legal entity, duly constituted in accordance with the laws of the Mexican Republic, with address at Jacarandas 5 Col. Satélite Cuernavaca Morelos CP. 62460, is the person responsible for the processing of your personal data.
For the Responsible, treating your data in a legitimate way is a priority issue. This Privacy Notice complements any other simplified privacy notices that our organization has made available to you and is supplementary in everything that is not expressly referred to by such notices.
2. Personal data department:Address: Jacarandas 5 Col. Satélite Cuernavaca Morelos CP. 62460.
Email:datospersonales@her-sa.com.mx
a) Process your requests via the website, and therefore manage the relationship you want to establish with HERSA, or the one already established between you and the company itself.
4. Personal data we collectWe collect your personal data from through our website. The personal data that we obtain are the following: name, telephone, email.
In accordance with what is established in article 9 of the Federal Law on Protection of Personal Data Held by Private Parties, when the Responsible Party collects such data from you, your express consent will be required for the processing of these data, for which reason We will request that, in due course, you indicate whether or not you accept the treatment, through the electronic mechanism that we have implemented for these purposes, or if applicable, you provide us with this duly signed document.
5. Sensitive personal, financial and property data that we collect.We do not collect any sensitive or patrimonial or financial data.
6. Options and means to limit the use or disclosure of personal dataYou can request that we no longer handle your personal data by contacting our Personal Data Manager at the aforementioned email.
7. Means to exercise the rights of access, rectification, cancellation or oppositionYou have the right to access your personal data that we have and the details of their treatment, as well as to rectify them if they are inaccurate or incomplete; cancel them when they prove to be excessive or unnecessary for the purposes that justified their obtaining or oppose their treatment for specific purposes.
The mechanisms that have been implemented for the exercise of said rights are through the presentation of the request ("Request for the Exercise of ARCO Rights") to our Personal Data Manager, either personally at the address of the same or by sending an email electronic to the one previously indicated. You can obtain the request by sending an email to the person in charge, to send it to him.
To exercise your rights, you must submit a request ("Request for the Exercise of ARCO Rights") to the Responsible Party, accompanying the following information:
1.- Full name and address
2.- Identification that proves your personality (Credential to vote issued by the National Electoral Institute ["INE"], valid passport, Professional ID, or in case of foreign nationality, your current immigration document)
3.- If the owner is not the one who submits the application, the document that proves the existence of the representation, that is, public instrument or power of attorney signed before two witnesses, together with the identification of the owner and the legal representative (INE Credential, Passport valid, Professional Certificate, or in case of being a foreign national, your current immigration document)
In the case of minors, the documents to prove the legal representation of the minor, which will be: birth certificate and credential with photograph of the minor (the one granted by the academic institution where they attend), credential of the Mexican Institute of Social Security ( "IMSS"), valid passport, or any other that has a photograph of it, in addition to presenting the documents for their respective collation, the signature of the document that will be attached to the application as "Accreditation of legal representation" is manifested under protest of telling the truth to be responsible for the minor
In the case of injunctions (incapacitated), the documents to prove legal representation will be: an injunction certificate and a credential with a photograph of the person who holds this legal situation, either the Credential to vote issued by the Federal Electoral Institute (“IFE”) , Valid passport, Professional ID or immigration document (the latter case in the case of foreigners).
5.- Clear and precise description of the personal data with respect to which you seek to exercise any of the ARCO Rights, what is the right to exercise and the reasons why you wish to exercise it;
6.- Any document or information that proves that your personal data is owned by "HERSA".
The Responsible Party will respond to your request by email or in person at the address indicated above, within 20 (twenty) business days from the receipt of the request being sent. In the event that the request is appropriate, the response may be sent via email or personally. HERSA may request to give you an answer, present for collation at the address described above, original of the documents that he sent along with his request, within 5 (five) business days after they are required. If after said term you have not submitted the documents, your request will be archived and the Privacy Notice will remain in force until a new request is submitted.
When the request is appropriate and the corresponding checks have been carried out with respect to the personality and ownership of the ARCO Rights, the terms to carry out the request will be the following:
For data access: within a period of 15 (fifteen) days from the affirmative response made by the Responsible, via email.
For the rectification of the data: within a period of 15 (fifteen) days from the affirmative response made by the Responsible.
For the cancellation or opposition of the data: they will be blocked first, from the moment the required documentation was checked, where access to personal data will be restricted to everyone until there is a response to the request, whether affirmative or negative, in the first case within a period of 15 (fifteen) days from the affirmative response made by the Responsible, and in the second case they will be unblocked to continue with the treatment.
The terms referred to in the previous paragraphs may be extended only once for an equal period if necessary and with prior notification made by the Responsible Party.
“HERSA” may deny the exercise of ARCO Rights, in the following cases:
a) When you are not the owner of the personal data, or you have not accredited the representation of the owner
b) When your personal data does not appear in the database of the Responsible
c) When the rights of a third party are injured
d) When there is a legal impediment or the resolution of a competent authority that restricts your ARCO Rights
e) In the event of cancellation, when the personal data is processed for prevention or for medical diagnosis or management of health services, or
f) When the rectification, cancellation or opposition has been previously made.
The Refusal may be partial, in which case, "HERSA" will make the access, rectification, cancellation or opposition in the appropriate part.
The exercise of the "ARCO Rights" will be free, but if you repeat your request in a period of less than 12 (twelve) months, the costs will be 3 (three) days of the General Minimum Wage in force in the Federal District, plus the Tax to the Added Value, unless there are substantial modifications to the Privacy Notice that motivate new Requests for the Exercise of ARCO Rights. You must cover the justified shipping costs or the cost of reproduction in copies or other formats.
For more information, please contact the Responsible for personal data, in the email indicated above.
8. Mechanisms and procedures for the owner, where appropriate, to revoke their consent at any timeAt any time during the treatment, you may revoke the consent you have given for the processing of your data, for this it is necessary that you contact the Data Protection Officer, where the procedure you must follow to revoke your consent will be indicated.
9. Implemented security measuresFor the protection of your personal data we have implemented security measures of an administrative, physical and technical nature in order to avoid loss, misuse or alteration of your information.
When we communicate or share your information with third parties that provide us with a service, we require and verify that they have the necessary security measures to protect your personal data, prohibiting the use of your personal information for purposes other than those in charge; The foregoing with the understanding that notwithstanding the foregoing, any breach by said third parties to the provisions of the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations is the sole responsibility of said third parties.
10. Modifications to the privacy noticeWe reserve the right to make modifications or updates to this privacy notice at any time.
These modifications will be available to the public through the following means: (i) our website.
11. Right to promote the procedures for the protection of rights and verification established by the InstituteAny complaint or additional information regarding the processing of your personal data or questions in relation to the Federal Law on Protection of Personal Data Held by Private Parties or its Regulations, may be directed to IFAI. For more information visit www.ifai.org.mx