Privacy Notice of Caralarga Design SA de CV 

 

Responsible for the protection of your personal data:

 

Diseño Caralarga SA de CV, its affiliates and/or subsidiaries (hereinafter "Caralarga"), with registered office at Av. Hércules Oriente No. 1, Col. Hércules, CP 76069, Querétaro, QRO, Mexico, are responsible for collecting your personal data, its use, and its protection in accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and other applicable provisions (hereinafter the "Data Law"). You may access the content of said regulations through the website of the National Institute for Transparency, Access to Information, and Protection of Personal Data (hereinafter referred to as the "INAI") at the following address: https://home.inai.org.mx/.

 

Caralarga is responsible for the processing of your personal data, as well as for guaranteeing your privacy and your right to informational self-determination. Therefore, the personal data obtained will be treated responsibly and confidentially, regulating the rights of access, rectification, erasure, and objection to the processing of said data, in accordance with the provisions of Article 19 of the Data Protection Law.

What will be the primary processing of your personal data?

 

Because Caralarga seeks to maintain a close and active relationship with its customers, suppliers, and employees (hereinafter, the "Owner"), it may collect your personal data for the purpose of creating a database of customers, suppliers, and/or employees, for promotional and advertising purposes, managing payment and shipping of products, completing employment or commercial contracts, etc., to name a few. We inform you that Caralarga will process and safeguard your personal data based on the principles of legality, quality, consent, information, purpose, loyalty, proportionality, and responsibility, enshrined in the Data Law and its Regulations.

 

Consent of the Holder

It will be understood that the Data Subject tacitly consents to the processing of their data when, having been made available to them by this Privacy Notice, they do not express their opposition, except in cases expressly indicated by law (sensitive and/or financial and property data), where the express consent of the Data Subject will be required.

For the purposes of the provisions of article 17 of the Data Law, the Owner declares that:

(i) This Privacy Notice has been made known to you by Caralarga.

(ii) Having read, understood and agreed to the terms set forth in this Privacy Notice, and therefore giving your consent to the processing of your Personal Data for the purposes of the Data Law and other applicable legislation.

In the event that the Personal Data collected includes sensitive or financial Personal Data, whether in printed format or using electronic means, as applicable, and their corresponding processes for the formation of consent, for example, but not limited to, the provision of sensitive personal data through dialog boxes, or the display and scrolling through terms and conditions on the screen, acts that constitute the express consent of the owner in terms of the second paragraph of article 9 of the Data Law and other applicable legislation.

(iii) You give your consent for Caralarga to transfer Personal Data to national or foreign third parties, with the understanding that the processing that said third parties give to your Personal Data must be adjusted to the main and secondary purposes (if applicable), as well as to everything established in this Privacy Notice.

If the Data Subject does not object to the terms of this Privacy Notice within 48 hours of its being made available to them, its contents will be deemed agreed to and consented to, pursuant to the third paragraph of Article 8 of the Data Law. The Data Subject's consent may be revoked at any time without retroactive effect, under the terms and in accordance with the procedures established below in this Privacy Notice.

Notwithstanding any provision of this Privacy Notice, the Data Subject acknowledges that his or her consent will not be required for the processing of Personal Data by Caralarga or third parties in any of the cases indicated in Article 10 of the Data Law.

 

What are the main purposes for which we collect your personal data?

 

We will only use the personal data, sensitive personal data, and property or financial data you provide to us for the purposes for which it was collected. You can be assured that we will be responsible for providing you with all the necessary information regarding the purpose of using your data, its processing, restrictions on its use, the details necessary to provide you with the privacy you require, as well as the means available to you to exercise your ARCO rights as the data subject.

1. Purposes

We may collect your personal, sensitive, and financial data for the purpose of providing the service and/or product you have requested, informing you of changes to your service, and evaluating the quality of the service we provide.

For the aforementioned purposes, we require the following personal data:

• Name and surname
• Phone
• Home
• Email Address
• Billing information
• Photographs of the installed product

If you do not wish your personal data to be processed for any of these purposes, please let us know directly by emailing hola@caralarga.com . If you refuse to use some of your personal data for these purposes, we may reserve the right to provide the services and/or products you request or contract with us.

It should be noted that some of the above actions may be carried out through third parties contracted by Caralarga. Therefore, we inform you that your personal data may be transferred and processed within and outside the country by persons other than this company. In this regard, your information may be shared with our parcel and/or mail service providers to offer you the best possible service, always in accordance with the provisions of this Privacy Notice regarding the transfer of personal data. If you do not express your objection to the transfer of your personal data, it will be deemed that you have given your consent.

If you wish to stop receiving promotional messages from us, you can do so using the contact information previously provided.

Safeguarding and security of personal data

 

Caralarga is committed to safeguarding your personal, sensitive, and proprietary or financial data under strict administrative, technical, and physical security measures to protect them against damage, loss, alteration, destruction, unauthorized use, access, or processing.

 

Caralarga will retain the Data Subject's Personal Data for as long as necessary to process requests for information, products, and/or services, as well as to maintain accounting, financial, and audit records in accordance with the Data Protection Law and applicable commercial, tax, and administrative legislation. The Data Subject's Personal Data collected by Caralarga will be protected by appropriate administrative, technical, and physical security measures against damage, loss, alteration, destruction, or unauthorized use, access, or processing, in accordance with the Data Protection Law and the administrative regulations derived therefrom.

Caralarga may disclose your Personal Data to comply with applicable legal provisions or at the request of the competent authority, as well as to carry out the purposes for which it was collected, for which it may make national or international data transfers, as well as transfer data to service providers for the fulfillment of the established purposes, except for Sensitive Personal Data that requires your express authorization to be disclosed in accordance with the provisions of the Data Law.

 

What rights do you have as a personal data subject?

 

We would like to remind you that, as the owner of your personal data, you may request the exercise of your ARCO rights (Access, Rectification, Cancellation or Opposition), which are described below:

 

(i) Right of Access.- It is the right that the Owner has to know about the Personal Data related to his/her person that is in the possession of Caralarga, as well as to whom they have been shared and for what purpose.

(ii) Right to Rectification.- Each Data Subject has the right to have his or her Personal Data rectified when it is inaccurate or incomplete.

(iii) Right to Cancellation.- Each Data Subject has the right to request the deletion of their Personal Data at any time, which will occur once the blocking period has elapsed. Blocking involves the identification and retention of the Personal Data once the purpose for which it was collected has been fulfilled, and its purpose is to determine any potential liabilities related to its processing, until the statutory or contractual statute of limitations for such data expires. During this period, your Personal Data will not be processed, and once this period has elapsed, it will be deleted from the corresponding database or file. Once the corresponding data has been deleted, Caralarga will notify the Data Subject. If the Personal Data has been transmitted prior to the rectification or cancellation date and continues to be processed by third parties, Caralarga will inform the third party in question of this rectification or cancellation request so that it may also be processed.

(iv) Right to Object.- The Owner has the right at all times to request, provided he has a legitimate cause, that Caralarga stops processing his Personal Data.

 

Procedure for exercising ARCO rights.

To exercise ARCO Rights, the Holder or his/her representative must submit a written request for access, rectification, cancellation or opposition with the following information and documentation:

(i) Name of the Holder and address or other means to communicate the response to your request.

(ii) The documents that prove your identity (simple copy in printed or electronic format of your voter ID card, passport or temporary or permanent residence card) or, where applicable, the legal representation of the Holder (simple copy in printed or electronic format of the simple power of attorney with the handwritten signature of the Holder, the agent and their corresponding official identifications (voter ID card, passport, temporary or permanent residence card).

(iii) A clear and precise description of the Personal Data in respect of which you seek to exercise any of the ARCO Rights.

(iv) Any other element or document that facilitates the location of the Personal Data of the Owner.

In the case of requests for rectification of Personal Data, the respective Data Subject must also indicate the modifications to be made and provide documentation supporting their request.

To receive, record, and address requests to exercise your right to access, rectify, erase, and object to your Personal Data, as well as to limit the use or disclosure of your data, and other rights provided for by law, please contact the following email address: hola@caralarga.com .

Caralarga will respond to the Owner or applicant within a maximum period of twenty (20) business days, counted from the date on which the request for access, rectification, cancellation or opposition was received, the determination adopted, so that, if appropriate, it will be effective within fifteen (15) days following the date on which the response is communicated to the Owner. In the case of requests for access to Personal Data, Caralarga will proceed with its delivery after accrediting the identity of the applicant or his legal representative, as appropriate. The aforementioned deadlines may be extended only in terms of the Law in accordance with article 32 of the Data Law.

The provision of Personal Data will be free of charge; you will only be responsible for the justified shipping costs or the cost of reproduction in copies or other formats.

For the purposes of requests for the cancellation of Personal Data, in addition to the provisions of this Privacy Notice, the provisions of Article 26 of the Data Law shall apply, including the exceptions to the cancellation of Personal Data indicated.

Use of cookies and/or visitor counters:

Cookies are tools that store information in the browser or on the hard drive of your electronic device (computer, tablet, mobile phone, etc.) when you visit a website. During your visit to the website: www.caralarga.com.mx (hereinafter the "Website") and on all subsequent visits, cookies transmit information about your visit through your browser, making it easier for you to maintain your preferences regarding the Website. Cookies do not harm your device, and you can always disable or customize them if you do not agree with the use of any of them.

The Website uses cookies to recognize your browser or device, in order to understand the interests and behavior of visitors or users of the Website and, in this way, provide a more efficient service or provide related information. Likewise, we use the information obtained through cookies to analyze the pages browsed by the visitor or user, the searches performed to: i) improve our commercial and promotional initiatives, ii) display advertising or promotions, iii) banners of interest, iv) news about Caralarga and other related topics handled on the Website, v) improve and personalize our offer of content and articles, vi) presentation and services, vii) promote and enforce the rules and security of the Website, viii) as a tool so that the user does not have to enter their password so frequently during a browsing session, and viii) to count and corroborate registrations, user activity and other concepts for commercial agreements, always having as the objective of the installation of cookies, the benefit of the user who receives it, and which will not be used for purposes other than Caralarga. That is, we store cookies to be able to offer a more interactive and personalized experience to the user within the Website, based on the user's actions. We may collect information about your computer, including but not limited to, where available, your IP address, operating system, browser type, etc.

 

Regarding the transfer of your personal data:

 

Once the terms set forth in this Privacy Notice have been read, understood, and agreed to, the Data Subject expresses his or her consent for Caralarga to transfer Personal Data to national or foreign third parties, with the understanding that the processing of the Data Subject's Personal Data by said third parties must comply with the provisions of this Privacy Notice.

The Data Subject acknowledges and accepts that Caralarga does not require authorization or confirmation from said Data Subject to carry out national or international transfers of Personal Data in the cases provided for in Article 37 of the Data Protection Act or in any other exceptional case provided for by the same or other applicable legislation.

Changes to the Privacy Notice:

 

This Privacy Notice may be modified in the future. In any case, any changes to the document will be made known to you by posting them on the website https://caralarga.com.mx/pages/aviso-de-privacidad 

 

Caralarga reserves the right to periodically update this Notice to reflect changes in our information practices. It is the Data Subject's responsibility to periodically review the content of the Privacy Notice on the aforementioned website. Caralarga will understand that unless otherwise stated, this means that the Data Subject has read, understood, and agreed to the terms set forth, which constitutes their consent to the changes established in such updates regarding the processing of their Personal Data for the purposes of the Law and other applicable legislation.