Privacy Policy

VECTUX ANALYTICS, S.A. DE C.V.

In accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, hereinafter referred to as the “Law,” this Privacy Notice is issued under the following terms:

Data Controller

For the purposes of this Privacy Notice, VECTUX ANALYTICS, S.A. DE C.V. hereinafter referred to as the “Controller,” with address at Avenida Santa Fe number 546, interior TII D 29D, Colonia Cruz Manca, Alcaldía Cuajimalpa de Morelos, ZIP Code 05349, Mexico City, is responsible for the collection, disclosure, storage, use, management, processing, and/or disposal of personal data collected from its Suppliers, Clients, Users, or Visitors of its applications, social media channels, or websites, hereinafter referred to as the “Data Subjects” or the “Data Subject.”

Personal Data Collected

The personal data collected by the Controller from Data Subjects includes, by way of example and not limitation: name, email address, date of birth, age, and nationality.

The Controller may also collect professional information from Data Subjects, including, in general and without limitation: institutional email address and academic background.

Your personal data may be collected through the following means: any documentation delivered for the opening and signing of contracts, whether delivered through digital means such as email, data messages, or any other means; in writing; through optical means; unequivocal signs; or any other technology, websites, social media channels, and/or mobile applications.

Purpose of Personal Data Processing

The data we collect is used for the following purposes:

  1. Statistical purposes.
  2. Commercial prospecting.
  3. Sales recommendations.
  4. Cross-selling to the Data Subject.
  5. Compliance with obligations arising from the existing relationship between the Data Subject and the Controller.
  6. Contacting our clients to provide advice regarding our products and/or services, as well as support to the Data Subject.
  7. Granting limited and controlled use of the Controller’s applications or websites.
  8. Execution of contracts to formalize the commercialization of products and the provision of services offered by the Controller.

The purposes described above require the consent of the Data Subjects.

Likewise, the personal data collected may also be used to address legal requirements issued by competent authorities.

The Controller does not guarantee the truthfulness or accuracy of the data provided by Data Subjects, nor has it verified such data; it only receives, records, and stores it. Likewise, Data Subjects declare and confirm that they have the express consent of any individuals whose personal information they also provide to the Controller.

Exceptions

In accordance with the Law, there are certain cases in which your consent is not required for the processing of your personal data. Therefore, the absence of consent or refusal to provide it, where applicable, will not prevent the Controller from processing your personal data in accordance with the Law and any other applicable regulations.

Options and Means Offered by the Controller to Limit the Use or Disclosure of Personal Data

The personal data of Data Subjects will be processed under the strictest confidentiality, applying the administrative, physical, and technical security measures implemented by the Controller through its internal security policies and procedures, preventing the possible unlawful disclosure of data and limiting its use to the terms established in this Privacy Notice.

However, in order for you to limit the use and disclosure of your personal information, we make the following email address available to you:

asaavedra@vectuxanalytics.com

Through this email address, you may request limitations on the use and disclosure of your personal data.

Likewise, the Data Subject may choose to register with the Public Registry to Avoid Advertising, managed by the Federal Consumer Protection Agency, so that their personal data is not used to receive advertising or promotions from companies offering goods or services.

Transfer to Third Parties

Data Subjects authorize the Controller to transfer their personal data to the third parties listed below, so that the Controller may comply with each and every one of its obligations acquired with third parties derived from the execution of legal and accounting service agreements, for all legal purposes and in compliance with the Law.

Third PartyPurpose
Government entitiesCompliance with legal obligations.
Suppliers, legal firm, and accounting firmPreparation of contracts and accounting administration.

National or international transfers of personal data may be carried out without the consent of the Data Subject when any of the cases established in Article 36 of the Law apply.

Use of Tracking Technologies on the Website

The Data Subject authorizes the Controller to collect browsing data through the use of cookies, web beacons, or other technologies, in order to provide a better service and user experience when browsing the Controller’s website, as well as to obtain quantitative data regarding website visitors.

Such information may also be compiled for advertising, marketing, and contact purposes, as well as for commercial sales prospecting.

To learn how these technologies may be disabled, please send an inquiry to the following email address:

asaavedra@vectuxanalytics.com

Means to Exercise the Data Subject’s Rights

At any time, you or your duly accredited legal representative may exercise the following rights:

Access: to know what personal data we hold about you, what it is used for, and the conditions of its use.

Rectification: when you consider that your personal data is incorrect, inaccurate, or outdated.

Cancellation: when you consider that your data is not being properly processed.

Objection: when you do not want your data to be processed for specific purposes.

Revocation: when, as Data Subject, you no longer wish the Controller to continue using your personal data.

The exercise of any one of these rights does not prevent the exercise of another, and none is a prerequisite for exercising another.

To exercise the rights mentioned above, you must submit your request at our address located at:

Avenida Santa Fe number 546, interior TII D 29D, Colonia Cruz Manca, Alcaldía Cuajimalpa de Morelos, ZIP Code 05349, Mexico City

or send it to our personal data department at:

asaavedra@vectuxanalytics.com

addressed to the personal data protection department or to Cristóbal Alexis Ibarra Gonzalez.

The request must include the following information:

  1. Name of the Data Subject.
  2. Address and email address to notify the response to the request.
  3. A clear and precise description of the data regarding which the corresponding right is to be exercised.
  4. The purpose of the request and a description of the ARCO right intended to be exercised.
  5. Any element that facilitates the location of the data.

A copy of your identification must be attached, and where applicable, the document proving legal representation.

The response period for your request will be 20 business days from the date on which the request for access, rectification, cancellation, and/or objection was received.

The response will be communicated within the aforementioned period to the email address provided in your request or by sending a letter to the address provided therein.

Once such notification has been received, you will have a period of 15 business days to make it effective, where applicable.

At any time, you may revoke the consent you have granted us for the processing of your personal data, so that we stop using it. To do so, you must submit a request under the same terms established for the exercise of ARCO rights. The procedure to follow will be the same as that provided for the exercise of ARCO rights.

If your request is approved, your data will no longer be processed by the Controller. However, it is important to note that in some cases we may not be able to stop processing your data immediately, since a legal obligation may require us to continue processing it.

Notwithstanding the foregoing, the exercise of ARCO rights will not be applicable, and therefore the Controller may deny such rights, when any of the following grounds apply:

  1. The Data Subject or legal representative is not duly accredited.
  2. The personal data is not held by the Controller.
  3. The rights of a third party would be harmed.
  4. There is a legal impediment or a resolution from a competent authority that restricts access to the personal data or does not allow its rectification, cancellation, or objection.
  5. The rectification, cancellation, or objection has already been previously carried out.

Changes to the Privacy Notice

Any changes to this Privacy Notice will be communicated through the following means:

Through publication on our website or applications.

Likewise, Data Subjects are informed that this Privacy Notice may be modified at any time in order to address legislative updates, as well as changes to the Controller’s internal policies.

If the purposes for which personal data is processed are modified, consent will be requested again.

Consent of the Data Subject

The Data Subject declares that:

  1. This Privacy Notice has been made available by the Controller.
  2. They have read, understood, and agreed to the terms and purposes of personal data processing described in this Privacy Notice.

Therefore, the Data Subject grants consent for the processing of their personal data by signing this Privacy Notice in acceptance.

Data Subject