Comprehensive Privacy Notice

COMPREHENSIVE PRIVACY NOTICE.

SRL SOLUCIONES E IMPLEMENTACIONES, S.A. DE C.V., and SRL SOLUCIONES INTEGRALES DE DESARROLLO, S.A. DE C.V. (hereinafter referred to as "SRL", who will be named as the Responsible Party for the purposes of this privacy notice) with the aim of respecting the rights and interests of individuals concerning their privacy and personal data, based on the principles and guidelines prescribed by the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter, the "Law"), this privacy notice related to privacy policies, is made available to all employees, collaborators, clients, suppliers, subcontractors of SRL, and the denominations SRL SOLUCIONES E IMPLEMENTACIONES, S.A. DE C.V., and SRL SOLUCIONES INTEGRALES DE DESARROLLO, S.A. DE C.V., who in the course of their relationship with the company's activities, have provided or will provide personal data, through physical or digital means, for which the following is stated:

I. Identity and address of the Responsible for the Treatment of Personal Data

The Responsible Party indicates as its address, located at Bosque de Duraznos 55, floor 1, office 102, Colonia Bosques de las Lomas, Alcaldía Miguel Hidalgo, C.P. 11700, hereby making it known that the personal data you provide to us as an "active or potential holder", will be strictly treated for the purposes indicated later, being the sole responsible for the treatment of said data, the data management, located at the referred address, with email canalsrl@srlsoluciones.com 

II. Personal Data we collect and its purpose.

The data that SRL SOLUCIONES E IMPLEMENTACIONES, S.A. DE C.V., and/or SRL SOLUCIONES INTEGRALES DE DESARROLLO, S.A. DE C.V. collect through the portal https://srlsoluciones.com/ and/or in the execution of contracts aimed at fulfilling its corporate purpose are: voter ID, passport, professional license, C.U.R.P., R.F.C., NSS, birth certificate, charter, email, address, bank account number, commercial        and/or fiscal address, telephone, users for platforms and systems, access passwords, information of systems and telecommunications of clients.

The personal data collected by the Responsible Party will be treated only for the following purposes, as applicable to each holder, according to their legal

relationship with the same: 

1. Send out the newsletter of our solutions, as well as marketing efforts.
2. Procedures for billing, supplying, distributing, and selling our products
3. Provide information about changes or new products or services that are related to SRL;
4. Fulfill our contractual obligations with suppliers, clients, and employees; 
5. Conduct statistics that allow us to improve your user experience in future operations.
6. Personal information will be processed consistently with the purpose for which we collected it, or for which you gave your consent; 
7. Reasonable commercial and security measures will be taken to ensure that your personal information is reliable, accurate, complete, and, when necessary, up to date;
8. Archive and document control of the backgrounds of our trainers, suppliers, associates, and workers, and, if necessary, contracting procedures and opening a physical file for document control and archive.
9. For the purposes of the preparation and celebration of the contract(s) that, according to the corresponding legal relationship, may be required;
10. The fulfillment of obligations that derive from the corresponding legal relationship.
11. Promote, acquire, receive, and provide the services and/or products required; 
12. Evaluate the quality of the products and/or services;
13. Out-of-court collection procedures in the case of delinquent clients or any other debtor, and/or notices before judicial, administrative, or labor authorities for the fulfillment of obligations derived from the particular relationship that is held with each "holder".
14. SRL may share your personal information with trusted external providers, who help us to provide the Services. We will ensure that these service providers are obligated to protect your personal information according to the terms of the contract, which are no less protective than those established in this Privacy Policy. 

Personal data will be kept and safeguarded under the strictest confidentiality and will not be used for purposes other than those mentioned above, unless there is a change in this Privacy Notice. 

Once the purpose of the treatment of personal data is fulfilled, these will be blocked with the sole purpose of determining possible responsibilities in relation to their treatment, until the legal or contractual term of prescription of these. During such period, personal data may not be subjected to treatment and after it, it will proceed to its cancellation in the corresponding database.

Confidentiality of your personal data will be maintained by establishing and effectively maintaining administrative, technical, and physical security measures to prevent their damage, loss, alteration, destruction, use, access, or improper disclosure.

 

III.  Collection of Personal Data

For the collection of personal data, the Responsible Party follows all the principles marked by the Law such as legality, quality, consent, information, purpose, loyalty, proportionality, and responsibility. 

Personal data will be collected directly from the holder personally with physical and digital means through the website https://srlsoluciones.com/; BambooHR, Servicenow, printed formats or through other optical, sound, visual means, or any other lawful technology.

The information we receive from our internet page when leaving and providing your data is recorded in our database, for which, we employ 'cookies'. (A 'cookie' is a small text file that a website or an email can save in your browser and store it on your hard drive). Additionally, we may obtain information from the holder from other sources permitted by law, such as telephone directories, references from companies or individuals, public databases of any entity or public or private dependency, among others.

 

IV. Options and means to limit the use or disclosure of the data

The Responsible Party has the necessary and sufficient security, administrative, technical, and physical measures to protect your personal data against damage, loss, alteration, destruction, use, access, or unauthorized treatment.

Personal data are safeguarded in databases and computing equipment that have the necessary security to prevent data leaks, physical and logical access controls, passwords, passwords, anti-intrusion protection systems (IPS, Firewall), antivirus protection tools, which, among others, are some of the tools used to maintain the security of data in the information systems of the Responsible Party.

The computer security tools mentioned in the previous paragraph are supported by an internal information security policy that explains to employees the security considerations they should take into account when using a computer system and is constantly reinforced.

Therefore, you are made aware that you can request the limitation of the use or disclosure of your personal data, subject to this Notice, through a written request sent to the Responsible Party's email and/or the address indicated in section number I of this notice.

 

V. Means to exercise the rights of access, rectification, cancellation, or opposition of your personal data (ARCO), in accordance with the provisions of the Law.

The "holders" by their own right or through their legal representative, duly accredited and identified, may exercise their rights of access, rectification, cancellation, and/or opposition of their personal data (ARCO), through a free written request, addressed to the data controller, personally at the office indicated in this privacy notice or via email to: canalsrl@srlsoluciones.com indicating the following:

1. Name of the "holder", accompanying the documents that prove their identity, in the case of being legal representatives or representatives attach the document(s) that accredit them, including a simple power of attorney, signed in front of two witnesses.
2. Address or email to hear and receive notifications.
3. The clear and precise description of the personal data and the right that you wish to exercise over it.
4. The elements that facilitate the location of the data whose right is intended to be exercised, such as the date on which the data was obtained.

For the corresponding effects, once your request is received, the Responsible Party, through the corresponding area, will respond about the acceptance or rejection of the request, within a period not exceeding twenty days, communicating in writing at the address indicated by the "holder", or in the email address indicated for such effect.

This procedure will not generate any type of charge or compensation for any concept for the "holder".

As a consequence of the above, the Responsible Party will not be obliged to cancel the personal data when it concerns one of the cases established in the Law.

 

 VI. Data transfers that are made.

Personal data will not be disclosed or shared with national or foreign third parties, except when it concerns labor references and data transfers for recommendation purposes and evaluation of acquisition, receipt, and provision of services; in light of the above, companies that are affiliates of the Responsible Party and that are part of "SRL SOLUCIONES E IMPLEMENTACIONES, S.A. DE C.V., and SRL SOLUCIONES INTEGRALES DE DESARROLLO, S.A. de C.V." are not considered third parties, which require having the personal data for the aforementioned purposes.

 

VII. Revocation

The "holders" may revoke their consent for the processing of personal data at any time, and, only for such purposes, send a written request to the data controller, at the address of the Responsible Party, who will inform the "holder" about the acceptance or rejection of their request within a maximum period of eight business days, which, if applicable, will take effect from the day the "holder" is notified.

For this purpose, the Responsible Party may communicate to the "holder" about the acceptance of their revocation request through any means, the decision that falls on their revocation request.

 

VIII. Consent of the Holder In terms of the provisions of article 8 of the Federal Law on Protection of Personal Data Held by Private Parties.

It will be understood that the holder tacitly consents to the processing of their data when, having this Privacy Notice made available, they do not expressly and in writing state their opposition. Likewise, when applicable, there will be express consent at the moment of signing the consent that endorses this privacy notice, complete and/or simplified.

 

IX. Modifications to the Privacy Notice.

We reserve the right to change this Privacy Notice at any time. These modifications will be available through any of the following means:

• Visible announcements in our offices;
• On our website.

We will not be responsible if you do not receive notification of the change in the Privacy Notice if there is a problem with your email account or data transmission over the internet.

Last update date: 30/11/2023