PRIVACY NOTICE

This document is a simplified version of the Privacy Notice, visible on the RESPONSIBLE's website.

Identity and address of the Data Controller

J Grinberg y Asociados, S.C., hereinafter (THE RESPONSIBLE), with address at Monte Pelvoux 210, Int. 303, Lomas de Virreyes, Lomas de Chapultepec, C.P. 11000, Mexico City, Mexico is responsible for the processing of your personal data.

About the Processing of Personal Data

We collect your personal data when the Data Controller provides them to us personally through physical, electronic, optical and/or sound means; when we obtain them through a third party derived from a consented transfer or through publicly accessible sources.

1. Personal data processed.
In order to fulfill the purposes indicated later in this Privacy Notice, THE CONTROLLER will process the following categories of personal data: Identification and contact (only if you provide us with such data through any of the means available to contact us; either by telephone or digital). As well as data obtained through the use of cookies on the website.

2. Sensitive personal data.
We inform you that THE RESPONSIBLE party does not collect or process data that, due to their characteristics, are considered to be sensitive. However, if the collection and processing of such information is necessary, we will inform you in a prior and informed manner, informing you of the purposes of processing them and requesting your due express and written consent.

​​

3. Means of obtaining personal data.

  • Physical: When the Data Controller provides the PERSON RESPONSIBLE with their data personally in their offices.
  • Electronic: This happens when the Owner provides their data by telephone, through electronic means (email, social networks or when their image or voice is captured through multimedia platforms or through our video surveillance services). Also, when we obtain information from the Owner automatically, through our own and third-party Cookies.
  • Through Third Parties: If this is the case, we will make our Comprehensive Privacy Notice available to the Owner at the first contact made.
  • Public access sources: When the Data Controller's data are in publicly accessible sources.

Use of personal data

The Data Controller will process your personal data for the following primary purposes:

If the Owner visits our website and contacts us by any of the means provided for this purpose, their data will be used to answer your questions, comments, as well as to show you general information about the RESPONSIBLE, the services it offers and bring you closer to the professional team that makes up the firm.

If you visit our offices, your personal data will be processed to identify you; explain the reason for your visit; meet the surveillance and security needs of the facilities and physical assets of THE RESPONSIBLE, that of its clients, collaborators, visitors and suppliers; control access to the firm's facilities and, where appropriate, be able to identify people in the event that any legal asset is violated.

Additionally, and if the Owner does not object, we will use your personal data for the fulfillment of the following secondary purposes: to send you information about events, advertising purposes, services and legal news that may be of interest to you through our publications on social networks and newsletters.

If the Data Controller does not want your personal data to be processed for any or all of the additional purposes, from now on you can let us know by sending an email to jgrinberg@grinberg.com.mx

The Data Controller has 5 (five) business days to express the refusal to process their personal data for any or all secondary purposes by sending an email to jgrinberg@grinberg.com.mx ; This period begins to run from the first contact of the RESPONSIBLE with the Owner, or failing that, as soon as he is informed of any changes to THE PRIVACY NOTICE.

The refusal to use your personal data for additional purposes cannot be a reason to deny you the requested services or to terminate the relationship established with THE RESPONSIBLE.

ARCO Rights

The Owner or his legal representative may exercise any of the rights of access, rectification, cancellation or opposition, also known as ARCO rights, as well as revoke their consent for the processing of their data, by communicating via email to the address jgrinberg@grinberg.com.mx , which is managed and serviced by the Personal Data Department of THE CONTROLLER with address at Monte Pelvoux 210, Int. 303, Lomas de Virreyes, Lomas de Chapultepec, C.P. 11000, Mexico City, Mexico. If the Owner so wishes, he can also make his request personally at the address indicated above, contacting the Personal Data Department of THE RESPONSIBLE at all times.

Once the Personal Data Department has been contacted, the Owner may make his request through the form stating the following:

  • Name of the applicant, and if applicable, of their legal representative.
  • The documents that prove the identity and, where appropriate, the legal representation of the owner of the personal data. Address and/or email address for the purpose of dealing with the request for the exercise of the right in question:
  • The clear and precise description of the right you want to exercise, as well as the personal data with respect to which you seek to exercise any of the rights mentioned (ACCESS, RECTIFICATION, CANCELLATION and OPPOSITION).
  • Any medium or document that provides the location or identification of personal data.
  • The deadlines for attending to the exercise of ARCO rights, as well as the revocation of consent are as follows:

Action

Deadline

Request for additional information
(in case the Owner's request is not clear):

5 business days

Relief of the request by the Data Subject:

10 business days

Response to the request by THE RESPONSIBLE PARTY:

20 business days

Response to the request in case of extension by THE RESPONSIBLE:

40 business days

Deadline for giving effect to the right if appropriate:

15 business days

The deadlines indicated in the previous paragraph may be extended for the same time indicated for a single occasion and for justified cause.

The exercise of the rights indicated here will be free of charge, however, in the case of exercising the right of access, the Owner may request delivery -subject to proof of his identity to the Responsible Party-, through the issuance of simple copies or the delivery of electronic documents, so the Owner must cover the expenses generated by the concepts of shipping or reproduction; which will be informed when informing him of the origin of the exercise of his right.

The communications that we will make with the Data Controller for the purpose of exercising the right in question, will be made through the address or email address indicated in your request.

THE CONTROLLER reserves the right not to fully comply with the request for ARCO rights submitted by the Owner, when the Owner does not reliably prove his identity or those of his legal representative, in order to fully protect the Owners.

Limitation and/or disclosure of personal data

The Owner may limit the use or disclosure of their personal data by making their request via email to the address jgrinberg@grinberg.com.mx . If your request is appropriate, you will be registered in the list that the RESPONSIBLE PERSON has for this purpose.

Changes to our Privacy Notice

We reserve the right to modify our security and data protection measures, in which case we will modify our Privacy Notice accordingly. These changes will be published on our website, so we invite you to regularly review this section.

Consent

By continuing to browse our website, or by contacting us by any of the means enabled for this purpose and providing us with your data, the Owner declares to know the content, scope, terms and conditions described and expressly consents to the processing of your personal data in accordance with the uses and purposes indicated in this Privacy Notice.

Exceptions to the principle of consent

In accordance with Article 10 of the Federal Law on the Protection of Personal Data Held by Individuals, and Article 17 of the Regulations of the above-mentioned legal system, the Owner understands that his consent will not be necessary when:

  • It is provided for in a Law
  • The data appear in publicly accessible sources;
  • Personal data are subject to a prior dissociation procedure;
  • For the purpose of fulfilling obligations deriving from a legal relationship between the Owner and the Responsible;
  • There is an emergency situation that could potentially harm an individual in their person or property;
  • A decision is issued by a competent authority;
  • When these derive from a legal relationship between the Owner and the Responsible.

DATE OF UPDATE: MARCH 20, 2024