What purposes do we pursue when collecting your Personal Data?
We will only use the Personal Data you provide for the purpose for which it was collected. We are responsible for giving you all necessary information about the purpose of using your data, the processing of that data, any restrictions on its use, the details needed to provide the privacy you require, and the means available for exercising your ARCO rights as the Data Subject.
Zitrone processes and safeguards your Personal Data based on the principles of lawfulness, quality, consent, information, purpose, loyalty, proportionality, and accountability established in the Data Law and its Regulations.
Primary purposes: The Personal Data we collect will be used for the following purposes, which are necessary for the services we provide: identification, operation, registration, administration and sale of products and services, maintaining the professional relationship with Data Subjects, billing and collection, provision of the applicable service, and record keeping.
Secondary purposes: In addition, we may use your personal information for purposes that are not essential to the requested service but that allow us to offer better service, such as personalized content, notices and changes to the Privacy Notice, statistics, promotion and marketing, and the development of consumption preferences.
If the Data Subject does not want Zitrone to process Personal Data for the secondary purposes described above, they have 15 (fifteen) days to state their refusal by contacting Zitrone's Personal Data Department at opina@zitrone.com.mx.
What Personal Data do we collect?
To carry out the purposes described in this Privacy Notice, we collect identification and contact Personal Data.
Zitrone may also use and collect the following Personal Data: full name, address, date of birth, occupation, telephone number, age, sex, email address, and banking information.
Zitrone may also receive personal information through third parties, such as companies and agents, or other companies that provide services to our clients and partners. The information collected through third parties may include personal data.
What is the main treatment of your Personal Data?
Once you provide your Personal Data to Zitrone, it will be stored in a secure place and by secure means to the extent technology allows, with controlled and limited access.
At Zitrone, we value a close and active relationship with our clients. For that reason, we may collect your Personal Data for the purposes described in this Privacy Notice. Zitrone will process and safeguard your Personal Data based on the principles of lawfulness, quality, consent, information, purpose, loyalty, proportionality, and accountability established in the Data Law and its Regulations.
Transfers of Personal Data
Zitrone will not carry out any transfer of the Personal Data it collects. Notwithstanding the above, Zitrone may share the personal information it collects with affiliates, subsidiaries, or companies within the same corporate group, as permitted by law. Zitrone will not share personal information with persons who are not affiliates, partners, or clients, except when the law permits or requires it.
The Data Subject acknowledges and accepts that Zitrone does not require authorization or confirmation from the Data Subject to carry out national or international transfers of Personal Data in the cases established by Article 37 of the Data Law or in any other exception provided by applicable law.
Consent of the Data Subject
The Data Subject will be deemed to have tacitly consented to the processing of their data when, after this Privacy Notice has been made available, they do not express their opposition.
For purposes of Article 17 of the Data Law, the Data Subject states that this Privacy Notice has been made known by Zitrone, and that they have read, understood, and agreed to the terms set forth herein, thereby granting consent for the processing of Personal Data under the Data Law and other applicable legislation.
By entering and or registering through Zitrone's website, you grant full and unconditional consent for Zitrone to process your Personal Data in accordance with this Privacy Notice.
Storage and security of Personal Data
Zitrone will keep the Data Subject's Personal Data for the time necessary to process requests for information, products, and or services. Personal Data collected by Zitrone will be protected by appropriate technical and physical security measures against damage, loss, alteration, destruction, or unauthorized use, access, or processing, in accordance with the Data Law and the administrative regulations derived from it.
These safeguards include how personal information is stored in workspaces and computers, and how that information is transferred within Zitrone and its business partners. Only people working for Zitrone or its business partners may review personal information when it is part of their work in providing products or services to clients, partners, and affiliates. Zitrone informs these individuals about our safeguards, privacy policies, and the law protecting privacy.
Zitrone may disclose your Personal Data in order to comply with applicable legal provisions or at the request of a competent authority, as well as to carry out the purposes for which the data was collected. It may therefore conduct national or international data transfers and may transfer data to service providers for fulfillment of the stated purposes.
What rights do you have as the holder of Personal Data?
As the holder of your Personal Data, you may request the exercise of your ARCO rights: Access, Rectification, Cancellation, or Objection.
You have the right to know what Personal Data we have about you, what we use it for, and the conditions under which it is used (Access). You also have the right to request correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); request removal from our records or databases when you consider that it is not being used in accordance with the principles, duties, and obligations established by law (Cancellation); and object to the use of your Personal Data for specific purposes (Objection).
Procedure to exercise ARCO rights
To exercise ARCO rights, the Data Subject or representative must submit a written request for access, rectification, cancellation, or objection including the following information and documentation: the Data Subject's name and address or another means to communicate the response; documents proving identity or, where applicable, legal representation; a clear and precise description of the Personal Data for which ARCO rights are sought; and any other element or document that facilitates locating the Data Subject's Personal Data.
In the case of rectification requests, the Data Subject must also indicate the changes to be made and provide documentation supporting the request.
For receipt, registration, and handling of requests to exercise access, rectification, cancellation, and objection rights, as well as to limit the use or disclosure of personal data and any other rights established by the Data Law, please contact: opina@zitrone.com.mx.
Zitrone will respond to the Data Subject within a maximum period of twenty business days from the date the request was received, and if appropriate, the decision will be implemented within the fifteen days following communication of the response. In the case of access requests, Zitrone will deliver the Personal Data once the identity of the applicant or legal representative has been verified. These periods may only be extended as permitted by Article 32 of the Data Law.
Delivery of Personal Data will be free of charge, and only justified shipping costs or the cost of reproduction in copies or other formats may apply.
For cancellation requests, in addition to what is set forth in this Privacy Notice, Article 26 of the Data Law and its exceptions to cancellation shall apply.
Likewise, the Data Subject consents to Zitrone using their image solely for advertising and promotional purposes related to events and the provision of services.
Changes to the Privacy Notice
This Privacy Notice may be modified in the future. In any case, any modification will be made known through publication on the website.
Zitrone reserves the right to update this Notice periodically in order to reflect changes in our information practices. It is the responsibility of the Data Subject to review the content of the Privacy Notice regularly on the website mentioned above. Unless otherwise stated, Zitrone will understand that the Data Subject has read, understood, and agreed to the terms described, which constitutes consent to the changes set forth in such updates regarding the processing of Personal Data under the Law and other applicable legislation.