Privacy Policy

1. Defined terms

For the purposes of this Privacy Notice, the following terms shall have the following meanings, on the understanding that, unless otherwise defined in this Privacy Notice, the terms used in this Privacy Notice and that are not defined therein shall have the meaning given to them in the LFPDP:

• “Personal Data” Any information concerning an identified or identifiable natural person.
• “ARCO Rights” Means the rights of access, rectification, cancellation and opposition that, in accordance with the provisions of the LFPDP and subject to the exceptions established therein and in this Privacy Notice, each Data Controller has, in relation to the Personal Data collected by the Data Controller and/or its Managers, and which are described below:
• “Right of Access” It is the right of the Data Controller to know about the Personal Data related to their person held by the Data Controller in question or their Managers, as well as to whom they have been shared and for what purpose.
• “Right to Rectification” Each Owner has the right to have their Personal Data rectified when they are inaccurate or incomplete.
• “Right of Cancellation” Each Owner has the right to request that their Personal Data be deleted at any time, which will happen once the blocking period has elapsed. Blocking implies the identification and conservation of Personal Data, once the purpose for which they were collected is fulfilled, and its purpose is to determine possible responsibilities in relation to their processing, up to the legal or contractual limitation period for these. During this period, your Personal Data will not be subject to processing and once this has elapsed, its cancellation will be carried out in the corresponding database or file. Once the corresponding data has been canceled, the Data Controller will give the Owner the corresponding notice. If the Personal Data were transmitted prior to the date of rectification or cancellation and are still being processed by third parties, the Data Controller will inform the third party in question of such request for rectification or cancellation, so that they can proceed to carry it out as well.
• “Right of Opposition” The Data Controller has the right at all times to request, whenever he has a legitimate cause, that the Data Controller stop processing his Personal Data.
• “Responsible” Means the natural or legal person who decides on the processing of the Owner's Personal Data, in this case “NEXOLUTION”.
• “Processor” Means the natural or legal person who alone or jointly with others processes Personal Data on behalf of the Responsible.
• “Owner” Means the natural person who owns the Personal Data, or authorized to provide Personal Data to a third party in accordance with applicable laws, who provides such Personal Data to the Controller.

2. Consent of the owner

For the purposes of the provisions of the LFPDP and in particular in its Article 17, the Owner states (i) that this Privacy Notice has been made known to him by the Data Controller, (ii) that he has read, understood and agreed to the terms set out in this Privacy Notice, and therefore grants his consent to the processing of his Personal Data for the purposes of the LFPDP and other applicable legislation. In the event that the Personal Data collected includes sensitive or financial Personal Data, by signing the corresponding contract, either in printed format, or using electronic media and their corresponding processes for the formation of consent, for example, but not limited to, by providing Personal Data through dialogue windows, or viewing and browsing terms and conditions on the screen, acts will be carried out that constitute the express consent of the owner in terms of the second paragraph of Article 8 of the LFPDP and other applicable legislation and (iii) that grants your consent for “NEXOLUTION” or Its Processors to transfer Personal Data to national or foreign third parties, on the understanding that the treatment that such third parties give to your Personal Data must comply with the provisions of this Privacy Notice.

If the Owner does not object to the terms of this Privacy Notice within the next 30 days after it was made available, its content will be considered agreed and consented to, in terms of the third paragraph of Article 8 of the LFPDP. The Owner's consent may be revoked at any time by the Owner without retroactive effects, under the terms and in accordance with the procedures established below for this purpose in accordance with this Privacy Notice.

Notwithstanding any provision of this Privacy Notice, the Owner recognizes that his consent will not be required for the processing of Personal Data by the Data Controller or third parties in any of the cases indicated in Article 10 of the LFPDP.

3. Purpose of the privacy notice; purpose of personal data

The purpose of this Privacy Notice is to establish the terms and conditions under which “NEXOLUTION” (or the Processor designated as “NEXOLUTION”) (i) will receive and protect the Owner's Personal Data, in order to protect their privacy and their right to informational self-determination, in compliance with the provisions of the LFPDP; (ii) will use the Owner's Personal Data, and (iii) will carry out the transfers of Personal Data to third parties, if necessary.

The Data Controller will collect and process the Owner's Personal Data, that is, information that can reasonably identify him, through the receipt of documents, whether in printed and/or digital format. The following are examples, but not limited to, of information that the Responsible Party may collect: name and surname; date of birth; home, work address, or tax address; email, personal or work address; identification code on social networks; work telephone number; cell phone number; credit card, debit card or bank account number; Federal Taxpayer Registry (RFC) code; and consumption and browsing preferences when using the services we provide. The collection of Personal Data may be carried out when the Owner uses the Responsible's websites, through the voluntary provision of information through the dialog windows enabled on the sites, or through the use of automatic data capture tools. These tools allow you to collect the information sent by your browser to such websites, such as the type of browser you use, the user's language, access times, and the IP address of websites you used to access the sites of the Responsible or Managers.

The Data Controller may also collect Personal Data from publicly accessible sources and other sources available in the market to which the Owner may have given his consent to share his personal information or who provided him with anonymous demographic information associated with a specific geographical area. The Owner's Personal Data is collected and processed by the Data Controller or its Managers in order to allow the Owner to carry out the following activities with the Data Controller:

1. Request, purchase, exchange, or return products and/or services offered by “NEXOLUTION”, whether provided by said company or through third parties;
2. Request, contract, change or cancel services, offered by “NEXOLUTION”, whether provided by said company or through third parties;
3. Make online payments;
4. Request an invoice or digital tax receipt;
5. Request a quote, information or free samples of products and services;
6. Request the delivery, repair, or warranty compliance of products;
7. Request the provision of services or warranty compliance with the service;
8. Receive advertising in print or through electronic media, including communications for online marketing purposes, or telemarketing about products and services;
9. Create personal profiles;
10. Participate in surveys;
11. Use the different services of their corresponding Websites, including the download of content and formats;
12. Notify the Data Controller about problems with their sites;
13. Participate in chats and/or online discussion forums about products and services;
14. Participate in surveys, trivia, contests, raffles, games and sweepstakes;
15. Share your comments or suggestions about products and services;
16. Processing payments, and any other activity of a nature similar to those described in the above-mentioned sections.

In addition, the Data Controller, directly or through their Managers, may use your Personal Data for the following purposes:

1. Conduct studies on the demographics, interests and behavior of your customers, consumers, suppliers, and those third parties with whom you deal;
2. Carry out market and consumer research in order to purchase and offer personalized products and services, as well as advertising and content more appropriate to the needs of your customers, consumers, suppliers and other third parties with whom you deal;
3. Prepare internal statistics that indicate the services and products most appreciated by the different segments of its customers, consumers, suppliers and other users of the services provided by the Responsible Party;
4. Formalize the transactional process with your customers, consumers, suppliers and other third parties with whom you deal;
5. Manage the requisition, evaluation and award process for suppliers and other third parties with whom you deal;
6. Check the commercial transactions carried out by the Owner with the Responsible;
7. Keep a record of the operations and reviewed information in the different sections of the services that the Responsible provides and that is collected through automatic data capture tools;
8. Send the Owner the notification of offers, notices and/or promotional messages, which will be sent to him, unless the Owner expressly expresses his desire not to receive such offers. Occasionally, such offers may contain information from suppliers of the Controller or other third parties.

“NEXOLUTION” requires sharing your Personal Data with providers of database administration and management services; automated processing of Personal Data and its storage; authentication and validation of emails; recruitment of personnel; auditing services, and other services similar to those described.

Data collection when browsing “NEXOLUTION” websites and web pages: Among the automatic data capture tools used by “NEXOLUTION” on its sites and web pages, there are cookies, Web beacons, and links in emails.

Use of Cookies.- The proper functioning of the “NEXOLUTION” sites and that of their suppliers require the activation of “cookies” in your Internet browser. “Cookies” are small data files transferred by the website to your computer's hard drive when you browse the site. Cookies can be session cookies or permanent cookies. Session cookies don't stay on your computer after you close your browser session, while permanent cookies stay on your computers until they are deleted or expire. In most browsers, cookies are automatically accepted by virtue of their default settings, you can adjust your browser preferences to accept or reject cookies. Disabling cookies may disable various functions of the “NEXOLUTION” websites or that do not display correctly. If you prefer to delete the cookie information sent by “NEXOLUTION” you can delete the file (s) at the end of each browser session. Relevant information can be found on the sites of the main Internet browsers.

Use of Web beacons (also known as Internet tags, pixel tags and clear GIFs) .- “NEXOLUTION” may use Web beacons on its websites and in its HTML-formatted emails, alone or in combination with cookies, to collect information about the use of websites and their interaction with email. The Web beacon is an electronic image, called a single pixel (1x1) or GIF that can recognize information that is processed on your computer, such as cookies, the time and date when the site and its sections are viewed.

Links in “NEXOLUTION” emails Emails that include links that allow “NEXOLUTION” to know if you activated this link and visited the destination web page, and this information may be included in your profile. If you prefer that “NEXOLUTION” does not collect information about your interaction with such links, you can choose to modify the format of “NEXOLUTION” communications (for example, that the message be received in text format and not in HTML format) or you can ignore the link and not access its content. “NEXOLUTION” emails may include links designed to direct you to relevant sections of the websites, by redirecting you through the “NEXOLUTION” servers. The redirection system allows “NEXOLUTION” to modify the URL of such links if necessary, they also allow “NEXOLUTION” to determine the effectiveness of its online marketing campaigns. The Personal Data that “NEXOLUTION” obtains from its commercial sources can be used together with the Personal Data it collects through its websites. For example, “NEXOLUTION” may compare the dissociated geographical information acquired from commercial sources with the IP address collected by automatic data capture tools in order to provide you with information or promotions relevant to your geographical area.

‍

4. Data transfers

Having read, understood and agreed to the terms set out in this Privacy Notice, the Owner expresses his consent for the Data Controller or any Processor to transfer Personal Data to national or foreign third parties, on the understanding that the treatment that such third parties give to the Owner's Personal Data must be in accordance with the provisions of this Privacy Notice.

For the purposes of the provisions of this Section 4, but subject to the provisions of the last paragraph of the same, the Responsible Party informs the Owner that in order to be able to deliver products, services and solutions to their customers, consumers, employees, suppliers and other users of their services, the Data Controller and/or its Managers have entered into or will enter into various commercial agreements with suppliers of products and services, both in the national territory and abroad, to supply him, among other services, those of: telecommunications and email; administration and management of databases; automated processing of Personal Data and its storage; call center for customer service; authentication and validation of emails; telemarketing; electronic invoicing; marketing; transportation and installation of products; administration of payroll and social security benefits; recruitment of personnel; auditing services and others of a similar nature. The authorization of the Owner granted in accordance with this Section 4 empowers the Data Controller and/or its Processors to transmit Personal Data of the Owner to such providers, on the understanding that these providers are obliged, by virtue of the corresponding contract, to maintain the confidentiality of the Personal Data provided by the Data Controller and/or its Processors and to observe this Privacy Notice. The Data Controller and/or its Managers may transfer the Personal Data collected from the Owner to any other company in the same business group to which the Data Controller belongs and that operate with the same internal processes and policies, whether they are in the national territory or abroad for processing for the same purposes described in this Privacy Notice. You may also transfer your Personal Data to other third parties that support you to comply with the contracts or legal relationships you have with the Owner.

Your personal information may be transferred, stored and processed in a country other than where it was provided. If we do, we transfer the information in accordance with applicable information protection laws in the destination country. We take steps to protect personal information regardless of the country where it is stored or transferred to. We have appropriate procedures and controls to ensure this protection.

We reserve the right to transmit your Personal Data if we sell or transfer all or part of our business or assets. In the event of such a sale or transfer, we will do our best to urge the next owner to use the Personal Data in accordance with this Notice. If you do not want your Personal Data to be processed after the transfer, you should contact the new owner.

Notwithstanding the provisions of this Section 4 or anywhere else in this Privacy Notice, the Owner recognizes and accepts that the Data Controller does not require authorization or confirmation from said Owner to carry out national or international Personal Data transfers in the cases provided for in Article 37 of the LFPDP or in any other case of exception provided for by the same or other applicable legislation.

5. Retention and security of personal data

The Data Controller and/or its Managers will keep the Owner's Personal Data for as long as necessary to process their requests for information, products and/or services, as well as to maintain accounting, financial and auditing records in terms of the LFPDP and current commercial, fiscal and administrative legislation. The Personal Data of the Owner collected by the Data Controller and/or its Managers will be protected by appropriate administrative, technical and physical security measures against damage, loss, alteration, destruction or unauthorized use, access or treatment, in accordance with the provisions of the LFPDP and the administrative regulation derived from it. Notwithstanding the above, “NEXOLUTION” does not guarantee that unauthorized third parties cannot access the physical or logical systems of the Owners or the Responsible or to the electronic documents and files stored in their systems. Consequently, “NEXOLUTION” will in no case be responsible for any damages that may result from such unauthorized access.

6. Contact “Nexolution” for personal data/privacy; Address

For any communication regarding our Privacy Notice, please contact the following address, responsible areas, and emails:

NXN Consultores, S.A. de C.V.
Ricardo Margain Avenue 575
Fracc. Santa Engracia Corporate Park
ZIP CODE 66267
San Pedro Garza Garcia, Nuevo Leon
Mexico
Tel: 81 8000 7568
informacion@Nexolution.com

For the purposes of the provisions of section I of Article 16 of the LFPDP, the address of the Responsible Party is the one established in this Section 6 of this Privacy Notice.

7. Procedures for exercising ARCO rights

To exercise ARCO Rights, the Owner or his representative must submit a request for access, rectification, cancellation or opposition with the following information and documentation:

Name of the Owner and address or other means to communicate the response to your request; The documents that prove your identity (simple copy in printed or electronic format of your voter ID, passport or FM-3) or, where appropriate, the legal representation of the Holder (simple copy in printed or electronic format of the simple power of attorney signed by the Holder, the representative and their corresponding official identification — voter's credential, passport or FM-3); The clear and precise description of the Personal Data you are looking for exercise any of the ARCO Rights, and Any other element or document that facilitates the location of the Owner's Personal Data.

8. Changes to the “Nexolution” privacy notice

It reserves the right to periodically update this Notice to reflect changes in our information practices. It is the Owner's responsibility to periodically review the content of the Privacy Notice on the site www.nexolution.com. The Data Controller will understand that if he does not express the contrary, it means that the Owner has read, understood and agreed to the terms set out therein, which constitutes his consent to the changes established in these updates regarding the processing of his Personal Data for the purposes of the LFPDP and other applicable legislation.