COMPREHENSIVE GENERAL PRIVACY POLICY
In compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter "The Law"), this privacy policy is made known to our clients, applicants, contractors, insured parties, beneficiaries, third parties, suppliers, the general public, and any other person who is the subject of personal data.
1. IDENTITY AND DOMICILE OF THE DATA CONTROLLER.
BAS CARGO, S.A. DE C.V., located at Avenida Real Acueducto number 300, floor 24, interior A1, Colonia Puerta de Hierro, Zip Code 45116, Zapopan, Jalisco, is the Controller responsible for the processing of your personal data in terms of this Privacy Policy.
2. TYPES OF DATA COLLECTED BY THE CONTROLLER
- ➢ Identification data: Data such as name, address, home and/or cell phone number, personal email, marital status, signature, electronic signature, military ID, place and date of birth, nationality, age, photograph, Federal Taxpayer Registry (RFC) code, Unique Population Registry Code (CURP), names of family members, dependents, and/or beneficiaries.
- ➢ Employment data: Data contained in job applications, institutional email, institutional phone, extracurricular activities, professional references, personal references, recommendations, training, selection documents, recruitment, appointment, incidents, service records, and others generated from the employment relationship.
- ➢ Data on administrative and jurisdictional procedures: Administrative procedures or trials in labor, civil, criminal, tax, commercial, or any other branch of Law.
- ➢ Academic data: Study certificates, professional degree, professional license, obtained GPA; Academic institution of origin.
- ➢ Transit and migratory movement data: Those necessary when transit is inside and outside the country.
“THE COMPANY” may also process the following personal data considered sensitive (hereinafter they will be understood as included when reference is made to "Personal Data"):
- ➢ Health Data: Data related to physical or mental health status, surgical interventions, use of ophthalmological, orthopedic, hearing aids or prostheses, consumption of toxic substances and narcotics.
- ➢ Biometric data: Personality traits through psychometric tests, fingerprinting.
- ➢ Electronic data: Private emails, usernames, passwords, electronic signature (if applicable).
For “THE CONTROLLER”, treating your data legitimately and in compliance with the LFPDPPP is a priority. This Privacy Policy complements any other simplified or short privacy policies that “THE CONTROLLER” has made available to you as the owner of your personal data and is supplementary in everything that such policies do not expressly refer to.
In that sense, we inform you that your data will be processed and safeguarded based on the principles established in "THE LAW": lawfulness, quality, consent, information, purpose, loyalty, proportionality, and accountability.
3. PURPOSES OF PROCESSING THE CLIENT'S PERSONAL DATA.
“THE CONTROLLER” collects your personal data for the following purposes:
- To provide the professional services you require, in accordance with the proposal presented by "THE CONTROLLER". The professional services that "THE CONTROLLER" may provide are in the areas of consulting or advisory services in insurance matters, whether for physical or moral persons, public or private, advisory in property insurance, in any of the branches or sub-branches of civil liability and professional risks, maritime and transportation, fire, agriculture and animals, automobiles, credit, surety, catastrophic risks, and special risks declared by the Ministry of Finance and Public Credit, in accordance with Article 28 of the Law of Insurance and Surety Institutions.
- To comply with the obligations contracted with you according to the professional services provided, as well as to inform you of any situation or change regarding such services.
- To maintain contact with you in order to invite you to conferences, courses, or events, where current issues related to the professional services "THE CONTROLLER" provides you are discussed.
4. COOKIES.
Cookies are small text files stored on your computer by the websites you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site. Today, the use of cookies is standard for most websites. If you are uncomfortable with the use of cookies, you can manage and control them through your browser, including deleting cookies from your browser history (cache) when you leave the site.
5. OPTIONS AND MEANS TO LIMIT THE USE OR DISCLOSURE OF PERSONAL DATA
To limit the use or disclosure of your personal data so that they are not processed for marketing or advertising purposes by “THE CONTROLLER”, you can go directly to the offices of BAS CARGO, S.A. DE C.V., indicated in the first point of this privacy policy or by sending your request to the email privacidad@bascargoi.com; the request must contain:
- Name and address of the data subject or other means to notify you of the response to your request.
- Documents proving the identity of the data subject or, where applicable, their legal representation.
- A clear and precise description of the Personal Data with respect to which the rights are being exercised.
- Any other element or document that facilitates the location of the Personal Data.
6. MEANS TO EXERCISE THE RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION, AND OPPOSITION (ARCO RIGHTS).
You have the right to access your personal data held by “THE CONTROLLER” and the details of their processing, as well as to rectify them if they are inaccurate or incomplete; cancel them when you consider they are not required for any of the purposes outlined in this privacy policy, are being used for non-consented purposes, or oppose their processing for specific purposes.
You may exercise these rights directly at the Legal Department, located at:
Avenida Real Acueducto number 300, interior A1.
Phone: 3318149076 extension 5104
Hours: 9:00 AM to 5:30 PM, Monday through Friday.
Or, via email at: privacidad@bascargoi.com.
“THE CONTROLLER” will provide you with all necessary information to proceed with the exercise of your Access, Rectification, Cancellation, and Opposition rights regarding your personal data. The procedure implemented for exercising these rights begins with the presentation of the respective request, whose format and information regarding the response times can be obtained through the aforementioned email.
7. PROCEDURE FOR "THE DATA SUBJECT" (CLIENT) TO REVOKE THEIR CONSENT.
At any time, you may revoke the consent that, if applicable, you have granted to “THE CONTROLLER” for the processing of your personal data. However, it is important to note that not in all cases will we be able to meet your request or terminate use immediately, as it is possible that due to some legal obligation we may need to continue processing your personal data. Likewise, you should consider that, for certain purposes, revoking your consent will imply that we can no longer provide the requested service, or the conclusion of your relationship with “THE CONTROLLER”.
To revoke your consent, you must contact the Legal Department of “THE CONTROLLER” to learn the procedure for revoking consent.
Response Times:
- Five business days, if we need additional information regarding your request.
- You will have ten business days to provide the additionally requested information; if not provided within that period, the request will be deemed as not submitted, in terms of law.
- Up to twenty business days to issue a response to you.
- If there is a justified cause, to provide an adequate response, we may extend this period by another twenty business days.
- In the event that the exercise of the right is deemed valid, THE CONTROLLER will carry out the necessary actions to make your corresponding ARCO right effective within fifteen business days from the day following the notification of the response.
- The aforementioned periods may be extended once for an equal period, provided the circumstances of the case justify it.
9. TRANSFER OF PERSONAL DATA.
“THE CONTROLLER” undertakes not to transfer your personal data to other third parties, except for the purposes mentioned in point 3 of this Privacy Policy, as well as when, due to the professional services provided, they must be transferred to comply with legal obligations before competent authorities, such as tax authorities or federal/local judicial authorities. Likewise, your data may be transferred without your consent in the cases provided for in Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties, and in the cases mentioned in the preceding paragraph that fall under the provisions of said Article 37, with the understanding that the transfers will be carried out in the terms established by said law.
10. IMPLEMENTED SECURITY MEASURES.
For the protection of your personal data, we have implemented administrative, physical, and technical security measures to prevent loss, misuse, or alteration of your information.
11. MODIFICATIONS TO THE PRIVACY POLICY.
This privacy policy may undergo modifications, changes, or updates derived from new legal requirements, the own needs of “THE CONTROLLER” due to the services offered, privacy practices, or for other reasons, therefore “THE CONTROLLER” reserves the right to make modifications or updates to this privacy policy at any time.
“THE CONTROLLER” will make the updated version of the privacy policy available to the client on the following website: https://bascargoi.com/en/privacy-policy