Notice of Privacy – Visitors

NOTICE OF PRIVACY

GRUPO INVERSOR VERACRUZANO, S.A.P.I. DE C.V. (hereinafter “GRIVER”), with address at Constitución 259 Altos Colonia Centro, Veracruz, Veracruz de Ignacio de la Llave, C.P. 91700, it is your knowledge that, as responsible for the use and protection of your personal data, in all its operations it applies guidelines, policies, procedures and programs for the protection of same.

Said measures, as well as our procedures and in general our entire operation, are carried out contemplating at all times compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter the “Law”), as well as the relative Regulation (hereinafter, the “Regulations”) and other provisions and regulations applicable in the Mexican Republic.

Personal information that GRIVER needs to collect.

GRIVER will collect the necessary personal data to register your visit, to attend or formalize the service, product or system that is required, or to attend or formalize the service, product or system that has hired you. GRIVER may collect:

Visits: full name, recorded images from surveillance cameras of our facilities, official identifications with photographs, address, email.

Clients and Suppliers: full name; home; birthdate; country and entity of birth; nationality; occupation, profession or activity to which it is dedicated; fixed or cellular telephone numbers; emails, images recorded from surveillance cameras of our facilities; official IDs with photographs, proof of address, letters of recommendation, Single Registry of Population Registry (CURP); as well as the Federal Taxpayer Registry Code; general information of your personnel, such as names, telephone numbers, positions, emails. GRIVER may also collect the following information considered as equity or financial information: information relating to bank accounts, tax information, information on credit bureau; credit information.

Main purposes.

Clients: generation of confidentiality agreements, generation of any offers requested to GRIVER, evaluation of business opportunities with the client, provision of all services contracted to GRIVER, answering and managing any request for the provision of additional services to those hired, execution of contracts concluded between both parties, including notifications, notices, announcements regarding system modifications, authorities’ bulletins, important news for its operation, among other information that is useful for its operation and for the provision of GRIVER services; follow up on incidents, clarifications, collections, invoicing, and all those activities related to the commercial and contractual relationship between you and GRIVER.

Suppliers: perform the necessary activities to register as a Supplier, in accordance with our internal policies, execution of contracts entered into between both parties, including applicable bonds, notifications, notices, follow-up on incidents, clarifications, making payments, confirmation of balances, visits to their facilities, taking photographs of their establishments, generation of purchase orders, and all those activities related to the commercial and contractual relationship between you and GRIVER.

Visitors: collect their general information, which could include images or videos recorded with security cameras inside our facilities, to identify them and allow them access or take care of their needs; all of the above, for security reasons. Also, to send any necessary notice regarding our privacy notice.

Secondary purposes.

Additionally, there are other purposes for which we will treat your personal data, which are not necessary to carry out the contractual, commercial or corresponding visits, but which allow us to offer promotions and better service in our services:

Sending of advertising, marketing strategies, promotions, both GRIVER and any other company of Grupo Inversor Veracruzano, S.A.P.I. of C.V.

Since these purposes are not necessary, you have the right to notify GRIVER about the refusal to process personal data for these secondary purposes. To express your refusal, you will have a period of 5 working days to send an email to the following email address: juridico.corporativo@griver.com.mx, in which you clearly express your refusal. GRIVER will be obliged to respond to your request within a maximum period of 20 calendar days, and to stop treating your personal data for the purposes not necessary within 15 calendar days following the date on which you receive our response. The aforementioned deadlines could be extended in case the regulations applicable in the United States of Mexico so permit.

The refusal to use your personal data for the secondary purposes mentioned herein, may not be a reason for us to deny services and / or products you request or contract with GRIVER.

Transfer of personal data.

GRIVER may transfer your personal data in national or foreign territory to natural or legal persons that provide it with the services necessary for its due operation, as well as to subsidiaries, controllers, associates, commission agents or companies that are members of GRIVER; all the above, only in case it is necessary to comply with the purposes established in this Privacy Notice. GRIVER may also transfer your personal data to competent authorities by requesting them to GRIVER. In these cases, we inform you that GRIVER will adopt the necessary measures so that people who have access to your personal data only treat your personal data in accordance with the provisions of this Privacy Notice, and to comply with the principles of data protection personal rights established in the Law.

Any other transfer of personal data not necessary to fulfill the purposes listed here, may not be carried out if GRIVER does not have your consent. In this case, you may express your refusal to transfer your data, following the same procedure mentioned in the section “Secondary purposes” of this Privacy Notice.

ARCO rights, revocation of consent for the processing of personal data, and limitation of use or disclosure of personal data.

ARCO Rights: You, in your own right or through a legal representative, may exercise your rights of Access, Rectification, Cancellation or Opposition (“ARCO” rights) in accordance with the following procedure:

Send an email to juridico.corporativo@griver.com.mx, requesting the exercise of some ARCO right.

The application must contain at least: full name of the owner, address, email address to which we will send the corresponding answers and notifications, telephone, copy of some official identification, power of the legal representative and copy of the official identification of the representative, if applicable ; right to exercise (Access, Rectification, Cancellation, Opposition), description of the personal data on which the request relates; Any brief description that explains the reason for your request.

In case your request is incomplete or information is missing so that GRIVER can process the same, it will give notice of the above in a maximum period of 5 working days, so that it can correct the error or deliver missing information. If GRIVER does not receive a response from you after 10 working days, it will be understood that the request was abandoned and the request will be rejected.

Once the complete application has been received, GRIVER will respond within a maximum period of 20 calendar days, if the request was appropriate, and if so, will proceed to make the right of the corresponding holder effective in a maximum period of 15 calendar days after delivery of the answer. The modality through which the owner can obtain the information requested through the exercise of the right of access, is through electronic documentation via email. The aforementioned deadlines could be extended in case the regulations applicable in the United States of Mexico so permit.

Revocation of consent: You, in your own right or through a legal representative, may revoke your consent for the processing of your personal data, in accordance with the following procedure:

Send an email to juridico.corporativo@griver.com.mx, making a request for the revocation of consent on the use of your personal data.

This email must contain at least: full name of the owner, address, email to which we will send the corresponding answers and notifications, telephone, copy of some official identification, power of the legal representative and copy of the official identification of the representative, if applicable ; description of the personal data on which you revoke your consent; Any brief description that explains the reason for your request.

In case your request is incomplete or information is missing so that GRIVER can process the same, it will give notice of the above in a maximum period of 5 working days, so that it can correct the error or deliver missing information. If GRIVER does not receive a response from you after 10 working days, it will be understood that the request was abandoned and the request will be rejected.

Once the complete application has been received, GRIVER will respond within a maximum period of 20 calendar days, if the request was appropriate, and if so, will proceed to make effective the right of the owner in a maximum period of 15 calendar days after the delivery of the answer. The aforementioned deadlines could be extended in case the regulations applicable in the United States of Mexico so permit.

It is important to mention that GRIVER will not be able to conclude the use of its data immediately in any case, because GRIVER could legally be obliged to process your personal data; in any case, the revocation of consent could lead to the impediment to provide our services, or the conclusion of the commercial / legal relationship between you and GRIVER.

Limitation of use or disclosure of data: you, in your own right or through a legal representative, may request that GRIVER limit the use or disclosure of your personal data, through the following means:

Registration in the Public Registry to Avoid Publicity, which is in charge of the Federal Attorney’s Office, with the purpose that your personal data are not used to receive advertising or promotions of companies of goods or services. To use this medium, you can consult PROFECO directly by telephone or through the Internet.

You can also send an email to juridico.corporativo@griver.com.mx, requesting the limitation of the use or disclosure of your personal data for those secondary purposes described in this document; for such purposes, it must include the requirements and follow the procedure established in the ARCO Rights section, and GRIVER, where appropriate, will proceed to register its data in the Exclusion List of GRIVER so that their personal data are not processed for purposes marketing, advertising or commercial prospecting on our part.

The department in charge of processing your requests, as well as to answer any questions you may have regarding the processing of your information, is the following:

  • Corporate legal department
  • Attention to: Mónica Barragán Molina
  • Address: Constitution no. 259 Altos, Colonia Centro, Veracruz, Veracruz, C.P. 91700.
  • Telephone: +52 (229) 9-89-73-00, extension 3429.
  • Email: juridico.corporativo@griver.com.mx


Use of mechanisms in remote local communication media.

GRIVER uses cookies, IP addresses, browser identifiers, input / output URLs and search terms, with which personal data are automatically collected, which consist of: IP address, geographical location, general browser data, type of system operational and device used, knowledge about whether the visit to your site is direct or by reference, search terms, knowledge about pages you visit within the GRIVER site, time spent on each page.

The aforementioned information is collected to know the technical requirements of the users to ensure a smooth navigation, know their topics of interest, improve the content of the site, locate and solve problems with the site, improve the overall performance of the site, and know the impact of online campaigns by geographically segmenting visits.

For more information, please contact the Information Technology Department of GRIVER, by sending an email to the following address: webmaster@griver.com.mx

Modifications to the privacy notice.

GRIVER may make updates or modifications to this Privacy Notice. Any modification to this notice will be notified to you through any of the following means: a written communication sent to your address or delivered to the address of GRIVER; a message contained in your account statement; a message sent to your email or to your mobile phone; a message made known through www.griver.com.mx or any electronic means used to enter into transactions with GRIVER; or, through newspapers of wide circulation.

Information about the INAI.

If you believe that your right to the protection of your personal data has been damaged by any conduct or omission on the part of GRIVER, or would like to denounce any violation of the Law, the Regulation or the applicable regulations on the protection of personal data, you You can file your disagreement or complaint with the National Institute of Transparency, Access to Information and Protection of Personal Data (www.ifai.org.mx).