Notice of Privacy – Employees/Applicants

NOTICE OF PRIVACY



GRUPO INVERSOR VERACRUZANO, S.A.P.I. DE C.V. (hereinafter “GRIVER”), with address at Constitución 259 Altos Colonia Centro, Veracruz, Veracruz de Ignacio de la Llave, C.P. 91700 [MBM1], informs you that, as responsible for the use and protection of your personal data, in all its operations it applies guidelines, policies, procedures and programs for the protection thereof.

Said measures, as well as our procedures and in general our entire operation, are carried out contemplating at all times compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter the “Law”), as well as the relative Regulation (hereinafter, the “Regulations”) and other provisions and regulations applicable in the Mexican Republic.

Personal information that GRIVER needs to collect.

GRIVER will collect the necessary personal data, to register your visit, to take it into account for vacancies of employment, professional practices or to attend the worker-employer relationship with you. GRIVER may collect:

Applicants: full name, recorded images from surveillance cameras of our facilities, official identification with photographs, address, email, age, marital status, date of birth, curriculum vitae; country and entity of birth; occupation, profession or activity to which it is dedicated; contact telephone numbers, emails, letters of recommendation and / or proof of previous employment; information on previous employment relationship with any GRIVER Group company, nationality, level of studies, institution in which he studied, information on language proficiency.

In addition, GRIVER may also collect the following sensitive personal, economic or financial data: information about your family, family ties with people who work in the company; socioeconomic studies; psychometric studies; Current salary; personal references.

Employees: full name; home; birthdate; country and entity of birth; nationality; occupation, profession or activity to which it is dedicated; fixed or cellular telephone numbers; emails, images recorded from surveillance cameras of our facilities; voice recordings, fingerprints; official IDs with photographs, proof of address, letters of recommendation and / or proof of previous employment, information on prior employment relationship with any GRIVER Group company; Single Registry of Population Registry (CURP); as well as the Federal Taxpayer Registry Code; civil status; copy of the marriage certificate; nationality; copy of migratory document; Social Security number; educational level; institution in which he studied; education certificates or certificates of studies, courses, postgraduate courses; information about language proficiency; employee number; record of discharge, discharge or salary modification of the Mexican Institute of Social Security; contact data for emergencies; Curriculum vitae; information regarding AFORE; information regarding INFONAVIT; any additional documents that by law must be requested by employers to their employees. GRIVER may also collect the following information considered as equity or financial: information relating to bank accounts, tax information, credit information.

Additionally, GRIVER may also collect the following sensitive personal, economic or financial data: level; Market Stall; salary, perceptions and deductions; bank account information; change of level or position of work; copy of the record of perceptions of the last job; personal references; information related to spouse, number of children, beneficiaries or economic dependents, including full name, date of birth and identification data; information regarding the employee’s performance; health condition; diseases suffered or suffered; allergies; Blood type; results of medical examinations; medical records of treatment of ailments; socioeconomic studies; psychometric studies.

Practitioners: full name, recorded images from surveillance cameras of our facilities, fingerprints; official IDs with photographs, address, email, age, date of birth, curriculum vitae; country and entity of birth; occupations or hobbies; contact phones, emails, letters of recommendation; nationality, level of studies, institution in which he studied, information on language proficiency; copies of birth certificate, voter’s credential, proof of address, proof of last degree, optional insurance.

Additionally, GRIVER may also collect the following sensitive personal, financial or personal data: information about your family, family ties with people who work in the company, personal references; information about bank account.

Main purposes.

Applicants: recruitment and selection of new personnel; compliance with company security policies, review your profile to assess whether it complies with the job offer; conduct interviews, call your references to check data; make a job offer or reject the profile if it does not comply with what is necessary; perform necessary tests and studies that are required in the recruitment and selection process.

Employees: Comply with all employer obligations that GRIVER has in its charge, stipulated both in applicable federal laws and regulations and in its internal policies, including security policies; generate records of employees, perform the administration of human resources and payroll; assign physical space in their facilities and work tools, assign keys and passwords, including employee number, as well as attendance record; have references and call their references to check data provided; act in cases of emergency, whether in accidents, injuries, or any other incident; contract social security and other benefits of law; evaluate the performance as an employee of GRIVER, issue recommendations or labor opinions once the employer-employee relationship with GRIVER ends; make statistics, reports or reports necessary for the operation of the company or, to make processes more efficient or implement certain policies or services; provide training, courses, consultancies; health campaigns.

Practitioners: comply with internal policies, including security policies; generate records, perform the administration of human resources; assign physical space in their facilities and work tools, assign keys and passwords as well as attendance record; have references and call their references to check data provided; act in cases of emergency, whether in accidents, injuries, or any other incident; issue letters or letters requested by the corresponding practitioner’s university, or letters of recommendation that the latter requests; make statistics, reports or reports necessary for the operation of the company or, to make processes more efficient or implement certain policies or services.

Secondary purposes.

Additionally, there are other purposes for which we will treat your personal data, which are not necessary to generate a relationship with you:

Sending of advertising, marketing strategies, promotions, both GRIVER and any other company of Grupo Inversor Veracruzano, S.A.P.I. of C.V.

Since these purposes are not necessary, you have the right to notify GRIVER about the refusal to process personal data for these secondary purposes. To express your refusal, you will have a period of 5 working days to send an email to the following email address: juridico.corporativo@griver.com.mx, in which you clearly express your refusal. GRIVER will be obliged to respond to your request within a maximum period of 20 calendar days, and to stop treating your personal data for the purposes not necessary within 15 calendar days following the date on which you receive our response. The aforementioned deadlines could be extended in case the regulations applicable in the United States of Mexico so permit.

The refusal to use your personal data for the secondary purposes mentioned here, may not be a reason for you to cease to have an employment relationship with you, or for us to stop considering you as an applicant or as a practitioner.

Transfer of personal data.

GRIVER may transfer your personal data in national or foreign territory to natural or legal persons that provide it with the services necessary for its due operation, as well as to subsidiaries, controllers, associates, commission agents or companies that are members of GRIVER; all the above, only in case it is necessary to comply with the purposes established in this Privacy Notice. GRIVER may also transfer your personal data to competent authorities by requesting them to GRIVER. In these cases, we inform you that GRIVER will adopt the necessary measures so that people who have access to your personal data only treat your personal data in accordance with the provisions of this Privacy Notice, and to comply with the principles of data protection personal rights established in the Law.

Transfer of personal data.

GRIVER may transfer your personal data in national or foreign territory to natural or legal persons that provide it with the services necessary for its due operation, as well as to subsidiaries, controllers, associates, commission agents or companies that are members of GRIVER; all the above, only in case it is necessary to comply with the purposes established in this Privacy Notice. GRIVER may also transfer your personal data to competent authorities by requesting them to GRIVER. In these cases, we inform you that GRIVER will adopt the necessary measures so that people who have access to your personal data only treat your personal data in accordance with the provisions of this Privacy Notice, and to comply with the principles of data protection personal rights established in the Law.

Any other transfer of personal data not necessary to fulfill the purposes listed here, may not be carried out if GRIVER does not have your consent. In this case, you may express your refusal to transfer your data, following the same procedure mentioned in the section “Secondary purposes” of this Privacy Notice.

ARCO rights, revocation of consent for the processing of personal data, and limitation of use or disclosure of personal data.

ARCO Rights: You, in your own right or through a legal representative, may exercise your rights of Access, Rectification, Cancellation or Opposition (“ARCO” rights) in accordance with the following procedure:

Send an email to juridico.corporativo@griver.com.mx, requesting the exercise of some ARCO right.

The application must contain at least: full name of the owner, address, email address to which we will send the corresponding answers and notifications, telephone, copy of some official identification, power of the legal representative and copy of the official identification of the representative, if applicable ; right to exercise (Access, Rectification, Cancellation, Opposition), description of the personal data on which the request relates; Any brief description that explains the reason for your request.

In case your request is incomplete or information is missing so that GRIVER can process the same, it will give notice of the above in a maximum period of 5 working days, so that it can correct the error or deliver missing information. If GRIVER does not receive a response from you after 10 working days, it will be understood that the request was abandoned and the request will be rejected.

Once the complete application has been received, GRIVER will respond within a maximum period of 20 calendar days, if the request was appropriate, and if so, will proceed to make the right of the corresponding holder effective in a maximum period of 15 calendar days after delivery of the answer. The modality through which the owner can obtain the information requested through the exercise of the right of access, is through electronic documentation via email. The aforementioned deadlines could be extended in case the regulations applicable in the United States of Mexico so permit.

Any other transfer of personal data not necessary to fulfill the purposes listed here, may not be carried out if GRIVER does not have your consent. In this case, you may express your refusal to transfer your data, following the same procedure mentioned in the section “Secondary purposes” of this Privacy Notice.

ARCO rights, revocation of consent for the processing of personal data, and limitation of use or disclosure of personal data.

ARCO Rights: You, in your own right or through a legal representative, may exercise your rights of Access, Rectification, Cancellation or Opposition (“ARCO” rights) in accordance with the following procedure:

Send an email to juridico.corporativo@griver.com.mx, requesting the exercise of some ARCO right.

The application must contain at least: full name of the owner, address, email address to which we will send the corresponding answers and notifications, telephone, copy of some official identification, power of the legal representative and copy of the official identification of the representative, if applicable ; right to exercise (Access, Rectification, Cancellation, Opposition), description of the personal data on which the request relates; Any brief description that explains the reason for your request.

In case your request is incomplete or information is missing so that GRIVER can process the same, it will give notice of the above in a maximum period of 5 working days, so that it can correct the error or deliver missing information. If GRIVER does not receive a response from you after 10 working days, it will be understood that the request was abandoned and the request will be rejected.

Once the complete application has been received, GRIVER will respond within a maximum period of 20 calendar days, if the request was appropriate, and if so, will proceed to make the right of the corresponding holder effective in a maximum period of 15 calendar days after delivery of the answer. The modality through which the owner can obtain the information requested through the exercise of the right of access, is through electronic documentation via email. The aforementioned deadlines could be extended in case the regulations applicable in the United States of Mexico so permit.

Revocation of consent: You, in your own right or through a legal representative, may revoke your consent for the processing of your personal data, in accordance with the following procedure:

Revocation of consent: You, in your own right or through a legal representative, may revoke your consent for the processing of your personal data, in accordance with the following procedure:

Send an email to juridico.corporativo@griver.com.mx, making a request for the revocation of consent on the use of your personal data.

This email must contain at least: full name of the owner, address, email to which we will send the corresponding answers and notifications, telephone, copy of some official identification, power of the legal representative and copy of the official identification of the representative, if applicable ; description of the personal data on which you revoke your consent; Any brief description that explains the reason for your request.

In case your request is incomplete or information is missing so that GRIVER can process the same, it will give notice of the above in a maximum period of 5 working days, so that it can correct the error or deliver missing information. If GRIVER does not receive a response from you after 10 working days, it will be understood that the request was abandoned and the request will be rejected.

Once the complete application has been received, GRIVER will respond within a maximum period of 20 calendar days, if the request was appropriate, and if so, will proceed to make effective the right of the owner in a maximum period of 15 calendar days after the delivery of the answer. The aforementioned deadlines could be extended in case the regulations applicable in the United States of Mexico so permit.

It is important to mention that GRIVER will not be able to conclude the use of its data immediately in any case, because GRIVER could legally be obliged to process your personal data; In any case, the revocation of consent could lead to the impediment to generate an employment relationship with you, or to consider it as an applicant or practitioner in any position or area.

Limitation of use or disclosure of data: you, in your own right or through a legal representative, may request that GRIVER limit the use or disclosure of your personal data, through the following means:

Registration in the Public Registry to Avoid Publicity, which is in charge of the Federal Attorney’s Office, with the purpose that your personal data are not used to receive advertising or promotions of companies of goods or services. To use this medium, you can consult PROFECO directly by telephone or through the Internet.

You can also send an email to juridico.corporativo@griver.com.mx, requesting the limitation of the use or disclosure of your personal data for those secondary purposes described in this document; for such purposes, it must include the requirements and follow the procedure established in the ARCO Rights section, and GRIVER, where appropriate, will proceed to register its data in the Exclusion List of GRIVER so that their personal data are not processed for purposes marketing, advertising or commercial prospecting on our part.

The department in charge of processing your requests, as well as to answer any questions you may have regarding the processing of your information, is the following:
  • Corporate legal department
  • Attention: Mónica Barragán Molina
  • Domicile: Constitution no. 259 Altos, Colonia Centro, Veracruz, Veracruz, C.P. 91700.
  • Telephone: +52 (229) 9-89-73-00, extension 3429.
  • Email: juridico.corporativo@griver.com.mx
Use of mechanisms in remote local communication media.

GRIVER uses cookies, IP addresses, browser identifiers, input / output URLs and search terms, with which personal data are automatically collected, which consist of: IP address, geographical location, general browser data, type of system operational and device used, knowledge about whether the visit to your site is direct or by reference, search terms, knowledge about pages you visit within the GRIVER site, time spent on each page.

The aforementioned information is collected to know the technical requirements of the users to ensure a smooth navigation, know their topics of interest, improve the content of the site, locate and solve problems with the site, improve the overall performance of the site, and know the impact of online campaigns by geographically segmenting visits.

For more information, please contact the Information Technology Department of GRIVER, by sending an email to the following address: webmaster@griver.com.mx

Modifications to the privacy notice.

GRIVER may make updates or modifications to this Privacy Notice. Any modification to this notice will be notified to you through any of the following means: a written communication sent to your address or delivered to the address of GRIVER; a message sent to your email or to your mobile phone; a message made known through www.griver.com.mx, its Intranet, or, through newspapers of wide circulation.

Information about the INAI.

If you believe that your right to the protection of your personal data has been damaged by any conduct or omission on the part of GRIVER, or would like to denounce any violation of the Law, the Regulation or the applicable regulations on the protection of personal data, you You can file your disagreement or complaint with the National Institute of Transparency, Access to Information and Protection of Personal Data (www.ifai.org.mx). Last update: June 15, 2016