1. IDENTITY AND DOMICILE OF THE ENTITY RESPONSIBLE.
This Privacy Policy (hereinafter, the “Policy”) establishes all the terms and conditions pursuant to which EXPO PACK MÉXICO, S.A. DE C.V., commercially known as “EXPO PACK”, as will be named below, whose domicile to hear and receive notices, as well as for any other communication hereunder, is located in Homero no. 418, Third Floor, Colonia Chapultepec Morales, Alcaldía Miguel Hidalgo, Postal Code 11570, Mexico City, as Controller, shall process the personal data that concern you as owner of your personal data, in order to protect your privacy and your right to informative auto determination, pursuant to the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), its Regulation and other related legislation (collectively, the "Data Protection Legislation").
2. PERSONAL DATA THAT WECOLLECT AND HANDLE.
EXPO PACK collects and processes the personal data that are shown below, depending on your relationship with EXPO PACK:
a. If you are a guest, prospect, client and/or speaker:
i. Identification and contact information.
ii. Video and/or audio recordings.
iii. Customer service calls, e-mails and conversations.
iv. Online identifiers.
v. Financial and economic data.
vi. Employment and academic data.
vii. Demographic information.
viii. Interests, experiences and responsibilities.
b. If you are a supplier:
i. Identification and contact information.
ii. Video and/or audio recordings.
iii. Financial and economic data.
iv. Employment data.
In the event you have provided personal data of a third party to EXPO PACK, you guarantee that you have their authorization and/or consent to provide such data to us for processing in accordance with the purposes of this Policy and you are responsible for informing such person (i) the terms and purposes for which EXPO PACK will contact them; and/or (ii) as applicable, the terms of this Policy and the processing of their personal data per the terms therin.
3. PURPOSES
In EXPO PACK we treat your personal data to carry out the primary activities and procedures focused on the fulfillment of the obligations originated and arising from any commercial and/or legal relationship that we establish with you, which are:
a. For guests, prospects, clients and speakers:
i. Register in our databases and guest, visitors, prospects, clients, and/or speakers’ directories.
ii. Manage and administrate events, including payments, technical assistance and operations.
iii. Monitor and control your access to events.
iv. Manage your security in EXPO PACK’s events, including video recording of activities and the management of security incidents.
v. Facilitate the sending of invitations from our speakers to your guests for the EXPO PACK’s events.
vi. Manage the payment of services and collection activities.
vii. Manage user and password keys to authenticate the identity of speakers and VIP guests, in order to allow them to use the online services and their tools, including the Speakers’ Manual.
viii. Allow and maintain the management, administration and security of your personal data and procedures related to such activities.
ix. Provide information, communications and notifications about our services.
x. Carry out strategies and market segmentation necessary for the granting of our services.
xi. Provide advice, clarifications and customer service and save the corresponding conversations, calls and mails for registration and follow-up to such service.
xii. Perform activities and actions, whether preventive and/or corrective, necessary to comply with internal protocols and plans and/or required by law in relation to the performance, prevention and mitigation of suspected and/or confirmed cases of infectious diseases and other health contingency plans and protocols or to procure health within the Controller’s facilities, including monitoring your health, sending notifications regarding cases of such diseases in the Controller’s facilities, creating histories of persons with such diseases, with symptoms of such or vulnerable to becoming infected and determining applicable measures.
xiii. Attend legal requirements of national and international competent authorities and to fulfill the obligations arising from the legal relationship between you and the Controller.
xiv. Comply with any legal provisions and obligations, national or international, applicable to the Controller, its subsidiaries and/or affiliates, as well as to manage any legal process of these.
xv. Carry out the transfers mentioned in section 4 of this Policy.
xvi. Carry out proceedings related to corporate restructurings of the Controller, including, merger, consolidation, sale, liquidation or transfer of assets.
xvii. Complementary activities necessary for the realization of the above purposes.
b. For Suppliers:
i. Allow access to EXPO PACK´s facilities and events.
ii. Manage the information of our suppliers to keep our databases updated.
iii. Manage the relationship with our suppliers in the selection and hiring process.
iv. Management of requests for purchase orders and/or hiring.
v. Prove your identity and verify the information you provide.
vi. Integrate the files and generate your profile.
vii. Manage the payment of your invoices and/or receipt of fees.
viii. Allow the management, administration and security of your personal data and procedures related to such activities.
ix. Monitor and control the physical and logical access to EXPO PACK’s technological and security resources, including video recording of activities.
x. Perform activities and actions, whether preventive and/or corrective, necessary to comply with internal protocols and plans and/or required by law in relation to the performance, prevention and mitigation of suspected and/or confirmed cases of infectious diseases and other health contingency plans and protocols or to procure health within the Controller’s facilities and events, including monitoring your health, sending notifications regarding cases of such diseases in the Controller’s facilities and events, creating histories of persons with such diseases, with symptoms of such or vulnerable to becoming infected and determining applicable measures.
xi. Attend legal requirements of national and international competent authorities and to fulfill the obligations arising from the legal relationship between you and the Controller.
xii. Comply with any legal provisions and obligations, national or international, applicable to the Controller, its subsidiaries and/or affiliates, as well as to manage any legal process of these.
xiii. Carry out the transfers mentioned in section 4 of this Policy.
xiv. Carry out proceedings related to corporate restructurings of the Controller, including, merger, consolidation, sale, liquidation or transfer of assets.
xv. Complementary activities necessary for the realization of the above purposes.
Additionally, we will treat your personal data for other secondary purposes, which do not originate or are necessary for the commercial and/or legal relationship that we establish with you, which are:
a. For guests, prospects, clients and speakers:
i. Send you newsletters and information via instant messaging, print and electronic media about EXPO PACK’s events, invitations, promotions, services and products, as well as other fairs or events in Mexico and/or abroad from suppliers, speakers and/or sponsors that we estimate for your interest.
ii. Send you communications for marketing, advertising or commercial prospecting purposes related to EXPO PACK’s events, either through print or electronic means.
iii. Carry out market studies and for statistical purposes.
b. For Suppliers (natural persons):
i. Prepare comparative market studies.
ii. Manage the sending of communications with advertising, notices, messages, news, invitations to events and meetings, whether through printed, electronic, telephone and/or face-to-face media for advertising, promotional, commercial prospecting or marketing purposes.
In case you do not want your personal data to be processed for these secondary purposes, you can send an e-mail to [email protected], following the procedure referred to in section 5 of this Policy.
4. DATA TRANSFER TO THIRDPARTIES.
By virtue of the foregoing, EXPO PACK may transfer your personal data within the national territory or abroad, in accordance with the following:
a. To the authorities, governmental agencies or entities, in compliance with or in connection with the obligations of EXPO PACK contemplated in the applicable legislation, its subsidiaries and/or affiliates, as well as in fulfillment of the requirements made to them;
b. To authorities, government agencies or entities and notaries and public brokers when the transfer is officially required and/or necessary for the recognition, exercise or defense of a right of EXPO PACK in a judicial process;
c. To third party acquirers, arising from a corporate restructuring of EXPO PACK, including, merger, consolidation, sale, liquidation or transfer of assets, when the transfer is necessary for the maintenance or fulfillment of the relationship between you and EXPO PACK;
d. To consultants, suppliers and suppliers of EXPO PACK, when the transfer is necessary for the maintenance or performance of the relationship between you and EXPO PACK; and
e. To controlling companies an companies controlled or subject to common control with EXPO PACK, which operate under the same processes and internal policies of EXPO PACK, for purposes of centralized safekeeping of information, service provision, administrative, analytical and statistical purposes and customer registration, as well as any other administrative processes of the EXPO PACK corporate group;
f. Based on the other assumptions established in the Data Protection Legislation, which do not require your consent; y
g. To national or foreign third parties in the packaging, processing, hotel, food, services and congresses and exhibitions industries, for marketing, advertising, promotion and commercial prospecting purposes.
With exception of those mentioned in subsection g., these transfers do not require your consent. If you do not express your refusal to such transfer, which you can do from this moment by sending an email to [email protected] in accordance with the provisions of section 5 below, we will understand that you have granted us your consent.
5. PROCEDURE TO EXERCISE THEARCO RIGHTS AND REVOCATION OF CONSENT.
At all times you have the right to (i) access, rectify and cancel your personal data (hereinafter, the "ARCO RIGHTS"), (ii) revoke your consent regarding the processing of your personal data in accordance with the terms of the law; and (iii) express your refusal for the processing of your personal data with respect to the secondary and accessory purposes mentioned above. This can be done directly or through your legal representative, for which you must send an email to [email protected] entitled “Exercise of Data Protection Rights” with the information and documentation that follows:
a. Full name;
b. Email or address to communicate the answer regarding your request;
c. Official identification:
d. If applicable, the full name of your legal representative, document proving the identity of you and your representative (valid official identification with photograph) and copy of the instrument by means of official power of attorney or power of attorney signed by two witnesses, evidencing the authority of such legal representative to act on your behalf, in accordance with the terms set forth in the Data Protection Legislation.
e. Right you would like to exercise and why;
f. Clear and precise description of the personal data with respect to which you seek to exercise any of the rights;
g. Any other element or document that facilitates the location of your personal data; and
h. In case of exercising the right of rectification, the documentation that accredits the modification to your data.
Once you have sent the email to be able to exercise your rights, within a maximum period of 20 (twenty) business days counted from the moment that such request was received, you will receive the determination adopted by EXPO PACK, in order that, if it is appropriate, it becomes effective within 15 (fifteen) business days following the date on which you are notified of the response. In all cases, the response of EXPO PACK will be given to you by the same way that you have submitted your application to us. The aforementioned periods may be extended once for an equal period, as long as the circumstances of the case are justified, as foreseen in the Data Protection Legislation.
The delivery of personal data will be free of charge, you only have to cover the justified shipping costs or the cost of reproduction in copies or other formats. In the event that you repeat an application within a period of less than 12 (twelve) months, you must cover the corresponding costs in terms of the Data Protection Legislation, unless there are substantial modifications to the privacy policy that motivate further consultations.
For the reception, registration, attention and response of requests to exercise your ARCO rights and other rights provided in the Data Protection Legislation, we make available the Privacy Officer, which you can contact at the offices indicated in section 6 of this Policy.
In case the information provided in your application is wrong or insufficient, or the corresponding accreditation documents are not attached, we may request, within 5 (five) business days following the receipt of your request, that you provide elements or documents necessary to process it. You will have 10 (ten) business days to meet our requirement, counted from the day after you received it. In case of not responding within such term, the corresponding request will be deemed not filed.