This document constitutes the Privacy Notice for the purposes set forth in Articles 15 and 16 of the Mexican Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and the Privacy Notice Guidelines, in order to guarantee the privacy, respect, and obligations we have regarding the proper use and protection of the personal data provided by individuals.
DEFINITIONS
IDENTITY AND ADDRESS
The party responsible for the collection of personal data is AMADO ALBERTO MONTOYA RODRIGUEZ, hereinafter referred to as "QR CORP", who undertakes to comply with and respect the provisions set forth in this Privacy Notice. This Privacy Notice is made available to data subjects in accordance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties. For the purposes of this Privacy Notice, the address designated by "QR CORP" is located at Calle Francisco Javier Mina, number 299 Norte, Colonia Centro, Los Mochis, Ahome, Sinaloa, Mexico.
PERSONAL DATA COLLECTED
"QR CORP" in the provision of its services, "QR CORP" aims to maintain a close and active relationship with its clients. The personal data that is voluntarily and directly provided by clients includes the following:
"QR CORP" does not collect personal data considered sensitive under the Mexican Federal Law on the Protection of Personal Data Held by Private Parties. Sensitive personal data is understood to be personal data that relates to the most intimate sphere of the data subject, or whose improper use may give rise to discrimination or entail a serious risk to the data subject, such as racial or ethnic origin, health status (present or future), genetic information, religious, philosophical, or moral beliefs, political opinions, and sexual preferences, unless the express consent of the data subject has been obtained or, alternatively, such data falls within the cases established in Article 22 of the Mexican Federal Law on the Protection of Personal Data Held by Private Parties. Accordingly, data subjects should refrain from providing such information.
"QR CORP" will not request sensitive personal data through its internet portals and/or social media platforms; therefore, the handling of any sensitive information voluntarily provided by the client through digital means shall not be the responsibility of the company.
To restrict, limit, or control the processing of personal data, "QR CORP" implements administrative, physical, and technical security measures to safeguard such data, in addition to establishing internal privacy policies and programs designed to prevent the unauthorized disclosure of personal data, through the implementation of various security controls.
The personal data collected is treated as strictly confidential. Accordingly, the collection, processing, transfer, and exercise of rights derived from such personal data are carried out through lawful, legitimate, and appropriate use, permanently safeguarding the principles of lawfulness, consent, data quality, information, proportionality, and accountability.
USE OF WEB BEACONS AND COOKIES
Certain sections of the website www.qr-corp.com may use "cookies" to simplify navigation. Cookies are small text files stored on your hard drive that help us provide a more personalized experience on our website. For example, a cookie may be used to store registration information in a specific area of the site so that the user does not need to re-enter such information on subsequent visits to that area. It is the policy of "QR CORP" to use cookies to simplify navigation on its website, www.qr-corp.com, and to facilitate the procedures for submitting requests for information.
Both "cookies" and "web beacons" may store personal information such as names or email addresses. Most web browsers allow users to refuse the use of cookies; therefore, if the user wishes not to allow the use of "web beacons" and/or "cookies" for navigation purposes, they must follow the procedure indicated by the web browser being used to disable them.
It should be noted that, under certain circumstances, access to specific sections of our website, www.qr-corp.com, may be denied to visitors whose web browsers do not allow the use of "cookies."
MEANS TO EXERCISE ARCO RIGHTS
ARCO Rights are the rights of Access, Rectification, Cancellation, and Opposition, which the data subject may exercise with respect to the processing of their personal data.
The data subject may request from "QR CORP" access to the personal data held by the company, as well as information regarding the details of its processing; request the rectification of such data if it is inaccurate or incomplete; request its cancellation when it is considered no longer necessary for any of the purposes set forth in this Privacy Notice, when it is being used for purposes not consented to, or when the contractual or service relationship has ended; or object to the processing of such data for specific purposes, by following the procedure established for this purpose, as outlined below.
The request must include:
Once the request to limit the use or disclosure of personal data has been received, Mr. AMADO ALBERTO MONTOYA RODRIGUEZ, Head of the Personal Data Department, shall have a maximum period of twenty (20) business days to resolve the request. Such resolution shall be implemented within a maximum period of fifteen (15) business days, counted from the date on which the response is communicated to the data subject.
The data subject may revoke their consent for the processing of their personal data in accordance with the procedure set forth in the section titled "MEANS TO EXERCISE ARCO RIGHTS."
USE AND LIMITATION OF THE USE AND DISCLOSURE OF PERSONAL DATA
In order to limit the use or disclosure of personal data, "QR CORP" informs the data subject that the personal data provided will be handled in a confidential manner, restricting its use solely to the purposes described in this Privacy Notice and always in compliance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations.
The use and limitation of the disclosure of personal data shall be provided through the means and options made available to data subjects to restrict the use and disclosure of their personal data, such as registration in the Public Registry to Avoid Advertising maintained by the Federal Consumer Protection Agency (PROFECO) and/or the Public Registry of Users administered by the National Commission for the Protection and Defense of Financial Services Users (CONDUSEF).
DATA TRANSFER
"QR CORP", in accordance with Article 37, section III, of the Mexican Federal Law on the Protection of Personal Data Held by Private Parties, may transfer personal data to third parties referred to as "authorized third parties," which shall include only its subsidiaries, affiliates, related entities, and authorized service providers, for the following purposes:
In the case of clients, subsidiaries, affiliates, and related entities, as informed by "QR CORP," the transfer of personal data shall be carried out for the purpose of providing the services contracted with you, in accordance with the terms and obligations established in the applicable agreement.
In the event that "QR CORP" engages authorized service providers, the transfer of personal data shall be partial and limited solely to the information necessary for such providers to perform the contracted services, such as medical insurance services, invoicing and/or payroll systems, benefits or additional employment-related benefits for "QR CORP" employees, or service requests submitted by client data subjects.
For the transfer of personal data requested by local or federal authorities as part of a legal proceeding, or in the specific case of a judicial order, "QR CORP" shall inform the data subject of the type of information requested and the purposes for which such information has been required.
Whenever it becomes necessary to carry out a transfer of personal data, we will provide the recipients of such personal data with this Privacy Notice, in order to ensure that they comply with and respect its terms.
If the data subject does not wish for their personal data to be transferred, they may express such decision through the means established for that purpose in this Privacy Notice.
CHANGES TO THE PRIVACY NOTICE
"QR CORP" reserves the right to make modifications or updates to this Privacy Notice in order to address legislative or judicial developments, internal policies, new requirements for the provision or offering of its products or services, or whenever deemed appropriate. In the event of significant changes, "QR CORP" will inform data subjects and make the updated Privacy Notice available through the website www.qr-corp.com, as well as at its physical premises.