In compliance with the Federal Law on Protection of Personal Data Held by Private Parties (the “Law”), GRUPO GALA S.A. de C.V. (hereinafter, “GRUPO GALA”) makes this privacy notice available to you (the “Privacy Notice”).

Responsibility

“GRUPO GALA” with address at Morse 1301 Colonia Tecnológico, Monclova Coahuila México, CP. 25716, will be responsible for collecting your personal data, the use that is given to them and their protection, committing to respect the provisions of this Privacy Notice and the Law.

“GRUPO GALA” informs you that your personal data will be processed and protected based on the principles of legality, quality, consent, information, purpose, loyalty, proportionality and responsibility, established in the Law.

By providing personal data to “GRUPO GALA” by any of the means mentioned in section 1.3 of this Privacy Notice, the Owner grants his consent for “GRUPO GALA” to collect and use this data only for the purposes described in section 1.2 of this Privacy Notice.

For the purposes of this Privacy Notice, personal data includes:

General data, that is, full name, address, telephone, email account, marital status, profession, place and date of birth, Federal Taxpayer Registry number, Unique Population Registry Code, voter credential number, number passport, immigration status;
Curriculum vitae, which, in addition to the general data mentioned above, may include information related to the person’s education, professional experience and recognition.

“GRUPO GALA” does not collect sensitive personal data. However, if the case arises, your express written consent will be obtained for its treatment.

Purpose of the Personal Data

The personal data collected by “GRUPO GALA” will be used for the main purposes of: (i) identification of a contact; (ii) provide the required services, as well as related activities; (iii) inform about new services that are related to the contracted; (iv) comply with obligations contracted by “GRUPO GALA”; and secondary purposes that allow and facilitate us to provide you with a better service, such as: (v) evaluating the quality of the service; and (vii) contact via email or telephone in order to share news of interest or publicity.

Obtaining Personal Data

To comply with the purposes indicated in the previous point, “GRUPO GALA” may collect the personal data of the Holder in different ways: (i) when they are provided directly; or (ii) when information is obtained through other sources that are permitted by law.

Data transfer

Personal data may only be processed within and outside the country, by “GRUPO GALA”, in this sense, the information may be shared with subsidiaries or affiliates of “GRUPO GALA” in Mexico or in countries where “GRUPO GALA” provides services.

The communications of personal data that are made between “GRUPO GALA” and their manager or the employees of “GRUPO GALA” will not be considered as transfers, so no consent will be necessary.

Access, Rectification, Cancellation and Opposition of personal data (“ARCO” rights)

You enjoy the rights of the “ARCO” rights provided for in Chapter II of the Law, so you may at any time correct or update your information, oppose the treatment that is being given to your personal data or revoke the consent that you have granted in order that “GRUPO GALA” stops using them, with the understanding that “GRUPO GALA” is not obliged to comply with the foregoing in the cases provided for in article 26 and 34 of the Law.

To revoke the consent granted to “GRUPO GALA” on personal data, you must send an email to the person responsible for handling the personal data of “GRUPO GALA” mentioned in section 1.9 of this Privacy Notice, through which will be attended to said request. The email must contain (i) the full name of the owner of the personal data; (ii) address and email address to receive the response generated by your request; (iii) the reason for your request; (iv) the arguments that support your request or petition; (v) official document proving his identity; and (vi) date from which the revocation of consent becomes effective. “GRUPO GALA” will notify you within a maximum period of 20 (twenty) business days, counted from the date on which the request for the revocation of consent was received by means of a message that contains that it has carried out all the acts tending not to process your data personal.

To obtain access to any personal information or revoke the consent that has been granted to “GRUPO GALA”, all the requirements stipulated in this Privacy Notice and in the Law must be satisfied.

We inform you that on our Internet page we use cookies and other technologies through which it is possible to monitor your behavior as an Internet user, as well as provide you with a better service and user experience when browsing our page.

Validity

Personal data will be processed only for the time necessary for the legal act that gives rise to the contractual relationship and only for the purposes described above and / or in accordance with what is established by the applicable legal provisions.

The obligation of confidentiality of the people who participate in the processing of personal data will continue even after their relationship with “GRUPO GALA” has ended.

Modification to the privacy notice

“GRUPO GALA” reserves the right to change this Privacy Notice at any time, without prior notice or liability. In the event that the Privacy Notice is modified in any way, “GRUPO GALA” undertakes to publish a new Privacy Notice.

The collection of information, the use and disclosure made by “GRUPO GALA” of personal data will be governed by the version of the Privacy Notice that is published and in force at that time.

Security

“GRUPO GALA” undertakes that personal data will be protected under strict administrative, technical and physical security measures which have been implemented in order to protect personal data against damage, loss, alteration, destruction or use, access or unauthorized treatment.

Only personnel authorized by “GRUPO GALA” will have access to personal data. Authorized personnel are prohibited from allowing access by unauthorized persons and using personal data for purposes other than those established in this clause.

Responsible for Personal Data

The person responsible for the processing of your personal data is Ing. Arturo García. You can contact the area responsible for the management and administration of personal data by email [email protected], by phone (866) -636-2916 or directly at our offices located at the address of “GRUPO GALA” .