- Type of personal information processed by the Controller.
- How personal data is used?
- What are cookies and how are they used?
- Data transfer
- ARCO Rights
- Protection of personal information on the Controller’s site.
- Confidentiality of minors.
- Consent to the terms.
- Minimum principles of our privacy/confidentiality policy.
This PRIVACY POLICY is part of the use of the websites www.2realpeople.com and www.2rp.mx.
In compliance with the Federal Law on Protection of Personal Data Held by Private Parties, 2RealPeople Solutions, S.A. de C.V., with address at Tlaxcala 177 Int. 604 Sixth Floor, Colonia Hipódromo Condesa, Postal Code 06100, Mexico City (the “Controller”) provides this Privacy Notice (the “Notice”) available to applicants, contractors, beneficiaries, suppliers, employees, or any individual or legal entity (the “Owner”) who, for any reason, provides personal data to the Controller.
The person in charge of safeguarding customer Personal Data information by 2RealPeople Solutions is:
Ing. Xavier Maldonado Marquínez, Personal Data Protection Area, email: xmaldonado@2realpeople.com tel. +52 (55) 8926 5886.
The Controller is committed to ensuring the confidentiality/privacy of the personal data obtained from the Owner through the receipt of documents, printed and/or electronic forms, or any other means made available to the Owner for the purpose of collecting the necessary information for the purposes described below:
- Provide the services and products requested by the Owner.
- Inform about changes in the services or products provided by the Controller.
- Inform about new services or products related to the Controller’s social purpose.
- Fulfill obligations contracted by the Controller and the Owner.
- Evaluate the quality of the service provided by the Controller.
- Conduct internal studies on consumption habits.
We suggest that the Owner read the terms and conditions under which the treatment of the personal information provided to the Controller is governed.
The Controller reserves the right to make modifications or updates to this privacy notice at any time, to address legislative or jurisprudential developments, internal policies, new requirements for the provision or offering of our services or products, and market practices.
These modifications will be made available to the public through the following means: On our website www.2realpeople.com in the Privacy Policy section. We will also send them to the last email address you provided.
1.- Type of personal information processed by the Controller.
The Controller collects information in various ways; through the receipt of documents, printed and/or electronic forms, or any other means made available to the Owner. The following are indicative but not exhaustive examples: (i) personal information that the Owner voluntarily provides to the Controller; (ii) through the creation of the personal profile; (iii) through registration for the special offers notification service via email; (iv) through registration in loyalty programs; (v) sending electronic postcards; (vi) as well as the information entered during participation in contests, raffles, and online surveys that we occasionally conduct. For each of these programs, the requested information is different and is stored in separate databases.
Online Contact: The information requested in this section allows the Controller to contact the Owner in accordance with the provisions of this Notice.
The information requested from the Owner is as follows: name, surname, company name, where they work, address, email address, and telephone number.
The Owner may be contacted by phone, mail, or email if additional information is required to complete a transaction.
Special Offers Notification Program via Email: The information that the Owner provides includes: name, surname, email address, address, country, phone number, preferences, and habits, among others.
Sending Electronic Postcards: The information that the Owner provides includes: sender’s name, sender’s email address, recipient’s name, recipient’s email address, age range, country, gender, and postal code. This information will be used to tailor promotions and notices sent to the Owner.
Contests, Raffles, and Online Surveys: The type of information requested by these means is variable, and may include personal data, habits, preferences, opinions about the services of our sites, and comments about proposed services. The information collected will be for the exclusive use of the Controller and will have the purpose of providing feedback about the services provided by the Controller.
Contracts, Transactions, and/or Legal Acts. The information requested by the Controller for the execution of any legal relationship with the Owner, as well as for the fulfillment thereof, is as follows: name, address, telephone, email, Federal Taxpayer Registry, and account number.
The Controller has implemented administrative, technical, and physical security measures that allow protecting personal data against damage, loss, alteration, destruction, or unauthorized use or processing. The information is stored on a secure server behind a firewall designed to hinder access from outside the company. Once the Controller receives the data, it commits to do everything possible to safeguard its security in our systems.
The Owner can request at any time the limitation on the use or disclosure of their personal data to stop receiving promotional messages, through the following procedure: by sending an email to the address: xmaldonado@2realpeople.com, who will confirm the receipt of the request in writing.
2.- How personal data is used.
The Controller uses the information provided during the profile registration process, program registration, and promotions to conduct internal studies on demographic data, interests, and behavior of our users, create statistics indicating the most appreciated products by different segments, and for the execution of legal acts of any kind.
The most important goal of the Controller is to understand and provide the user with a more satisfactory experience when visiting our sites and acquiring our services. By knowing more about our visitors, we can provide them with products tailored to their needs, as well as more suitable content and advertising.
3.- What are cookies and how are they used.
Cookies are small pieces of information sent by the website to your browser.
Cookies are stored on your computer’s hard drive and are used to determine your preferences when connecting to the Controller’s sites, as well as to track certain behaviors or activities carried out by you within our sites.
In some sections of the Controller’s site, it is required that the Owner have cookies enabled to work.
Cookies allow: a) recognizing the Owner when entering the sites and offering a personalized experience, b) knowing the personal settings of the site specified by the Owner, for example, cookies allow detecting the bandwidth selected when entering the site’s home page, so we know what type of information is advisable to download, c) calculating the size of the audience and measuring some traffic parameters, as each browser that accesses the site acquires a cookie used to determine the frequency of use and the sections of the visited sites, thus reflecting their habits and preferences, information that is useful to us to improve content, headlines, and promotions for users. Cookies also help track some activities, for example, we can use cookies to detect if the user has already completed a survey and avoid displaying it again if they have.
The Owner can disable cookies by following these steps: The “help” button located on the toolbar of most browsers will indicate how to prevent new cookies from being accepted, how to have the browser notify you when you receive a new cookie, or how to disable all cookies. However, cookies allow you to take advantage of the most beneficial features offered by the Controller, so it is recommended to leave them enabled.
4.- Data transfer.
The Controller states that it will not transfer personal information to third parties without the consent of the Owner unless one of the exceptions provided for in Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties applies:
- When the transfer is provided for in a Law or Treaty in which Mexico is a party;
- When the transfer is necessary for the prevention or medical diagnosis, the provision of medical care, medical treatment, or the management of health services;
- When the transfer is made to controlling, subsidiary, or affiliated companies under the common control of the Controller, or to a parent company or any company of the same group as the Controller that operates under the same internal processes and policies;
- When the transfer is necessary by virtue of a contract concluded or to be concluded in the interest of the Owner, by the Controller and a third party;
- When the transfer is necessary or legally required for the safeguarding of a public interest, or for the prosecution or administration of justice;
- When the transfer is required for the recognition, exercise, or defense of a right in a judicial process, and
- When the transfer is required for the maintenance or fulfillment of a legal relationship between the Controller and the Owner.
The Controller undertakes that in case the Owner’s personal data must be shared with a third party, they will notify the Owner before they are transferred so that they can express their conformity or disagreement in this regard.
The Controller states that the transfer of information to controlling, subsidiary, or affiliated companies under the common control of the Controller, or to a parent company or any company of the same group as the Controller, may be carried out without the consent of the Owner and will be subject to the terms and conditions of this Notice.
The Controller may disclose the aggregated statistics of users (for example, the percentage of our users who are men or over a certain age, etc.) to describe our services and for other lawful purposes as required by law.
The Controller assumes no obligation to keep confidential information that the Owner provides through newsletters and online talks (chats), as well as information obtained through the cookies described in section 3, the above in terms of the provisions of Article 109 of the Federal Copyright Law and section I of Article 76 bis of the Federal Consumer Protection Law.
5.- ARCO Rights.
The Owner may at any time request the Controller access, rectification, cancellation, or opposition of their personal data through the respective request, which must contain the following requirements:
- Name and address of the Owner
- Documents proving the identity of the Owner or, where appropriate, documents proving their representation.
- Clear and precise description of the personal data concerning which the Owner seeks to exercise any of the rights mentioned in the preceding paragraph.
- Any other element that facilitates the identification of personal data.
The request must be submitted in writing to the Controller’s address, who will have the obligation to respond within a period not exceeding twenty days from the day of its submission.
The personal data provided by the Owner through the Controller’s site will be part of a file containing their profile. The Owner may modify their profile at any time using their assigned or self-chosen user/member number and personal identification number.
The Controller advises the Owner to update their data whenever changes occur, as this will allow providing a more personalized service.
If the Owner participates in the email promotions service, they can deactivate the service at any time through the following procedure: by sending an email to the address: xmaldonado@2realpeople.com, who will confirm the receipt of the request in writing.
6.- Protection of personal information on the Controller’s site.
The information provided by the Owner is secured by a personal identification number that only the Owner can access and of which only they have knowledge.
The Controller recommends that the Owner not disclose their password to anyone, and also informs them that they will not request their password in any unsolicited phone call or email. At all times, the Owner is solely responsible for keeping their user/member number, personal password, access key, and confidential number secret, with which they have access to the services and content of our site. To reduce risks, the Controller recommends that the user log out of their account and close the browser window when they finish their activity, especially if they share their computer with someone or use a computer in a public place such as a library or an internet café.
Once the Controller receives the data, they will do everything possible to safeguard its security in their systems. In this regard, the Processor and the Controller have focused their efforts on offering the most modern and up-to-date technology to provide the Owner with the greatest possible security.
7.- Confidentiality of minors.
Safeguarding children’s personal information is extremely important; therefore, the Controller collects the minimum necessary amount of information required to provide their services.
The Controller will not request personal identification information from minors and will ensure at all times that the processing of personal data of minors is authorized by the persons who have legal representation of the minor.
8.- Consent to the terms.
The Owner’s consent to the processing of their personal data is understood to be granted in accordance with the terms and conditions described in this Notice when: (i) the Owner does not express opposition within a term of thirty days from the date it was made known to them; (ii) they express their interest in entering into a contract or legal act with the Controller, and (iii) they have a current legal relationship with the Controller.
If the Owner uses the services of the Controller on any of their sites, it means that they have read, understood, and agreed to the terms outlined above. If they do not agree with them, the Owner should not provide any personal information or use the services of the sites.
The Controller, except for the exceptions provided for in Article 10 of the Federal Law on Protection of Personal Data Held by Private Parties, undertakes to obtain the Owner’s consent whenever the processing relates to financial and/or patrimonial personal data.
The Owner may revoke consent at any time, provided that it is done in accordance with the law, following the guidelines established in section 5 of the Notice.
9.- Minimum principles of our privacy/confidentiality policy.
The Controller will observe the principles of request, consent, information, quality, purpose, loyalty, proportionality, and responsibility for the treatment and protection of personal data provided for in the Federal Law on Protection of Personal Data Held by Private Parties, as described below:
- The Controller will only collect the Owner’s information that is necessary to provide the personalized services available at their establishments and websites, which will only be used for the purposes for which it is requested.
- The Controller will focus their efforts on offering the most modern and up-to-date technology to provide the Owner with the greatest possible security in the handling and transfer of the information required in the various data request processes.
- The Controller will avoid disclosing information about the Owner, doing so only regarding data that is expressly authorized for that purpose.
- The Controller will be attentive to the requests and/or concerns expressed by the owners regarding the handling of the information they provide for the purposes described in this Notice.
- The Controller will ensure that these principles of privacy/confidentiality extend to the entire group’s commercial relationships.
- The Controller will share responsibility for the care of the information with their employees, making them co-participants in the guidelines outlined in the Notice.
We remain at your service.
