[et_pb_section fb_built=\u00bb1″ admin_label=\u00bbsection\u00bb _builder_version=\u00bb4.16″ global_colors_info=\u00bb{}\u00bb][et_pb_row admin_label=\u00bbrow\u00bb _builder_version=\u00bb4.16″ background_size=\u00bbinitial\u00bb background_position=\u00bbtop_left\u00bb background_repeat=\u00bbrepeat\u00bb global_colors_info=\u00bb{}\u00bb][et_pb_column type=\u00bb4_4″ _builder_version=\u00bb4.16″ custom_padding=\u00bb|||\u00bb global_colors_info=\u00bb{}\u00bb custom_padding__hover=\u00bb|||\u00bb][et_pb_text _builder_version=\u00bb4.27.7″ _module_preset=\u00bbdefault\u00bb text_text_color=\u00bb#0C71C3″ text_font_size=\u00bb50px\u00bb background_size=\u00bbinitial\u00bb background_position=\u00bbtop_left\u00bb background_repeat=\u00bbrepeat\u00bb global_colors_info=\u00bb{}\u00bb]<\/p>\n
COMPREHENSIVE PRIVACY NOTICE<\/strong><\/span><\/p>\n [\/et_pb_text][et_pb_divider show_divider=\u00bboff\u00bb _builder_version=\u00bb4.27.7″ _module_preset=\u00bbdefault\u00bb global_colors_info=\u00bb{}\u00bb][\/et_pb_divider][et_pb_divider show_divider=\u00bboff\u00bb _builder_version=\u00bb4.27.7″ _module_preset=\u00bbdefault\u00bb global_colors_info=\u00bb{}\u00bb][\/et_pb_divider][et_pb_text _builder_version=\u00bb4.27.7″ _module_preset=\u00bbdefault\u00bb hover_enabled=\u00bb0″ global_colors_info=\u00bb{}\u00bb text_orientation=\u00bbjustified\u00bb sticky_enabled=\u00bb0″]<\/p>\n 1. Identity and Address of the Data Controller<\/strong><\/span><\/p>\n Instalaciones y Servicios SACA, S.A. de C.V., hereinafter referred to as \u201cSACA\u201d or the \u201cData Controller,\u201d with address at Le\u00f3n Guzm\u00e1n No. 1105, Colonia Nuevo Repueblo, Monterrey, Nuevo Le\u00f3n, Zip Code 64700, telephone numbers (81) 4444 8975<\/strong> and (81) 4444 8366<\/strong>, is responsible for the Processing of Personal Data collected from customers, prospects, suppliers, contractors, employees, candidates, visitors, and other individuals related to its construction, engineering, and fire protection system activities.<\/span><\/p>\n 2. Scope of this Notice<\/strong><\/span><\/p>\n This Privacy Notice applies to Personal Data collected physically, verbally, electronically, through documents, or digitally, including data obtained through forms, contracts, purchase orders, quotations, invoicing, human resources processes, facility access, video surveillance, email, Microsoft 365, SharePoint, ERP systems, document management platforms, and other technological tools used by SACA.<\/span><\/p>\n 3. Personal Data Processed<\/strong><\/span><\/p>\n Depending on the relationship the Data Subject maintains with SACA, the Data Controller may process the following categories of Personal Data, always under criteria of proportionality, necessity, and purpose:<\/span><\/p>\n 4. Sensitive Personal Data<\/strong><\/span><\/p>\n SACA will seek not to collect Sensitive Personal Data unless such information is strictly necessary for a legitimate and proportionate purpose associated with the corresponding legal relationship. If information related to health, medical conditions, occupational assessments, disabilities or medical leave, industrial safety, or occupational risk prevention is required, the corresponding consent will be requested whenever required by applicable law, and enhanced security and confidentiality measures will be implemented.<\/span><\/p>\n 5. Primary Purposes of Processing<\/strong><\/span><\/p>\n Personal Data will be processed for necessary purposes related to the legal, commercial, contractual, administrative, tax, operational, employment, or service relationship maintained by the Data Subject with SACA, including:<\/span><\/p>\n 6. Secondary Purposes<\/strong><\/span><\/p>\n Additionally, SACA may process Personal Data for purposes that are not essential to the primary relationship, such as sending institutional communications, event invitations, satisfaction surveys, service quality analyses, commercial studies, prospect follow-up, dissemination of corporate information, and promotional communications related to its services.<\/span><\/p>\n The Data Subject may refuse the Processing of their Personal Data for secondary purposes either at the time the data is collected or subsequently by sending a request to privacidad@saca.com.mx<\/a><\/span>. Refusal regarding these purposes shall not be grounds for denying products, services, contractual relationships, employment relationships, or the corresponding assistance.<\/span><\/p>\n 7. Domestic and International Transfers<\/strong><\/span><\/p>\n SACA may transfer Personal Data, when necessary and in accordance with applicable law, to competent authorities, customers, suppliers, contractors, auditors, legal, accounting, or tax advisors, financial institutions, insurance companies, affiliated or related companies, technology platforms, cloud service providers, data processors, and third parties involved in the performance of legal, contractual, administrative, tax, labor, operational, or security obligations.<\/span><\/p>\n Domestic or international transfers shall only be carried out when there is a legitimate purpose, legal or contractual obligation, existing legal relationship, exception provided by law, or, where applicable, the Data Subject\u2019s consent. SACA will not sell Personal Data to third parties.<\/span><\/p>\n 8. Use of Digital Platforms, Cloud Services, ERP Systems, and Technological Tools<\/strong><\/span><\/p>\n For administrative, document management, operational, tax, commercial, human resources, and project management purposes, SACA may use technological tools such as Microsoft 365, SharePoint, ERP systems, institutional email, cloud storage, collaboration platforms, document repositories, access control systems, and other authorized digital solutions.<\/span><\/p>\n Technology providers that process Personal Data on behalf of SACA shall act, as applicable, as Data Processors and shall be subject to confidentiality, security, limited-use obligations, and other conditions necessary to protect Personal Data in accordance with applicable law.<\/span><\/p>\n 9. Occasional Use of Artificial Intelligence or Automation<\/strong><\/span><\/p>\n SACA may use automation, analytics, or artificial intelligence tools in a controlled manner to support administrative, document-related, operational, analytical, classification, search, summarization, or process improvement activities. The use of these tools shall comply with principles of confidentiality, data minimization, access control, human review, and authorized institutional use.<\/span><\/p>\n SACA shall not use artificial intelligence tools to make decisions that significantly affect the Data Subject without human intervention, unless there is a legal or contractual basis or applicable consent. When the use of such tools involves relevant privacy risks, SACA shall evaluate those risks in advance and implement proportionate controls.<\/span><\/p>\n 10. Video Surveillance and Access Control<\/strong><\/span><\/p>\n SACA may use video surveillance cameras, visitor records, access logs, or other security mechanisms at its facilities, warehouses, offices, vehicles, construction sites, or areas under its control, for the purpose of protecting individuals, assets, information, facilities, equipment, operations, and documenting security incidents, breaches, or potential liabilities.<\/span><\/p>\n 11. Administrative, Technical, and Physical Security Measures<\/strong><\/span><\/p>\n SACA shall implement reasonable administrative, technical, and physical security measures proportionate to the type of Personal Data processed, the level of risk, the volume of information, the systems used, and the nature of its operations. These measures may include access controls, user profiles, authentication, information backups, document management, confidentiality measures, training, internal policies, physical safeguarding, file control, traceability, permission reviews, protection against unauthorized access, and security incident management.<\/span><\/p>\n Employees, suppliers, contractors, and third parties with access to Personal Data shall use such data solely for authorized purposes and shall remain subject to confidentiality obligations even after the corresponding relationship has ended.<\/span><\/p>\n 12. Retention of Personal Data<\/strong><\/span><\/p>\n Personal Data shall be retained for the period necessary to fulfill the purposes that justified its Processing and, subsequently, for the periods required to comply with legal, tax, labor, contractual, administrative, accounting, audit, or potential liability obligations. Once such purposes and retention periods have been fulfilled, SACA shall block, cancel, delete, or anonymize the data, as applicable.<\/span><\/p>\n 13. ARCO Rights<\/strong><\/span><\/p>\n The Data Subject has the right to Access their Personal Data, Rectify it when it is inaccurate or incomplete, request its Cancellation when appropriate, and Object to its Processing for legitimate reasons. These rights are known as ARCO Rights.<\/span><\/p>\n 14. Revocation of Consent and Limitation of Use or Disclosure<\/strong><\/span><\/p>\n The Data Subject may revoke the consent granted for the Processing of their Personal Data, as well as request limitations on the use or disclosure of their data, whenever legally applicable. Revocation shall not have retroactive effects and may not affect processing activities required to comply with legal, contractual, tax, labor, administrative, or security obligations.<\/span><\/p>\n 15. Procedure for Exercising Rights<\/strong><\/span><\/p>\n To exercise ARCO Rights, revoke consent, or limit the use or disclosure of Personal Data, the Data Subject may send a request to privacidad@saca.com.mx<\/a>,<\/span> contact SACA at (81) 4444 8975<\/strong> or (81) 4444 8366<\/strong>, or submit the request at SACA\u2019s address. The request must include, at a minimum: the Data Subject\u2019s name, a means of receiving the response, documents proving their identity or legal representation, a clear description of the right they wish to exercise, and, where applicable, information that facilitates the location of the relevant data.<\/span><\/p>\n SACA shall respond within the timeframes established by applicable law. When the request is valid, it shall be implemented in accordance with the corresponding legal requirements. SACA may request additional information when the request is incomplete, unclear, or insufficient to verify the Data Subject\u2019s identity or locate the Personal Data.<\/span><\/p>\n 16. Changes to the Comprehensive Privacy Notice<\/strong><\/span><\/p>\n\n
\n