Privacy Notice

You are the most important thing for PAPELES Y CONVERSIONES DE MEXICO S.A. DE C.V. and Consistent with our values, the protection of your personal data, your privacy and trust are our priority. To ensure this, we protect your information by continually reviewing our physical and electronic protection processes.

Therefore, we want to share with you our privacy policy and how we safeguard the integrity, privacy and protection of your personal data, in compliance with the Federal Law for the Protection of Personal Data in Possession of Private Parties (herein referred to as "the Law"), published in the Official Gazette of the Federation on July 5, 2010. You have at your disposal, at all times, this privacy notice on our website: https://www.pcm.com.mx, and you can access the content of the Law through the portals that the Federal Government, through the Ministry of the Interior, makes available on the portal www.ordenjuridico.gob.mx.
Likewise, you may at any time limit the use or disclosure of your personal data by exercising the rights of access, rectification, cancellation or opposition that the Law provides for by submitting your request in writing. It will be understood that you as owner tacitly consent to the processing of your personal data as set forth in this privacy notice, when having been made available to you, you do not express your opposition.

1. IDENTITY:

PAPELES Y CONVERSIONES DE MEXICO S.A. DE C.V. who for the effects of this privacy notice has the capacity of responsible before you, as holder of personal data.

2. DOMICILE OF PAPELES Y CONVERSIONES DE MEXICO S.A. DE C.V.

For the purposes of this privacy notice, its address is Cerro de la Silla 101. División del Norte, 67190 Guadalupe, Nuevo Leon, Mexico.

3. PRINCIPLE OF INFORMATION:

Each responsible party will inform you that it possesses, collects or will collect from you, the personal data necessary, mainly for the proper performance of the operations of the services, as well as for the celebration of the other acts that each responsible party may perform in accordance with the Law and its bylaws. Such personal data may have been or may be obtained from you, either personally or directly by any electronic, optical, sonorous, visual, or through any other technology. We may also obtain personal data about you from third parties and from other sources permitted by law, such as information companies. The personal data collected or to be collected may include, but is not limited to, the following:

  • Identification and contact data: full name, address, home, cellular and/or work telephone, marital status, signature, electronic signature, e-mail, user name and password, IP address, R.F.C., C.U.R.P., place and date of birth, age, names of family members, dependents and beneficiaries, as well as their addresses, among others.
  • Employment data: occupation, position, area or department, address, telephone and e-mail, employment references, personal references and commercial references, among others.
  • Financial or patrimonial data: movable and immovable property, credit history, income and expenses, bank accounts, insurance, afores, bonds, contracted services, among others.

4. PURPOSES OF THE PROCESSING OF PERSONAL DATA:

The responsible parties will process the personal data collected as sensitive data, if applicable, for the following purposes:

  • The execution of each and every one of the operations inherent to the service we provide, as well as the celebration of the other acts that each responsible party may perform in accordance with the law and its bylaws;
  • The conduction of surveys, as well as the creation and implementation of analytical and statistical processes necessary or convenient, related to such operations, services and acts;
  • The fulfillment of requirements of any competent authority;
  • The performance of any complementary or auxiliary activity necessary for the realization of the above purposes;
  • The performance of inquiries, investigations and reviews in connection with any complaint or claim; and
  • Contacting you to discuss any matter related to the service provided, your personal data or this privacy notice.

The processing of personal data will be limited to:

  • To the fulfillment of the purposes provided in this privacy notice; and.
  • To purposes other than those that are compatible or analogous to those set forth in this privacy notice, without being required to obtain again, if applicable, the consent of the owner.
  • Likewise, the processing of personal data will be that which is necessary, adequate and relevant in relation to the purposes set forth in this privacy notice, as well as to the different purposes that are compatible or analogous.

5. TRANSFER OF DATA:

In order to comply with the purposes set forth in this privacy notice, as well as with the different purposes that are compatible or analogous, the responsible parties are required to transfer personal data within and even outside the Mexican Republic. Each responsible party undertakes to ensure compliance with all legal principles of protection regarding the transfer of personal data and expresses its commitment to ensure that this privacy notice is respected at all times by us and by our business partners.
By virtue of this privacy notice, the holder agrees to the transfer of your data, on the understanding that:

  • Each responsible party intends to transfer the personal data to national or foreign third parties, other than the processor, to whom said responsible party will communicate this privacy notice and the purposes to which the holder subjected its treatment; and
  • The third party recipient will assume the same obligations that correspond to the data controller who transferred the data, so that the processing of the data will be made in accordance with the provisions of this privacy notice.

National or international transfers of data may be carried out without the consent of the owner, among other cases, provided that the transfer:

  • Is made to schools, subsidiaries or affiliates under the common control of the data controller in question, or to a parent company or any company of the same group of the data controller operating under the same internal processes and policies;
  • Is required by virtue of a contract entered into or to be entered into in the interest of the data subject, by the data controller and a third party; and
  • Is necessary for the maintenance or fulfillment of a legal relationship between the data controller and the data subject.

Any of the data controllers may transfer personal data, in addition to the aforementioned cases, including but not limited to, in favor of:

  • Corporations that operate jointly with each responsible company some product or service;
  • Third parties that operate together with any of the responsible companies any software, and any IT infrastructure that serves as a platform for the performance of the services;
  • Third party service providers necessary for the operation of any of the responsible parties, as well as other public or private educational institutions or governmental agencies, which each responsible party may perform in accordance with the law and its bylaws, including but not limited to: data processing companies, companies that send marketing material (printed or electronic), courier companies, security and transportation of securities, companies for the custody and storage of information (physical or electronic media), with the purpose of assisting them in the performance of the purposes set forth in this privacy notice; and,
  • External professionals, advisors or consultants, for the purpose of administering the services and other acts that each responsible party may perform in accordance with the law and its bylaws, as well as for the defense of the interests of any responsible party before any legal controversy arising from such operations and services, such as collection agencies or external, legal and accounting auditors.

6. PERSONAL DATA DEPARTMENT:

The responsible parties designate the personal data department to give attention and process the requests of the holders for the exercise of the ARCO rights referred to in the Federal Law for the Protection of Personal Data in Possession of Individuals (access, rectification, cancellation and opposition, as well as limitation to the use or disclosure of data and revocation of consent).

7. MEANS TO EXERCISE THE RIGHTS OF ACCESS,

rectification, cancellation and opposition (ARCO): Subject to the provisions of the Law, as of January 6, 2012, the holder by himself or through a duly accredited legal representative, may exercise his rights of access, rectification, cancellation and opposition, by making the respective request in writing. The exercise of any of them is not a prerequisite nor does it prevent the exercise of another.

8. OPTIONS AND MEANS TO EXERCISE THE RIGHTS TO LIMIT THE USE OR DISCLOSURE OF DATA AND MECHANISMS AND PROCEDURES TO REVOKE CONSENT:

You may also at any time:
Opt to limit the use or disclosure of your personal data; or Revoke your consent to give treatment to your personal data, in the understanding that all processing of personal data will be subject to the consent of its owner, except for the exceptions provided by the Federal Law on Protection of Personal Data in Possession of Individuals.

9. COOKIES AND ONLINE SECURITY PROTOCOL:

The User who has access to the Page, agrees to receive files transmitted to them by the servers of PAPELES Y CONVERSIONES DE MEXICO S.A. DE C.V., "Cookie" means a data file that is stored in the hard disk of the User's computer when the User has access to the Page. Such files may contain information such as the identification provided by the User or information to track the pages the User has visited. A Cookie cannot read data or information from the User's hard drive or read Cookies created by other sites or pages.

10. PROCEDURE AND MEANS BY WHICH CHANGES TO THE PRIVACY NOTICE WILL BE COMMUNICATED:

We reserve the right to make changes or modifications to this privacy notice at any time, whether in response to legislative, regulatory or jurisprudential developments, internal policies, market practices or for any other reason. Any change made to this privacy notice will be incorporated by the responsible parties and will be made known through our web page: https://www.pcm.com.mx

11.- MEANS TO EXERCISE THE “ARCO” RIGHTS.

To exercise the rights of access, rectification, cancellation or opposition ("ARCO Rights"), in accordance with the provisions of the Personal Data Law, the Data Controllers may submit a written request to info@pcm.com.mx the following e-mail address or directly to the address of PAPELES Y CONVERSIONES DE MEXICO S.A. DE C.V. indicated above.

The respective request for access, rectification, cancellation or opposition must contain and be accompanied by the following:

  • Name of the Holder and address or other means to which PAPELES Y CONVERSIONES DE MEXICO S.A. DE C.V. shall send the corresponding answer to the respective request;
  • The documents that prove the identity of the Holder or, as the case may be, the legal representation of the person making the request on behalf of the Holder;
  • The clear and precise description of the Personal Data with respect to which the Data Subject wishes to exercise any of the rights of access, rectification, cancellation or opposition;
  • In the case of requests for rectification of Personal Data, the Data Subject shall indicate, in addition to what is indicated in this section, the modifications to be made and provide the documentation supporting his/her request, and;
  • Any other element or document that facilitates the location of the corresponding Personal Data.

PAPELES Y CONVERSIONES DE MEXICO S.A. DE C.V. will communicate to the Data Subject the taken decision, within a maximum period of twenty Days, counted from the date on which the corresponding request was received, so that, if it is appropriate, the same becomes effective within the fifteen Days following the date on which the response is communicated.
The aforementioned terms may be extended only once for an equal period, provided that the circumstances of the case so justify.