Welcome to the privacy policy of the SBB | Sustainability team.At SBB, we strongly believe in the principles of privacy, integrity, transparency, and accountability. This notice sets out clear guidelines for all employees to act ethically and professionally with customers, suppliers, and employees personal data in compliance with applicable laws and regulations, without exceptions.This privacy notice aims to inform you about how SBB collects and processes your personal data through our website, your participation in environmental and sustainability surveys or campaigns, and any data you may provide.Our commitment is firm: we reject any action that puts our honesty and reputation at risk, and we will take the necessary measures to protect the principles that define us.Please note that this website is not intended for children and we do not knowingly collect data relating to children.
Me vale un Pepino SC (“SBB | Sustainability”) is the controller of your personal data (in this privacy notice, it will be referred to as “SBB”, “we”, “us” or “our”), the controller for the purposes of the Federal Law on the Protection of Personal Data Held by Private Parties and its applicable regulatory provisions (the “Personal Data Law”), with address at Córdoba 35 Col. Roma Norte, Alcaldía Cuauhtémoc, C.P 06700, in Mexico City; informs you that it will process the personal data it collects from you for the following purposes:
Provide ESG and Branding consulting in accordance with the Service Provision Contract as well as the policies, procedures, protocols and other institutional regulations of SBB | Sustainability.Incorporate your data into our customer database.Integrate your customer identification file.
Use your data for statistical purposes, for improving care processes, academic and/or research, for which care will be taken that you cannot be identified.
Personal data, or personal information, refers to any information about a person that can identify them. This does not include data where the identity has been removed (anonymous data).We may collect, use, store and transfer different kinds of personal data about you, which we have grouped together as follows:
Through the Privacy Committee, you may request the exercise of your ARCO Rights, which consist of access to your personal data, its rectification, cancellation or opposition to its processing for specific purposes, as well as the revocation of the consent granted for the processing of your personal data to the extent permitted by law; the Privacy Committee will be responsible for following up on your request and providing you with a response. The Committee will also carry out any requests you make to limit the use or disclosure of your data. For this purpose, we would like to provide you with the email address of the SBB Privacy Committee:
privacidad@sbb.com.mx
To exercise your ARCO Rights and/or revoke your consent for the processing of your personal data by SBB, we would appreciate it if you could submit a request (“ARCO Rights Exercise Request”) to the Privacy Committee, at the email address privacidad@sbb.com.mx , enclosing the following information:
Notes:
– In the case of minors, the documents to prove legal representation of the minor will be: birth certificate and photo ID of the minor (issued by the academic institution where he/she attends), IMSS ID, valid passport, or any other ID that has a photo of the minor;
– In the case of interdicted persons, the documents to provide legal representation will be: an interdict certificate and photo ID of the person who holds this legal status, whether it is a voter ID, valid passport, professional ID or immigration document.
The Privacy Committee has at your disposal the formats that are recommended for the exercise of ARCO Rights, so the one corresponding to your request will be provided to you at the time you request it from the Committee, by any means. The Committee will respond to your request by email to privacy@sbb.com.mx. In accordance with the Law, there is a term of 20 (twenty) business days from your request, to inform you if your request is admissible and, if so, there are 15 (fifteen) business days to make the ARCO Right effective. Responses may be sent via email. The Privacy Committee may request additional information or documentation from you, as well as the comparison of the documents that support your request, within five (5) business days after receiving it and, in the event that there is no response to said request within 10 (ten) business days after it was issued, the request will be deemed not submitted.
In order to make the ARCO Rights effective, the deadline may be extended once for an equal period if necessary, which will be made known to you.SBB may deny the exercise of the ARCO Rights, in the following cases:
– When the applicant is not the owner of the personal data, or cannot provide the representation of the owner;
– When your personal data is not in the SBB database;– When the rights of a third party are violated;
– When there is a legal impediment or the resolution of a competent authority, which restricts your ARCO Rights;
– In the event of cancellation, when personal data is processed for prevention or medical diagnosis or the management of health services; and,
– When the rectification, cancellation or opposition has been previously made.
The Denial may be partial, in which case SBB will carry out the access, rectification, cancellation or opposition in the relevant part.
The exercise of the “ARCO Rights” will be free of charge, but in the event that two or more requests are submitted in a period of less than twelve months, SBB may charge for the issuance of copies of documents. In the event that the Applicant requires the certification of documents, he/she must make the corresponding payment in advance according to the instructions that are made known to him/her for this purpose. The applicant must cover the justified shipping costs or the cost of reproduction in copies or other formats.
Our website may contain links to third-party websites, plug-ins and applications. Clicking on these links or enabling these connections may allow third parties to collect or share data about you. We do not control these third-party websites and we are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every other website you visit.
This version was last updated on 25 November 2024, and previous versions can be obtained by contacting us. We may update this privacy notice from time to time to comply with applicable data protection laws, so please check back here for updates.It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.Update date:
16 December 2024
