Comprehensive Privacy Notice
ASOCIACIÓN MEXICANA DE EMPRESAS DE HIDROCARBUROS, A.C.
In compliance with the Mexican Federal Act for the Protection of Personal Data Held by Private Individuals (the “Law”), its Regulations (the “Regulations”), the Guidelines on the Privacy Notice posted on the Mexican Federal Official Gazette on January 17th, 2013 (the “Guidelines”), and any other applicable regulation on the protection of personal data held by private individuals (the “Applicable Regulations”); the Mexican Association of Hydrocarbon Companies, CSO (AMEXHI or the “Association”) informs, through this comprehensive privacy notice (the “Privacy Notice”), and, related to the use and protection of personal data that you submit to the Association, the following:
That the treatment of personal data by the Association seeks to align and comply with the legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility covered by the Applicable Regulations; likewise, the aim is for this treatment to be legitimate, controlled, and informed, with the purpose of guaranteeing the privacy and protection of the aforementioned, as well as to guarantee the informative self-determination rights for the upholder of these data.
1. Identity and Address of the Responsible Entity
The Asociación Mexicana de Empresas de Hidrocarburos, A.C. (“AMEXHI” or the “Association”), with address on Blvd. Manuel Ávila Camacho 36, Torre Esmeralda 2, Piso 10, Lomas de Chapultepec V Sección, Mexico City, Miguel Hidalgo Z. C. 11000, informs that it shall be responsible for the collection of your personal data, for the use of such data, and for its protection, committing itself to respect and comply with what is set forth within in this Privacy Notice and the Applicable Regulations.
AMEXHI informs that your personal data will be treated and safeguarded, based on the legality, quality, consent, information, purpose, loyalty, proportionality, and responsibility principles, set forth in the Law and its Regulations.
Upon submitting your personal data to the Association, you give your consent for the collection and use of the aforementioned data, only for those purposes described on Item 2 on the present Privacy Notice.
2. Purposes of personal data treatment
- Information on AMEXHI members will be used for the following main purposes:
- Affiliation with AMEXHI;
- Be able to offer the services related to the Association in an efficient way and with due quality;
- Comply with regulatory obligations issued by competent authorities, as well as addressing their requirements;
- Identification purposes;
- Create and maintain the internal directory updated;
- Grant access to the affiliates to courses, events, and/or activities carried out by the Association;
- Send via e-mail or by any other means, information of interest related to AMEXHI;
- Send invitations and/or publications through post service to the address submitted;
- Verify if the AMEXHI applicant is in compliance with the profile and entry requirements;
- Information belonging to individuals who upload their registration to the section of this website: Work, their application will be used for the following main purposes:
- Be part of our industry talent database, which can be shared among our members.
- Be informed on any change or update in our policies and guidelines.
- Statistical purposes.
- Marketing, advertising, and social communication purposes.
- Inform on any change concerning the points mentioned above.
The Association has technological, material, and human resources available, as well as procedures with which to protect your personal data and prevent unauthorized access, or the use/distribution of them, no matter where these personal data are treated.
However, you can state your denial concerning the treatment of your personal data, on any of the purposes listed under Item B listed above, by writing “NO” on the corresponding space, for which you will have a five work day period. Otherwise, it will be assumed that you, as holder of your personal data, are giving consent to the treatment thereof for all purposes listed above.
Denial upon the treatment of your personal data for secondary or other purposes aforementioned will not be a ground for the Association to refuse the services requested or contracted with it.
3. Personal Data that can be collected and treated
In order to fulfill the purposes described in the present Privacy Notice, all personal data that will be collected, used, and treated are henceforth referred to as “Personal Data”:
General information from the affiliates and/or their legal representatives or authorized entities:
- Name, address, e-mail.
- Phone number or mobile number.
- Birth date.
- Name, phone numbers, and addresses for emergency contacts.
Sensitive Personal Data that could be collected:
- Work experience
4. Personal Data Transfer
It is hereby informed that, according to what is provided by section 37, items IV, V, VI, VII from the Law, as well as section 68 of the Regulations, that the Association may disseminate and transfer your Personal Data.
In such cases, the Association will take all necessary measures in order to request that your Personal Data is adequately protected, according to Applicable Regulations and AMEXHI privacy policies set for their protection. Access to, or transfer of your Personal Data, will be limited to those actions required in order to comply with those responsibilities and obligations assumed by the Association during the ordinary process of any legal relationship established with you. AMEXHI may not transfer Personal Data onto third parties without your consent, except for those cases described in the present Privacy Notice, and the exceptions set forth in Section 37 of the Law.
You are henceforth notified that your Personal Data can be transferred to the following individuals or entities, in which case we require your consent:
AMEXHI members, according to the Member Registry book.
If you do not state your denial upon this transfer, we will assume you have given your consent.
5. Safety measures in order to protect your personal information
Your personal information will be safeguarded under strict confidentiality, and, in order to reasonably prevent its improper use or distribution, the Association has implemented physical, technical, and administrative safety measures, according to Applicable Regulations. Specifically, we have privacy policies available, as well as training course for our staff, restricted access to personal information only available for authorized users, a personal data inventory (properly classified by data category), as well as one on treatment systems, risk assessment, and contractual clauses.
6. Exercise of ARCO rights
In compliance with the Applicable Regulations, it is your right to know which Personal Data we have of you, what it is used for, and the conditions of the use we give (Access). In addition to that, it is your right to request the correction of your personal information in case it is not updated, not accurate, or incomplete (Correction); for it to be eliminated from our registries or databases when you consider it is not being used according to the provisions of the Applicable Regulations (Cancellation); and how to oppose to the use of your personal data for specific purposes (Opposition).
In that sense, you can at all times exercise your access, correction, cancellation, or opposition rights for the treatment of your Personal Data (hereinafter referred to as “ARCO rights”).
For the exercise of ARCO rights, you shall be required to submit a written request, addressed to the following e-mail: usodeinformación@amexhi.mx
The request to exercise ARCO rights shall contain and have at least the following attachments: (i) full name of the Personal Data owner, their address and/or e-mail and/or any other channel through which to communicate the answer to their request; (ii) official documents that certify the identity or, when applicable, the legal representation of the holder; (iii) a clear and concise description of the data on which any of the aforementioned rights is sought to be exercised; and (iv) any other element or document that enables the location of such data.
Upon reception of said request, through which we are notified that you wish to exercise your ARCO rights, we will have a 20 business day term during which we will assess, address, and issue the corresponding answer. The channel through which we will send you our answer will be the one indicated by you within your request (postal services or e-mail, only), or, by default, through the same channel through which you submitted your request.
7. Consent withdrawal concerning the treatment of your Personal Data.
You have the right to withdraw at any moment the consent that you might have given to us, concerning the treatment of your Personal Data, unless this is not accepted pursuant to the Applicable Regulations, which would be notified to you in our answer to your withdrawal request.
In order for you to withdraw your consent on the treatment of your Personal Data, you must submit the corresponding written request, following the same procedure that has been established in this Privacy Notice for the exercise of ARCO rights, with the difference on item (iii) from that procedure, in which we require a clear and concise description of the data from which you desire to withdraw your consent upon its treatment.
8. Limitation on the use and dissemination of your Personal Data
Likewise, you have the right to request in any moment the limitation of use/dissemination of your Personal Data, unless this is not accepted according to the Applicable Regulations, which would be notified to you in our answer to your limitation request.
For purposes of the foregoing, you must submit to us the corresponding written request, following the same procedure that has been established in this Privacy Notice for the exercise of ARCO rights, with the difference on item (iii) from that procedure, in which we require a clear and concise description of the data for which you seek to limit their use and distribution.
Upon reception of the written request through which you indicate you seek to limit the use and distribution of your personal data, we will have a 5 business day period during to analyze, address, and send you the corresponding answer. The channel through which we will issue our answer will be the one indicated by you within your request (postal services or e-mail, only), or, by default, through the same channel through which you submitted your request.
Any communication that you wish to address to us in virtue of the present Privacy Notice, apart from the procedures that we have established within it, shall be submitted to the aforementioned e-mail address, stating in a clear and concise manner:: (i) full name of the owner, address and/or e-mail (ii) the official documents that certify the identity or, when applicable, the legal representation of the holder; and (iii) the purpose of their communication.
If by any reason you submit your data by any electronic channels, including our website (Internet), you fully understand, accept, and acknowledge that:
- Our website can include links to websites belonging to third parties that, in case they are accessed, will cause you to leave our website, upon which we would not assume any liability related to third-party websites.
- Our website can include links to websites that manage social media, in which case you accept that, upon submitting any kind of information, including your data in such sites, this will cause it to be readable, seen, accessed to, re-transmitted, and treated by any entity, thus releasing us from any liability.
- It is possible that our systems collect the following data additional to that you provided us: browser type, operating system, visited websites, IP address, Internet behavior information, through “cookie” tracking technologies or “web beacons”. You shall be required to access “Internet options”, located in the “Toolbar” of your browser, in order to disable these systems.
If you have a more specific question on the treatment we will give to your Personal Data or about our privacy policies, you can contact AMEXHI through the e-mail address usodeinformación@amexhi.mx; you shall be required to mention in a concise and clear manner: (i) your name, paternal and maternal surnames; (ii) your address, e-mail, and/or any other channel through which we can communicate our answer to your request; (iii) the official documents that certify your identity or, in such cases, that of your attorney-in-fact; and (iv) a clear and concise description of the subject of your request.
Likewise, AMEXHI will address and answer any communication addressed to us, within 20 business days upon receiving said request. The channel through which we will issue our answer will be the one indicated by you, or, by default, through the same channel through which you submitted your request.
This Privacy Notice can be subjected to modifications and/or adjustments, from time to time, to our sole discretion. Any change shall be notified to you via e-mail. You will be the sole responsible of verifying if any modifications have been notified to you. For those cases in which your consent is needed, such as a change in our identity, or we require from you more Personal Data additional to the ones mentioned in the document herein, we make changes on the purpose of this Privacy Notice, and/or the transfer conditions undergo any modification, we will likewise send you our updated notice via e-mail, and your acceptance of said Privacy Notice shall be understood until we receive further communication from you stating otherwise. You hereby agree and acknowledge upon the fact that this Privacy Notice will be applicable to you at all times. In addition to that, you hereby acknowledge and accept the terms and conditions stated in this Privacy Notice.
In virtue of this Privacy Notice, you provide your consent for your personal data to be transferred according to this Privacy Notice made available to you by AMEXHI, since all the transfers shall be necessary for the maintenance of the professional practices relations with AMEXHI.
Last update: May 31st, 2016.