Privacy Notice
This Privacy Notice is issued in compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (“Law”) for the data subjects whose personal data is in the possession of Orión IEP, S.C. (hereinafter, the “Responsible”):
The Controller is located at Montes Urales 620, colonia Lomas de Chapultepec C.P. 11000, Mexico City.
Personal Data to be Processed
The Responsible may process the following personal data of visitors to our website, investors, and/or users of the Responsible’s services and products, or those of its affiliates or subsidiaries (hereinafter the “Data Subject”): name, nationality, address, marital status, tax identification number (RFC), email address, landline number, mobile number, age, names of family members, their landline and mobile numbers, place of birth, CURP, professional license number, address, occupation, background, academic training, and work experience.
Purposes of Data Processing
The Responsible informs you that your personal or sensitive data, currently or in the future under our control and which may need to be processed and/or used due to the nature of our activities, will be processed and/or used by the Responsible, its affiliates and/or subsidiaries or parent companies solely for the purpose of fulfilling obligations arising from the legal, contractual, and/or commercial relationship between you, as the Data Subject, and the Responsible, its affiliates and/or subsidiaries or parent companies.
The Controller informs you that the processing of your personal data will be necessary for the following purposes:
- Sending invitations of any kind, whether individually or in collaboration with other companies.
- Informing about changes in the products or services offered by the Controller.
- Informing about promotions offered by the Controller or companies with which it has entered into commercial alliances.
- Evaluating the quality of the products and services offered by the Controller.
- Updating records and system programs, as well as the Controller’s databases.
- Complying with requests made by government authorities.
The Responsible will not collect information for secondary purposes.
Data Transfers
The personal data of the Data Subject may be transferred nationally or internationally to the following recipients:
- Financial institutions and/or investors to carry out the purposes stated above, when the Controller deems it necessary to share the Data Subject’s information in accordance with the Law; and
- Any authority for the purpose of complying with any applicable law, regulation, or legal provision when the transfer is mandatory.
Consent Clause for Data Transfers
The transfers mentioned above do not require the Data Subject’s consent because they are essential for the legal relationship established between the Data Subject and the Controller.
Means and Procedure to Exercise ARCO Rights
Si el Titular desea ejercer sus derechos de acceso, rectificación, cancelación u oposición al tratamiento de sus datos personales o desea revocar su consentimiento para el que Responsable las trate, podrá enviar un correo electrónico a la dirección contacto@orionfibrae.com.mx en el cual el Titular deberá identificarse con su nombre completo, la relación jurídica que tiene con el Responsable y los datos de contacto en los cuales se le puede contactar. Los procedimientos tanto para el ejercicio de sus derechos de acceso, rectificación, cancelación u oposición, como para la revocación de su consentimiento se le darán a conocer a través de su correo electrónico una vez recibida su solicitud.
Options and Means to Limit the Use and Disclosure of Personal Data
The Data Subject may register with the Public Registry of Users in accordance with the Law on Protection and Defense of Financial Services Users, to limit the use and disclosure of their personal data. This registry (REUS) allows the Data Subject to be included in a database to restrict promotional calls to personal (landline or mobile), work phone numbers, or email addresses, aiming to protect their privacy and prevent the inconvenience of such calls or messages. The Data Subject may register with REUS through the means provided on the following website: REUS for individuals | Procedures | www.gob.mx
Security Measures
In processing your personal data, the Controller guarantees its proper use, protection, and confidentiality. To this end, the Controller has established administrative, technical, and physical security measures to comply with applicable regulatory provisions.
Changes to the Privacy Notice
This privacy notice is available for consultation on the Controller’s website at: http://www.orionfibrae.com. Likewise, any modifications made to this privacy notice will be published on the same website. By entering into any legal relationship with the Controller, the Data Subject consents to the processing, use, and/or handling of their personal data in accordance with this privacy notice.
End of Notice