RESPONSIBLE PARTY STATEMENT
Farmacias Modernas de Tijuana S.A. de C.V., located at Av. De Los Charros #314 corner with Angelina, Fracc. Sandoval La Mesa C.P. 22105, is responsible for the personal data it collects either directly or through third parties it contracts for its safeguarding and processing. In respect of the right to privacy and informational self-determination of individuals, and in compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties and its regulations, adhering to the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility, it establishes the following guidelines to be followed regarding the protection of data referenced herein, as follows:
PURPOSE
This privacy notice aims to define the scope and general conditions for the processing of your personal data, as well as to inform the data subjects so they can make informed decisions about the use of their personal data and maintain control and disposition over it. Likewise, the privacy notice allows us to make the data processing transparent and thereby strengthen the level of trust that data subjects have in our company.
AVAILABLE MEANS OF COMMUNICATION.
Farmacias Modernas de Tijuana S.A. de C.V. has appointed a multidisciplinary technical committee for the protection of personal data under its control, which must comply with and enforce the Federal Law on Protection of Personal Data Held by Private Parties and its regulations within the organization and its subsidiaries. To this end, the following contact information is provided to data subjects to receive any requests to limit the use or disclosure of their personal data, clarifications, or complaints.
Email: datospersonales@farmaciasroma.com
Address: Av. De Los Charros # 314 esq. con Angelina, Fraccionamiento Sandoval La Mesa C.P. 22105
Administrative, physical, and technical security measures are established and maintained for the processing of personal data to ensure the quality of the data, taking into account existing risks, the consequences for the data subjects, the nature of the data, and technological development. These measures are no less stringent than those used for the organization’s information.
PERSONAL DATA
Farmacias Modernas de Tijuana S.A. de C.V. lawfully collects and processes the following personal data, provided that you do not express any objection at the time you provide your personal data directly or later express your opposition through the means described in the previous section by simply sending us a written statement expressing your desire to revoke your consent at any time:
- Name
- EMail
- Personal phone number
- Cell phone number
- Gender
- Date of birth
- Marital status
- CURP
- Address
- Work history
- Age
- Third-party data
- Nationality
- Signature
- RFC
- Fingerprint
- Photograph
- Place of birth
- Professional license
- References
- Call recording
- Academic record
- Business name
- NSS
- IFE folio
Consumption history
According to articles 40, 41, and 42 of the regulations of the Federal Law on Protection of Personal Data Held by Private Parties, the above personal data will be used for the following purposes, which are necessary to establish the legal relationship with the organization:
- Management and integration of employment files.
- Management of customer files.
- Legal requirements.
- Claims follow-up.
- Contract management.
- Invoice issuance.
- Payment receipts.
- Management of employee payments and benefits.
- Audits and tax declarations.
- Medical records.
- Quality control.
- Credit and payment management.
- After-sales follow-up and service quality.
- Loyalty program.
- Electronic file program.
The following optional needs are also listed, for which the data subject may consent or object:
- Marketing functions
- Customer services
TRANSFER AND PURPOSE OF PROCESSING
The personal data described above may be transferred and processed by the third parties listed below. All the purposes mentioned fall under the provisions of Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties, so obtaining consent for their transfer is not necessary:
THIRD PARTIES
- Banking institution.
- Accounting firm.
- Social Security.
- Tax Administration Service.
- Legal office.
- Local authorities.
- Suppliers.
- Software provider.
- External promoter provider.
- Health authorities.
PURPOSE
- Credit, payments, and benefits management.
- Tax declarations/audits.
- Claims follow-up and contract management.
- Legal requirements.
Marketing. - Data storage, implementation, and monitoring of loyalty programs and electronic files.
- Data collection within the loyalty program.
- Research, studies, statistics, and protocols.
Through the means made available to you in the AVAILABLE MEANS OF COMMUNICATION section, we will gladly receive your request to refuse the processing of your personal data. Detailed information about the use of the above personal data can be provided upon request by the data subject through the mechanisms to exercise ARCO rights described later in the section of the same name.
Detailed information about the individuals or entities to whom personal data is transferred can be provided upon request by the data subject through the mechanisms established to exercise ARCO rights.
SENSITIVE PERSONAL DATA
Farmacias Modernas de Tijuana S.A. de C.V. lawfully collects the following sensitive personal data.
- Health data
- Asset data
- Credit references
- Salary
- Bank account
- Religion
- Genetic information
According to articles 40, 41, and 42 of the regulations of the Federal Law on Protection of Personal Data Held by Private Parties, the above personal data will be used for the following purposes necessary to establish the legal relationship with the organization.
- Management and integration of employment files
- Management of employee payments/benefits
- Tax audits
- Tax declaration
- Financial administration
- Medical records
- Legal requirements
- Credit and payment management
- Medication control
The following purposes are listed, for which you may withhold your consent by marking the box to the left of each purpose.
- Emergency medical services
- Customer services
TRANSFER OF SENSITIVE DATA AND PURPOSE
The sensitive personal data described may be transferred to private third parties and government agencies for the purposes contained in Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties:
THIRD PARTIES
- Tax Administration Service
- Accounting firm
- Social Security
- Local authorities
- Software provider
- Health authorities
PURPOSE
- Tax declarations/audits.
- Credit, payments, and benefits management.
- Legal requirements.
- Data storage, implementation, and monitoring of loyalty programs and electronic files.
- Research, studies, statistics, and protocols.
El consentimiento por escrito se solicitará al recabar sus datos sensibles, solicitándole su firma autógrafa, huella dactilar, su firma electrónica, o cualquier otro mecanismo establecido por la normatividad que permita identificarlo y recabar su consentimiento para el tratamiento de sus datos sensibles.
TRATAMIENTO DE DATOS PERSONALES EN LA NUBE
In accordance with Article 52 of the Regulations of the Federal Law on Protection of Personal Data Held by Private Parties, Farmacias Modernas de Tijuana, S.A. de C.V. establishes that the processing of personal data in services, applications, and infrastructure in the so-called cloud computing, which will be used through its software provider, is fully safeguarded under the terms and general clauses established in the signed contract. The clauses set forth in the service provision contract comply with the guidelines established in the referenced article in this section.
RETENTION PERIODS
Farmacias Modernas de Tijuana S.A. de C.V. will proceed to cancel and delete personal data after first blocking it once it has fulfilled the purpose that justified its processing. The cancellation of personal data will not be carried out when the provisions of Articles 26 and 34 of the Federal Law on Protection of Personal Data Held by Private Parties and Article 8 of its Regulations apply.
EXERCISE OF ARCO RIGHTS
We will gladly comply with any request we receive from the data subject or their legal representative to exercise their rights of Access, Rectification, Cancellation, or Opposition regarding their personal data held by Farmacias Modernas de Tijuana S.A. de C.V. We will receive your request through the means made available to you, as described in the “AVAILABLE MEANS OF COMMUNICATION” section at the top of this notice. The request, whether made directly at our offices or electronically, must include the following information:
- Name and address, as well as any additional information that can be used to contact you.
- Documents proving identity (Voter ID, Driver’s License, or document accrediting legal representation).
- A clear and concise description of the rights you wish to exercise, as well as the personal data involved.
In the case of requesting rectification of personal data, you must include the documentation supporting the request, as well as the modifications to be made.
The response to your request will be provided within the timeframes established by the Law, provided it does not fall under the exceptions outlined in Article 26 of the Federal Law on Protection of Personal Data Held by Private Parties and Article 88 of its Regulations. To request the form, submit, register, process, and respond to requests to exercise your ARCO rights, revoke your consent, and other rights provided by the LFPDPPP, we provide you with the following means:
EMail: Datospersonales@farmaciasroma.com
Address: Av. De Los Charros # 314 esq. con Angelina, Fracc. Sandoval La Mesa C.P. 22105.
If the information provided in your request form is incorrect or insufficient, or if the corresponding accreditation documents are not attached, we may request that you provide the necessary elements or documents to process the request within five business days following receipt of the request. The data subject will have ten business days to respond to this requirement, counted from the day after it was received. If no response is given within this period, the request will be considered as not submitted.
Farmacias Modernas de Tijuana, S.A. de C.V., or its representatives, will respond to the data subject within a maximum period of twenty business days from the date the request was received so that, if applicable, the Responsible Party can act on it within the following fifteen business days from when the response is communicated.
In all cases, the response will be provided through the same channel by which the request was submitted or, if applicable, by any other means agreed upon with the data subject. The aforementioned timeframes may be extended in accordance with the Federal Law on Protection of Personal Data Held by Private Parties and its regulations.
DATA PROTECTION
The Responsible Party and/or its Officers will retain the data subject’s personal data for as long as necessary to process their requests for information, products, and/or services, as well as to maintain accounting, financial, and audit records in accordance with the Federal Law on Protection of Personal Data Held by Private Parties, current commercial, tax, and administrative legislation. They will also control the disclosure of such data or information of any kind. The collected personal data will be protected by appropriate administrative, technical, and physical security measures against damage, loss, alteration, destruction, or unauthorized use, access, or processing, in accordance with the provisions of the Law, its regulations, and other applicable legislation.
You or your duly accredited legal representative may limit the use or disclosure of your personal data through the same means and procedures provided for the exercise of ARCO Rights. Once your request is accepted, it will be registered in the exclusion list maintained by Farmacias Modernas de Tijuana, S.A. de C.V.
If you believe that Farmacias Modernas de Tijuana, S.A. de C.V. has violated your right to the protection of your personal data, you have the right to appeal to the National Institute for Transparency, Access to Information and Personal Data Protection (INAI).
REVOCATION OF CONSENT
According to Article 21 of the Regulations of the Federal Law on Protection of Personal Data Held by Private Parties, you may revoke at any time the consent you have given us for the processing of your personal data, so that we cease to use and transfer them through the mechanisms provided for this purpose in this document. Likewise, it is necessary that you send us your request through the means mentioned in this notice, specifically in the section on the exercise of ARCO rights, and it must be accompanied by the following information:
- Name and address, as well as any additional information that may be useful to contact you.
- Documents proving identity.
MEASURES TO SAFEGUARD INFORMATION PROVIDED TO THIRD PARTIES
Farmacias Modernas de Tijuana, S.A. de C.V. states that all personal data subject to transfer to the aforementioned third parties is properly safeguarded through agreements and contracts signed with those third parties (with the exception of the authorities mentioned), including confidentiality clauses that comply with the requirements established by the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations. With this, full compliance by third parties with the privacy notice and the protection of the data provided by the data subject is guaranteed.