LEGAL CADY

This notice is submitted in compliance with the Federal Act on the Protection of Personal Data Held by Individuals.

By means of this notice, the OWNERS are informed that Personal Data processed through CADY will be handled confidentially, limiting their use to the purposes described in this Privacy Notice. In addition, the CADY databases containing customer Personal Data will only be operated by authorized CADY personnel whose functions are regulated by the company's internal policies. In the same way, CADY states that it has implemented policies, procedures and security measures to protect the Personal Data of customers, Employees and Providers against any damage, loss, alteration, destruction or unauthorized use, access or treatment, and therefore its unlawful disclosure is prohibited, limiting its use to third parties, as provided for in this document.

We also adhere to Convention 108 of the European Union's Personal Data Protection Regulation and the Additional Protocol relating to Control Authorities and Cross-Border Data Flows, and to the agreements issued in the T-MEC on data security, which will depend on the technical, physical and administrative controls implemented by the service provider, complying with the fundamental principles, in a legal and transparent manner, for specific purposes, where only personal data should be collected and processed whatever they are necessary to fulfill this purpose and compatible, they are not kept longer than necessary and there are technical and organizational guarantees that guarantee the security of personal data. (All this within the mechanisms, procedures and administrative legal locks established for greater security and processing of personal data within the company). Strengthening and promoting the development of digital commerce through a legal framework that encourages electronic operations and provides security for users of electronic media.

1. Identity and address of the person responsible

Yucatán Art and Design Center with address to receive notifications at Calle 37D, between 12 and 14, Colonia Chuburná, Mérida, Yucatán, C.P.: 97215, is responsible for the use and protection of personal data.

2. Purposes of the treatment

Your personal data may be processed for the following primary purposes:

1. Clients: Quote and invoice the sale of large scale projects of commercial malls, condominiums, apartments, private houses and everything related to the real estate and construction sector.

As well as to maintain communication with our customers in different ways, to follow up on the contracted services with respect to the activities of our companies mentioned above.

1. Employees: Meet the obligations established in the employment contract, as well as by the rules and authorities that regulate this line of business.
2. Suppliers: Request a quote, purchase and receipt of goods and services.
3. Mechanisms for refusing secondary or ancillary purposes

The personal data of our customers, employees, and suppliers are not processed for secondary or ancillary purposes.

4. Personal data processed

For the purposes mentioned above, we can collect your personal data by:

● Written, telephone or email, quote format, employment application, internal control formats, video surveillance cameras, official offices, public access sources.

The personal data collected for the primary purposes are in the case of:

From Customers.

Identification and contact details: Name (Paternal surname, maternal surname and names), Address (street, number, neighborhood, city, state, country, zip code), telephone, cell phone, email, marital status, company, signatures, video surveillance images.

Billing data: Company name, address, city, RFC, email.

From employees.

Required Data: Name (Names, Paternal Surname and Maternal Surname), Address (Address, City, State, Country, Zip Code), Nationality, Date of Birth, Place of Birth, Gender, Marital Status, CURP, RFC, INE (folio), Autograph Signature, Size, Photograph, Video Surveillance Image, Social Networks and Diseases (diseases).

Optional data: Latest studies, Certificate of studies or No. Of Professional ID, Telephone, Cell Phone, Email Account, Age, Photo, INFONAVIT Credit Number, FONACOT Credit Number, Payroll Bank Account Number, License Type, License Number, License Expiration Date, Social Security Number and Work Experience.

Employment data: Bank payroll account number, salary and position.

Job reference: Employee behavior, reason for separation from previous employment, position held, Time spent working in the company, last salary earned, relationship with colleagues, name of the company for which he worked, Name of the Human Resources Manager in the previous company.

Personal reference: Name of the reference, relationship, telephone number and people with whom the employee cohabits.

Documents submitted for comparison: Birth Certificate, Proof of Address, Proof of Education, Official Identification, Driver's License, CURP, IMSS, RFC, Medical Certificate, Proof of of Non-Accreditation or INFONAVIT and FONACOT account statement.

Of the suppliers (individuals and legal entities) with whom a commercial or professional relationship is maintained for primary purposes, these are the minimum established by other laws of the Mexican State, so they will not be considered as personal data, according to article 5 of the Regulations of the Federal Law on the Protection of Personal Data Held by Individuals.

The images taken by the video surveillance circuit are only available to the general manager of CADY and to the law enforcement authorities that require it by means of an official mandate within a period not exceeding 10 calendar days from the date of the shots, as long as the system has not automatically deleted it from its memory.

CADY does not process personal data for secondary or ancillary purposes.

5. Sensitive personal data processed

CADY does not process sensitive customer data, and we also collect health data from our employees at the time of hiring to learn about any chronic condition that the company must be aware of in the event of an extraordinary situation that we need to take special attention and that an authority requires us to do so in the event of a pandemic or other situations.

From the data collected from employees for primary purposes, health data are considered sensitive: temperature measurement and health status (conditions).

In order to comply with legislation and authorities in the field of health, it will carry out periodic examinations of its personnel that are relevant or determined by the competent authorities, for the prevention and control of diseases, the results of which will be collected and protected in the personnel file, taking all security measures for their protection.

6. How long do we keep your personal data?

The data processed for commercial or work purposes are kept active as long as the interested party does not revoke their consent or request its deletion or, in any case, the entire contracted service has been completed, as well as in any case, for the periods provided for in the applicable legal provisions and for the time necessary to meet possible responsibilities arising from the processing of the same.

7. Transfer of personal data

CADY does not transfer personal data from customers and suppliers. In the case of employees, they will make the necessary transfers to comply with obligations established by other laws and authorities of the Mexican State.

8. Clause in which the transfer of personal data is accepted or not

There is no denial clause for the transfer of personal data, since CADY only performs this processing for the fulfillment of obligations established by other laws and authorities of the Mexican State, as well as for the procedures of the contracted service.
‍
9. Means and procedure for exercising ARCO rights

To access, rectify and cancel or object to the processing of your personal data, please come to our address with:

● Written request (original and copy)
● Official identification (original and copy)

To learn more about the procedures and requirements for exercising your ARCO rights, make an appointment at adm.cadymx@gmail.com responsible for the Protection of Personal Data or by calling (999) 167 48 45.

It is important to keep in mind that not in all cases we will be able to respond to your request for cancellation immediately, since it is possible that due to a legal obligation we may need to continue processing your personal data, in such cases the corresponding block will apply.

10. Mechanisms and procedures for revoking consent to the processing of your personal data

We inform you that to revoke the consent granted for the processing of your personal data, present yourself at the CADY with:

1. Written request (original and copy)
2. Official identification (original and copy)
3. Options and means to limit the use or disclosure of your personal data

In order for you to limit the use or disclosure of your personal information, we suggest that you:

● Register in the Public Registry to Avoid Advertising, which is run by PROFECO, in order to prevent your personal data from being used to receive advertising or promotions from goods or services companies. For more information, see the PROFECO electronic portal.

12. Use of cookies, web beacons or similar technology

CADY informs you that our website www.cady.mx uses cookies, web beacons or similar technologies that collect personal data that allow us to consult statistics about cities, states or countries from which it was accessed, time spent browsing on our site, sections and pages viewed. To limit the use of these technologies, consult the privacy preferences set in your web browser.

13. Procedures and means by which the person responsible will communicate changes to the privacy notice

This privacy notice may undergo modifications, changes or updates as a result of new legal requirements; our own needs for the products or services we offer; our privacy practices; changes in our business model, or for other reasons.

CADY reserves the right to modify the content of this Privacy Notice at any time. Any changes to the Privacy Notice will be informed to your customers by sending a personal notice. Once the Privacy Notice is known and signed by the customer, it will automatically take effect.