CONTROLLER OF YOUR PERSONAL DATA
PERSONAL DATA COLLECTED
The personal data that the Controller collects from the Holders are the following: Name, address, email address, telephone number, company, tax information, in particular, the federal taxpayer’s registry and billing address.
Similarly, we collect the following: Transaction information, this includes bank account, card number, as well as its security code, for purposes of account reconciliation of funds and payment; time and date of the transaction, transaction description, transaction amounts, and information about the payment methods used for the transaction.
It is important to note that the Controller will store information on servers managed by the Controller to carry out the transactions of product acquisition with the Holder.
Finally, personal data is collected through the following means: through the creation of a user name and password within the site www.cristinapalacios.com; as well as in the section called “Purchasing cart” located on our website https://www.cristinapalacios.com/cart.
SENSITIVE DATA POLICY
The Controller within its commercial policies does not request any information that under the Law is understood as sensitive data, such as: religion, sexual preferences, political opinions, among others. Cristina Palacios supports and encourages diversity and therefore prohibits any discriminatory act or request of any information that could involve a discriminatory act.
PURPOSE OF THE PROCESSING OF PERSONAL DATA
The data we collect will have the following uses: (i) sending new information and updating our products: it is to say, sending promotional materials and advertising, (ii) tracking the online purchase of the products, specifically the process of identification, validation, clarification, return, product shipments, cancellation and follow-up of product purchase, (iii) for the payment or realization of transactions for the acquisition of products, (iv) for the issuance of invoices and (v) for shipping the products purchased online.
In the same way, the personal data collected can be used so that the Controller can meet legal requirements set by the competent authorities.
It should be noted that in accordance with the Law there are cases in which your consent is not necessary for the processing of your personal data, and therefore the absence of it or in the event of a refusal, does not and should not prevent Cristina Palacios from treating them (your personal data) in terms of the Law and other regulations that may be applicable.
OPTIONS AND MEANS THAT THE CONTROLLER PROVIDES TO THE HOLDERS TO LIMIT THE USE OR DISCLOSURE OF THE PERSONAL DATA.
TRANSFER TO THIRD PARTIES
The Controller will transfer the information of the Holder to companies of parcel delivery service and shipment of goods, with the purpose of making the purchase orders arrive at the address indicated at the moment of making the purchase.
Cristina Palacios collects the information directly from the owners of the personal data, and these data may be transferred to subsidiaries, affiliates and controllers from within national territory or abroad solely for the same purposes, however, she is not authorized to transfer your personal data to any third party other than those mentioned, except as provided by article 37 of the LFPDPPP, therefore, such information will be kept in strict confidentiality, in accordance with the security, administrative, technical and physical measures established by Cristina Palacios.
To disable cookies in the browser, check with the provider how to disable cookies.
MEANS TO EXERCISE THE RIGHTS OF THE HOLDER
At any time your legal representative duly accredited, may exercise the rights of Access and Rectification when they consider that they are erroneous or inaccurate; Cancellation in case you consider that the data is not treated properly; Opposition in case you do not want your data are treated for specific purposes and / or Revocation when it is no longer your wish as Holder that Cristina Palacios continue using your personal data. The exercise of one of these rights does not prevent the exercise of the other and none of them has to be exercised as a prior requirement for the exercise of another.
In order to exercise your rights mentioned above, requests shall be sent to our Personal Data Department at firstname.lastname@example.org, and / or directly to our address located at Calzada Porfirio Diaz 127, Colonia Reforma, Oaxaca, Oaxaca, Mexico C.P. 68050.
Requests to exercise the rights of the Holder must contain the following information: (i) Name of the Holder, (ii) address and email address to notify him/her of the response to his/her request, (iii) a clear and accurate description of the data for which the corresponding right is sought to be exercised, (iv) the object of the request, (v) any element that facilitates the location of the data. A copy of his/her identification must be attached, and should the case deem it, the document that evidences their legal representation.
The response period to your request shall be 20 working days counting from the day that the request for access, rectification, cancellation and opposition was received. The response will be communicated within the aforementioned period to the email address provided in your request or by sending a letter to the address provided in it. Once this notification is received, you will have a period of 15 working days to make it effective, if applicable.
At any time, you may revoke the consent you have given us for the processing of your personal data, in such a way that we stop making use of them. In order to do this, you must submit an application under the aforementioned terms for the exercise of the ARCO rights. The procedure to be followed will be the same as that provided for the exercise of the ARCO rights. If your request is appropriate, your data will no longer be processed by Cristina Palacios.
- By Email that we will personally send you.
- And through visible ads within the website.
If the purposes for which your personal data are processed are modified, your express or tacit consent will be requested again if necessary, depending on the particular case.
CONSENT OF THE HOLDER