Pursuant to the provisions of the Federal Law for Protection of Personal Data in possession of Individuals hereinafter referred to as “the Law”, this Privacy Policy is issued in the following terms:

 

CONTROLLER OF YOUR PERSONAL DATA

 

For the purposes of this Privacy Policy MARIA CRISTINA GARCIA PALACIOS, (hereinafter “Cristina Palacios”) with head office located at Calzada Porfirio Diaz 127, Colonia Reforma, Oaxaca, Oaxaca, Mexico C.P. 68050, is responsible for collecting, disclosing, storing, managing, using, exploiting, and/or disposing the personal data that collects from her clients (hereinafter the “Holders”).

 

PERSONAL DATA COLLECTED

The personal data that the Controller collects from the Holders are the following: Name, address, email address, telephone number, company, tax information, in particular, the federal taxpayer’s registry and billing address.

Similarly, we collect the following: Transaction information, this includes bank account, card number, as well as its security code, for purposes of account reconciliation of funds and payment; time and date of the transaction, transaction description, transaction amounts, and information about the payment methods used for the transaction.

It is important to note that the Controller will store information on servers managed by the Controller to carry out the transactions of product acquisition with the Holder.

Finally, personal data is collected through the following means: through the creation of a user name and password within the site www.cristinapalacios.com; as well as in the section called “Purchasing cart” located on our website https://www.cristinapalacios.com/cart.

 

SENSITIVE DATA POLICY

The Controller within its commercial policies does not request any information that under the Law is understood as sensitive data, such as: religion, sexual preferences, political opinions, among others. Cristina Palacios supports and encourages diversity and therefore prohibits any discriminatory act or request of any information that could involve a discriminatory act.

 

PURPOSE OF THE PROCESSING OF PERSONAL DATA

The data we collect will have the following uses: (i) sending new information and updating our products: it is to say, sending promotional materials and advertising, (ii) tracking the online purchase of the products, specifically the process of identification, validation, clarification, return, product shipments, cancellation and follow-up of product purchase, (iii) for the payment or realization of transactions for the acquisition of products, (iv) for the issuance of invoices and (v) for shipping the products purchased online.

In the same way, the personal data collected can be used so that the Controller can meet legal requirements set by the competent authorities.

 

EXCEPTIONS

It should be noted that in accordance with the Law there are cases in which your consent is not necessary for the processing of your personal data, and therefore the absence of it  or in the event of a refusal, does not and should not prevent Cristina Palacios from treating them (your personal data) in terms of the Law and other regulations that may be applicable.

 

OPTIONS AND MEANS THAT THE CONTROLLER PROVIDES TO THE HOLDERS TO LIMIT THE USE OR DISCLOSURE OF THE PERSONAL DATA.

All personal information of the Holders will be maintained in strict confidence, taking care of the administrative, technical and physical security measures that the Controller implements in its internal safety procedures and policies avoiding the possible illegal disclosure of data and constraining their use in accordance with this Privacy Policy.

 

TRANSFER TO THIRD PARTIES

The Controller will transfer the information of the Holder to companies of parcel delivery service and shipment of goods, with the purpose of making the purchase orders arrive at the address indicated at the moment of making the purchase.

Cristina Palacios collects the information directly from the owners of the personal data, and these data may be transferred to subsidiaries, affiliates and controllers from within national territory or abroad solely for the same purposes, however, she is not authorized to transfer your personal data to any third party other than those mentioned, except as provided by article 37 of the LFPDPPP, therefore, such information will be kept in strict confidentiality, in accordance with the security, administrative, technical and physical measures established by Cristina Palacios.

 

USE OF COOKIES

Cristina Palacios does not use cookies to collect personal data from the Holders automatically and simultaneously, using text files called cookies, or web beacons that are images inserted via the Internet or through email.

The website www.cristinapalacios.com, online transactions, emails and advertising of MARIA CRISTINA GARCIA PALACIOS, may use cookies and other technologies such as web beacons, which help to better understand the behavior of customers, they tell us what parts of our website they have visited and facilitate and measure the effectiveness of advertisements and Internet searches. However, the data collected through cookies and other technologies are considered as non-personal data.

To disable cookies in the browser, check with the provider how to disable cookies.

 

MEANS TO EXERCISE THE RIGHTS OF THE HOLDER

At any time your legal representative duly accredited, may exercise the rights of Access and Rectification when they consider that they are erroneous or inaccurate; Cancellation in case you consider that the data is not treated properly; Opposition in case you do not want your data are treated for specific purposes and / or Revocation when it is no longer your wish as Holder that Cristina Palacios continue using your personal data. The exercise of one of these rights does not prevent the exercise of the other and none of them has to be exercised as a prior requirement for the exercise of another.

In order to exercise your rights mentioned above, requests shall be sent to our Personal Data Department at contacto@cristinapalacios.com, and / or directly to our address located at Calzada Porfirio Diaz 127, Colonia Reforma, Oaxaca, Oaxaca, Mexico C.P. 68050.

Requests to exercise the rights of the Holder must contain the following information: (i) Name of the Holder, (ii) address and email address to notify him/her of the response to his/her request, (iii) a clear and accurate description of the data for which the corresponding right is sought to be exercised, (iv) the object of the request, (v) any element that facilitates the location of the data. A copy of his/her identification must be attached, and should the case deem it, the document that evidences their legal representation.

The response period to your request shall be 20 working days counting from the day that the request for access, rectification, cancellation and opposition was received. The response will be communicated within the aforementioned period to the email address provided in your request or by sending a letter to the address provided in it. Once this notification is received, you will have a period of 15 working days to make it effective, if applicable.

At any time, you may revoke the consent you have given us for the processing of your personal data, in such a way that we stop making use of them. In order to do this, you must submit an application under the aforementioned terms for the exercise of the ARCO rights. The procedure to be followed will be the same as that provided for the exercise of the ARCO rights. If your request is appropriate, your data will no longer be processed by Cristina Palacios.

 

CHANGES TO THE PRIVACY POLICY

Any change to this Privacy Policy, will be informed through the following means:

  1. By Email that we will personally send you.
  2. And through visible ads within the website.

In the same way, the Holders are informed that the Privacy Policy may be modified at any time in order to meet legislative changes, as well as modifications of the internal policies of Cristina Palacios.

If the purposes for which your personal data are processed are modified, your express or tacit consent will be requested again if necessary, depending on the particular case.

 

CONSENT OF THE HOLDER

In the event that the Holder does not agree partially or totally on the content of this Privacy Policy, we kindly request you to notify your discontent and disagreement to the email contacto@cristinapalacios.com addressed to the Personal Data Protection Department.