CITY 32 PROSPECTS
A. Identity and address of Data Controller
Pursuant to the provisions of the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPD – Mexican acronym) and other applicable regulations, Inmobiliaria y Promotora Real Yucatán, S.A. de C.V. (hereinafter referred to as “Data Controller”), whose domicile to hear and receive communications is: Avenida Andrés García Lavín Calle 32, Número Exterior 298, Piso 11, Colonia Montebello, Mérida, Yucatán, C.P.97113, expressly states:
B. Personal data collected and processed
For the purposes described in this Privacy Notice we collect the following types of personal data:
- Identification and contact data.
- Social environment data.
Additionally, we inform you that any personal data of third parties provided to the Data Controller by you in order to comply with the identified purposes, must be provided after you have informed them about the existence of the processing and the content of this Privacy Notice.
C. Processing of sensitive personal data
The Data Controller does not collect sensitive personal data for the purposes listed in the following section.
D. Purposes of the processing
a.Primary and necessary purposes:
- To provide you with information about the business premises/offices that the Data Controller has available for lease and/or sale (hereinafter, the “Business Premises”).
- To contact you to follow up on your interest in the Business Premises.
- To send you communications about offers related to the Business Premises.
b. Secondary purposes
None exist.
E. Transfer of personal data
Your personal data may be transferred to and processed by third parties other than the Data Controller. The recipients of such transfers (national or international) belong to the following categories:
- Parent companies, affiliates or subsidiaries of the Data Controller; for purposes of centralized information safekeeping; control of registrations, cancellations and updating of data; as well as statistical purposes and historical record of suppliers.
Otherwise, your personal data will not be transferred to third parties without your consent, with the exceptions provided for in Article 37 of the LFPD in compliance with the conditions established in Article 17 of the LFPD Regulation.
F. Exercise of ARCO rights
Whenever legally applicable, you will be able to exercise at any time your rights of access, rectification, cancellation and opposition (ARCO rights) through the procedures we have implemented.
The request must comply with the requirements established in the current legislation, by writing to our Data Protection Officer, with address at Avenida Andrés García Lavín Calle 32, Exterior Number 298, 11th Floor, Colonia Montebello, Mérida, Yucatán, C.P.97113.
The request must contain and be attached to the following:
I. Your name and address or other means of communicating the response to your request.
II. Documents proving your identity or, if applicable, proof of legal representation.
III. The accurate and detailed description of the personal data for which you are exercising any of the ARCO rights; and
IV. Any other element or document that may facilitate the search of the personal data.
The Data Controller will inform you, not later than twenty working days from the date on which it receives the corresponding request, until the decision is made. If the request is successful, it will be effective within fifteen working days from the date on which the Data Controller communicates the response. In the event that the information provided in your request appears to be erroneous or insufficient, or if the necessary documents to prove your identity or the corresponding legal representation are not provided, the Data Controller, within five working days following the receipt of your request, will require the correction of the deficiencies in order to process it. In these cases, you will have ten working days to comply with the requirement to correct the deficiencies, counted from the day following the day on which it was received. The corresponding request will be considered as not submitted if you do not respond within such term.
You may receive the requested information or personal data through simple copies, electronic documents in conventional formats (Word, PDF, etc.), through restricted and authorized access to the system that processes your personal data (access) or through any other legitimate means that guarantees and accredits the effective exercise of the requested right. Alternatively, the Data Subject may send the request through the e-mail address derechosarco@thepalacecompany.com, complying with all the aforementioned requirements, establishing as Subject of the communication “ARCO Rights and/or Withdrawal of Consent”. The terms of the procedure shall be the same as those referred to in the immediately preceding paragraph. The use of electronic means for the exercise of ARCO rights authorizes the Data Controller to respond to the corresponding request through the same means, unless the Data Subject clearly and expressly indicates another means.
You will be responsible for updating your personal data in possession of the Data Controller. Therefore, you guarantee and respond, in any case, the truthfulness, accuracy, validity and authenticity of the personal data provided, and undertake to keep them properly updated, communicating any changes to the Data Controller.
G. Withdrawal of consent
You may withdraw your consent to the processing of your personal data, without retroactive effects, in those cases in which such withdrawal does not involve the impossibility of fulfilling the obligations derived from a current legal relationship between you and the Data Controller. The procedure for the withdrawal of consent, if applicable, will be the same as that established in the immediately preceding section for the exercise of ARCO rights.
H. Limitations on the disclosure of your personal data
You may limit the use or disclosure of your personal data by sending the corresponding request to our Data Protection Officer. The requirements to prove your identity, as well as the procedure to attend your request will be the same as those indicated in section F. Exercise of ARCO rights.
I. Modifications or updates to this Privacy Notice
The Data Controller may amend, update, extend or otherwise change the content and scope of this Privacy Notice, at any time and at its sole discretion. In such cases, the Data Controller will communicate such changes on the website www.city32.mx or via e-mail.
Last updated on:
April 20, 2023.