Privacy Notice (Privacy Policy) - Users
In accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and various current and related regulations (the “Personal Data Legislation”), this Privacy Notice is issued.
1. Identity and address of the Controllers.
“Citiuss”, “Citiuss partner”, the “Controllers” or “We”, indistinctly) obtain, use and store (hereinafter the “Treatment”) the personal data of you as the owner thereof (“You”, the “Owner” or “User”), which have their address for the purposes of this Privacy Notice at Av. Costa Maya block. 64 lte. 9 Cancun, Quintana Roo, Mexico.”
2. Processing of Personal Data.
Citiuss will be responsible for the personal data it collects through the application called “Citiuss” (the “Citiuss App”), its website https://citiuss.pro/ (the “Citiuss Site”) and its social networks and blogs (the “Citiuss Social Networks”), and will be responsible for the personal data it collects through the section called Citiuss providers (the “Apps”). Each of the Controllers may also collect your personal data through any other contact with You, from third parties and from other sources permitted by law, such as third parties, authorities and credit information companies, and each will be responsible for the Processing of such data.
In the event that you have provided contact information for third parties such as references, authorized parties, co-owners, spouses, beneficiaries, co-borrowers, references, guarantors, joint and several obligors, sureties, guarantors, guardians, suppliers, beneficiaries, and other legal entities related to products and/or services of the Controllers, you guarantee that you have their authorization to provide such information, including, where applicable, the applicable personal information, and you are responsible for informing said persons about the terms and reasons why we will contact them and, where applicable, the Processing of their personal information in accordance with this Privacy Notice, as well as the means to know its full content. Additionally, by your consent to this Privacy Notice, you ratify your authorization for the Controllers to contact said persons.
3. Personal Data Processed by the Controllers.
For the purposes indicated in this Privacy Notice, we will process the following categories of personal data and specific personal data:
4. Purposes of the Treatment.
We will process personal data for the following primary and necessary purposes: 1.Maintain, develop, manage, control, and fulfill the contractual relationship arising from the request and/or contracting of our products and/or services, including any financial transaction or service. 2.Display and/or market personalized products and/or services on our Sites and Apps according to the User's particular interests and needs. 3.Create, organize, catalog, classify, divide, separate, and store User data and files. 4.Create and manage User accounts on our Sites and Apps and verify, validate, and confirm the identity of Users and the information provided by them, internally or through any authority or third party. 5.Provide the User with information, communications, and notifications about our Sites and Apps, our products and/or services, and the third-party products and services displayed on our Sites and Apps, and the terms and conditions applicable to them. 6.Manage and process payments, operations, and transactions of Users who use our Sites and Apps.
7.Manage, develop, maintain, customize, and improve our Sites and Apps, our products and/or services, and operating systems, and perform the activities necessary for them to function optimally and correctly, as well as prevent or detect fraud or abuse. 8.Develop market strategies and market segmentation. 9.Conduct satisfaction surveys for our products and/or services. 10.Offer or acknowledge offers, promotions, and loyalty program benefits from Controllers and/or third parties. 11.Provide you with advice, clarification, complaint handling, customer service, and after-sales service, as well as monitor their quality by recording calls and storing the corresponding conversations. 12.Have access to credit bureaus or risk centers to determine your payment capacity and behavior, as well as Users' financial statements. 13.Comply with any legal provisions and obligations, whether national or international, applicable to the Controllers, their subsidiaries and/or affiliates, as well as to manage any judicial process or process and respond to any requests or requirements from authorities.
14.Carry out processes related to corporate restructuring of the Controllers, such as mergers, consolidations, sales, liquidations, or asset transfers. 15.Carry out collection activities. 16.Complementary activities necessary for the performance of the aforementioned purposes. 17.In the case of the "Citiuss" and "Citiuss Suppliers" Applications, so that users can accept and process orders closest to their location, the Application will collect location data, even when the Application is closed or not in use. 18.The "Citiuss" and "Citiuss Suppliers" applications collect and store the user's telephone number in our database using encryption methods to ensure the protection of the user's personal information. The data collected is used to identify potential atypical behavior within the Application and is not shared or transferred to third parties. We will process personal data for the following secondary or accessory purposes:
1.Marketing, advertising, promotion, commercial prospecting, referral processes, the creation, assessment, and analysis of User profiles for the development and offering of new products and services, conducting surveys unrelated to our products or services, and for analytical and statistical purposes, all related to the goods, products, and services of the Controllers, their affiliates, subsidiaries, partners, and other third parties; and 2.To contact you about or send you information on new developments, news, offers from the Controllers or third parties, newsletters, educational forums, advertising or marketing, and distance selling, using means such as, but not limited to, email, push notifications, text messages (SMS), instant messaging, calls, and pop-ups. If you do not wish your personal data to be processed for these secondary or accessory purposes, you may (i) send an email to mxdatospersonales@Citiuss.com, following the procedure referred to in section 7 of this Privacy Notice, or (ii) in the case of paragraph b. mentioned above, through our Apps.
5. Options and means we offer you to limit the use or disclosure of your personal data.
In all legally applicable cases, you may limit the use or disclosure of your personal data by submitting a request in accordance with the procedure established in section 7 of this Privacy Notice.
6. Transfer of personal data.
Your personal data may be transferred within the national territory or abroad (in compliance with applicable regulations), as follows:
To authorities, such as, but not limited to, the National Electoral Institute ("INE"), government agencies or entities, in compliance with or in relation to the obligations contemplated in the legislation applicable to one of the Controllers, its subsidiaries and/or affiliates, as well as in compliance with requests made to them. To authorities, such as, but not limited to, the INE, government agencies or entities, when the transfer is officially requested and/or necessary for the recognition, exercise, or defense of a right of one of the Controllers, its subsidiaries and/or affiliates in a judicial process. To controlling and/or affiliated and/or subsidiary companies and/or companies related to or belonging to the same business group as the Controllers, which operate under the same internal processes and policies as the Controllers, for the purposes of marketing, advertising, promotion, commercial prospecting, reference processes, preparation, assessment and analysis of User profiles, centralized storage of information, analytical and statistical purposes and historical registration of users and conducting surveys related to the Controllers, their subsidiaries and/or affiliates.
To third-party acquirers, resulting from a corporate restructuring of one of the Controllers, including a merger, consolidation, sale, liquidation, or transfer of assets, when the transfer is necessary for the maintenance or fulfillment of a relationship between said Controller and the Data Subject. To third parties that display and market products and/or services or agree to manage a request through the Sites and Apps, as well as to service providers and business partners, including financial institutions, when the transfer is necessary for the maintenance or fulfillment of a relationship between one of the Controllers and the Data Subject, or to administer, develop, maintain, customize, and improve our Sites and Apps, our products and/or services, and operating systems, and to carry out the activities necessary for them to function optimally and correctly, as well as to prevent or detect fraud or abuse and/or fulfill any of the purposes described in section 4 of this Privacy Notice, including .
To third parties that display and market products and/or services or agree to manage an order through the Sites and Apps, as well as to business partners, including financial institutions, when the transfer is necessary by virtue of a contract entered into or to be entered into in the interest of the Owner by one of the Controllers and said third parties. To third parties and/or service providers for the Owner's own service regarding the contracted services and activities related to the monitoring and fulfillment of obligations arising from the contracted services. To third parties that display and market services and/or products or agree to manage an order through the Sites and Apps, for the purpose of monitoring or carrying out activities related to any acquisition and delivery of products and/or services through the Sites and Apps, as well as to fulfill the obligations arising from the legal relationship between the Owner and said third parties.
Based on the other assumptions established in the Personal Data Legislation, which do not require your consent. With the exception of those mentioned in section (g) of this section, the aforementioned transfers do not require your consent under the Personal Data Legislation. If you do not express your objection to said transfer, which you can do now by sending an email to mxdatospersonales@Citiuss.com, we will understand that you have given us your consent. Additionally, if authorized by the User through the Sites, Apps, or any other applicable means, the Controllers may transfer your personal data to third parties that display and market products and/or services through the Sites and Apps, business partners, and other strategic allies of the Controllers, for marketing, advertising, or commercial prospecting purposes. In any of the cases mentioned above, we will communicate this Privacy Notice to the third-party recipients in order to ensure that their information is used in accordance with its terms.
7. Means for exercising your rights.
In all legally applicable cases, you may, at any time and through the procedure established in this section, exercise the following rights regarding your personal data before each of the Controllers: (i) rights of Access, Rectification, Cancellation, and Objection ("ARCO Rights"); (ii) revoke the consent granted to each of the Controllers for the processing of your personal data; (iii) limit the use or disclosure of your personal data; and (iv) express your refusal to have your personal data processed for the aforementioned secondary and accessory purposes. To exercise these rights regarding your personal data, you must submit the corresponding request by sending it electronically to the email address mxdatospersonales@Citiuss.com, including your handwritten signature at the bottom of the request. The subject line is "Exercise of Rights Over Personal Data" and the following information is included:
A copy of the documents that prove your identity (a valid official ID with a photograph) or, where applicable, legal representation, in accordance with the terms established in the Personal Data Legislation; and any other element or document that facilitates the location of your personal data. We will process Data Subjects' requests to exercise their rights regarding personal data within a period of no more than 20 (twenty) business days from receipt and will make requests or correct them in accordance with the time limits established in the Personal Data Legislation. Data Controllers may extend this period for up to 20 (twenty) additional business days, when the case warrants it, upon prior notification. If your request is admissible, it will be effective within 15 (fifteen) business days following our response. You may obtain the requested information or personal data through electronic documents in conventional formats or through any other legitimate means that guarantees and certifies the effective exercise of the requested right.
As established above, the Personal Data Departments of each Controller are responsible for processing any requests from data subjects to exercise their rights regarding personal data. You can contact them by email at mxdatospersonales@Citiuss.com. The Controllers wish to keep your personal data up-to-date at all times. Therefore, we request your cooperation in promptly informing us of any changes we may be aware of, so that we can incorporate them into our databases. You guarantee and are responsible, in any case, for the truthfulness, accuracy, validity, and authenticity of your personal data or that of any third party under your custody or legal representation, with the understanding that each Controller will comply with the provisions of applicable law regarding the data of said third parties received by one of the Controllers.
8.Means that allow personal data to be collected automatically.
We inform you that the Sites, Apps, and Social Networks use cookies and other technologies, which allow us to automatically monitor your behavior, provide you with our products and/or services, and provide you with an optimal and personalized experience while using them. We also offer you new products and services based on your preferences. The personal data collected through these technologies includes: IP address, websites and sections thereof that you visit from the Sites, before the Sites, or on pages related to the Sites and Apps, browser characteristics, device characteristics, operating system, language preferences, referenced URLs, information about behaviors and actions performed on the Sites and Apps, information about behaviors and actions performed while our App is open, dates and times of visits to the Sites or access to the Apps, sections or content viewed therein, and the User's location and browsing data while our Apps are open.
These technologies may be disabled by accessing the Privacy and/or Security option(s) located in the Options, Tools, Internet Preferences, or similar sections of the Internet browser you are using, or through the settings, tools, or similar icons on the device on which the Apps are installed; however, when disabling them, you should be aware that doing so may prevent you from fully utilizing the Sites and Apps. If you wish to obtain further information about the cookies mentioned in this section, you can visit www.allaboutcookies.org.
9. Changes to the Privacy Notice.
This Privacy Notice may be modified, changed, or updated due to new legal requirements, our own needs for the products or services we offer, our privacy practices, programs, or policies, changes in our business model, or for other reasons. We undertake to keep you informed of any changes to this Privacy Notice through the Sites and Apps, in the corresponding Privacy Notice section.
