Privacy notice

Igsa Corporation hereinafter (“The Company”), with address at Avenida Prolongación Paseo de la Reforma 2977, colonia Cuajimalpa, Alcaldía Cuajimalpa, Mexico City, CP 05000, with website >www.igsapower.com, is responsible for collecting your personal data, so we make available this Comprehensive Privacy Notice in compliance with the principles of legality, quality, consent, information, purpose, loyalty, proportionality, responsibility, and with the purpose of letting you know the treatment to which they will be submitted, of the conditions to exercise their rights to informational self-determination, privacy and protection of the same.

RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA

The Company is responsible for collecting personal data, which is done in 3 ways:

In a personal way.- When the holder provides his personal data to the natural person designated by The Company, with the physical presence of both.
Directly: When the holder provides us with his/her personal data by any means, including optical, sound, visual or any other technology, such as postal mail, internet, or electronic means, among others.
Indirectly – When we obtain the personal data without the holder having provided it to us personally or directly, such as through transfers or publicly available sources.

Our contact information is: The Company (Prolongación Paseo de la Reforma 2977, Col. Cuajimalpa, Alcaldia Cuajimalpa, C.P. 05000), if you have any comments regarding this privacy notice you can do it through the Head of Personal Data Protection: email: protecciondedatos@igsa.com.mx

IDENTIFICATION DATA TO BE PROCESSED

The Company may collect identifying and financial information such as: Identification data:

Identity documentation: voter’s credential, passport, driver’s license, professional license, unique population registry code, photographs.
Identification on social media: Facebook, Twitter, Linkedin, Google+.
Social Security Number.
Academic history: school certificates, certificates, studies completed.
Beneficiaries and economic dependents, family information (spouse, children, grandchildren).
Personal references: information of non-family members.
Socioeconomic data: age, sex, income level, schooling.
Employment information: company, position, activity developed, curriculum vitae.
Habits, sports, hobbies and interests.

Financial or patrimonial data: Financial information and means of payment: credit card, debit card, checks. Asset situation: income, real estate, investments, or other types of bank accounts. Bank and billing information such as: account number, ITIN, billing information. The Company has implemented different means to make available to you this comprehensive privacy notice, a short privacy notice or a simplified privacy notice, depending on how we obtain your data. If we obtain your personal data indirectly, by consensual transfer or public databases, we will make you aware of our privacy notice at the first contact with you and prior to the processing of your personal data, so that you can express your opposition to such processing.

THE FOLLOWING SENSITIVE DATA IS COLLECTED:

The Company collects and stores sensitive personal data such as health status, diseases, allergies, medications taken, anti-doping tests, union membership that are necessary to carry out the selection process, recruitment of personnel, for purposes of health programs at work and compliance with labor laws and health standards.

PURPOSES OF THE PERSONAL DATA

The purposes of the personal data that the Company collects, are related to the origin and are necessary for the existence, maintenance, and fulfillment of the legal relationship between you (owner) and the Company (responsible), so you will find attached the list of specific and objective purposes of the processing of your personal data, which has been prepared without using inaccurate, ambiguous or vague phrases. Original and necessary purposes: Identification data for: Visitors:

Access to our offices or branches.
Maintaining security within the company’s facilities.

Customers and suppliers:

Inform, Administer, Provide services and products that you contract with us.
Fulfill the legal relationship that is generated by the product or service contracted.
Verify and confirm your identity.
Confidentiality agreements in the use of technical information.
Maintain security within the company’s facilities.

Financial Data for: Clients:

Inform, manage, provide services and products that you contract with us.
Fulfill the legal relationship generated by the product or service contracted.
Analysis for granting credits, payment terms.
Maintain security within the company’s facilities.

Suppliers:

Registration in our databases.
Fulfill the legal relationship generated by the contracted product or service.
Service evaluation.
Maintain security within the company’s facilities.

Sensitive data: Candidates:

Personnel selection, labor recruitment.
Elaboration and analysis of clinical records.
Registration in our databases.
Payroll integration.
Granting of benefits: major medical insurance, life insurance.

Employees:

Storing personal information in databases, in physical files for payroll purposes, technical and psychological evaluations, personnel training and development, compliance with labor, health and tax laws.
Elaboration, analysis, updating and conservation of clinical records.
Inclusion in preventive medicine programs.
Fulfill the legal relationship generated by the labor relationship.
Maintain security within the company’s facilities. Additionally, we will use your personal data for the following.

Additionally, we will use your personal data for the following. Secondary purposes: Candidates:

Form, Store, use a portfolio of candidates to fill future job positions.
Application of medical, psychometric, and technical exams.
Exchange of your curriculum vitae with other companies.

Clients:

Commercial prospecting.
Send promotions of other goods or services related to our products.
Send commercial, technical, event and promotional information (marketing or advertising).
Transmission to third parties for advertising and marketing purposes.

Suppliers:

Evaluation of their services.

Employees:

Registration in tenders, bids or contracts related to the services offered by the company.

MECHANISMS TO EXPRESS YOUR REFUSAL TO THE PROCESSING OF YOUR DATA FOR “SECONDARY PURPOSES”.

In case you do not want your personal data to be used for the secondary purposes listed in the previous clause, please indicate it through the following form and send it to the e-mail address protecciondedatos@igsa.com.mx. The refusal to use your personal data for these secondary purposes may not be a reason for us to deny you the services and products you request or contract with us.

THE DATA TRANSFERS WE MAKE

We inform you that your personal data are not transferred to third parties and the referrals that THE COMPANY carries out of your personal data to persons in charge are for the purpose of complying with the existing contractual relationship and/or to provide our services and are: The referrals we make are as follows:

Name of the person in charge or type, category, or sector	Purposes determined.
Affiliates or subsidiaries	Transferred by the Corporation to its domestic or foreign affiliates and subsidiaries in order to fulfill the legal relationships existing between said corporations.
Insurance Companies	Provide insurance services (major medical expenses, life insurance, among others).
Brokers	Administrative and technical support in the different services required by the company.
Different Companies	For the compliance of our services and fulfillment of obligations, procedures, studies, consultancy, analysis in fiscal, labor, and administrative matters.
Government	To participate in bids, tenders, and services rendering.
Advertising and marketing agency	Commercial prospecting, promotion, invitations to events (*).
Tax, labor, and judicial authorities.	Compliance with tax, labor, and civil regulations.
Government Sector	Commercial prospecting, promotion, and bids.

For referrals marked with an asterisk (*) we require your consent. If you do not express your refusal for such referrals, we will understand that you have given us your consent.

ACCEPTANCE ON YOUR PART FOR SUCH REFERRALS

The referrals mentioned in the previous paragraph are necessary to comply with the contractual relationship between you and The Company, so you are not required to give your consent for them, however, The Company has procedures for you to express your opposition to such referrals, which will proceed if it does not affect the legal relationship acquired.

MEANS AND PROCEDURE FOR EXERCISING YOUR RIGHTS ARC AND RIGHT TO REVOKE CONSENT

For you to exercise your rights (ARCO) of access, rectification, cancellation, or opposition that the Law provides or revoke your consent to the processing of your data, you must submit a request addressed to the Head of Personal Data Protection to email protecciondedatos@igsa.com.mx. Likewise, you must attach to your request your official identification and/or that of your legal representative with which they are duly accredited. The Company will respond within a maximum period of 20 business days from the date on which the request for access, rectification, cancellation, or opposition was received, as well as regarding the revocation of your consent. If it is appropriate, it will be effective within 15 business days from the date on which the response is communicated. Both terms may be extended in equal periods with prior justification from The Company The means through which the response will be communicated to you will be courier, direct delivery in our offices and/or to your e-mail. In any case, acknowledgement of receipt will be requested. The Company may deny access to your personal data or to make the rectification or cancellation or grant the opposition to the processing thereof, in the following cases, when:

The holder or his representative is not duly accredited.
The personal data is not found in our database.

The rights of third parties are harmed.

The rectification, cancellation or opposition has been previously made, and
There is a legal impediment or resolution of an authority that restricts the exercise of these rights.

The negative response to your request may be partial, in this case The Company will carry out the access, rectification, cancellation or opposition required by the holder on those data where such requests are applicable. In case of disagreement with the resolution issued by The Company, you have available the action of protection of rights before the Federal Institute of Access to Public Information and Data Protection. Personal data will be deleted once the legal relationship has been fulfilled or derived from the exercise of your ARCO rights, except when it is required to keep them according to the applicable laws or the original contract entered with the owner of the data.

OPTIONS AND MEANS AVAILABLE TO YOU TO LIMIT THE USE OR DISCLOSURE OF YOUR DATA

We have implemented different options and means to limit the use and disclosure of your personal data before its use, described in the previous paragraphs. Additionally the Company has created a list of exclusion, a database in order to register free of charge the refusal of the holder to the processing of their personal data, in exercise of their rights of cancellation, opposition or revocation of consent. For further information, please contact our personal data protection area at protecciondedatos@igsa.com.mx.

MEANS BY WHICH WE WILL COMMUNICATE CHANGES TO THE PRIVACY NOTICE TO YOU

The Company reserves the right to make changes to this Privacy Notice and in case of modifications, you will be informed through any of the following means:

Our website www.igsapower.com
To your e-mail address provided to us and on
Notices posted in our offices.

SECURITY AND CONFIDENTIALITY OF THE INFORMATION

The Company establishes and maintains physical, electronic, and administrative measures, with the purpose of protecting the personal data that it processes against damage, loss, alteration, destruction or unauthorized use, access or processing.

CONTACT INFORMATION

Please do not hesitate to contact THE COMPANY (Prolongación Paseo de la Reforma 2977, Col. Cuajimalpa, Alcaldia Cuajimalpa, C.P. 05000) if you have any comments regarding this privacy notice, through the Head of personal data protection: email: protecciondedatos@igsa.com.mx Date of last update: May 10, 2021.