PRIVACY POLIY
VISION REALTY, S.A. de C.V., (the Responsible Party), with its address at Av. Bonampak, Office N4-01, Block 27, Lot 1 – 02, UC-79, Section E, Cancún, Benito Juárez, Quintana Roo, and in accordance with the consent granted for the processing of your Personal Data, including sensitive, property-related, and/or financial data, will collect the following information: i) Identification Data: full name, proof of address, tax status certificate, CURP, and government-issued identification; ii) Contact Data: telephone numbers, address, and email address; iii) Property and Financial Data: information regarding income, bank accounts, and credit references; and iv) Sensitive Data: health information in connection with associated insurance, which will require your consent.
The Personal Data described above will be processed using methods and procedures that ensure its security, confidentiality, and integrity, and will be used solely for the creation, maintenance, performance, and, where applicable, termination of the legal relationship that exists or may come to exist with the Data Subject. Such relationship may be employment-related, commercial, related to the provision of services, representation, collaboration, or any other relationship related to the corporate purpose of the Responsible Party.
The Responsible Party may only transfer your Personal Data to its data processors and third parties, including affiliated companies and/or any individual or legal entity, domestic or foreign, associated with this company, in order to fulfill the purposes agreed upon in the aforementioned relationship. Specifically, to facilitate the purchase and/or sale or lease of real estate, coordinate property visits, or formalize offers, your identification and contact information may be shared with the developers, owners, and/or sellers of properties in which you have expressed an interest, solely at your request or with your prior consent and strictly for purposes related to the provision of our brokerage services. Persons who receive and handle your Personal Data will likewise be subject to the same obligations set forth in this Privacy Notice.
You are also informed that you have the right at all times to require that your information not be assigned or transferred to third parties for marketing or advertising purposes, except when required by a competent authority.
The Responsible Party has established a Request and a guide for the Data Subject through the website https://www.puertorealty.com to facilitate the exercise of the rights of access, rectification, cancellation, opposition, or revocation of consent for the processing of Personal Data.
The exercise of the rights of access, rectification, cancellation, opposition, or revocation of consent for the processing of your data may be made in writing at this company's address or by email at info@puertorealty.com, as of February 1, 2022, in accordance with the formalities established in the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations.
This Privacy Notice may be modified at any time and will be made available through https://www.puertorealty.com and/or through this medium, which also serves as a compensatory measure pursuant to the aforementioned Law and Regulations.
VISION REALTY, S.A. de C.V., in its capacity as the party responsible for the Personal Data provided, will maintain the necessary administrative, technical, and physical security measures to protect such data against damage, loss, alteration, destruction, or unauthorized use, access, or processing, in accordance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations.
In the event of security breaches that significantly affect the property or moral rights of Data Subjects, they will be informed without delay by the Responsible Party so that they may take whatever measures they deem appropriate to protect their rights.
The Responsible Party, its data processors, third parties, including affiliated companies, and any individual or legal entity, domestic or foreign, associated with it, will be required to maintain confidentiality regarding the Personal Data provided, even after their relationships with the Data Subject and with the Responsible Party have ended.
The cancellation of Personal Data will result in a blocking period, after which the data will be deleted. The Responsible Party may retain the data exclusively for purposes of liabilities arising from the processing. The blocking period will be equivalent to the limitation period for actions arising from the legal relationship that forms the basis for the processing, in accordance with applicable law. The foregoing is without prejudice to any retention periods required under tax, commercial, civil, or any other applicable law. Once cancelled, the Data Subject will be notified by email and/or in writing.
When a request for the rectification or cancellation of Personal Data is deemed appropriate, the Responsible Party will notify its data processors, third parties, including affiliated companies, the insurance sector, and any individual or legal entity, domestic or foreign, associated with it that has access to the Personal Data, so that they may take the corresponding actions in accordance with the Federal Law on Protection of Personal Data Held by Private Parties and other applicable provisions.
The Responsible Party will not be obligated to cancel Personal Data when:
I. They relate to the parties to a private, corporate, or administrative contract and are necessary for its development and performance;
II. They must be processed pursuant to a legal provision;
III. Their cancellation would obstruct judicial or administrative proceedings related to tax obligations, the investigation and prosecution of crimes, or the imposition of administrative sanctions;
IV. They are necessary to protect the legally protected interests of the Data Subject;
V. They are necessary to carry out an action in the public interest;
VI. They are necessary to comply with a legal obligation acquired by the Data Subject; and
VII. They are processed for prevention, medical diagnosis, or the management of healthcare services, provided that such processing is carried out by a healthcare professional subject to a duty of confidentiality.
If the Data Subject's legitimate objection to the processing of Personal Data is deemed appropriate, the Responsible Party may not process such data.
The Request for access, rectification, cancellation, opposition, or revocation of Consent for the processing of Personal Data must contain and be accompanied by the following:
I. The name of the Data Subject, address, or other means of identifying the Data Subject and communicating the response to the Request;
II. The information necessary to identify the legal representative, where the Data Subject has legal representation, together with the documents evidencing such authority;
III. A clear and precise description of the Personal Data with respect to which any of the aforementioned rights is to be exercised; and
IV. Any other element or document that facilitates the location of the Personal Data.
The Responsible Party will promote the protection of Personal Data within the organization and, through its Personal Data Protection Officer, will process Data Subject Requests for the exercise of the rights of access, rectification, cancellation, opposition, or revocation of consent for the processing of Personal Data.
Likewise, the Data Subject will be notified, within a maximum period of twenty days from the date the Request for access, rectification, cancellation, opposition, or revocation of consent for the processing of Personal Data was received, of the determination reached, so that, if applicable, it may be made effective within fifteen days following the date on which the response is communicated.
In the case of Requests for access to Personal Data, the data will be provided upon verification of the identity of the applicant or legal representative, as applicable.
The aforementioned periods may be extended once for an equal period, provided that the circumstances of the case so justify.
Nevertheless, the obligation to provide access to the information will be deemed fulfilled when the Personal Data are made available to the Data Subject by means of a communication sent by email, or in writing accompanied by simple copies of the data.
It will be sufficient for this company to inform the Data Subject of the Personal Data by email or in writing when this insurance company is not responsible for processing the data and information was mistakenly requested from it, in order for the request to be deemed fulfilled.
This company may deny access to Personal Data, refuse to carry out rectification or cancellation or grant an objection, or deny a request to revoke consent for their processing, in the following cases:
I. When the applicant is not the Data Subject, or the legal representative is not duly authorized for such purpose;
II. When the applicant's Personal Data are not found in its database;
III. When the rights of a third party would be adversely affected;
IV. When there is a legal impediment, or a resolution of a competent authority, restricting access to the Personal Data or preventing their rectification, cancellation, or objection;
V. When the rectification, cancellation, or objection has already been carried out; and
VI. This denial may be partial, in which case this company will carry out the access, rectification, cancellation, or objection requested by the Data Subject with respect to the data for which it is appropriate to do so, and must inform the Data Subject of the reason for its decision, attaching, where applicable, the relevant evidence.
The delivery of Personal Data will be free of charge, with the Data Subject being responsible only for justified shipping expenses or the cost of reproducing the data in copies or other formats.
All rights will be exercised by the Data Subject free of charge, upon verification of their identity before the Responsible Party. However, if the same person repeats their request within a period of less than twelve months, the costs will not exceed three days of the applicable general minimum wage, unless substantial modifications have been made to the Privacy Notice that warrant new inquiries.
VISION REALTY, S.A. de C.V. may make domestic or international transfers of data without the Data Subject's consent when any of the following circumstances applies:
I. When the transfer is provided for in a law or international treaty to which Mexico is a party;
II. When the transfer is necessary for prevention or medical diagnosis, the provision of healthcare, medical treatment, or the management of healthcare services;
III. When the transfer is made to holding companies, subsidiaries, or affiliates under the common control of the Responsible Party, or to a parent company or any company within the same group as the Responsible Party that operates under the same internal processes and policies;
IV. When the transfer is necessary by virtue of a contract entered into or to be entered into in the interest of the Data Subject by the Responsible Party and a third party;
V. When the transfer is necessary or legally required to safeguard a public interest, or for the administration of justice;
VI. When the transfer is necessary for the recognition, exercise, or defense of a right in judicial proceedings;
VII. When the transfer is necessary for maintaining or fulfilling a legal relationship between this company and the Data Subject; and
VIII. When the transfer is made for statistical purposes, to prevent fraud, money laundering, terrorist financing, and other illicit activities, to improve our claims processes and other transactions, for better business management, to conduct market research, to audit our business, to provide better service, and to comply with requests made to this company by the regulatory authorities overseeing its operations, such as the Ministry of Finance and Public Credit through the National Banking and Securities Commission, and the National Commission for the Protection and Defense of Financial Services Users.
The Data Subject may file a request for data protection regarding the response received from, or lack of response by, this company before the Federal Institute for Access to Information and Data Protection, in accordance with the rights protection procedure contained in the Federal Law on Protection of Personal Data Held by Private Parties. The Data Subject may at any time request not to be contacted at their home, workplace, or electronic address for the purpose of offering goods or services, and may request that their data not be used for advertising purposes.