ARCO Rights and Procedure

The data subjects has the right to access personal data we possess, know the treatment details of them, to rectify or cancel them if they are inaccurate, inadequate, irrelevant, excessive or incomplete, when they considered are not necessary for any of the purposes contained in this Privacy Policy, or realize that they are used for purposes other than previously agreed. In this way the access, rectification, cancellation and opposition that the data subjects can make regarding their personal data together are called the ARCO rights.

The ARCO Rights are contemplated in the Federal Law on Protection of Personal Data in Possession of Private Parties as follows:

  • Access: The data subjects have the right to access their personal data held by the person responsible.
  • Rectification: The data subjects will have the right to rectify their personal data when it is inaccurate or incomplete. When personal data have been transmitted prior to the date of rectification or cancellation and continue to be processed by third parties, the person responsible must notify to that third party the request for rectification or cancellation, so that he may proceed to do so.
  • Cancellation: The data subjects will have at all times the right to cancel their personal data. The cancellation of personal data will result in a blocking period after which the data will be deleted. The personal responsible may retain them solely for the purposes of the responsibilities arising from the treatment. The blocking period will be equivalent to the limitation period of the actions derived from the legal relationship that founds the treatment in the terms of the applicable Law in the matter. Once canceled the data will be given notice to its subject. When personal data have been transmitted prior to the date of rectification or cancellation and continue to be processed by third parties, the person responsible must notify to that third party the request for rectification or cancellation, so that he may proceed to do so.
  • Objection: The data subjects shall have the right at any time and for legitimate reasons to object the processing of their data. If it proves to be appropriate, the person responsible will not be able to process the data related to the data subjects.

The data subjects, the natural persons to whom the data correspond, as well as the legal representatives of the legal entities to whom the personal data correspond, may exercise their ARCO rights according to the following procedure:

  1. Download and complete the ARCO Rights Request.
  2. Send the duly signed ARCO Rights Request to the email: legal@insightlevel.com. Or, physically send it by traditional mail to the Contact Address located in Sendero Sur number 285, Colonia Contry C.P 64860, Monterrey, Nuevo León, Mexico, with attention to the Legal Affairs Office. Applications sent by other means other than those expressly mentioned herein will not be received.
  3. The data subject must complete an ARCO application for each right that he wants to exercise.
  4. Attached Documents to the ARCO Rights Request:
    1. The documents that prove your identity: Official identification in force, passport, or, if applicable, documents proving your legal representation. For the purposes of this procedure, it will be understood as official identification documents all those that the laws in force give them such quality.
    2. Any document or information that facilitates the location of your personal data.
    3. In case of requesting a rectification of data, you must also indicate the modifications to be made and provide the documentation that supports your request.
    4. The indication of the place where the originals of the attached documents may be reviewed.
    5. In the case of acting on behalf of a legal entity, a simple Power Of Attorney granted before two witnesses or simple copy of the public deed in which the power conferred is granted.
  5. Within 5 (five) business days following the receipt of the ARCO Rights Request, INSIGHT LEVEL will verify that he / she has all the previously described requirements, otherwise, contact the data subject by email or through the contact that the data subject has indicated in his ARCO Rights Request, who, once notified, will have ten (10) business days to correct the deficiencies, on the understanding that if he fails to do so within the said term, will be taken for desisting the ARCO Rights Request.

Notes

  1. The cancellation will not be possible or INSIGHT LEVEL will be able to make the decision on canceling or not the personal data in the following cases:
    • It refers to the parties of a contract and is necessary for its development and compliance;
    • Should be treated by legal provision;
    • Obstructs judicial or administrative proceedings;
    • Are necessary to protect the legally protected interests of the data subject;
    • They are necessary to comply with a legally acquired obligation;
    • They are subject of treatment for prevention, for medical diagnosis or management of health services (always that such treatment is performed by a health professional).
  2. In the event that the response granted to the data subject does not fully satisfy him, he may file the procedure for personal data protection before the National Institute of Access to the Information and Data Protection, as described in the privacy data procedures.