Privacy Policy

In compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations (LFPDPPP), we hereby inform you of our Privacy Notice.

PYC PEOPLE, SA DE CV (RESPONSIBLE) whose address is located at Calz. Gral. Mariano Escobedo 550-Piso 8, Anzures, Miguel Hidalgo, 11590 Mexico City, CDMX and dedicated to carrying out all types of Events including Congresses, Conventions, New Product Launches, Fairs, Exhibitions, and Telemarketing.
Through this notice we inform you that we are responsible for the use and protection of the personal data provided to us by our employees, job applicants, clients and suppliers (DATA SUBJECTS), and therefore we have implemented the necessary security measures to keep your personal information confidential at all times.

PERSONAL DATA WE COLLECT:

The personal data that we collect by our company is the personal information of employees, clients and suppliers, which includes: full name, email address, home address, telephone number, place and date of birth, personal and professional references, RFC, CURP, bank account for deposit, email, position held and name of the company for which they work.
If you do not provide the requested personal data, the company will not be able to carry out the purposes for which it is required.

SENSITIVE DATA
In the event of requesting sensitive personal data, the CONTROLLER undertakes that the data will be processed under the strictest security measures, guaranteeing its confidentiality.

In accordance with the provisions of Article 9 of the LFPDPPP, in the case of requesting sensitive personal data, the data subject will be asked for their express consent.

PURPOSES OF PROCESSING PERSONAL DATA:
PYC People will collect your personal data for the following purposes:

Evaluation as a potential supplier and customer.
Carry out the recruitment and selection process for personnel.
Preparation of a Service Provision Contract.

In the event of an employment relationship, for the fulfillment of legal, tax, labor, social security and other obligations arising from said relationship.

Database and contacts of suppliers or potential suppliers that may have a relationship with the CONTROLLER and that are necessary for the development of the contractual relationship.

To provide you with services as customers of the Company.
Telemarketing and event registration.
Identification, creation of files.
Collection and Billing.
Marketing and advertising purposes.

Personal data will not be disclosed, will be kept under the strictest confidentiality and security, and will not be used for any purpose other than that mentioned above.
COLLECTION OF PERSONAL DATA AND SECURITY
The CONTROLLER obtains the personal data of the data subjects in the following way:
Personally, freely and personally
Through one of our employees in charge of the personnel area and/or a third party dedicated to the recruitment of specialized personnel.
Through purchasing executives and account executives, or by someone they directly designate.
By any legally permitted technology;
Through lists provided by our clients in order to provide services or process information.

The information will be stored in each file with absolute discretion in order to prevent information leaks.

In the case of suppliers and clients, data of the holder may be obtained from other sources permitted by law, such as telephone directories, job boards, references from other companies or individuals, public databases of any public or private entity or agency.

The Company has adequate security measures, administrative, technical and physical rules against damage, loss, alteration, destruction of information, which we also require to be complied with by the service providers we contract.

Personal data will be stored on password-protected computer equipment to ensure the necessary security, and only authorized personnel will have access to it in accordance with the rules established within the company itself.

DATA TRANSFERS
We may contract one or more third parties as selected service providers to handle and manage the personal data of clients or suppliers to whom the data will be transferred for non-commercial purposes, only so that they can fulfill the contracted services.

It is understood that these providers are obligated, by virtue of the corresponding contract, to maintain the confidentiality of the Personal Data provided by the Controller and/or its Processors and to observe this Privacy Notice.

The data subject also states that he/she gives his/her consent for the CONTROLLER or any processor to transfer Personal Data only to companies that are part of the same corporate group, which require having said personal data for the purposes mentioned above, otherwise they will not be disclosed or transmitted in favor of any third party.
Data transfers will also be made to comply with legal, labor, tax and/or social security obligations arising from the relationship with the owner of the personal data and without the need for consent to comply with the provisions of article 37 of the LFPDPPP.
The holder will give his consent to this Privacy Notice, if within 15 (fifteen) days after becoming aware of it he does not express his opposition.

RETENTION OF PERSONAL DATA
The CONTROLLER and/or its processors may retain the data subject's personal data for the entire duration of their employment or business relationship. Otherwise, they will maintain accounting, tax, financial, and labor records in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and other applicable legislation.

The personal data of potential candidates who have not entered into an employment contract agree that it will be kept in the database for a period of 2 years, after the aforementioned time the CONTROLLER will delete said data from its database and it will not be kept under any pretext.

LIMITATION ON THE USE OR DISCLOSURE OF PERSONAL DATA
If the data subject (customer, supplier, employee or job applicant) wishes to limit the use or disclosure of their personal data, it will be necessary to send a letter of request addressed to PYC People Personal Data area, in order to request the limitation of the disclosure or use of said data.

PROCEDURE FOR EXERCISING ARCO RIGHTS.
Data subjects or their legal representatives may exercise their ARCO rights (access, rectification, cancellation and opposition) by submitting a letter of request to the CONTROLLER, addressed to the Personal Data Attention area, from Monday to Friday from 9:00 a.m. to 14:00 p.m. and from 16:00 p.m. to 18:00 p.m., and an acknowledgment of receipt of said request will be given.

In this letter, you will request access to the data, rectification if it is inaccurate or incomplete, cancellation if you consider that this information is not necessary for the purposes of the company, or to oppose its processing.

The ARCO request must contain at least the name and address of the data subject, telephone number, email address, documents that prove their identity, if it is through a representative, the representative must present the existence of the representation along with their identity, the request must clearly and precisely state which ARCO right they seek to exercise, and any other element or document that facilitates the location of the personal data, as well as any other document required by the legislation in force at the time of submitting their request in accordance with article 29 of the LFPDPPP.

The CONTROLLER will not be obliged to cancel personal data when it involves any of the cases established in article 26 of the aforementioned Law.

The CONTROLLER undertakes to deliver in writing to its offices the response to said request within a period of no more than 20 days, after telephone confirmation.

REVOCATION
The owner of the personal data may revoke their consent for the processing of personal data at any time, and for such purposes only, they must send a written request letter to the CONTROLLER. The request letter must contain the requirements mentioned above and must be delivered to the address mentioned above or sent to the email address mentioned, except for the cases indicated in article 10 of the LFPDPPP.

The RESPONSIBLE PARTY will provide a written response within a maximum of 15 business days at its offices, after prior telephone confirmation, where the applicant will be informed of the validity of the request and, if applicable, the request will be made effective within 15 business days following the date on which the response is communicated.

CHANGES TO THE PRIVACY NOTICE
PYC People may update or modify its Privacy Notice at any time; such modifications or the modified Privacy Notice will be available on our website pcpeople.com.mx or if applicable, we will send them to the email address you have provided.