Privacy Notice
Last Updated: July 30, 2019

In accordance with the provisions of Article 17 of the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter referred to as “LFPDPPP”), we inform you that DRP CLOUD MÉXICO S.A.P.I. DE C.V. (hereinafter referred to as “Ebunti” or “The Responsible Party”) and/or any of its representatives, professionals, employees, subsidiaries, affiliates, suppliers, service providers, related companies, contractors, interns (hereinafter referred to as “Collaborators”), will process the personal data collected from you or your representative, with the purpose of corresponding to a current and future business relationship and your interest in safeguarding your information, and/or contracting any of our services, as well as, where applicable, the delivery or provision of such services to your address, being able to manage, administer, and register the relationship with you in our system in order to carry out the services and billing as necessary.

The data you provide to Ebunti will correspond only to identification, contact, labor data, and if necessary, financial data, which will only be disseminated and/or shared when the nature of the business relationship between you and Ebunti requires it, always within the framework of ethics and professionalism, as well as the LFPDPPP. Additionally, we will use your personal data for the following purposes, which are not necessary for the requested service but allow us to provide better service, such as using your name and/or brand solely for presentations, exhibitions, and internal proposals between you and/or your representative and Ebunti. If you do not wish for these additional purposes, you may submit a written statement expressing your opposition.

1. Responsible for protecting your personal data: Ebunti and/or any of its “Collaborators” inform you that the information you provide when using the services represents an important element for our operations and the provision of such services and will be handled as confidential. We will protect it through internal processes, always seeking to ensure its maximum protection and safeguarding. DRP CLOUD MÉXICO S.A.P.I. DE C.V. is responsible for processing the personal data collected according to this Privacy Notice, and its address for these purposes is located at Av. Américas 1501 Piso 20-A, Col. Providencia, C.P. 44630, Guadalajara, Jalisco.

2. Form and contact methods: In accordance with the LFPDPPP, we designate a person in charge of handling personal data to ensure compliance with the LFPDPPP and to address any requests you, as our client or user, may have. For any issues related to your personal data, such as comments, doubts, updates, cancellations, revocations, etc., you should address them in writing in Spanish and send them to the designated person through the following means: email: [email protected], or by postal mail to the address: Av. Américas 1501 Piso 20-A, Col. Providencia, C.P. 44630, Guadalajara, Jalisco. This is in accordance with the provisions of this Privacy Notice. Additionally, we inform you that in order to address your requests, you must meet the requirements specified in Articles 29 and 31 of the Law.

3. Collected data and means of obtaining personal data: The personal data we collect from you for the purposes described in this Privacy Notice is collected in various ways, the most common being: personally and directly when you provide it to us directly; via the internet; through any communication with us; and when we obtain information from other sources permitted by the LFPDPPP, including, but not limited to, when you use our services, access our website, or any of our communication systems.

4. Personal data: The personal data we collect directly are those you provide to us through any means, such as when you hire a service. The data we collect directly and through any means are as follows: name, company name, gender, marital status, social address, location, date and place of birth, profession and occupation, nationality, personal and work phone numbers, mobile number, email address, tax ID (RFC), CURP, personal, financial, professional, and/or asset references and identification data. You acknowledge that you have the consent of third parties to transfer and process their data according to this Privacy Notice.

5. Purposes of the collected personal data: The collected personal data will be used by the Responsible Party for the following purposes: providing services, creating a registry, identifying the user to grant access to services, administrative purposes (billing and customer follow-up, home deliveries, etc.), tracking, marketing, monitoring and confirming the contracted services, service registration, conducting research, sending commercial, advertising information, and promotions (including email, SMS, MMS, and other electronic communication media or those that may develop), evaluating service quality, collecting preferences and selected configurations, information on how you and website visitors interact with our services, personalizing and improving services, offering other similar services and advertising, collecting any amounts due and other applicable expenses, and any other activities aimed at promoting, maintaining, improving, and evaluating the Responsible Party’s services, such as quality and satisfaction surveys, preventing fraud and misuse of services, correcting software errors and operational problems. We reiterate that personal data is handled with absolute confidentiality, and all processing, such as use, disclosure, and storage, is carried out to fulfill the purposes described.

6. Data safeguarding: The personal data you provide is stored in controlled databases with limited access. As such, from the moment you give us your consent, the Responsible Party may keep in its records, both physical and electronic, all the information you have provided through any means made available by the Responsible Party to collect your personal data.
Ebunti’s employees and collaborators have also signed confidentiality agreements, committing to the proper use of the confidential information you, as a user, provide and ensuring that such information is not disclosed without prior notice.

We inform you that while safeguarding personal data on the internet cannot be guaranteed 100%, once received, we will make every effort to protect it by implementing technical, administrative, and physical measures to safeguard and secure the information.

7. Data transfer: The information requested allows the Responsible Party to contact our clients, users, and affiliates to provide efficient service and achieve any of the purposes described above. Additionally, we inform you that in order to comply with the obligations derived from the legal relationship between the Responsible Party and you, as well as for the purposes set forth in this Privacy Notice, you authorize the Responsible Party to transfer the necessary personal data to competent authorities when legally required. If you do not express your opposition to such transfers and accept this Privacy Notice, we will understand that you authorize us to transfer data and information to third parties, both domestic and foreign, involved in the provision of services, such as the Collaborators mentioned above. This will be done in accordance with the principles contained in the LFPDPPP and related regulations. The information provided by the Responsible Party will always be used in accordance with this Privacy Notice.

8. Exercise of ARCO rights (access, rectification, cancellation, and/or opposition): You have the right to access the personal data we hold about you, to the details of its processing, to rectify it if it is inaccurate or incomplete, to cancel it when you consider that it is no longer necessary for any of the purposes set forth in this Privacy Notice, to oppose its use for specific purposes, and to clearly express such opposition using the mechanisms described under “Mechanisms for exercising ARCO rights” (ARCO Rights).

9. Mechanisms for exercising ARCO rights: To learn about the procedures, requirements, and deadlines for exercising ARCO Rights, you may contact our personal data department via email at [email protected]. To exercise your ARCO Rights, you may request the corresponding forms directly from our designated personal data department. The forms will contain the necessary steps to exercise your rights. We will respond to your request within twenty days from the date it was received, providing a determination. If the request is granted, we will make the change effective within the following fifteen days. For requests for access to personal data, delivery will require verification of the identity of the requester or legal representative, as appropriate. All documentation will be provided in electronic or physical format. The right to access information will be subject to the availability of such information in our servers and records. If we no longer store such information, we will cancel and no longer have access to it after one year, as we will not retain data beyond the period necessary for the purposes described.

10. Right to revoke consent for data processing: With the limitations expressed here, you have the right to revoke the consent you have given us for the processing of your personal data, so that we no longer use it. To do so, you must submit your request to the Responsible Party via email at [email protected], as described in the “Form and Contact Methods” section. However, please note that in some cases we may not be able to immediately fulfill your request or stop processing the data due to legal obligations that require us to continue processing your data. Also, you should consider that for certain purposes, revoking your consent may mean that we can no longer provide you with the requested service or that our relationship will end.

11. Use of cookies, web beacons, or similar technologies: We inform you that we use cookies, web beacons, and other technologies on our website that allow us to monitor your behavior as an internet user, provide you with better service and user experience while browsing our website, and offer new services based on your preferences. The personal data we obtain from these tracking technologies include the following: browsing time, pages visited on our website, sections consulted, and websites visited prior to accessing ours.

12. Modifications to this Privacy Notice: We reserve the right to modify or update this Privacy Notice at any time. Any changes or modifications to its content will be communicated to you promptly through any means, such as the Website, via email at the most recent address we have for you, through the various technological tools used by the Responsible Party, or in person by our staff.

13. Breach of Personal Data: If you believe that your right to the protection of your data has been violated by any conduct or omission on our part, or if you suspect any violation of the provisions set forth in the LFPDPPP, its Regulations, or any other applicable regulations, you may file your complaint or report with the National Institute for Transparency and Protection of Personal Data (hereinafter “INAI”). For more information, we recommend visiting their official website at www.inai.org.mx.

14. Acceptance of the Privacy Notice: By receiving our services or accessing the Website, the user acknowledges that they have read, understood, and agreed to the purposes and scope of this Privacy Notice, including the section regarding the transfer and disclosure of personal data as outlined in this Privacy Notice. Therefore, you give your express consent for Ebunti to process your personal data in accordance with the terms of this Privacy Notice.