PRIVACY NOTICE

This PRIVACY NOTICE is published in accordance with the General Data Protection Regulation (GDPR) for the European Union, as well as the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter "the Law") and its related provisions, in order to guarantee our clients and our suppliers the proper processing and safeguarding of their data collected by MERA for the purposes outlined in this document. The following information is provided to the data subject:

1. WHO IS RESPONSIBLE FOR YOUR PERSONAL INFORMATION?

Each of the companies that provide services and/or with which you have a legal relationship will be responsible for the collection, processing, and protection of your personal data, with an address for receiving notices at 16 de Abril Street, block 12, lot 05, superblock 10, Benito Juárez Municipality, Cancún, Quintana Roo, ZIP Code 77503.


2. WHAT DATA DO WE COLLECT FROM OUR CLIENTS?

As part of the transactions we carry out for the business activity of the company, we will require the following personal data from the client:

  • a) Name or business/trade name;
  • b) Address;
  • c) Federal Taxpayer Registration Number;
  • d) Email address;
  • e) Phone number;

MERA does not collect sensitive personal data from our clients through any means. Sensitive data refers to those specified in article 3, section VI of the "Law".


3. WHAT DATA DO WE COLLECT FROM OUR SUPPLIERS?

The personal data we collect from our suppliers, resulting from the transactions we carry out for the business activity of the company, are as follows:

  • a) Name and/or business name;
  • b) Address;
  • c) Federal Taxpayer Registration Number;
  • d) Email address;
  • e) Phone number;
  • f) Bank account numbers;
  • g) Public documents that prove the legal existence of the companies and the powers of representation of their respective legal representatives;
  • h) Official identification (of the interested party or their representative);

MERA does not collect sensitive personal data from our suppliers through any means. Sensitive data refers to those specified in article 3, section VI of the "Law".


4. WHAT DO WE USE YOUR PERSONAL DATA FOR?

The personal data we obtain from our clients will be used for the following purposes:

  • a) To generate electronic invoices for your purchases;
  • b) To address any complaints, feedback, or suggestions;
  • c) To share experiences of your visit to our consumption centers via social media and our website.

5. WHAT DO WE USE YOUR PERSONAL DATA FOR FROM OUR SUPPLIERS?

For our suppliers, the data we collect is used for the following purposes:

  • a) To confirm the legal existence, business activity, and the appropriate powers of representation for our business dealings;
  • b) To generate payment orders;
  • c) To generate invoices;
  • d) To validate the statements made in civil and/or commercial contracts we enter into;
  • e) To establish a database of our suppliers in general.

6. WHO DO WE SHARE YOUR INFORMATION WITH?

The personal data obtained by MERA may be shared without the consent of the data subject in any of the following cases:

  • I.- When the data is transferred to subsidiary or affiliated companies;
  • II.- When a judicial request from the competent authority orders it;
  • III.- When data is transferred to our system providers for payroll processing for our employees and for invoicing purposes for our clients;
  • IV.- In other cases specified in article 37 of the "Law".

In the case of section III above, the data collected will only be used to process these operations, under strict agreements for data control and protection, limiting its use to reading and processing.


7. RIGHTS GUARANTEED FOR THE DATA SUBJECT

You, as the data subject, enjoy the rights guaranteed by the "Law" (known as "ARCO Rights") and expanded by the "GDPR" as outlined below:

  • Right to be Informed and Access: the right to know which personal data we hold about you, for what purposes we use them, and under what conditions they are being processed.
  • Right to Rectification: if the data we hold about you is inaccurate, outdated, or incomplete, you may request its correction, in accordance with article 34 of the "Law".
  • Right to Cancellation (or Right to be Forgotten): this applies when the data subject requests that their data be deleted from our records or databases, except for the cases outlined in articles 26 and 34 of the "Law". Once this is done, we will notify the data subject of the cancellation request.
  • Right to Object (or Right to Opt Out): the data subject may object to the specific use of their data for particular purposes, or how it is processed.
  • Right to Data Portability: the right to request and obtain a copy of your data in electronic format, which can then be used with third-party services.
  • Right Not to Be Subject to Automated Decisions: the data subject has the right to request human intervention in the processing of their data to avoid automated decisions solely based on algorithms.

8. HOW CAN YOU EXERCISE YOUR RIGHTS REGARDING PERSONAL DATA PROTECTION?

You can exercise your rights at any time through the following means:

  • a) By sending a written request to MERA's address;
  • b) By sending a request via email to the following address: avisodeprivacidad@meracorporation.com;
  • c) By calling our phone number (+52 998) 3 10 72 00.

9. REVOCATION OF CONSENT

You may revoke the consent you have given for the processing of your personal data, as stipulated in the final paragraph of article 8 of the "Law". However, please note that for certain purposes, the revocation of your consent may prevent us from continuing to provide the service you requested.

To request the revocation of your consent, you can do so through the means specified in the previous section.


10. LIMITING THE USE OR DISCLOSURE OF YOUR PERSONAL DATA

In order to limit the use and disclosure of your personal data, we offer the following option:

You can register in the Exclusion List to ensure that your personal data is not used for marketing, advertising, or commercial prospecting purposes. You may do so or request further information through the means specified in section 6 of this notice.


11. USE OF TECHNOLOGIES ON OUR WEBSITE

We inform you that on our website we use cookies, web beacons, and other technologies to track your behavior as an internet user and to provide you with a better service and new products.

The personal data we collect through these tracking technologies include: the browser you use, server name, IP address, date, time, and duration of your browsing on our website.

These technologies can be disabled by following these steps: 1. Access our website, 2. Click on the "Cookies" section in your browser, 3. Click on the option to disable cookies.


12. PRIVACY DEPARTMENT

If you have any questions or concerns regarding this Privacy Notice or the handling of your personal data, you can contact our Privacy Department, where we will be happy to assist you.


13. CHANGES AND/OR UPDATES TO THE PRIVACY NOTICE

This Privacy Notice may be modified, changed, or updated due to new legal requirements; our business needs; changes in our privacy practices; changes in our business model; or other causes. We are committed to keeping you informed about any changes to this Privacy Notice by sending an email to the account you provided us initially.

Last updated: January 7, 2022.