ECART PAY
GENERAL INFORMATION
PURPOSE OF PROCESSING YOUR PERSONAL DATA
REQUESTED PERSONAL DATA
SAFEGUARDING OF PERSONAL DATA
TRANSFER OF DATA
MEANS AND PROCEDURES TO EXERCISE ARCO RIGHTS AND/OR REVOKE CONSENT FOR THE PROCESSING OF PERSONAL DATA:
OPTIONS AND MEANS TO LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA
USE OF COOKIES
MEANS TO COMMUNICATE CHANGES TO THE PRIVACY NOTICE
I. GENERAL INFORMATION
In compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, Ecart Pay wishes to inform the domains or websites www.ecartpay.com for persons who contract the services of Ecart Pay (hereinafter referred to as "Clients"), of its Privacy Notice regarding the processing and protection of personal data of those individuals who voluntarily communicate, in a non-limiting manner, through email, by phone, or any other electronic, oral, or written means with Ecart Pay, fill out forms that collect personal data, or access and/or the website mentioned here, if this implies the communication of your personal data.
Ecart Pay S.A.P.I. de C.V., hereinafter referred to as “Ecart Pay,” designates its address located at BELISARIO DOMINGUEZ 2470, OBISPADO, MONTERREY, NUEVO LEÓN, C.P. 64060
For all purposes related to this Privacy Notice, Ecart Pay makes this Privacy Notice available under the following terms:
II. PURPOSE OF PROCESSING YOUR PERSONAL DATA
The personal information you provide will be used solely for:
To carry out your registration, verify and confirm your identity, as well as the authenticity of the information and documentation provided.
To attend to your request to provide you with the requested services from time to time, as well as to inform you of changes to them, and to evaluate the quality of such services.
To address complaints, suggestions, requests arising from contracted services, and legal requirements requested by competent authorities.
Invoicing and collection arising from contracted services.
To evaluate the quality of the service we provide in order to fulfill the obligations we have contracted with you.
To contact you and/or your contacts and/or references to follow up on any matters related to the services or these purposes.
To ensure compliance with legal provisions regarding the prevention and identification of operations with illicitly obtained resources, anti-corruption, and other applicable regulations, by implementing administrative and technical procedures established for such purposes.
To notify you of changes in them.
Generally, to carry out complementary activities necessary to achieve the previous purposes.
Furthermore, your personal data may also be used for the following secondary purposes:
For marketing and/or advertising purposes.
Commercial prospection, with the aim of offering you various services provided by third parties related to the requested services.
To notify you about new services from Ecart Pay or products related to those already contracted or acquired.
To conduct studies on consumption habits and market trends.
If you do not agree with the secondary purposes, you may express your refusal by following the mechanism provided in section “VII” of this Notice.
Ecart Pay will not use your personal data for purposes other than those mentioned.
III. REQUESTED PERSONAL DATA
For the purposes of this Privacy Notice, personal data is understood to be any information collected regarding identified or identifiable natural or legal persons that communicate their personal data through the aforementioned website, which non-limiting examples may include:
Email.
Filling out forms that collect personal data on the website.
Personally, when visiting the company.
Creating a user account on the Ecart Pay website, and;
In general, using any current service on the website that implies the communication of your personal data.
The personal data that Ecart Pay will collect from Clients are:
General identification data: full name, gender, date of birth, nationality, state of birth, address, tax data (RFC), Unique Population Registry Code (CURP), occupation or profession, serial number of advanced electronic signature (if available). In the case of legal persons; name or business denomination, date of incorporation, nationality, business line or economic activity, address, tax data (RFC), serial number of advanced electronic signature (if available).
Contact data: phone number, email.
Biometric data: facial and/or voice recognition.
Financial data: related to your financial balance, income, and bank accounts.
For biometric and/or sensitive data, which require special protection, it will be taken into account that for this, your express and written consent will be collected or by some technological means made available.
IV. SAFEGUARDING OF PERSONAL DATA
The personal data will be safeguarded based on the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility, as established in the Law.
V. TRANSFER OF DATA
Ecart Pay may share your personal data with third parties with whom it has previously entered into contracts containing confidentiality and personal data protection clauses.
The third parties to whom Ecart Pay may transfer personal data are:
Subsidiaries, affiliates, parent companies, subsidiaries, partners, agents, contractors, corporations and/or shareholders that are part of the business group related to Ecart Pay, professional advisers and/or insurers.
Providers that offer services to Ecart Pay for the maintenance or fulfillment of the legal relationship with Clients.
The National Electoral Institute to validate your identity to combat identity theft.
Competent authorities, as provided in the applicable legislation.
Requested by banking or credit institutions, for payments and transfers.
When Ecart Pay shares your personal data, it is understood that these third parties will take the necessary measures to protect the confidentiality and security of the personal data; however, the third-party recipients of the personal data will assume the same obligations of Ecart Pay indicated in this Privacy Notice.
We will understand that you have given your consent for the processing and transfer of your personal data in accordance with this Privacy Notice if you do not express your opposition through the means made known to you in the Privacy Notice.
VI. MEANS AND PROCEDURE TO EXERCISE ARCO RIGHTS AND/OR REVOKE CONSENT FOR THE PROCESSING OF PERSONAL DATA
You may access, rectify, and cancel your personal data, as well as oppose the disclosure of the same through the procedures that Ecart Pay has implemented through its support area. You may request the form to access, rectify, cancel, and oppose the disclosure of the same. Furthermore, you will have a period of 5 (five) business days to express your refusal regarding the processing of your personal data for secondary activities. For more information on how to exercise your Access, Rectification, Cancellation, and Opposition Rights (ARCO Rights), oppose the disclosure of your data, revoke your consent, or express refusal regarding the processing of the same, you must contact us by sending an email to info@envia.com.
The exercise of any of the ARCO Rights is not a prerequisite nor does it impede the exercise of another.
The following requirements are essential to attend to your request:
The name of the data subject and address or other means to communicate the response to your request;
The documents that prove the identity or, as the case may be, the legal representation of the data subject.
A clear and precise description of the personal data regarding which any of the rights mentioned above is sought to be exercised; and,
Any other element or document that facilitates the location of the personal data.
To provide contact details to communicate the response to your request.
In case the information provided in the form is erroneous or insufficient, or if the corresponding supporting documents are not attached, Ecart Pay, within 5 (five) business days after receiving the request, may require you to provide the elements or documents necessary to proceed with the request. You will have 10 (ten) business days to attend to the requirement, counted from the following day you receive it. If you do not respond within this period, the request will be considered not presented.
Ecart Pay will communicate the determination made within a maximum period of 20 (twenty) business days from the date the request was received so that, if deemed appropriate, it can be made effective within the following 15 (fifteen) business days after the response is communicated. The response will be provided electronically to the email address specified in the form.
VII. OPTIONS AND MEANS TO LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA
You may limit the use or disclosure of your personal data by sending your request to the email info@envia.com.
The requirements to prove your identity, as well as the procedure to attend to the request, will be governed by the same criteria set forth in the previous section.
In case your request is granted, Ecart Pay will register it in the exclusion list to stop receiving our promotions.
VIII. USE OF COOKIES
Ecart Pay uses several technologies to enhance the efficiency of its websites, including your experience when browsing those sites. Among these technologies is the use of cookies. Cookies are small amounts of information that are stored in the browser used by each user so that the server remembers certain information which it can later use. This information allows you to be identified and keeps your personal preferences for a better browsing experience. We remind you that you can disable or adjust the use of cookies following the procedures of the internet browser you use.
IX. MEANS TO COMMUNICATE CHANGES TO THE PRIVACY NOTICE
Ecart Pay reserves the right, at its sole discretion, to change, modify, add, or remove parts of this Privacy Notice at any time. In such cases, Ecart Pay will publish such modifications on the website www.ecartpay.com where it will indicate the date of the latest version of the notice. We recommend visiting this page periodically to be informed of any changes to it.
If you believe that your right to the protection of your personal data has been violated by any conduct or omission on the part of Ecart Pay, or if there is any presumed violation of legal provisions, you may approach the National Institute for Access to Information and Data Protection (INAI); for more information visit www.inai.org.mx
Last updated: August, 2024.
