Privacy Notice – eDisclaimer

eDisclaimer – Email

This message and all attachments are sent for the sole use of the recipient and may contain confidential and/or legally privileged information. If you are not the intended recipient, you are hereby informed that the dissemination, distribution, copying or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete it from your computer. Unauthorised use or dissemination of this message is prohibited. We remind you that Internet communications are not secure and can be intercepted by third parties.

Please note that all e-mails are systematically scanned by our systems and by a third-party provider to remove viruses and unsolicited promotional mail (“spam”). This practice could result in the deletion of legitimate e-mail messages before they can be read by their recipient. Please contact us if you have any questions or issues related to this automatic filtering.

Comprehensive Privacy Notice – website users

(Last updated: June, 2024)

Identification of the Data Controller and their Contact Details

González Calvillo, S.C. (indistinctly “we” or the “Data Controller”), also known as Pérez-Llorca-Gonzalez Calvillo, with address at Calle Montes Urales 632, Piso 3, Colonia Lomas de Chapultepec, Miguel Hidalgo, C.P. 11000, Mexico City, Mexico, and with a website address of www.perezllorca.com/en-mx/ (the “Website”) is responsible for processing the personal data that you provide us with and that we collect from you, which we will protect in accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Individuals, its Regulation and other applicable legislation.

For the purposes of this Privacy Notice, the “Pérez-Llorca Group” means the group made up of (i) Pérez-Llorca Abogados, S.L.P., (ii) Gonzalez Calvillo, S.C., and (iii) the dependent companies/subsidiaries within the scope of consolidation of Pérez-Llorca Abogados, S.L.P.

What personal data do we collect?

Visiting and browsing the Website does not mean data is automatically recorded that would allow users to be identified by name (the “User” or “Users”).

However, the Website does collect certain information that is recorded in the systems of the Pérez-Llorca Group:

• The type of browser and operating system you use;
• The Internet pages you visit before and after entering the Website;
• The links you follow and time spent on the Website;
• Your IP address
• The location from which you visit the Website and browsing statistics.

In order to use certain services on this Website, the Pérez-Llorca Group can request certain personal data from the User (usually a first name, last name, e-mail, company, position and professional contact details). In these cases, the Pérez-Llorca Group will provide the user with the relevant Privacy Notice for processing their data before proceeding to process it.

Lastly, please note that we will not collect or process sensitive personal data through the Website.

What do we use your personal information for?

We will process the personal data we collect for the following purposes:

Primary purposes:

1. to resolve queries raised by the User through the Website in the “contact” section.
2. to improve the User’s browsing experience and the management of the Website itself
3. to manage their application in recruitment processes.
4. if you expressly request us to do so, to include you in our job bank.

Secondary purposes:

1. to send legal publications, communications of activities or invitations to events;

If you do not wish your personal data to be processed for any of the secondary purposes described above, you can send us an e-mail to dpo@perezllorca.com, indicating that you do not want us to process your data for whichever secondary purpose.

Personal data will be processed for one year. If this year passes without a reply from the User, the data may be blocked for a period of up to five years in order to meet any obligations that may arise from the processing described in this section. Following the expiry of this retention period, the personal data will be deleted.

Use of cookies, web beacons or other technologies

Our website uses remote and local electronic, optical and other technologies that allow it to collect personal data automatically and simultaneously when the user interacts with it, including cookies and web beacons to facilitate navigation.

Cookies and other similar devices, such as web beacons, pixels, web bugs, etc. are text or image files that are installed in the user’s browser when the user accesses an online service.

Cookies allow, among other things, for the storage and retrieval of information about the user, their browser, their devices and their activity on the service they are connected to.

Web beacons are images embedded in a web page or email which can be used to monitor a visitor’s behaviour, storing information such as the user’s IP address, the duration spent interacting with the page and the type of browser used.

There are many types of cookies. Below are explanations of some of the types of cookies, although this does not necessarily mean that this service uses all of these types of cookies:

a) Depending on the entity that manages the cookies:

• First-party cookies: these are sent to the user’s device or terminal by the equipment or domain belonging to and managed by the owner of a service.
• Third-party cookies: these are sent to the user’s device or terminal from a computer or domain that is not managed by the owner of a service, but by a third party that will process the information obtained through the cookies.

b) Depending on shelf life:

• Session cookies: these are cookies that collect and store data when the user accesses a service and cease to exist once the user leaves the service.
• Persistent cookies: these are cookies that have a duration determined in time by the service provider. The shelf life can vary from a few minutes to several years. They are used to store and retrieve certain parameters each time the user visits a service.

c) Depending on their purpose:

• Technical cookies: these are essential and strictly necessary for the correct functioning and use of the different options or services offered by those responsible for them. For example, the cookies for session maintenance, response time management, performance or validation of options, use of security features, etc.
• Personalisation cookies: these are cookies that allow the user to specify or personalise some of the characteristics of a service, such as the language, regional settings or browser type.
• Analytics cookies: these are cookies that allow the number of unique visitors to be counted and the use of a service to be analysed in order to measure interest in it or in certain areas of it. For example, an analytics cookie would be used to monitor the geographical areas from which the highest percentages of users visit the website, which product or service is most popular, etc.
• Advertising cookies: these are cookies that handle the management of advertising spaces in a service.
• Behavioural advertising cookies: these are cookies that handle the management of advertising spaces in a service. They store information on the behaviour of the users of a service, in order to then display personalised advertising.

d) Other technologies:

• Pixels, web bugs or trackers: also known as tracking pixels, pixel tags or web beacons. These are tiny 1×1 pixel transparent images that are inserted into a service in order to measure activity. Once a specific page from a service is loaded in a browser, the image will load and this data can be measured. Tracking pixels generally make it possible to determine the path a particular user IP has taken in an online service.
• HTML5 storage: this consists of taking advantage of the capabilities of HTML5 technology to store certain parameters in the user’s browser that can be used to identify the browser itself.
• Local shared objects (LSO): also known as “flash cookies”, this is the storage of information without cookies on the user’s computer, taking advantage of Adobe Flash Player technology.
• ETags: this is an HTTP protocol mechanism that allows the validation of the cache that the user stores in their web browser. This technology is mainly used to save bandwidth, avoiding duplicate content downloads. However, it can also be used to recognise the user’s browser.
• Canvas fingerprinting: this involves generating a unique shape in the user’s browser using the HTML5 web standard technology to identify the user’s device.
• Source detection: this technique consists of identifying the source configuration of the user’s computer to obtain a unique computer ID.
• Browser cache: as its name suggests, this technique consists of storing information in the browser cache.
• WebGL: this technique makes it possible to take advantage of the capabilities of modern browsers to render 3D images, to obtain a unique identification of the computer due to the different configurations available.

Please note that we use cookies and web beacons to collect personal information from you.

What technologies do we use?

Specifically, this online service uses cookies and other similar devices for the following purposes:

Specifically, this online service uses cookies and other similar devices for the following purposes:

(1) They allow the website to be monitored using the Google Analytics tool, which is a service provided by Google to obtain information on user access to websites. Google, Inc., a company from Delaware whose main office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States. Some of the data stored for further analysis are: the number of times the user has visited the website, dates of the user’s first and last visit, the duration of the visits, the page from which the user has accessed the website, the search engine that the user has used to reach the website or link they have selected, the place in the world from which the user has accessed it, etc. The configuration of these cookies is predetermined by the service offered by Google, which is why we suggest you consult the Google Analytics privacy page http://www.google.com/intl/es/policies/privacy/#application and https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage to obtain more information about the cookies you use and how to disable them (bearing in mind that we are not responsible for the content or the veracity of other owners’ websites).

The information obtained through these cookies is stored on Google servers located in the United States of America. By consenting to the use of these cookies, you also consent to the international transfer of your personal data to Google in the United States of America.

However, Google is part of the Web Choices tool, through which you can disable the use of its cookies: http://optout.aboutads.info/.

You can also prevent the installation of Google Analytics cookies with the following browser extension.

How do you disable or delete cookies?

When accessing the service for the first time on the Website, the User will see a cookie notice informing them how they can give or refuse their consent.

In the event that the User has given their consent, they may at any time disable or delete the aforementioned cookies by configuring the browser options used on their device or terminal.

However, Users should bear in mind that if they reject or delete cookies, we will not be able to maintain their preferences and some features will not be operational, so we will not be able to offer them personalised services and each time they use the service they will be considered a new user who will be asked to authorise the use of cookies.

Please see below for links with information on how to disable cookies and similar in the most popular browsers:

• Cookie settings for Google Chrome
• Cookie settings for Mozilla Firefox
• Cookie settings for Internet Explorer
• Cookie settings for Safari
• Cookie settings for Microsoft Edge

How does the use of cookies affect the protection of the user’s personal data?

Most cookies collect anonymous information, which does not allow the User’s identity to be obtained, although some of the codes included are used to identify or individualise the browser of the device used, and personal data protection regulations may apply. Therefore, we inform you that the information obtained through cookies will be processed for the purposes indicated in this Privacy Notice. Likewise, this information will also be processed by the companies that provide cookies for the purpose indicated in their respective privacy policies.

However, bearing in mind that these codes do not allow the identification of the User, the rights of access, rectification, cancellation, and objection recognised in the legislation on personal data protection will not be applicable unless the User is able to provide additional information that allows their identity to be linked to their cookies’ identification codes.

Who do we transfer your personal data to?

We may transfer your personal data within the national territory and abroad, in accordance with the following:

How can you access, rectify, cancel or oppose the processing of your personal data (ARCO rights)?

You can exercise your ARCO rights by submitting a free and duly signed letter addressed to the Data Protection Officer by email to dpo@perezllorca.com with the following details:

• Data subject’s name, address, telephone number and email address;
• A copy of the subject’s valid official identification (voter ID, passport, or military ID) and, if applicable, that of their representative;
• If you are acting as the data subject’s representative, a copy of the public instrument that contains your authority to act or a power of attorney signed by the data subject, their representative, and two witnesses;
• A clear and concise description of the data that you want to access, rectify, cancel, or oppose. If you need to rectify your personal data, please provide specific details of the requested modification and attach supporting documentation;
• Any information that will aid in locating your personal data.

You may obtain the personal data requested through electronic documents in conventional formats or by any other legitimate means that guarantees and accredits the effective exercise of the right requested.

The Data Protection Officer is responsible for responding to requests from data subjects to exercise their ARCO rights, and will do so within a maximum of twenty (20) working days from the receipt of the request, via the email address indicated by the data subject in said request.

If appropriate, the Data Protection Officer will comply with the request within fifteen (15) working days of the initial response to their request. It is understood that, after notifying the person who made the request, these time limits may be extended by up to a further twenty (20) working days if the circumstances so warrant.

If the information provided in the request is incorrect or insufficient, or if the relevant supporting documents are not provided, we may, within five (5) working days of receipt of the request, ask for the information or documents necessary to process it. Ten (10) working days will be given to respond to our request, starting from the day following the day it is received. Failure to respond within this time limit will be considered as a non-submission of the request.

If you wish to know more details about the procedure for exercising these ARCO Rights, you can send an e-mail to the Data Protection Officer at the abovementioned e-mail address.

How can you withdraw your consent to the processing of your personal data?

You may revoke any consent that you may have given us for processing your personal data by sending a duly signed letter addressed to the Data Protection Officer by email to dpo@perezllorca.com with the following details:

• Data subject’s name, address, telephone number and email address;
• A copy of the subject’s valid official identification (voter ID, passport, or military ID) and, if applicable, that of their representative;
• If you are acting as the data subject’s representative, a copy of the public instrument that contains your authority to act or a power of attorney signed by the data subject, their representative, and two witnesses;
• A clear and precise description of the personal data for which consent is to be withdrawn;
• Any information that will aid in locating your personal data.

The Data Protection Officer is responsible for responding to requests from data subjects and will do so within a maximum of twenty (20) working days from the receipt of the request, via the email address indicated by the data subject in said request.

If appropriate, the Data Protection Officer will comply with the request within fifteen (15) working days of the initial response to their request. It is understood that, after notifying the person who made the request, these time limits may be extended by up to a further twenty (20) working days if the circumstances so warrant.

If you wish to know more details about the procedure for exercising these rights, you can send an e-mail to the Data Protection Officer at the abovementioned e-mail address.

How can you limit the use or disclosure of your personal data?

You may limit the use or disclosure of your personal data to prevent it from being used or disclosed for purposes other than those which gave rise to, or are necessary for, your legal relationship with the Data Controller. If you wish to limit the use or disclosure of your personal data, you must send an email to dpo@perezllorca.com in order to be added to the internal opt-out list maintained by the Data Controller.

How do we protect your personal data?

The Data Controller has adopted the security levels of personal data protection legally required by current legislation, and has installed the administrative, physical and technical measures available to ensure the security of your personal data and prevent its destruction, loss, misuse, alteration, unauthorised access and theft. In determining these measures, criteria such as the risk inherent in the type of personal data, the sensitivity of the data, the possible consequences of a breach, the scope, context and purposes of the processing and technological developments have been taken into account.

If the User considers that their right to the protection of personal data has been violated, they may file a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (www.inai.org.mx).

How can you find out about changes to this Privacy Notice?

This Privacy Notice may be modified, changed or updated as a result of new legal requirements, our own needs for the services we offer, our privacy practices, or for other reasons.

If there is a change to this Privacy Notice, we will notify you via our website www.gcsc.com.mx in the Privacy Notice section.