Customers

I. WHAT IS PERSONAL DATA?

It is information concerning an identified or identifiable natural person, expressed in numerical, alphabetical, graphic, photographic, acoustic or any other form, which may include but is not limited to: (i) general data such as full name, work and/or private address, fixed and mobile telephones, fiscal address, Federal Taxpayer Registry (RFC), Unique Population Registry Code (CURP), electronic mail address (e-mail), occupation, personal references; (ii) data of a patrimonial and/or financial nature such as bank account data and Interbank Code number, bank references. Hereinafter, the aforementioned data will be referred to, as a whole, as “Personal Data”.

For the purposes indicated below, PiSA may request and keep copies of your official ID, your bank statement, proof of address and RFC card, which will also be safeguarded with the necessary technical, administrative, and physical security measures to protect your Personal Data.

II. WHAT DO WE USE YOUR PERSONAL DATA FOR?

PiSA will collect the Personal Data that you freely and voluntarily provide, solely and exclusively for purposes of: (a) identification, (b) registration, cancellation, incorporation and updating, where appropriate, in PiSA’s databases as a Customer, among which will be included, your purchase history for purely statistical purposes and improvement in the service that PiSA provides to you, (c) evaluation as a potential Customer, (d) preparation and execution of various contracts, such as purchase and sale, consignment, distribution, supply or contract manufacturing, provision of services, among others, according to the requirements of the Customer, (e) compliance with obligations arising from the legal relationship between PiSA and the Customer, (f) payments, (g) information about changes or new products or services that are related to the product or service previously contracted by the Customer, (h) evaluation of the quality of the products or services provided by PiSA, and compliance with its pharmacovigilance obligations, (i) conduct internal studies on consumption habits and credit behavior, (j) contact the Customer personally, via telephone or email for the aforementioned purposes, and (k) if applicable, for administrative, judicial or any other process involving the holder of the Personal Data.

It is important that you keep in mind that if we do not have your Personal Data we would not be able to carry out the purposes for which they are required and in such case we would not have any responsibility for the proper achievement of such purposes.

Once the purpose of the processing of Personal Data is fulfilled, the Personal Data will be blocked for the sole purpose of determining possible liabilities related to its processing, until the legal or contractual statute of limitations period. During such period, the Personal Data may not be subject to processing, and once this period has elapsed, they will be cancelled in the corresponding Database.

III. HOW DO WE COLLECT PERSONAL DATA?

The collection of Personal Data is carried out in compliance with all the principles established by the Law, such as legality, quality, consent, information, purpose, loyalty, proportionality, and responsibility.

The Personal Data will be collected directly from the owner in person or through optical, sonorous, visual means, or any other legally permitted technology, among others, e-mails, web page, service proposals, quotations.

Additionally, for verification and consultation purposes, as well as corroboration of the truthfulness and accuracy of the Personal Data the You provide to us, we may obtain information from other sources permitted by law, such as telephone directories, references from other companies or individuals, public databases of any public or private entity or agency, among others.

IV. WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

PiSA may transfer your Personal Data only to its subsidiaries and affiliates in order to comply with its administrative processes of customer registration, credit history, collection, preparation of agreements, contracts, statistics, business analysis and control. PiSA may disclose or allow access to the Personal Data you provide us, to comply with applicable law or as required by the competent authority. In no event will we market, sell, or rent personal information about you to a third party without your prior consent.

The Personal Data you provide to us may be compiled and stored in a database owned exclusively by PiSA.

We understand that you have given your consent to the transfer of your Personal Data, having expressly stated, through the signature of this Notice, that there is no opposition to the transfer of your Personal Data through the means that we have made available and made known to you in terms of this Notice.

V. HOW DO WE PROTECT YOUR PERSONAL DATA?

Personal Data will be kept under the strictest confidentiality and may not be used for any purpose other than those mentioned above unless there is a change in this Privacy Notice.

PiSA has the necessary and sufficient security, administrative, technical, and physical measures to protect your personal data against damage, loss, alteration, destruction, use, access, or unauthorized processing, which we require to be fulfilled equally by our service providers or suppliers, even if they are subsidiaries or affiliates of PiSA.

VI. WHO IS THE PERSON IN CHARGE OR AREA RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA?

PiSA has designated Efma y Asociados, S.C. as the person in charge of personal data (the “Privacy Officer”), with an address at Av. España No. 1809, Col. Moderna, C.P. 44190, Guadalajara, Jalisco, office hours from 8:30 to 18:00 hours from Monday to Friday, e-mail privacidad@pisa.com.mx,, and direct telephone number (33) 32 68 84 11.

VII. HOW CAN YOU EXERCISE YOUR RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION, OR OPPOSITION, IN ACCORDANCE WITH THE PROVISIONS OF THE LAW?

You may exercise your ARCO rights (access, rectification, cancellation, and/or opposition) by contacting the Privacy Officer directly via email: privacidad@pisa.com.mx.
The ARCO request may be made through the application form that you will find on the PiSA website www.pisa.com.mx,, or in writing which must contain at least: (i) the name and address of the holder or other means to communicate the response to your request (ii) documents proving your identity or, where appropriate, the legal representation of the holder (iii) clear and precise description of the Personal Data in respect of which it seeks to exercise any of the rights (iv) any other element or document that facilitates the location of personal data, as well as any other document required by law at the time of submission of the request.

For more information regarding the exercise of your ARCO rights, you may directly contact the Privacy Officer whose contact information appears in section VI of this Privacy Notice.

VIII. WHEN CAN YOU EXERCISE YOUR RIGHTS ARC?

In terms of the Law and the Regulations, as of January 6, 2012, you may submit a request to exercise your ARCO rights; within 15 days from the date on which PiSA – through the Privacy Officer – responds to your request or, if after the term established by the Law, PiSA does not respond to your request, then you may initiate the ARCO rights protection procedure before the Federal Institute of Access to Information and Protection of Personal Data (IFAI).

IX. HOW CAN YOU REVOKE YOUR CONSENT TO THE PROCESSING OF PERSONAL DATA?

You may revoke your consent to the processing of your Personal Data at any time, and for such purposes only, you must send a written request to the Privacy Officer, either by courier to the address or email mentioned in section VI of this Notice.

We will have a maximum period of 15 business days to inform you about the origin of the request and if it is appropriate, the same will be effective within 15 business days following the date on which the response is communicated to the email address you provide us for such purposes.

X. CHANGES TO THE PRIVACY NOTICE:

We reserve the right to change this Privacy Notice at any time. In case there is any change in this Privacy Notice, you will be notified by any of the following means: (i) visible announcements in our establishments (wall newspaper); (ii) Staff Services Modules, (iii) Grupo PISA’s website http://www.pisa.com.mx,
, (iv) via email or at the registered address you provide us. We will not be responsible if you do not receive the notification about the change to this Privacy Notice if there is any problem with your email account, data transmission over the Internet, or for any cause not attributable to PiSA. For your security, please review the contents of this Privacy Notice at any time by sending a request to our e-mail account: privacidad@pisa.com.mx

XI. OTHER APPLICABLE REGULATIONS:

The laws and regulations of other countries may impose different requirements for the protection of information in general and personal data collected via the Internet or by any other means. PiSA is located in Mexico and all matters relating to this Notice are governed by the laws of Mexico. If you are located in a country other than Mexico and contact us, please note that any information you provide to us will be transferred to Mexico, and by submitting your information you consent to this transfer and acceptance of this Privacy Notice.
This Privacy Notice complies with the requirements set forth in the Law and the Regulations Date of last update to this Privacy Notice: 01/10/2013

CONSENT OF THE OWNER:

Usted manifiesta que los Datos Personales, esto es, los datos generales y datos patrimoniales y/o financieros que son materia del presente Aviso de Privacidad, han sido obtenidos de manera libre, informada, voluntaria e inequívoca y que Usted consiente a que PiSA lleve a cabo el tratamiento de los mismos en términos de la Ley y de este Aviso.

NAME OF OWNER:

SIGN:

DATE: