For work purposes

I. WHAT IS PERSONAL DATA?

It is information concerning an identified or identifiable natural person, expressed in numerical, alphabetical, graphic, photographic, acoustic or any other form, which may include but is not limited to: (i) general data such as full name, address, fixed and mobile telephones, photograph, Federal Taxpayers Registry (RFC), Unique Population Registry Code (CURP), affiliation number to the Mexican Social Security Institute, gender, nationality, place and date of birth, electronic mail address (e-mail), occupation, academic, technical and/or professional training, work experience, social, family conditions, marital status, number of children, personal references from third parties; (ii) data of a patrimonial and/or financial nature such as economic and credit situation, income level, bank account data and Interbank Code number; and (iii) sensitive personal data such as those related to union membership, racial or ethnic origin, chronic, degenerative, infectious, sexually transmitted, and/or terminal diseases, sexual preference, political opinions, which in case of being required we will obtain your express written consent for the treatment of such sensitive personal data. Hereinafter the data will be referred to as “Personal Data”.

PiSA may request the aforementioned information for the objectives listed below, and may retain copies of the relevant paperwork; all of this information will be protected with the appropriate administrative, technical, and physical security measures to ensure your Personal Data is protected.

II. WHAT DO WE USE YOUR PERSONAL DATA FOR?

In the case of labor recruitment, PiSA will gather your freely given and voluntarily provided Personal Data only for the purposes listed below that are associated with its hiring and selecting candidates for open positions, professional practices, staff services, and overall enhancements to the workplace, like:

I. The assessment as a possible applicant for any role in your company, temporary or permanent, as an employee, trainee, intern, or intern, as appropriate; this evaluation may include, but is not limited to, cognitive, clinical, medical, and/or psychometric tests.
II. The signing and completion of a work contract, or partnership agreement, if one is a trainee, intern, or recipient of a scholarship, if appropriate.
III. Providing a range of services and benefits to staff members, including savings banks, insurance, health care, support programs, and campaigns for staff members, trainees, interns, and scholarship recipients.
IV. Constant development of our human resources and internal procedures.
V. Generally for adherence to duties resulting from the work connection, including those related to law, taxes, labor, social security, and other matters
VI. For any legal, administrative, or other processes in which the owner of the personal data is involved, if relevant.

It is crucial that you remember that without your Personal Data, we would be unable to fulfill the reasons for which they are necessary and, in that scenario, we would not be held accountable for the successful accomplishment of those aims.

Following the completion of the processing of Personal Data, the data will be frozen for the exclusive purpose of identifying any liabilities arising from its processing, up until the contractually or legally mandated statute of limitations period. The Personal Data will be deleted from the associated Database when this time has passed and may not be processed during that time.

III. HOW DO WE COLLECT PERSONAL DATA?

All legal requirements, including those regarding legality, quality, consent, information, purpose, loyalty, proportionality, and responsibility, are followed when collecting personal data.

In person or via optical, auditory, or visual means; or through any other legally permitted technology, like our website or online services; printed job applications, resumes; socioeconomic studies; medical and psychometric evaluations; registration forms; changes to or cancellations of insurance; bonds; support programs; savings bank; satisfaction surveys; work environment; complaints and suggestions mailbox; social responsibility; health campaigns; and performance evaluations are just a few of the ways that personal data will be obtained from the holder.

Furthermore, in order to verify and confer with you regarding the accuracy and truthfulness of the Personal Data you supply, we may also gather information from other legally-permitted sources, including public databases of any public or private organization or agency, job boards, labor or phone directories, references from other businesses or individuals, and job boards.

We also take security and confidentiality precautions for the treatment of third parties whose personal data we get from you, in compliance with this Privacy Notice.

IV. WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

Only PiSA’s subsidiaries, affiliates, and carefully chosen third-party suppliers with whom PiSA enters contracts may receive your Personal Data. These parties are required to comply with the Recruitment and Selection process, as well as PiSA’s hiring practices, payroll processing, tax filings, distribution of assets and work tools, benefits, and assessments of all kinds, including clinical and medical ones. If needed by the appropriate authority or to comply with the law, PiSA may divulge or grant access to the Personal Data you submit to us. Without your previous approval, we will never promote, sell, or rent any personal information about you to a third party.

We may gather and store the Personal Data you give us in a database that is solely held by PISA.

We recognize that you have explicitly indicated by signing this Notice that you have no objections to the transfer of your personal information using the channels we have made available to you and informed you of in accordance with this Notice, and that you have given your consent to the transfer of that information.

V. HOW DO WE PROTECT YOUR PERSONAL DATA?

Unless this Privacy Notice is amended, personal data will be treated with the utmost confidentiality and won’t be used for anything else the purposes listed above.

PiSA
has the administrative, technical, and physical safeguards in place to protect your personal information from loss, damage, alteration, destruction, use, access, or unauthorized processing. We demand that our suppliers and service providers, including those that are PiSA subsidiaries or affiliates, take similar precautions.

VI. WHO IS THE PERSON IN CHARGE OR AREA RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA?


PiSA
has designated Efma y Asociados, S.C. as the person in charge of personal data (the ““Privacy Officer”), ”), with address at Av. España No. 1809, Col. Moderna, C.P. 44190, Guadalajara, Jalisco, with office hours from 8:30 to 18:00 hours from Monday to Friday, e-mail privacidad@pisa.com.mx, direct telephone (33) 32 68 84 11.

VII. HOW CAN YOU EXERCISE YOUR RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION, OR OPPOSITION, IN ACCORDANCE WITH THE PROVISIONS OF THE LAW?

You may exercise your ARCO rights (access, rectification, cancellation, and/or opposition) by contacting the Privacy Officer directly via email at privacidad@pisa.com.mx. The ARCO request may be made through the application form that you will find on PiSA’s website: www.pisa.com.mx,
or by free writing which must contain at least: (i) the name and address of the holder or other means to communicate the response to your request (ii) documents proving your identity or, where appropriate, the legal representation of the holder (iii) clear and precise description of the Personal Data in respect of which it seeks to exercise any of the rights (iv) any other element or document that facilitates the location of personal data, as well as any other document required by law at the time of submission of the request.

You can get in touch with the Privacy Officer directly for more information about exercising your ARCO rights; their details are listed in section VI of this Privacy Notice.

VIII. WHEN CAN YOU EXERCISE YOUR RIGHTS ARC?

As of January 6, 2012, you may file a request to exercise your ARCO rights in accordance with the Law and the Regulations. If PiSA, acting through the Privacy Officer, does not respond to your request within the 15-day period stipulated by the Law, or if PiSA does not respond within the specified time frame, you may then start the ARCO rights protection procedure before the Federal Institute of Access to Information and Protection of Personal Data (IFAI).

IX. HOW CAN YOU REVOKE YOUR CONSENT TO THE PROCESSING OF PERSONAL DATA?

You have the right to withdraw your consent for the processing of your personal data at any time. To do so, send a written notice to the Privacy Officer using the email address or courier address listed in section VI of this Notice.

If we decide it is suitable, we will notify you of the request’s origin within a maximum of 15 business days. If not, the information will become effective within 15 business days of the date the response is sent to the email address you have provided us.

X. CHANGES TO THE PRIVACY NOTICE:

This Privacy Notice is subject to change at any moment, at our discretion. You may choose to receive notifications via any of the following channels in the event that this Privacy Notice changes: (i) visible announcements in our establishments (wall newspaper); (ii) Staff Services modules, (iii) website www.pisa.com.mx, , (iv) via email or at the registered address you provide us. We will not be responsible if you do not receive notification of a change to this Privacy Notice, if there is a problem with your e-mail account, data transmission over the Internet, or for any reason not attributable to PiSA. For your security, please review the content of this Privacy Notice at any time by sending a request to our e-mail account: privacidad@pisa.com.mx

This Privacy Notice conforms to all applicable laws and regulations.

Date of last update to this Privacy Notice: 01/10/2013

CONSENT OF THE OWNER:

You certify that the Personal Data—that is, the general data, sensitive personal data, and/or financial and/or patrimonial data—that is covered by this Privacy Notice was obtained freely, voluntarily, and voluntarily, and that you give PiSA permission to process the data in accordance with the law and this notice.

NAME OF OWNER:

SIGN:

DATE: