Visitors

Information that can be expressed in any format—numerical, alphabetical, graphic, photographic, acoustic, or otherwise—about an identifiable or identifiable natural person includes, but is not limited to: I general information like full name, address, phone number (both mobile and fixed), fiscal address, Federal Taxpayers Registry (RFC), Unique Population Registry Code (CURP), e-mail address, occupation, professional experience, and third-party personal references; (ii) information related to a person’s financial or patrimonial nature, such as bank account information and Interbank Code number. The information will be referred to as “Personal Data” from now on.

PiSA may request your full name, your position, the name of the firm you work for, and an official photo ID for the purposes listed below. This ID will be given back to you upon your departure from our facilities.

In order to identify you, grant you access to our facilities, and, if necessary, make our products available, PiSA will gather any freely given and voluntarily provided Personal Data. In order to grant you access, our company may employ security measures and/or ongoing surveillance, including but not limited to requiring you to present official identification and using closed circuit television and video surveillance cameras. You thereby implicitly consent to having your voice and image recorded and even used for promotional purposes by entering our facilities.

It is crucial that you remember that without your Personal Data, we would be unable to fulfill the reasons for which they are necessary and, in that scenario, we would not be held accountable for the successful accomplishment of those aims.

Following the completion of the processing of Personal Data, the data will be frozen for the exclusive purpose of identifying any liabilities arising from its processing, up until the contractually or legally mandated statute of limitations period. The Personal Data will be deleted from the associated Database when this time has passed and may not be processed during that time.

All legal requirements, including those regarding legality, quality, consent, information, purpose, loyalty, proportionality, and responsibility, are followed when collecting personal data.

The owner will be approached directly to obtain the personal data, and it will also be registered in the visitor’s control book.

Furthermore, in order to verify and confer with you regarding the accuracy and truthfulness of the Personal Data you submit to us, we may also access information from other legally-permitted sources, including phone directories, personal or business references, public databases of any public or private organization or agency, and others.

Your Personal Data may only be sent by PiSA to its affiliates and subsidiaries in order to fulfill its administrative procedures related to visitor registration. If compelled by law enforcement agencies or to comply with applicable laws, PiSA may share or grant access to the Personal Data you submit to us. Without your previous approval, we will never promote, sell, or rent any personal information about you to a third party.

We may assemble and store the Personal Data you give us in a database that is solely held by PiSA.

We recognize that, by not objecting using the channels we have provided and informed you of in accordance with this Notice, you have granted permission for the transfer of your Personal Data.

Unless this Privacy Notice is amended, personal data will be treated with the utmost confidentiality and won’t be used for anything else the purposes listed above.

PiSA has the administrative, technical, and physical safeguards in place to protect your personal information from loss, damage, alteration, destruction, use, access, or unauthorized processing. We demand that our suppliers and service providers, including those that are PiSA subsidiaries or affiliates, take similar precautions.

PiSA has designated Efma y Asociados, S.C. as the person in charge of personal data (the “Privacy Officer”), with an address at Av. España No. 1809, Col. Moderna, C.P. 44190, Guadalajara, Jalisco, office hours from 8:30 to 18:00 hours from Monday to Friday, e-mail privacidad@pisa.com.mx, and direct telephone number (33) 32 68 84 11.

You may exercise your ARCO rights (access, rectification, cancellation, and/or opposition) by contacting the Privacy Officer directly via e-mail: privacidad@pisa.com.mx. The ARCO request may be made through the application form that you will find on PISA’s website www.pisa.com.mx, or in writing, which must contain at least: (i) name and address of the holder or other means to communicate the response to your request (ii) documents proving your identity or, where appropriate, the legal representation of the holder (iii) clear and precise description of the Personal Data in respect of which you seek to exercise any of the rights (iv) any other element or document that facilitates the location of personal data, as well as any other document required by law at the time of submission of the request.

You can get in touch with the Privacy Officer directly for more information about exercising your ARCO rights; their details are listed in section VI of this Privacy Notice.

According to the Law and the Regulations, as of January 6, 2012, you can file a request to exercise your ARCO rights. If PISA, acting through the Privacy Officer, does not respond to your request within the 15-day period specified in the Law, you can then seek protection of your ARCO rights from the Federal Institute for Access to Information and Protection of Personal Data (IFAI).

You have the right to withdraw your consent for the processing of your personal data at any time. To do so, send a written notice to the Privacy Officer at the address or email listed in section VI of this Notice, or by courier.

If applicable, the claim will become effective within fifteen business days of the date the response is sent to the email address you have provided us. We will notify you of the claim’s origin within a maximum of fifteen business days.

This Privacy Notice is subject to change at any moment, at our discretion. You may choose to receive notifications via any of the following channels in the event that this Privacy Notice changes: (i) visible announcements in our establishments (wall newspaper); (ii) Staff Services Modules, (iii) PiSA’s website www.pisa.com.mx, , (iv) via email or at the registered address you provide us. We will not be liable if you do not receive notice of a change to this Privacy Notice, if there is a problem with your e-mail account, data transmission over the Internet, or for any reason not attributable to PiSA. For your security, please review the contents of this Privacy Notice at any time by sending a request to our e-mail account: privacidad@pisa.com.mx

Different standards for the protection of information in general and personal data gathered over the Internet or any other methods may be imposed by laws and regulations in other countries. All subjects pertaining to this Notice are regulated by Mexican law, and PiSA is based in Mexico. If you contact us while visiting from outside of Mexico, please be aware that any information you send will be transmitted to Mexico; by sending us your information, you agree to this transfer and accept the terms of this privacy notice.

Date of last update to this Privacy Notice: 01/10/2013

By failing to expressly object, you acknowledge and agree that PiSA may treat your personal data in accordance with the law and this notice, and that the general data covered by this privacy notice was collected in a free, informed, voluntary, and unequivocal manner.