Santa María Sailing Club Privacy Notice and Protection of Personal Data

Publication date (last update): December 13, 2020

IDENTITY AND ADDRESS OF THE CONTROLLER

In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDP), its Regulations and the guidelines of the privacy notice, the name of the party responsible is the “Club de Vela Santa María” SC, (hereinafter “the Club”) with address at Marina Nacional 201, Valle de Bravo, State of Mexico, CP 51200, who, as party responsible, makes this Privacy Notice available to you (hereinafter referred to as the “Notice”), in order to inform you of the terms under which your personal data will be processed.

CONSENT OF THE OWNER

The Holder declares that this Notice has been made known to him/her by the Club either physically, electronically or aurally, and that he/she has understood and agreed to the terms set forth in this Notice, and therefore gives his/her consent regarding the processing of his/her personal data in accordance with the following:

I. Tacit consent. The Club adheres to the general rule of “tacit consent”, and consent to this Notice shall be deemed to have been given when it is made available and the data of the Owner is provided.

II. Express consent. Only if the personal data collected includes financial or property data, or involves the validation of your voting credential before the National Electoral Institute (INE), or sensitive data in terms of the applicable legislation, the Club will obtain the “express consent” of the Holder by signing the corresponding contract, either in printed format, or using electronic means and its corresponding processes.

PERSONAL DATA WE COLLECT

The Club may collect personal data from the Holder through direct or personal delivery by any means of contact between the Holder and the Club. The Club collects personal identification data, financial and/or patrimonial data, academic and work data, as well as data related to the provision of the services it provides, in accordance with the requested service.

PURPOSE OF PERSONAL DATA

The Club will process the personal data of the Owner in order to have an updated register of members and beneficiaries, as well as of guests, students, diners, and participants in regattas and other activities to provide them with the corresponding services; as well as of suppliers and collaborators to make them known to the users of our services.

REFERRALS AND DATA TRANSFERS

The Club will not forward or transfer the personal data of its members and other users under any circumstances, without the express authorization of the data owner, or when the information is requested by an authority, through a written request, duly founded and motivated.

LIMITATION OF USE AND DISCLOSURE OF INFORMATION

The Club will retain the personal data of the Holder only for as long as necessary to process their requests for information, products or services, as well as to maintain accounting, financial and audit records in terms of the regulations on personal data protection, as well as current commercial, fiscal and administrative legislation. The personal data collected will be protected by appropriate administrative, technical and physical security measures against damage, loss, alteration, destruction or unauthorized use, access or treatment, in accordance with the provisions of applicable legislation. Notwithstanding the foregoing, the Club is not infallible against an attack by unauthorized third parties to gain access to the physical or logical systems of the Holders or the Club or to the electronic documents and files stored in their systems. In such case, the Club will take appropriate action to control any incident, and will therefore not be liable in any case for any damages that may arise from such unauthorized access.

PROCEDURE FOR EXERCISING ARCO RIGHTS AND REVOCATION OF CONSENT

The Holder has, at all times, the right to exercise Access, Rectification, Cancellation and Opposition (hereinafter referred to as ARCO rights) regarding his/her data, as well as to revoke the consent he/she has provided, by submitting a written request, which must contain the following information and documentation:

I. Name of the Owner and address or email to communicate the response to your request.

II. A valid document proving your identity (a simple copy in printed or digital format, depending on the chosen medium, of your voter ID, professional ID, passport or visa). In the event that the exercise is carried out through a legal representative, the documents proving the legal representation of the Holder must be attached (a simple copy in printed or electronic format of the simple power of attorney with the autograph signature of the Holder, the agent and their corresponding valid official identifications - voter ID, professional ID, passport or visa).

III. The ARCO right or rights that you wish to exercise, as well as a clear and precise description of the data in respect of which you seek to exercise any of the ARCO rights.

IV. Optionally, any other element or document that facilitates the location of the personal data of the Owner. In the case of requests for rectification of personal data, the Owner must also indicate the modifications to be made and provide the documentation supporting his/her request.

Personal Data Protection Office To request the form, receive and respond to requests to exercise your ARCO rights, revoke your consent and other rights provided for in the Law, we make the Club's administrative office available to you through the following means: In person: Marina Nacional 201, Valle de Bravo, State of Mexico, CP 51200, Monday to Sunday from 10:00 a.m. to 5:00 p.m. Email: felisfamiliaris@protonmail.com In the event that the information provided in your request is erroneous or insufficient, or the corresponding accreditation documents are not attached, we may request, within ten business days following receipt of the request, that you provide the elements or documents necessary to process it. The Owner will have ten business days to respond to the request, counted from the day after receiving it. If no response is provided within this period, the corresponding request will be deemed not to have been submitted. The Club will respond to the Holder within a maximum period of twenty business days, counting from the effective date on which the request was received, so that, if appropriate, it may be implemented within fifteen business days following the communication of the response. In all cases, the response will be given by the same means by which the request was submitted or, where appropriate, by any other means agreed with the Holder. The aforementioned deadlines may be extended in accordance with the LFPDP.