I.- IDENTIFICATION OF THE PERSON RESPONSIBLE:

ORGANIKAJ, SA. DE CV with address located at Río Magdalena 101-4, Colonia Tizapán, Álvaro Obregón delegation, Mexico City, CP 01090; has developed a privacy policy that we hope will help you understand how your personal information is collected, used, transferred and stored, in accordance with articles 8, article 16 Constitutional and in compliance with the Federal Law on Protection of Personal Data Held by Private Parties.

Therefore, we inform you that we are the Controller of the treatment, use and protection of your Personal Data in our possession. In this sense, to process your request to revoke consent to the processing of your personal information or to exercise your ARCO rights at the indicated address, or if you wish to contact you by e-mail you can do so contacto@layatequila.mx

II.- FOR THE PURPOSES OF THIS NOTICE IT IS UNDERSTOOD:

Personal data:

Any information concerning an identified or identifiable natural person. We collect your personal data directly when you provide it to us by various means, at our facilities, by telephone, such as when you participate in our promotions or when you give us information so that we can provide you with a service or purchase our products.

Current applicable legislation:

Law: Federal Law on Protection of Personal Data Held by Private Parties. (LFPDPPP) Regulation: Regulations of the Federal Law on Protection of Personal Data Held by Private Parties. (RLFPDPPP)

Principles and duties governing the processing of your personal information:

We collect your personal data for the purposes mentioned in this Privacy Notice, these will be treated observing the principles and duties set forth in the law which are: legality, consent, information, quality, purpose, loyalty, proportionality, responsibility, confidentiality and security.

Sensitive personal data:

Those personal data that affect the most intimate sphere of its owner, or whose improper use may give rise to discrimination or entail a serious risk for the owner. In particular, those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union membership, political opinions, sexual preference are considered sensitive.

Personal financial or property data.

If your payment method is by bank card, you will be asked for the following information, which in terms of article 8 of the Federal Law on Protection of Personal Data Held by Individuals, is considered within the category of personal financial or financial data. assets: The name of the cardholder, the card number, the expiration date of the card and the name of the bank.

The Law requests that in the event that the personal data collected includes sensitive or patrimonial and/or financial data, the Controller carries out acts that collect and constitute the express consent of the owner as provided in the second paragraph of article 8 of the Law and other applicable legislation, either by signing the corresponding format, whether printed, or using electronic means, through direct responses and its corresponding processes for the formation of consent, by way of example but not limitation, through express consent and provision by the Owner of personal data.

Tacit and Express Consent.

Tacit consent results from facts or acts that presuppose it. In such a way that, in the absence of your refusal, we will take into account your consent in those terms. In terms of the provisions of article 9 of the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), your express consent is requested for the processing of sensitive personal, financial and patrimonial data, indicating whether you accept or not the treatment.

Duration of the processing of your personal data.

Your personal information will be processed only for the time necessary in order to fulfill the purposes described in the Privacy Notice made available to you and, where appropriate, in accordance with the provisions of the respective legal provisions. However, in any provision of this Privacy Notice, the Owner acknowledges that his or her consent will not be required for the processing of his or her personal data by the Controller or third parties in any of the cases indicated in article 10 of the LFPDPPP.

Special data

We know the importance of protecting privacy and personal data; Therefore, we do not collect the data of people with different abilities and elderly people without prior consent from the guardian and in the case of minors without prior consent from the parent or guardian, and may, at any time, moment request the cancellation of personal data in accordance with the provisions of this notice.

III.- PURPOSES AND/OR USES OF PERSONAL DATA

Your personal data will be used depending on the particular case in which it is provided or collected, always in accordance with this Privacy Notice or its updates that, at the time, are made available to you to fulfill the following necessary purposes:

If you are our client or potential client.

If you are our supplier or in the process of becoming one.

By video surveillance within our facilities.

For access to our facilities.

On our website.

In contracts with third parties.

By making this privacy notice available to the Owner and not expressing any opposition, it will be understood that the Owner grants the Controller his consent to carry out the processing of the Personal Data that has been provided and/or those that due to any of the purposes established in this notice provide in the future.

How we collect your personal information:

We collect personal data from the Owner through direct and/or personal delivery by any means of contact between the Owner and the Controller or its Managers. It may also collect personal data indirectly through publicly accessible sources and other available sources permitted by law, such as telephone directories or public databases on the Internet and whose use will be for the previously consented purpose.

The personal data that will be collected and processed are:

(i) Identification data (including those derived from your own physical characteristics); (ii) contact details; (iii) asset data; (iv) financial data; (v) academic data; and, (vi) employment data.

Investigations and actions may be carried out that they consider necessary, in order to verify, through any third party, agency or authority, the veracity of the data that was provided.

Your Personal Data will be treated based on the principles and duties set forth in the law, which are: legality, consent, information, quality, purpose, loyalty, proportionality, responsibility, confidentiality and security. The confidentiality of your personal data will be maintained by effectively establishing and maintaining administrative, technical and physical security measures to prevent its damage, loss, alteration, destruction, use, access or improper disclosure.

1.- IF YOU ARE OUR CLIENT OR POTENTIAL CLIENT:

Your personal data will be used for the following purposes:

If you are our client or potential client: To comply with obligations derived from a commercial legal relationship that you have with you or may have; that is, provide the services and products required by you, to enforce and/or execute a contract, for statistical purposes, to inform about changes or new products or services that are related to what was contracted or acquired by our clients, evaluate the quality of the service, determine the quality of our products and services, exchange information necessary to attend to internal, external and authority audits; as well as, for commercial, marketing, advertising and/or commercial prospecting purposes and to grant benefits and comply with obligations contracted with our clients as well as carry out internal studies on consumer habits.

2.- IF YOU ARE OUR SUPPLIER OR IN THE PROCESS OF BEING ONE:

Your personal data will be used for the following purposes:

Those necessary for the commercial legal relationship with the Controller, evaluate it; and, where appropriate, hire it, in the future, as a supplier, and keep control of our contracted suppliers and their services for their subsequent registration and administration in systems, make transfers with your personal data to third parties in terms of the privacy notice.

3.- BY VIDEO SURVEILLANCE WITHIN OUR FACILITIES.

The images obtained by the video cameras located within our facilities are for your safety and that of all our visitors and collaborators through their permanent supervision or monitoring. Images are kept for a maximum of 30 days for security reasons, after which they are permanently deleted.

4.- FOR ACCESS TO OUR FACILITIES.

To enter our facilities we request the following information: full name, name and department of the person you visit, you are given a visitor badge.

5.-ON OUR WEBSITE.

We inform you that on our website we use cookies, web beacons or other technologies, through which it is possible to monitor your behavior as an internet user, as well as provide you with a better service and experience when browsing our website. We will use the personal data that we collect through these technologies for statistical and marketing purposes and to provide the user with faster access to the site. The www.layatequila.mx cookies are only associated with an anonymous User and their computer and do not provide references that allow the User’s personal data to be deduced.

The personal data we obtain from these tracking technologies are the following: Identifiers, User’s preferred language, region in which the user is located, user’s browser type, user’s operating system type, start date and time and end of a user session, web pages visited by a user, searches performed by a user; and, advertising reviewed by a user.

To learn how these technologies can be disabled in major browsers, see the following medium:

Google Chrome

Select the Chrome menu icon > Select Settings > At the bottom of the page select Show advanced options > In the “Privacy” section, select Content settings > Select Do not allow site data to be saved > Select Done.

Internet Explorer

Click the Tools button and then Internet Options > Tap or click the Privacy tab > Settings > block all cookies and then tap or click OK.

Safari

To set up Safari cookie blocking in iOS 8, Settings > Safari > Block cookies and select Always block. In iOS 7 or earlier, select Never, Advertising & Third Parties, or Always.

Firefox

Click the Menu button and choose Options > Select the Privacy panel > In Firefox choose Use custom settings for history > Uncheck the Accept cookies option to disable them > Close the page. Any changes you have made will be saved automatically.

For other types of browsers or versions, see the help section in your browser.

6.- IN CONTRACTS WITH THIRD PARTIES

In the preparation of contracts with third parties, such as lease contracts and contracts for the provision of professional services and others of a similar nature, we undertake to respect and give adequate treatment to the personal information resulting and necessary when entering into said contract, in accordance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties, having this privacy notice in view of the contracting parties, without in any case expressing any refusal regarding its content, expressing express consent with the signing of said contract.

IV.-LIMITATION OF THE USE OR DISCLOSURE OF YOUR PERSONAL DATA

If you wish to limit the use or disclosure of your personal information in our possession, the mechanism that has been implemented to exercise these rights is by sending an email to the following address:

contacto@layatequila.mx with the subject: REQUEST FOR LIMITATION OR DISCLOSURE OF PERSONAL DATA and with the following information:

Name of the owner.
Statement of facts
Owner’s address or email address to communicate a response to the request.
Documents that prove identity or personality to submit the application, which may be:

Credential of the National Electoral Institute.
National Military Service Card.
Professional license.
Postal identity card (issued by SEPOMEX).
Certificate or proof of studies.
Proof of residence.
IMSS membership credential.
ISSSTE affiliation credential.
Immigration document that confirms the foreigner’s legal stay in the country.

The original document must be displayed for comparison; To compare the identity document, it can be done by appointment, by email: contacto@layatequila.mx and, displayed at Río Magdalena 101-4, Colonia Tizapán, Álvaro Obregón delegation, Mexico City, CP 01090.

In the event that the owner makes effective his limitation of use or disclosure of his personal data through a representative, apart from the accreditation of the identity of both, in the aforementioned terms, we must identify the representation through the following means:

Public instrument stating the representation;
Power of attorney signed before two witnesses, or
Statement in appearance of the owner.

V.- REVOCATION OF YOUR CONSENT FOR DATA PROCESSING

You have the right to revoke the consent you have given us for the processing of your personal information, whether with tacit or express written consent. The mechanism that has been implemented is through the presentation of the respective request, sending an email to the following address:

contacto@layatequila.mx with the subject: REQUEST FOR REVOCATION OF CONSENT FOR THE PROCESSING OF PERSONAL DATA and with the following information.

Name of the owner.
Statement of facts
Owner’s address or email address to communicate a response to the request.
Documents that prove identity or personality to submit the application, which may be:

Credential of the National Electoral Institute.
National Military Service Card.
Professional license.
Postal identity card (issued by SEPOMEX).
Certificate or proof of studies.
Proof of residence.
IMSS membership credential.
ISSSTE affiliation credential.
Immigration document that confirms the foreigner’s legal stay in the country.

The original document must be displayed for comparison; To compare the identity document, it can be done by appointment, by email: contacto@layatequila.mx and, displayed at Río Magdalena 101-4, Colonia Tizapán, Álvaro Obregón delegation, Mexico City, CP 01090.

In the event that the owner makes effective the revocation of his consent for data processing through a representative, apart from the accreditation of the identity of both in the aforementioned terms, we must identify the representation through the following means:

Public instrument stating the representation;
Power of attorney signed before two witnesses, or
Statement in appearance of the owner.

The deadline to respond to your request is 20 business days and we will inform you of its origin through the means you provided us to notify you.

VI.- TRANSFER OF YOUR PERSONAL INFORMATION TO THIRD PARTIES

We undertake not to transfer your personal information to third parties without your consent and to take into account the exceptions provided for in article 37 of the Federal Law on Protection of Personal Data Held by Private Parties; as well as, to carry out this transfer in the terms established by that law.

Except in the cases of article 37 of the Law:

Article 37.- National or international data transfers may be carried out without the consent of the owner when any of the following cases occur:

When the transfer is provided for in a Law or Treaty to which Mexico is a party;

When the transfer is necessary for prevention or medical diagnosis, the provision of healthcare, medical treatment or the management of healthcare services;

III. When the transfer is made to holding companies, subsidiaries or affiliates under the common control of the controller, or to a parent company or to any company in the same group as the controller that operates under the same internal processes and policies;

When the transfer is necessary by virtue of a contract concluded or to be concluded in the interest of the owner, the person responsible and a third party;
When the transfer is necessary or legally required for the safeguarding of a public interest, or for the procurement or administration of justice;
When the transfer is necessary for the recognition, exercise or defense of a right in a judicial process, and

VII. When the transfer is necessary for the maintenance or fulfillment of a legal relationship between the person responsible and the owner.

We will only transfer your personal data to third parties, national or foreign, who are legally or commercially related to us to fulfill the purposes described in the Privacy Notice and in its updates made available to you, so we may transfer your personal data in the cases provided for and authorized by Law and in accordance with the following:

To the Tax Administration Service, by virtue of the processes of issuing and sending Digital Tax Receipts over the Internet.
To people affiliated and/or commercially related to us.
To different authorities to resolve requirements or to include these in some type of legislation or regulations.

Your personal data will be processed only for the time necessary in order to fulfill the purposes described in the Privacy Notice that is made available to you; and, where appropriate, in accordance with the provisions of the respective legal provisions.

VII.- MODIFICATIONS TO THE PRIVACY NOTICE

We reserve the right to make, at any time, modifications or updates to this privacy notice, to address legislative developments, internal policies or new requirements for the provision or offering of our services or products.

These modifications will be available to the public through the following means:

On our website: www.layatequila.mx

VIII.- RIGHTS OF THE OWNER OF PERSONAL DATA

You can exercise your rights of access, rectification, cancellation and opposition (rights “ARCO”) regarding your personal and/or sensitive data. Likewise, you can limit the use or disclosure of your personal data and revoke the consent you have given for its processing, as long as the processing is not a necessary processing or results from a legal relationship.

ARCO RIGHTS CONSIST OF:

ACCESS. – That you are informed which of your personal data our personal database system contains, what it is used for, the origin and communications that have been made with it; and, in general, the conditions and generalities of the treatment. The access obligation will be considered fulfilled when:

The data is made available to the owner of the personal data or

By issuing simple copies, magnetic, optical, sound, visual, holographic media, electronic documents or any other media or technology that is considered appropriate.

RECTIFICATION. – That your personal data be corrected or updated if it is inaccurate or incomplete.

CANCELLATION. – That your personal data be deleted, totally or partially, from our database system”. This request may give rise to a blocking period after which the data will be deleted.

OPPOSITION. – Oppose for legitimate reasons the processing of your personal data by our company.

If you wish to access the content of your personal data, rectify it, cancel it or oppose its use, the mechanism that has been implemented for the exercise of said rights is through the presentation of the respective request, sending an email to the following address:

contacto@layatequila.mx with the subject: REQUEST FOR: ACCESS, RECTIFICATION, CANCELLATION OR OPPOSITION, (as applicable), and with the following information:

Name of the owner.

Statement of facts

Owner’s address or email address to communicate a response to the request.

Documents that prove identity or personality to submit the application, which may be:

Credential of the National Electoral Institute.
National Military Service Card.
Professional license.
Postal identity card (issued by SEPOMEX).
Certificate or proof of studies.
Proof of residence.
IMSS membership credential.
ISSSTE affiliation credential.
Immigration document that confirms the foreigner’s legal stay in the country.

The original document must be displayed for comparison; To compare the identity document, you can make an appointment by email: contacto@layatequila.mx and, be displayed at Río Magdalena 101-4, Colonia Tizapán, Álvaro Obregón delegation, Mexico City, CP 01090.

In the event that the owner makes his rights effective through a representative, apart from proving the identity of both in the aforementioned terms, we must identify the representation through the following means:

Public instrument stating the representation;
Power of attorney signed before two witnesses, or
Statement in appearance of the owner.
Description of personal data over which you intend to exercise any ARCO right.
Any other element that allows the location of personal data and attention to the request.

If you consider that your right to protection of personal data has been harmed by any conduct of our employees or our actions or responses, or you presume that in the processing of your personal data there is any violation of the provisions provided for in the Federal Law on Data Protection. Personal Data Held by Private Parties, you may file the corresponding complaint or complaint with the INAI, for more information visit: www.inai.org.mx

The processing of your personal data under our possession will be carried out in accordance with these terms and conditions, so from this moment it is understood that you expressly authorize the Controller and the Processor to process your personal information for this purpose, until you do not express your opposition through any of the elements indicated by the Law. For any matter related to the processing of your personal information that has not been dealt with in this Comprehensive Privacy Notice, please contact us via email: contacto@layatequila.mx

Last update: May 25, 2021