Privacy Policy
COMPREHENSIVE PRIVACY NOTICE
1. IDENTITY AND ADDRESS OF THE RESPONSIBLE PARTY
This Privacy Notice (hereinafter referred to as the "Notice") sets forth the terms and conditions under which Tabasa Import Export Ltd, S.A. de C.V., commercially known as "Tabasa," hereinafter referred to as "Tabasa," located at Boulevard 5 de Febrero No. 10-1, Colonia San Francisco in San Andrés Tuxtla, Veracruz C.P. 95710, in its capacity as the Responsible Party, will process the personal data concerning you as the data subject, in order to protect your privacy and your right to informational self-determination, as provided for in the Federal Law on Protection of Personal Data Held by Private Parties (the “LFPDPPP”), its Regulations, and the Privacy Notice Guidelines issued by the Ministry of Economy (the "Regulations").
2. DEFINITIONS
For the purposes of this Notice, the definitions of the terms "Personal Data," "Sensitive Personal Data," "Days," "Processing," "Data Subject," "Responsible Party," "Processor," "Transfer," "ARCO Rights" - "Right of Access," "Right of Rectification," "Right of Cancellation," "Right of Opposition," "Cookies," "Web Beacons," as well as other elements set forth in this Notice, shall have the same meaning as assigned in the Regulations.
3. PERSONAL DATA WE COLLECT AND PROCESS
At Tabasa, we collect and process the following personal data:
Clients and Visitors.
a) General Data
Name, surname, full address (either personal or business), email address, telephone number (landline and/or mobile, if applicable), and signature (if applicable); date of birth and gender (if applicable).
b) Tax Data
Federal Taxpayer Registration key and folio, as well as tax address.
c) Data Linked to Credit/Debit Cards and PayPal Accounts
Cardholder name, card number, expiration date, card type, and security code. PayPal account holder name and account number.
d) Sensitive Personal Data
Tabasa does not collect or process any sensitive personal data.
e) Personal Data from Public Access Sources and Received through Authorized Transfers
Data from public records, directories, social networks, and other legitimate sources available in the market, as well as personal data shared with us by third parties that you have previously authorized.
Providers (individuals)
a) General Data
Full name, complete address, landline phone (home or office), mobile phone, and email address.
b) Tax Data
Federal Taxpayer Registration key and folio, as well as tax address and regime.
c) Data Linked to Payment Methods
Where applicable, personal data related to payment methods, such as account holder name, bank account number, CLABE (Standardized Bank Code), and the originating bank.
Data from Automatic Capture Tools and Public Access Sources
a) Personal Data Collected by Automatic Capture Tools on Tabasa Websites
Data about the type of browser you use, language preference, session identification methods on our websites, passwords for accessing Tabasa's website, access times, IP address, browser type, and operating system of the device you used to access the Tabasa website.
b) Personal Data Part of an Automated Decision-Making Process
Tabasa does not process your personal data in automated decision-making processes without the intervention of physical persons' evaluation.
c) Personal Data from Public Access Sources and Received via Authorized Transfers
Data from public records, directories, social networks, and other legitimate sources available in the market.
d) Personal Data from Social Networks
Tabasa may collect and process personal data and information you have shared on social networks (such as Facebook®, Instagram®, YouTube®, and Twitter®, among others), particularly information shared on Tabasa's profiles on these networks, including information shared as "public" according to the terms and conditions of those networks.
Data Collection Methods
The personal data described in the above sections is collected through: i) the use of printed forms or documents; ii) the use of emails and/or iii) the voluntary provision of information and personal data via our website, as well as iv) the use of public access sources and other available sources in the market.
4. PURPOSES
At Tabasa, we process your personal data in order to carry out activities and procedures aimed at fulfilling the obligations arising from any commercial and/or legal relationship established with you, which we consider primary purposes, including:
Visitors and Clients
i) Allowing your access to our facilities,
ii) Allowing your access to our website;
Clients
i) Requesting, purchasing, exchanging, or returning products,
ii) Requesting, contracting, changing, or canceling services,
iii) Registering you in our customer database,
iv) Assigning you a customer number,
v) Managing payment for products and/or services,
vi) Managing invoices or digital tax receipts,
vii) Requesting quotes, product or service information,
viii) Requesting product delivery, repair, or warranty fulfillment,
ix) Requesting the provision of services or warranty fulfillment,
x) Processing payments for products and services with PayPal accounts and/or debit or credit cards,
xi) Integrating your file.
Providers
i) Allowing access to our facilities,
ii) Managing your information to keep our databases updated,
iii) Managing the commercial relationship with you as a supplier, including the selection and contracting process, as well as managing purchase orders and/or contracts,
iv) Verifying your identity and validating the information you provide,
v) Integrating your file and creating your online profile,
vi) Managing payment for your invoices and/or fees,
vii) Retaining corresponding taxes,
viii) Allowing management, administration, and security of your personal data,
ix) Monitoring and controlling physical access of suppliers to Tabasa's facilities and stores,
x) Monitoring and controlling physical access, including video recording of activities,
xi) Managing security incidents,
xii) Keeping physical, electronic, and procedural backups of your personal data as required by applicable legislation and regulations.
Additionally, we will process your personal data for other secondary purposes that do not originate from or are necessary for the legal and/or commercial relationship we establish with you, including:
Visitors, Clients, and Suppliers
i) Contacting Customer Service and/or Supplier Support (as applicable),
ii) Managing your purchase, sales, and other transaction history (as applicable),
iii) Sharing your comments, suggestions, complaints, and clarifications about our products and services,
iv) Evaluating the quality of our products and services using various instruments, including surveys,
v) Implementing activities aimed at promoting, maintaining, and improving our products and services,
vi) Participating in chats and/or discussion forums,
vii) Notifying Tabasa of problems with the website,
viii) Sending notifications of offers, advertisements, promotional messages, commercial prospecting, or marketing purposes in print and electronic media,
ix) Using various services on its corresponding websites,
x) Allowing management, administration, and security of your personal data,
xi) Keeping physical, electronic, and procedural backups of your personal data as required by applicable legislation and regulations,
xii) Complying with applicable legal requirements.
5. CONSENT OF THE DATA SUBJECT
For the purposes of the Regulations, you hereby declare: i) that you have been informed of this Notice by Tabasa before the collection and/or processing of your personal data, ii) that you have read, understood, and agreed to the terms set forth in this Notice for the collection and processing of your financial and/or patrimonial data, in which case, by providing such data, you will sign your name and signature at the bottom of this document, or, alternatively, provide your consent through the dialog windows available on our websites. This is based on Articles 8 and 9 of the LFPDPPP, as well as Articles 11, 12, 14, 15, and 16 of the Regulations, without prejudice to the exceptions set forth in Articles 10 and 37 of the LFPDPPP, which authorize us to process and transfer your personal data in order to fulfill our legal, contractual obligations, or due to the current and/or future legal relationship we have or may have with you.
6. TRANSFER OF DATA TO THIRD PARTIES
Tabasa may use your personal data to offer other services directly or through its commercial allies, in Mexico and/or abroad, or through third parties subcontracted for such purposes. It may also send you promotions for other goods or services related to those described in the previous sections, which are not necessary for fulfilling the legal relationship with you but which you may object to within 5 days after your personal data has been processed by Tabasa.
Third Party Recipients
- Corporate Group Companies of Tabasa: Corporate management and support for business operations. National. No consent required.
7. EXERCISING ARCO RIGHTS AND REVOCATION OF CONSENT
You have the right to access, rectify, and cancel your personal data, as well as to object to its processing or revoke your consent for specific purposes— including secondary purposes—that you may have previously authorized, either directly or through your legal representative. You will need to submit the corresponding request, using the forms we provide on our website, along with the necessary information and documents.
8. PRIVACY OFFICER
For any inquiries regarding the protection of your personal data, please contact our Privacy Officer at: Boulevard 5 de Febrero No. 10-1, Colonia San Francisco, San Andrés Tuxtla, Veracruz, or via email at: protecciondedatos@zippo.com.mx.
9. LIMITATION ON THE USE AND DISCLOSURE OF INFORMATION
Tabasa will retain your personal data for the time necessary to manage the commercial and/or legal relationship with you and to maintain the records required by the LFPDPPP, its Regulations, and applicable commercial, administrative, and fiscal legislation.
10. CHANGES TO THE NOTICE
Tabasa reserves the right to update this Notice to reflect changes in our data protection practices, as part of our continuous improvement process, as well as any legal, regulatory, and administrative changes. We encourage you to review the Privacy Notice periodically on our website, where we will publish any changes made along with the date of the last update.
11. CONSENT STATEMENT
To give your explicit consent for the processing of the data described in this Privacy Notice, we kindly ask you to sign this document and send it to our Privacy Officer or click the "Accept" button in the relevant section of our website's dialog window.
By signing, I give my explicit consent for the collection, processing, transfer, and use of my personal data described in this Privacy Notice.
Let me know if you need further clarification or additional information!