Privacy Notice

The party responsible for the Processing of your Data is Schondube Abogados, S.C., with its address at Edificio Atrium, interior 410, Avenida Nichupté, Número 20, Manzana 2, Supermanzana 19, Postal Code 77500, Cancún, Benito Juárez, Quintana Roo, Mexico.

For the Purposes described in this Notice, we may process the following categories of Data:

1. Identification and contact data (name, address, telephone, email, official identification, RFC and CURP);
2. Tax and billing data;
3. Asset or financial data, when the matter entrusted to us so requires;
4. Data related to the legal, administrative or corporate matter in which we act on your behalf or as your representative;
5. Identification and contact data, and data related to the matter, of the counterparties, partners, shareholders and other third parties involved in the matters our clients entrust to us;
6. Images and sounds captured by the video surveillance cameras installed in our offices;
7. The email address, and the name when provided to us, of those who subscribe to our bulletins; and
8. The Data you enter in the contact form on our website, such as your name, your email and the message you send us.

We receive the Data of those third parties from our clients or from other persons involved in the matter, and not directly from the data subject. If you are one of them, this Notice also applies to you and you may exercise your rights in accordance with section F.

If the matter you entrust to us involves the processing of sensitive personal Data, such as data relating to your health, genetic information, religious beliefs, political opinions or criminal record, we will request your express written consent, as required by the Law.

The Data is processed for the following Purposes (the “Purposes”):

a) Necessary purposes, essential to the legal relationship we have with you:

1. To identify you as a client and provide you with the service you need;
2. To respond to your requests for legal advice;
3. To handle and respond to the messages you send us through the contact form on our website;
4. To invoice for our services;
5. To maintain an up-to-date physical and electronic file with the information needed to provide our services;
6. To ensure the security of our facilities and of the people who visit us;
7. To comply with our obligations under privacy and anti-money laundering legislation; and
8. Similar, related and compatible purposes, in accordance with the Law.

b) Voluntary purposes, which you may decline without affecting the service requested:

1. To know and better understand your needs, beyond the specific matter you entrust to us;
2. To inform you of updates and developments in Mexican legislation, including sending our legal bulletins by email; and
3. To evaluate and improve the way we provide our services.

If you do not want us to process your Data for the voluntary Purposes, you may tell us so at any time through the means indicated in section F of this Notice.

The Data of the counterparties, partners, shareholders and other third parties involved in our clients' matters is processed only to provide those clients with the service entrusted to us and to comply with our legal obligations.

If you subscribe to our bulletins through the form on the website, we will process your email address to send you the legal bulletins we publish, in the applicable language and format (email or PDF file). The bulletins are sent from our website through the Firm's Google Workspace account, which is the email service we use. Subscribing is voluntary and is not a condition for requesting our services.

All our bulletins include a link to this Notice and a link to unsubscribe. You may unsubscribe at any time through that link, on the unsubscribe page of our website or by writing to info@schondube.com, and when you do we will stop sending you bulletins.

The Data you enter in the contact form is used to handle and respond to your message.

We do not transfer your Data to third parties, except when necessary to carry out the client's instructions in the matter concerned or when required by law or by a competent authority.

You, or your legal representative, may at any time exercise the rights of access, rectification, cancellation and objection (the “ARCO Rights”) with respect to your Data:

1. Access: to know the Data we hold about you and the conditions of its Processing.
2. Rectification: to request that we correct Data that is inaccurate, incomplete or out of date.
3. Cancellation: to request that we delete your Data. Cancellation involves a blocking period, equal to the limitation period for actions arising from the legal relationship we have with you, after which we will delete the Data and notify you. It does not apply when we must retain the Data to fulfil that legal relationship, a legal obligation, or for a judicial or tax proceeding.
4. Objection: to object to the Processing of your Data on legitimate grounds.

To exercise an ARCO Right, send your request to info@schondube.com, addressed to our Personal Data Protection Officer, or submit it at the address indicated in section A. The request must contain:

1. Your name and an address or email to notify you of the response;
2. Documents proving your identity or, where applicable, the authority of your representative;
3. A clear description of the Data in respect of which you seek to exercise the right, except in the case of the right of access;
4. The ARCO Right you wish to exercise; and
5. Any other information that helps us locate your Data.

If you request a rectification, also indicate the changes to be made and attach the documentation supporting them.

We will respond within a maximum of 20 (twenty) business days from receipt of your request. If the request is granted, we will give effect to the right within the 15 (fifteen) business days following the date on which we communicate our response. Both periods may be extended once for an equal period when circumstances so justify. In the case of the right of access, we will make your Data available to you or provide you with copies or electronic documents.

Exercising the ARCO Rights is free of charge; we may only charge you the costs of reproduction, copies or delivery.

We may deny, in whole or in part, the exercise of an ARCO Right when your identity or the authority of your representative is not proven, when we hold no Data about you, when the rights of third parties would be affected, when there is a legal impediment or when the requested change has already been made. In that case we will explain the reasons to you.

If you do not receive a response or do not agree with it, you may file a request for protection of rights with the Secretaría de Anticorrupción y Buen Gobierno within the 15 (fifteen) business days following the date on which we communicate our response or, if we do not communicate one, once the period for responding has expired.

You may also withdraw at any time, without retroactive effect, the consent you have given us for the voluntary Purposes, and limit the use or disclosure of your Data, through the same means indicated in this section or, in the case of the bulletins, through the unsubscribe link.

We will publish any changes to this Notice on our website (www.schondube.com). The date of the last update appears at the end of the Notice.

If you have any questions about this Notice, the processing of your Data or your rights, please do not hesitate to contact our Personal Data Protection Officer by calling +52 (998) 881 19 70 or by sending an email to info@schondube.com.

If you believe that your right to the protection of personal Data has been infringed, you have the right to apply to the Secretaría de Anticorrupción y Buen Gobierno, the competent authority for the protection of personal data held by private parties.