PRIVACY NOTICE

COMPREHENSIVE PRIVACY NOTICE FOR CUSTOMERS

Who will process your personal data?
The personal data provided by you will be used by Hitss Solutions, S.A. de C.V. (merging company of Sigmatao Factory, S.A. de C.V., Sigtao Software, S.A. de C.V., and Hitss Consulting, S.A. de C.V., effective January 1, 2021), located at Lago Zúrich No. 219, 9th floor, Ampliación Granada, Miguel Hidalgo Borough, Postal Code 11529, Mexico City (hereinafter referred to as “the Controller” or “GLOBAL HITSS”).

What information will we collect?

To fulfill the purposes stated in this Privacy Notice, GLOBAL HITSS will process your identification and contact information. GLOBAL HITSS will not collect or process sensitive personal data.

For what purposes do we use your information?

The personal data you have provided will be used for the following primary and necessary activities: identification, contacting you, updating and confirming information about products and services contracted, fulfilling obligations contracted with you, payment processing for purchases or other services, responding to your comments or information requests, creating and managing your user account, identifying possible fraudulent transactions and protecting against them, developing new products and services, conducting research and data analysis to improve our products, services, and websites, and conducting consumer studies on preferences for our products and services.

What other uses can we give to your information?

Additionally, if you do not object, GLOBAL HITSS will use your personal information to send you promotional information and advertising related to our products and services, as well as to conduct surveys and evaluations regarding our websites and/or the use of our products and services.

If you do not wish your personal data to be processed for any or all of the additional purposes, you may communicate this to the email address privacidad@globalhitss.com.

To whom can we transfer your information?

GLOBAL HITSS may transfer, without requiring your consent, the necessary personal data to competent authorities in cases provided by law, as well as to subsidiary and affiliate companies of GLOBAL HITSS, which operate under privacy policies that comply with the applicable provisions, for the purposes stated in this notice.

How long will we process your personal data?

The Controller will process personal data during the term of the commercial and contractual relationship established in the contract or agreement executed by the Controller with you regarding the contracted products and services. Subsequently, the Controller will retain the personal data for the period established in said contract or agreement once the commercial and contractual relationship has ended. In case no such term is specified, the Controller will retain the personal data for 1 (one) year after the termination, for any reason, of the commercial and contractual relationship or for the time that the applicable national and international legislation enables and/or obliges the Controller to retain such personal data.

How can you exercise your ARCO rights and/or revoke your consent?

You or your legal representative may exercise any of the rights of access, rectification, cancellation, or opposition (hereinafter “ARCO Rights”), as well as revoke your consent for the processing of your personal data by sending an email to the Privacy Committee of GLOBAL HITSS at the email address privacidad@globalhitss.com. Your request must be made using the ARCO Rights Application Format (hereinafter the “Format”), which can be requested at the email address indicated above, or alternatively, by means of a free document that complies with the requirements of applicable legislation. For the Privacy Committee of GLOBAL HITSS to follow up on your request, you or your legal representative must correctly verify your identity, which requires completing all the fields indicated in the Format, or, in the case of a free document, complying with the requirements specified by applicable legislation, and attaching a copy of any of the valid official identifications specified therein. For more information on procedures, requirements, and deadlines for exercising your ARCO Rights and/or revoking consent, please contact the Privacy Committee of GLOBAL HITSS.

How can you limit the use and/or disclosure of your data?

You may limit the use or disclosure of your personal data by sending your request to the email address privacidad@globalhitss.com. If your request is approved, you will be included in GLOBAL HITSS’s own exclusion list. For more information, please contact the Privacy Committee of GLOBAL HITSS.

How will we notify you of any changes to this Privacy Notice?

GLOBAL HITSS will notify you of any changes to its privacy notice through our website http://www.globalhitss.com , so we ask you to periodically review it. 

How can you address your doubts or complaints?

Our Privacy Committee is at your service to provide any additional information you may require or, if necessary, to resolve any doubts or complaints that may arise in matters of privacy and personal data protection. You can contact us through the email address privacidad@globalhitss.com 

Use of cookies

We inform you that on some of our websites, we use cookies and other technologies to monitor your behavior as an internet user and to provide you with a better service and experience when browsing our website. The personal data that can be obtained through the use of these technologies are: identifiers, username and passwords for a session, region in which you are located, type of browser, type of operating system, start and end date and time of a session, visited web pages, searches made, and reviewed advertisements. These technologies can be disabled by following the procedures of the internet browser you are using.

Last update: 2021

COMPREHENSIVE PRIVACY NOTICE FOR EMPLOYEES

Who will process your personal data?

The personal data provided by you will be used by Hitss Solutions, S.A. de C.V. (merging company of Sigmatao Factory, S.A. de C.V., Sigtao Software, S.A. de C.V., and Hitss Consulting, S.A. de C.V., effective January 1, 2021), located at Lago Zúrich No. 219, 9th floor, Ampliación Granada, Miguel Hidalgo Borough, Postal Code 11529, Mexico City (hereinafter referred to as “the Controller” or “GLOBAL HITSS”).

What information will we collect?

To fulfill the purposes stated in this Privacy Notice, the Controller will process identification data, including your personal image through photographs and/or video, contact information, employment data, physical characteristics data, academic data, biometric data, specifically your fingerprint, financial and/or patrimonial data, and data related to your family. By providing the personal data related to your family, you acknowledge having their consent for the Controller to process their personal data to contact them, invite them to events, and validate the information you provide.

Additionally, we inform you that to fulfill the purposes described in this Notice, the following sensitive personal data will be processed: legal data on criminal backgrounds, health data including data related to your psychological profile, information regarding behaviors related to the detection and management of COVID-19 and/or any other disease classified as a health emergency and/or contingency by competent authorities (“other diseases”), and personal data related to your past, present, and future health status. We inform you that the processing of such data is necessary to comply with the obligations arising from the legal relationship between you and the Controller, which is why your consent is excepted.

For what purposes do we use your information?

The Controller will process your personal data to carry out the following primary and necessary activities:

  • Elaboration of your employment record.
  • Creation of an employee profile for the management of your work stay.
  • Administration of physical access to the facilities of the Controller.
  • Administration of electronic access to the Controller’s systems and databases necessary for the development of your functions.
  • Management, verification, and analysis to ensure safety within the workplace, the proper use of work tools such as computer systems, networks, email, internet, mobile phones, and the confidentiality of the Controller’s
  • proprietary information. For this purpose, the Controller may access and monitor the devices and tools provided to you as work tools, as well as security systems and CCTV.
  • Payroll administration.
  • Enrollment, hiring, and/or cancellation of life insurance, medical expense insurance, and other insurances deemed necessary by the Controller.
  • Expense reporting.
  • Granting of economic support, scholarships, and/or loans.
  • Contacting your family members or emergency contacts in case of an emergency.
  • Awarding of emblems, prizes, and recognitions.
  • Preparation of statistical reports and reports.
  • Issuance of tax receipts.
  • Conducting necessary courses and training for the development of your functions.
  • Conducting security research.
  • Creation and implementation of analytical and statistical processes.
  • Compliance with the provisions of your employment contract.
  • Determining whether you can fulfill the functions arising from the employment relationship.
  • Carrying out all necessary activities for the administration and management of your job position and other employment benefits.
  • Compliance with obligations of the Controller.
  • Carrying out preventive and corrective actions necessary for the prevention, attention, and mitigation of COVID-19 and/or other diseases, as well as to ensure the safety and health of third parties. This includes, if necessary,informing people you may have been in contact with so they can take necessary measures to protect their health.
  • Contacting you and monitoring your health status.
  • If applicable, determining if you are fit to continue performing your work duties.
  • Collaborating with competent authorities in responding to health contingencies.
  • Contacting your family members and/or authorized third parties in case of an emergency and/or to monitor your clinical condition.
  • Carrying out disassociation processes for generating statistical studies and research activities.
  • Validating that you have the necessary work tools to perform your work activities remotely (home office).

What other uses can we give to your information?

Furthermore, if you do not object, the Controller will process your personal data for secondary purposes related to improving and promoting a better work environment and climate (such as disseminating congratulations and other celebrations and special days). Also, your personal image (e.g., photo, video) may be used in the preparation of informative material for the Controller and/or its subsidiary companies.

If you do not wish your personal data to be processed for any additional purposes, you can communicate this to us at the email address privacidad@globalhitss.com 

To whom can we transfer your information?

To fulfill the necessary purposes described above, the Controller may communicate your personal data without requiring your consent: (i) to labor authorities and/or competent authorities to comply with legal provisions; (ii) to competent national authorities when necessary, including local and federal health authorities; (iii) to hospitals and health clinics for medical care purposes; (iv) to subsidiary and affiliate companies of the Controller, including Fundación Carlos Slim, which operate under privacy policies that comply with the applicable provisions for the purposes stated in this privacy notice; (v) to banking institutions for payment purposes; (vi) to insurers for insurance management and reimbursements.

How long will we process your personal data?

The Controller will process your personal data during the term of the employment relationship established in the contract or agreement executed by the Controller with you, and subsequently, it will retain your personal data for the period indicated in said contract or agreement once the employment relationship has ended. In the event that no such term is specified, the Controller will retain your personal data for 1 (one) year after the termination, for any reason, of the employment relationship or for the time that the applicable national and international legislation enables and/or obliges the Controller to retain such personal data.

How can you exercise your ARCO rights and/or revoke your consent?

You or your legal representative can exercise any of the rights of access, rectification, cancellation, or opposition (hereinafter “ARCO Rights”), as well as revoke your consent for the processing of your personal data, by sending an email to the Privacy Committee of the Controller at the email address privacidad@globalhitss.com. Your request must be made using the ARCO Rights Application Format (hereinafter the “Format”), which can be requested at the email address indicated above, or alternatively, by means of a free document that complies with the requirements of applicable legislation. For the Privacy Committee of the Controller to follow up on your request, you or your legal representative must correctly verify your identity, which requires completing all the fields indicated in the Format or, in the case of a free document, complying with the requirements specified by applicable legislation, and attaching a copy of any of the valid official identifications specified therein. For more information on procedures, requirements, and deadlines for exercising your ARCO Rights and/or revoking consent, please contact the Privacy Committee of the Controller.

How can you limit the use and/or disclosure of your data?

You can limit the use or disclosure of your personal data by sending your request to the email address privacidad@globalhitss.com. If your request is approved, you will be included in the Controller’s own exclusion list. For more information, please contact the Privacy Committee of the Controller.

How will we notify you of any changes to this Privacy Notice?

The Controller will notify you of any changes to its privacy notice through our website http://www.globalhitss.com , so we ask you to periodically review it.

How can you address your doubts or complaints?

Our Privacy Committee is at your service to provide any additional information you may require or, if necessary, to resolve any doubts or complaints that may arise in matters of privacy and personal data protection. You can contact us through the email address privacidad@globalhitss.com 

Use of cookies

We inform you that on some of our websites, we use cookies and other technologies to monitor your behavior as an internet user and to provide you with a better service and experience when browsing our website. The personal data that can be obtained through the use of these technologies are identifiers, username and passwords for a session, region in which you are located, type of browser, type of operating system, start and end date and time of a session, visited web pages, searches made, and reviewed advertisements. These technologies can be disabled by following the procedures of the internet browser you are using.

Last update: 2021

COMPREHENSIVE PRIVACY NOTICE FOR CANDIDATES / PROSPECTS

Who will process your personal data?

The personal data provided by you will be used by Hitss Solutions, S.A. de C.V. (the merging company of Sigmatao Factory, S.A. de C.V., Sigtao Software, S.A. de C.V., and Hitss Consulting, S.A. de C.V., effective from January 1, 2021), located at Lago Zúrich No. 219, 9th Floor, Colonia Ampliación Granada, Alcaldía Miguel Hidalgo, C.P. 11529, Mexico City (hereinafter referred to as the “Controller” or “GLOBAL HITSS”).

What information will we collect?

The Controller, to fulfill the purposes stated in this Notice, will process personal data of identification, contact information, employment data, financial and/or asset information, and academic data. Additionally, depending on the position you are applying for and to meet the purposes described in this Notice, we may process the following sensitive personal data: legal data on criminal records, health data, including information related to your psychological profile, information regarding behaviors that you have exhibited and are directly related to the detection and management of COVID-19 and/or any other disease classified as an emergency and/or health contingency by the competent authorities (“other diseases”), as well as data related to your past, present, and future health condition.

For what purposes do we use your information?

The Controller will process your personal data for the following primary and necessary activities:

  • Verify that you possess the skills and qualifications to perform the job according to the job profile
    requirements.
  • Contact you during the recruitment process.
  • Conduct employment investigations.
  • Request work and/or personal references.
  • Perform psychometric tests.
  • Validate the information you provide.
  • Prepare, if applicable, a job offer.
  • Fulfill obligations of the Controller.
  • Carry out necessary preventive and corrective actions to prevent, address and mitigate COVID-19 and/or other diseases, as well as to ensure the safety and health of third parties. This may include, if necessary, informing individuals with whom you may have had contact so that they can take the necessary measures to protect their health.
  • Collaborate with competent authorities in responding to health contingencies.
  • Conduct disassociation processes for generating statistical studies and research.

If hired, your data will become part of your employment record.

What other uses can we give to your information?

If you are not hired, the Controller will retain your information for a period of 24 (twenty-four) months. If you do not object, your information may be used for possible future contacts and/or shared with third-party companies with whom we have agreements to share portfolios in case there is a job opportunity that matches your profile.

If you do not wish your personal data to be used for the additional purposes, you can communicate this to us at the email address privacidad@globalhitss.com 

To whom can we transfer your information?

The Controller may transfer, without requiring your consent, the necessary personal data to national authorities when necessary, including local and federal health authorities, hospitals and health clinics, as well as subsidiary and affiliate companies of the Controller, Fundación Carlos Slim, and third parties, which operate under privacy policies that comply with the applicable provisions, for any of the purposes indicated in this notice.

Additionally, if you do not object, the Controller will transfer your personal data to third-party companies with whom we have agreements to share portfolios in case there is a job opportunity that matches your profile. If you do not wish this transfer to take place, please send an email to privacidad@globalhitss.com, where your request will be attended to in a timely manner.

How can you exercise your ARCO rights and/or revoke your consent?

You or your legal representative can exercise any of the rights of access, rectification, cancellation, or opposition (hereinafter “ARCO Rights”), as well as revoke your consent for the processing of your personal data by sending an email to the Privacy Committee of the Controller at privacidad@globalhitss.com Your request should be made using the ARCO Rights Application Format (hereinafter the “Format”), which can be requested at the email address mentioned above, or alternatively, by means of a free document that complies with the requirements specified by applicable legislation. For the Privacy Committee of the Controller to follow up on your request, you or your legal representative must correctly verify your identity, which requires completing all the fields indicated in the Format, or, if applicable, that the free document complies with the requirements specified by applicable legislation and include a copy of any of the valid official identifications specified therein. For more information on procedures, requirements, and deadlines for exercising your ARCO Rights and/or revoking consent, please contact the Privacy Committee of the Controller.

How can you limit the use and/or disclosure of your data?

You can limit the use or disclosure of your personal data by sending your request to the email address  privacidad@globalhitss.com. If your request is approved, you will be included in the Controller’s exclusion list. For more information, please contact the Privacy Committee of the Controller.

How will we notify you of any changes to this Privacy Notice?

The Controller will notify you of any changes to its privacy notice through our website http://www.globalhitss.com, so we ask you to periodically review it.

How can you address your doubts or complaints?

Our Privacy Committee is at your service to provide any additional information you may require or, if necessary, to resolve any doubts or complaints that may arise regarding privacy and personal data protection. You can contact us through the email address privacidad@globalhitss.com 

Use of Cookies

We inform you that on some of our websites, we use cookies and other technologies to monitor your internet user behavior, as well as to provide you with a better service and browsing experience. The personal data that can be obtained using these technologies includes the following: Identifiers, session usernames, and passwords; region where you are located; type of browser; type of operating system; start and end time of a session; visited web pages; searches performed, and reviewed advertisements. These technologies can be disabled by following the procedures of your internet browser.

Last update: 2021

COMPREHENSIVE PRIVACY NOTICE FOR SUPPLIERS (NATURAL)

Who will process your personal data?

The personal data provided by you will be used by Hitss Solutions, S.A. de C.V. (the merging company of Sigmatao Factory, S.A. de C.V., Sigtao Software, S.A. de C.V., and Hitss Consulting, S.A. de C.V., effective from January 1, 2021), located at Lago Zúrich No. 219, 9th Floor, Colonia Ampliación Granada, Alcaldía Miguel Hidalgo, C.P. 11529, Mexico City (hereinafter referred to as the “Controller” or “GLOBAL HITSS”).

What information will we collect?

To fulfill the purposes stated in this Notice, GLOBAL HITSS will process personal data of identification, contact information, employment data, financial and/or asset information, and, if necessary, health data necessary for the detection and management of COVID-19 and/or any other disease classified as an emergency and/or health contingency by the competent authorities (“other diseases”).

For what purposes do we use your information?

The personal data you have provided will be used to identify you, contact you, and carry out all the primary and necessary activities to request quotes, register you as a supplier, manage all actions arising from the contractual and/or service relationship we have with you, especially for payment processing, requesting corresponding invoices, making necessary payments, and maintaining a purchase history. Additionally, if necessary, preventive and corrective actions may be taken to prevent, address, and mitigate COVID-19 and/or other diseases, as well as to ensure the safety and health of third parties. This may include, if necessary, informing individuals with whom you may have had contact so that they can take the necessary measures to protect their health.

To whom can we transfer your information?

GLOBAL HITSS may transfer, without requiring your consent, the necessary personal data to competent authorities in legally established cases, as well as to subsidiary and affiliate companies of GLOBAL HITSS, which operate under privacy policies that comply with the applicable provisions, for any of the purposes indicated in this notice, as well as to third parties that have the mentioned policies, including Fundación Carlos Slim.

How long will we process your personal data?

The Controller will process your personal data for the duration of the commercial and contractual relationship established in the contract or agreement that the Controller initiates with you regarding the contracted products and services. After the commercial and contractual relationship is terminated, the Controller will retain your personal data for the period indicated in the contract or agreement. In case no specific period is indicated, the Controller will retain your personal data for 1 (one) year after the termination of the commercial and contractual relationship for any reason or for the time required by applicable national and international legislation.

How can you exercise your ARCO rights and/or revoke your consent?

You or your legal representative can exercise any of the rights of access, rectification, cancellation, or opposition (hereinafter “ARCO Rights”), as well as revoke your consent for the processing of your personal data by sending an email to the Privacy Committee of GLOBAL HITSS at the email address privacidad@globalhitss.com. Your request should be made using the ARCO Rights Application Format (hereinafter the “Format”), which can be requested at the email address mentioned above, or alternatively, by means of a free document that complies with the requirements specified by applicable legislation. For the Privacy Committee of GLOBAL HITSS to follow up on your request, you or your legal representative must correctly verify your identity, which requires completing all the fields indicated in the Format, or, if applicable, that the free document complies with the requirements specified by applicable legislation and include a copy of any of the valid official identifications specified therein. For more information on procedures, requirements, and deadlines for exercising your ARCO Rights and/or revoking consent, please contact the Privacy Committee of GLOBAL HITSS.

How can you limit the use and/or disclosure of your data?

You can limit the use or disclosure of your personal data by sending your request to the email address privacidad@globalhitss.com. If your request is approved, you will be included in the exclusion list of Hitss. For more information, please contact the Privacy Committee of GLOBAL HITSS.

How will we notify you of any changes to this Privacy Notice?

GLOBAL HITSS will notify you of any changes to its privacy notice through our website http://www.globalhitss.com , so we ask you to periodically review it.

How can you address your doubts or complaints?

Our Privacy Committee is at your service to provide any additional information you may require or, if necessary, to resolve any doubts or complaints that may arise regarding privacy and personal data protection. You can contact us through the email address privacidad@globalhitss.com.

Use of Cookies

We inform you that on some of our websites, we use cookies and other technologies to monitor your internet user behavior, as well as to provide you with a better service and browsing experience. The personal data that can be obtained using these technologies includes the following: Identifiers, session usernames, and passwords; region where you are located; type of browser; type of operating system; start and end time of a session; visited web pages; searches performed, and reviewed advertisements. These technologies can be disabled by following the procedures of your internet browser.

Last update: 2021

RECEPTION PRIVACY NOTICE

Who will process your personal data?

The personal data provided by you will be used by Hitss Solutions, S.A. de C.V. (the merging company of Sigmatao Factory, S.A. de C.V., Sigtao Software, S.A. de C.V., and Hitss Consulting, S.A. de C.V., effective from January 1, 2021), located at Lago Zúrich No. 219, 9th Floor, Colonia Ampliación Granada, Alcaldía Miguel Hidalgo, C.P. 11529, Mexico City (hereinafter referred to as the “Controller” or “GLOBAL HITSS”).

What information will we collect and for what purposes?

The personal data you provide in this access register are identification data necessary for access control to our facilities for security and emergency response purposes. Additionally, if necessary, health-related data linked to COVID-19 and/or any other disease classified as an emergency and/or health contingency by competent authorities will be collected to ensure the safety and health of individuals within our facilities. If you choose not to provide them, we reserve the right to deny you access. Furthermore, please be aware that you are being video recorded by security cameras; therefore, if you decide to enter our facilities, it will be understood that you consent to the use of such images for security purposes.

To whom can we transfer your information?

GLOBAL HITSS may transfer, without requiring your consent, the necessary personal data to competent authorities in legally established cases, as well as to subsidiary and affiliate companies of GLOBAL HITSS, which operate under privacy policies that comply with the applicable provisions, for any of the purposes indicated in this notice.

How long will we retain your personal data?

GLOBAL HITSS will retain your information for a period of 3 (three) months, and if you do not object, we may use this information for possible future contacts related to the purposes stated here. Once this period has elapsed, your personal data will be permanently and automatically deleted without the possibility of recovery.

In cases where a duly authorized jurisdictional or administrative authority requests your personal data from GLOBAL HITSS within the aforementioned period, your personal data will be stored and kept in permanent storage media for the period ordered by that authority. Once this period has elapsed, your personal data will be permanently and automatically deleted without the possibility of recovery.

How can you exercise your ARCO rights and/or revoke your consent?

You or your legal representative may exercise any of the rights of access, rectification, cancellation, or opposition (hereinafter “ARCO Rights”), as well as revoke your consent for the processing of your personal data by sending an email to the Privacy Committee of GLOBAL HITSS at the email address privacidad@globalhitss.com. Your request should be made using the ARCO Rights Application Format (hereinafter the “Format”), which can be requested at the aforementioned email address. For the Privacy Committee of GLOBAL HITSS to follow up on your request, you or your legal representative must correctly verify your identity, which requires completing all the fields indicated in the Format and providing a copy of any of the valid official identifications specified therein. For more information on procedures, requirements, and deadlines for exercising your ARCO Rights and/or revoking consent, please contact the Privacy Committee of GLOBAL HITSS.

How can you limit the use and/or disclosure of your data?

You can limit the use or disclosure of your personal data by sending your request to the email address privacidad@globalhitss.com. If your request is approved, you will be included in the exclusion list of GLOBAL HITSS. For more information, please contact the Privacy Committee of GLOBAL HITSS.

How will we notify you of any changes to this Privacy Notice?

GLOBAL HITSS will notify you of any changes to its Privacy Notice by posting the latest version of the corresponding notice at the facilities of GLOBAL HITSS.

How can you address your doubts or complaints?

Our Privacy Committee is at your service to provide any additional information you may require or, if necessary, to resolve any doubts or complaints that may arise regarding privacy and personal data protection. You can contact us through the email address privacidad@globalhitss.com.

Last update: 2021