Aviso de privacidad integral – Canal de denuncia

Bello, Gallardo, Bonequi y García, S.C., (en adelante el “Responsable”) es el Responsable de los datos personales de las personas denunciantes (cuando se identifica al presentar la denuncia), del denunciado y de cualquier persona que se cite como testigo o esté relacionada con los hechos. El responsable señala como domicilio para oír y recibir notificaciones, el ubicado en Avenida Santa Fe, Número 428 Torre 1, Piso 14, Alcaldía Cuajimalpa de Morelos, Código Postal 05300, Ciudad de México, México.

When processing complaints through institutional channels, the Data Controller may process the following categories or types of personal data:

• Identifying and contact information.
• Employment data.
• Details regarding the alleged incidents.

Depending on the complaint filed, the Data Controller may process the following categories of personal data, which are not considered essential for filing a complaint:

• Financial and/or asset information.
• Identifying and contact information for the individuals involved in the reported incident.
• Contact information for any witnesses.

The Data Controller will treat complaints submitted through official channels as confidential, as well as the identity of the complainant if the complainant has chosen to disclose it. The relevant department will conduct the necessary investigation.

As a general rule, the Data Controller does not request sensitive personal data when processing complaints through institutional channels. In exceptional cases, the complainant may provide the following information regarding individuals, if it is directly related to the facts being reported:

• Racial or ethnic origin.
• Biometric data.
• Health status.
• Religious, philosophical, or moral beliefs.
• Union membership.
• Political views.
• Sexual preferences and/or habits.

For the purposes set forth in this Privacy Notice, the Data Controller does not collect data from children and adolescents (children are defined as individuals under the age of twelve, and adolescents as individuals who are at least twelve years old but under eighteen). If you provide data regarding minors and the Data Controller determines that you have provided such information, the personal data will be deleted to the extent that such information is not relevant or directly related to the reported facts.

In all cases, the Data Controller will make reasonable efforts to limit the period during which sensitive personal data is processed so that it is kept to the minimum necessary for the purposes of the relevant complaints and investigations.

The Data Controller may process the personal data of complainants (where applicable, as complaints may be submitted anonymously) and of those against whom complaints are filed, provided that such data is provided by the complainant, for the following purposes:

Finalidades primarias:

1. Management, monitoring, and administration of reports submitted through the institutional channels established by the entity responsible for operating the reporting channel.
2. Review, processing, and investigation of the complaint.
3. Follow-up on complaints submitted through the Reporting Channel.
4. Management and oversight of communications between the Data Controller and whistleblowers.
5. Management and oversight of communications between the responsible party and individuals connected to or involved in the matters reported by the complainants.
6. Prevent, detect, and correct violations of applicable regulations or the Data Controller’s internal policies.
7. Where applicable, notification to the administrative or judicial authorities responsible for investigating violations or criminal acts brought to the attention of the Data Controller.
8. Statistics and historical record of reports submitted through the Reporting Channel.

Under no circumstances will personal data that is not necessary for investigating the reported or alleged acts or omissions be processed; such data will be deleted immediately. Likewise, any personal data that may be reported and that relates to conduct not covered by this processing will be deleted.

Finalidades secundarias:

• They don't exist.

The Data Controller may share your personal data and transfer it, in accordance with the law and this Privacy Notice, both within and outside of Mexico, in the following cases and for the following purposes:

• Administraciones y autoridades públicas federales, estatales y/o municipales; comisiones; institutos, entidades reguladoras; autoridades judiciales o administrativas; y entidades gubernamentales nacionales y/o extranjeras, para el cumplimiento de obligaciones informativas, de transparencia y de prevención de fraudes, delitos u otras actividades ilícitas, así como para el cumplimiento de requerimientos judiciales o administrativos emitidos por autoridades competentes.

The Law stipulates that the aforementioned data transfers do not require your consent to be carried out, but the Data Controller is required to inform you of them. Any transfer of personal data that requires your consent will be disclosed in advance through this Privacy Notice and prior to the transfer of such data.

The law governs the ARCO rights you have as a data subject. These rights include:

• Acceso: el derecho que tiene a conocer qué datos tenemos de usted, así como para saber cómo los usamos o compartimos.
• Rectificación: el derecho que tiene para solicitar en todo momento la rectificación de sus datos, si por cualquier motivo están incorrectos, inexactos o incompletos en nuestras bases de datos.
• Cancelación: el derecho a pedir que eliminemos su información, a partir de su bloqueo y su posterior supresión definitiva.
• Oposición: el derecho que tiene a indicar una causa legítima por la cual debemos dejar de usar sus datos personales.

Para ejercer cualquiera de sus Derechos ARCO, debes presentar una solicitud dirigida a nuestro Departamento de Datos Personales, a través del siguiente correo electrónico: datospersonales@bgbg.mx.

The application must include or be accompanied by:

1. Your full name and address, or another way to contact you regarding the response to your request,
2. A copy of your ID (or a power of attorney, if someone is acting on your behalf),
3. A description of the right you wish to exercise, along with related information, and
4. Any other information you consider important for processing your request or locating your personal data.

Bgbg will respond to your request within 20 (twenty) business days of the date it is submitted and received. If the request is deemed valid, we will process it within 15 (fifteen) business days of the date we notify you of our response. If the information and/or documentation provided in your request is incomplete, incorrect, and/or insufficient, or if the necessary documents to verify your identity or legal representation are not included, we will ask you to correct and remedy these deficiencies so that we may process your request. You will have 10 (ten) business days to comply with the request and correct the application; otherwise, it will be deemed not submitted.

By using electronic means to exercise your ARCO rights, you authorize bgbg to respond to your request via the same means, unless you clearly and explicitly specify another method of contact in your request.

The right to erasure is not absolute. Please note that bgbg must retain certain information to comply with various legal obligations and, in doing so, may share your personal data with other entities or organizations. In such cases, you may need to exercise your right to erasure by contacting the entity that received your personal data.

In some cases, you may withdraw your consent to the processing of your personal data; however, this revocation cannot have retroactive effect; that is, it cannot affect situations, procedures, or transfers carried out prior to the revocation of your consent; nor can it apply in cases where such revocation would result in a breach of general public policy provisions establishing the obligation to continue processing your personal data for a specified period.

Puedes enviar una solicitud de revocación de consentimiento al siguiente correo electrónico datospersonales@bgbg.mx, siguiendo las instrucciones aplicables al ejercicio de los Derechos ARCO.

You may restrict the use or disclosure of your personal data by submitting a request to our Personal Data Department, following the procedure and instructions applicable to the exercise of ARCO rights.

Bgbg has the means and procedures in place to ensure that certain of your data is included in our own opt-out lists, thereby preventing the disclosure of your data. In such cases, we will provide data subjects who request registration with the corresponding proof of registration.

Bgbg se reserva el derecho de modificar, actualizar, extender y/o de cualquier otra forma cambiar el contenido y alcance de este Aviso de Privacidad, en cualquier momento y bajo completa discreción; en tales casos, publicaremos dichos cambios en el sitio web https://bgbg.mx/, sección Avisos de Privacidad. En todo momento, podrás solicitar una copia de la última versión de este Aviso de Privacidad a nuestro Departamento de Datos Personales, a través del siguiente correo electrónico: datospersonales@bgbg.mx.

El Aviso de Privacidad que regule el tratamiento de tus datos personales será el que aparezca publicado en nuestra sección Avisos de Privacidad en el siguiente sitio web: https://bgbg.mx/.

En caso de tener dudas o aclaraciones sobre el presente Aviso de Privacidad, puede contactar a nuestro Departamento de Datos Personales a través del siguiente correo electrónico: datospersonales@bgbg.mx.