Comprehensive Privacy Notice: Employees

Bello, Gallardo, Bonequi y García, S.C.(hereinafter “bgbg”) is the data controller for your personal data. Bgbg designates the following address for service of process and receipt of notifications: Avenida Santa Fe, No. 428, Tower 1, 14th Floor, Cuajimalpa de Morelos Municipality, Postal Code 05348, Mexico City, Mexico.

To fulfill the purposes described in this Privacy Notice, bgbg will process the following categories of personal data:

• Identifying and contact information.
• Academic and professional background.
• Employment data.
• Financial and insurance data.
• Sensitive data (biometric data and health data)

Bgbg will process your biometric data to manage access to the facilities. In addition, for the purposes set forth in this Privacy Notice, as well as to comply with legal provisions regarding social security, labor matters, and the administration of benefits provided by the Data Controller, information regarding your health status will be processed.

When we need to request this information, we will obtain your express written consent through the appropriate physical or electronic means.

If you provide bgbg with personal data belonging to third parties (such as personal and/or professional references, or emergency contacts) for the purposes identified in this Privacy Notice, you must inform them of the processing of their personal data and the contents of this Notice. By providing such information, you also declare that you have obtained the prior consent of the data subjects to provide their information to bgbg and that the information is accurate and complete.

Bgbg will process your personal data for the following purposes:

Primary objectives:

1. Human resources management and administration.
2. Staff training and professional development management.
3. Handling of disciplinary matters.
4. Handling and resolving complaints and contractual issues related to your performance.
5. Management and administration of employee records.
6. Management, monitoring, and administration of employee payments.
7. Compliance with regulations and requirements established by the relevant authorities regarding labor, health, and occupational safety.
8. If applicable, creation of a work email account, assignment of user profiles in the bgbg systems, inclusion in the corporate directory, and provision of work tools, including usernames and passwords.
9. Monitoring the appropriate and lawful use of bgbg’s IT resources, as well as controlling and safeguarding office supplies and other assets, through internal procedures and technological tools.
10. Submission of reports, evaluations, and periodic updates to the various administrative departments at bgbg.
11. Control and monitoring of physical access to bgbg's facilities.
12. Implementation of performance evaluations.
13. Management and coordination of contact with the emergency contacts you have designated.
14. Administration and oversight of payments for benefits, allowances, bonuses, reimbursements, and insurance.
15. Registration of employees with the Mexican Social Security Institute (IMSS), where applicable.
16. Assignment of an individual Major Medical Expense Insurance (SGMM) policy.
17. Contact your family members, dependents, and beneficiaries in case of an emergency.
18. Contact us for matters related to the legal relationship between you and bgbg.
19. Storage and archiving of active and former employee records to comply with applicable legal provisions, exercise legal rights and remedies, and recognize, exercise, and/or defend the rights and interests of bgbg or its employees.
20. Handling and addressing any internal complaints or claims between you and bgbg.
21. Handling all necessary termination procedures upon the conclusion of the legal relationship.
22. Statistics and historical records of current and former employees.

The primary purposes of personal data processing listed above do not require your consent, as they fall under the exceptions set forth in Article 9 of the Law, in accordance with Article 15, Section III.

Secondary purposes: 

1. Sending communications about bgbg activities aimed at promoting integration through recognition, congratulations, invitations to corporate events, and other communications related to corporate social life.
2. Take photos and/or videos during corporate events for use in promoting, publicizing, and sharing information about bgbg’s activities, contests, and events in print, digital, and social media.

Your personal data may be transferred within or outside of Mexico to the recipients and for the purposes identified below:

• Federal, state, and/or municipal governments and authorities; commissions; institutes; regulatory agencies; judicial or administrative authorities; and domestic and/or foreign government entities; in compliance with obligations established under applicable law and/or in response to well-founded and substantiated requests made by any of such entities.
• Banks or other financial institutions, for the purpose of fulfilling payment obligations.
• Insurance companies or agents, for the processing of applications, reports, reimbursements, or claims requested or authorized by employees.
• In such cases, subsidiaries and/or affiliates of bgbg that operate under the same internal processes and policies; for the purpose of centralized information management.

The transfers of personal data described above do not require your consent, as they fall within the exceptions set forth in Article 36 of the Law. Any transfer of your personal data that does require your consent will be disclosed in advance through the appropriate notice and by updating this Privacy Notice.

As the subject of personal data, you may exercise any of your rights of access, rectification, erasure, or objection (hereinafter, “ARCO Rights”). These rights include:

• Access: the right to know what personal data we hold about you, as well as how we use or share it.
• Correction: the right to request, at any time, the correction of any of your data that is inaccurate or incomplete.
• Deletion: the right to have the processing of your personal data ceased, beginning with the blocking of such data and followed by its deletion.
• Right to object: the right to object, on legitimate grounds, to the processing of your personal data.

To exercise any of your ARCO rights, you may submit a request by sending an email to datospersonales@bgbg.mx

Your application must include:

1. Your full name and address, or another way to receive a response to your request.
2. A copy of a document proving your identity and, if applicable, proof of legal representation if someone is exercising this right on your behalf.
3. A clear and precise description of the ARCO rights you wish to exercise and the personal data related to your request; and
4. If applicable, any other information or documents that help us identify your personal data or support your request in cases where you are requesting a correction or objecting to the processing.

Bgbg will respond to your request within 20 (twenty) business days of the date it is submitted and received. If the request is deemed valid, we will process it within 15 (fifteen) business days of the date we communicate our response. If the information and/or documentation provided in your request is incomplete, erroneous, and/or insufficient, or if the necessary documents to verify your identity or legal representation are not included, we will request that you correct and remedy these deficiencies so that we may process your request. You will have 10 (ten) business days to comply with the request and correct the application; otherwise, it will be deemed not to have been submitted.

The use of electronic means to exercise your ARCO rights authorizes bgbg to respond to your request via the same means, unless you clearly and explicitly specify another method of contact in your request.

The right to erasure is not absolute. Please note that bgbg must retain certain information to comply with various legal obligations and, in doing so, may share your personal data with other entities or organizations. In such cases, you may need to exercise your right to erasure by contacting the entity that received your personal data.

In some cases, you may withdraw your consent to the processing of your personal data; however, this withdrawal cannot have retroactive effect, meaning it cannot affect situations, procedures, or transfers that took place before you withdrew your consent.

Please note that there may be public policy provisions requiring bgbg to retain your information for a minimum legal period; in such cases, we will retain your information solely to comply with those legal provisions.

If you wish to withdraw your consent, you may submit a request by following the instructions for exercising your ARCO rights and sending an email to datospersonales@bgbg.mx

You may restrict the use or disclosure of your personal data by submitting a request to our Personal Data Department, following the procedure and instructions applicable to the exercise of ARCO rights.

Bgbg has the means and procedures in place to ensure that certain data is included in its own opt-out lists, thereby preventing the disclosure of such data. In such cases, we will provide data subjects who request to be added to the list with the corresponding proof of registration.

Bgbg reserves the right to modify, update, expand, and/or change the content and scope of this Privacy Notice at any time and at its sole discretion. In such cases, you may request the most recent version of the Privacy Notice from our Personal Data Department by emailing: datospersonales@bgbg.mx