This English text is a courtesy translation. This Privacy Notice is governed by Mexican law (LFPDPPP) and only the Spanish version is binding.
Identity and address of the controller
ASHA SOLUTION S.A. DE C.V. (hereinafter “ASHA”), with registered offices at Av. Ejército Nacional Mexicano 1112, Floor 10, Col. Polanco, Primera Sección, Alcaldía Miguel Hidalgo, 11510, Mexico City, Mexico, is responsible for the processing of your personal data, in accordance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter, the “Law”) and its Regulations.
Personal data collected
We collect the following personal data through our contact form, located on the ASHA website (https://ashasolution.com/, hereinafter the “website”), in order to provide information, guidance and services related to the products and services we offer, as well as to update and communicate changes to our Privacy Notice:
- Full name
- Contact email address
- Contact phone number
- Country
- Organisation
- Relationship
- Incident description
- Indicators to investigate
- Comments (optional)
Please note that no sensitive personal data will be collected.
Purposes of the processing of personal data
Personal data will be used for the following purposes:
1. Primary purposes
These are the purposes that give rise to, and are indispensable for, the relationship with the prospect or customer:
- To provide information about the products and services offered by ASHA.
- To respond to enquiries made through the contact form.
- To provide advice on specific requirements submitted through our website.
2. Secondary purposes
These are not indispensable for the commercial relationship, but they allow us to serve you better and to improve our processes:
- To send advertising information and news about ASHA products and services.
- To carry out quality and customer satisfaction surveys.
If you do not wish your personal data to be processed for these secondary purposes, you may state your refusal at any time at the following email address: contacto@ashasolution.com.
Refusing the use of your personal data for these purposes will not be a reason for us to deny you the services or products you request or contract from ASHA.
Transfer
Please note that no transfers of personal data will be made, other than those necessary to respond to requests for information from the competent authorities, in accordance with Chapter V of the Law, provided that such requests are duly founded and reasoned, and solely for the purposes established under the terms set by the Law.
Means offered by ASHA to limit the use or disclosure of your personal data
The data subject’s personal data will be kept in strict confidence, in accordance with the administrative, technical and physical security measures that ASHA implements in its security policies and procedures.
In order to restrict, limit and control the processing of personal data, ASHA maintains security mechanisms and controls, as well as internal privacy policies, intended to prevent unauthorised disclosure and to guarantee their appropriate, legitimate and lawful use.
Means for the data subject to exercise ARCO rights
Under the provisions of the Law, you have the right to Access, Rectify, Cancel and Object to the use of your personal data — known as ARCO rights — which you may exercise by sending an email to contacto@ashasolution.com which must contain the following information, or alternatively by completing and submitting the ARCO Rights Request form:
- Full name of the data subject.
- Address of the data subject and email address to which the response to the request is to be sent.
- Documents proving the identity of the data subject or, where applicable, the authorisation and documents proving the corresponding legal representation.
- A clear and precise description of the personal data in respect of which an ARCO right is to be exercised.
- A description of the right to be exercised, which may involve Accessing, Rectifying, Cancelling and/or Objecting in respect of their personal data.
- Any other element or document that makes it easier to locate the personal data, so that the request can be handled promptly.
Changes to this Privacy Notice
ASHA reserves the right to amend this Privacy Notice at any time. This Privacy Notice may undergo amendments, changes or updates arising from new legal requirements, from our needs relating to the products or services we offer, from updates to our privacy practices, from changes to our business model or from any other justified cause.
Any change will take effect upon its publication on the website and will additionally be communicated to the data subject by the email address provided at the time their personal data were collected, with due advance notice before it enters into force.
If you have any question about this Privacy Notice or the handling of your personal information, you may contact us at contacto@ashasolution.com.
Rights of access, rectification and cancellation of information
The right of access, rectification, cancellation or objection concerning the information used by ASHA is protected by the Law. Any natural person holding a commercial, business or employment relationship with the company may exercise this right in accordance with the section "Means for the data subject to exercise ARCO rights", where the mechanisms and requirements for the request are set out.
1. Right of access
Every natural person has the right to know what personal information about them is being processed by ASHA.
To that end, ASHA will verify the authenticity of the applicant in its database and, within a period of no more than 20 working days, will respond to the request, providing the information directly to the contact email address registered by the data subject.
2. Right of rectification
When a natural person identifies that the information provided to ASHA is incorrect or incomplete, they may request the correction or updating of their personal data.
To that end, ASHA will verify the authenticity of the applicant in its database and, within a period of no more than 20 working days, will notify them by the registered email address whether the request is admissible; if so, the data will be updated within no more than 15 working days following that notification, and ASHA will inform the data subject by the same means once the procedure is concluded.
3. Right of cancellation
Cancellation means the deletion of personal data from ASHA’s database. Any natural person may request the cancellation of their data when one of the following conditions is met:
- They consider that the data are no longer necessary for the purpose for which they were collected.
- Their relationship with ASHA has ended.
- The processing of the data does not comply with the Law.
ASHA will verify the authenticity of the applicant natural person in its database and, within a period of no more than 20 working days, will notify them by the registered email address whether the request is admissible. If so, the requested information will be deleted within no more than 15 working days following that notification, and ASHA will inform the data subject by the same means once the procedure is concluded.
4. Right to object
This right allows a natural person to object to the processing of their personal data when they consider that their information is being used in a manner contrary to the Law.
ASHA will verify the authenticity of the applicant in its database and, within a period of no more than 20 working days, will respond clarifying the processing applied to the information, notifying the data subject directly at the registered email address. Respect for the privacy and confidentiality of information provided by third parties will be guaranteed; should any deviation or misuse of the information be identified, ASHA will proceed in accordance with its transparency policy, code of ethics and internal work regulations, in order to establish the corresponding legal responsibilities.