Notice of Privacy

Last update: January 24, 2023

In accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Individuals, its Regulations, and other applicable regulations (the "Personal Data Legislation"), we issue this Privacy Notice.

  1. Identity and address of the Data Controller.

Kisá Proptech, S.A.P.I de C.V. (the "Data Controller" or "We", interchangeably), known commercially as Kire, obtains, uses, discloses, and stores (hereinafter referred to as "Data Processing") personal data ("Personal Data") from you ("You" or the "Data Subject") collected either in person, through our domain https://kiremx.com/ (the "Website"), through our social media channels (the "Social Media"), or by any other means, and has a registered address for hearing and receiving notifications in relation to this at Arquímedes no. 138. Int. 202, Colonia Polanco IV Sección, Alcaldía Miguel Hidalgo, Postal Code 11550, Mexico City.

  1. Personal Data Processed by the Data Controller.

 For the purposes stated in this Privacy Notice, we will process the following categories of Personal Data and specific Personal Data:

  • identification and contact information;
  • employment data;
  • official identification;
  • financial and asset information;
  • phone calls, emails, and conversations in customer service centers;
  • identification, contact, and marital status data of your spouse or partner, as well as their patrimonial regime; and
  • evidence of consent and authorizations, as well as proof of life.

For the purposes stated in this Privacy Notice, the Data Controller processes the following categories of sensitive personal data:

  • political affiliation data (Politically Exposed Person); and
  • biometric data.

If you have provided Personal Data of third parties, you guarantee that you have their authorization and/or consent, or in the case of minors, the authorization and/or consent of their parents or guardians, to provide such data for processing in accordance with the purposes of this Notice, and you are responsible for communicating to such individuals the terms of this Notice.  

  1. Purposes of the Processing.

We will process Personal Data for the following primary and necessary purposes:

  1. To maintain, develop, administer, control, and fulfill the contractual relationship derived from the request and/or contracting of our products and/or services.
  2. To create, organize, catalog, classify, and store files and databases of the Data Subjects, as well as their accounts.
  3. To create and manage accounts and requests of the Data Subjects on our Site and to verify, validate, and confirm the identity and information of the Data Subjects and the information provided by them, internally or through any authority or third party.
  4. To provide the Data Subject with information, communications, and notifications about our products and/or services.
  5. To administer, develop, maintain, customize, and improve our Site, products and/or services, and operating systems, and perform the necessary activities for them to function optimally and correctly, as well as to prevent or detect fraud or abuses.
  6. To carry out debt collection activities.
  7. To provide advice, clarifications, and customer service through call centers, email, and/or any other means.
  8. To monitor the quality of our customer service provided through our call centers, emails, and/or any other environment, for which we may record calls answered in our call center or store email conversations and/or any other means through which customer service is provided.
  9. To perform statistical and historical registration of users.
  10. To comply with legal requirements from competent authorities, national or foreign, and fulfill the obligations derived from the legal relationship between you and the Data Controller and/or its affiliated and subsidiary companies.
  11. To comply with any applicable legal provisions and obligations for the Data Controller, its subsidiaries and/or affiliates, as well as to manage any judicial process involving them.
  12. To carry out processes related to corporate restructuring of the Data Controller, such as merger, consolidation, sale, liquidation, or transfer of assets.
  13. To carry out the transfers mentioned in Section 5.
  14. To perform necessary and/or analogous complementary activities for the achievement of the aforementioned purposes.

 

We will process Personal Data for the following secondary or ancillary purposes:

  1. Marketing, advertising, promotion, newsletters, data profiling, advertising messages, quality evaluation, news, event invitations, commercial prospecting, and offering of services or products, general or personalized, sent through any means.

If you do not want your personal data to be processed for these secondary or ancillary purposes, you can send a message to contacto@kiremx.com and subsequently follow the procedure referred to in section 6 of this Privacy Notice.

  1. Options and Means We Offer You to Limit the Use or Disclosure of Your Personal Data.

According to the procedure established in section 7 of this Privacy Notice, you may submit a request to limit the use or disclosure of your Personal Data, unless there are causes in which the limitation or use of them is inappropriate.

  1. Transfer of Personal Data.

Your Personal Data may be transferred within the national territory or abroad, as follows:

  1. to controlling companies, controlled companies, or companies under common control with the Data Controller, operating under the same internal processes and policies of the Data Controller, for the purposes of centralized information safeguarding, service provision, administrative, analytical and statistical purposes, and customer registration, among other internal processes of the Data Controller;
  2. to authorities, government organizations, or entities, in compliance with or in relation to the obligations contemplated in the applicable legislation to the Data Controller, its subsidiaries and/or affiliates, as well as in compliance with requests made to them;
  3. to authorities, government organizations, or entities, public notaries and public brokers, when the transfer is necessary for the recognition, exercise, or defense of a right of the Data Controller, its subsidiaries and/or affiliates in a judicial process;
  4. to third-party acquirers resulting from a corporate restructuring of the Data Controller, including merger, consolidation, sale, liquidation, or transfer of assets, when the transfer is necessary for the maintenance or fulfillment of the relationship between said Data Controller and the Data Subject;
  5. to advisors, suppliers, and service providers of the Data Controller, when the transfer is necessary for the maintenance or fulfillment of the relationship between the Data Controller and the Data Subject;
  6. to financial institutions and service providers to such industry, when the transfer is necessary by virtue of a contract entered into or to be entered into in the interest of the Data Subject, by the Data Controller and such third parties and/or when the transfer is necessary for the maintenance or fulfillment of the relationship between the Data Controller and the Data Subject.
  7. based on the other assumptions established in the Personal Data Legislation, which do not require your consent.

The aforementioned transfers do not require your consent in accordance with the Personal Data Legislation.

  1. Means to exercise your rights.

In all legally applicable cases, you may exercise the following rights regarding your Personal Data at any time and through the procedure established in this section: (i) rights of Access, Rectification, Cancellation, or Opposition ("ARCO Rights"); (ii) revoke the consent granted to the Controller for the processing of Personal Data; (iii) limit the use or disclosure of Personal Data; and (iv) express your refusal to the processing of your personal data for the aforementioned secondary and ancillary purposes.

To exercise these rights regarding your personal data, you must submit the corresponding request to the Controller, through a request that we make available to you here, then print it, complete it by hand or machine, sign it at the bottom, and send it in electronic format to the email address contacto@kiremx.com, indicating "Exercise of rights regarding personal data" as the subject and including the following:

  • copy of the documents proving your identity (valid official identification with photograph);
  • if you have legal representation, the full name of your legal representative, a document proving your identity and that of your representative (valid official identification with photograph), and a copy of the instrument of official power of attorney or power of attorney letter signed by two witnesses, which evidences the authority of said legal representative to act on your behalf, in accordance with the Personal Data Legislation;
  • any other element or document that facilitates the location of your Personal Data.

We will process requests from Data Subjects for the exercise of their rights regarding Personal Data within a period not exceeding 20 (twenty) business days from their receipt, and we will comply with the request, if applicable, within 15 (fifteen) business days following our response to your request. The Controller may extend this period for processing requests by up to 20 (twenty) additional business days when warranted, subject to prior notification to the respective Data Subject.

You may obtain the requested information or Personal Data through electronic documents in conventional formats or through any other legitimate means that guarantee and prove the effective exercise of the requested right. Our Privacy Officer is in charge of processing any requests from Data Subjects regarding the exercise of their rights regarding Personal Data and can be contacted by email at contacto@kiremx.com.

The Data Subject must keep the Controller informed of their Personal Data at all times. Therefore, we request your cooperation to promptly communicate any changes that we should take into account to incorporate them into our database. You guarantee and are responsible, in any case, for the truthfulness, accuracy, validity, and authenticity of your Personal Data or those of any third party under your custody or legal representation, as well as the corresponding authorizations to share this data with us.

  1. Means that allow for the automatic collection of personal data.

We inform you that the Site uses cookies and other technologies through which it is possible to automatically monitor your behavior, offer our services, and provide you with an optimal and personalized experience during their use. The personal data collected through these technologies include IP address, websites and sections thereof that you visit from the Site, before the Site or on pages related to the Site, browser characteristics, device characteristics, operating system, language preferences, URLs, information about behaviors and actions performed on the Site, dates and times of visits to the Site, as well as sections or content consulted on it.

These technologies can be disabled by accessing the Privacy and/or Security option(s) located in the section(s) of Options, Tools, Internet Preferences, or similar functions of the Internet browser you are using; however, when disabling them, please consider that such action could prevent you from obtaining the full functionality that the Site and social networks could offer you. If you wish to obtain additional information about the cookies mentioned in this section, you can visit www.allaboutcookies.org/es.

  1. Changes to the Privacy Notice.

This Privacy Notice may undergo modifications, changes, or updates derived from new legal requirements, our own needs for the services we offer, our practices, programs, or privacy policies, changes in our business model, or other causes.

We commit to keeping you informed about any changes that this Privacy Notice may undergo, through the Site, in the corresponding Privacy Notice section.