PRIVACY NOTICE

This Privacy Notice contains the following information, which you can access directly through the following links:

A. Identity and address of the Data Controller

ANCORA Agente de Seguros y de Fianzas, S.A. de C.V. (hereinafter, the "Data Controller" or "ANCORA"), with an address for the purpose of receiving notifications at Cracovia 72, Tower B, 113, Col. San Ángel, C.P. 01000, Mexico City, will be responsible for the processing of personal data collected from you, in accordance with this Privacy Notice, in compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Individuals (hereinafter "Law" or "FLPD") and other applicable regulations.

B. Personal data collected and subject to processing. Data of minors

The personal data collected and processed by ANCORA are all those necessary for the legal relationship established as an Insurance Agent with the client.

The personal data to be collected are classified as follows:

ANCORA does not directly collect personal data from minors through forms, questionnaires, or through its website. ANCORA only processes personal data provided by parents and/or legal guardians, with the consent of the latter in all cases.

Parents and/or legal guardians may exercise the ARCO rights (access, rectification, cancellation, and opposition) at any time or revoke their consent for the processing of personal data of minors that they have provided for any purpose related to the acquired membership or the activities of the various centers of the Data Controller.

C. Processing of sensitive personal data. Health data

Through the corresponding questionnaires or forms, personal data considered sensitive under applicable law are collected, especially those related to your health (and, where applicable, that of your family members or economic dependents).

Sensitive personal data will be processed for the purposes identified in this Privacy Notice and, in particular, for the integration of the client's file and subsequent contracting of some of the services offered by ANCORA as an Insurance Agent.

Explicit consent from the client is required for the processing of their sensitive personal data, in accordance with Article 9 of the FLPD.

____ I authorize the processing of my sensitive personal data in accordance with the terms and conditions stated in this Privacy Notice.

Additionally, we inform you that the aforementioned data are obtained for processing through the following methods:

D. Purposes of processing

a. Original and necessary purposes

As an Insurance and Bonding Agent, ANCORA reiterates that all information concerning your person (hereinafter, "Personal Data") will be handled with absolute confidentiality, and the collection, use, disclosure, and storage (hereinafter, "Processing") will only be carried out for the following purposes:

Therefore, from the moment you grant your consent, ANCORA may keep in its physical and electronic records all Personal Data provided by you through any means made available by ANCORA.

b. Additional purposes

Your personal information may also be used for:

In addition to the above, please note that the Personal Data of third parties provided by you to the Data Controller for the fulfillment of the identified purposes (e.g., family data) must be provided after informing them about the existence of the processing and the content of this Privacy Notice.

E. Additional purposes. Refusal to process

The aforementioned purposes do not have the characteristic of originating or being necessary for the existence, maintenance, and fulfillment of the legal relationship between you and ANCORA. Therefore, you may express your refusal to process your Personal Data by checking the following box:

_____ I do not wish for ANCORA to use my personal information for the aforementioned additional purposes, so I do not wish to receive commercial or promotional information about products and/or services from third parties or ANCORA.

If you do not check the box above, we will assume that you grant us your consent to transfer your Personal Data for the additional purposes.

However, in any case, you may revoke your consent for the processing of your personal data for the additional purposes indicated, using the mechanisms provided in this Privacy Notice and in accordance with current legislation.

F. Transfer of personal data

ANCORA informs you that, exclusively for the purpose of fulfilling the purposes mentioned in this document, it may transfer your personal data (including sensitive data) to third parties such as controlling companies, subsidiaries, or affiliates of the Data Controller, providers, service providers, and business partners. This transfer of data will be carried out with appropriate security measures, in accordance with the FLPD.

If you do not check the following box, we will assume that you grant us your consent to transfer your Personal Data for the purposes mentioned in the previous paragraph. It should be noted that this consent is revocable at any time following the procedure established in this Privacy Notice.

_____ I do not consent to the transfer of my data.

In the same way, through this Privacy Notice, ANCORA informs you that it maintains various mechanisms, procedures, and security measures, both administrative and technical and physical, aimed at protecting your Personal Data against damage, loss, alteration, destruction, or unauthorized use. As part of these mechanisms and security measures, ANCORA has entered into confidentiality agreements with its employees, providers, service providers, business partners, and related parties, committing them to carry out appropriate processing of your personal data and to respect the terms contained in this Privacy Notice.

Recipients of such Personal Data assume the same responsibilities as the Data Controller, in accordance with the terms set out in this Privacy Notice.

G. Exercise of ARCO

G. Exercise of ARCO rights Your personal data will not be transferred to third parties without your consent, except as provided in Article 10 and 37 of the FLPD and in any case, complying with the conditions provided for in Article 17 of the FLPD Regulations.

In all cases permitted by law, you may exercise your Access, Rectification, Cancellation, and Opposition (ARCO) rights at any time through the procedures we have implemented.

The corresponding request must comply with the requirements established by current legislation, in writing addressed to our Personal Data Controller, with an address at Cracovia 72 Tower B, 113, Col. San Ángel, C.P. 01000, Mexico City.

The request must contain and include the following:

The Data Controller will communicate to you, within a maximum period of 20 (twenty) business days, counted from the date on which it receives the corresponding request, the determination adopted. If the request is granted, it will be implemented within 15 (fifteen) business days following the date on which the Data Controller communicates the response. If the information provided in your request is incorrect or insufficient, or if the necessary documents to prove your identity or the corresponding legal representation are not attached, the Data Controller, within 5 (five) business days following the receipt of your request, will request the correction of the deficiencies in order to process it. In such cases, you will have 10 (ten) business days to address the request for correction, starting from the day following the date on which you received it. The corresponding request will be considered as not submitted if you do not respond within that period.

You may obtain the requested information or personal data through simple copies, electronic documents in conventional formats (Word, PDF, etc.), authorized and restricted access to the system that processes your Personal Data (access), or through any other legitimate means that guarantee and verify the effective exercise of the requested right.

Alternatively, the Data Subject may submit their request through the email address datospersonales@ancora.com.mx, meeting all the aforementioned requirements, with the subject of the communication being "ARCO Rights and/or Revocation of Consent." The procedure timelines will be the same as referred to in the preceding paragraph. The use of electronic means to exercise ARCO rights authorizes the Data Controller to respond to the corresponding request through the same means, unless the Data Subject expressly indicates another means.

You are responsible for keeping your personal data in the possession of the Data Controller up to date. Therefore, you guarantee and respond, in any case, for the truth, accuracy, validity, and authenticity of the personal data provided, and you agree to keep them duly updated, communicating any changes to the Data Controller.

Additionally, we inform you that you can also go to the Public Registry of Users (REUS), which is regulated by the National Commission for the Protection and Defense of Financial Services Users (CONDUSEF) to limit the use and disclosure of your Personal Data. You can find more information on the CONDUSEF website (https://www.gob.mx/condusef).

H. Revocation of consent

You may revoke your consent for the processing of your personal data, without retroactive effects, in all cases where such revocation does not imply the impossibility of fulfilling obligations arising from a current legal relationship between you and the Data Controller.

The procedure for revoking consent, if applicable, will be the same as the one established in the immediately preceding section for the exercise of ARCO rights.

I. Limitations on the disclosure of your personal data

You may limit the use or disclosure of your personal data by directing the corresponding request to our Personal Data Department. The requirements to prove your identity, as well as the procedure to address your request, will be the same as those indicated in section H) of this Privacy Notice (Exercise of ARCO rights).

J. Automatic means of collecting personal data

ANCORA uses cookies to facilitate navigation on the website www.ancora.com.mx. Cookies are a tool used by web servers to store and retrieve information stored in the browser used by users or visitors to the website, allowing them to save their personal preferences for a better browsing experience.

Cookies have an expiration date, which can range from the duration of the session or visit to the website to a specific date after which they become inoperative. The cookies used on www.ancora.com.mx are only associated with an anonymous user and their computer, do not provide references that allow deduction of the user's name and surname, cannot read data from your hard drive, and do not include viruses in their text.

You can configure your browser to automatically accept or reject all cookies, or to receive an on-screen notice when each cookie is received and decide at that time whether to install it on your hard drive. We suggest consulting your browser's help section to learn how to change the settings for accepting or rejecting cookies. Even if you configure your browser to reject all cookies or expressly reject cookies from www.ancora.com.mx, you can still browse the website with the only inconvenience of not being able to enjoy the features of the site that require the installation of some of them. In any case, you can delete cookies from www.ancora.com.mx installed on your hard drive at any time, following the procedure established in your browser's help section.

K. Modifications or updates to this Comprehensive Privacy Notice

ANCORA may modify, update, extend, or otherwise change the content and scope of this Privacy Notice at any time and at its complete discretion. In such cases, ANCORA will publish such changes on the website www.ancora.com.mx, in the "Contact - Privacy Notice" section. Changes to this Privacy Notice may also be communicated via email, if such means have been established as a communication channel between you and the Data Controller.

Last updated:
Mexico City, August 21, 2023

Follow us on our social networks: