In accordance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties, Grupo Comercial Castaño S.A. de C.V. makes the following Privacy Notice available to you.
Grupo Comercial Castaño S.A. de C.V., known as ELYSA, with address at Av. Lázaro Cárdenas No. 2306, Col. Central, C.P. 26060, Piedras Negras, Coahuila, and website www.elysa.com, is responsible for the use and protection of your personal data. In compliance with the legal obligations established in the referenced law, through this document, we inform data owners about how their personal data will be processed when collected, used, stored, and/or transferred by ELYSA.
The personal data that ELYSA collects, uses, stores, or transfers, as permitted by applicable laws, will be used for the following purposes:

Primary purposes:
• Commercial relationship
• Issuance of invoices
• Credit assignment
• Integration of customer databases

Secondary purposes:
Additionally, we will use your personal information for purposes that are not necessary for the requested service but that help us provide better attention:
• Marketing (Promotions, offers, sales follow-up)

ELYSA may collect and, where appropriate, process personal data, meaning information that identifies or makes you identifiable. The personal data that the company will collect includes: Name, Email, Address, City, State, Country, Commercial references, Bank details, Phone and Mobile, Business activity, RFC, Website, CURP.

If you do not wish for your personal data to be processed for these additional purposes, you may submit a written request at this branch, stating your preference. Please request the appropriate form from the Administrative Manager, Lic. Mónica Lizbeth Riddle Saldúa.

Refusal to allow the use of your personal data for these purposes will not be grounds for us to deny you the services and products you request or contract with us.

To fulfill the primary purposes described above, ELYSA will transfer the necessary personal data to the following organizations and for the following purposes:

Organizations Recipient of personal data Purpose
Banking institutions Credit requests, check protection, credit status
National Business Promotion (Check Plus) Credit bureau Credit requests, check protection, credit status
Credit request validation ARCO Rights

ARCO Rights
You have the right to know what personal data we hold about you, how we use it, and the conditions of its use (Access). You also have the right to request the correction of outdated, inaccurate, or incomplete information (Rectification); to delete it from our records when you consider it not being used in accordance with principles, duties, and obligations established in the law (Cancellation); and to oppose the use of your personal data for specific purposes (Opposition). These rights are known as ARCO rights.

To exercise any of the ARCO rights, you must submit the respective request at ELYSA’s offices, via email, or in person.

To learn about the procedures and requirements for exercising ARCO rights, you may call the following phone number: (878) 783-1515; visit our website www.elysa.com; or contact our Data Protection Officer: Lic. Mónica Lizbeth Riddle Saldúa at ELYSA’s facilities or via email at administracion@elysa.com. She will process your requests and address any questions you may have regarding the handling of your information.

You may revoke the consent you have given us for the processing of your personal data. However, please note that in some cases, we may not be able to process your request or immediately cease using your data, especially if we are legally required to continue processing it. Also, revoking your consent for certain purposes may mean we can no longer provide the service you requested or that your relationship with us will end.

To revoke your consent, you must submit your request to Lic. Mónica Lizbeth Riddle Saldúa at ELYSA’s facilities or via email at administracion@elysa.com. She will process your request.

To learn about the procedures and requirements for revoking consent, you may call the following phone number: (878) 783-1515; visit our website www.elysa.com; or contact Lic. Mónica Lizbeth Riddle Saldúa at ELYSA’s facilities.

Data security
ELYSA will implement the necessary technical, administrative, and physical security measures to protect your personal data and prevent its damage, loss, alteration, destruction, or unauthorized use, access, or processing. Only authorized personnel who have complied with confidentiality requirements may handle your data. These personnel are prohibited from allowing unauthorized access or using your data for purposes other than those established in this Privacy Notice. The obligation of confidentiality persists even after the termination of your relationship with ELYSA.

Modifications to the Privacy Notice
We reserve the right to modify or update this Privacy Notice at any time to comply with legislative or jurisprudential changes, internal policies, new requirements for our services or products, or market practices. We are committed to keeping you informed about any changes, which will be available to the public on our website www.elysa.com.

Last update: 09/21/2018

Video Surveillance Privacy Notice
In accordance with the Federal Law on Protection of Personal Data Held by Private Parties, Grupo Comercial Castaño S.A. de C.V. makes the following Privacy Notice available to you.
The company, known as ELYSA, with address at Av. Lázaro Cárdenas No. 2306, Col. Central, C.P. 26060, Piedras Negras, Coahuila, and website www.elysa.com, is responsible for the use and protection of your personal data. In compliance with the law, we inform you how your personal data will be processed when collected, used, stored, and/or transferred by ELYSA.
The personal data collected, used, stored, or transferred by ELYSA, to the extent permitted by applicable laws, will be used for the following purposes:

Primary purposes:
• Security and surveillance of ELYSA facilities.
• Security of personnel, clients, suppliers, and visitors.

Secondary purposes:
In addition, we may use your personal information for purposes that are not necessary for the requested service but help us provide better service:
• Marketing (Advertising)

ELYSA may collect and, where appropriate, process personal data, such as images and sound in some cases.

If you do not wish for your personal data to be processed for these secondary purposes, you may submit a written request at this branch, stating your preference. Please request the form from the Administrative Manager: Lic. Mónica Lizbeth Riddle Saldúa.

Refusal to allow the use of your personal data for these purposes will not be grounds for us to deny you the services and products you request or contract with us.

ELYSA does not transfer personal data collected for the purposes described in this Privacy Notice, except in cases provided by law.

ARCO Rights
You have the right to know what personal data we hold about you, how we use it, and the conditions of its use (Access). You also have the right to request the correction of outdated, inaccurate, or incomplete information (Rectification); to delete it from our records when you consider it not being used in accordance with principles, duties, and obligations established in the law (Cancellation); and to oppose the use of your personal data for specific purposes (Opposition). These rights are known as ARCO rights.

To exercise any of the ARCO rights, you must submit the respective request at ELYSA’s offices, via email, or in person.

To learn about the procedures and requirements for exercising ARCO rights, you may call the following phone number: (878) 783-1515; visit our website at www.elysa.com; or contact our Data Protection Officer: Lic. Mónica Lizbeth Riddle Saldúa at ELYSA’s facilities or via email at administracion@elysa.com. She will process your requests to exercise these rights and answer any questions you may have regarding the handling of your information.

You may revoke the consent you have given us for the processing of your personal data. However, please note that in some cases, we may not be able to process your request or immediately stop using your data, especially if we are legally required to continue processing it. Also, revoking your consent for certain purposes may mean we can no longer provide the service you requested or that your relationship with us will end.

To revoke your consent, you must submit your request addressed to Lic. Mónica Lizbeth Riddle Saldúa at ELYSA’s facilities or via email at administracion@elysa.com. She will process your request.

To learn about the procedures and requirements for revoking consent, you may call the following phone number: (878) 783-1515; visit our website at www.elysa.com; or contact Lic. Mónica Lizbeth Riddle Saldúa at ELYSA’s facilities.

Security of Personal Data
ELYSA will implement the necessary technical, administrative, and physical security measures to protect your personal data and prevent damage, loss, alteration, destruction, or unauthorized use, access, or processing. Only authorized personnel who have fulfilled and observed the relevant confidentiality requirements will handle your data. These authorized personnel are prohibited from allowing access to unauthorized persons and from using your data for purposes other than those established in this Privacy Notice. The obligation of confidentiality for personnel involved in the processing of your data persists even after the termination of your relationship with ELYSA.

Modifications to the Privacy Notice
We reserve the right to make modifications or updates to this Privacy Notice at any time, to address legislative or jurisprudential developments, internal policies, new requirements for the provision or offer of our services or products, and market practices. We commit to keeping you informed about any changes or updates to this Privacy Notice, which will be made available to the public through our website www.elysa.com.