I. IDENTITY AND ADDRESS OF THE DATA CONTROLLER.

II. PERSONAL INFORMATION REQUESTED.

III. PURPOSES.

IV. CONSENT TO THE USE OF PERSONAL DATA.

V. TRANSFER OF PERSONAL DATA.

VI. RIGHTS OF ACCESS, CORRECTION, DELETION, AND OBJECTION (ARCO).

VII. MECHANISM AND PROCEDURE FOR WITHDRAWING CONSENT TO THE PROCESSING OF PERSONAL DATA.

VIII. OPTIONS FOR LIMITING THE USE OR DISCLOSURE OF PERSONAL DATA.

IX. USE OF COOKIES, WEB BEACONS, OR ANY OTHER SIMILAR OR ANALOG TECHNOLOGY.

X. COLLECTION OF INFORMATION BY THIRD PARTIES.

XI. MEANS THROUGH WHICH THE PRIVACY NOTICE AND ITS AMENDMENTS ARE MADE AVAILABLE.

At Grupo MOZ, we are committed to the quality, safety, legality, and transparency of our services, helping to strengthen the international trade logistics chain through the implementation of the standards established under the Operador Económico Autorizado (OEA) framework, as well as by carrying out preventive actions designed to detect and prevent illegal acts in any of their forms.

That is why MOZ is committed to handling Personal Data properly; therefore, it will maintain the confidentiality of the information provided to it at all times and will act in accordance with applicable national and international regulations regarding Personal Data.

This Privacy Notice is governed by the provisions set forth in the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and the Guidelines for Privacy Notices, published in the Official Gazette of the Federation on July 5, 2010, December 21, 2011, and January 17, 2013, respectively.

I. IDENTITY AND ADDRESS OF THE DATA CONTROLLER.

The Data Controller is MOZ, located at Calle Benito Juárez No. 357, Colonia Centro, in the City and Port of Veracruz, State of Veracruz, ZIP Code 91700.

II. PERSONAL INFORMATION REQUESTED.

MOZ hereby informs you that you may request the Personal Data listed below, which will be treated as strictly confidential; therefore, prior to its collection, this Privacy Notice regarding the processing of such data will be made available to you.

A) Individuals:

• Copy of a valid official identification document (ID card issued by the IFE/INE, passport, and/or professional license).
• Tax Status Certificate with a QR code issued by SAT. 1
• A copy of proof of address no older than three months, which may be a utility bill (electricity, water, and/or telephone)2. When sharing a lease agreement, the most recent CFDI for rent payment must be included.
• A copy of the statement certifying that the person engaged in vulnerable activities asked their client whether they are aware of the identity of the beneficial owner, signed by those directly involved in the transaction. 3
• An original letter of authorization signed in the taxpayer’s own handwriting. An original copy must be submitted for each office where the taxpayer will conduct business.
• Opinion on compliance with tax obligations.
• Request for the assigned task. 

Additional information for both:

Information regarding whether the offices/facilities are appropriate for the primary business activity.

Website address.

If the transactions carried out by the customer fall under the category of Vulnerable Transactions.3

If the customer is registered in the importers' registry.

If the customer uses a sector-specific standard.

Specify the country of origin and/or destination of the goods.

General customer contact information: contact name, email address, and phone number.

Contact information for payment purposes: contact name, email address, and phone number.

Registration forms must be sent with a copy to altasociocomercial@moz.com.mx, indicating in the subject line the office or offices where the client will conduct business.

C) MOZ Website.

• • Full name.
• • Phone number
• • Email.

MOZ collects Personal Data in good faith and, for this reason, presumes that such data is truthful, accurate, complete, and identifies the Data Subject who submits and/or provides it, and it is therefore the Data Subject’s responsibility to ensure that the Personal Data provided meets these criteria and is updated as necessary. Similarly, MOZ reserves the right to take any action it deems appropriate in the event of false information.

MOZ may collect Personal Data through its own administrative staff or indirectly through third parties. In both cases, upon request, the information will be made available to you through the same channel used to provide the privacy notice.

Since applicable regulations permit the use of other sources to obtain information, such as printed or electronic telephone directories and service directories, the Personal Data that may be obtained through such means includes: first and last names, phone number, email address, and physical address.

Likewise, please be advised that, for the safety and security of our administrative facilities, the people who work there, and our visitors, MOZ may capture images and, in some cases, audio considered Personal Data through our internal monitoring and video recording systems and circuits, which will be processed and protected in accordance with the terms set forth in this Comprehensive Privacy Notice.

SENSITIVE PERSONAL INFORMATION

We would like to inform you that MOZ does not collect Sensitive Personal Data, such as racial or ethnic origin, current and future health status, genetic information, religious, philosophical, and moral beliefs, union membership, political opinions, or sexual preferences.

DATA STORAGE.

MOZ stores Personal Data for the period of time necessary to provide the service for which it was collected and to fulfill the purpose for which it was requested.

DATA PROTECTION.

MOZ, in compliance with regulations governing Personal Data, has adopted the legally required security measures; and requires third parties to whom it transfers Personal Data for processing or storage to adopt the same measures. Furthermore, Data Subjects are hereby informed that MOZ has additional technical means and measures in place to prevent the loss, misuse, alteration, unauthorized access, or theft of the Personal Data provided to it.

Notwithstanding the foregoing, and given that security measures may be subject to breaches due to acts beyond MOZ’s control; MOZ, without assuming any liability, undertakes to notify the Data Subject in the event of any breaches of security measures, so that the Data Subject may take the appropriate measures to protect their rights.

III. PURPOSES.

The purposes for which MOZ may request, collect, store, and/or use or transfer Personal Data are as follows:

• Review and verification of the personal data voluntarily provided by individuals who visit us in person or through our website; 
• To contact people who request information about any of our services; 
• For billing purposes related to the provision of requested services;
• Follow up on and address inquiries regarding the services we offer our clients; 
• Identification to grant access to our facilities.
• Collect statistical data on the quality of our services and our customers' level of satisfaction; 
• Development and promotion of advertising campaigns for commercial purposes related to our services; 
• Inform the public about new services or changes to existing ones; 
• Update our customer and supplier database; 
• Manage human resources for MOZ and send information to prospective clients who request it;
• Distribute our e-newsletter and provide updates on various topics;
• Any other purpose that is similar to or compatible with the foregoing. 

IV. CONSENT TO THE USE OF PERSONAL DATA.

The processing of Personal Data shall always be subject to the Data Subject providing consent, whether expressly—by stating their intent verbally, through electronic or optical means, any other technology, or through unequivocal signs; or tacitly, where “tacit consent” is understood to mean that, once the Privacy Notice has been made available to the Data Subject, the Data Subject does not express any objection, in accordance with the provisions of the regulations governing this Comprehensive Privacy Notice.

For both types of consent, the Data Subject has 5 days to object to the processing of such Personal Data; if no objection is raised, it will be understood that consent has been given.

SENSITIVE PERSONAL INFORMATION.

In the event that MOZ requires Personal Data that the Data Subject might consider Sensitive, for example:  Financial Data (Income, Bank Statements, and other related information), Asset Data (Tangible Assets, Real Estate, and other related information), Personal Data (Spouse, Nationality, and other related information); the manner in which such data is processed will be determined in the terms of the respective service agreement and/or express written consent will be required, authorizing its processing through the Data Subject’s handwritten signature, electronic signature, or any other means of authentication.

Consent will not be required for the processing of Personal Data when: 

I. Is provided for by law; 

II. The data is available in publicly accessible sources; 

III. Personal Data undergoes a prior de-identification process; 

IV. Be intended to fulfill obligations arising from a legal relationship between the Data Subject and the data controller; 

V. There is an emergency situation that could potentially cause harm to an individual or their property; 

VI. They are essential for medical care, prevention, diagnosis, the provision of health care, medical treatments, or the management of health services, as long as the Data Subject is unable to give consent, under the terms established by the General Health Law and other applicable legal provisions, and provided that such data processing is carried out by a person bound by professional confidentiality or an equivalent obligation, or 

VII. The competent authority issues a decision.

V. TRANSFER OF PERSONAL DATA.

MOZ may transfer Personal Data and/or Personal Data that the Data Subject may consider Sensitive, in order to maintain a relationship with the Data Subject regarding the company’s products, services, and research; for statistical and marketing purposes; to ensure proper quality control and to measure levels of contact with its customers through quality assessment surveys and market research; for the purpose of assessing transaction fraud risk, as well as for informational, promotional, advertising, or commercial purposes. In this regard, your information may be shared with customs brokers, carriers, ports of entry, financial, banking, or credit institutions, business partners, chambers of commerce, and similar providers that offer the requested services or other services, depending on the type of employment or contractual relationship.

In addition to the transfers described above, MOZ will not sell, disclose, or transfer Personal Data to third parties without prior consent. However, MOZ may transfer Personal Data when such transfer is required by law.

VI. RIGHTS OF ACCESS, CORRECTION, DELETION, AND OBJECTION (ARCO).

The owner of the personal data held by MOZ may, at any time, access such data, have it deleted if it is deemed excessive or unnecessary for the purposes that justified its collection, and have it corrected if it is inaccurate or incomplete, and object to the processing of such data for specific purposes (ARCO rights).

The mechanism that MOZ has implemented to enforce ARCO rights is as follows:

The Data Subject must submit a request that meets the following requirements:

1. The data subject's name and address or email address, so that we can notify them of the response to their request; 
2. Documents proving the identity of the Account Holder or, if applicable, the legal representation of the person acting on their behalf; 
3. A clear and precise description of the Personal Data with respect to which the Data Subject seeks to exercise any of the aforementioned rights; 
4. Any other information or document that facilitates the identification of the Data Subject's Personal Data; 
5. Clearly specify whether the request is for access, correction, deletion, or objection; 
6. The reason for the request; and 
7. Changes to be made if the request is for the correction of Personal Data.

Please submit this request to MOZ using any of the following methods:

By email to the following address: altasociocomercial@moz.com.mx

By mail and/or in person at the MOZ offices, located at 357 Benito Juárez Street, Colonia Centro, Veracruz, Veracruz, ZIP Code 91700.

The procedure that MOZ will follow once it has received the request is as follows:

It will notify you of the decision within a maximum of 20 (twenty) calendar days from the date it received the request, and if the request is approved, it will take effect within 15 (fifteen) calendar days following the date on which you are notified of its approval.

If the information provided in your request is incorrect or insufficient to process it, or if the required supporting documents are not included, you will be notified within five business days of receipt of your request to provide the necessary information or documents to process it. You will have ten business days to comply with this request, starting on the day after you are notified. If you do not respond to this request within the allotted time, your application will be deemed not to have been submitted.

Please be advised that the aforementioned deadlines may be extended when warranted by the specific circumstances of the case. The Data Subject will be notified of this via the same means used to submit the request.

MOZ may deny access to, rectification of, erasure of, or objection to the processing of such data in the following cases:

1.- When the applicant is not the Data Subject, or the legal representative is not duly authorized to act on the Data Subject’s behalf; 

2.- When the applicant's personal data cannot be found in its database; 

3. When the rights of a third party are infringed; 

4.- When there is a legal impediment, or a decision by a competent authority that restricts access to Personal Data or does not permit the rectification, erasure, or objection to such data; 

5. When the correction, deletion, or objection has already been made.

The refusal may be partial, in which case MOZ will grant access, correct, delete, or object to the relevant portion. The exercise of the “ARCO Rights” will be free of charge, but the Data Subject must cover any justified shipping costs or the cost of reproducing copies or other formats, if required.

VII. MECHANISM AND PROCEDURE FOR WITHDRAWING YOUR CONSENT TO THE PROCESSING OF PERSONAL DATA.

At any time during the processing, the Data Subject may revoke the consent granted for the processing of Personal Data, on the understanding that such data is necessary for the purposes described above and that limiting its processing could hinder the fulfillment of the purposes mentioned in this Privacy Notice; To do so, you must send your request by email to altasociocomercial@moz.com.mx or visit the MOZ offices, located at Calle Benito Juárez No. 357, Colonia Centro, in the City and Port of Veracruz, State of Veracruz, ZIP Code 91700, between 9:00 AM and 5:00 PM.

In this regard, the request must be accompanied by a copy of an official identification document to verify that you are the Data Subject (or, if applicable, proof of the legal representative’s authority), and provide the email address or mailing address where you wish to receive information regarding the process, a clear and precise description of the Personal Data for which you wish to revoke consent, and the information necessary for us to notify you of the decision on your request. We will notify you of the decision on your request within 15 business days of its submission, provided that the request is complete and properly submitted.

VIII. OPTIONS FOR LIMITING THE USE OR DISCLOSURE OF PERSONAL DATA.

The Personal Data that the Data Subject provides to MOZ will be processed in accordance with the principles established in the applicable law and its regulations, as cited at the beginning of this Privacy Notice, namely: lawfulness, consent, information, quality, purpose, fairness, proportionality, and accountability. In order to protect Personal Data and reduce the risks or breaches that may arise from any loss, alteration, damage, or misuse of such data—or data that the Data Subject may consider Sensitive— MOZ has implemented physical, technical, and administrative security measures to safeguard the security of the information provided.

The Personal Data that the Data Subject provides to MOZ will be processed in accordance with the principles established in the applicable law and its regulations, as cited at the beginning of this Privacy Notice, namely: lawfulness, consent, information, quality, purpose, fairness, proportionality, and accountability. In order to protect Personal Data and reduce the risks or breaches that may arise from any loss, alteration, damage, or misuse of such data—or data that the Data Subject may consider Sensitive— MOZ has implemented physical, technical, and administrative security measures to safeguard the security of the information provided.

IX. USE OF COOKIES, WEB BEACONS, OR ANY OTHER SIMILAR OR ANALOG TECHNOLOGY.

We would like to inform you that the MOZ website, www.moz.com.mx, does not collect information through “cookies,” nor does it use visitor counters, “web beacons,” or any other similar or analogous technology.

X. COLLECTION OF INFORMATION BY THIRD PARTIES.

The MOZ website, www.moz.com.mx, contains links to other sites whose information practices may differ from those of the Portal; therefore, MOZ is not responsible for the services, content, information, and/or administration of those sites.

Furthermore, MOZ shall not be liable for the protection and processing of Personal Data and Sensitive Personal Data that the Data Subject provides to third parties with whom MOZ has entered into a collaboration agreement.

Therefore, it is the Data Subject’s responsibility to review the privacy policies of third parties responsible for processing to understand how they will handle Personal Data or Sensitive Personal Data. Furthermore, MOZ shall in no event and under no circumstances be liable for the processing of the Data Subject’s Personal Data by websites other than the www.moz.com.mx Portal.

XI. WAYS IN WHICH THE PRIVACY NOTICE AND ITS AMENDMENTS ARE MADE AVAILABLE TO YOU.

MOZ reserves the right to modify or supplement this Comprehensive Privacy Notice to bring it into line with new legislation or case law, as well as with customs industry practices. In such cases, MOZ will announce the changes on the website www.moz.com.mx reasonably in advance of their implementation and/or will notify the Data Subject of the change using the same method by which the Personal Data was collected.

MOZ would also like to thank you for your interest in the website www.moz.com.mx and in this Privacy Notice, and we are available to answer any questions or address any comments you may have regarding this Privacy Notice.