Regulaciones sobre tú Privacidad

Aviso de Privacidad Integral

Responsable del tratamiento de sus datos personales

En cumplimiento con lo dispuesto por la Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), RAX Security & Risk Management, con domicilio en Colonia Cuauhtémoc, Alcaldía Cuauhtémoc, Ciudad de México, C.P. 06500, México, es responsable del tratamiento, uso y protección de sus datos personales.

Datos personales recabados

Podemos recabar, utilizar, almacenar o transferir los siguientes datos personales, según el tipo de usuario:

1. Usuarios interesados o prospectos de servicios

- Nombre completo
- Correo electrónico
- Teléfono de contacto
- Empresa u organización a la que pertenece
- Cargo o puesto
- Información del área de interés o problemática a resolver

2. Representantes legales o contactos administrativos de clientes

- Nombre completo
- Copia de identificación oficial (INE, pasaporte)
- Cargo o puesto en la empresa
- Correo institucional y teléfono
- Firma autógrafa o electrónica
- Documentos de representación legal (cuando aplique)
- Datos fiscales (RFC, razón social, domicilio fiscal)

3. Beneficiarios de capacitación, evaluaciones o programas internos

- Nombre completo
- CURP
- Edad y fecha de nacimiento
- Género (opcional)
- Puesto o función en la empresa
- Correo electrónico o teléfono institucional
- Unidad, área o sede de adscripción
- Firma (en listas de asistencia, constancias, evaluaciones)
- Datos sobre desempeño o evaluación (aprobación, asistencia, etc.)

Finalidades del tratamiento

Finalidades primarias:

- Identificar y contactar al titular para la prestación de servicios
- Elaborar propuestas técnicas, contratos, órdenes de servicio
- Diseñar e implementar programas de consultoría y capacitación
- Generar listas de asistencia, constancias, evaluaciones o reportes
- Cumplir obligaciones fiscales, legales y contractuales
- Registrar evidencia documental y técnica de cumplimiento

Finalidades secundarias (requieren consentimiento):

- Promoción de cursos, boletines, contenidos técnicos y actualizaciones
- Realización de encuestas de satisfacción o estudios de mejora
- Estadísticas e informes internos no vinculados a personas identificables

Transferencias de datos personales

Sus datos no serán compartidos con terceros sin su consentimiento, salvo que:

- Sea requerido por autoridades competentes o por mandato legal
- Sea necesario para la formalización de contratos o convenios
- Se involucre a proveedores externos con cláusulas de confidencialidad

Medidas de seguridad

La empresa ha implementado medidas físicas, administrativas y técnicas adecuadas para proteger sus datos personales contra pérdida, uso indebido, alteración o acceso no autorizado.

Uso de cookies y tecnologías de rastreo

Nuestro sitio web puede utilizar cookies, web beacons u otras tecnologías para mejorar su experiencia de navegación. Puede deshabilitarlas desde su navegador, aunque esto puede afectar algunas funcionalidades del sitio.

Derechos ARCO y revocación del consentimiento

Usted tiene derecho a acceder, rectificar, cancelar u oponerse al tratamiento de sus datos personales (Derechos ARCO), así como a revocar su consentimiento en cualquier momento.
Para ejercer estos derechos, puede enviar una solicitud a:

Correo electrónico: rvega@rax.com.mx
Asunto: “Ejercicio de Derechos ARCO”
Incluir:
- Nombre completo
- Medio para recibir respuesta
- Copia de identificación oficial
- Descripción clara del derecho que desea ejercer

Modificaciones al aviso de privacidad

Nos reservamos el derecho de actualizar este aviso en cualquier momento. Los cambios serán publicados en nuestro sitio web en la sección correspondiente. Le recomendamos revisarlo periódicamente.

Consentimiento

Al proporcionar sus datos por cualquier medio (formulario web, correo electrónico, vía telefónica o presencial), usted consiente el tratamiento de los mismos conforme a este aviso de privacidad. Para datos sensibles o secundarios, se solicitará su consentimiento expreso y por escrito cuando sea necesario.

Privacy Notice

( + California Consumer Privacy Act Compliance)

This Privacy Notice is provided in accordance with the California Consumer Privacy Act (CCPA) and other applicable U.S. privacy laws. RAX Security & Risk Management, located at Cuauhtemoc, Cuauhtemoc, Mexico City, Zip Code 06500, Mexico, is responsible for the collection and use of personal information as described below.

Categories of Personal Information Collected

We may collect the following categories of personal information from consumers, representatives of client companies, and participants in training programs:

1. Identifiers

- Full name
- Email address
- Phone number
- Company or organization name
- Job title or position
- IP address

2. Customer Records Information

- Physical address
- Identification documents (e.g., driver's license)
- Signature (for legal contracts or attendance)

3. Professional or Employment-Related Information

- Employer name
- Department or division
- Employment status or role
- Work location

4. Education and Training Data

- Course or program attended
- Evaluation results
- Certification status
- Attendance records

5. Internet or Network Activity

- Browsing behavior on our website
- Cookies and tracking technologies

Purpose of Collection

We use personal information for the following business purposes:

- To respond to inquiries and provide requested services
- To design and deliver training programs and consulting solutions
- To maintain internal records and comply with legal obligations
- To send service-related or promotional communications (with consent)
- To analyze trends and improve our services

Sharing of Personal Information

We do not sell your personal information. We may share it with service providers or contractors only for business purposes and with appropriate safeguards, including:

- Instructors, evaluators, or consultants
- IT and software providers
- Legal or regulatory authorities when required by law

Your Rights under CCPA

As a California resident, you have the following rights:

- The right to know what personal information we collect and how we use it
- The right to request access to your personal information
- The right to request deletion of your personal information
- The right to opt-out of the sale (if applicable) of your personal information
- The right to non-discrimination for exercising your CCPA rights

To exercise your rights, please contact us at:

Email: rvega@rax.com.mx
Subject: “California Privacy Rights Request”
Include your name, contact information, and specify the request you are making.

Security Measures

We implement reasonable physical, technical, and administrative safeguards to protect personal information from unauthorized access, use, or disclosure.

Changes to This Privacy Notice

We may update this notice from time to time. Any changes will be posted on our website with the date of the last update.

Consent

By interacting with our website, submitting your personal information, or participating in our services, you consent to the terms of this Privacy Notice.

Privacy Notice (General Data Protection Regulation - GDPR)

This Privacy Notice is provided in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). RAX Security & Risk Management, located at Cuauhtemoc, Cuauhtemoc, Mexico City, Zip Code 06500, Mexico, is the data controller and is responsible for the processing of your personal data as described below.

Types of Personal Data Collected

We may collect and process the following categories of personal data, depending on your relationship with us (client, representative, training participant):

1. Identification Data

- Full name
- Date of birth
- Gender (optional)
- Nationality
- Identification documents

2. Contact Details

- Email address
- Phone number
- Physical address

3. Employment and Professional Information

- Employer
- Job title or role
- Department
- Work location

4. Education and Training Data

- Courses attended
- Performance and evaluation data
- Certifications obtained

5. IT and Usage Data

- IP address
- Website usage
- Cookies and other tracking technologies

Lawful Basis for Processing

We process your personal data on the following legal bases:
- Consent (when you provide clear consent for processing)
- Contractual necessity (to perform a contract or provide requested services)
- Legal obligation (to comply with applicable laws)
- Legitimate interest (to improve our services and ensure security)

Purpose of Processing

We use personal data for the following purposes:

- To communicate with you and deliver services
- To administer training programs and issue certificates
- To comply with legal and contractual obligations
- To maintain security and administrative records
- To send updates and promotional content (where permitted)

Data Sharing and International Transfers

We do not share your data with third parties unless:

- Required by law or authorities
- Necessary for the execution of a service (e.g., instructors, contractors)
- With your explicit consent

Where data is transferred outside the EU/EEA, we ensure it is protected using appropriate safeguards (e.g., Standard Contractual Clauses).

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws.

Your Rights Under GDPR

You have the right to:

- Access your personal data
- Request rectification or erasure
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority

To exercise your rights, please contact us at:

Email: rvega@rax.com.mx
Subject: “GDPR Data Request”
Include your name, contact information, and the nature of your request.

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

Changes to This Privacy Notice

We may update this notice from time to time. Any changes will be published on our website with the date of the last revision.

Consent

By using our services or submitting your personal data, you consent to the processing of your data as described in this Privacy Notice, subject to your rights under GDPR.

Global Privacy Notice

TThis Global Privacy Notice explains how RAX Security & Risk Management, located at Cuauhtemoc, Cuauhtemoc, Mexico City, Zip Code 06500, Mexico, collects, uses, shares, and protects your personal data in accordance with applicable data protection laws and regulations around the world, including but not limited to the GDPR (EU), CCPA (California, USA), and the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).

Scope

This notice applies to all individuals interacting with our company, including clients, legal representatives, employees of client organizations, training participants, suppliers, and website users, regardless of their geographic location.

Categories of Data Collected

- Identification data: name, date of birth, ID documents
- Contact data: email, phone number, address
- Professional data: employer, job title, department
- Training and evaluation data: course history, scores, certificates
- Technical data: IP address, browser type, cookies, usage data
- Legal and administrative documents: contracts, fiscal data, signatures

Purpose of Data Processing

- Provide and manage consulting, risk management, and training services
- Execute contracts and fulfill legal obligations
- Communicate service updates and respond to inquiries
- Evaluate training outcomes and issue certifications
- Analyze trends and improve service quality
- Promote new offerings (with proper consent)

Legal Basis for Processing

We process your data based on one or more of the following legal bases, as required by applicable laws:

- Consent
- Performance of a contract
- Compliance with legal obligations
- Legitimate interest

International Data Transfers

Your personal data may be transferred to or stored in countries other than your own. Where this occurs, we ensure appropriate safeguards are in place, such as:

- Standard Contractual Clauses
- Data Protection Agreements
- Certification under frameworks such as the EU-U.S. Data Privacy Framework

Data Sharing and Disclosure

We do not sell personal data. We may share it with:

- Service providers under confidentiality obligations
- Legal authorities when required
- Partners or instructors as necessary for service delivery

Data Subject Rights

You have the right to:

- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Withdraw consent
- File a complaint with a data protection authority
- Request data portability (where applicable)

To exercise these rights, contact us at:

Email: rvega@rax.com.mx
Subject: 'Privacy Request – Global'
Include your full name and a description of your request.

Security Measures

We implement robust technical, administrative, and physical safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction.

Data Retention

Your personal data will be retained only as long as necessary for the purpose for which it was collected, or as required by applicable law.

Updates to this Notice

We reserve the right to update this Global Privacy Notice at any time. Changes will be published on our website along with the effective date.

Consent and Acknowledgment

By using our services, submitting your personal data, or interacting with us in any manner, you acknowledge that you have read and understood this Global Privacy Notice and agree to the terms herein, subject to your rights under applicable laws.