EBA

EBA-Logo

COMPREHENSIVE PRIVACY NOTICE

I. IDENTITY AND ADDRESS OF THE DATA CONTROLLER

EB&A, INSURANCE AND BOND AGENT, S.A. DE C.V., hereinafter referred to as “EB&A,” with address at Avenida Mariano Escobedo number 556, Colonia Anzures, Alcaldía Miguel Hidalgo, C.P. 11590, Mexico City, is responsible for the collection, use, disclosure, and storage of the personal data provided by you. Therefore, we make this privacy notice available to you. Due to the foregoing, “EB&A” is committed to protecting your personal data in strict compliance with the principles of information, lawfulness, consent, quality, purpose, loyalty, proportionality, and accountability established by the Federal Law on the Protection of Personal Data Held by Private Parties, and to inform you of the existence and main characteristics of the processing to which your personal data will be subjected, so that you are in a position to exercise your rights to informational self-determination, privacy, and protection of personal data.   

II. PERSONAL DATA TO BE PROCESSED

In order to carry out the purposes described in this privacy notice, we will use the following data:

  1. General information.
  2. Contact information.
  3. Employment information.
  4. Academic information.
III. SENSITIVE PERSONAL DATA TO BE PROCESSED

In addition to the personal data mentioned above for the primary purposes informed in this privacy notice, we will use the following personal data considered sensitive, which requires special protection:

  1. Health.
  2. Physical characteristics.
  3. Patrimonial and/or financial.

Except for legal exceptions, when dealing with personal data considered sensitive by law, for its processing, “EB&A” will obtain the respective written or electronic consent. Sensitive data will not be used for secondary purposes.

IV. PURPOSES OF DATA PROCESSING

The data collected is obtained from sources permitted by law or those generated through a contract, agreement, or legal relationship between “EB&A” and you, and will be used for the following purposes:

Primary Purposes:

  1. Identification of the data subject. ii. To carry out insurance or surety brokerage activities, risk management, and support in the management and payment of products or services. iii. To evaluate your insurance or surety application, analyze risks, identify hidden or unforeseen risks; quote services, identify, operate, manage, assess, process your claims. iv. To carry out online sales of products and services, administration, or collection through electronic means. v. To provide you with the respective information in follow-up to claims for insurance payments or your surety procedures. vi. Evaluation of potential losses. vii. Prevention of fraud and illegal operations. viii. Negotiation and intermediation in the placement of your risks with insurers and sureties. ix. To attend to any complaint, question, or comment. x. For Insurance and Surety Institutions to quote insurance or surety, and for the fulfillment of obligations arising from the intermediation for the contracting of insurance or surety and their renewals. xi. To fulfill the obligations arising from the services additional to the intermediation of insurance and/or surety contracts. xii. To fulfill the tasks or mandates entrusted by you and to comply with any obligation arising from a present or future legal relationship between the data subject and “EB&A”.

Secondary Purposes:

Your data will also be used for the following secondary purposes or those that are not necessary for the existence, maintenance, and fulfillment of the legal relationship we have with you as the data subject:

  1. Offering and promoting insurance and/or surety products and/or services, advertising campaigns. ii. Informing about changes or new products or services that are related to the product or service contracted or acquired by the data subject. iii. Conducting surveys on the product or service contracted. iv. Carrying out internal studies on consumption habits. v. Research and development of new products or services. vi. Generating statistical data for the insurance and surety sector and evaluating the quality of service. vii. Marketing or advertising, and carrying out dissemination activities for future purchases of our products and commercial prospecting.

 

V. MECHANISMS FOR THE DATA SUBJECT TO EXPRESS THEIR OPPOSITION TO THE PROCESSING OF THEIR PERSONAL DATA

In the event that you do not wish for your personal data to be processed for the secondary purposes (not necessary, nor did they originate the legal relationship) mentioned above, you may express your opposition through the email privacidad@ebya.mx, or if this notice was presented to you in person and personally indicate the following:

[ ] I do not consent to my personal data being used for the secondary purposes indicated in this notice. If you do not express your opposition to your personal data being processed in the terms of this privacy notice, it will be understood that you have given your consent.

The refusal to use your personal data for secondary purposes cannot be a reason for us to deny you the services and products you request or contract with us.

VI. TRANSFERS OF PERSONAL DATA

Except for those indicated in the following paragraph, we undertake not to transfer your personal information to third parties without your consent, with the exception of that provided for in article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties.

Likewise, we inform you that your personal data may be transferred and processed within and outside the country, with companies in the insurance and/or surety sector, particularly with Insurance and Surety Institutions, for insurance or surety quotes, and for the fulfillment of obligations arising from intermediation in the contracting of insurance and their renewals. In accordance with the provisions of the law in the different legal systems, you are authorized to share your data in the following cases: When such transfer of information is made with third parties or their related parties, to comply with the services or transactions or obligations agreed upon with the data subject; in the cases that the law requires, or the prosecution or administration of justice; when the owner of such information gives their express consent.

If you do not express your opposition through the email privacidad@ebya.mx, for your personal data to be processed in the terms of this privacy notice, it will be understood that you have given your consent.

VII. METHODS AND PROCEDURE FOR EXERCISING ARCO RIGHTS

You have the right to know what personal data we use, for what purpose, and the conditions under which we use it. To this end, you may exercise your ARCO RIGHTS, which stand for ACCESS, RECTIFICATION, CANCELLATION, or OPPOSITION.

  • Right of Access: This refers to the right of data subjects to access their data held by the data controller. This right also includes the right of the data subject to know the privacy notice to which they are subject.
  • Right of Rectification: This is the right of the data subject to rectify inaccurate or incomplete personal data.
  • Right of Cancellation: This is the right of the data subject to have their data blocked and deleted.
  • Right of Opposition: This is the right of the data subject to oppose the processing of their data by us when legally justified because an exception to the processing does not apply, or when the purpose is not necessary for the maintenance of the legal relationship we have with you.

Requests for access, rectification, cancellation, or opposition must include and be accompanied by the following:

  1. The name of the data subject and their address, email address, or other means of communicating the response to their request;
  2. Documents proving the identity, legal identity, or official identification, as the case may be, of the data subject’s legal representative;
  3. A clear and precise description of the personal data in respect of which any of the aforementioned rights is sought to be exercised;
  4. In the case of rectification requests, accompanying documentation supporting or justifying your request;
  5. Any other element or document that facilitates the location of the personal data.

The respective request must be sent to our offices located at Avenida Mariano Escobedo number 556, Colonia Anzures, Alcaldía Miguel Hidalgo, C.P. 11590, Mexico City, or by email to privacidad@ebya.mx, which we request you confirm via telephone at (55) 5029-1400 extension 1415, to guarantee its correct receipt and response in accordance with the law.

“EB&A” as the data controller will notify the data subject, within a maximum period of 20 (twenty) days from the date on which the request was received, of the decision adopted, so that, if it is deemed appropriate, it may be implemented within the following 15 (fifteen) days from the date on which the response is communicated. In the case of requests for access to personal data, the delivery shall be made upon prior verification of the identity of the applicant or legal representative, as the case may be.   

The aforementioned deadlines may be extended once by an equal period, provided that the circumstances of the case so warrant. The delivery of the data shall be free of charge, the data subject being required to cover only the justified costs of sending or the cost of reproducing copies or other formats.   

Data Retention We will block your personal data once the purpose for which it was collected has been fulfilled, however, it will be retained for the sole purpose of determining possible liabilities in relation to its processing, until the legal or contractual limitation period for such liabilities has expired. During this period, the personal data may not be processed and, once this period has expired, it will be canceled in the corresponding database.

VIII. MECHANISMS AND PROCEDURES FOR THE DATA SUBJECT TO REVOKE THEIR CONSENT TO THE PROCESSING OF THEIR PERSONAL DATA

You may revoke the consent that you have granted us, if applicable, for the processing of your personal data. However, it is important to note that we may not be able to attend to your request or conclude the use immediately, as we may be required by law to continue processing your personal data. Likewise, you should consider that, for certain purposes, the revocation of your consent will imply that we cannot continue to provide you with the service you requested, or the termination of your relationship with us. The means by which you must make your request are the following: by sending an email to: privacidad@ebya.mx, or by calling (55) 5029-1400 extension 1415.   

IX. OPTIONS AND MEANS OFFERED TO LIMIT THE USE OR DISCLOSURE OF PERSONAL DATA

In order for you to limit the use and disclosure of your personal information, you can send an email to: privacidad@ebya.mx. You can also go to our address located at Avenida Mariano Escobedo number 556, Colonia Anzures, Alcaldía Miguel Hidalgo, C.P. 11590, Ciudad de México. And for our service office in the city of Querétaro, you can also go to: Hacienda de Buenavista #310-7, Colonia Jardines de la Hacienda, C.P. 76180, Querétaro, Querétaro, México.

You can also stop receiving promotional messages from us by sending an email to the aforementioned email address.

X. INFORMATION ON THE USE OF COOKIES

A cookie is a brief piece of information that the internet portal sends to your computer, which is stored on the hard drive. The next time you enter our portal, we can use the information stored in the cookie to facilitate your use of our website. Most cookies expire after a certain period of time, or you can delete them at any time by following the instructions of your internet browser. You can also set your browser to notify you when you receive a cookie so that you can accept or reject it by following the instructions of your internet browser.   

  1. YOUR CONSENT FOR THE PROCESSING OF YOUR PERSONAL DATA

If this privacy notice is not provided to you directly or personally, you have a period of 5 (five) business days to object to the processing and transfer of your data for the purposes indicated, using the same means mentioned above in this notice.

The Data Subject shall be deemed to have tacitly consented to the processing of their personal information under the terms indicated in this Privacy Notice if they do not manifest their opposition thereto in the terms indicated above. For more information, you may send an email to: privacidad@ebya.mx, or call (55) 5029-1400 extension 1415.

XII. PROCEDURES AND MEANS THROUGH WHICH THE RESPONSIBLE PARTY WILL COMMUNICATE TO THE DATA SUBJECTS THE CHANGES TO THE PRIVACY NOTICE

We reserve the right to make modifications or updates to this privacy notice at any time, to address legislative novelties, internal policies, or new requirements for the provision or offering of our services or products.   

The privacy notice, as well as any changes or updates thereto, are available at our offices located at Avenida Mariano Escobedo number 556, Colonia Anzures, Alcaldía Miguel Hidalgo, C.P. 11590, Mexico City, and at our service office located at Hacienda de Buenavista #310-7, Colonia Jardines de la Hacienda, C.P. 76180, Querétaro, Querétaro, Mexico; as well as on our website https://www.ebya.mx, in the “Privacy Notice” section; or you may request it by email at privacidad@ebya.mx. For more information, please contact us by phone at (55) 5029-1400 extension 1415.

Last updated: August 5, 2024.