Tu carro de compra (0)
Your cart is empty
Tax included and shipping calculated at checkout
PRIVACY NOTICE
Sofía Rivera García Granados, hereinafter "THE SERVICE PROVIDER", with tax address Avenida de las Fuentes 170, Jardines del Pedregal, C.P. 01900, Mexico City, issues this Privacy Notice so that the owner of the personal data, hereinafter referred to as "THE OWNER", is aware of how THE SERVICE PROVIDER handles personal data.
THE SERVICE PROVIDER has a strong interest in protecting USER privacy, as well as in keeping personal information shared with THE SERVICE PROVIDER safe. In this regard, THE SERVICE PROVIDER protects and safeguards the personal data of THE OWNER to prevent damage, loss, destruction, theft, misplacement, alteration, as well as unauthorized processing, in compliance with the provisions of articles 8, 15, 16, 33, 36 and other related articles of the Federal Law on the Protection of Personal Data Held by Private Parties.
The person responsible for data protection and its processing is THE SERVICE PROVIDER, and can be contacted by sending an email to contacto@dossofias.com
Purpose of the Privacy Notice
This Privacy Notice is made available to you with the intention that THE OWNER is aware of how their personal data will be processed, as well as the
precise information to exercise their rights of access, rectification, cancellation, and opposition (hereinafter "ARCO Rights"), which are described below:
● Right to access your personal data held by THE SERVICE PROVIDER, with the exception of the cases mentioned in the Law.
● Right to rectify your personal data when it is inaccurate or incomplete.
● Right at all times to cancel your personal data. THE SERVICE PROVIDER may deny the cancellation of data under the terms established by Law.
● Right at all times and for legitimate cause to object to the processing of your personal data.
It is important to inform you that the Federal Law on the Protection of Personal Data Held by Private Parties protects your personal information from unauthorized use and without your consent, so this document will inform you what information we collect from THE OWNER, for what purpose and how we use it, possible transfers to third parties, the purposes of data processing, your ARCO rights, as well as the revocation of your consent, which THE OWNER can assert before THE SERVICE PROVIDER with the aim of having full control and decision over their personal data. For this reason, we recommend that you carefully read the following information.
This Privacy Notice is applicable to the Owners of Personal Data obtained directly, indirectly or personally by THE SERVICE PROVIDER, through product purchase and sale processes, contracts, letters, information requests, as well as the different forms contained on THE SERVICE PROVIDER's Website www.dossofias.com (hereinafter "WEBSITE") or any other means specified for such purposes, that refer to this Privacy Notice.
Personal Data
THE OWNER's Personal Data is provided through the creation of an Account or User Registration, and/or by sending a contact request through the contact form on the customer service page. THE SERVICE PROVIDER collects personally identifiable information that is voluntarily provided by THE OWNER through the creation of an Account or User Registration, and/or by sending a contact request through the contact form on the customer service page, or in response to explicit requests from THE SERVICE PROVIDER.
For the purposes of this Privacy Notice, and in accordance with the foregoing, the terms "OWNER" and "USER" will be used interchangeably to refer to the person who provides their personal data to THE SERVICE PROVIDER.
The information must be truthful and complete. THE OWNER, in their capacity as USER, will be responsible at all times
for the data provided and in no case will THE SERVICE PROVIDER be responsible for the veracity of such data.
The information requested is as follows: Name, Address, Transactions, Email Account, Phone Number(s), date of birth, birthday, and any additional information to define user preferences and/or important dates to determine a specific sales profile. Fiscal data for Invoice preparation, bank card number, and bank account identifiers will also be requested.
THE SERVICE PROVIDER does not request Sensitive Personal Data on the Website it manages.
Cookies
The USER of THE SERVICE PROVIDER's Website knows and accepts that THE SERVICE PROVIDER may use a tracking system through the use of cookies (the "Cookies").
Cookies are data files that are stored on the hard drive of a USER's computer or electronic communications device when browsing an Internet site, which allows the exchange of status information between said site and the user's browser. Status information may reveal session identification means, authentication or user preferences, as well as any data stored by the browser regarding the Internet site.
Cookies are used to ascertain the interests, behavior and demographics of those who visit or are visitors to the Website and in this way, better understand their needs and interests and provide them with better service or related information. We also offer certain functionalities that are only available through the use of Cookies.
Likewise, we will use the information obtained through Cookies to analyze the pages browsed by the visitor or User, the searches carried out, improve our commercial and promotional initiatives, display advertising or promotions, banners of interest, refine our content and article offering, customize said content, presentation, and services.
Cookies are also used so that the USER does not have to enter their password so frequently during a browsing session, to count and corroborate records, USER activity, and other commercial concepts and agreements, always with the aim of installing Cookies for the benefit of the USER who receives them, and will not be used for purposes other than those of THE SERVICE PROVIDER.
It is established that the installation, permanence, and existence of Cookies on the USER's or visitor's computer depends on their exclusive will and can be removed from their computer whenever they wish. To know how to delete Cookies from the system, it is necessary to review the Help section of the browser. Also, Cookies or other similar systems may be found
installed by third parties on certain pages of our Site. THE SERVICE PROVIDER does not control the use of
Cookies by third parties.
If you would like more information about cookies, we recommend visiting http://www.allaboutcookies.org.
THE SERVICE PROVIDER also uses Web Beacons when the user is using the Page. Web Beacons are visible or hidden images inserted within a Website, which are used to monitor user behavior in these media, such as storing information about the user's IP address, the duration of interaction time on that page, and the type of browser used, among others.
Protection
The security and confidentiality of the data that users provide when contracting a service or buying a product online will be protected by a secure server under the Secure Socket Layer (SSL) protocol, so that the data sent will be transmitted encrypted to ensure its safekeeping.
To verify that you are in a protected environment, make sure that an “S” appears in the navigation bar “httpS”://.
However, and despite having increasingly secure tools, the protection of data sent over the Internet cannot be 100% guaranteed; therefore,
once received, every effort will be made to safeguard the information.
To guarantee that personal data is processed in accordance with the provisions of the Law, THE SERVICE PROVIDER complies with the following principles:
● You will be informed of the purposes of processing your personal data, collecting only the necessary data for the fulfillment of these purposes, and they will not be used for purposes other than those established in this privacy notice.
● Adequate maintenance will be carried out so that your personal data is correct and updated. If it is necessary to retain your data, it will be in accordance with the provisions of the applicable Law.
● Security measures have been implemented to guarantee the protection of your personal data.
DATABASES
THE SERVICE PROVIDER's Database, where the collected information is stored, will keep and safeguard the Information provided by THE OWNER, even if it is modified, updated, or even canceled for any reason. This is for the purpose of maintaining a history about THE OWNER and protecting their legal interests. The retention of information indicated in this paragraph may be completely erased or deleted through the exercise of ARCO Rights.
Purposes of Personal Data Processing
Personal Information is collected and stored for the purposes of:
● Identification and certainty of the USER of the Website;
● Operation, management, merchandise shipping, returns, invoicing, collection, administration, provision of our services;
● Delivery of notifications, requirements, letters or newsletters or attention to your requests related to the services we provide;
● Helping to complete a transaction or order that has been initiated on the website;
● Analysis of USER behavior and demographics;
● Improving our commercial and promotional initiatives (marketing);
● Sending information or messages about new products and/or services, information from our business partners as well as any other information;
● Displaying advertising or promotions of interest to the USER;
● Transfer of THE OWNER's information in applicable cases in accordance with the "Information Transfer with Third Parties" section of this Notice;
● Prevention or reporting to different authorities of illegal acts or facts;
● Compliance with the exercise of ARCO rights as well as revocation of THE OWNER's consent.
With the above, THE SERVICE PROVIDER can provide efficient service to the USER.
The purposes are necessary for the fulfillment of the obligations and the relationship with THE OWNER, meaning that THE SERVICE PROVIDER provides efficient service to the USER, this being the main obligation and the origin of the Legal Relationship between THE SERVICE PROVIDER and the USER.
The collection of information allows THE SERVICE PROVIDER to offer services and functionalities that better suit the USER's needs. Likewise, it allows THE SERVICE PROVIDER to send the USER, through various means and channels (including conventional or electronic mail, SMS, MSM, electronic notifications), offers of products and services that may be of interest to the USER, in addition to fulfilling its obligations through these means.
THE SERVICE PROVIDER reserves the right to request additional proof and/or data in order to
corroborate the personal data of each USER, as well as to temporarily or permanently suspend any USER whose data could not be confirmed.
The USER acknowledges that the account or User Registration is personal, unique, and non-transferable, and it is forbidden for a single USER to register or possess more than one account. In the event that THE SERVICE PROVIDER detects different accounts that contain matching or related data, it may cancel, suspend, or disable them. The USER will be responsible for all operations carried out in their account, as access to it is restricted to the entry and use of their personal password, known exclusively to the USER. In the event that the account is suspended, THE SERVICE PROVIDER will store the USER's personal data, so that the USER and THE SERVICE PROVIDER remain subject to the provisions of this Privacy Notice.
In the event that the USER's information at the time of registration is incorrect or incomplete, making it impossible to verify and identify them, THE SERVICE PROVIDER will have the right to immediately suspend the provision of Services through the Website, without prior notice, with the USER being responsible at all times for the losses and damages finally suffered.
Confidentiality
THE OWNER's data will only be provided by THE SERVICE PROVIDER in the ways
established in this Privacy Notice. THE SERVICE PROVIDER will do everything in its power to protect the privacy of the information. It may happen that by virtue of judicial orders, or legal regulations, THE SERVICE PROVIDER may be compelled to disclose information to authorities or third parties under certain circumstances, or in cases where third parties may intercept or access certain information or data transmissions, in which case THE SERVICE PROVIDER will not be liable for the information disclosed. In these cases, THE SERVICE PROVIDER will notify THE OWNER of this situation.
We assume no obligation to keep confidential any other information that THE OWNER provides through newsletters and online chats, as well as information obtained through cookies, information that has not been directly delivered to THE SERVICE PROVIDER.
It should be clarified that THE OWNER's information is not sold, given away, provided, or rented to any third party. If the user does not want their data to be shared, they can decide not to use a specific service or not to participate in some promotions or contests.
THE SERVICE PROVIDER will take all possible measures to maintain the confidentiality and security described above, but will not be liable for damages or losses that may arise from the violation of those measures by third parties who use public networks or the Internet, altering security systems to gain access to THE OWNER's information.
Security breaches occurring at any stage of processing that significantly affect THE OWNER's patrimonial or moral rights will be immediately reported by THE SERVICE PROVIDER to THE OWNER, so that the latter can take appropriate measures to defend their rights.
Transfer of Information to Third Parties
THE OWNER expressly authorizes THE SERVICE PROVIDER to keep in its records the information provided by THE OWNER, and also authorizes THE SERVICE PROVIDER to provide constant information about said record to (i) authorities that request it as permitted by current legislation and (ii) its strategic, commercial or technical partners for the purpose of offering better Promotion conditions and/or USER content. Furthermore, the USER expressly allows THE SERVICE PROVIDER to collect information for traffic tracking, with the intention of identifying user groups and profiles, as well as for advertising targeting purposes.
Data Transfers are for lawful purposes and in accordance with the provisions of the Law on the Protection of Personal Data Held by Private Parties.
THE SERVICE PROVIDER declares that it will not transfer any type of information from THE OWNER to
National or foreign Third Parties. Otherwise, THE OWNER will be informed by the publication of a new Privacy Notice. This is in accordance with the provisions of article 36 of the Regulations of the Law on the Protection of Personal Data Held by Private Parties.
TRANSFER IN SPECIAL CIRCUMSTANCES
If there is any change in the rights of THE SERVICE PROVIDER in terms of this Privacy Notice, the information collected on this Website may be transferred or assigned to one or more relevant parties, with THE SERVICE PROVIDER being obliged to issue a new Privacy Notice updated to the internal changes suffered.
Data Remission
THE SERVICE PROVIDER declares that it may communicate THE OWNER's personal data with the PROCESSOR, within or outside the national territory in terms of the provisions of the law or regulations.
The "PROCESSOR" is the natural or legal person, public or private, unrelated to the organization of THE SERVICE PROVIDER, who alone or jointly with others, processes personal data on behalf of THE SERVICE PROVIDER, as a result of the existence of a legal relationship that binds them and delimits the scope of their action for the provision of a service.
This data transfer is to comply with the specified processing purposes, which are directly related to the fulfillment of the objects and contractual or extracontractual relationships with THE SERVICE PROVIDER.
The data processing in this referral is subject to the following terms agreed between THE SERVICE PROVIDER and the CONTROLLER:
● Process personal data only according to the instructions of THE SERVICE PROVIDER;
● Refrain from processing personal data for purposes other than those instructed by THE SERVICE PROVIDER;
● Implement security measures according to the Law, the Regulations, and other applicable provisions;
● Maintain confidentiality regarding the personal data processed;
● Delete personal data subject to processing once the legal relationship with THE SERVICE PROVIDER has ended or by instructions from THE SERVICE PROVIDER, provided there is no legal provision requiring the retention of personal data;
● Refrain from transferring personal data.
The EXERCISE of the DATA SUBJECT's ARCO rights or any other right specified in the law or regulation will be in accordance with this Privacy Notice.
Limit on the use or disclosure of Personal Data
For the USER to exercise their right to limit the use or disclosure of Personal Data, but with the intention of continuing to use the services provided by THE SERVICE PROVIDER, the USER must express this in writing to the following email address contacto@dossofias.com. Said writing must contain the following:
● The DATA SUBJECT's name and email address where they wish to receive the response.
● Addressed to THE SERVICE PROVIDER.
● Customer or account registration with THE SERVICE PROVIDER to prove their identity or the relationship they have with THE SERVICE PROVIDER.
● A clear and precise description of the data they wish to limit from use or disclosure.
● THE SERVICE PROVIDER will have a period of 20 business days to respond and, if applicable, execute the limitation of use. In said response, it will provide the resolution and the possibility of carrying out what was requested in writing, without prejudice to the possibility of exercising their other rights.
ARCO Rights (Access, Rectification, Cancellation, and Opposition)
The DATA SUBJECT has the right, in person or through a Representative, to request from THE SERVICE PROVIDER, at any time, access, rectification, cancellation, or opposition regarding the personal data stored in THE SERVICE PROVIDER's Database.
The legal framework applicable to this request is found in Chapter IV of the Federal Law on Protection of Personal Data (articles 28 to 35), by Chapter VII Sections I to V of the Regulations of the Federal Law on Protection of Personal Data (articles 92 to 111), and by the Guidelines of the Privacy Notice Twenty-fifth, Twenty-eighth, Twenty-ninth and Thirtieth.
The Request must be made in writing with the following requirements:
● The DATA SUBJECT's name and address or other means to communicate the response to their request.
● Documents proving identity (copy of a valid official identification) or, if applicable, the legal representation of the data subject. Identifications must be official.
● A clear and precise description of the personal data regarding which one wishes to exercise any of the rights of access, rectification, cancellation, or opposition.
● If applicable, the modifications to be made and provide the documentation supporting the request.
● Any other element that facilitates the location of personal data.
● The request must be addressed to THE SERVICE PROVIDER.
The Request will be sent to the Committee or the Personal Data Officer via email contacto@dossofias.com, and internally it will be forwarded to the person who receives and answers these requests.
THE SERVICE PROVIDER will communicate to the DATA SUBJECT, via the email from which the request originated, within 20 (twenty) business days from the date the access, rectification, cancellation, or opposition request was received, the determination adopted. The time the request is received is when it has entered our server.
Once the response has been sent within the specified period, THE SERVICE PROVIDER will have 15 (fifteen) business days to execute the Access, Rectification, Cancellation, or Opposition of the personal data according to the request or similar rights.
THE SERVICE PROVIDER requests the USER to update their data whenever there is a modification, as this will allow for efficient and personalized service.
When the data is no longer necessary for the fulfillment of the purposes provided for in this privacy notice and applicable legal provisions, it must be canceled, blocked, and deleted by operation of law.
PROCEDURES FOR BLOCKING AND DELETING PERSONAL DATA
Once the data has been canceled, THE SERVICE PROVIDER will retain the DATA SUBJECT's personal data for one more month for clarification purposes and preparation for deletion. Once this period has expired, THE SERVICE PROVIDER will definitively delete the DATA SUBJECT's personal data, with no possibility of locating or contacting the DATA SUBJECT, being removed from the database and all files related to the DATA SUBJECT being discarded. If the DATA SUBJECT were to perform another act with THE SERVICE PROVIDER, they must initiate it as if the relationship had never existed.
The above, observing what is stated in the Privacy Policies for the purposes of retaining information by operation of law or authority.
Personal data that has fulfilled its purposes but cannot be canceled and deleted by operation of law or contract will be blocked from the purposes to which they were subjected until they can be deleted. During this period, personal data cannot be processed.
Privacy of Minors
THE SERVICE PROVIDER does not intentionally collect information from minors, so parents and guardians are advised to carry out product purchase activities or registration on the Website themselves.
Consent
The USER states that by using the page, providing their Personal Data, or directly performing a contractual or non-contractual action with THE SERVICE PROVIDER, they have already read this notice and consent to what is stipulated therein. The USER consents to this Privacy Notice, in accordance with the Law on Protection of Personal Data Held by Private Parties.
Revocation of Consent
Consent may be revoked at any time without retroactive effect. To revoke their consent, the USER must send a Request, which must be submitted in writing and meet the following requirements:
● The DATA SUBJECT's name and address or other means to communicate the response to the request.
● Documents proving identity (copy of a valid official identification) or, if applicable, the legal representation of the data subject. Identifications must be official.
● A clear and precise description of the relationship the USER has with THE SERVICE PROVIDER.
● Provide documentation supporting the USER's request.
● The request must be addressed to THE SERVICE PROVIDER.
● It must be proven that the relationship with THE SERVICE PROVIDER has ended.
THE SERVICE PROVIDER will issue a response confirming the revocation of consent, or, if applicable, stating the reasoning depending on the specific case, with THE SERVICE PROVIDER having 15 business days to issue this response. The deadlines will be counted from the moment the email enters THE SERVICE PROVIDER's server.
Any subsequent request to that mentioned in the previous paragraph will have the same effect as an initial one, with the USER and THE SERVICE PROVIDER being bound by the same deadlines indicated above.
The Request will not be valid if the aforementioned is omitted.
Modifications to the Privacy Notice
THE SERVICE PROVIDER, as well as the USER, acknowledge that this Privacy Notice has unlimited validity. However, THE SERVICE PROVIDER will endeavor to keep this Notice updated.
THE SERVICE PROVIDER reserves the right to make modifications to these Privacy Policies at any time and adapt them to new legislation, jurisprudence, internal policies, new requirements for the provision or offering of our services or products, as well as market practices. It is the USER's responsibility to periodically read the terms and conditions of this Privacy Notice to be aware of such modifications, which will automatically come into effect when introduced on the Website.
Amendments to the Privacy Notice will be communicated to the User through a notice on the home page of THE SERVICE PROVIDER's Website.
Disclaimer
The Website may contain links, hyperlinks or hypertext “links”, banners, buttons and/or internet search tools that, when used by the USER, lead to other internet portals or sites that may be owned by third parties. THE SERVICE PROVIDER does not control such sites nor is it responsible for the Privacy Notices they display, nor for the personal data that users may provide through these portals or internet sites other than the Website, which must be verified in the Privacy Notice on each site accessed.
Likewise, THE SERVICE PROVIDER may provide social media functions on the Website that allow you to share Website information on your social networks and interact with THE SERVICE PROVIDER on various social media sites. The use of these functions may involve the collection or sharing of information about the DATA SUBJECT, which will depend on each specific function. We recommend reviewing the settings and privacy policies of the social media sites with which you interact.
Final Provisions
This document is an integral part of THE SERVICE PROVIDER's Website Terms and Conditions of Use, which constitutes a legal agreement between the USER and THE SERVICE PROVIDER. If the USER uses THE SERVICE PROVIDER's Website services, it means that they have read, understood, and agreed to the terms set forth above.
If you agree to have read this Privacy Notice and do not express your opposition to your personal data being processed or transferred, it will be understood that you have given your consent for this.
This Privacy Notice will be governed by and interpreted in accordance with the applicable laws in Mexico City.
If the User considers that their rights regarding personal data protection have been violated, they have the right to appeal to the corresponding authority to defend their exercise. The authority is the National Institute of Transparency, Access to Information and Personal Data Protection (INAI), its website is: www.ifai.mx.
Date of last update
It is notified that the Privacy Notice was modified on February 18, 2016.