SOUTHGENETICS PRIVACY NOTICE

Section I

Identity and Address of the Data Controller

 

SOUTHGENETICS MEXICO, S.A. de C.V. (hereinafter "SouthGenetics"), with address at World Trade Center, Montecito 38–12th floor, offices 20 and 21, Colonia Nápoles, Benito Juárez, 03810 Mexico City, is responsible for the use and protection of your personal data and informs you of the following: In accordance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), SouthGenetics is committed to handling the personal data you provide, at all times observing the principles of lawfulness, consent, information, quality, purpose, loyalty, and proportionality established in the LFPDPPP and in accordance with this Privacy Notice.

 

Section II

Purpose of processing the personal data collected

 

The personal data that SouthGenetics collects from you will be used for the following purposes:

 

  1. Primary Purposes

SouthGenetics collects your personal data through its website, social media, electronic means, and/or call center to include them in its database for the following primary purposes:

(a) to follow up on requests for information and questions regarding SouthGenetics services and/or products;

 

(b) to contract and follow up on the contracting of services and/or products offered by SouthGenetics through its internet portal or to carry out the electronic invoicing process;

 

(c) to follow up on complaints and/or clarification requests regarding the information contained on the SouthGenetics website; and

 

(d) to channel you to the appropriate SouthGenetics department to address the request submitted through the SouthGenetics portal.

 

Your personal data may be used to contact you and follow up on services provided by SouthGenetics, respond to your questions, comments, or interests regarding SouthGenetics services and/or products. Contact by SouthGenetics may be made via its website, email, telephone, WhatsApp, text messages, instant messaging, social media, and generally, any electronic means.

 

In this regard, SouthGenetics may use your personal data to carry out activities inherent to its commercial operations. SouthGenetics may use your personal data for administrative purposes and to comply with any legal obligations, as well as to defend or file a lawsuit, claim, complaint, or procedure before any authority.

 

  1. Secondary Purposes

 

Additionally, SouthGenetics may use your personal data for the following secondary purposes:

 

-To contact you by telephone, instant messaging, social media, or via email and/or any electronic means in relation to communications, promotions, and advertising materials regarding SouthGenetics services and/or products (including new services and/or products).
-To send information about SouthGenetics services and/or products.
-To send event invitations.

 

-To carry out market research, statistical reports, marketing studies, and prospect profiling.

 

-To conduct evaluations and surveys regarding the services provided by SouthGenetics.

 

If you do not wish your personal data to be processed for these secondary purposes, please complete the corresponding form and submit it to the SouthGenetics Personal Data Protection Office. The procedure to express refusal to the processing of your personal data for secondary purposes will be the same as that provided for exercising ARCO rights described in this Privacy Notice.

 

Section III

Personal Data Processed

 

To fulfill the purposes described in this Privacy Notice and in accordance with Article 3 of the LFPDPPP, SouthGenetics may use your identification, contact, tax, financial, and asset-related personal data.

 

If you provide personal data of other data subjects, you represent that you have the consent of such individuals to provide us with their personal data and acknowledge your obligation to inform such individuals that you have shared their data, as well as where this Privacy Notice is available for consultation.
By sending your personal data through the SouthGenetics website, you are deemed to have consented to the processing of your personal data as described in this Privacy Notice. Please note that refusing the processing of your personal data as described herein will make it impossible for SouthGenetics to contact you regarding your interest in SouthGenetics services and/or products.

 

Additionally, SouthGenetics may process data related to the geographic location (geolocation) of its employees, collaborators, and independent service providers, solely when they use company-authorized technological tools (such as mobile visit management apps) and perform specific actions within such tools, such as registering a visit, uploading notes, or sending communications. This processing is for operational, commercial efficiency, and internal objective compliance purposes, and does not involve continuous tracking or background monitoring.

 

The processing of geolocation data will be proportional and respectful of the privacy of the data subjects, in accordance with the Federal Law on Protection of Personal Data Held by Private Parties and, where applicable, the Federal Labor Law. The company will obtain the express and informed consent of users of such tools, either through physical or electronic means that prove such consent.

 

Section IV

Special provisions for processing the personal data of minors and individuals requiring support in exercising their legal capacity

 

SouthGenetics recognizes the importance of protecting the personal data of vulnerable groups, including minors and individuals who, under applicable law, require support to exercise their legal capacity. Accordingly, specific measures are implemented to ensure confidentiality, integrity, and informed consent in the processing of their personal data, such as:

 

(a) Obtaining the informed consent of the parent, guardian, or designated support person, through an express declaration contained in the Adhesion Contract, in cases required by law.

 

(b) Verification of the identity of the parent, guardian, or support person, carried out directly at SouthGenetics branches or through secure electronic validation mechanisms.

 

(c) Implementation of administrative, technical, and physical security measures to protect the personal data of these individuals, ensuring processing in accordance with the principles established by the Federal Law on Protection of Personal Data Held by Private Parties.

 

Section V

Transfer of your personal data

 

We inform you that your personal data may be shared by SouthGenetics within and outside the country with the following third-party recipients, for the following purposes:

 

In order to attend to and channel your request for information or purchase regarding SouthGenetics' services and/or products to the appropriate department.

So that third parties can provide SouthGenetics with the services required for the provision of SouthGenetics' services and/or products, and to channel the request for information or purchase process as needed by SouthGenetics.

To address claims, requests, complaints, or matters related to the information request made through the website or derived from the legal relationship that exists with SouthGenetics through the purchase of services and/or products via the internet.

 

SouthGenetics will only transfer your personal data to fulfill the necessary purposes described above, as well as in cases where it is legally required by competent authorities.

 

The submission of your personal data through the SouthGenetics website will be understood as your consent for your personal data to be transferred as indicated in this Privacy Notice.

 

Section VI

Means and procedure for exercising rights of access, rectification, cancellation, and opposition

 

You have the right to know what personal data we have about you, what we use it for, and the conditions of its use (Access). Likewise, it is your right to request the correction of your personal information in case it is outdated, inaccurate, or incomplete (Rectification); to request that we remove it from our records or databases when you believe it is not being used in accordance with the principles, duties, and obligations provided in this Privacy Notice or in applicable regulations (Cancellation); as well as to object to the use of your personal data for the purposes established in this Privacy Notice (Opposition). These rights are known as ARCO rights.

 

To exercise any of the ARCO rights, you must request and submit to the SouthGenetics Personal Data Protection Office the Request Form in accordance with the LFPDPPP (hereinafter the “Request”). The Request must be properly completed and accompanied by the documentation indicated therein to prove your identity, along with any other documentation required according to the Request.

 

Once your Request is received, if the information you provided through your Request is incorrect or insufficient or you did not include the required documentation, the Legal Coordination for the Protection of Personal Data of SouthGenetics will have a period of 5 (five) business days to request any information or document necessary to process your Request. If applicable, SouthGenetics will send the request to the email address you specified in the Request. You will have a period of 5 (five) business days, counted from the day after you receive the request from SouthGenetics, to respond accordingly. If SouthGenetics’ Personal Data Protection Office does not receive your response within the established timeframe, the Request will be considered as not submitted and SouthGenetics will have no obligation to process it.

 

SouthGenetics’ Legal Coordination for the Protection of Personal Data will have a period of 20 (twenty) business days counted from the date your Request is received or from the date you comply with SouthGenetics' requirements, as the case may be, to respond to the Request. The response to said Request will be sent to the email address you specified in the Request. If your Request is appropriate, SouthGenetics’ Legal Coordination for the Protection of Personal Data will have a period of 15 (fifteen) business days to make the Request effective. If the Request involves reproduction of personal data, SouthGenetics will make an electronic version of such data available to you, which will be sent to the email address you specified in the Request, or alternatively, SouthGenetics will make a physical copy of such data available to you, which you may collect at the SouthGenetics address indicated in this Privacy Notice.

 

In cases permitted by law, SouthGenetics’ Personal Data Protection Office may decide to deny the exercise of ARCO rights. In case of denial, SouthGenetics’ Legal Coordination for the Protection of Personal Data will inform you of the reasons for such denial via an email sent to the address you specified in the Request. If the denial is partial, SouthGenetics' Legal Coordination for the Protection of Personal Data will process the ARCO rights that do apply.

 

SouthGenetics’ Personal Data Protection Office may extend the periods established in this Privacy Notice once only, and in such case, must notify you of the extension before the original deadline expires.

 

Section VII

Means and procedure to revoke your consent for the processing of your personal data

 

You have the right to know what personal data we have about you, what we use it for, and the conditions of its use (Access). Likewise, it is your right to request the correction of your personal information in case it is outdated, inaccurate, or incomplete (Rectification); to request that we remove it from our records or databases when you believe it is not being used in accordance with the principles, duties, and obligations provided in this Privacy Notice or in applicable regulations (Cancellation); as well as to object to the use of your personal data for the purposes established in this Privacy Notice (Opposition). These rights are known as ARCO rights.

 

To exercise any of the ARCO rights, you must request and submit to SouthGenetics’ Legal Coordination for the Protection of Personal Data the Request Form in accordance with the LFPDPPP (hereinafter the “Request”). The Request must be properly completed and accompanied by the documentation indicated therein to prove your identity, along with any other documentation required according to the Request.

 

Once your Request is received, if the information you provided through your Request is incorrect or insufficient or you did not include the required documentation, SouthGenetics’ Legal Coordination for the Protection of Personal Data will have a period of 5 (five) business days to request any information or document necessary to process your Request. If applicable, SouthGenetics will send the request to the email address you specified in the Request. You will have a period of 5 (five) business days, counted from the day after you receive the request from SouthGenetics, to respond accordingly. If SouthGenetics’ Legal Coordination for the Protection of Personal Data does not receive your response within the established timeframe, the Request will be considered as not submitted and SouthGenetics will have no obligation to process it.

 

SouthGenetics’ Personal Data Protection Office will have a period of 20 (twenty) business days counted from the date your Request is received or from the date you comply with SouthGenetics' requirements, as the case may be, to respond to the Request. The response to said Request will be sent to the email address you specified in the Request.


If your Request is appropriate, SouthGenetics’ Personal Data Protection Office will have a period of 15 (fifteen) business days to make the Request effective. If the Request involves reproduction of personal data, SouthGenetics will make an electronic version of such data available to you, which will be sent to the email address you specified in the Request, or alternatively, SouthGenetics will make a physical copy of such data available to you, which you may collect at the SouthGenetics address indicated in this Privacy Notice.

 

In cases permitted by law, SouthGenetics’ Personal Data Protection Office may decide to deny the exercise of ARCO rights. In case of denial, SouthGenetics’ Legal Coordination for the Protection of Personal Data will inform you of the reasons for such denial via an email sent to the address you specified in the Request. If the denial is partial, SouthGenetics' Legal Coordination for the Protection of Personal Data will process the ARCO rights that do apply.

 

SouthGenetics’ Personal Data Protection Office may extend the periods established in this Privacy Notice once only, and in such case, must notify you of the extension before the original deadline expires.

 

Section VIII

Limitation on the use and/or disclosure of your personal data

 

In order for you to limit the use and/or disclosure of your personal data, SouthGenetics offers the following means:

 

Your registration in the "SouthGenetics Exclusion List," so that your personal data will not be processed for marketing, advertising, or event invitation purposes by us. For more information, contact the SouthGenetics Legal Coordination for the Protection of Personal Data.

 

Your enrollment in the Public Registry to Avoid Advertising, which is managed by the Federal Consumer Protection Agency (PROFECO), in order for your personal data not to be used to receive advertising or promotions from goods or services companies. For more information about this registry, you can consult the PROFECO website or contact them directly.

 

Section IX

Changes or modifications to the privacy notice

 

SouthGenetics may modify, change, or update this Privacy Notice due to new legal requirements, our own needs for the services we offer, our privacy practices, changes to our business model, or other reasons. SouthGenetics is committed to keeping you informed about changes, modifications, or updates to the Privacy Notice.


SouthGenetics will notify of any change, modification, or update to the Privacy Notice by posting a modification section on the Privacy Notice in its website. SouthGenetics will provide this notification at least 15 (fifteen) days before the changes, modifications, or updates to the Privacy Notice take effect.

 

Section X

Legal Coordination for the Protection of Personal Data

 

SouthGenetics' Legal Coordination for the Protection of Personal Data is responsible for handling requests to exercise ARCO rights, requests to revoke consent, objections to the use of personal data for secondary purposes, as well as requests to limit the use and/or disclosure of your personal data, and for safeguarding the protection of such data within SouthGenetics.

 

Name: Legal Coordination for the Protection of Personal Data of SouthGenetics Address: World Trade Center, Montecito 38 – 12th floor, offices 20 and 21, Colonia Nápoles, Benito Juárez, 03810 Mexico City. Hours of operation: 10:00 a.m. to 2:00 p.m.

 

Section XI

Legal Coordination for the Protection of Personal Data

 

If you believe that your right to the protection of your personal data has been violated by any conduct or omission of SouthGenetics, or you presume any violation of the provisions set forth in the LFPDPPP, its Regulations, and other applicable regulations, you may file a complaint or report with the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI). For more information, we suggest you visit its official website: www.inai.org.mx. The submission of your personal data through the SouthGenetics website will be understood as your consent for your personal data to be processed and transferred as indicated in this Privacy Notice.