1. Identity and address of the Data Controller
Intelicomp, S.A. de C.V. [RFC: pending confirmation] (in its capacity as the operator in Mexico of the AMITAI® brand), with its address at Montecito 38, 32nd floor, office 23, Colonia Nápoles, Alcaldía Benito Juárez, Postal Code 03810, Mexico City, Mexico ("AMITAI®" or the "Data Controller"), is responsible for processing your personal data in accordance with this Comprehensive Privacy Notice, in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.
2. Categories of personal data collected
Identification and contact data: name, position, company, corporate email address and telephone number.
Inquiry data: message, reason for contact, product or service of interest, and preferences for scheduling a demonstration.
Technical browsing data (see the Cookies and Tracking Technologies section).
These forms do not request sensitive personal data or data concerning assets or finances. If you voluntarily provide additional information that has not been requested, it will be treated with the same level of confidentiality, without implying an obligation for AMITAI® to collect it.
3. Purposes of processing
Primary purposes (necessary to address requests from prospective clients): responding to requests for product information, quotations or demonstrations; contacting you for commercial follow-up; and, where applicable, preparing proposals and formalizing the contractual relationship.
To fulfill the purposes stated above, AMITAI® may contact you through various electronic and digital communication channels, such as email, instant messaging services (such as WhatsApp or similar corporate tools), telephone calls (landline or mobile), videoconferencing platforms, social media and other technological means enabled to follow up on your request. AMITAI® guarantees that these communication channels will be used in accordance with the information security protocols established in our internal policies. Secondary purposes (not essential; you may object without affecting the handling of your primary request): sending newsletters and invitations to events on organizational ethics and compliance; and preparing internal marketing statistics. To object, write to acliente@amitai.com stating "I do not wish to receive marketing communications".
4. Data transfers
Your personal data is stored and processed using cloud computing infrastructure provided by Microsoft Azure, Brevo and Netfly and similar providers, with data centers located in Canada. This international transfer is necessary to provide the service and is carried out with adequate levels of protection through data processing agreements (DPAs) that require our provider to observe the same security and confidentiality measures required by the LFPDPPP. Your data may also be shared with technology service providers and competent authorities when legally required, without transfers to third parties other than those specified here without your consent.
5. Retention and secure deletion of information
Your data will be retained while an active or potential commercial relationship exists and until the data subject requests its removal in accordance with the ARCO rights mentioned below. At the data subject’s express request, AMITAI® will apply a secure deletion procedure in accordance with controls A.5.34 and A.8.10 of Annex A to ISO/IEC 27001:2022, through irreversible logical deletion, overwriting or irreversible encryption of the information, depending on the storage medium. Upon the data subject’s request, a deletion certificate will be issued; it may be requested at sgsi@amitai.com.
6. ARCO rights and withdrawal of consent
You have the right to Access, Rectify, Cancel or Object to the processing of your personal data (ARCO rights), and to withdraw the consent you have given. To exercise these rights, send your request to acliente@amitai.com including: (i) the data subject’s full name and contact details; (ii) a document proving identity or legal representation; (iii) a clear description of the right you wish to exercise or the consent you wish to withdraw; and (iv) any document that helps locate your data.
AMITAI® will communicate its determination within a maximum of 20 business days from receipt of the request and, if the request is granted, it will be implemented within 15 business days following the date on which the response is communicated.
8. Changes to this notice
Any changes to this notice will be published on this same website, indicating the date of the latest update.
Definitions and Glossary
For the purposes of interpreting and applying this document, the following definitions apply:
- Processing
- Any operation or set of operations performed on personal data (collection, use, access, handling, utilization, transfer or disposition).
- Collection / collecting
- The act of gathering, capturing or obtaining personal data by any means (web forms, assessment platforms, emails or direct interactions).
- Use
- Any action involving the use, application or utilization of personal data within the organization’s processes and purposes.
- Access
- The power or authorization granted to any person who needs access to the data subject’s data for the purposes for which it was collected.
- Handling
- The set of operational acts of administration, control, processing and management of personal data throughout its lifecycle. Use of personal data to obtain a benefit, return, analysis or operational utility in the organization’s activities.
- Utilization
- Use of personal data to obtain a benefit, return, analysis or operational utility in the organization’s activities.
- Transfer
- Any communication of data to a person other than the data controller or processor, whether nationally or internationally (such as storage on cloud servers).
- Disposition
- Actions relating to the storage, custody, retention, blocking or, when appropriate, secure deletion and destruction of personal data.
- Controller responsible for collection, use and sharing
- The legal entity (AMITAI® or the Client, as applicable) that decides on the processing of personal data, its purposes and means. It assumes the primary legal obligation toward the data subject.
- Management Processor
- The legal entity (AMITAI®) that uses personal data collected on behalf of and under the instructions of the Data Controller. It does not make decisions about the data, but provides the technical service necessary to process it.
- Custody Processor
- A specific arrangement within AMITAI® services in which the organization, in addition to processing the data, assumes technical custody of the information on its cloud servers, ensuring the integrity, availability and secure deletion of assets under ISO 27001 standards.
- Data Subject
- The natural person to whom the personal data relates (for example, the assessed candidate, the reporting person or the legal representative).
- Prospect
- A natural person who has shown interest in AMITAI® services or products (for example, through a demo or contact request), but with whom a consolidated contractual relationship does not yet exist.
- Business Contact
- A person who maintains an active professional interaction with AMITAI® for business follow-up, pre-sales or after-sales purposes.
- ARCO Rights
- Rights that allow the Data Subject to exercise control over their data: Access, Rectification, Cancellation and Objection.
- Sensitive Data
- Personal data affecting the most intimate sphere of the data subject, or whose misuse may give rise to discrimination or pose a serious risk to the data subject.