ONE PLACE PRIVACY NOTICE

1. DATA CONTROLLER.

This English version is provided for convenience only. In the event of any discrepancy, the Spanish version shall prevail.

ALDAN INGENIERIA SAPI (referred to in this document as “One Place”), with its address at calle 20-H No. 273, Col. Jardines del Norte, Mérida, Yucatán, Mexico, ZIP 97138, is responsible for the processing of your personal data.

One Place cares about your privacy.

This Privacy Notice is addressed to the users (hereinafter “User”) of the “One Place Software”, and its purpose is to inform them of the conditions under which “One Place”, as Data Controller, processes their personal data.

The relationship between the Data Controller and the “User” is based on the User’s browsing of the website https://www.oneplace.mx/, other “SITES”, and any Forms and/or Surveys the User completes; therefore, there is a legitimate interest for the Data Controller to process the User’s personal data.

2. PERSONAL DATA

To use the website https://www.oneplace.mx/ and the other “SITES”, “One Place” will process the following personal data of the “User”:

Identity data:

  • Full name.
  • Name or company name.

Contact data:

  • Personal and/or work email address.
  • Home and/or work phone number and/or mobile number.
  • State of residence.

WordPress platform.

“SITES”.

· PADDLE platform

Identification data:

  • Federal Taxpayer Registry number (RFC).

Contact data:

  • Home and/or work address.

Employment data:

  • Position held at the company you own or work for.
  • Line of business of the company you own or work for.

Account holder identification data:

  • * Photocopy of voter ID card (INE).
  • * Account holder’s signature on the purchase order.
  • · (1) Debit or credit card number.

Debit or credit card sales.

PADDLE payment platform.

3. COLLECTION OF SENSITIVE DATA.

If the Data Controller collects and processes sensitive data of the Data Subject (those marked above with an asterisk*) or other data necessary or convenient for the purposes described above, the Data Subject will be informed beforehand. In all cases, sensitive personal data will be kept and processed with strict security and confidentiality for the purposes set out in this Privacy Notice and in accordance with applicable Mexican laws, regulations and standards and international law.

(1) Card data is not stored or recorded in any physical, electronic or digital medium. It is used solely as a means of completing the sales transaction.

4. TERM.

This Privacy Notice takes effect from the moment the Data Subject browses the website https://www.oneplace.mx/ or the “SITES”, or completes any Forms and/or Surveys, and will remain enforceable unless the Data Subject chooses to exercise their right of revocation, cancellation or objection with respect to purposes that are not necessary for the operation of the websites mentioned in this paragraph.

Pursuant to Article 25 of the Federal Law on the Protection of Personal Data Held by Private Parties and Article 37 of its Regulations, personal data may not be retained longer than necessary to fulfill the purposes that justified its processing, as described below. Once those purposes have been fulfilled, and unless a legal or regulatory provision states otherwise, the Data Controller shall cancel the data in its possession, after blocking it, for subsequent deletion.

If the Data Subject resides in any member country of the European Union, pursuant to Article 6(1) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016, in force since 25 May 2018, this Privacy Notice shall take effect as of the date the main services agreement is signed between the Data Controller and the Data Subject whose data will be processed, and for the duration of that agreement.

5. PURPOSES OF DATA PROCESSING

To use the website https://www.oneplace.mx/ and the other “SITES”, “One Place” will process the following personal data of the “User”:

Purposes

Tool or Sites that use them

Primary Purposes: (i) to carry out the actions that allow us to operate our website and, where applicable: (ii) to register you as a prospective customer of “ONE PLACE” products or services in order to assess your requirements, record and respond to your inquiries; (iii) to provide you with “ONE PLACE” products and services; (iv) to inform you of changes to “ONE PLACE” products or services; (v) to provide you with information about “ONE PLACE” products or services; (vi) when you purchase a “ONE PLACE” product, to identify you on our website and applications, verify, validate and confirm your identity, and register you as a user of our platforms; (vii) to provide technical support; and (viii) to provide customer service and allow you to evaluate the quality of our service.

(i) to verify, validate and confirm your identity, and (ii) to conduct satisfaction and quality surveys.

WordPress platform

(i) To send you promotional, marketing, advertising or sales prospecting messages about “ONE PLACE” products and services; (ii) to inform you about new “ONE PLACE” products or services and changes to them; and (iii) for statistical and predictive analytics purposes.

“SITES”.

(i) to verify, confirm and validate your identity; (ii) to validate the details of credit card transactions; (iii) to provide you with the “ONE PLACE” products and services you requested; and (iv) to charge your credit or debit card for the purchase of any “ONE PLACE” product, either in interest-free monthly installments or in a single payment.

PADDLE platform

Secondary Purposes: (i) to improve your experience as a “ONE PLACE” customer and provide you with personalized service and attention; (ii) to send you promotional, marketing or advertising messages or content; and (iii) for advertising and sales prospecting purposes.

One Place platform

6. TRANSFERS AND REMITTANCES OF THE INFORMATION COLLECTED

6.1 Transfers.

To provide the services associated with your browsing of the “SITES” and the website https://www.oneplace.mx/, we need to share your data with:

(a) Technology service providers, for both primary and secondary purposes.

These transfers are both domestic and international, are necessary to maintain or fulfill the obligations between the Data Controller and the Data Subject, are carried out in accordance with Article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties, and do not require your consent.

By accepting this privacy notice, you consent to “ONE PLACE” transferring your information to these providers. Any other transfer of personal data will only be carried out with your consent and after informing you accordingly.

6.2 Remittances

During this processing, your personal data will be communicated to our Data Processors. This remittance is carried out in accordance with Article 53 of the Regulations of the Federal Law on the Protection of Personal Data Held by Private Parties and does not require your consent.

7. OPTIONS AND MEANS TO LIMIT THE USE OF DATA.

Your data is processed under security and confidentiality standards. If you wish to revoke your consent to the processing of your Personal Data, you may do so through the following means:

(a) By sending your request to soporte@logismic.mx, where we will address and resolve your request in accordance with the Law;

(b) Or by submitting a written request, addressed to the legal representative, at calle 20H No. 273, Col. Jardines del Norte, Mérida, Yucatán, Mexico, ZIP 97138, where we will also address your request in accordance with the applicable laws.

Revocation only applies to purposes that are not necessary for the use of the “SITES” and the website https://www.oneplace.mx/. In any case, the procedure for revoking consent is the same as the one described in the section on the means to exercise ARCO rights.

8. MEANS TO EXERCISE ARCO RIGHTS (RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION OR OBJECTION).

To exercise your ARCO rights and/or revoke your consent to the processing of your personal data, whether because it is inaccurate or incomplete or because you wish to object to its processing for certain purposes, please submit a written request (ARCO Rights Request) addressed to the person responsible for PERSONAL DATA at the email or physical address given in the previous section. The request must include the following information:

  1. a) Name of the data subject.
  2. b) Address or email address of the data subject for us to respond to the request.
  3. c) Documents proving the identity of the data subject or the authority to represent them in the request.
  4. d) A description of the personal data with respect to which an ARCO right is being exercised.
  5. e) Any other information that helps locate the personal data and process the request.

Within a maximum of 20 (twenty) business days from the date your request is received, “ONE PLACE” will notify you of its decision.

If “ONE PLACE” determines that your request is valid, it will be carried out within 15 (fifteen) days of the date you were notified of the decision.

These periods may be extended once for an equal period, provided the circumstances justify it.

If the request is valid, the person responsible for PERSONAL DATA will ask the relevant department to carry out the actions required to comply with the decision in favor of the data subject within fifteen days of the date the response is communicated.

The processing period for your request starts on the day we receive it, as long as it is received during our business hours, which are 9:00 am to 5:30 pm, Monday through Friday. Requests received outside business hours or on a public holiday will be handled on the next business day.

9. NOTIFICATION OF CHANGES TO THIS PRIVACY NOTICE.

The Data Controller reserves the right to amend this Privacy Notice at any time to comply with legislative or case-law updates, internal policies, or new requirements for downloading licenses and/or providing services. Any amendment will be communicated by publishing it at the web address mentioned above.

9.1 WEB BANNERS.

The Data Controller’s websites and online services use web banners, which are images embedded in web pages or portals and in emails that may, among other things, store information such as the user’s IP address and time spent on the websites, allowing the Data Controller to collect personal data automatically.

The Data Subject is hereby informed that by accessing and continuing to use the Website, they consent to the Data Controller collecting and processing their personal data. The use of these technologies is necessary for operational, technical and security reasons.

The Data Controller will process the Data Subject’s Personal Data solely and exclusively in accordance with the terms of this Privacy Notice, which give rise to the relationship between the Data Controller and the Data Subject.

10. COOKIES, WEB BEACONS AND OTHER SIMILAR TECHNOLOGIES

The website https://www.oneplace.mx/ uses its own and third-party cookies that make it possible to monitor your behavior as an internet user, in order to provide you with a better service and browsing experience on this site.

Cookies and tracking mechanisms may be used in connection with our online service.

Cookies are small text files that may be stored on your device when you visit our online service.

Tracking is possible using different technologies. In particular, we process information using pixel technology and/or log file analysis.

10.1 Cookie categories

We distinguish between cookies that are required for the technical functions of the online service and cookies and tracking mechanisms that are not required for its technical function.

It is generally possible to use the online service without cookies that serve non-technical purposes.

10.1.1 Technically required cookies

Technically required cookies are cookies without which the technical delivery of the online service cannot be guaranteed. These include, for example, cookies that store data to ensure smooth playback of video or audio streams.

These cookies are deleted when you leave the website.

10.1.2 Cookies and tracking mechanisms that are not technically required

We only use cookies and tracking mechanisms if you have given us your prior consent in each case, with the exception of the cookie that stores the current state of your privacy settings (selection cookie). This cookie is only set if you have given us your consent to do so.

We distinguish between two subcategories of these cookies and tracking mechanisms:

10.1.3 Comfort cookies

These cookies make the online service easier and more convenient to use; for example, your language settings may be stored in these cookies.

10.1.4 Marketing cookies and tracking mechanisms

By using marketing cookies and tracking mechanisms, we and our partners can show you offers based on your interests, as a result of analyzing your user behavior:

Statistics:

Using statistical tools, we measure, for example, the number of visits to your page.

Conversion tracking:

Our conversion tracking partners place a cookie on your computer (“conversion cookie”) if you reached our website through an ad from that partner. These cookies normally expire after 30 days. If you visit certain pages of our website and the cookie has not yet expired, we and the relevant conversion partner can recognize that a particular user clicked on the ad and was redirected to our website. This can also be done across devices. The information obtained through the conversion cookie is used to compile conversion statistics and record the total number of users who clicked on the respective ad and were redirected to a website with a conversion tracking tag.

Plugins:

Some pages of our online service include content and services from other providers (e.g. Facebook, Twitter) that may also use cookies and active modules.

  • Name: Google Analytics

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Functionality: Analysis of user behavior (page views, number of visitors and visits, downloads), creation of pseudonymous user profiles based on cross-device information from users logged into Google (cross-device tracking), enrichment of pseudonymous user data with target-group-specific information provided by Google, retargeting, UX testing, conversion tracking and retargeting in conjunction with Google Ads.

  • Name: Google Tag Manager

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Functionality: Management of website tags through a user interface and integration of program code into our websites.

  • Name: Google Ads

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Functionality: Ad placement, remarketing and conversion tracking. More information is available at: https://adssettings.google.com/authenticated

10.2 Managing cookies and tracking mechanisms

You can manage your cookie and tracking settings in your browser and/or in our privacy settings.

10.2.1 Disabling all cookies

If you want to disable all cookies, turn them off in your browser settings. Please note that this may affect the website’s functionality.

10.2.2 Managing your settings for cookies and tracking mechanisms that are not technically required

When you visit our websites, a cookie notice will ask whether you agree to our use of comfort cookies, marketing cookies or tracking mechanisms.

In our privacy settings, you can withdraw your consent with effect for the future or give your consent at a later time.

11. Plugins

Our Digital Offerings use so-called plugins from various social networks. They are described individually in this section.

When plugins are used, your web browser establishes a direct connection to the servers of the respective social network. The provider thereby receives the information that your browser accessed the relevant page of our Digital Offerings, even if you do not have a user account with that provider or are not logged in. In this case, log files (including your IP address) are transmitted directly from your browser to a server of the provider and may be stored there.

Plugins are independent extensions provided by the social networks. For this reason, we have no influence over the scope of the data they collect and store.

The purpose and scope of the collection, processing and further use of data by the social network, as well as your rights and settings options for protecting your privacy, can be found in the privacy notices of the respective social network.

If you do not want social network providers to receive and, where applicable, store or use data, you should not use the respective plugins.

11.1 Facebook plugins

Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). An overview of Facebook plugins and their appearance is available at https://developers.facebook.com/docs/plugins, and information about data protection at Facebook is available here: http://www.facebook.com/policy.php.

11.2 X (formerly Twitter) plugins

X.com is operated by X Corp, 355 Market Street, San Francisco, California, 94103, USA. An overview of Twitter plugins and their appearance is available at https://developer.twitter.com/en/docs/twitter-for-websites/overview.html, and information about data protection at X is available here: https://twitter.com/privacy.

11.3 LinkedIn plugins

LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). An overview of LinkedIn plugins and their appearance is available at https://developer.linkedin.com/plugins, and information about data protection at LinkedIn is available here: https://www.linkedin.com/legal/privacy-policy.

11.4 YouTube

Our Digital Offerings use the YouTube video platform, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“YouTube”). YouTube is a platform for playing audio and video files.

When you access our Digital Offerings that contain an embedded YouTube player, a connection to YouTube is established so that the video or audio file can be streamed and played. In doing so, data is transferred to YouTube as data controller. We are not responsible for YouTube’s processing of that data.

Further information on the scope and purpose of the data collected, on YouTube’s processing and use of the data, and on your rights and available privacy options can be found in YouTube’s privacy notice.

11.5 External links

Our Digital Offerings may contain links to third-party websites, in particular providers that are not affiliated with us. Once you click the link, we have no influence over the collection, processing and use of any personal data that may be transmitted to the third party (such as your IP address or the URL of the page containing the link), as the conduct of third parties is naturally beyond our control. We accept no responsibility for the processing of personal data by third parties.

11.6 Security

Our employees and the companies that provide services on our behalf are bound by confidentiality and must comply with applicable data protection laws.

We take all necessary technical and organizational measures to ensure an appropriate level of security and to protect the data we manage, especially against the risks of accidental or unlawful destruction, manipulation, loss, alteration, or unauthorized disclosure or access. Our security measures are continuously improved in line with technological developments.

12. DATA SUBJECTS' RIGHT TO INFORMATION.

Data subjects are informed of their right to file a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) if they believe their right to the protection of personal data has been violated.

The data controller is responsible for informing the persons affected by processing operations as soon as it becomes aware of any damage, loss, alteration, destruction, or unauthorized use, access or processing of their personal data. To this end, the data controller must adopt the necessary administrative, technical and physical security measures to protect and safeguard the information.

You can register with the Public Registry to Avoid Advertising (REPEP) to limit the use and disclosure of your personal data. More information is available at: https://repep.profeco.gob.mx/

12.1 FINAL DESTINATION OF THE DATA.

All processing of personal data is subject to the consent of the data subject, except for the exceptions established in the applicable Law and its regulations. Please note that, pursuant to Article 8 of the Federal Law on the Protection of Personal Data Held by Private Parties, the data subject tacitly consents to the processing of their personal data if they do not express their objection.

Once the purposes of the processing have been fulfilled and the information containing personal data has been cancelled, the data controller will delete, erase or destroy such information under the security measures established by the company in accordance with the applicable Law.

Last updated: 12/28/2023 ALDAN INGENIERÍA SAPI