CROISER CONSULTANTS, S.A.P.I. DE C.V. (hereinafter "USDTZAZ"), with an address for receiving notifications in Mexico City, is responsible for the use, protection, and processing of the personal data collected. In compliance with the Federal Law on Protection of Personal Data Held by Private Parties (the "Law"), USDTZAZ provides this Privacy Notice to inform you, prior to the processing of your personal and sensitive personal data, about how your personal data and any information collected through access to our website https://www.usdtzaz.com is used, stored, and, if applicable, transmitted, in order to ensure the privacy of such information and the right to informational self-determination of individuals.

Thus, in accordance with the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality, and responsibility regarding personal data established by the Law, USDTZAZ outlines in this Privacy Notice the terms and conditions under which, by using our websites and/or web application and/or mobile applications, you acknowledge and agree that USDTZAZ will process the personal and sensitive personal data you provide on our platform in accordance with the provisions set forth in this Comprehensive Privacy Notice.

Purposes and Use of the Processing of Your Personal Data, Including Sensitive Personal Data

USDTZAZ will use your personal data and the information you provide for the following primary purposes, understood as those necessary to provide the services offered by USDTZAZ through the use of its web platform, for the following:

• To establish and manage the user account to provide access to its services.
• To maintain contact with the user to ensure the continuity of the requested services and address any inquiries.
• To verify the user's identity with the National Electoral Institute and comply with relevant legal requirements.
• To respond to inquiries and clarifications related to the website.
• To comply with the Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin and other legal requirements.
• To investigate and resolve complaints or claims made by users.
• To meet the requirements of competent authorities.
• To identify and prevent fraud and illegal activities.
• To contact the user through calls, emails, messages, and other communication methods.
• To determine the user's geographic location to offer personalized content and benefits.
• To monitor and assess the quality of the services offered.
• To protect networks and electronic communications to safeguard user information.

Additionally, your personal data will be used for the following secondary purposes, which allow us to provide better service:

• To offer our services, contacting you and organizing events for marketing, advertising, and commercial broadcasting purposes, as well as informing you about our promotions, discounts, or services.
• To notify you of changes and updates to the terms and conditions of the services you have contracted.
• To fulfill our obligations to judicial or administrative authorities, including those resulting from audits or inspections.
• To maintain information and statistical records to assess customer satisfaction with the services provided.
• To register customers with USDTZAZ's systems to follow up on any questions they may have and to respond to communications through our email.

USDTZAZ collects, uses, stores, and/or transfers your personal data, as permitted by law, for the purpose of providing the selected services, selling, promoting, and publicizing our services (the "Services"), as well as contacting you to send communications, notifications, notices, and/or updates related to USDTZAZ.

If you, as the data subject (the "Data Subject"), do not wish for your personal data to be processed for the secondary purposes listed above, or for any specific one, you may exercise your ARCO rights (Access, Rectification, Cancellation, and Opposition), particularly the right to cancellation, by sending us a cancellation or opposition request to the following email address: consulta@usdtzaz.com.

If you, as the Data Subject, express your refusal regarding the processing of your personal data for secondary purposes, this will not prevent USDTZAZ from providing the Services you have contracted, as long as your refusal does not prevent USDTZAZ from providing the contracted services to fulfill the primary purposes for which your data was collected. Furthermore, we inform you that you have a period of 5 (five) business days to inform us of your refusal, starting from the date on which you were requested to provide information related to your personal data.

Type of Information Collected

USDTZAZ will collect your data in two ways: (i) through Registration to create an Account and (ii) through Registration in our Contact form, primarily requesting:

• Your full name
• Email address
• Phone number
• Official identification (Passport/INE)
• Proof of address

By using any of our services and continuing to browse our websites and/or web applications and/or mobile apps, you agree to the content of this privacy notice and provide informed consent for USDTZAZ to use your personal data, including sensitive personal data to which you are the data subject, for the purpose of your identification as a signatory and for the creation of the advanced electronic signature used through the USDTZAZ platform to electronically sign documents in which you are a party.

Protection of Information

The information obtained by USDTZAZ through its websites and/or web applications and/or mobile apps is protected by physical, technological, and administrative security measures, always ensuring the protection and privacy of user and/or client information. However, USDTZAZ cannot guarantee the protection of your personal data in case of internet connection issues or device malfunctions that are the responsibility of the users and/or clients. Despite having sufficient security infrastructure, it is possible that breaches beyond USDTZAZ's control may occur, and the risks associated with these incidents are assumed by the user and/or client.

The user and/or client is solely responsible for keeping their dynamic private key (OTP) for the electronic signature assigned by USDTZAZ secret, as well as the username, email address, and, where applicable, the password they used to create their account for access to USDTZAZ.

USDTZAZ is not responsible for the misuse, transmission to third parties, or negligence in the use of information by the user and/or client and/or third parties who participate in the use of their username, email address, password, if applicable, and/or dynamic private key to access USDTZAZ to generate, acquire, and/or purchase any of the services offered by USDTZAZ.

Only authorized personnel of USDTZAZ, who have met and followed confidentiality requirements, may participate in the processing of your personal data. USDTZAZ has confidentiality agreements and personal data processing agreements with each authorized staff member, and USDTZAZ is responsible for these agreements. Authorized personnel are prohibited from allowing access to and/or transmitting personal data to unauthorized individuals and from using the collected personal data of users and/or clients and/or third parties for purposes other than those outlined in this Privacy Notice.

Confidentiality of Information

USDTZAZ is committed to not sharing the confidential information and/or personal data provided by users or clients with any third party, except when explicit authorization is provided by the user or client.

Despite its policy of not disclosing information provided by users or clients, USDTZAZ reserves the right to disclose your information when a judicial and/or administrative order is received or when acting against malicious users of the information contained on the website and/or web application and/or mobile apps.

As a result of the above, users agree and understand that this Comprehensive Privacy Notice does not apply to the information users voluntarily provide when communicating with others via electronic correspondence, chats, or similar activities. It is the responsibility of the users and/or clients to manage the type of information and personal data they disclose when participating in the activities mentioned in this paragraph.

USDTZAZ is not responsible for personal data and information provided by users and/or clients to third parties who may have promotions or links to registration pages for their own benefit.

Transfer of Personal Data

USDTZAZ informs you that your personal data may be transferred to any judicial or administrative authorities, as required by applicable legislation, in the following cases:

• I. When the transfer is necessary or legally required for the safeguarding of public interest or for the administration of justice.
• II. When it involves recognition, exercise, or defense of a right in a judicial process.
• III. When disclosure is required to subsidiaries or affiliates of USDTZAZ that have the same internal processes and regulations.

Personal data may only be transferred to third parties other than those mentioned above under the following circumstances:

• I. With the express consent of the data subject.
• II. By law, resolution, or order from a judicial or administrative authority; and
• III. When it concerns personal information that is considered public by law.

USDTZAZ may transfer your personal data to third parties related to USDTZAZ commercially or contractually, as long as it is necessary to fulfill the purposes described in this Privacy Notice, provided that you have an obligation with these third parties or intend to acquire obligations with them in order to acquire, provide, grant, and/or enter into any goods and/or services.

The third parties and entities receiving personal data will assume the same obligations and/or responsibilities as USDTZAZ in accordance with the terms outlined in this Privacy Notice. USDTZAZ will ensure that these third parties maintain adequate administrative, electronic, technical, and physical security measures to protect your personal data, and that they use your personal data solely for the purposes for which they were contracted and in accordance with this Privacy Notice and the Law.

ARCO Rights

The means through which you can exercise your rights of access, rectification, cancellation, and/or opposition (ARCO), as outlined in the Law, can be done by contacting the data protection officer at USDTZAZ at the address or email mentioned above.

• Access and Rectification: The data subject may request USDTZAZ to inform them of which personal data is stored in its databases. The data subject may also request that any errors or inaccuracies in the collected personal data be rectified, specifying the modifications to be made and providing documentation supporting the request.
• Cancellation: The data subject may request at any time that their personal data be canceled and/or removed from USDTZAZ’s databases, either in person or through their legal representative, duly accredited. There are cases where personal data cannot be canceled by legal requirements, as once canceled, it will be subject to a blocking period after which the data will be deleted. The party responsible may retain the data solely for the purposes of administrative, civil, and criminal responsibilities arising from the processing.
• Opposition: The data subject may, at any time and for legitimate reasons, oppose the processing of their personal data, either personally or through their legal representative.

The data subject may revoke the consent previously given to USDTZAZ for the processing of their personal data, limit the use or disclosure of the data, and/or request its return, as well as exercise their ARCO rights as stipulated by the Law, by sending their request to the email address consulta@usdtzaz.com, addressed to USDTZAZ.

In accordance with Article 32 of the Law, USDTZAZ will address your request within a maximum period of 20 (twenty) business days from the date of receipt of your request for access, rectification, cancellation, or opposition. USDTZAZ will respond to the request regarding its validity via email sent to the address you provided in your request or by sending a letter to the address you provided. Within this period, you will be informed of the outcome. USDTZAZ will be considered to have fulfilled its response to your request when it delivers the correspondence to the postal service, or when it responds to your email message.

Limitation on the Use or Disclosure of Personal Data

The Data Subject may limit the use or disclosure of their personal data in accordance with the following:

• I. Register in the Public Registry to avoid advertising from the Federal Consumer Protection Agency (PROFECO). For more information about this registration, you can contact PROFECO directly by visiting the following link: http://rpc.profeco.gob.mx, or by calling from Mexico City, Guadalajara, and/or Monterrey at 96 28 00 00, and from the rest of Mexico at 01 800 962 8000.
• II. Request USDTZAZ to enroll them in the "Exclusion List" to avoid receiving information about our products and services.

Responsible for Data Protection

The entity responsible for data protection establishes controls and processes to protect personal data against loss, damage, alteration, destruction, unauthorized use, access, or processing. Additionally, USDTZAZ has established processes to assist users in exercising their rights to access, rectification, cancellation, and/or opposition, as provided by law.

The entity responsible will ensure that the personal data contained in databases is relevant, accurate, and updated for the purposes for which it was collected, and when it is no longer necessary for the fulfillment of those purposes, it will be canceled.

Changes to Privacy Notice

USDTZAZ may modify this Comprehensive Privacy Notice at its sole discretion. Such changes will be communicated to USDTZAZ users through our website, in the "Privacy Notice" section.

Acceptance of Comprehensive Privacy Notice

This Comprehensive Privacy Notice regarding the processing and use of personal and sensitive personal data constitutes a valid agreement between the user and/or client and/or third-party participant and USDTZAZ. By using and/or accessing USDTZAZ Services, the user confirms that they have read, understood, accepted, and agreed to the terms of this Comprehensive Privacy Notice. If the user does not agree with the terms of this privacy notice, they should not provide any information, nor use the Services or any information related to this Site and/or web application and/or mobile applications.

Questions and Complaints

USDTZAZ provides the user with the email address consulta@usdtzaz.com to contact us in case of any complaints or questions regarding the Services.

USDTZAZ acknowledges that there may be issues with the Site. In case of such issues, please report them by sending an email to: consulta@usdtzaz.com. The team will respond to the user and/or client within a maximum of 72 (seventy-two) hours at the contact email address or phone number provided by the client.

Questions or Comments

If the Data Subject has any questions about this Privacy Notice, please contact USDTZAZ via email at consulta@usdtzaz.com.

Complaints

If the Data Subject believes that their Right to Personal Data Protection has been subjected to improper treatment or is contrary to the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations, they may file a complaint with the National Institute for Transparency, Access to Information, and Personal Data Protection (INAI). For more information:

• Call the INAI toll-free service at 01 800 835 43 24. The hours of operation are from 09:00 to 18:00, Monday through Thursday, and Friday from 09:00 to 15:00 (Central Time, Mexico).
• Visit the following link: http://inicio.inai.org.mx/SitePages/ifai.aspx

Last update: November 2024.