Privacy Policy
PRIVACY NOTICE:
DATA CONTROLLER
“Datu, S.A.S de C.V.” (hereinafter “DATU”), with its address at Calle San Francisco, number 1112, Colonia Santa Catalinas, Margarita, Delegación Benito Juárez, C.P. 03100, Mexico City, is committed to protecting the personal information provided by its Clients (hereinafter “Personal Data”) when collected for the use of the service offered by DATU through the website https://datu.mx (hereinafter the “Website”), electronic media, and/or via telephone (hereinafter “Other Means”).
CLIENTS
DATU may request and/or collect Personal Data from Clients through the Website and Other Means for the purposes listed below, as well as to comply with legal requirements or requests from competent authorities. As the Data Controller, DATU, its Data Processors, and/or any Third Party involved in any phase of Personal Data Processing are obligated to maintain the confidentiality of such data in accordance with the provisions of the Federal Law for the Protection of Personal Data Held by Private Parties (LFPDPPP).
The Personal Data provided by Clients through the Website or Other Means is used for the following purposes:
-
Create an account through the application for the use of the service offered by DATU.
-
Enter into an account opening agreement for the use of DATU’s credit card and services.
-
Generate databases for verification and service delivery purposes.
-
Create a file for the Anti-Money Laundering Department.
Purposes not necessary for the existence and fulfillment of the relationship between the Client and DATU:
-
For commercial, marketing, and advertising purposes.
-
Creation of market studies.
CONSENT
The consent of the Data Subject for the processing of their Personal Data must be explicitly granted. If the Data Subject agrees with the content of this Privacy Notice, they must check the acceptance box after reading it.
PERSONAL DATA TO BE PROCESSED:
The Personal Data requested from the Client for the use of the card includes:
-
Full name (first and last names without abbreviations).
-
Gender.
-
Date of birth.
-
State and country of birth.
-
Nationality.
-
Unique Population Registry Code (CURP).
-
Federal Taxpayer Registry (RFC).
-
Voter ID.
-
Phone number.
-
Occupation, profession, or business activity.
-
Email.
-
Address.
MEANS TO LIMIT THE USE OR DISCLOSURE OF PERSONAL DATA
DATU has the necessary physical, technical, and administrative security measures to protect Clients’ Personal Data.
Clients may revoke their consent for the processing of their Personal Data at any time by sending an email to datos.personales@datu.mx and requesting the revocation form.
The revocation of Personal Data may result in the closure of the account, as the service requires the processing of such data.
Clients can also limit the use or disclosure of their Personal Data by sending an email to the same address and requesting the Limitation of Use and Disclosure form. This limitation will prevent data from being used or disseminated for marketing, advertising, or commercial purposes unrelated to the legal relationship between the Data Controller and the Data Subject.
TRANSFER OF PERSONAL DATA
DATU may disclose, share, and/or transfer Personal Data to its affiliates, subsidiaries, or related entities within or outside the country, as well as to comply with legal obligations or requests from competent authorities.
Additionally, it may transfer Personal Data to sponsors, advertisers, and other third parties for statistical purposes, targeted advertising, or market research. These third parties are obligated to comply with this Privacy Notice, the Website and Application Terms and Conditions, and applicable legislation in Mexico.
DATA SUBJECT RIGHTS
Data Subjects have the right to access, rectify, cancel, or oppose the processing of their Personal Data (ARCO rights).
To exercise these rights, the Data Subject or their legal representative may request the ARCO Rights form via email at datos.personales@datu.mx. The completed and signed form must be returned with scanned, legible documentation proving identity.
RIGHT OF ACCESS: Data will be provided free of charge unless reproduction costs or other justified expenses are incurred.
RIGHT OF RECTIFICATION: Requests for rectification must be accompanied by documentation supporting the change.
RIGHT OF CANCELLATION: Data to be canceled will be blocked for 10 years and subsequently deleted.
RIGHT OF OPPOSITION: Clients may specify which data they oppose processing and the reasons.
EXCLUSION OF LIABILITY FOR THE WEBSITE
The Website may contain hyperlinks or links to other websites that are not covered by this Privacy Notice. DATU is not responsible for the Personal Data provided through these third-party sites.
COOKIES AND WEB BEACONS
The Website uses cookies and web beacons to enhance user experience. Clients can manage their preferences through their browsers to block these technologies if desired.
CHANGES TO THE PRIVACY NOTICE
DATU reserves the right to modify this Privacy Notice at any time. Any changes will be communicated via the Website and Application.
Last updated: December 16, 2024.