The data controller is the natural or legal person (in this case A&L) who decides on the processing of personal data.

Arochi & Lindner, S.C., hereinafter (A&L), with address at Insurgentes Sur 1605, 20th floor, Colonia San José Insurgentes, C.P. 03900, Mexico City, is the Responsible for the processing of your personal data.

Personal data refers to any information alone or that can identify or make identifiable a natural person, either directly and/or indirectly, and that is in the possession of the Data Controller. The Owner is the natural person to whom the personal data is identified and corresponds

We collect personal data when the Owner provides them to us personally or directly through physical, electronic, optical or sound means; or, when we obtain them from a third party through a transfer consented to by the Owner to comply with the purposes described in this Privacy Notice. The personal data processed correspond to each of the categories of Data Controllers as follows:

Visitor A person who visits our website facilities.		Clientele Person who requests and hires the services of A&.		Suppliers/Contractors/Professional or Business Partners A person who provides a product or service to A&L.
a)    Office:   Identification and biometric data (CCTV). b)   Website:   Identification and contact (only if provided through any of the available means).   Data obtained through the use of cookies.		Identification and contact data.   Labor data (if applicable).   Biometric data (multimedia communication platforms and CCTV, in case of visiting our offices).		Identification and contact data.   Employment or business data.   Biometric data (multimedia communication platforms and CCTV in case of visiting our offices).

A&L Membership Application A person applying to join A&L.		Third party Individuals contacted by A&L to request personal, work, and/or professional references, as applicable.
Identification and contact data.   Academic and, where appropriate, employment data.   Biometric data (CCTV in case of face-to-face interviews, or through the use of multimedia communication platforms).   Curricular data (determined by each applicant).		Identification and contact data.   Type of interaction.   Labor or commercial.

These are personal data that affect the most intimate sphere of the Data Controller, or whose improper use may give rise to discrimination or entail a serious risk for the Owner.

We inform you that, in general, A&L does not collect or process data that due to its characteristics are considered sensitive. However, for job applications that advance in the personnel selection process, it may be necessary to collect and process sensitive data, in which case, we will inform you in advance and informed, informing you of the purposes of processing them and requesting your due express and written consent.

These are the reasons for which the Owner’s personal data is requested and give rise to the legal relationship between the Controller (A&L) and the Owner (You).

Visitor: (i) Serve visitors through the channels established by A&L and (ii) disclose the reason for their visit.

Clientele: (i) Identify you; (ii) contact you; (iii) integrate it into our corresponding administration and management systems; (iv) to respond to your request for information and quotation related to the provision of our services; (v) provide you with our consulting, advice, intervention and legal follow-up services; (xi) if necessary, carry out collection management actions for overdue balances.

Suppliers/Contractors/Professional or Business Partners: (i) Evaluation and selection of suppliers, contractors or business/professional partners; (ii) communication and negotiation of contractual terms; (iii) formalization of required service contracts, or joint collaboration, as applicable; (iv) management and maintenance of supplier records for business relationship management; (v) management and settlement of outstanding payments from suppliers, contractors or business/professional partners; (vi) compliance with tax and legal obligations in general, linked to this category of Holders.

Job application: (i) Identify you as a candidate for A&L talent and validate your identity; (ii) verify if the profile to join the A&L talent is met; (iii) contact you to invite you to join A&L, or to inform you of the status of the recruitment or selection procedure in which you are a party; (iv) carry out the logistical activities aimed at scheduling and conducting the interviews that A&L determines for the candidate candidacy, whether face-to-face or virtual; (v) follow up on the interview process and identify if it will be the candidate that will add to the A&L talent.

Third parties: (i) Verify and confirm the information provided by the applications.

General: Comply with the obligations established by the laws applicable to the A&L business.

Those purposes that are not essential for the relationship between the Data Controller (A&L) and the Owner (You), but that with their processing contributes to the fulfilment of A&L’s corporate purpose.

Visitor: (i) Send you information about events, services and legal news that may be of interest to you through our social media posts and newsletters.

Clientele: (i) Send you information about events or legal services that may be of interest to you; (ii) share with you information related to legal reforms, analyses, opinions, and updates; (iii) invite you to conferences or events organized by A&L; (iv) evaluate the quality of our services through surveys; (v) create databases for networking and commercial prospecting purposes; and (vi) manage the procedures for incorporation into our advertising communications systems

Suppliers/Contractors/Professional or Business Partners: (i) Keep you in our supplier portfolio for future collaborations/contracts

Candidacy for employment: (i) Safeguarding (for twelve months) the data provided by the Owner to inform you of vacancies in which your profile adapts to the requirements requested.

Third parties: Not applicable

The Owner has 5 (five) business days from the first contact with A&L to refuse the processing of his/her personal data for any or all of the secondary purposes by sending an email to [email protected]. We also inform you that A&L offers mechanisms for you to unsubscribe from our distribution lists and stop receiving communications from us.

Refusal to use your personal data for additional purposes shall not be grounds for limiting or denying the services that customers request from A&L; nor to terminate the relationship established with the Firm.

Any communication of personal data with any person (natural or legal) other than the Data Controller or Data Processor.

In order to comply with the aforementioned purposes and others required by law or by competent authorities by means of a well-founded and reasoned request, the following transfers of your personal data will be made:

A&L will transfer personal data only in the cases previously indicated, which are considered in the cases established by Article 37 of the Federal Law on Protection of Personal Data in Possession of Private Parties (LFPDPPP) and under the conditions of Article 17 of the corresponding regulation.

A&L will report any transfer of personal data that requires your express consent. If you wish to express your refusal to a transfer, send an email to [email protected] with the subject: “refusal to transfer”.

The ARCO Rights refer to the Rights of Access, Rectification, Cancellation and Opposition, and there is also the right to revoke consent, limit disclosure and file complaints with the competent authority.

The Owner or his/her legal representative may exercise any of the rights of access, rectification, cancellation or opposition, also known as ARCO rights, as well as revoke his/her consent for the processing of his/her data in accordance with the following:

Submit the respective request at the address indicated at the beginning of this Privacy Notice, with attention to our Privacy Department by means of a free writing, or by filling out the form that can be requested in [email protected] indicating the following content:

• Name of the applicant, and if applicable, of his or her legal representative.
• Documents that prove the identity, or, where appropriate, the legal representation of the Owner of the personal data. Address and/or e-mail address for the purpose of attending to the request for the exercise of the right in question.
• The clear and precise description of the right that you want to exercise, as well as the personal data with respect to which you seek to exercise any of the aforementioned rights.

In the case of a right of correction, indicate the data to be corrected and the correction to be made, or, in the case of a right of opposition, if applicable, indicate the secondary purposes for which the right is to be exercised.

• Any means or document that facilitates the location or identification of personal data

The exercise of the rights indicated herein will be free of charge, however, in the case of exercising the right of access, the Owner may request delivery, after proving his/her identity to the responsible party, through the issuance of simple copies or the delivery of electronic documents, for which the Owner must cover the shipping or reproduction costs generated.  who will be informed by informing him of the admissibility of the exercise of his right.

The communications that we will make to attend to the exercise of the right in question will be made through the address or email indicated in the Owner’s request.

The deadlines for the exercise of ARCO rights, as well as the revocation of consent are as follows:

The periods indicated in the previous paragraph may be extended for the same time indicated for a single occasion and for justified cause.

The Owner may limit the use or disclosure of his/her personal data by making his/her request via email to the address [email protected]. In the event that your application is admissible, you will be registered in the list that the Trade Name has for this purpose.

Additionally, the limitation of the use and disclosure of personal data may be extended by registering the telephone number of the Owners of personal data in the Public Registry to Avoid Advertising (REPEP) https://www.repep.profeco.gob.mx, which is in charge of the Federal Consumer Protection Agency (PROFECO), so that their personal data is not used to receive advertising or promotions from companies of goods or services.

On our website we use our own and third-party cookies to monitor your behavior as an Internet user and offer you a better browsing experience. These technologies allow us to collect personal data automatically and simultaneously at the time of your interaction with our site.

What are cookies? Cookies are small text files that are stored on your device when you access our website. They are used to make your user experience more efficient, remember your preferences and allow the website to function properly.

In accordance with current regulations, we may store cookies on your device if they are strictly necessary for the operation of this website. For all other types of cookies, we ask for your consent.

Purposes of Data Processing through Cookies. The data collected through the use of cookies and other tracking technologies will be processed for the following purposes:

  Allow navigation and access to secure areas of the website. These cookies are strictly necessary for the operation of the site and cannot be disabled.

  Store information about your preferences, such as the language selected and the region you are in, to provide you with a personalized experience.

  Analyze interaction with the website anonymously about how visitors interact with the website, such as sections visited and time spent, in order to improve site performance and content.

  They track your browsing behavior to display relevant and engaging ads, based on your interests and preferences. This allows us to provide you with more personalized content and optimizeadvertising campaigns.

Personal Data We Obtain. Through these technologies, we obtain the following personal data:

  Sailing schedule.

  Time spent on our website.

  Sections consulted within our website.

  Internet pages accessed prior to ours.

  User preferences, including language and region.

  Information related to ad personalization, based on your behavior and activity on the site.

Types of Cookies Used. Our website uses the following types of cookies:

  Necessary cookies: They are essential for the operation of the website, allowing navigation and access to secure areas. These cookies cannot be disabled, as the site would not function properly without them.

  Preference cookies: They allow us to remember information that changes the way the website behaves or is displayed, such as your preferred language or the region you are in.

  Statistical cookies: They help to understand how visitors interact with the website by collecting and providing information anonymously.

  Marketing cookies: These are used to track visitors on the website in order to display relevant and attractive advertisements to the user, based on their interests and browsing behaviour.

  Third-party cookies: Some cookies are placed by third-party services that appear on our pages, such as social networks or analytics platforms.

Disabling Cookies and Managing Preferences. You can disable these technologies through our cookie manager

A&L reserves the right to update security and data protection measures. In such a case, we will amend our Privacy Notice accordingly. These modifications will be posted on our website, so we encourage you to regularly review this section.

For any questions or comments regarding this Privacy Notice or our privacy and personal data protection practices, you may contact our Personal Data Department at: [email protected].

By continuing to browse our website, or by contacting us by any of the means enabled for this purpose and providing us with their data, the Owner declares to know the content, scope, terms and conditions described and expressly consents to the processing of their personal data in accordance with the uses and purposes indicated in this Privacy Notice.

Last updated: February 2025