Simplified Privacy Notice
Corpshore Mexico, S. de R.L., the Mexican subsidiary of Corpshore Solutions Corporation headquartered in Toronto, Canada, acts as the controller, known under Mexican law as the responsable, of your personal data. We operate from Mexico City, Monterrey and Merida, and we provide recruitment, business process outsourcing, information technology and artificial intelligence services to clients in Mexico, the United States and other markets.
The personal data we collect is used for the following primary purposes: to identify and contact you, to attend to your requests for information, to evaluate job candidacies and applications, to manage the contractual relationship with clients and suppliers, to comply with legal, tax and social security obligations, and to deliver the services that you or your organization engage. Additionally, and only if you do not object, we may use your data on a secondary basis to send you informational communications, content, newsletters, event invitations and quality surveys, as well as to prepare statistical analyses and improve our services.
You may object at any time to the processing of your data for the secondary purposes, and doing so will not condition the delivery of the primary services. To state your objection, or to exercise your rights of access, rectification, cancellation and objection, known as ARCO rights, you may send your request to info@corpshore.solutions.
We carry out transfers of personal data within the Corpshore group and to third parties that provide services to us, on the terms detailed in the full notice below. To learn the detail of the purposes, the transfers, the use of cookies and tracking technologies, and the mechanisms to exercise your rights and to revoke your consent, please consult the full privacy notice reproduced below. The use of cookies and web technologies is further governed by our Cookie Policy, which forms an integral part of this notice.
Full Privacy Notice
Identity and domicile of the controller
The controller responsible for the processing of your personal data is Corpshore Mexico, S. de R.L., the Mexican subsidiary of Corpshore Solutions Corporation, a company headquartered in the city of Toronto, Canada. We refer to this entity hereinafter as Corpshore, the controller or we.
Corpshore maintains operations in Mexico City, in Monterrey, Nuevo Leon and in Merida, Yucatan. On personal data protection matters, the controller can be contacted through the email info@corpshore.solutions, which constitutes the official contact channel for privacy purposes.
For general matters you may write to us at info@corpshore.solutions. For matters specifically concerning personal data protection, including the exercise of rights, the revocation of consent and the limitation of the use or disclosure of your information, the designated channel is info@corpshore.solutions.
Applicable legal framework
This privacy notice is issued in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties, hereinafter the LFPDPPP or the Law, its Regulations, the Privacy Notice Guidelines and other applicable provisions. Corpshore processes personal data observing the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality and accountability established by the Law, as well as the duties of security and confidentiality that the Law imposes on the controller.
Personal data we collect
Corpshore may collect and process the following categories of personal data, depending on the nature of your relationship with us and only to the extent that they are necessary for the purposes described in this notice.
Identification and contact data: full name, date of birth, nationality, address, landline and mobile telephone, email address, signature and, where applicable, the Unique Population Registry Code, known as the CURP.
Employment and professional data: academic history, training, certifications, work experience, position, skills, professional references, compensation expectations, availability and the information contained in your curriculum vitae or professional profiles that you share with us.
Tax and social security identification data: where the relationship requires it, the RFC, the social security number and the banking details needed to pay fees, payroll or consideration.
Client and supplier data: data of the individuals who act as contact, representative or signatory for the organizations with which we hold commercial relationships, including name, position, corporate email and telephone.
Browsing and technical data: IP address, device type, browser, pages visited and data collected through cookies and similar technologies on our websites, in accordance with the Cookie Policy.
We do not intentionally collect personal data from minors. If you are a parent or guardian and believe that a minor has provided us with data without the corresponding authorization, you may request its deletion through the channels indicated in this notice.
Sensitive personal data
As a general rule Corpshore does not require or request sensitive personal data. Data are considered sensitive when they may reveal aspects such as racial or ethnic origin, present or future health status, genetic information, religious, philosophical or moral beliefs, union membership, political opinions or sexual preference, among others.
In certain recruitment or service delivery processes it might be indispensable to process certain sensitive data, for example health data to make reasonable adjustments in the work environment or to meet specific obligations of our clients. In those cases, Corpshore will obtain your express written consent in accordance with article 9 of the Law, will inform you of the specific purpose, will limit the processing to the minimum necessary and will adopt reinforced security measures. You are not obliged to provide sensitive data and your refusal will not, by itself, prevent you from accessing services that do not depend on such processing.
Purposes of the processing
Corpshore processes your personal data for primary purposes, which are necessary and give rise to the legal relationship with you, and for secondary purposes, which are not necessary but allow us to offer you a better experience and to which you may object.
Primary purposes. To identify you, verify your identity and establish contact with you. To attend to and follow up on your requests, questions, complaints and information requirements. To evaluate and manage job candidacies and applications, including sharing your profile with clients that offer compatible vacancies when you so authorize. To formalize, administer and comply with the contractual relationships with clients, candidates, collaborators and suppliers. To deliver the engaged recruitment, process outsourcing, information technology and artificial intelligence services. To carry out the corresponding administrative, accounting, tax and billing management. To comply with the legal obligations applicable to us and to respond to requirements from competent authorities. To protect the security of our facilities, systems and people, and to prevent fraud and misuse.
Secondary purposes. To send you newsletters, informational communications, content and publications about our services, the labor market and topics of our sector. To invite you to events, seminars, webinars and activities. To conduct satisfaction and quality surveys. To prepare studies, statistical and market analyses, as far as possible through dissociated or aggregated data. To personalize and improve our services and communications.
If you do not wish your data to be processed for the secondary purposes, you may state your objection from now, or at any later time, by sending an email to info@corpshore.solutions indicating the purposes to which you object. Your objection to the secondary purposes will not be grounds to deny you the services nor will it affect the primary relationship you maintain with us.
Basis and consent
The processing of your data for the primary purposes is grounded in the existence or establishment of a legal relationship with you, in the fulfillment of legal obligations and in the cases recognized by the Law. Where the Law requires it, processing is carried out with prior consent, which may be tacit or express depending on the category of data. For financial or asset data your express consent is required, and for sensitive data your express written consent is required, on the terms already stated.
ARCO rights
You, or your duly accredited legal representative, have at all times the right to access your personal data held by us and to know the details of its processing, as well as to rectify it when it is inaccurate or incomplete, to cancel it when you consider that it is not required for any of the stated purposes, is being used outside the agreed terms or the relationship has ended, and to object to the processing of your data for specific purposes. These are the so called ARCO rights.
To exercise any of these rights you must submit a request to info@corpshore.solutions that contains and includes the following: your name and an address or means to communicate the response to you, the documents that accredit your identity or, where applicable, the legal representation, a clear and precise description of the data in respect of which you seek to exercise the right, and any element or document that facilitates locating the data. In the case of a rectification request, you must also indicate the modifications you request and provide the documentation supporting your petition.
Corpshore will communicate the determination adopted within a maximum term of twenty business days counted from receipt of the request. If the request is found to be well founded, it will be made effective within the fifteen business days following the date on which we communicate the response to you. These terms may be extended once by an equal period when the circumstances of the case justify it, a situation of which you will be notified. The exercise of the ARCO rights is free of charge, and you will only have to cover, where applicable, the justified shipping expenses or the cost of reproduction in copies or other formats. If you reiterate your request within a period of less than twelve months, a cost may apply, unless there are substantial modifications to the privacy notice that give rise to new consultations.
Corpshore may deny access to the data, or the rectification, cancellation or objection, in the cases foreseen by the Law, for example when the applicant is not the data owner or does not accredit the representation, when the data does not appear in our database, when the rights of a third party would be harmed, when there is a legal impediment or a resolution of a competent authority, or when the rectification, cancellation or objection has already been carried out. In all cases we will inform you, in a founded and reasoned manner, of the reason for the refusal.
Revocation of consent and limitation of use or disclosure
You may revoke at any time the consent you have granted us for the processing of your personal data, to the extent permitted by the Law and provided that this is not contrary to a legal obligation or to the subsistence of the legal relationship we maintain. The revocation will not have retroactive effects and will not affect the lawfulness of the processing carried out before it.
Likewise, you may request that we limit the use or disclosure of your personal data. To include your data in an internal exclusion list, or to revoke your consent, send your request to info@corpshore.solutions following a procedure analogous to that of the ARCO rights. We will confirm receipt and inform you of the consequences of your decision, since in some cases the revocation or limitation could mean that we are not in a position to continue delivering certain services.
Cookies and web technologies
Our websites use cookies, web beacons and other tracking technologies that allow us to collect data about your browsing, remember your preferences, measure the performance of our pages and, when you consent to it, offer you content and analytical measurements. Some of these technologies are strictly necessary for the operation of the site and others are activated only with your consent through the cookie management mechanism available on our pages.
The detail of the cookies we use, their purpose, their duration and how to disable them is described in our Cookie Policy, which forms an integral part of this privacy notice and is understood to be reproduced in it by reference. We recommend that you consult it to know and manage your preferences.
Transfers of personal data
Corpshore may transfer your personal data to third parties within and outside Mexico. In particular, your data may be shared with the following categories of recipients: the companies of the Corpshore group, including our parent company Corpshore Solutions Corporation in Canada and other subsidiaries, for internal administrative purposes and coordinated service delivery; the clients that offer vacancies or opportunities compatible with your profile, when you authorize it within the framework of a recruitment process; the suppliers and processors that provide us with technology, hosting, messaging, collection, accounting and operational support services, who process the data on behalf of and under the instructions of Corpshore; and the competent authorities when there is a founded and reasoned requirement or a legal obligation.
When the relationship with those who process data on our behalf has the nature of a processing engagement under the Law and its Regulations, that remittance is not considered a transfer and is governed by the instruments that guarantee the confidentiality and security of the information.
In accordance with article 37 of the Law, certain transfers do not require your consent, among others: when the transfer is provided for in a law or a treaty to which Mexico is a party; when it is necessary for medical prevention or diagnosis, the provision of health care, medical treatment or the management of health services; when the transfer is made to holding companies, subsidiaries or affiliates under the common control of the controller, or to a parent company or any company of the same group operating under common internal processes and policies; when the transfer is necessary by virtue of a contract entered into or to be entered into in the interest of the data owner between the controller and a third party; when the transfer is necessary or legally required to safeguard a public interest or for the administration of justice; when the transfer is required for the recognition, exercise or defense of a right in a judicial proceeding; and when the transfer is required for the maintenance or fulfillment of a legal relationship between the controller and the data owner. Outside of these cases, transfers that require it will be carried out with your prior consent, and we will inform the recipients of the purposes to which you subjected the processing, so that they remain obliged to observe this notice.
Security measures
Corpshore has adopted and maintains reasonable administrative, technical and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access or disclosure. Among other measures, we apply access controls, confidentiality obligations for our personnel and suppliers, and safeguarding practices consistent with the sensitivity of the information. In the event that a security breach occurs that significantly affects your patrimonial or moral rights, we will communicate it to you without delay so that you can adopt the corresponding measures to defend your rights.
Data retention
We retain your personal data only for the time necessary to fulfill the purposes that motivated its processing and to meet the legal, tax, accounting and accountability obligations applicable to us. Once those purposes have concluded and the legal retention periods have elapsed, your data will be blocked and subsequently deleted in accordance with the Law.
Recourse before the data protection authority
If you consider that your right to the protection of personal data has been infringed by any conduct or omission on our part, or you presume any violation of the provisions of the Law, its Regulations and other applicable rules, you have the right to approach the competent data protection authority to file the corresponding complaint or report.
You may file your complaint or report before the competent authority for personal data protection in Mexico, in accordance with the procedure and terms that the applicable legislation establishes. We are happy to guide you on this matter through the email info@corpshore.solutions.
Changes to the privacy notice
This privacy notice may be modified or updated at any time to address legislative reforms, authority criteria, changes in our business model or in our privacy practices. Any modification will be made available to you through our websites and, where applicable, communicated to you through the contact channels you have provided. We suggest that you review this notice periodically to stay informed about the way in which we process your personal data.
Acceptance
By providing us with your personal data by any means, or by continuing to use our sites and services without objecting to the secondary purposes, you acknowledge that you have read and understood this privacy notice and you consent to the processing of your personal data on the terms described here, to the extent that such consent is necessary under the Law.