Comprehensive Privacy Notice — Grupo DITESA

This notice applies to the two companies of Grupo DITESA, each of which is responsible for the data it processes in its country:

• Mexico: Distribuidora Téllez, S.A. de C.V., RFC DTE910624FR5, with registered address at Eje Central Lázaro Cárdenas 506, Álamos, Benito Juárez, México.
• Spain and European Union: DITESA IT Solutions, S.L., NIF B19760719, with registered address at Calle de Bidasoa 16, 3E, 28002, Madrid, Spain.

Privacy contact: belen@grupoditesa.com.mx

• Identification and contact: name, position, company, email address, telephone.
• Tax and billing data of customers and suppliers.
• The content of the communications we exchange.
• Candidates: CV and the academic and employment data they send us.
• Browsing: minimal technical data (see Cookie Policy).

We do not request sensitive personal data. If a candidate includes such data in their CV on their own initiative, we will not use it.

Primary purposes (necessary for the relationship):

• a) Managing the commercial, contractual or professional relationship and the resulting communications.
• b) Providing our services, including technical support.
• c) Invoicing and complying with tax, accounting and legal obligations.
• d) Managing recruitment processes.

Secondary purposes (not necessary):

• e) Sending information about Grupo DITESA services, events and news.

You may refuse or object to the secondary purposes at any time by writing to belen@grupoditesa.com.mx. Your refusal does not affect the main relationship.

• a) and b): performance of a contract or of pre-contractual measures, or legitimate interest in maintaining the relationship with professional contacts.
• c): compliance with legal obligations.
• d): taking pre-contractual measures at the candidate's request.
• e): legitimate interest for customers, with the right to object, and consent in all other cases.

Your data may be disclosed to:

• The Grupo DITESA companies in Mexico and Spain, for the same purposes.
• Providers that render services to us (cloud email and office software, web hosting, accounting and legal advice), who act as processors and are contractually bound to confidentiality and security.
• Authorities, when required by law.

International transfers: disclosures of data from Spain/EU to Mexico, which does not have an adequacy decision from the European Commission, are covered by the standard contractual clauses approved by the European Commission. Transfers to providers located in the United States are based on the EU-U.S. Data Privacy Framework or on standard contractual clauses.

For Mexico: transfers within the group and those necessary to fulfil the legal relationship with you do not require your consent under the LFPDPPP.

We keep the data for as long as the relationship lasts and, thereafter, for the legal limitation periods (tax, commercial and civil). CVs are kept for 12 months, unless the candidate requests their erasure earlier.

Write to belen@grupoditesa.com.mx stating your name, the right you are exercising, the data concerned and a means of contact, and attach a document proving your identity. We will respond within the legal time limits.

• Mexico: rights of Access, Rectification, Cancellation and Opposition (ARCO), revocation of consent and limitation of the use or disclosure of your data. If you are not satisfied with the response, you may contact the Secretaría Anticorrupción y Buen Gobierno.
• Spain/EU: rights of access, rectification, erasure, objection, restriction of processing, portability and not to be subject to automated decisions, as well as to withdraw your consent at any time. You may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

We apply technical and organisational measures to protect your data against loss, alteration and unauthorised access.

Please see our Cookie Policy.

We will publish any changes on this page, together with the date of update.