Privacy policy

Identity and Address of the Data Controller:

DANIEL OROZCO ESTUDIO, S.A. de C.V. (hereinafter referred to as "DOE") with an address at Andador Kambul #110 Interior 16, Aldea Zama, C.P. 77760, Tulum, Quintana Roo, Mexico.

I. Personal Data Subject to Processing:

In order to provide our services, DOE may collect personal data directly from the data subject, voluntarily provided by Clients, Shareholders, Suppliers, Service Providers, Employees, and/or Job Applicants (the latter in accordance with Section II of this Privacy Notice). The collected data may include identification, contact, financial, and/or tax information.

Additionally, DOE may collect data indirectly from publicly accessible sources or through permitted data transfers.

DOE does not request or process sensitive personal data, except for data voluntarily provided by Clients, Shareholders, Suppliers, Service Providers, Employees, and/or Job Applicants.

Purpose of Processing Your Personal Data:

DOE will process your personal data to carry out the necessary activities for the provision of our services, identifying you as a client and/or supplier, recruitment, provision of personal and subordinate services, contracting additional services, handling complaints, comments, and/or suggestions, invoicing, contacting you and/or your contacts or references (personal and/or professional), performing internal management related to any ongoing commercial, contractual, or employment relationship between you and DOE, as well as following up on matters related to the aforementioned purposes.

Additionally, DOE may process your personal data for purposes that are not necessary for the legal relationship between you and DOE, such as statistical analysis, customer satisfaction surveys, and informing you about changes in our service provision.

II. Personal Data Subject to Processing and Purpose of Processing for Employees and/or Job Applicants:

DOE collects the following personal data:

  1. Identification Data

  2. Contact Data

  3. Personal References

  4. Academic Data

  5. Employment References

  6. Medical History

  7. Financial and/or Tax Data

  8. Home and Mobile Phone Numbers

  9. Biometric Data

These data are collected for the following purposes:

  • Identifying, locating, contacting, and sending you information

  • Video recording via DOE-owned security cameras for security purposes

  • Complying with employment contracts and recruitment processes, as well as all legal obligations DOE has with you

  • Opening bank accounts for payroll deposits

  • Creating and maintaining employee and/or applicant records

  • Transferring data to third-party auditors for compliance with Social Security (IMSS and INFONAVIT)

  • Communicating internally within DOE

  • Creating and updating databases for internal administration, human resources, statistics, and other related services

  • Enrolling you in medical and life insurance plans, and complying with government regulations (NOM-004-SSA-3-2012, LIMSS, LFT, etc.)

Mechanisms to Express Refusal for Personal Data Processing:

You may express your refusal for the processing of your personal data for purposes not necessary for the legal relationship with DOE by sending an email to hello@danielorozocoestudio.com, including:

  1. Your full name and an address or other means for us to respond

  2. The date and method by which you accepted the Privacy Notice terms

  3. A clear and precise description of the personal data provided to DOE

  4. Your explicit refusal for the processing of your personal data

If you do not express your refusal within five (5) business days after accepting this Privacy Notice, it will be understood that you have consented to the processing of your personal data for purposes that are not necessary or directly related to your legal relationship with DOE.

Transfer of Your Personal Data:

Except as required by law, DOE will not transfer your personal data to third parties other than DOE.

Means and Procedures to Exercise ARCO Rights and/or Revoke Consent:

You have the right to access, rectify, cancel, or oppose (ARCO Rights) the processing of your personal data by sending a written request to DOE’s data protection department at hello@danielorozocoestudio.com, including:

  1. Your full name and an address or other means for us to respond

  2. A valid official identification (IFE, passport, professional license) and, if applicable, proof of representation

  3. A clear and precise description of the personal data for which you wish to exercise your ARCO rights

  4. Any other element or document that facilitates the location of your personal data

If the provided information is incorrect or insufficient, DOE may request additional elements within five (5) business days of receiving your request. You will have ten (10) business days to provide the missing information; failure to do so will result in the request being considered as not submitted.

If your request is complete, DOE will respond within twenty (20) business days from the date of receipt. If you request access to your personal data, they will be sent to the email provided in your request or delivered physically at DOE’s offices.

Options and Means to Limit the Use or Disclosure of Your Personal Data:

To limit the use or disclosure of your personal data (apart from exercising ARCO rights or revoking consent), you may send an email to hello@danielorozocoestudio.com. The process and response time will follow the same criteria as the previous section.

Security Measures to Ensure the Protection of Personal Data:

DOE, as the data controller, is committed to complying with the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility established by law. Therefore, in accordance with Articles 13 and 14 of the Law, DOE commits to maintaining strict confidentiality of personal data and implementing administrative, technical, and physical security measures to protect them against any damage, loss, alteration, access, use, disclosure, or unauthorized processing.

DOE may transfer your personal data to authorities such as the Mexican Social Security Institute (IMSS), the Ministry of Finance and Public Credit (SHCP), the Ministry of Communications and Transportation (SCT), the Tax Administration Service (SAT), and other authorities as required by law, regulation, court order, or to fulfill the specific relationship between you and DOE.

Data Transfer:

Your collected information will not be rented or sold to third parties. However, DOE may share data in the following cases:

  • With third parties providing goods or services essential to DOE’s corporate purpose

  • With affiliated entities or companies related to DOE under the Mexican Securities Market Law

  • When legally required or in cases involving the administration of justice

When sharing data due to contractual relationships, DOE will only provide the strictly necessary information, ensuring confidentiality agreements with third parties.

Retention, Blocking, and Deletion of Data:

Personal data will be stored indefinitely from the date provided, subject to the legal relationship’s duration. Data subjects may object to data processing at any time under applicable law.

After the retention period, DOE will block personal data for seventy-two (72) months before permanently deleting them.