PRIVACY NOTICE –DreamUs Mexico

“DREAMUS” hereinafter referred to as “DREAMUS”: With address at Prol. División del Nte. 5234, Amp San Marcos Nte, Xochimilco, 16038 Ciudad de México, CDMX. In accordance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) and its Regulations, hereby informs you that it is responsible for collecting your personal data, for the use given to such data, and for its protection.

Your personal information will be used to provide you with better service, as well as products specifically directed to your preferences and needs. These purposes include sending notifications of offers, notices, and/or promotional messages; communications for marketing, advertising, or telemarketing purposes regarding new or existing products and services, whether our own or those of business partners; subscription to the Newsletter; conducting surveys; statistics; market studies; records and histories regarding consumption habits, interests, and behavior through automatic data capture tools; implementation of loyalty programs, benefits, and incentives; participation in social networks, chats, and/or discussion forums; participation in events, trivia, contests, raffles, games, and sweepstakes; evaluation of product quality; and in general for any activity aimed at promoting, maintaining, improving, and evaluating its products.

OBTAINING PERSONAL DATA AND PURPOSES OF ITS PROCESSING

At “DREAMUS”, we are committed to safeguarding the privacy of your personal data and maintaining a close and active relationship with our consumers and potential consumers. Therefore, below we expressly and exhaustively list the data we may collect from you as a consumer and potential consumer:

Identification and Contact Personal Data:

• Name, paternal and maternal surname, gender, age, date of birth, address, postal code, telephone number, mobile number, and email address.

Sensitive Personal Data: “DREAMUS” does not, under any circumstances or by any means, collect personal data that could be considered sensitive. If this were to happen, please report it immediately to our contact emails and telephone numbers.

Regarding the aforementioned personal data and sensitive personal data, processing is guaranteed, whether directly or indirectly through “DREAMUS”, its subsidiaries, affiliates, or related companies, and its third-party service providers with whom it has a legal relationship; they hold and process personal data on behalf of “DREAMUS”, as well as, where applicable, by competent authorities, for the purposes that gave rise to and are necessary for the existence, maintenance, and fulfillment of the legal relationship with its consumers, which are as follows:

• To fulfill the legal relationship established with you derived from the acquisition of any of the products of the brand «DREAMUS».
• To address complaints or recommendations regarding the use and application of products of the brand DREAMUS.

Additionally, “DREAMUS” may process your personal data for the following distinct or secondary purposes, which are not necessary for the existence, maintenance, and fulfillment of the legal relationship with its consumers, but which allow us to provide you with better service:

• Marketing, advertising, commercial prospecting, evaluation of our products and services related to the brand «DREAMUS».

Refusal to grant consent for the processing of your personal data for the distinct or secondary purposes previously mentioned may not be a reason for us to deny you the products or services derived from the acquisition of the products or services you acquire or contract with us.

Derived from the foregoing, “DREAMUS” informs you that, in the event that you do not wish for your personal data to be processed for the distinct or secondary purposes specified in this document, we request that you send us an email to the address [email protected], with the Subject “Personal Data”, so that our “Personal Data Department” may document said situation by inscribing you in our exclusion list named “Contacts who do not wish to receive advertising”.

It is important to mention that, in the event that “DREAMUS” intends to use your sensitive personal data for the secondary purposes described above, prior to its processing, it will request your express written consent in accordance with the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations, and other mandatory secondary provisions; otherwise, it will not use them for these purposes.

The personal data you provide to “DREAMUS” will be processed exclusively for the described purposes, will be treated confidentially, and exclusively to the extent that they are strictly necessary to fulfill the purpose for which they were collected.

To prevent unauthorized access to your personal data and to ensure that the information is used for the purposes established in this privacy notice, we have implemented physical, electronic, and administrative procedures, using advanced technologies that limit the use or disclosure of your data, allowing us to process them properly and prohibiting the unauthorized extraction of any type of information containing personal data from the offices of “DREAMUS”.

TRANSFER OF PERSONAL DATA TO THIRD PARTIES

By means of this privacy notice, “DREAMUS” informs you that it will transfer your identification and contact personal data (non-sensitive) to the company contracted by it to provide courier services and deliver the products you have acquired through the site dreamus.com.mx. Likewise, it may transfer your non-sensitive data to national or foreign third parties such as its subsidiaries, affiliates, or related companies and service providers with whom it maintains a legal relationship, for the following purposes:

• Marketing, advertising, and commercial prospecting.

Derived from the foregoing, “DREAMUS” informs you that, in the event that you do not wish for your personal data to be transferred to the third parties mentioned in this section and for the purposes described here, we kindly request that you send us an email to the address [email protected], so that our “Personal Data Department” may document this situation; otherwise, we will understand that you have given your full consent for its transfer under the terms specified in this privacy notice.

Likewise, we inform you that in the event that “DREAMUS” intends to transfer your sensitive personal data to the third parties specified here for the purposes previously described in this section, prior to its transfer, it will request your express written consent, in accordance with the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations, and other mandatory secondary provisions; otherwise, it will not use them for these purposes.

In this regard, “DREAMUS” informs you that, in accordance with Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties, it may transfer your personal data, without your consent, in the cases specified below:

• When the transfer is provided for in a Law or Treaty to which Mexico is a party.
• When the transfer is necessary for medical prevention or diagnosis, the provision of healthcare, medical treatment, or the management of healthcare services.
• When the transfer is made to holding companies, subsidiaries, or affiliates under the common control of the responsible party, or to a parent company or any company of the same group as “DREAMUS” that operates under the same internal processes and policies.
• When the transfer is necessary by virtue of a contract executed or to be executed in the interest of the data subject, by “DREAMUS” and a third party.
• When the transfer is necessary or legally required for the safeguarding of a public interest, or for the procurement or administration of justice.
• When the transfer is precise for the recognition, exercise, or defense of a right in a judicial process.
• When the transfer is precise for the maintenance or fulfillment of a legal relationship between “DREAMUS” and the data subject.

MECHANISMS AND PROCEDURES FOR THE REVOCATION OF CONSENT TO THE PROCESSING OF PERSONAL DATA AND/OR EXERCISE OF ARCO RIGHTS

At any time, you may revoke the consent you have granted us for the processing of your personal data, so that we stop using them. However, it is important that you keep in mind that not in all cases will we be able to attend to your request or conclude their use immediately, as it is possible that due to some legal obligation we require to continue processing your personal data. Likewise, you must consider that, for certain purposes, the revocation of your consent will imply that we cannot continue providing the service you requested, or the conclusion of your relationship with us.

To revoke your consent, you must go to our offices and request the “Consent Revocation Request Form” (Formato de solicitud de revocación del consentimiento), which we also make available to you on our internet portal “dreamus.com.mx”, accompanying said request with the documents that prove your identity (official ID) or, where applicable, that of your legal representative. Likewise, you may request said form from our “Personal Data Department” via email at [email protected].

Furthermore, you have the right to access, rectify, cancel, or oppose the processing of your personal data (ARCO rights). In this sense, as the holder of your personal data, you have the right to know what personal data “DREAMUS” maintains, what we use it for, and the conditions of the use we give it (Access); as well as to rectify it in case it is inaccurate, outdated, or incomplete (Rectification); instruct us to cancel it when it turns out to be excessive or unnecessary for the described purposes that justified its collection, or if you consider that it is not being used in accordance with the principles, duties, and obligations provided in the applicable regulations (Cancellation); or oppose the use of your personal data for specific purposes (Opposition), in cases where the Federal Law on Protection of Personal Data Held by Private Parties so permits.

To exercise ARCO rights as mentioned in the previous paragraph, you may go to our offices and request the “ARCO Rights Request Form”, which we have also made available to you on our internet portal dreamus.com.mx, accompanying said request with the documents that prove your identity (official ID) or, where applicable, that of your legal representative. Likewise, you may request said form from our “Personal Data Department” via email at [email protected].

“DREAMUS” will respond to your request within the times stipulated in the applicable laws and will inform you of the consequences that must be produced by reason of the exercise of your right.

To know specifically the procedure established by “DREAMUS” for the revocation of consent regarding the processing of your personal data and/or regarding the exercise of ARCO rights, we have made available on our internet portal DREAMUS.com a document that details them, or you may personally visit our offices and contact the “Personal Data Department”, as well as contact them via email at [email protected], where we will gladly inform you about the details of the procedure and requirements for the exercise of your rights.

If you consider that you have not received a response from “DREAMUS” or the response given to you is not satisfactory, you have the right to go to the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) to submit a data protection request within fifteen days following the date on which the deadline for “DREAMUS” to respond to your request expires in accordance with the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations, as well as the procedure we have established for this purpose, or of the response we may have given to it.

MEANS TO LIMIT THE USE OR DISCLOSURE OF PERSONAL DATA

“DREAMUS” informs you that, in order for you to limit the use or disclosure of your personal data, we make available the email address [email protected], for the purpose of being inscribed in our exclusion list named “Contacts who do not wish to receive advertising”, so that your personal data is not processed for marketing, advertising, or commercial prospecting purposes, as well as for the evaluation of our products and services related to the brand DREAMUS, on our part.

USE OF COOKIES, WEB BEACONS, OR OTHER TECHNOLOGIES

“DREAMUS” informs you that it may use mechanisms in remote or local electronic communication media, optical, or other technology; that allow the collection of various data automatically and simultaneously at the time that you as a consumer or potential consumer make contact with them.

Cookies are those data files that are stored on the hard drive of a user’s computer equipment or electronic communications device when browsing a specific Internet site, which allows the exchange of status information between said site and the user’s browser. The status information may reveal in some cases session identification means, authentication, or user preferences, as well as any other data stored by the browser regarding the Internet site.

Web beacons are understood as that visible or hidden image inserted within a website or email, which is used to monitor user behavior in these media. Through these, information can be obtained such as the originating IP address, browser used, operating system, time the page was accessed, and in the case of email, the association of the previous data with the recipient.

Specifically, “DREAMUS” may use cookies and web beacons when sending emails with information related to the brand mexachill.com, since at the moment you receive and, where applicable, read any of our emails, through these technologies we may collect the following data: I) Knowing whether or not you opened the email we sent you and; II) Knowing whether or not you accessed the link(s) or URL(s) contained in the email.

Likewise, we inform you that the data obtained through these technologies will be used exclusively for statistical and result review purposes, without the possibility of transferring them to third parties.

Most browsers accept cookies automatically. Even so, it is possible to configure any browser to prevent it from accepting cookies and thus prevent your equipment or device from storing them. Some browsers have a special mode that ensures the deletion of cookies after a visit. Consult your browser’s manual if you wish to know the exact steps that allow activating the corresponding mode. You can delete the cookies stored on your equipment or device at any time.

In this sense, to support you and to exemplify it, we establish the way in which cookies can be disabled in the Internet Explorer browser, which are as follows: 1) Open the Internet Explorer browser on your computer. 2) Upon entering, click on the Tools button and then on Internet Options and 3) Subsequently click on the Privacy tab, and then, in Settings, move the slider fully up to block all cookies or fully down to allow all cookies and, then, click OK.

MODIFICATIONS AND CHANGES TO THE PRIVACY NOTICE

This privacy notice may be modified or updated from time to time by “DREAMUS”. Such modifications will be informed to you through the sending of a communication to your email account, as well as through a publication on our internet portal dreamus.com.mx, within a period of 5 business days following its modification.