Privacy Notice — Flores Serna Group

01 Who the Data Controller is

Flores Serna FS&A, S.C., with its address at Calzada Mauricio Fernández Garza 275, Colonia Del Valle, C.P. 66220, San Pedro Garza García, Nuevo León, México, hereinafter the “Data Controller,” is responsible for the processing of the personal data you provide.

“Flores Serna Group” is the trade name under which the divisions of the group operate. For purposes of this notice, the Data Controller is the legal entity identified in the preceding paragraph.

For any matter related to your personal data, you may write to contacto@floresserna.com or to the address indicated above.

02 What personal data we process

This website does not contain data collection forms. The personal data we process is limited to the data you choose to send us through the published contact channels —email and telephone— or that you provide to us in the course of a professional relationship.

Depending on the case, such data may include:

Identification and contact data: name, email address, telephone number, the company or institution you represent, and your position.
Inquiry data: the subject matter of the inquiry and any information or documents you choose to include with your communication.
Third-party data: if your inquiry includes data of other individuals, you represent that you are authorized to provide such data and that you have made this notice known to them.

As a firm that provides legal, tax, accounting and financial services, the engagement of such services may require additional data —including asset-related or financial data— which is collected directly at that time and under the specific privacy notice applicable to the engagement.

03 How we use it

Your personal data is used for the following purposes, which are necessary in order to serve you:

To respond to your inquiry and refer it to the division of the group with competence in the matter.
To identify you and communicate with you regarding the matter raised.
To assess the feasibility of providing you with professional services and to verify the absence of any conflict of interest.
To prepare service proposals and quotes and, where applicable, to formalize the engagement.
To provide the engaged services and follow up on the professional relationship.
To comply with the legal, tax, accounting and regulatory obligations applicable to the Data Controller, and to respond to requests from competent authorities.

04 Secondary purposes

In addition, and provided that you do not express your objection, we may use your data for purposes that are not necessary to respond to your inquiry but that allow us to keep you informed:

To send you newsletters, analyses and publications prepared by the group.
To invite you to events, forums and institutional activities.
To conduct satisfaction surveys and internal studies to improve our services.

If you do not wish your data to be processed for these purposes, you may notify us at any time from now on by sending an email to contacto@floresserna.com with the statement “I do not consent to secondary purposes.” Your refusal shall not be grounds for denying you the services you request, nor shall it affect the handling of your inquiry.

05 Sensitive data

For the purposes described in this notice, no sensitive personal data is collected through the website.

Should it become indispensable, in the course of a matter, to process data of this nature —for example, in labor, family or criminal matters— you will be specifically informed and your express written consent will be obtained, as required by law.

06 Transfers

The Data Controller does not sell, assign or commercialize your personal data.

Your data may be transferred without your consent in the cases provided for by law, including when the transfer is necessary by virtue of a contract entered into in your interest, when it is legally required to safeguard the public interest or for the procurement or administration of justice, or when it is necessary for the recognition, exercise or defense of a right in judicial proceedings.

07 ARCO rights (Access, Rectification, Cancellation and Opposition)

You have the right to know what personal data we hold about you, what we use it for and the conditions of its use (Access); to request the correction of your information when it is outdated, inaccurate or incomplete (Rectification); to request that we delete it from our records when you consider that it is not being used in accordance with the principles and duties imposed by the applicable regulations (Cancellation); and to object to the use of your personal data for specific purposes (Opposition).

How to exercise them

Send your request to contacto@floresserna.com or submit it at the Data Controller’s address. The request must include:

Your name and a means of communicating the response to you.
A copy of your official identification and, where applicable, the document evidencing legal representation.
A clear description of the data with respect to which you seek to exercise the right, and of the right you wish to exercise.
Any information or document that facilitates locating your data.
In the case of rectification, the requested modifications and the supporting documentation.

The exercise of ARCO rights is free of charge; only justified shipping costs or the cost of reproduction in copies or other formats shall be payable, to the extent permitted by law.

08 Revocation of consent

You may at any time revoke the consent you have granted us for the processing of your personal data by submitting a request to the email address or physical address indicated in this notice, following the same requirements established for ARCO requests.

Please note that, for legal reasons or due to an ongoing professional relationship, in certain cases it will not be possible to give effect to the revocation immediately or to cease the use of your data immediately —particularly where document retention obligations arising from tax regulations or professional secrecy remain in effect—. In such case, you will be informed of the reason for and scope of the limitation.

09 Limitation of use and disclosure

If you wish to stop receiving promotional communications or to limit the use or disclosure of your data without exercising an ARCO right, you may request so by writing to contacto@floresserna.com. Your registration on our exclusion list will be confirmed within the applicable time limits.

In addition, each informational communication we send you will include a means to unsubscribe.

10 Cookies and third parties

This website does not use cookies, web beacons or analytics tools, and does not store information in your browser for tracking or profiling purposes.

You should, however, be aware of two technical aspects:

Server logs. The provider that hosts this website generates technical logs of the requests received, which may include the IP address, the date and time of access and the browser type. They are used exclusively to operate the service and to address security incidents.
External fonts. The website’s typefaces are loaded from a third-party service, which means that your browser sends a request to that service and discloses your IP address to it. This is a technical display operation, not processing for advertising purposes by the Data Controller.

11 Security measures

The Data Controller has implemented reasonable administrative, technical and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access or processing.

Personnel and collaborators involved in the processing of personal data are subject to confidentiality duties that survive the termination of their relationship with the Data Controller, irrespective of the professional secrecy applicable to the services provided.

12 Changes to this notice

This privacy notice may be amended to address legislative developments, internal policies or new requirements arising from our services.

Any amendment will be published on this same page, indicating the date of the last update in the document header. We suggest that you consult it periodically. Where the change is substantial and relates to the purposes for which the processing was undertaken, you will also be notified through the contact means you have provided to us.

13 Competent authority

If you consider that your right to the protection of personal data has been infringed, or you suspect any violation of the applicable provisions, you may file a complaint with the competent authority in matters of personal data protection.