Grupo Aeroportuario del Centro Norte, S.A.B. de C.V., its affiliates and subsidiaries (hereinafter "OMA"), in compliance with the Federal Law on the Protection of Personal Information in Possession of Individuals (the "Law"), its Regulations, and other applicable legal dispositions, committed to the confidentiality, legal treatment, and control of your collected personal information and data, hereby makes you aware of how we obtain such information, what we do with it, how we protect it, and provides you with information on how you can exercise your access, rectification, cancellation, and opposition rights ("ARCO").
FIRST. Responsible Party for the Processing of your Personal Data. OMA with domicile in Patriotismo Avenue number 201, 5th Floor, San Pedro de los Pinos, Benito Juárez Municipality, Postal Code 03900, Mexico City, Mexico, is responsible for safeguarding the privacy of the data you provide us as a user, letting you know that your information will be treated exclusively for the purposes specified below, in accordance with the provisions of the Law, its Regulations, and other applicable legal dispositions.
Our department for the protection and processing of personal data is located at:
|
Domicile: |
Patriotismo Avenue number 201, 5th Floor, San Pedro de los Pinos, Benito Juárez Municipality, Postal Code 03900, Mexico City, Mexico |
|
Telephone: |
81-8625-4300 extension 1152 |
|
E-mail address: |
juanfernando.espinosa@oma.aero |
|
Attention to: |
Juan Fernando Espinosa |
SECOND. Purpose for which the Personal Data is Collected. OMA does not collect personal identification data about individuals except when users of the Internet sites www.oma.aero and www.parking.oma.aero (the “OMA Sites”) voluntarily provide information by registering on those sites, logging on to social networks such as Facebook and Twitter, or sending an email or other communication to OMA.
The personal data collected may be used to respond to technical or service needs; to provide the user with an update on the status of flights operated in the thirteen airports managed by OMA; to provide information regarding the different establishments located within the airports; travel information, security procedures, immigration and customs; hotel reservations; information on services provided at the airports such as money services, baggage packing; business services and related activities and information. In turn, your personal data may be used to conduct surveys about the service contracted, receive e-mail or through social networks promotional information about products and services offered by OMA, or its partners and affiliated companies; the above in order to provide you a better service.
Personal identification data collected by OMA Sites will not be sold or provided to third parties without the consent of the users of such Sites. In addition, users of OMA Sites will have the opportunity to "opt out" of receiving promotional information about the products and services offered by OMA, or its partners and affiliated companies.
Despite its general policy of not disclosing personal identification data to third parties, it is possible that OMA discloses certain personal information: (a) when OMA has reason to believe that disclosing that information is necessary to identify, communicate with, or bring legal action against someone who may be causing injury and interference to (either intentionally or unintentionally) the property rights of OMA, other users of OMA Sites, or to a third party; (b) as necessary to enforce and comply with the Terms and Conditions of use of OMA Sites; (c) as required by law; or (d) as otherwise stated by OMA in the OMA Sites.
When requested to, OMA will take reasonable steps to allow users to update or correct personal data previously submitted which is no longer current. In addition, at the user's request, OMA will take commercially reasonable steps to systematically remove the user's registration and personal data from the database; however, it may be impossible to completely delete the user's data due to backups and records of deleted data.
You are hereby informed that OMA Sites collect cumulative statistical data on visitors, and that such data can be used for market research and other activities. In addition, it is possible that OMA shares cumulative, anonymous data with promotional, business or advertising partners. This does not include any requests by a user to "opt-out" of receiving promotional information. OMA reserves the right to communicate with an affiliate regarding the account status, changes to the affiliate agreement and other relevant issues to the Site and/or information provided by a user.
Please note that if you do not agree with the processing of your personal data for the above-mentioned purposes, you have a period of 5 days from the date you disclose your personal data to express your refusal to OMA’s department of protection and processing of personal data through the means indicated in this notice; if you fail to do so, you will be deemed to have tacitly consented.
THIRD. Personal Data Collected. Among the personal data that OMA may request are, among others, the following:
You are hereby informed that the data collected by OMA is not of a sensitive nature, so if you do not agree with the treatment that OMA gives to your personal data, it is necessary that you express your opposition through the means indicated in this notice, since, if you omit to do so, you will be considered to have tacitly consented it treatment.
FOURTH. Collection of Personal Data. In order to collect the data that the user provides voluntarily when registering on OMA Sites or by sending any e-mail or other communication addressed to OMA, OMA is guided by the principles of legality, quality, consent, information, purpose, loyalty, proportionality and responsibility established by the Law and its Regulations.
Likewise, OMA, may obtain personal information through lawful means established by law, such as public databases or any other public unit or source of information.
FIFTH. Use of Cookies and Web Beacons. OMA Sites use cookies in connection with certain features or functions. Cookies are text files that are automatically downloaded and stored on the hard drive of the user's computer when browsing a specific Internet page. Cookies allow the Internet server to remember certain information about the user, including the user's preferences for viewing pages on that server, name and password.
Web beacons are images inserted into an Internet page or e-mail, which can be used to monitor a visitor's behavior, such as storing information about the user's IP address, duration of the interaction time on that page and the type of browser used, among others.
It is established that the installation, permanence and existence of cookies in the client's or the Site user's computer depends on their exclusive will and can be eliminated when they wish to do so.
There is a possibility that OMA may allow other companies to display ads or other features on OMA Sites with access to cookies on your computer. Please note that OMA does not control the cookie policy of any third party.
We inform you that we may use cookies and web beacons to obtain personal information from you, such as the following:
At any time, you can prohibit the use of cookies and web beacons, so that we stop using them. To do so, you must express in writing to OMA’s department for the protection and processing of personal data your opposition by the means indicated in this notice, since, if you fail to do so, you will be considered to have given your tacit consent.
SIXTH. Means and Procedures to Limit the Use or Disclosure of Your Personal Data. In order for you to be able to limit the reception of information about promotions, offers and additional services which we offer by e-mail or through social networks, such as Facebook or Twitter, as well as the use and disclosure of data collected by OMA, we make the following means available to you: (i) the registration of the data in the Public Registry, which is in charge of the Federal Consumer Protection Office ("PROFECO"), so that your personal data will not be used to receive advertising or promotions from goods and services companies. For more information about this registration, you may consult the PROFECO website or contact that agency; (ii) your registration in an exclusion list, so that your personal data will not be processed for marketing, advertising or commercial prospecting purposes by OMA.
In case you require more information or wish to have your data included in an exclusion list, it is necessary to follow the following procedure:
1. Make a written request to OMA’s personal data protection and processing department, which should contain at least the following information:
a) Full name of the personal data owner.
b) Address of the personal data owner or e-mail address, by which the answer to your request can be sent.
c) Official documents accrediting the identity of the personal data owner or his/her representative, as well as the powers and faculties in which the legal representative is duly represented.
d) Make an express request that your data be registered in an exclusion list.
2. Send the request to the department of protection and processing of personal data, located at Patriotismo Avenue number 201, 5th Floor, San Pedro de los Pinos Colony, Benito Juárez Municipality, Postal Code 03900, Mexico City, Mexico, or to the email: juanfernando.espinosa@oma.aero
SEVENTH. Means of Exercising ARCO Rights. You have the right to access your personal data held by us and the details of its processing; you may also request the rectification of your personal information if it is inaccurate or incomplete, cancel it from our records and databases when you consider that it is not required or is being used for any of the purposes set out in this Privacy Notice, finally, you may object to the use and processing of your personal data when it is being used for non-consensual purposes or when the contractual or service relationship has ended.
To exercise your rights of access, rectification, cancellation or opposition, it is necessary to follow the following procedure, in accordance with Article 29 of the Law:
1. Make a written request to OMA’s personal data protection and processing department, which should contain at least the following information:
a) Full name of the personal data owner.
b) Address of the personal data owner or e-mail address designated for notifications.
c) Official documents accrediting the identity of the personal data owner or his/her representative, as well as the powers and faculties in which the legal representative is duly represented.
d) Clear and precise description of the personal data, regarding which it is sought to exercise any of its rights.
e) Any other element or document that facilitates the location of the personal data, as well as any other document required by the legislation in force at the time of submitting the application.
f) A contact telephone number.
2. Send the request to the department of protection and processing of personal data, located at Patriotismo Avenue number 201, 5th Floor, San Pedro de los Pinos Colony, Benito Juárez Municipality, Postal Code 03900, Mexico City, Mexico, or to the email: juanfernando.espinosa@oma.aero
OMA shall have a period of twenty working days from the date of receipt of the request to decide whether the request is admissible or not, and the decision shall be made by e-mail addressed to the requestor, sent to the e-mail address he has indicated in the request itself or by letter to the physical address he has indicated for this purpose.
OMA shall have the right at all times to extend the above-mentioned term for a single occasion up to an equal period, provided that this is justified and the circumstances of the case warrant so.
If the request is declared inadmissible, the respective evidence shall be attached to the request. When the request proves to be appropriate, the exercise of the requested right shall be made effective within fifteen working days following the communication of the decision taken.
OMA may deny the exercise of ARCO rights in the following cases:
a) When the requestor is not the data owner or the legal representative of the legal entity does not prove the legal existence of the person he represents, or when his powers and faculties are not sufficient for the exercise of the rights in question
b) When OMA’s databases do not contain the requestor’s personal data.
c) When the rights of a third party are infringed.
d) When there is a legal impediment or resolution by a judicial or administrative authority.
e) When the rectification, cancellation or opposition has been previously made in such a way that the application lacks subject matter.
Likewise, OMA will not be obliged to cancel your personal data, when it is one of the following cases:
If you consider that your personal data has been violated, or that your request to exercise your ARCO rights has not been duly attended by OMA, you have the right to go to the National Institute of Access to Information to initiate a data protection procedure.
EIGHTH. Withdrawal of Consent for Processing of Personal Data. You may at any time revoke the consent you have given to OMA to process your personal data by means of the following procedure:
1. Make a written request to OMA’s personal data protection and processing department, which should contain at least the following information:
a) Full name of the personal data owner.
b) Address of the personal data owner or e-mail, by which the answer to your request can be sent.
c) Official documents proving the identity of the data owner or his/her representative, as well as the powers and faculties in which the legal representative is duly represented.
d) Expressly indicate the request to revoke the consent for the processing of personal data, expressing the reasons for which he wishes to do so.
2. Send the request to the department of protection and processing of personal data, located at Patriotismo Avenue number 201, 5th Floor, San Pedro de los Pinos Colony, Benito Juárez Municipality, Postal Code 03900, Mexico City, Mexico, or to the email: juanfernando.espinosa@oma.aero
In a maximum period of twenty days we will attend to your request and will inform you about the origin of it through the means indicated in your request.
NINETH. Data transfer. OMA hereby informs you that your personal data may only and exclusively be transferred to third parties by: (i) your express consent, (ii) by resolution or order of a judicial or administrative authority and (iii) in the case of personal information that is required by a law that is considered public.
TENTH. External links. OMA Sites may contain links to other Internet sites. The use of information collected by these sites, as well as the use of cookies and web beacons, is entirely the responsibility of the third-party websites. This Privacy Notice is solely and exclusively valid and applicable to OMA Sites.
ELEVENTH. Modifications to the Privacy Notice. OMA reserves the right to make modifications or updates to this Privacy Notice at any time, which may be made in order to comply with new legislation, internal policies or new requirements for the provision or offering of our services.
These modifications will be available to the public through the following means: (i) through OMA Sites; or (ii) physically at the address of OMA’s personal data protection and processing department, which will be at OMA’s discretion. The modifications shall take effect immediately upon the occurrence of any of the events set forth in this paragraph.
TWELFTH. Blocking and Deleting Personal Data. You are hereby informed that once the purpose or purposes of the processing of your personal data have been fulfilled, and when there is no legal or regulatory provision to the contrary, such data will be cancelled after being blocked for subsequent deletion.
THIRTEENTH. Security and Storage. OMA has implemented physical, technological and administrative security measures to protect your personal data from unauthorized processing. To this end, the information you provide us with is stored in databases which have the necessary security technology to prevent information leaks.
OMA will do everything in its power to protect the privacy of the information and your personal data. It may happen that, by virtue of court orders, or legal regulations, OMA would be forced to disclose information to authorities or third parties, or in cases where third parties may intercept or access certain information or data transmissions, in which case OMA will not be liable for the information disclosed in such forms.
FOURTEENTH. Acceptance of Privacy Notice. By using OMA Sites, you indicate your acceptance of this Privacy Notice. If you do not accept the Privacy Notice, do not use OMA Sites. This Privacy Notice does not create any legal or contractual rights, nor does it purport to do so.
FIFTEENTH. Legal Dispositions. This Privacy Notice complies with all current dispositions stipulated in the Federal Law on the Protection of Personal Data in the Possession of Individuals, its Regulations, and other applicable legal dispositions.