In compliance with the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations (hereinafter the Law), and in order to ensure the protection and privacy of personal data, as well as regulate access rights, rectification, cancellation and opposition to the treatment thereof, CENTRO EDUCATIVO SAN JAVIER, SC, communicates this Notice.

.

RESPONSABLE

INSTITUTO CUMBRES SAN JAVIER, hereinafter the Responsible, operator of CENTRO EDUCATIVO SAN JAVIER, SC, located in Calzada del Servador Público 3030, ex-hacienda de la mora, Zapopan Jalisco, is responsible for protecting the confidentiality of personal data, personal data sensitive and personal financial or patrimonial data of its students, aspiring students, alumni, graduates, and their parents or guardians, as well as guaranteeing their privacy and their right to informative self-determination.

.

PRIVACY POLICY

The purpose of this Notice is to ensure the privacy of the data provided by our students, aspiring students, alumni, graduates, and their parents or guardians, collected or generated as a result of the services provided by the Responsible.

By providing their personal data, the Holder agrees to their treatment, as this term is understood in section XVIII of article 3 of the Law. If they do not agree, the Holder must not provide any data.

.

BEGINNING

The Controller observes the principles of confidentiality, legality, consent, information, quality, purpose, loyalty, proportionality and responsibility in the protection of personal data.

.

PURPOSES

The Controller may collect personal data, sensitive personal data and personal financial or property data, with some of the following purposes:

Provision of educational services; Provide all the services and carry out all the activities that are necessary to contribute to the comprehensive training of the Holder; Comply with the requirements and requirements of the Ministry of Education and any other Authority; relationship with other educational institutions; Creation, integration and administration of the Holder's File; Registration payment process, re-registration, tuition, academies, others; Analyze applications for scholarships and funding; Decide on discounts and surcharges; Contact the parents or guardian of the Holder; Publication of images of the Owner on the Responsible's website, on their social media accounts, in informative circulars, newsletters and yearbook; Registration for sports, academic, cultural events and activities; Publish on the internet, on social networks and in other media the name, photographs and videos of the Holder when he participates in cultural, academic, social, sporting and apostolic events; Attention and services to graduates and alumni; Send communications that could be in the interest of the Holder, his parents or guardian; Service evaluations and surveys; Preparation of statistics and statistical analysis.

.

In the case of video surveillance cameras, the purposes are: security and surveillance of the Responsible's facilities; security and supervision of activities of students, staff, teachers, suppliers and visitors of the Responsible.

.

PERSONAL INFORMATION

The following personal data, sensitive personal data and personal financial or patrimonial data, which are presented in an enunciative, non-limiting way, may be processed:

1. Identification data: full name, age, date and place of birth, nationality, sex, gender, marital status, address, photo, email, contact telephone numbers, Unique Population Registry Code, Social Security Number, Registry key Federal Taxpayers, signature, religion, fingerprint, DNA, names of Parents and siblings.

2. Academic Data: name and address of the school of origin, educational trajectory, qualifications and certificates issued by other institutions, languages, professional title, professional identification number, study certificates, school records.

3. Health Data: Health status, clinical history, diseases, dietary restrictions, allergies, blood group, organ donor, psychological and psychiatric issues, data from your doctor, medical or psychological treatments received, contact details in case of emergency.

4. Data on the parents or guardians: full name of the father and mother, or guardian, of the student, full name, age and education of all their children, family photo, full address of the family or of each of the parents if They are separated, as well as their telephones and emails, complete data of the work address, employment or business of the father and / or mother including telephone numbers and emails, occupation, position held, degree of studies, marital status, work hours , etc. RFC, CURP and fiscal address for electronic invoicing.

5. Financial or patrimonial data: Personal and personal property, income and expenses, income and expenses of parents or, where appropriate, of guarantors, endorsements or jointly obligated, bank accounts, personal references, tax information, credit bureau report, statements of taxes, payroll receipts and, in general, data on the economic situation of the family.

6. Sensitive data: hobbies, sports, religious beliefs, political affiliation, union affiliation, religious or political associations to which you have belonged, extracurricular activities. data on the student's behavior in social, family, emotional, health, sports, etc .; data requested in admission and / or follow-up interviews that allow evaluating the student and their family or family environment.

7. Physical characteristics: photos, videos, videotaped images, voice, skin, iris and hair color, fingerprint, scars or particular marks.

.

In case of not having some of the aforementioned data, there could be the possibility that the Responsible party may not be able to provide the services of the legal relationship established with the Owner.

Likewise, it is reported that in order to fulfill the purposes set forth in this Notice, sensitive personal data described in the previous paragraphs will be collected and processed. That is why the Responsible Party undertakes that they are treated under strict security measures, guaranteeing their confidentiality.

.

DATA TRANSFER

The Controller may carry out national or international data transfers without the consent of the Holder in the cases provided for in the Law and its Regulations.

.

You may also make data transfers to service provider entities for the fulfillment of the agreed contractual obligations.

.

Third parties and entities receiving personal data will assume the same obligations and / or responsibilities that the Responsible Party has assumed with the Owner in this Notice.

.

The Holder of personal data who establishes a legal relationship with the Responsible Party accepts that their personal data could be transferred in the terms described in the Law, its Regulations and this Privacy Notice.

Options and means to limit the use or disclosure of personal data The processing of your personal data will be that which is necessary, adequate and relevant in relation to the purposes set forth in this Privacy Notice.

The Responsible has the necessary and sufficient security, administrative, technical and physical measures to protect your personal data against damage, loss, alteration, destruction, use, access or unauthorized treatment.

Personal data is safeguarded in databases and computer equipment that have the necessary security to prevent information leaks. Physical and logical access controls, environmental controls, intrusion protection systems (IPS, Firewal), virus protection tools and web filtering are some of the tools used to maintain the security of the data in the systems of the Controller.

.

If the Owner wishes to request the limitation of the use or disclosure of their personal data, they can do so in the Privacy Department at the email reports@cumbressanjavier.com

.

RIGHTS OF PERSONAL DATA HOLDERS

Any Holder or, where appropriate, their legal representative, may exercise the rights of access, rectification, cancellation and opposition to their personal data, and the Responsible will provide the means that allow them to exercise their rights in a timely manner. The exercise of the rights of access, rectification, cancellation, opposition, limitation of use or the revocation of consent, must be requested in writing only to the Privacy Department at the email info@cumbressanjavier.com

.

PROCEDURE FOR THE EXERCISE OF RIGHTS

The request, in writing via email, for access, rectification, cancellation, opposition, limitation of use or revocation of consent, must contain and accompany the following:

1. The name of the Holder and address or other means to communicate the response to your request,

2. The documents that prove your identity or, where appropriate, the legal representation of the Holder,

3. The clear and precise description of the personal data with respect to which one seeks to exercise any of the aforementioned rights, and

4. Any other element or document that facilitates the location of personal data.

5. In the case of rectification requests, the Holder must indicate the modifications to be made and provide the documentation that supports his request.

The Responsible Party will communicate to the Holder, within twenty business days counted from the date on which the request for access, rectification, cancellation or opposition was received, the determination adopted so that, if appropriate, it becomes effective within fifteen business days following the date the response is communicated. The aforementioned terms may be extended only once for an equal period, as long as the circumstances of the case justify it.

ACCESS

The obligation to access the information will be considered fulfilled when the personal data is made available to the Holder.

.

CHANGES TO THIS NOTICE

The Responsible Party reserves the right to make modifications or updates to this privacy notice at any time, in order to attend to new legislation or jurisprudence, internal policies, new requirements for the provision or offering of the services offered by the Responsible. These modifications will be available through the website: http://cumbressanjavier.edu.mx/aviso

.

GENERAL CONSENT

Having made this Privacy Notice and its modifications available to the Owner, either personally or through the website or other means, and not having immediately expressed any opposition, it will be understood that the Owner has tacitly consented to the processing of their data. . If the Holder provided their data verbally, in writing, by electronic, optical means or by any other technology, or by unequivocal signs, it will be understood that they have given their express consent.

.

EXPRESS CONSENT

In accordance with the applicable articles of the Federal Law for the Protection of Personal Data Held by Private Parties, hereby i. The Holder acknowledges that he has read this Privacy Notice and understood its scope; ii. The Holder gives his express consent for the processing of his personal data, sensitive personal data and personal financial or patrimonial data for the purposes established in this Privacy Notice; and iii. The Owner accepts that the Responsible Party may transfer their personal data, sensitive personal data and personal financial or property data to third parties other than the person in charge. This express consent can be documented through an autograph signature, electronic signature or any authentication mechanism.

The Holder grants his consent for the processing of his personal data for purposes other than those that are necessary for his legal relationship with the Responsible.

.

REVOCATION OF CONSENT

The Holder of the personal data may revoke their consent for the processing of personal data at any time, having, only for such purposes, send a written request to the Privacy Department at the email reports@cumbressanjavier.com

The validity of the revocation of consent could imply the suspension of the services that the Responsible Party provides to the Holder, without liability.

Within the next twenty business days from the date the revocation request was received, the Responsible Party will inform the Holder about the origin or inadmissibility of the same and if it is appropriate, it will be effective within fifteen business days following the date. in which the response is communicated to the email that the Holder provides.

.

First published: July 6, 2011

.

Last modified: January 9, 2017

.