Privacy notice

I. CONSENT OF THE DATA SUBJECT

By checking the specific Privacy Notice box at the time of registration, at any other time it is requested, or whenever it is requested again on account of a new privacy notice, you expressly accept and give your consent for your personal data to be processed and transferred, pursuant to this notice, as set forth below.

You may revoke your consent to the processing of your personal data, which may mean that we are unable to provide you with the Data Controller’s services. Such revocation may be made by a free-form written request that meets the requirements established in the Law, which must be sent to the address indicated at the beginning of this Privacy Notice or to the following email address: hola@zebrainsurtech.com, addressed to the Privacy Committee

II. WHICH OF YOUR PERSONAL DATA DO WE COLLECT AND USE?

The data you provide to us will be processed under the principles established and developed in the Law (lawfulness, consent, information, quality, purpose, loyalty, proportionality and accountability).

We inform you that, in order to carry out various purposes necessary by virtue of the commercial relationships that arise or are maintained with us, as set out below, we will collect your personal data, which is protected under this Privacy Notice.

Accordingly, we hereby inform you that we will collect the following data, on the understanding that it will apply whether it is provided to us directly, indirectly or in person: Identification and contact data: full name, email address, landline or mobile telephone number, job title, and company name, if applicable.

We do not request “sensitive personal data” in any way, and users of the Data Controller’s services will not provide it to us at any time.

III. PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA

The personal data we collect will be used for the following primary purposes:

• To identify you, communicate with you and contact you.
• To provide the functions and services available throughout the Site, as engaged by the data subject or by a third party for the data subject’s benefit.
• To respond to your requests and send you communications regarding the provision of the Data Controller’s services.
• To administer and troubleshoot the Site and the Data Controller’s applications.

Additionally, it will be used for the following secondary purposes:

• To offer the data subject benefits, promotions or discounts intended to encourage or reward the use of the products or services marketed by the Data Controller.
• To send you information about courses, events or promotions for informational, marketing, advertising or commercial prospecting purposes.
• To improve our services.
• To create databases for statistical purposes.
• For internal research and the preparation of reports.

If you do not wish your personal data to be processed for these secondary purposes, you may submit, as of now, a request to refuse the use of your personal data for such secondary purposes, which may be made by a free-form written request that meets the requirements established in the Law, which must be sent to the address indicated at the beginning of this Privacy Notice or to the following email address: hola@zebrainsurtech.com, addressed to the Privacy Committee. Notwithstanding the foregoing, you may ask the Data Controller for, and the Data Controller may provide you with, if available, a form for submitting such a request. If you require information about such a request, you may contact our Privacy Committee by sending an email to: hola@zebrainsurtech.com

Additionally, if your personal data is provided to us indirectly, you will have a period of five days to state, if applicable, your refusal to the processing of your personal data for the secondary purposes, without prejudice to your ability to exercise your ARCO rights (Access, Rectification, Cancellation and Opposition) under the Section titled “ARCO Rights” of this Privacy Notice.

IV. LIMITS ON THE USE AND DISCLOSURE OF YOUR PERSONAL DATA

As Data Controller, we are committed to safeguarding your personal data under physical, technical and administrative security measures, which have been implemented in accordance with the Law in order to protect such personal data against any damage, loss, alteration, destruction, or unauthorized use, access or processing, seeking above all to ensure the confidentiality of the data and to minimize any risk or breach that may arise.

So that you may limit the use and disclosure of your personal information, we offer you the following means:

• Your enrollment in the Public Registry to Avoid Advertising (Registro Público para Evitar Publicidad), which is run by the Federal Consumer Protection Agency (Procuraduría Federal del Consumidor), so that your personal data is not used to receive advertising or promotions from companies offering goods or services. For more information about this registry, you may consult the website of the Federal Consumer Protection Agency (PROFECO), or contact it directly.
• Your registration in the exclusion list maintained by the Company, so that your personal data is not processed by us for marketing, advertising or commercial prospecting purposes. For more information, you may submit a free-form written request that meets the requirements established in the Law, which must be sent to the address indicated at the beginning of this Privacy Notice or to the following email address: hola@zebrainsurtech.com, addressed to the Privacy Committee.

V. EXERCISE OF ARCO RIGHTS AND REVOCATION OF THE PROCESSING OF PERSONAL DATA

At any time, you have the right to exercise your rights of Access, Rectification, Cancellation and Opposition (ARCO) with respect to the personal data we collect, which consist of (i) the right to know what personal data we hold about you, what we use it for and the conditions of the use we make of it (Access); (ii) the right to request the correction of your personal information if it is outdated, inaccurate or incomplete (Rectification); (iii) the right to have it deleted from our records or databases when you consider that it is not being used in accordance with the principles, duties and obligations provided for in the applicable regulations (Cancellation); and (iv) the right to object to the use of your personal data for specific purposes (Opposition). The exercise of any ARCO rights may be made by a free-form written request that meets the requirements established in the Law, which must be sent to the address indicated at the beginning of this Privacy Notice or to the following email address: hola@zebrainsurtech.com, addressed to the Privacy Committee. Notwithstanding the foregoing, you may ask the Data Controller for, and the Data Controller may provide you with, if available, a form for submitting such a request or exercising ARCO rights. If you require information about such exercise of ARCO rights or request, you may contact our Privacy Committee by sending an email to: hola@zebrainsurtech.com.

Once your request is received, we will communicate the corresponding response to you in accordance with the procedure and within the time limits established by the Law and, if the request is granted, it will be carried out within the time limits set by the Law. If you exercise your right of Access, digital copies or any document prepared for that purpose will be issued by the means permitted in accordance with the Law.

You may revoke the consent you may have given us for the processing of your personal data. To revoke your consent, you must submit a request on the same terms as for the exercise of your ARCO Rights. Please note that we will not be able to grant your request or cease the use immediately in all cases, since we may be required by a legal obligation to continue processing your personal data. Likewise, you should consider that, for certain purposes, the revocation of your consent will mean that we can no longer provide the service you requested from us, or that your relationship with us will end.

VI. REMOTE MEANS

The data subject understands and accepts that: (i) our Site may include links to third-party websites which, if accessed, will cause you to leave our Site, and therefore we assume no responsibility in relation to third-party websites; (ii) our Site may include links to sites that manage social networks, in which case the data subject accepts that, by providing any type of information, including their data, on such sites, it may be read, viewed, accessed, retransmitted and processed by any person, releasing us from any liability; (iii) our systems may collect data in addition to what the data subject provides, such as browser type, operating system, websites visited, IP address, etc., through “cookies” or “web beacons,” among others.

“Cookies” are small text files that a web server sends to your computer, which serve to provide you with better service regarding our products and/or services. Session cookies remember the activity you previously carried out on our website. Persistent cookies even make it possible to save your preferences across the various sessions in which you visit our website, which allows us to customize, for example, the way the website makes information of interest available to you. The personal data we obtain from these tracking technologies is the following: browsing hours, browsing time on our website, sections viewed, and websites accessed prior to ours.

Likewise, cookies may be used to avoid showing you notices, news and/or recommendations that might interest you, in accordance with your previous activities on our website.

Visit counters or “web beacons” are generally graphic images placed on a website and used to count the number of visitors to a website, or they may even allow access to some cookies. The purpose of using web beacons on our website is to reflect statistics regarding the products and/or services that interest you. These visit counters normally do not collect information other than what your browser provides to us as a standard part of any internet browsing. If you choose to disable cookies in your internet browser, the visit counter will no longer be able to track your activity specifically.

Most internet browsers allow you to disable or allow the use of cookies. In turn, you may delete cookies from your computer if your browser allows it.

VII. TRANSFER OF YOUR PERSONAL DATA

We inform you that the personal data collected will be transferred to domestic or foreign third parties other than, or unrelated to, the Data Controller, who will be obliged to safeguard the data in accordance with the Law. Such transfer will be made solely on account of third-party service providers in the telecommunications and IP telephony industries, among others, which provide services that the Data Controller does not provide directly.

VIII. COMMUNICATION MECHANISMS

Any communication you wish to send in connection with this Privacy Notice must state clearly and precisely: (i) the name of the data subject and their address and/or email address; (ii) the official documents that prove the identity or, if applicable, the legal representation of the data subject; and (iii) the purpose of your communication.

IX. CHANGES TO THE PRIVACY NOTICE

This Privacy Notice may be modified from time to time, in accordance with applicable law. In any event, any modification will be made known to you by publishing it on our Site and/or by notice via email.

X. DISCLOSURE OF PERSONAL DATA BY LEGAL MANDATE

If the Data Controller is required by a competent authority through a resolution or measure that is in accordance with the law, the data subject agrees that notice of such event to the data subject will not be necessary, unless the applicable legal provisions so require.

XI. APPLICABLE LAW

By accepting this Privacy Notice, you waive any other jurisdiction and legislation that may apply to you. This Privacy Notice is governed by Mexican law, and any dispute will be resolved before the competent Mexican authorities.