is a financial institution that complies with and respects the rights enshrined in the second paragraph of article 16 of the Constitución Política de los Estados Unidos Mexicanos, with respect to the personal data of individuals, and therefore, this document (hereinafter referred to as the "Privacy Notice") is primarily intended to comply with the provisions of the Ley Federal de Protección de Datos Personales en Posesión de los Particulares, (hereinafter, the "Law") and the Reglamento de la Ley Federal de Protección de Datos Personales en Posesión de los Particulares (hereinafter, the "Regulations").
In this sense, STP makes available the Privacy Notice in order that the Personal Data Subject (terms defined below) has the possibility to exercise his/her right to informational self-determination.
Likewise, the Candidate, by entering and using the website https://stp.mx/ (hereinafter, "STP Website"), declares that he/she accepts the terms and conditions contained in this Privacy Notice, and therefore, expressly grants his/her consent by using electronic means for such purpose, in terms of the provisions of article 1803 of the Código Civil Federal.
Therefore, in the event that, as Data Subject, you do not fully and completely accept the terms and conditions of the Privacy Notice, you must refrain from providing any type of Personal Data to STP, by any means, including the STP Website.
For the purposes of this Privacy Notice, the term "Personal Data", in its singular or plural form, shall mean any information concerning an identified or identifiable individual; the term "Data Subject", in its singular and plural form, shall mean the individual to whom the personal data identifies or corresponds; and the term "Candidate", in its singular or plural form, shall mean any individual who has applied for one of the positions of having a current subordinate employment relationship with STP through the execution of an individual employment contract.
I. Identity and address of the person in charge.
STP, domiciled at Av. Insurgentes Sur 1425, 10th and 12th floors, Insurgentes Mixcoac, Benito Juárez, C.P. 03920, Mexico City, and identified by the trade name "STP", is responsible for collecting and processing your Personal Data in terms of this Privacy Notice.
II. Personal data that will be processed.
For the purposes specified in this Privacy Notice, STP collects directly from its Candidates, or indirectly through other sources permitted by law, the following Personal Data: full name, date of birth, marital status, sex, nationality, federal taxpayer registry (RFC), unique population registry code (CURP), social security number (IMSS), email, address, home, office and cell phone numbers, official identification, available schedule, last degree of studies, work and academic background, certificates of studies, curriculum vitae, work performance, information on previous jobs, name, telephone or cell phone number, e-mail, position, place of work of persons from whom personal and work references may be requested, as well as those of your spouse, parents and children, information on family members working at STP, current and previous salary, other income.
These data are treated under strict security measures to ensure their confidentiality.
III. Sensitive personal data that will be processed.
As part of the personnel selection process, STP may collect and process sensitive Personal Data, namely: results of various aptitude and psychometric tests, and results of tests that determine your physical, technical, psychological capabilities, and health status.
Such data are treated under strict security measures to ensure confidentiality and are not transferred to third parties.
IV. Purposes of the treatment.
Your personal data will be used by STP for the selection and recruitment of personnel, and that is why STP uses it for the following purposes: (i) identify the Data Subject and carry out the necessary job interviews, (ii) verify the information that the Data Subject has provided, (iii) contact the persons designated by the Data Subject as personal and employment references, (iv) give him/her access to STP's facilities in case of personal interviews and (v) give him/her access to platforms through which the necessary evaluations are carried out for the position to which he/she is applying (hereinafter, "Main Purposes").
V. Exercise of the Rights of Access, Rectification, Cancellation or Opposition (ARCO Rights).
You will be responsible for the accuracy, veracity, authenticity and validity of your Personal Data. In that sense, you have the right to (i) access the Personal Data collected from you, that is, to know what personal data we have about them, what we use them for and the conditions of use we give them, (ii) to rectify your Personal Data, in case they are outdated, inaccurate or incomplete, (iii) to cancel your Personal Data when, in your opinion, they are not being used in accordance with the principles, duties and obligations set forth in the Law, its Regulations and applicable rules, and it is legally appropriate, and (iv) to oppose the processing of such Personal Data for specific purposes; all of the above in terms of the Law, its Regulations and the applicable provisions on the matter.
VI. Revocation of Consent.
At any time, the Candidate may inform STP of his or her decision to revoke the consent previously granted for the processing of Personal Data in accordance with the purposes described in this Privacy Notice, in order for STP to stop using the Personal Data and provided that the consent to be revoked is with respect to Personal Data that are not necessary for the continuity of the selection process for the position to which the Candidate applied, unless the Candidate expresses his/her desire not to continue in such selection process or in case the law so permits. In all cases the revocation of consent shall not have retroactive effect. The means and procedure for doing so are set forth below.
VII. Means and procedure for the exercise of ARCO Rights. A. ARCO Request Requirements.
In terms of the provisions of the Law, any ARCO Rights Request ("ARCO Request") must comply with the following requirements:
Indicate the name of the owner of the Personal Data and his/her address, or other means to communicate the response to his/her request.
Accompany the documents that allow to prove its identity, or in its case, the representation
of the holder of the Personal Data.
Indicate a clear and precise description of the Personal Data with respect to which you seek
to exercise any of the ARCO Rights. In the case of rectification of Personal Data, you must indicate the modifications to be made and provide the documents supporting your request; and
Indicate and/or accompany any other element or document that facilitates the location of the Personal Dat.
For the submission of ARCO Requests, the owners of the Personal Data and their representatives may submit a free written document providing all the minimum requirements previously indicated.
B. Means of submitting ARCO requests or revoking consent.
In order to make the submission of ARCO Requests simple, Personal Data owners may submit such requests in the following ways:
Directly at the STP office identified at the beginning of this Privacy Notice.
The holder of the Personal Data must prove his identity by means of a copy of his identification document and must show the original for comparison. The following identification documents are accepted by STP: INE credential, passport, military service card and professional card.
If a representative attends, he/she must prove: (i) the identity of the owner of the Personal Data, (ii) his/her identity as representative, and (iii) the existence of the representation, by means of a public instrument or power of attorney signed before two witnesses, or through the declaration of the owner in personal appearance.
Acknowledgement of receipt of the ARCO Request will be delivered to the holder of the Personal Data or his representative, indicating the date of receipt.
By e-mail to the address [email protected], as long as it is possible to reliably identify the holder by means of authentication mechanisms allowed by the legal provisions on the matter, and accepted by STP. The use of advanced electronic signature or the electronic instrument that substitutes it, will exempt the presentation of the copy of the identification document. Receipt will be acknowledged by e-mail indicating the date of receipt of the ARCO Request.
C. Deadline for attention to ARCO Requests.
The receipt of an ARCO Request does not imply that it is declared admissible by STP. In the event that the information provided in the ARCO Request is insufficient or erroneous to process it, or if the necessary documents to process it are not provided, STP will require the holder of the Personal Data or its representative, within 5 business days following the receipt of the ARCO Request, for a single time, to provide the necessary elements or documents to process it. The holder of the Personal Data or its representative will have 10 business days from the day following receipt of the request to respond.
STP will respond to the ARCO Request with the determination reached, within 20 business days from receipt of the request, or if additional information or documents have been requested, within 20 business days from the day following the presentation of the response to the request.
If the ARCO Request is granted, STP will make effective the determination reached within a period of 15 working days from the date the response is communicated to the owner of the Personal Data or its representative. In the case of ARCO Requests regarding the right of access to Personal Data,
the delivery of such data will be made prior accreditation of the identity of the owner of the data or its representative.
STP may extend the deadlines to respond to an ARCO Request, and/or to make effective the determination reached, only once, for periods equal to those indicated in each case, provided that its Personal Data Department considers that the circumstances of the case justify it. In such cases, STP will notify the owner of the data or its representative, the circumstance(s) that justify the extension, within each of the original deadlines to respond or make effective the determination reached.
Responses to ARCO Requests will be delivered to the holder of the Personal Data or its representative, by the same means by which the request was submitted, either by e-mail, directly at the STP office where the ARCO Request was submitted, or by Mexican postal mail or e-mail in cases where the ARCO Request was submitted by telephone. The information or personal data requested may be made available to the holder of the Personal Data or its representative, in simple copies or in electronic file depending on the type and quantity of documents involved in each case.
For the revocation of consent, it will be sufficient for the owner to make a request by telephone to the Legal Department of STP, or by email to the address [email protected], proving his identity in the terms indicated above for this route. STP will respond positively and will make such request effective, provided that the personal data is not necessary for the existence, maintenance and fulfillment of its legal relationship with the owner of the data.
VIII. Limiting the use or disclosure of your personal information.
When the processing of Personal Data does not refer to those necessary to comply with a legal or contractual obligation (compliance with the legal obligations arising from the legal relationship between the Candidate and STP), the Candidate shall have the right to request STP to limit the use and/or disclosure of his/her Personal Data by means of the request that STP shall provide him/her, so that in case it is appropriate STP registers the Candidate's personal data in the exclusion lists within a term of 20 (twenty) business days from the submission of the respective request. For further information, please send an e-mail to the following address: [email protected].
IX. Cookies and Web Beacons.
STP acknowledges that it is possible that the STP Site or any of the digital platforms or applications used by STP may make use of Cookies or Web beacons in connection with certain features or functions.
For the purposes of this Notice, Cookies are understood as the data file that is stored in the hard disk of a user's computer equipment or electronic communications device when browsing a specific
Internet site, which allows the exchange of status information between such site and the user's browser, and the status information may reveal means of session identification, authentication or user preferences, as well as any other data stored by the browser with respect to the Internet site; and by Web beacons, the visible or hidden image inserted within a website or e-mail, which is used to monitor the user's behavior in these media, and through these it is possible to obtain information such as the IP address of origin, browser used, operating system, time at which the page was accessed, and in the case of e-mail, the association of the above data with the addressee.
Notwithstanding the foregoing, the Candidate may deactivate Cookies and Web beacons in his/her browser, delete them or manage their use through the configuration of his/her browser at any time, in the understanding that such actions could cause a deficiency in the performance and/or operation of the STP Site or any of the platforms or digital applications used by the latter to offer its services
and/or products, derived from the fact that certain functionalities are only available through the use of Cookies or Web beacons.
X. Transfer of Personal Data by STP.
STP uses the Candidate's Personal Data exclusively for the purposes indicated in this Privacy Notice and keeps it for the time indicated by the legal provisions. STP only shares and/or transfers the Candidate's Personal Data with third parties (i) with its affiliated companies, being one of these, Servicio de Transmisión de Pagos, S.A. de C.V. or any other that within its shareholding structure, has one or more shareholders in common with STP, in order to comply with the Purpose of Data Processing section of this Notice, (ii) for consultation and verification of the data and information provided by the Candidate, (iii) when so required by law or by order of a competent authority duly founded and motivated, and (iv) in the cases indicated in article 37 of the Law. Apart from the
aforementioned cases, the Candidate trusts that his or her Personal Data will not be transferred to third parties without his or her express consent.
In any case, STP guarantees that the purposes of the processing of the Candidate's Personal Data will be respected by the third party recipients when any of the aforementioned transfers take place. The third party recipients of the Candidate's personal data may be companies that are engaged in or have a similar line of business to STP and individuals and legal entities that provide services to STP .
The purposes of the aforementioned transfers will pursue (i) STP's compliance with the provisions regarding Personal Data, and (ii) the protection of the rights of the Candidates.
In this act, the Candidate agrees that STP may carry out the transfers in the above-mentioned cases, to the above-mentioned third party recipients and for the above-mentioned purposes, and therefore, he/she signs this Privacy Notice with full knowledge and consent.
XI. COMMUNICATION OF MODIFICATIONS.
This Privacy Notice may be modified at such time and in such manner as STP may determine, in accordance with the regulations on the protection of personal data that may be issued, STP's own needs in accordance with STP's privacy practices, and therefore, any update, change and/or total or partial modification to this Privacy Notice shall be made known to the Candidate directly at STP's domicile, as well as through our website https://stp.mx/, informing of the modification through a pop- up, so that if applicable, the Candidate will be able to exercise his/her ARCO rights.
XII. INFORMATION ABOUT INAI.
If the Candidate considers that his/her right to the protection of his/her Personal Data has been violated by any conduct or omission on the part of STP, or presumes any violation of the provisions of the Law, its Regulations and other applicable regulations, he/she may file a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). For more information, the Candidate should visit its official website www.inai.org.mx
XIII. CONSENT FOR THE PROCESSING OF SENSITIVE DATA.
I expressly authorize that my sensitive Personal Data, such as the results of different aptitude and psychometric tests, and the results of tests that determine my physical, technical and psychological capabilities, and my state of health, be processed by STP in accordance with the provisions of this Privacy Notice, and for such purpose, I hereby give my consent, which I acknowledge may be given by physical means, through a handwritten signature, or by using electronic means, through the use of electronic signature, or any authentication mechanism, in terms of the provisions of articles 1803 of the Código Civil Federal and 9 of the Law.
Full Name and Signature:
_____________________________
Date: _______________________
