Privacy Notice - Malinche in CDMX

Privacy Notice

At Nueva Música Esencial, S.A. de C.V., we are committed to protecting the personal data and privacy of our customers and users; therefore, in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations, we provide the following Privacy Notice.

Identity and Address of the Responsible Party for Data Processing

Nueva Música Esencial, S.A. de C.V., with a conventional address to hear and receive notifications at Gabriel Mancera 1537, Office 301, Colonia del Valle Centro, Benito Juárez Borough, Mexico City, is responsible for the legitimate, controlled, and informed processing of Personal Data of its Suppliers (Data Subjects), in accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (the “LFPDPPP”); its Regulations; the Privacy Notice Guidelines (the “Guidelines”); as well as the applicable secondary regulations. In order to ensure privacy and the right to informational self-determination of individuals, the Responsible Party collects Personal Data through the following means: (1) personally, when the Data Subject provides it at our offices, (2) directly, when the Data Subject inputs it on our website, (3) directly, when the Data Subject provides it via telephone or email, (4) indirectly, when other companies transfer Personal Data to us, and (5) indirectly, when obtained through publicly accessible sources permitted by the LFPDPPP.

We provide the Data Subject with this comprehensive Privacy Notice (the “Privacy Notice”) prior to the collection of Personal Data, in strict adherence to the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility established in the LFPDPPP and its regulations.

Personal Data to be Processed

Non-sensitive Personal Data The personal data we collect and use to carry out the purposes described in this Privacy Notice are as follows:

Personal Data of Children, Adolescents, or Persons with Legal Inability Due to the nature of the activity, we do not collect or use personal data of children, adolescents, or persons with legal incapacity under applicable civil legislation.

Purposes of Personal Data Processing
Who the Personal Data is Shared With

The Responsible Party may transfer Personal Data to commercial partners with whom contracts have been established for the marketing of products and/or services offered, for the benefit of the Data Subject; and it is understood that by not objecting to this Privacy Notice, the Data Subject authorizes this. If the Data Subject does not wish for these communications to occur, they can revoke the consent at any time through the procedure outlined in the section “Means and Procedure for Exercising the Rights of Access, Rectification, Cancellation, and Opposition (the “ARCO Rights”) and Revocation of Consent” of the Privacy Notice. Additionally, for the Responsible Party to carry out the primary and secondary purposes described above, the Data Subject consents to the Responsible Party sharing their personal data in the following ways:

Categories of Recipients:

The Data Subject may object to those transfers requiring their consent, in accordance with the process and deadlines described in the following section.

Means and Procedure to Exercise the Rights of Access, Rectification, Cancellation, and Opposition (the “ARCO Rights”) and Revocation of Consent

Under applicable law, you have the right to know what personal data we have about you, what we use it for, and the conditions under which we use it (Access). You also have the right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); request its deletion from our records or databases when you believe it is not being used properly (Cancellation); and oppose the use of your personal data for specific purposes (Opposition).

To exercise any of the ARCO rights, you must submit a request via email to: datospersonales@malinchethemusical.com, where you will be informed about the procedure, requirements, response deadlines, how we will make your right effective, and any questions or complaints you may have regarding this matter. The Responsible Party will notify the Data Subject of the decision within 20 business days from receiving the request, and if applicable, will make it effective within 15 business days following the communication of the response.

You may also revoke the consent you have given for the processing of your personal data. However, please note that in some cases, we may not be able to immediately fulfill your request due to legal obligations requiring us to continue processing your personal data. You should also consider that for certain purposes, revoking your consent may mean that we can no longer provide you with the requested service or end our relationship with you.

To revoke your consent, submit your request via email to: datospersonales@malinchethemusical.com, where you will be informed about the procedure, requirements, response deadlines, and how we will make your right effective.

Options and Means to Limit the Use and Disclosure of Personal Data

In addition to the procedure described in the previous section, you can limit the use or disclosure of your personal data by sending an email to: datospersonales@malinchethemusical.com, requesting written confirmation that your personal data will not be processed for secondary purposes.

Additionally, the Data Subject can limit the use and disclosure of personal data by registering with the REPEP (Public Registry to Avoid Advertising), managed by PROFECO, to prevent their data from being used for marketing or promotional purposes. For more information on this registry, you can visit the PROFECO website at www.gob.mx/profeco or contact them at 800 468 8722.

Competent Authority for Personal Data Protection

If you believe your right to personal data protection has been violated due to improper processing by the Responsible Party or its personnel, you can file a complaint with the Competent Authority in personal data protection matters.

Use of Cookies, Web Beacons, or Other Technologies

The App and Website use remote or local communication mechanisms that allow the collection of personal data automatically while the Data Subject interacts with them, such as Cookies and Web Beacons to simplify navigation.

We inform you that we use Cookies and Web Beacons to gather personal information, including the type of browser and operating system you use, the web pages you visit before and after visiting the website, links you follow, your IP address, and browsing statistics. These Cookies and other technologies can be disabled. You can search for information about known browsers and adjust your cookie preferences on the following websites:

Disclaimer

The Responsible Party's website may contain links, hyperlinks, banners, buttons, and/or search tools that, when used by the Data Subjects, lead to other websites that may be owned by third parties. The Responsible Party does not control these websites, nor is it responsible for their privacy notices, or lack thereof. Any personal data provided through these websites is the responsibility of the Data Subject, who should check the privacy notice on each site they access.

Some links, banners, and/or buttons that request personal data on the Responsible Party's website are the responsibility of third parties, such as service providers, who are governed by their own terms and privacy policies.

Modifications to the Privacy Notice

The Responsible Party reserves the right to periodically update this Privacy Notice to reflect changes in information practices, legislative updates, internal policies, or new requirements for providing services. These updates will be made available to the public, and the Data Subject can consult them on the Website and the App in the Privacy Notice section. The Data Subject is advised and/or required to review the Privacy Notice at least semiannually to stay updated on the terms and conditions.

Consent for Processing of Personal Data

The Data Subject acknowledges that they have read, understood, and accepted the terms set out in the Privacy Notice, which constitutes their free, specific, unequivocal, and informed consent, including regarding changes made in any updates to it, for the processing of their personal data, in compliance with the provisions of the LFPDPPP.

Last updated: February 2025.

END OF DOCUMENT