Effective: October 2019 V1

Privacy notice for candidates and employees

Under the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (the "LFPD") and other applicable provisions, Gattaca Mexico Services, S.A. de C.V. (hereinafter and indistinctly "GMS" or the "Responsible"), with address to hear and receive notifications at Avenida Paseo de la Reforma 296, 15th Floor, Col. Juárez, Alcaldía Cuauhtémoc, in Mexico City, Zip Code 06600; It informs you in an express way and puts at your disposal the following information, regarding the processing of your personal data.

In this act, we ask for your express consent so that GMS, has access and treat the following personal data:

Full Name, Date of Birth, Age, Nationality, Gender, Address, Phone (Home, Cell, Office, Messages), Marital Status, Monthly Income, Fingerprints, Biometric Data, Health Status, Social Networks, Academic History, Work History , Credit History, Legal and / or Traffic Background, Job Position, Email, Blood Group, Weight, Stature, Number and Type of License, Credits to the Infonavit and / or Fonacot, Social Security Number, Unique Registration Key of Population, Federal Taxpayers Registry, Photographs, Bank account number for deposit of payroll, data of direct family members declared in Personal Data Registration Form, Elector Credential, Passport, National Military Service Release Card, Professional Certificate, Proof of Studies, Naturalization Letter, Work Visa in case of being Foreigners, Economic Pretensions or Previous Salary.

Personal data whose categories have been identified can be collected by GMS directly or personally from the owner, or indirectly through data transfers that you have consented to through the publication of your data on websites or social networks of a professional nature. As candidates, you are responsible for communicating to the people you have provided as references (relatives or former employers) about the existence of the selection process in which you participate and about the treatment of the personal contact data that you have provided for the purposes established in the present Privacy Notice. In your case, you must communicate the means through which you can know the full content of this Notice.

The acceptance of this Privacy Notice involves the authorization that you as a candidate grant to GMS to contact family or professional references that you have provided, to obtain information and background on your performance in other workplaces and to hire, where appropriate, to service providers who carry out labor, financial or judicial background checks, or who can contact said references. This also applies to the application of various evaluations before entering or during your work with GMS. For the purposes described in this Notice, GMS can collect personal data considered as sensitive by the applicable legislation and those referring to its present and future health.

Original and necessary purposes.

1. Management, control and administration of the curricula and job applications received by GMS for its evaluation; contact with candidates and references of candidates, and selection of personnel for GMS.
2. Management, control and administration of curricula and professional information provided and / or published by professionals in web pages or social networks of a professional nature, for the selection of personnel for GMS clients.
3. Management, control and administration of curricula and professional information for the creation of a database of candidates with specialized profiles that do not report an active job search.
4. Verification of personal or work references.
5. Statistics and historical record of candidates.
6. Where appropriate, generation and communication of labor offers with binding and non-binding nature

Additional purposes

1. Do not exist.
GMS may transfer your personal data (including your sensitive data) to other individuals or legal entities. The recipients of these transfers (national or international), belong to the following categories:
1. Parent companies, affiliates or subsidiaries of GMS; for the creation of a database of candidates of global character, which allows GMS to offer jobs even outside the area of residence of the candidates.
2. Parent companies, affiliates or subsidiaries of GMS; with purposes of centralized protection of information and for statistical purposes and historical record of candidates.
3. Parent companies, affiliates or subsidiaries of GMS; for purposes of providing services or products related to benefits and benefits of a work nature to which the employee is entitled.
4. National or international clients of GMS; for verification and verification of the candidates selected by GMS to occupy specialized jobs.

National or international service providers; to perform labor, financial or judicial background checks.

The transfers of personal data referred to in the preceding paragraph do not require your consent to perform, in accordance with the provisions of article 37 of the LFPD. In all other cases, your personal data will not be transferred to third parties without your consent.

If you do not want your data to be transferred to specific destinations or recipients, you can expressly inform GMS at the time of communicating your personal data, or at any other time by exercising your right of opposition, according to the procedure established in the following section.

For the purposes described in this Notice, GMS can collect personal data considered as sensitive by the applicable legislation and those referring to its present and future health.

GMS may transfer your personal data (including your sensitive data) to other individuals or legal entities. The recipients of these transfers (national or international), belong to the following categories:
1. Parent companies, affiliates or subsidiaries of GMS; for the creation of a database of global candidates, which allows GMS to offer jobs even outside the area of residence of candidates and employees.
2. Parent companies, affiliates or subsidiaries of GMS; with purposes of centralized protection of information and for statistical purposes and historical record of candidates and employees.
3. Parent companies, affiliates or subsidiaries of GMS; for verification and verification of the candidates selected by GMS to occupy specialized jobs.
4. National or international service providers; to perform labor, financial or judicial background checks.

The transfers of personal data referred to in the preceding paragraph do not require your consent to perform, in accordance with the provisions of article 37 of the LFPD.

In all other cases, your personal data will not be transferred to third parties without your consent.

In all those cases legally applicable, you can always exercise your rights of access, rectification, cancellation and opposition (ARCO rights) through the procedures we have implemented.
The corresponding application must comply with the requirements established in current legislation, by writing to our Personal Data Department, located at Avenida Paseo de la Reforma 296, 15th Floor, Col. Juárez, Alcaldía Cuauhtémoc, in Mexico City, Postal Code 06600.

The request must contain and accompany the following:

I. Your name and address or other means to communicate the response to your request;
II. The documents that prove your identity or, where appropriate, the legal representation of that person who exercises the right in your name;
III. The clear and precise description of the personal data with respect to which one seeks to exercise any of the ARCO rights, and
IV. Any other element or document that facilitates the location of your personal data.

GMS will communicate, within a maximum period of twenty working days, counted from the date on which it receives the corresponding request, the adopted decision. If the request is appropriate, it will be effective within the fifteen working days following the date on which GMS communicates the response. In case the information provided in your application is erroneous or insufficient, or the documents necessary to prove your identity or the corresponding legal representation are not accompanied, GMS, within five working days following receipt of your request, will require the rectification of deficiencies to be able to process it. In these cases, you will have ten working days to meet the rectification requirement, counted from the day after you received this request. The corresponding request will be deemed not filed if you do not correct the error or deficiency within that period.

You can obtain the information or personal data requested through simple copies, electronic documents in conventional formats (Word or PDF), or through any other legitimate means that guarantees and certifies the effective exercise of the requested right.

Alternatively, you can direct your request to the Department of Personal Data of GMS through the electronic address datospersonales@gattacaplc.com , complying with all the requirements listed above, establishing as Subject of the communication "ARCO Rights and / or Revocation of consent". The terms of the procedure will be the same as those mentioned in this section.

The use of electronic means for the exercise of rights ARCO authorizes GMS to respond to the corresponding request through the same means, unless you indicate another means clearly and expressly.
For GMS it is important to keep your personal data updated, as well as to guarantee its veracity, validity and accuracy; so we would appreciate it if you would inform us of any change you wish to be taken into account by us.

As a candidate, you may revoke your consent for the processing or transfer of your personal data, without retroactive effect, provided that such revocation does not imply the impossibility of fulfilling obligations derived from a legal relationship in force between GMS, its parent companies, affiliates or subsidiaries and you. same.

Therefore, the revocation of your consent may have the effect that GMS stops treating your data for the purposes indicated in this Notice and that GMS stops communicating your data to any of its parent companies, subsidiaries or subsidiaries;

However, such revocation cannot have as a guaranteed object that customers who have had access to your personal data stop treating them in order to contact you during an ongoing selection process.
The procedure for the revocation of the consent, in its case, will be the same as that established in the previous section for the exercise of ARCO rights.

a candidate, you may limit the use or disclosure of your personal data, directing the corresponding request to our Personal Data Department, at the time of providing your information or later. For such purposes, you may request GMS to limit the use of your personal data to certain sectors or geographical spaces.

The requirements to prove your identity, as well as the procedure to address your request for limitation on the use or disclosure of your personal data, will be the same as those defined for the exercise of the ARCO rights, established in this Privacy Notice.

GMS may modify, update, extend or otherwise change the content and scope of this Privacy Notice, at any time and at its full discretion. At all times, you can request the latest version of this Privacy Notice to our Personal Data Department, through the electronic address datospersonales@gattacaplc.com.