Comprehensive Privacy Notice – GRUPO DITESA

Last updated: January 2, 2025

1. Identity and Address of the Responsible Party

GRUPO DITESA, composed of Distribuidora Téllez S.A. de C.V., DITESA IT Solutions S.L. and ConversIA, located at Eje Central Lázaro Cárdenas 506, Col. Álamos, C.P. 03400, Mexico City, is responsible for the processing, protection, and safeguarding of personal data provided to us, in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties.

2. Personal Data Collected

We may collect the following categories of data:

• Identification and Contact: name, email, phone, RFC, tax or professional address.

• Work and Financial Data: position, company, business history, payment information.

• Technical Data: IP addresses, institutional emails, and access credentials to internal platforms where applicable.

• Sensitive Data: only in cases of security or legal compliance, with prior express consent.

3. Purpose of Data Processing

Personal data will be used for the following purposes:

Primary (necessary):

• Identification and verification of clients, partners, and suppliers.

• Fulfillment of contractual, tax, and regulatory obligations.

• Management of business operations and invoicing.

• Quality control, information security, and service traceability.

Secondary (optional):

• Sending of corporate information, promotions, or events of DITESA and its brands.

• Satisfaction surveys and institutional communication.

If you do not consent to the use of your data for secondary purposes, you can express this by emailing atencion@grupoditesa.com.mx.

4. Data Transfer

DITESA may share personal data with:

• Companies within the same corporate group (DITESA IT SOLUTIONS, ConversIA).

• Tax, regulatory, or judicial authorities when legally required.

• Business partners and technology service providers under confidentiality contracts and data protection compliance.

In no case will personal information be sold, rented, or assigned to third parties without express consent.

5. Security Measures

In accordance with the DITESA Code of Conduct

DITESA Code of Conduct 2025

The organization applies administrative, technical, and physical measures to protect personal data against damage, loss, alteration, or unauthorized access or use.

All personnel are obligated to respect the confidentiality and ethical use of information according to corporate security policies.

6. ARCO Rights (Access, Rectification, Cancellation, and Opposition)

The owner of personal data can exercise their ARCO rights by sending a request to atencion@grupoditesa.com.mx, stating:

• Full name and contact method.

• Description of the data on which they wish to exercise their rights.

• Documents proving their identity or representation.

The compliance area will respond within a maximum of 20 business days.

7. Changes to the Privacy Notice

Any modification will be published on our website:

👉 www.grupoditesa.com.mx/politica-de-privacidad

8. Acceptance

By providing personal data, you acknowledge that you have read and understood this Privacy Notice and give your consent for the processing of your information in accordance with the terms set out herein.

GRUPO DITESA

Committed to integrity, transparency, and information protection.

📧 atencion@grupoditesa.com.mx

📍 Mexico City

🌐 www.grupoditesa.com.mx