Truface, S.A.P.I. de C.V., (“Trully” or “The Responsible”) in compliance with the Mexican Federal Law for the Protection of Personal Information in Possession of Private Entities and its Regulations (both together, the “Law”), with address in Rio Lerma 94, 3rd Floor, Cuauhtémoc. 06500. Mexico City, Mexico. This address is also valid to hear and receive notifications.
In order to comply with the purposes indicated in this Privacy Notice, Trully will process personal identification data such as: (i) device ID; (ii) Phone number; (iii) Email (iv) Geolocation; (v) National identification numbers; and (vi) Biometrics.
In its capacity as "Responsible" according to the definition established in article 3, section IX of the LFPDPPP, Trully receives certain data from the "Responsible" (as said term is defined in article 3, section XIV of the LFPDPP) for the purposes of carrying out the implementation of collective intelligence and artificial intelligence models with the sole purpose of issuing an opinion for the benefit of its clients that can help correct decision-making and fraud prevention.
Once having issued its opinion after running its implementation, Trully returns to the "Responsible" all those data previously shared and used for the stated assessment. Trully for the study and review of said data, at all times has a contract for the provision of services, by virtue of which, the "Responsible" undertakes to implement, generate and achieve any procedure so that a "Holder" (according to said term is defined in article 3, section XVVI of the LFPDPPP, expressly accept that the "Responsible" may share with a "Manager" the personal data that belongs to him for the purpose of making an assessment in terms of fraud, thus helping companies, in the correct decision making with respect to its clients.
In accordance with the express acceptance, stated in the previous paragraph, personal data such as: (i) device ID; (ii) Telephone; (iii) Email (iv) Geolocation; (v) National identification numbers; and (vi) Biometrics, may be transferred by the "Responsible" to Trully in order to fulfill the contracted services and who will guarantee that these will be treated solely and exclusively for the purposes established between the "Responsible" and Trully. Consequently, the "Responsible", enables Trully in its capacity as "Manager", according to what the Federal Law on Protection of Personal Data Held by Private Parties ("LFPDPPP") provides.
In its capacity as "Manager", Trully will work in accordance with the following provisions:
You have the right to know which Personal and/or sensitive data we hold about you, for which purposes we are using the data (Access). Also, it is your right to solicit the correction of your Personal data in case it is outdated, incorrect or incomplete (Rectification); that we eliminate your data from our records and databases when you consider such Personal data is not being used correctly (Cancellation); such as oppose the usage of your Personal and/or sensitive data for the purposes herein specified (Opposition). Such rights are known as ARCO rights.
Should you wish to execute your ARCO right, you can send us an email to any of the following email addresses: legales@trully.ai, jpaoli@paolibusinesslaw.com.
To execute your ARCO rights, we suggest you to know the procedure:
Requirements to file an ARCO rights request:
1.File the request before the Responsible holding the Personal data, through the aforementioned means of contact, with the following information:
It is important to know that, if the request does not have the requested information, the Manager of the information could help you get to the Responsible of the Data, so you can request the missing information. Such information should be delivered back to us within the following 10 days. Failing to return the requested information back to us, will lead us to discard your request.
When you file your request, we will send you a receipt that your request has been filed.
2. Accreddit the identity of the Holder, and if it applies, the representative.
The request should be accompanied by a copy of an official ID, and a copy of the representative’s official ID if it applies.
For this purpose, an official ID could be:
To accredit the representative’s information, the representative should file:
Terms and procedures to attend request of ARCO rights
Once a valid request has been filed with the aforementioned requirements, the entity to whom the request was filed should:
In a term of 20 business days from the reception date, the entity that received the file should inform you whether the request will follow through or not.
In the event that the request follows through, a response should be provided in a term of 15 business days, after the previous response has been issued.
The aforementioned terms could be longer, when it is justified and the requester is informed.
If the request does not follow through, you will be notified in a 15 business day period after the request has been submitted.
If you consider that your rights have been violated in compliance with the Mexican Federal Law for the Protection of Personal Information in Possession of Private Entities and its Regulations, we suggest you to file a complaint with the with the National Institute of Transparency, Information Access and Personal data Protection (INAI). For more information we suggest you to visit the following website: www.inai.org.mx
You agree that this Privacy of Notice will be ruled by the applicable laws in Mexico, especially, by the dispositions of the Mexican Federal Law for the Protection of Personal Information in Possession of Private Entities and its Regulations.
This Privacy Notice may be modified, changed or updated according to the services, privacy practices, and needs without further notice. We are committed to ensuring that the information contained in this Privacy Notice provided through our website is accurate, complete and updated.