We care about the privacy of our users in Mexico and are committed to collecting, using, storing, protecting, disclosing and sharing your personal information in accordance with Mexico’s Federal Act on the Protection of Personal Data held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de Particulares) (the “Law”). This Addendum to the Western Union Global Privacy Statement for Users in Mexico (“Addendum”) is applicable to users in Mexico and, in conjunction with the Global Privacy Statement, is intended to address the requirements of Mexico’s Federal Act on the Protection of Personal Data held by Private Parties. Within Mexico, the applicable Western Union data controllers are Grupo Dinámico Empresarial S.A. de C.V., Operaciones Internacionales OV S.A. de C.V. and Servicio Integral de Envíos, S.A. de C.V. (collectively, the “Responsible Parties”) with legal address at Av. Paseo de la Reforma No. 505, piso 17, Colonia Cuauhtémoc, Delegación Cuauhtémoc, C.P. 06500, Mexico City.
WHAT PERSONAL DATA DO WE COLLECT?
See Section PERSONAL INFORMATION WESTERN UNION COLLECTS in Global Privacy Statement for more information.
In addition to the personal data referred in the Global Privacy Statement, we also inform you that at the moment you decide to hire the Western Union Money Transfer Service through our mobile application, the Responsible Party will also collect and process your biometric data, which refer to your physical and physiological characteristics, such as your face for facial recognition and fingerprints. Said biometric data, together with the photograph of their official identification and electronic signature, will be sent by the Responsible Party to the competent authorities in Mexico for their respective validation.
With the validation of your biometric information and the official identification presented, the Responsible Party complies with the obligation to know and verify the identity of you as a sender of a money transfer in Mexico, in accordance with the regulation that is applicable as Money Transmitter.
HOW WESTERN UNION PROCESSES YOUR PERSONAL INFORMATION
We process your personal information for the following Primary Purposes:
We also process your personal information for the following non-essential, Secondary Purposes:
The Responsible Parties will not collect or use your sensitive personal information while we provide our Services to you without your consent.
WHO DO WE SHARE YOUR PERSONAL DATA WITH?
See Sections WHO WESTERN UNION SHARES YOUR PERSONAL INFORMATION WITH and INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION in the Global Privacy Statement for more information.
HOW CAN YOU LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA?
See Section ACCESSING, DELETING AND CORRECTING YOUR PERSONAL INFORMATION AND CHANGING YOUR CHOICES in the Global Privacy Statement for more information.
Additionally, if you do not agree that your Personal Data and/or the Personal Information Generated be used for purposes other than those that are necessary for the legal relationship between the Responsible Parties and You, we would be grateful if you could inform in writing to the Personal Data Department of the Responsible Parties located at Avenida Paseo de la Reforma number 505, piso 17, Col. Cuauhtémoc, Alcaldía Cuauhtémoc, C.P. 06500, Mexico City or by e-mail wuprivacy@westernunion.com (the “Address”). In the event that the Global Privacy Statement and this Addendum has not been delivered to you directly or personally, you will have 5 (five) business days from the date it is made known to you, so that, if applicable, you may express your refusal to the management for the processing of your Personal Data with respect to the purposes that are not necessary nor did they give rise to the legal relationship with the Responsible Parties.
In the event that you wish to limit or suspend the processing of your Personal Data for use for advertising or promotional purposes, you may also register in the Public Registry to Avoid Advertising (REPEP) of the Federal Consumer Protection Agency (PROFECO) through its website https://repep.profeco.gob.mx
USE OF COOKIES, WEB BEACONS, AND INTERNET TECHNOLOGIES
See Section INTERNET TECHNOLOGIES in the Global Privacy Statement for more information.
EXERCISING YOUR ARCO RIGHTS
As owner of the personal information, you may at any moment exercise your rights to access, rectify, cancel and/or oppose the processing of your personal information (the “ARCO Rights”) as well as to revoke your consent regarding the processing of any personal information which violates the terms of the Global Privacy Statement and this Addendum, via a written request to our Data Privacy Department at wuprivacy@westernunion.com, insofar as the requested opposition and/or revocation poses no harm to third parties’ rights and in accordance with article 34 of the Law.
Your request must include: i) the name of the owner of the personal information, ii) an address whereby the request may be answered, iii) official documents that establish the identity of the data owner, or, where applicable, proof of legal representation of the Personal Data’s owner, and iv) a clear and precise description of the personal information for which you wish to exercise your ARCO rights.
Requests for rectification of personal information must include the modifications which you wish to be made and evidence to support such petition; requests regarding the revocation of your consent must communicate in a clear manner that you wish to revoke your consent regarding the processing of certain personal information, and where applicable, the reasons for such revocation.
Upon receipt of your request, we shall have a term of 20 (twenty) business days to inform you of the relevant solution, with such solution being effective as of 15 (fifteen) business days following the date on which such resolution was informed to you in writing or via e-mail. The aforementioned terms may be extended once, insofar as proper justification for the extension is given.
MODIFICATIONS TO THIS ADDENDUM
See Section CHANGES in Global Privacy Statement for more information.
PERSONAL DATA TREATMENT CONSENT
You, as the owner of the Personal Data, declare having read and agree to the terms and conditions provided of the Global Privacy Statement and this Addendum that is available for you, knowing the purpose of the collection and treatment of your Personal Data, as well as the procedure to exercise your ARCO rights and the revocation of your consent.
I consent and authorize that my Personal Data, including biometric data, be collected and processed by Responsible Parties and third parties detailed in Section WHO WESTERN UNION SHARES YOUR PERSONAL INFORMATION WITH of Global Privacy Statement, in accordance with the provisions of the Global Privacy Statement and this Addendum.
The National Institute for Transparency, Access to Information, and Personal Data Protection (INAI) is the competent authority to resolve any conflicts arising from the application of the Federal Law on the Protection of Personal Data in Possession of Private Parties and its Regulations.
Your Personal Data will be treated in compliance with the safeguard levels required by Law.