Addendum to the Western Union Global Privacy Statement for Users in Mexico

We care about the privacy of our users in Mexico and are committed to collecting, using, storing, protecting, disclosing and sharing your personal information in accordance with Mexico’s Federal Act on the Protection of Personal Data held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de Particulares) (the “Law”). This Addendum to the Western Union Global Privacy Statement for Users in Mexico (“Addendum”) is applicable to users in Mexico and, in conjunction with the Global Privacy Statement, is intended to address the requirements of Mexico’s Federal Act on the Protection of Personal Data held by Private Parties. Within Mexico, the applicable Western Union data controllers are Grupo Dinámico Empresarial S.A. de C.V., Operaciones Internacionales OV S.A. de C.V. and Servicio Integral de Envíos, S.A. de C.V. (collectively, the “Responsible Parties”) with legal address at Av. Paseo de la Reforma No. 505, piso 17, Colonia Cuauhtémoc, Delegación Cuauhtémoc, C.P. 06500, Mexico City.

WHAT PERSONAL DATA DO WE COLLECT?

See Section PERSONAL INFORMATION WESTERN UNION COLLECTS in Global Privacy Statement for more information.

In addition to the personal data referred in the Global Privacy Statement, we also inform you that at the moment you decide to hire the Western Union Money Transfer Service through our mobile application, the Responsible Party will also collect and process your biometric data, which refer to your physical and physiological characteristics, such as your face for facial recognition and fingerprints. Said biometric data, together with the photograph of their official identification and electronic signature, will be sent by the Responsible Party to the competent authorities in Mexico for their respective validation.

With the validation of your biometric information and the official identification presented, the Responsible Party complies with the obligation to know and verify the identity of you as a sender of a money transfer in Mexico, in accordance with the regulation that is applicable as Money Transmitter.

HOW WESTERN UNION PROCESSES YOUR PERSONAL INFORMATION

We process your personal information for the following Primary Purposes:

To provide our services to you: such as conducting money transfers, payment services, and loyalty programs; sending you important service-related, administrative or transaction-related communications; and perform existing contracts with you or enter into additional Western Union-branded products or services with you.
For legitimate business purposes: such as the running of our websites and apps; providing you with customer services; and helping to protect the security and integrity of our technology, systems, and services.
For Identification and Authentication purposes: to verify the data contained in your official identification document and your biometric data to verify your identity against the records managed by the National Electoral Institute and the National Population Registry, in order to comply with the applicable legal regulation.
For legal and compliance purposes: such as complying with legal and regulatory duties related to anti-money laundering and counter-terrorist financing; detection, prevention and prosecution of fraud and theft as well as preventing illegitimate or prohibited use of our services or other illegal or wrongful activity. This may also include establishing, exercising, or defending legal rights and claims of the Responsible Parties and others, and monitoring and reporting compliance issues as well as using your Personal Data to validate and authenticate your identity, and utilizing third parties to help us do so. In certain cases, such as performing money transfer services, we may be unable to provide you with our Services unless you provide the necessary Personal Data.

We also process your personal information for the following non-essential, Secondary Purposes:

For marketing purposes: such as, subject to your consent, notifying you of offers, promotions and updates regarding our products and Services. These may include offers by email, telephone, postal mail, SMS, social media and other communication or digital channels. You can opt out of receiving these marketing communications at any time. If you no longer want to receive marketing-related communications from us on a going-forward basis, you may opt-out by following the instructions in the relevant electronic communication or by contacting us as described in the “CONTACTING US” section in the Global Privacy Statement. Please note that if you opt-out of receiving marketing-related communications from us, we may still send you important service, administrative or transaction-related communications.
To measure marketing returns on investment and brand satisfaction (including by conducting market research surveys);
To assist us in providing our Services to you and help you to receive a personalized experience and assist you in carrying out transactions and accessing account information;
To recognize you and allow you to remain signed-in during your use of our websites and/or applications without having to re-enter your password;
To perform analytics on understanding our customers, improving their experience;
To analyze and improve your experience regarding our products, locations, services, and operations;
To determine if you reached the money transfer service of the Western Union brand from a banner ad or an Affiliate;
To deliver information specific to your interests not related to the money transfer service of the Western Union brand;
To better understand the effectiveness of our promotional campaigns and whether you acted on our promotional messages;
To promote safety, reduce financial risk and combat fraud.

The Responsible Parties will not collect or use your sensitive personal information while we provide our Services to you without your consent.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?

See Sections WHO WESTERN UNION SHARES YOUR PERSONAL INFORMATION WITH and INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION in the Global Privacy Statement for more information.

HOW CAN YOU LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA?

See Section ACCESSING, DELETING AND CORRECTING YOUR PERSONAL INFORMATION AND CHANGING YOUR CHOICES in the Global Privacy Statement for more information.

Additionally, if you do not agree that your Personal Data and/or the Personal Information Generated be used for purposes other than those that are necessary for the legal relationship between the Responsible Parties and You, we would be grateful if you could inform in writing to the Personal Data Department of the Responsible Parties located at Avenida Paseo de la Reforma number 505, piso 17, Col. Cuauhtémoc, Alcaldía Cuauhtémoc, C.P. 06500, Mexico City or by e-mail wuprivacy@westernunion.com (the “Address”). In the event that the Global Privacy Statement and this Addendum has not been delivered to you directly or personally, you will have 5 (five) business days from the date it is made known to you, so that, if applicable, you may express your refusal to the management for the processing of your Personal Data with respect to the purposes that are not necessary nor did they give rise to the legal relationship with the Responsible Parties.

In the event that you wish to limit or suspend the processing of your Personal Data for use for advertising or promotional purposes, you may also register in the Public Registry to Avoid Advertising (REPEP) of the Federal Consumer Protection Agency (PROFECO) through its website https://repep.profeco.gob.mx

USE OF COOKIES, WEB BEACONS, AND INTERNET TECHNOLOGIES

See Section INTERNET TECHNOLOGIES in the Global Privacy Statement for more information.

EXERCISING YOUR ARCO RIGHTS

As owner of the personal information, you may at any moment exercise your rights to access, rectify, cancel and/or oppose the processing of your personal information (the “ARCO Rights”) as well as to revoke your consent regarding the processing of any personal information which violates the terms of the Global Privacy Statement and this Addendum, via a written request to our Data Privacy Department at wuprivacy@westernunion.com, insofar as the requested opposition and/or revocation poses no harm to third parties’ rights and in accordance with article 34 of the Law.

Your request must include: i) the name of the owner of the personal information, ii) an address whereby the request may be answered, iii) official documents that establish the identity of the data owner, or, where applicable, proof of legal representation of the Personal Data’s owner, and iv) a clear and precise description of the personal information for which you wish to exercise your ARCO rights.

Requests for rectification of personal information must include the modifications which you wish to be made and evidence to support such petition; requests regarding the revocation of your consent must communicate in a clear manner that you wish to revoke your consent regarding the processing of certain personal information, and where applicable, the reasons for such revocation.

Upon receipt of your request, we shall have a term of 20 (twenty) business days to inform you of the relevant solution, with such solution being effective as of 15 (fifteen) business days following the date on which such resolution was informed to you in writing or via e-mail. The aforementioned terms may be extended once, insofar as proper justification for the extension is given.

MODIFICATIONS TO THIS ADDENDUM

See Section CHANGES in Global Privacy Statement for more information.

PERSONAL DATA TREATMENT CONSENT

You, as the owner of the Personal Data, declare having read and agree to the terms and conditions provided of the Global Privacy Statement and this Addendum that is available for you, knowing the purpose of the collection and treatment of your Personal Data, as well as the procedure to exercise your ARCO rights and the revocation of your consent.

I consent and authorize that my Personal Data, including biometric data, be collected and processed by Responsible Parties and third parties detailed in Section WHO WESTERN UNION SHARES YOUR PERSONAL INFORMATION WITH of Global Privacy Statement, in accordance with the provisions of the Global Privacy Statement and this Addendum.

The National Institute for Transparency, Access to Information, and Personal Data Protection (INAI) is the competent authority to resolve any conflicts arising from the application of the Federal Law on the Protection of Personal Data in Possession of Private Parties and its Regulations.

Your Personal Data will be treated in compliance with the safeguard levels required by Law.