LexisNexis Risk Solutions FL Inc. and its affiliates, as the Data Controller entities, (hereinafter “LN””), domiciled at 1000 Alderman Dr, Alpharetta, GA 30005, United States of America, hereby undertake to handle with the strictest confidentiality the Personal Data it receives in accordance with its internal policies and the applicable legal provisions.

LN may collect the following categories of personal data (collectively referred as “Personal Data”):

• identification data, including device data.
• contact information
• employment data
• financial data
• performance data
• historical data

LN will obtain your consent in accordance with the Federal Law for the Protection of Personal Data in the Possession of Private Parties (the “Law”), which shall be express in cases in which LN collects financial data in terms of the Law. However, your consent will not be required when, among other circumstances, the personal data is subject to a prior dissociation procedure where it will not be able to identify the owner of the Personal Data.

The Personal Data LN collects from you will be processed to maintain a record control and conduct the purposes established in this privacy notice, which are mentioned below. Your Personal Data will be treated by LN in accordance with applicable law, this privacy notice and the applicable Processing Notice at https://risk.lexisnexis.com/corporate/processing-notices (as updated from time to time, the “Processing Notice”).

Primary Purposes. Your Personal Data will be used for the development of the relationship and/or services provided to third parties that bind you to LN or LN clients; including (i) security and operations management, (ii) research and development purposes, (iii) maintenance and improvement of LN Services provided to LN customers, (iv) development of scores designed to prevent consumer fraud, identity theft and mitigate other business and financial risks, and/or (v) help to prevent financial crimes and comply with applicable laws and regulations. Furthermore, the data may be used for issues related to identity verification; detection, investigation, evaluation, monitoring and prevention of fraud and other crimes; compliance with, including but not limited to, anti-money laundering (AML), combating the financing of terrorism (CFT), bribery and corruption and other similar laws; analysis of your data to generate profiling; and any other derived from or directly related to the aforementioned purposes. 

Secondary Purposes. In addition, by providing your Personal Data, you authorize LN to use it for statistical purposes, without these being necessary purposes or purposes that give rise to a legal relationship between you and LN of your Personal Data.

If you do not agree with the use of your Personal Data for any of the mentioned “secondary purposes”, or if you wish to limit the use or disclosure of your Personal Data, you can express your refusal or limitation to such processing or disclosure by sending your request in written form to LN, at the following e-mail address: DPO@lexisnexisrisk.com

Your Personal Data may be transferred and processed by parties other than LN, such as: (i) subsidiaries, affiliates or controlling companies of LN for purposes of complying with the primary and secondary purposes outlined in this privacy notice, (ii) unrelated third parties (service providers), for the exclusive purpose of assisting LN in the operation of its business and the business of its clients, as well as in the compliance of its obligations to clients, manage or support its business operations, and provide professional services; (iii) other clients of LN for prevention of business-related issues, including prevention of crimes and frauds. Also, your Personal Data may be transferred when: (iv) the transfer is necessary or legally required for the safeguarding of a public interest, or for the procurement or administration of justice; (v) it is required by court order from Mexican or foreign administrative, judicial or governmental authorities of any nature; and (vi) it is necessary as part of a corporate transaction, such as a purchase and sale of assets or an acquisition or merger with another company.

The third parties to whom LN transfers your Personal Data, will be obliged from the moment of its reception, to treat them in terms of the Law. In any case, prior to each transfer, LN will communicate this privacy notice to the third parties in order for them to comply with its terms. 

If you do not express your opposition to the transfer of your Personal Data, it will be understood that you have given your consent.

LN has sufficient security measures for the protection, confidentiality and security of your Personal Data in order to restrict access to unauthorized individuals. Additionally, LN’s employees, representatives, subcontractors, consultants and / or third parties involved in any phase of the processing of your Personal Data will keep confidentiality regarding such data, an obligation that will subsist until after the end of the relationship between such individuals.

You have the right to access, rectify and cancel your Personal Data, oppose the processing thereof, limit its use or disclosure, or withdraw the consent you have given us for the processing of your data (these rights are known as, “ARCO Rights, by sending a request to the e-mail: DPO@lexisnexisrisk.com. ARCO rights do not apply to data that has been dissociated.

Your request will be processed in accordance with the deadlines provided in the Law and must contain at least the following information, in accordance with the provisions of the Law:

1. Your name, as well as the domicile or other means to notify you the answer to your request.
2. Documents evidencing your identity.
3. The clear and precise description of the Personal Data with respect to which the exercise of any of the ARCO Rights is requested.
4. Any other element or document that facilitates the location of the Personal Data.

Any change in this privacy notice or in the purposes of the processing of the data you have provided LN, will be communicated to you through updates of the applicable Processing Notice, or will be sent to you by e-mail or any other effective and reasonable means of communication.

I expressly consent and authorize LN to process the Personal Data in accordance with the terms and conditions of this privacy notice.

Last Updated: August 16, 2021