Privacy Notice

In accordance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (the “LFPD”), its regulations, and other applicable provisions, we hereby inform you of the following:

  1. Data Controller Information

CREEL, GARCÍA-CUÉLLAR, AIZA Y ENRÍQUEZ, S.C., with domicile for receiving notifications at Pedregal 24, 24th Floor, Col. Molino del Rey, Mexico City, 11040, Mexico, is the “Data Controller” for the processing and protection of your personal data, which shall be processed in a strictly confidential manner, and hereby makes available to you this privacy notice (the “Privacy Notice”).

This Privacy Notice is addressed to the general public when visiting our offices (“Data Subject”). In particular, this Privacy Notice is addressed to: visitors or the general public, suppliers, clients, relatives or third parties related to employees, summer interns, and job applicants.

  1. Personal Data Collected

The Personal Data that we collect and process is as follows:

  • Full name
  • Purpose of your visit
  • Official identification
  • Professional data, where applicable
  • Image data captured by our CCTV

We do not collect or process sensitive personal data.

  • Purposes of Processing

Primary Purposes: The Personal Data that we collect from you will be used for the following purposes that are necessary, as applicable to (i) comply with our obligations arising from a legal or contractual relationship (between the Data Controller and the Data Subject), (ii) comply with applicable legal provisions, (iii) exercise our rights, or (iv) protect a person in the event of an emergency situation that could potentially harm them or their property, for which reason your consent will not be required:

  • control access to our premises, which involves the recording of your Personal Data and digitization of identification.
  • comply with internal policies or our applicable corporate regulations.
  • protect the safety of individuals, as well as our private property (including the use of video surveillance (CCTV))
  • comply with applicable legal provisions.
  • comply with our obligations related to the legal relationship between you and us as Data Controller.
  • coordinate meetings, work sessions, or conferences within our offices, including events organized by the Firm.
  • visits by family members or attendance at events organized by the Data Controller.
  • attendance at vaccination campaigns.
  • attendance at job interviews.
  • receipt of products from suppliers.

access to our premises by our suppliers, as necessary for the provision of their services.

  1. ARCO Rights

As a Personal Data holder, you may at any time request access to, rectification, cancellation of, or opposition to the processing of your personal data (hereinafter, the “ARCO Rights”), as well as revoke your consent and limit the use or disclosure of the Personal Data provided, by means of our email address datospersonales@creel.mx.

The request referred to in the preceding paragraph must include:

  1. Name of the Personal Data holder and the means by which we will communicate the response to your request;
  2. Documents proving your identity or that of your legal representative;
  3. A clear and precise description of the Personal Data with respect to which you seek to exercise any of the ARCO Rights, unless it concerns the right of access, as well as the ARCO Rights to be exercised; and
  4. Any other element that facilitates the location of the Personal Data with respect to which you seek to exercise the ARCO Rights.

Once the ARCO Rights request has been received:

  1. The Data Controller shall have a period of 20 (twenty) business days to respond regarding the admissibility or inadmissibility thereof.
  2. In the event that the request is deemed admissible, the Data Controller shall have an additional period of 15 (fifteen) business days to grant what was requested.
  3. The aforementioned period may be extended for an equal period when justified and you are informed thereof.
  4. Even if the exercise of the requested right is deemed inadmissible, the Data Controller must respond to your request, explaining the reasons for such inadmissibility, within the 20 business day period previously indicated.

All ARCO Rights requests, as well as any questions or inquiries related to the protection of your Personal Data, must be submitted through the email address indicated in this Privacy Notice.

  1. Use of Cookies

In the event that you use our website, please be aware that we use cookies, web beacons, and other technologies through which it is possible to monitor your behavior as an Internet user and provide you with a better user experience when browsing our website. You may disable them in accordance with the Privacy Notice for web users available at https://www.creel.mx.

  1. Changes to this Privacy Notice

This Privacy Notice may be updated and/or modified at any time. Such updates will be available at https://www.creel.mx.

Date of last update: August 2026.

We will use your personal data collected through this and any other mean, for academic purposes, legal advice, the provision of the legal services that you entrusted us, and to integrate our internal records for sending academic and legal information and developments regarding the provision of our legal services, and with administrative and billing purposes. For the aforementioned purposes we need to collect the following personal data: name, company for which works, address, e-mail, telephone, as well as all the information that you provide us in connection with the indicated purposes.

Also, we will use your personal data collected through this and any other mean to implement our recruitment process and to analyze your possible selection as a potential employment candidate with the Firm. For the aforementioned purposes, we need to collect the following personal data: name, gender, date of birth, place of birth, nationality, address, telephone, e-mail, as well as all the information that you provide us in connection with the recruitment process.

In terms of article 68 of the Regulation of the Personal Data Law and article 36 of such law, you hereby expressly agree and authorize any transfer of your personal data made by the Firm to related companies, subsidiaries, suppliers or customers. Moreover, the Firm ensures that all transfers shall comply, at all times, with article 36 of the Personal Data Law and 68 of the Regulation of the Personal Data Law.
We have enough security measures for the protection, confidentiality and assurance of your personal data to restrict the access to non-authorized people. Likewise, our employees, representatives, subcontractors, consultants and/or third parties involved in any stage of processing of your personal data will keep confidentiality with respect to these, obligation that shall continue until the end of the relationship between such persons.

You have the right to access, rectify and cancel your personal data, oppose to the processing of such data, limit its use or disclosure, or revoke the consent that you have granted us to process your data, by sending an email to datospersonales@creel.mx.
This privacy notice might be changed, modified or updated due to new legal requirements; our own needs based on the services we offer; our privacy practices, or for other reasons. We will keep you informed on any changes to this privacy notice through the information available at our web site www.creel.mx.

Date of last update: July 2016.