Privacy Notice

FLOR DE LUNA DISTILLED, SA DE CV , with address at Bosque de Capulines 235, Bosques de las Lomas neighborhood, Miguel Hidalgo Municipality, Mexico City, CP 11700

PRIVACY NOTICE
Federal Law on the Protection of Personal Data Held by Private Parties

Since the purpose of the Law is to define the scope and general conditions of the legitimate, controlled and informed treatment of Personal Data, guaranteeing the security of the same to its owners, so that they are able to make informed decisions about its use, maintaining control and disposition over them, THE CONTROLLER notifies through this notice the treatment that will be given to the personal data it receives. Likewise, this privacy notice allows THE CONTROLLER to make said treatment transparent, and thereby strengthen the level of trust of the owners.

You can access the content of the Law through the portals that the Federal Government, through the Ministry of the Interior, and the Chamber of Deputies of the H. Congress of the Union have on the Internet and whose addresses are: http://www.ordenjuridico.gob.mx and http://www.diputados.gob.mx .

Personal Data that may be collected and Purpose of Processing

Personal data means all information concerning an identified or identifiable natural person.

Personal Data that may be collected, including but not limited to:

Of our prospects, clients who are natural persons: name, address, landline or mobile phone number, email, RFC, CURP, position or job, bank account.

From our suppliers of goods and services who are natural persons: name, address, telephone number, email, RFC, CURP, position or job, bank account.

For recruitment and selection purposes, as well as to comply with employment contracts, and their administration due to the employment relationship, by way of example, but not limited to: sex; marital status; place, date of birth and nationality; RFC; CURP; telephone numbers; address and places where you have resided; studies completed; social security data; work history data; medical status; data of family members such as: names, economic dependency, age, address, occupation, residence; companies in which they have worked; as well as the name, address, occupation and telephone number of personal references, Social Security number, among others.

Sensitive data: current illnesses, operations in your life, illnesses of your relatives, sexual preferences, religion, current physical condition, age, weight, height,

occupation, marital status, social security number, current medical conditions, number of sexual partners, alcoholism and smoking, or other addictions, eating habits

The primary purpose of collecting personal data is to obtain your essential information in order to have a better relationship and provide you with better service, as well as to send you commercial advertising that may be of interest to you.

Measures to safeguard the confidentiality and integrity of personal data

The personal data that the owners provide to the CONTROLLER will be collected under the principles established by the Law

THE CONTROLLER is committed to safeguarding and protecting the integrity of Personal Data obtained by any means and the information belonging to its clients, employees, partners and suppliers, and therefore has measures in place to protect data in accordance with the requirements of the law. Therefore, personal data and sensitive personal data that you voluntarily provide us, whether in physical, electronic or any other format, are treated confidentially through physical, technological and administrative measures.

Customers, employees, partners and suppliers must provide accurate, clear, complete and up-to-date personal data at the time of collection, without prejudice to their ability to exercise their rights over such data.

The personal information provided by clients, employees, associates and business partners will be used for commercial purposes and for the use of products and services, among others, and will be the minimum necessary for the existence, maintenance and fulfillment of the legal relationship between THE CONTROLLER and the owner.

Acceptance of the Privacy Notice

The signature of acceptance of any document issued by THE CONTROLLER in which this Privacy Notice is referred to implies the express acceptance for your Personal Data to be treated as indicated in this Notice. THE CONTROLLER guarantees that the Personal Data that comes to its knowledge will not be sold, rented or provided to third parties for purposes other than those established herein without your explicit consent and your information will only be used for the purposes described in this Privacy Notice.

If you do not agree with the use and processing of your Personal Data in accordance with this Privacy Notice, it will not be possible to provide you with the services of THE CONTROLLER, and therefore it will not be possible to establish any legal relationship.

Transfer of Personal Data

THE CONTROLLER may transfer personal information to its partners, associates, clinics or hospitals, inside and outside of Mexico, provided there is a need related to contractual purposes.

(legality, consent, information, quality, purpose,

loyalty, proportionality and responsibility).

In the case of Personal Data of employees , THE CONTROLLER may transfer them to those individuals or legal entities, national or foreign, designated to evaluate references, whether of a work, commercial, family or personal nature, provided that it is for the purpose described above.

In such case, THE CONTROLLER will adopt the necessary measures to ensure that the persons who have access to your personal data comply with the privacy policy and have the minimum essential standards, as well as the principles of personal data protection established in the Law.

THE CONTROLLER may be required to provide Personal Data to the competent authorities, whether administrative, judicial or labor, under current regulations or laws, if so required by the competent authorities.

Storage of your Personal Data

THE CONTROLLER may store your personal data in databases located at its current address or at any other present or future address, both in the country and abroad.

Limitation of use or disclosure of Personal Data

To exercise the right to refuse or limit the use or disclosure of Personal Data, when these are not intended to carry out or continue the legal relationship with THE CONTROLLER, you must contact THE CONTROLLER.

Websites that do not correspond to FLOR DE LUNA

Our Website may contain links to external websites that do not correspond to FLOR DE LUNA and, therefore, are not related to us. We recommend that you review and read the privacy policies, as well as the terms of use of such external websites before using them.

ARCO rights

ARCO rights are those that the owner or legal representative, as the case may be, may exercise against the person responsible for handling their personal data at any time. They are known as ARCO by their acronyms:

Access. Rectification. Cancellation. Opposition.

Procedure to exercise your ARCO rights

In compliance with the provisions of the Federal Law on Personal Data Held by Private Parties, THE CONTROLLER, all clients, employees, associates and business partners who provide us with personal information, may exercise their ARCO rights by submitting their request to the address of THE CONTROLLER, in which they must indicate and attach the following information:

• Name of the holder and full address

• Email to hear and receive notifications

• Document proving the identity of the holder or the legal representative, where applicable.

• Clear and precise description of the personal data regarding which you seek to exercise your rights.

  any of the ARCO rights.

• Any other element that facilitates the location of personal data.

  THE CONTROLLER will respond to any request within a maximum period of 20 days from the date the completed form and the necessary documentation have been received. THE CONTROLLER's response will indicate whether the request for access, rectification, cancellation or opposition is admissible, and if applicable, THE CONTROLLER will make the determination effective within 15 days following the date on which the response is communicated. The deadlines may be extended in accordance with the terms set out in the Law.

  Head of ARCO Unit

  THE PERSON RESPONSIBLE FOR DATA PRIVACY
  MOON FLOWER DISTILLED, S.A. DE C.V.
  Department of Personal Data Protection
  Address: Bosque de Capulines 235, Bosques de las Lomas neighborhood, Miguel Hidalgo Municipality, Mexico City, CP 11700.

  Phone:52510226
  email: daniel@fdeluna.com

  Modifications to the Privacy Notice

  Any changes made to this Privacy Notice will be made known to you via email by the CONTROLLER.