Privacy Notice

Who will process your personal data?

Tonas Wood México SAPI de CV (hereinafter “Tonas Wood”) with address at Uxmal 695, Col. Letrán Valle, Mexico City CP 03650 will be responsible for the processing of your personal data.

For any questions related to the protection of your personal data, you can contact our Tonas Wood Data Protection Department at arco@tonaswood.com.mx

What information will we collect?

In order to fulfill the purposes stated in this Notice, Tonas Wood will collect and process personal identification data, including your personal image, which may be recorded through videos and/or photographs when you enter our branches and/or participate in our events, personal contact information, tax information, location information, personal property and/or financial information, biometric data (fingerprint and facial features), demographic data, information generated in connection with the provision of our services, as well as information about your participation in our sweepstakes, contests and promotions, and information that you voluntarily provide to us to address complaints, claims or requests for information.

Tonas Wood will verify that the personal information contained on the voter ID you present, including your biometric data, matches the information held by the National Electoral Institute (INE).

Likewise, we inform you that for the purposes of what is stated in this Privacy Notice, Tonas Wood will process personal data of third parties as personal references, so by providing the personal data of said third parties so that Tonas Wood can contact them by physical and/or electronic means, you acknowledge having obtained the required consent in terms of applicable regulations.

Tonas Wood will not collect or process sensitive personal data in the normal course of our operations. If it is necessary to collect sensitive personal data for specific purposes, Tonas Wood will obtain your express written consent, ensuring compliance with applicable regulations and protecting the privacy and security of such information.

If you contact us via social media, we may collect data from your public social media profile to respond to your requests and/or inquiries regarding the products we offer. We may process the information contained in your public social media profile, as well as the content of your posts.

No processing of personal data of minors. Tonas Wood does not collect personal data or information directly from minors. If data relating to minors is provided, we will assume that the person providing it is the parent or legal guardian, who acknowledges having read and accepted this privacy notice.

Data processing without human evaluative decision-making and profiling activities

We inform you that in order to fulfill the purposes set forth in this Privacy Notice, Tonas Wood will process personal data as part of a decision-making process without human evaluative intervention and will use mass data analysis techniques to perform profiling activities based on your consumption habits, tastes and interests, monitor your behavior and offer you a personalized experience in relation to the use of the services, as well as to fulfill some of the purposes reported in this Privacy Notice.

For what purposes do we use your information?

Tonas Wood will process your personal data for the following primary and necessary purposes:

Creating and managing your user account;

Verify and confirm your identity, including performing verification processes using biometric data in compliance with applicable regulations;

Accredit, validate, and verify your identity. This includes verifying the data contained in your Voter ID and biometric data (fingerprint similarity and facial characteristics) against the records of the National Electoral Institute;

Keep a record of activities related to your user profile;

Identify and contact you through various means of communication, both physical and electronic, to fulfill the obligations assumed, as well as to follow up on the delivery of the purchased products;

Verify your identity and validate the veracity and quality of the information you provide to us;

To address and resolve your questions related to the acquisition of our products and/or services;

Respond to submitted purchase requests and process payments;

Grant you bonuses and discounts;

Facilitate the location, processing, supply, distribution and delivery of the products requested by you;

To comply with the provisions of the Federal Law for the Prevention and Identification of Operations with Illicit Proceeds and other applicable regulations;

Bank clarifications;

Conduct inquiries, investigations and reviews in relation to complaints or claims;

Comply with the requirements of competent authorities in the cases provided for by law;

For billing procedures related to purchased products;

Keep a history of your purchases;

Granting of credits;

Monitor your credit behavior;

To contact you via phone calls, emails, text messages, and other physical and/or electronic means of communication, including instant messaging services (WhatsApp, among others that Tonas Wood deems appropriate). This is to conduct contact activities to provide you with information about the Services we offer, inform you of any benefits you may have received as a result of such services, and fulfill any obligations you may have acquired with us;

To carry out contact, collection, and information validation activities with third parties you have designated as personal references in order to ensure compliance with the legal relationship with us;

Detect and prevent fraud;

To register you as a user of our services;

Inform you about changes or new products or services that are related to the products purchased by you;

Activation, cancellation and analysis of the use of your card(s);

Accumulation of points through electronic wallets or similar;

To feed the credit bureau database;

Register you as a participant in our raffles, sweepstakes, contests, events, and/or promotions. If you decide to participate in any of the activities listed and/or are a winner, you authorize the organizers to use the data provided, as well as any images, videos, and photos taken during the prize presentation and/or during the event, for use in social media, television, radio, and/or print content.

Carry out quality monitoring activities on the services or on your purchasing experience with us;

Make effective the guarantees, repairs and/or maintenance services when appropriate;

Assuming you meet the requirements established by Tonas Wood to register you in its loyalty programs;

Identify and register you as a participant in our Loyalty programs,

Provide you with the benefits to which you are entitled by virtue of your participation, keep a historical record of the products purchased, as well as the frequency of their consumption;

Determine the geographic area where you are located to offer you content, promotions or benefits corresponding to that area;

Maintain the security of electronic communications networks and services, detect failures or technical errors in the transmission of electronic communications, as well as any processing that is necessary for the correct provision of services;

Identify you as a visitor to our online and physical locations. By visiting our websites, you expressly consent to us processing your image to publish various types of content on the company's platforms and communication channels for the purpose of advertising our activities, promotions, products, and services.

Prepare informative material about the activities we carry out and disseminate it through various information media, both physical and electronic, including content published by you within social networks and that refers to interactions or activities of direct contact with Tonas Wood;

Video surveillance within our facilities for your safety and that of the personnel working there;

Ensure the physical security of our facilities and the people present therein;

Comply with internal policies and procedures;

Respond to your requests for information, complaints or claims;

To comply with the obligations arising from the legal relationship with you;

Comply with the obligations set forth in applicable regulations, including responding to duly substantiated and justified requests issued by competent authorities.

What other uses can we give to your information?

Additionally, if you do not object, Tonas Wood may retain your personal information for the following purposes, which are not necessary for the service you request, but which allow us to provide you with better service:

Inform you about the launch or changes to new products, goods, services, promotions and/or offers from Tonas Wood in accordance with your interests, as well as from other brands and/or business units, including sending communications via email, phone calls, text messages and other physical and/or electronic means of communication;

Possible subsequent contacts for offering products, goods and/or services offered by Tonas Wood;

Share your profiles and consumption habits with our business partners so that they can contact you and send you advertising, promotional and/or informative information that they consider to be of interest to you and/or so that they can assess, in accordance with their internal procedures, whether you are eligible to obtain the service you have requested from said third party;

To send you advertising and communications for marketing, telemarketing, and other purposes.

Conduct statistics, surveys or studies on market habits and behavior that aim to evaluate the quality of services, goods, products and/or purchasing experience;

If you do not wish your personal data to be processed for any or all of the additional purposes, you can notify us at arco@tonaswood.com.mx.

Additionally, we inform you that you can opt out of receiving promotional messages at any time by clicking the Unsubscribe link in the footer of all emails sent by Tonas Wood.

Refusal to use your personal data for additional purposes cannot be used as a reason to deny you the requested services or terminate the relationship established with us.

To which third parties may we transfer your information?

Tonas Wood, in order to fulfill the purpose(s) described above, will transfer, without requiring your consent, the necessary data to third parties, both national and foreign, involved in the provision of the products and/or services and payment methods requested by you.

Tonas Wood may transfer, without requiring your consent, the necessary personal data to competent authorities, both national and international, in the cases provided for by law, as well as to any subsidiary, affiliate, related party, controlled, controlling or under common control, which operate under privacy policies that comply with the corresponding applicable provisions, in order to fulfill the purposes indicated in this notice.

In the event that the transactions you carry out with Tonas Wood are classified as vulnerable activities under the Federal Law for the Prevention and Identification of Transactions with Illicit Proceeds, Tonas Wood may provide certain information about you to the competent tax authorities without requiring your consent, in order to comply with the provisions of the Law.

Tonas Wood may transfer, without requiring your consent, the necessary personal data to: business partners and/or third parties with whom we have entered into service provision contracts to provide services for the delivery of goods and products, after-sales services, manage customer accounts and records, send communications related to products or services that may be of interest to you, loyalty programs, as well as marketing communications, with whom we have entered into commercial or collaboration agreements for purposes related to the validation and authentication of your identity, in accordance with the purposes described in this Privacy Notice.

We also inform you that if you fail to meet your payment obligations, your personal data may be transferred to the Credit Information Companies with which we have entered into data communication agreements without requiring your consent, as this is a legal obligation under the respective law.

If you do not object, Tonas Wood may share the necessary personal data with authorities at various levels of government and local or federal public administration bodies, so that such information can be presented as evidence in a judicial or administrative proceeding, as required.

If you do not object, Tonas Wood may transfer your personal data to business partners so that they can contact you and offer you goods and/or services that may be of interest to you, or so that they can determine whether you are eligible to purchase the goods and/or services offered by such third parties.

If you do not wish your personal data to be transferred for any or all of the purposes indicated, you can notify us at arco@tonaswood.com.mx.

How can you exercise your ARCO rights and/or revoke your consent?

You or your legal representative may exercise any of the rights of access, rectification, erasure or opposition (hereinafter "ARCO rights"), as well as revoke your consent for the processing of your personal data by sending an email to the Tonas Wood Data Protection Department at arco@tonaswood.com.mx . Your request must be made through the ARCO Rights Request Form, which must be requested from the email address indicated above. In order for the Tonas Wood Data Protection Department to follow up on your request, you or your legal representative must properly prove your identity. To do so, you must complete all the fields indicated in the Form and accompany it with a copy of one of the valid official identifications indicated therein. In the event that the information provided is erroneous or insufficient, or the corresponding accreditation documents are not attached, our Data Protection Department, within five (5) business days following receipt of the request, may require you to provide the necessary elements or documents to process it. You will have ten (10) business days to respond to the request, counting from the day after you receive it. If you do not respond within this period, the corresponding request will be considered not submitted. Our Data Protection Department will inform you of the decision made, within a maximum period of twenty (20) business days from the date on which the request was received, so that, if appropriate, you can make it effective within fifteen (15) business days following communication of the response. To obtain more information about the procedures, requirements and deadlines for exercising your ARCO Rights and/or revoking consent, contact the Tonas Wood Data Protection Department.

Your request must be made using the ARCO Rights Request Form, which must be requested from the email address indicated above. In order for the Tonas Wood Data Protection Department to follow up on your request, you or your legal representative must properly prove your identity. To do so, you must complete all the fields indicated in the Form and accompany it with a copy of one of the valid official identifications indicated therein. In the event that the information provided is erroneous or insufficient, or the corresponding accreditation documents are not attached, our Data Protection Department, within five (5) business days following receipt of the request, may require you to provide the necessary elements or documents to process it. You will have ten (10) business days to respond to the request, counting from the day after you receive it. If you do not respond within this period, the corresponding request will be considered not submitted. Our Data Protection Department will inform you of the decision made within a maximum period of twenty (20) business days from the date the request was received, so that, if appropriate, you can make it effective within fifteen (15) business days after the response is communicated. To obtain more information about the procedures, requirements and deadlines for exercising your ARCO Rights and/or revoking consent, contact the Tonas Wood Data Protection Department.

We remind you that if you wish to delete your data, you must exercise your right to erasure under the terms described above.

If your request for cancellation, objection, or revocation is successful, your data will no longer be used for the purpose for which you requested it, or it will be deleted from our systems in accordance with applicable law.

How can you limit the use and/or disclosure of your data?

To limit the use or disclosure of your personal data, you can:

1. Send a request to arco@tonaswood.com.mx.

2. Log in to your account on our website to set your privacy preferences.

3. Use the settings in our applications to control access to and use of your data. These tools allow you to effectively manage the processing of your personal data according to your preferences.

If your request is successful, you will be added to Tonas Wood's exclusion list. For more information, please contact Tonas Wood's Data Protection Department.

Use of cookies and web beacons

Our website and apps use cookies, web beacons, and similar technologies to enhance your user experience and personalize content and advertising. You can manage the use of cookies through:

1. Your browser settings, where you can reject all or some cookies.

2. Specific settings offered on our website and applications, accessible through your account or settings menus, where you can select your cookie preferences for non-essential activities

The different types of cookies we use are:

Essential cookies: These cookies are used to enable you to use our website and/or applications properly, and therefore cannot be disabled.

Cookies to remember your preferences and experience: These cookies allow us to remember your preferences, browsing options, and personalized features.

Cookies for performance and analytics purposes: We may use our own and third-party cookies to identify how you use our Services in order to improve their performance and future developments.

First-party and third-party advertising cookies: We may place our own and third-party advertising cookies (such as business partners) to show you advertising that we believe is relevant to you.

You can disable the use of cookies through your browser by following the procedure established by it. Here is some information about the procedure established in the following browsers:

Internet Explorer: Tools - Internet Options - Privacy - Settings. For more information, you can consult Microsoft support or your browser's Help.

Firefox: Tools - Options - Privacy and Security. For more information, you can consult Mozilla Support or the browser's Help.

Chrome: Settings - Security Checkup and/or - Privacy and Security. For more information, please consult Google Support or your browser's Help.

Safari: Preferences - Security. For more information, please consult Apple Support or the browser's Help.

Edge: Settings - Privacy, search, and services and/or Site permissions. For more information, you can consult Microsoft support or your browser's Help.

How will we notify you of changes to this Privacy Notice?

Any significant changes to our privacy notice will be communicated to you via:

1. Our Page On our website and/or applications we can access the internet.

2. A direct email message, if you have opted in to receive electronic communications.

3. Notifications within our apps, if applicable. We recommend that you regularly review the privacy notice posted on our website and keep your contact information updated in our database.

How can you send us your questions?

Our Data Protection Department is at your service to provide you with any additional information you may require or, where appropriate, to resolve any questions you may have regarding privacy and personal data protection. You may contact us via email at arco@tonaswood.com.mx.

How do we protect your transactions?

To protect your transactions through our website, we have implemented a secure server using the SSL (Secure Socket Layer) protocol. This means that the information you send us is encrypted to ensure its protection.

To verify that you are in a secure environment, make sure an "S" appears in the "httpS":// navigation bar.

Safety recommendations.

It's important that you choose a unique password, different from the one you use on other websites. It's also vitally important that you don't share your password with any third party. If you think someone might gain access to your password, change it immediately.

INAI

If you deem it necessary, we inform you that you have the right to contact the National Institute for Transparency, Access to Information, and Protection of Personal Data (INAI) to exercise your rights.

Acceptance of Privacy Notice

By using our services and providing your personal data, you signify that you have read, understood, and agreed to the terms set forth in this Privacy Notice and consent to the processing of your personal data as provided herein.

Last updated: October 2024.