PRIVACY AND PERSONAL DATA NOTICE OF SATORI TECH

Courtesy translation. This English version is provided for convenience only. The Spanish version is the legally binding notice and prevails in case of any discrepancy: Aviso de privacidad (español).

In compliance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter THE LAW), INNOVACIONES SATORITECH S.C. (hereinafter SATORITECH), with its address at General Anaya 100 Casa 8 A, Colonia El Campanario, C.P. 52140, Metepec, State of Mexico, informs you:

For what purposes do we collect your data?

Pursuant to article 15 of THE LAW, the personal data collected will be used for the following purposes, strictly necessary to provide our services: to contact you, to provide the products and services you request, to follow up on ongoing operations, to fulfill the obligations undertaken, and to enforce the clauses of the terms and conditions of use.

In addition to the necessary purposes above, SATORITECH may use your data to: contact you, inform you about changes or new products related to what you contracted or previously acquired, carry out internal studies and assess the quality of the service provided.

If you do not want your personal data to be processed for these additional purposes, please state so below:

I do (not) consent to my personal data being used for the following purposes: informing me about changes or new products related to what I contracted or previously acquired, carrying out internal studies and assessing the quality of the service.

Refusing the use of your personal data for these purposes will not be a reason for us to deny the services and products you request or contract with us.

What data do we collect and use about you?

To carry out the purposes described in this privacy notice, SATORITECH will collect, in person, by mail or through our website satoritech.com.mx, the following data: full name or company name, address, landline and/or mobile phone, proof of address, CURP, official ID, articles of incorporation where applicable, deed and/or power of attorney proving ownership or legal possession of the property where the installation takes place, and tax ID (RFC) certificate.

Personal data collected

  • IP addresses
  • Cookies and tracking technologies
  • Session data, logs and metadata
  • Device information (type, operating system, browser version, etc.)
  • Unique user identifiers (customer ID, user, etc.)

Digital and technological data collected

  • Use of tracking technologies and cookies
  • Google Analytics

Types of cookies used:

  • Essential cookies (required for the site to work)
  • Analytics and performance cookies (to improve the user experience)

Transfer of personal data

We undertake not to transfer your personal information to a third party without your consent, except for the exceptions set out in article 37 of THE LAW:

  • When the transfer is provided for in a Law or Treaty to which Mexico is a party.
  • When it is necessary for medical prevention or diagnosis, the provision of health care or medical treatment.
  • When it is made to holding companies, subsidiaries or affiliates under the common control of the data controller.
  • When it is necessary under a contract entered into or to be entered into in the interest of the data subject.
  • When it is necessary or legally required to safeguard a public interest or for the administration of justice.
  • When it is required for the recognition, exercise or defense of a right in judicial proceedings.
  • When it is required to maintain or fulfill a legal relationship between the controller and the data subject.

If you do not object to your data being transferred, you will be deemed to have given your consent.

How can you access, rectify or cancel your personal data, or object to its use?

Under THE LAW, you have the right to know what personal data we hold about you, what we use it for and under what conditions (Access). You may request its correction (Rectification), deletion (Cancellation) or object to its use (Opposition), known as ARCO rights.

To exercise these rights, send a request to hola@satoritech.com.mx or visit our offices at General Anaya 100 Casa 8 A, Colonia El Campanario, Metepec, State of Mexico. Your request must include:

  • Type of request: access, cancellation, rectification, opposition.
  • Name or company name.
  • Date of the request.
  • Detailed description of the personal data involved.
  • Contact method.
  • Signature of the requester.

The response will be sent to your email within 15 business days.

How can you revoke your consent to the use of your personal data?

You may revoke your consent at any time by sending your request to hola@satoritech.com.mx or visiting our offices. It must include:

  • A copy of an official ID.
  • A free-form letter stating your revocation.

Within no more than 20 business days, we will inform you whether your request is admissible.

How can you limit the use or disclosure of your personal information?

To limit the use of your personal information, you can:

  • Register with PROFECO's Public Registry to Avoid Advertising.
  • Ask to be added to the exclusion list “SATORITECH customer exclusion list” by emailing hola@satoritech.com.mx.

How can you learn about changes to this privacy notice?

This privacy notice may be modified due to legal, operational or business changes. We undertake to inform you through our website in the “Privacy Notice” section.

For more information, contact us at hola@satoritech.com.mx or visit our offices at General Anaya 100 Casa 8 A, Colonia El Campanario, Metepec, State of Mexico.

Protection of personal data, sensitive data and data obtained from Google

SATORITECH implements reasonable administrative, technical and organizational security measures to protect personal data, sensitive data and data obtained through Google services and APIs against unauthorized access, use, alteration, loss, destruction or disclosure.

The protection measures in place include:

  • Encryption of information in transit using secure TLS/HTTPS protocols.
  • Authentication and access controls on the systems that store or process personal information.
  • Role-based permissions under the principle of least privilege.
  • Access restricted exclusively to authorized personnel who need the information to perform their duties.
  • Password protection through secure cryptographic storage mechanisms.
  • Protection of credentials, secrets, access tokens and refresh tokens used to connect to third-party services.
  • Activity logs, monitoring and review of system access.
  • Regular updates of systems, applications and technology components.
  • Data backups and recovery procedures.
  • Procedures to identify, contain, investigate and respond to security incidents.

Staff, suppliers and collaborators who may have authorized access to personal information are bound by confidentiality obligations and may only use it for the purposes set out in this notice.

Although SATORITECH adopts reasonable measures to protect information, no electronic transmission or storage system can guarantee absolute security.

Processing of data obtained through Google APIs

When an application developed or operated by SATORITECH requests authorization to access information from a Google account, it will only request the permissions and data categories strictly necessary to provide the visible features requested by the user.

Information obtained through Google APIs:

  • Is used exclusively to provide or improve the application features requested by the user.
  • Is not sold to third parties.
  • Is not used for personalized advertising, retargeting, credit assessment or data brokering.
  • Is not used to develop, improve or train generalized artificial intelligence or machine learning models.
  • Is not shared with third parties, except with providers essential to operating the application, under confidentiality and security obligations, when required by applicable law, or when the user expressly authorizes it.
  • Is kept only for as long as necessary to provide the service, fulfill the stated purposes and meet applicable legal obligations.
  • Is deleted or anonymized when no longer needed, when the relationship with the user ends, or upon receiving a valid deletion request, unless there is a legal obligation to retain it.

Users can revoke the application's access at any time from their Google account security settings. They can also request deletion of their information and of the data associated with the Google integration by emailing hola@satoritech.com.mx.

SATORITECH's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Last updated: August 3, 2026.