PRIVACY NOTICE

COMPREHENSIVE PRIVACY NOTICE

1. Identity and address of the data controller In compliance with the provisions of Articles 15, 16, and 17 of the Federal Law on Protection of Personal Data Held by Private Parties (“LFPDPPP”), its Regulations, and other applicable provisions, Recargas Multitae, S. de R.L. de C.V. (hereinafter, the “Controller” or “RECARGAS MULTITAE”), with Federal Taxpayer Registry number RMU190207KM1, and address at Avenida Circuito Circunvalación Poniente number 10, interior 404, Colonia Ciudad Satélite, Naucalpan de Juárez, State of Mexico, C.P. 53100, hereby informs you of this Comprehensive Privacy Notice (the “Notice”), which outlines the processing of personal data collected from its clients, users, and related third parties.

For any matter related to the exercise of personal data protection rights, you may contact the RECARGAS MULTITAE Data Privacy Office via email at: contacto@recargasmultitae.com.

2. Definitions For the purposes of this Notice, the following terms shall be understood as:

  • Data Subject: The individual to whom the personal data corresponds.

  • Controller: The legal entity that decides on the processing of personal data (Recargas Multitae).

  • Processor: The individual or legal entity that processes personal data on behalf of the Controller.

  • Processing: Any operation performed on personal data (collection, use, storage, transfer, etc.).

  • Transfer: Any communication of data made to a person other than the Controller or the Processor.

  • ARCO Rights: The set of rights of Access, Rectification, Cancellation, and Opposition provided for in the LFPDPPP.

3. Personal data collected The Controller may collect and process the following categories of personal data:

  • Identification: full name, date of birth, gender, nationality, CURP, RFC.

  • Contact: address, email, landline or mobile phone number.

  • Work or commercial: transaction history, consumption patterns, use of top-up or payment services.

  • Financial and payment: bank details, account number, CLABE, card details (if applicable).

  • Electronic: IP address, device identifiers, operating system, browser, approximate location.

  • Voluntarily provided data: information shared in forms, chats, emails, or calls with support.

  • Sensitive data: RECARGAS MULTITAE does not collect sensitive personal data (health, religion, sexual orientation, etc.). In exceptional cases, express written consent will be requested from the Data Subject.

4. Purposes of processing 4.1 Primary (necessary) purposes:

  • To identify and register the Data Subject as a client or user.

  • To create and manage user accounts on the application and/or website.

  • To process airtime top-up and bill payment transactions.

  • To issue tax receipts and invoices.

  • To validate the identity and information provided.

  • To manage clarifications, complaints, cancellations, or support requests.

  • To comply with applicable legal, tax, and regulatory obligations.

  • To respond to requests from competent authorities.

4.2 Secondary (optional) purposes:

  • To create consumption profiles and analyze habits.

  • To send promotional information, advertising, or news about new services.

  • To invite participation in surveys, promotions, sweepstakes, or events.

  • To conduct market research and measure service quality.

The Data Subject may refuse the processing of their data for secondary purposes by sending a request to contacto@recargasmultitae.com.

5. Transfers of personal data RECARGAS MULTITAE may carry out national or international transfers of your personal data without the need for the Data Subject’s consent, in the cases provided for by Article 37 of the LFPDPPP, such as:

  • To competent authorities who require it in the exercise of their functions.

  • To third-party providers of technological, financial, or information storage services.

  • To banking institutions or payment processors to execute requested transactions.

In any other case, prior and express consent will be requested from the Data Subject.

6. Security measures The Controller adopts administrative, technical, and physical security measures to protect personal data against damage, loss, alteration, destruction, or unauthorized access, including but not limited to:

  • Secure servers and encryption of sensitive information.

  • Access restrictions for authorized personnel.

  • Cloud backup protocols with certified providers.

  • Internal confidentiality policies and staff training.

7. Data retention Personal data will be kept for a period of up to 10 years from the last transaction made, or for the period required by applicable tax and regulatory provisions. Once this period is concluded, the data will be securely deleted.

8. ARCO Rights and other rights The Data Subject may at any time exercise their ARCO rights, as well as the rights to revoke consent and limit the use or disclosure of their data. Procedure:

  1. Submit a written request to the email address contacto@recargasmultitae.com.

  2. Include your full name, identity documents, a clear description of the rights to be exercised, and the data to be located.

  3. The Controller will respond within a maximum period of 20 business days.

  4. If the request is deemed appropriate, it will be made effective within the following 15 business days.

9. Use of cookies and similar technologies The website and application use essential cookies to enable navigation, as well as analytics cookies to improve the user experience. The latter can be disabled from the browser settings.

10. Responsibilities of the Data Subject The Data Subject is responsible for:

  • Ensuring the truthfulness, accuracy, and timeliness of the data they provide.

  • Notifying the Controller of any changes to their data.

  • Refraining from providing third-party data without their express consent.

11. Applicable law and jurisdiction This Notice is governed by the LFPDPPP, its Regulations, and other applicable legal provisions in the United Mexican States. For the interpretation and fulfillment of this Notice, the parties submit to the jurisdiction of the competent courts in Mexico City, expressly waiving any other jurisdiction that may correspond to them.

12. Modifications to the Notice RECARGAS MULTITAE may modify, update, or supplement this Privacy Notice at any time. Such changes will be notified by publication on the official website: [enlace sospechoso eliminado].

13. Acceptance The use of RECARGAS MULTITAE’s services implies the express acceptance of this Privacy Notice.

Contact us and start selling electronic top-ups