Privacy Policy

Identity of the Data Controller

This Privacy Policy applies to the website vradelaxmx.com, operated by Vradela Xalapa, a training center in fair trade and solidarity economy for artisan producer cooperatives, located at José María Morelos 76-Local 11, Xalapa, Veracruz, Mexico. Contact email: info@vradelaxmx.com. Phone: +52 228 817 7486.

This Policy is issued in compliance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), published in the Diario Oficial de la Federación on July 5, 2010, and its Regulations. As required by Article 15 of the LFPDPPP, this document constitutes the Privacy Notice (Aviso de Privacidad) of the data controller.

Personal Data We Collect

We collect personal data only when you voluntarily provide it through our contact form. The data we may collect includes:

• Full name
• Email address
• Phone number
• Subject of inquiry
• Message content

We do not collect sensitive personal data as defined under Article 3, Section VI of the LFPDPPP. We do not collect financial data, biometric data, health information, or data revealing racial or ethnic origin, political opinions, religious beliefs, or sexual preferences.

We also collect non-personal technical data automatically through cookies and similar technologies, as described in our Cookie Policy.

Purposes of Data Processing

Your personal data is collected and processed for the following primary purposes:

• To respond to inquiries submitted through our contact form
• To provide information about our training programs for artisan cooperatives
• To communicate with you regarding your inquiry

Secondary purposes, which are not necessary for the relationship requested but may be used if you do not object, include:

• To send informational communications about our training activities, when you have expressed interest

If you do not wish your data to be processed for secondary purposes, you may indicate this by sending an email to info@vradelaxmx.com with the subject line "Secondary Purposes Objection."

Legal Basis for Processing

Processing of your personal data is based on your consent, provided when you submit the contact form and accept this Privacy Policy. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact us at info@vradelaxmx.com.

In some cases, processing may be necessary to comply with legal obligations applicable to Vradela Xalapa under Mexican law.

Data Transfers and Third Parties

We do not sell, rent, or trade your personal data to third parties. We may share your data with service providers who assist us in operating this website and communicating with you, such as email service providers. These providers are contractually bound to process your data only on our instructions and in compliance with the LFPDPPP.

We do not transfer your personal data internationally. All data is processed within Mexico or by providers operating under equivalent data protection standards.

We may disclose your data when required to do so by law, court order, or competent authority, in accordance with applicable Mexican legislation.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Inquiry data is generally retained for a period of two years from the date of last contact, after which it is securely deleted or anonymized.

Your Rights (ARCO Rights)

Under the LFPDPPP, you have the following rights with respect to your personal data:

• Access: The right to know what personal data we hold about you and how it is used.
• Rectification: The right to correct inaccurate or incomplete personal data.
• Cancellation: The right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Opposition: The right to object to the processing of your personal data for specific purposes.

To exercise any of these rights, send a written request to info@vradelaxmx.com with the subject line "ARCO Rights Request." Your request must include: your full name, a copy of an official identification document, a clear description of the right you wish to exercise, and any other information that may facilitate locating your data. We will respond within 20 business days as required by Article 32 of the LFPDPPP.

Security Measures

We implement administrative, technical, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction, in accordance with Article 19 of the LFPDPPP. These measures include secure transmission protocols (HTTPS) and access controls on systems that store personal data.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies. For detailed information about the types of cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy. You can manage your cookie preferences at any time using the "Cookie preferences" link in the bottom-left corner of any page.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically. Continued use of the website after any changes constitutes acceptance of the updated Policy.

Regulatory Authority

If you believe your data protection rights have been violated, you have the right to file a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI), the competent supervisory authority in Mexico. For more information, visit www.inai.org.mx.

Contact

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, contact us at:

Email: info@vradelaxmx.com
Phone: +52 228 817 7486
Address: José María Morelos 76-Local 11, Xalapa, Veracruz, Mexico