Privacy Policy

This Notice describes how we collect and use the personal data you provide to us, which will be necessary, appropriate, and relevant in relation to the specific purposes outlined in this document.

It also describes the types of data collected, as well as your options to limit the use of such data and the procedure for exercising your ARCO rights, in compliance with the principles of Legality, Consent, Quality, Information, Purpose, Loyalty, Proportionality, and Responsibility established by law.

Responsible for the protection of your personal dataAnnafiori Spazzi S.A. de C.V. (Annafiori), located at Av. Nuevo León 291 local A, Colonia Escandón, Miguel Hidalgo, CDMX 11800 Mexico, is responsible for the processing (use) of your Personal Data.

Our Data Protection Department Head or Area:

Ana Beatriz Barri Colin Address: Av. Nuevo León 291 local A, Colonia Escandón, Miguel Hidalgo, CDMX 11800, Mexico Email: [email protected] Phone: (55) 26147651 and 26143459

For what purposes do we collect and use your personal data?

Your personal data will be used for the following purposes:

Provide the requested products. Provide the requested and/or contracted services. Respond to your requests for information, attention, and service. Record keeping and contractual relationship file for the follow-up of future services. Financial management, billing, and collection. Comply with the obligations and commitments we have contracted with you.

Additionally, your personal data may be used for:

Promotion and marketing of products and services. Offer new products and services tailored to your interests and needs. Notify you about new services or products related to those already contracted or acquired. Newsletters and communications about our organization.

What personal data do we obtain and from where?

For the purposes mentioned above, we may collect your personal data in various ways:

When you visit our website or use our online services. By phone or fax. When you provide them to us personally. When we obtain information through other publicly accessible sources allowed by law (telephone or work directories, websites, etc.).

Personal data we collect

Contact information (Name, Email, Address, Phone, Cell, Fax) Identity documentation (Voter ID, Passport, Driver’s License, Military Card, or Professional Certificate) Financial information and payment methods (Cardholder’s name, Card number, expiration date, and security code). In transfer and deposit payments: Account number and Bank Tax information (RFC, Billing Address), Name, phones, and address of a third party to whom a floral arrangement will be sent.

Use of cookies, web beacons, and JavaScript

A cookie is information that a website stores on your computer through the use of a browser. A cookie allows websites to record your internet browsing activities – for example, which pages and content you viewed, when you visited them, what you searched for, and if you clicked on any resources. The data collected by cookies can be combined to create a profile of your internet activities.

Web beacons, along with web metrics JavaScripts, allow storing information about the usage patterns of our website. We inform you that we use these tools to obtain statistical information such as:

Type of browser and operating system, internet pages consulted, origin of the visit, access IP address, time spent on our site, among other statistical data. Cookies, JavaScript, and other tracking technologies can be disabled; however, disabling them may cause the website or some of its functionalities not to perform properly.

To review and, if necessary, disable these settings, use the ‘Help’ tab or look for the “Tools” menu and the “Options” or “Privacy” settings in your browser. From there, you can delete cookies or control when you allow them to be installed. Some browsers allow you to install add-on software tools to block, delete, or control cookies. Generally, security programs include options to facilitate cookie control.

How to Access, Rectify, Cancel, or Oppose the use and processing of your personal data (ARCO Rights)?

You have the constitutional right to access and know the personal data we possess, as well as details of their treatment and use. You also have the right to rectify and correct them if they are inaccurate or incomplete, cancel and delete them when you consider that they are not required for any of the purposes indicated in this privacy notice, or when they are being used for unauthorized purposes or the legal or service relationship has ended. Additionally, you can oppose the processing of your data for specific purposes.

The mechanisms implemented for the exercise of your ARCO Rights, as well as the deadlines, information, and documentation that your request should contain, are specified in the Holder’s Rights section (10) located in this document.

How can you limit the use or disclosure of your personal data?

If you do not wish to receive messages from us that are not essential for the specified purposes, the mechanisms implemented for this purpose, as well as the deadlines, information, and documentation that your request should contain, are specified in the Holder’s Rights section (10) located in this document.

How to revoke consent for the processing of your personal data?

If you wish to revoke the consent you granted us for the use of your personal data, the mechanisms implemented for this purpose, as well as the deadlines, information, and documentation that your request should contain, are specified in the Holder’s Rights section (10) located in this document.

Transfer of personal data

We inform you that the following transfers do not require your consent, but the law requires that you be informed of them.

In this sense, your personal data may be shared with:

Public sector entities, to comply with current legislation, as well as the legal relationship with the Holder. Public entities dedicated to the provision of medical diagnosis, healthcare provision, medical treatment, or healthcare service management (Hospitals, doctors, laboratories), to carry out all necessary procedures in case of a medical emergency.

Modifications to the privacy notice

We reserve the right to make modifications to this Privacy Notice at any time, to address legislative developments, internal policies, or new requirements to comply with the intended purposes. These modifications will be available to the Holders at the website address: www.annafiori.com.mx

Holder’s Rights

Annafiori Spazzi S.A. de C.V. has implemented the following Universal Format for the Exercise of Holder’s Rights regarding their Personal Data. Instructions:

Download the Universal Format here (PDF). Carefully read the requirements and instructions described in the format. Send the request to the email: [email protected] Confirm the receipt of your request by phone: (55) 26147651 and 26143459

Where can you submit complaints or reports for the improper treatment of your personal data?

If, after exercising your Data Protection Rights with Annafiori Spazzi S.A. de C.V. through the mechanisms established in this Privacy Notice, you believe that your right to personal data protection has been violated by any conduct or omission on our part, or you have evidence that there is a violation of the provisions of the LFPDPPP in the treatment of your personal data, we invite you to contact us again to exhaust all internal procedures to fully satisfy your request. If this is not the case, you may file the corresponding complaint with the IFAI. For more information, visit: www.ifai.org.mx