This Privacy Notice is hereby issued in compliance with the Federal Law on the Protection of Personal Data in Possession of Private Parties, published in the Official Gazette of the Federation on March 20, 2025 (the “Law”).
I. Personal Data Controller
Del Valle-Núñez y Asociados, S.C. (“DVNA”), whose address is located at Goldsmith No. 37 Desp. 803, Colonia Chapultepec Polanco, Mexico City, C.P. 11560 and whose telephone number is +52 (55) 5281 1085., hereby informs you that your personal data will be processed only for the purposes indicated below.
II. Personal Data
The personal data to be processed by DVNA consist of information relating to the data subject, which may include the data subject’s full name, email address, physical address, telephone numbers, place and date of birth, marital status, Federal Taxpayer Registry number (RFC), Unique Population Registry Code (CURP), and other information strictly necessary for the purposes described below; however, under no circumstances will DVNA collect or process personal data deemed “sensitive” under the Law.
If DVNA does not have your personal data, it will not be able to use them; therefore,DVNA will have no liability of any kind arising from the processing thereof.
III. Purposes for Processing Personal Data
DVNA may collect your personal data without the intent to disclose them or use them for commercial purposes, and such data will be used solely for the following purposes:
• To carry out transactions and acts that may potentially be entered into with DVNA.
• To conduct surveys of any kind.
• To address any matter arising from the relationship you may have with DVNA.
• To promote the accounting, legal, and corporate professional services offered by DVNA.
• To communicate with its clients, suppliers, employees, or any other person regarding any matter related to their personal data or this Privacy Notice.
• To disseminate information that DVNA considers of interest.
• To carry out any other activity necessary to accomplish the foregoing purposes.
Personal data will be safeguarded under the strictest confidentiality and may not be used for purposes other than those indicated above, unless this Privacy Notice is amended in accordance with Section XI hereof.
Once the purpose for which the personal data were processed has been fulfilled, such data will be blocked solely for the purpose of determining possible liabilities in connection with their processing, until the applicable statutory or contractual limitation period expires. During that period, the personal data may not be processed. Once the period has expired, the data will be cancelled from the corresponding database and, where applicable, the physical records will be destroyed.
IV. Collection of Personal Data
When collecting personal data, DVNA observes all principles established by the Law, including lawfulness, purpose, fairness, consent, quality, proportionality, information, and accountability.
Personal data will be collected directly from the data subject, in person, or by any electronic, optical, audio, visual, graphic, or other legally permitted technology.
The information that DVNA receives and stores from internet pages when you interact with DVNA’s websites is primarily technical information, such as your Internet Protocol address, your computer’s operating system and browser type, the address of a referring website, where applicable, and the path you follow while browsing the website. DVNA uses “cookies” to recognize you when you use or return to its websites. A “cookie” is a small text file that a website or email may record in your browser and store on your hard drive. You may choose to browse
In addition, DVNA may obtain information about the data subject from other sources permitted by law, such as telephone or employment directories, job boards, references from other companies or individuals, and public databases of any public or private entity or agency, among others.
IV BIS. Video Surveillance System
DVNA’s facilities are equipped with a video surveillance system. The presence of cameras is disclosed through visible notices. Through this system, DVNA may capture images of visitors, clients, suppliers, personnel, and other persons who enter or remain in monitored areas.
The personal data processed through the video surveillance system consist of images of individuals and the technical data associated with the recording: date, time, and camera location. No sensitive personal data are collected through this system.
The images will be processed exclusively for the following purposes:
• To monitor access to the facilities.
• To protect the safety and integrity of persons, facilities, and property.
• To prevent, detect, and document incidents, risk situations, or possible unlawful conduct.
• To respond to legally substantiated requests from competent authorities and, where applicable, to exercise or defend the rights of DVNA or third parties.
The foregoing purposes require the data subject’s consent, which may be given tacitly. If, after this Privacy Notice has been made available, the data subject does not express a contrary intention, consent will be deemed granted. The images will not be used for secondary, marketing, advertising, or commercial prospecting purposes.
Access to recordings will be restricted to authorized personnel. Images will be retained only for the period necessary to fulfill the stated purposes and will subsequently be deleted, unless they must be preserved pursuant to a legal obligation, a request from an authority, or in connection with an incident, claim, or proceeding.
DVNA may disclose recordings to competent authorities when a legally substantiated request exists or when such disclosure is permitted by applicable law. No transfers of recordings requiring the data subject’s consent will be made.
To restrict the use or disclosure of images, object to their processing, revoke consent, or exercise the rights of access, rectification, cancellation, or opposition, the data subject may use the means and procedures described in Sections V, VII, and IX of this Privacy Notice, including the email address:
contacto@dvna.com.mx. and
+52 (55) 5281 1085.
The simplified Privacy Notice for video surveillance is available at the entrances to the facilities. The Comprehensive Privacy Notice may be consulted at www.dvna.com.mx/privace.html
V. Options and Means for Restricting the Use or Disclosure of Personal Data
DVNA has the necessary and sufficient administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, use, access, or unauthorized processing.
Personal data are safeguarded in databases and computer equipment equipped with the security measures necessary to prevent information leaks. Physical and logical access controls, environmental controls, intrusion prevention systems (IPS and firewalls), antivirus protection tools, and web filtering are among the tools used to maintain the security of data in
The information security tools mentioned in the preceding paragraph are supported by an internal information security policy that explains to employees the security considerations they must observe when using an information system, and such policy is reinforced on an ongoing basis.
Accordingly, you are hereby informed of the following options for requesting a restriction on the use or disclosure of your personal data covered by this Privacy Notice:
a) By a written request sent to the Personal Data Processor (at the address indicated in Section VI below), or by email to contacto@dvna.com.mx
b) By telephone, by contacting the Personal Data Processor at +52 (55) 5281 1085.
VI. Personal Data Processor
The Personal Data Processor at DVNA is the Managing Partner, whose address is Goldsmith No. 37, Suite 803, Colonia Chapultepec Polanco, Mexico City, Postal Code 11560, and whose business hours are Monday through Friday, from 8:00 a.m. to 5:00 p.m.; email: contacto@dvna.com.mx; direct telephone: +52 (55) 5281 1085.
VII. Means of Exercising the Rights of Access, Rectification, Cancellation, or Opposition (“ARCO”), in Accordance with the Law
You may exercise your ARCO rights by contacting the Personal Data Processor directly by email at contacto@dvna.com.mx
The ARCO request must contain and be accompanied by the information and documents specified in Article 28 of the Law, including:
• The name and email address of the data subject, or of the data subject’s legal representative, for receiving notices.
• An official identification document of the data subject or, where applicable, of the data subject’s legal representative, including a power of attorney in the latter case.
• A clear and precise description of the personal data in respect of which an ARCO right is to be exercised, as well as the ARCO right that the data subject wishes to exercise.
• Any other information or document that facilitates the location of the personal data, as well as any other document required by the legislation in force when the request is submitted.
DVNA is not required to cancel personal data when any of the circumstances established by the Law applies, including: (i) the data relate to the parties to a private, corporate, or administrative contract and are necessary for its development and performance; (ii) the data must be processed pursuant to a legal provision; (iii) cancellation would hinder judicial or administrative proceedings related to tax obligations, the investigation and prosecution of crimes, or the enforcement of administrative penalties; and (iv) the data are necessary to protect the legally protected interests of the data subject, to carry out an action in the public interest, to comply with a legal obligation acquired by the data subject, or are processed for medical prevention or diagnosis or the management of health services, provided that such processing is carried out by a health professional subject to a duty of confidentiality.
For additional information regarding the exercise of your ARCO rights, you may contact the Personal Data Processor directly using the contact information provided in Section VI of this Privacy Notice.
VIII. Transfers of Personal Data
Personal data will not be disclosed or shared with third parties, provided that companies belonging to the same corporate group as DVNA that need the personal data for the purposes indicated above will not be considered third parties. The only transfer of data to third parties will, in all cases, be made to comply with legal obligations.
IX. Revocation
The data subject may revoke consent to the processing of personal data at any time. For this purpose only, the data subject must send a written request to the Personal Data Processor, either by courier to the physical address or by email to the address specified in Section VI of this Privacy Notice, and must confirm receipt thereof.
DVNA has a maximum period of 20 (twenty) business days to inform you whether the revocation request is granted. If granted, the revocation will take effect within 15 (fifteen) business days following the date on which the response is sent to the email address you provide for such purpose.
X. Data Subject’s Consent
The data subject will be deemed to have consented to the processing of the data subject’s personal data, provided that the data subject has not expressed opposition by written notice in accordance with Section VII of this Privacy Notice.
XI. Changes to the Privacy Notice
DVNA reserves the right to amend this Privacy Notice at any time. It will remain available to data subjects at DVNA’s offices and on the website: www.dvna.com.mx/privace.html
Last Updated: September 2026.
