Your privacy is very important to us, which is why we are making this privacy notice available to you so that you can be aware of the personal information that is collected, its purposes, its processing, how it is safeguarded, and the methods for exercising your ARCO rights.

MANUFACTURERA DE CALZADO MONTECARLO S.A. DE C.V., which for the purposes of this privacy notice will be identified as having its address at Avenida de los Industriales number 216, Fraccionamiento Industrial Julián de Obregón, León, Guanajuato, Mexico, is the RESPONSIBLE PARTY for the processing of your personal data; therefore, based on the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations, we inform you of the following:

PURPOSES

The purposes of information processing indicate why we require your personal information, so if you do not wish to provide the information requested, we will be unable to offer you the service you deserve.

The purposes for obtaining the personal data we collect from you through analog and digital media are as follows:

– Generating a user account for the use of our platform.

– Processing the footwear order of your choice.

– Processing the payment for your order in our online store.

– Generating the corresponding invoice.

– Maintaining a communication channel with our customers.

– Processing the shipment request for the footwear of your choice.

SECONDARY PURPOSES

Conducting customer satisfaction surveys regarding our services.

Informing you about promotions, discounts, and advertising regarding our company, LALIC DERIEN.

DATA COLLECTED

When you create a user account on our online footwear sales platform, the following personal information will be collected:

– Name

– Email address

– Telephone number

When you make an online purchase of any of our products, the following additional data will be requested:

– Product delivery address

Likewise, at the time an invoice is issued, the following additional data will be requested:

– Tax address

– RFC (Tax ID)

– Zip code

Furthermore, we inform you that our website, www.lalicderien.com, collects cookies and beacons, which are used to provide you with a better browsing experience. For more information about these concepts, we invite you to consult the following link: www.allaboutcookies.org.

The aforementioned data are protected by physical, technical, and administrative security measures on company servers, guaranteeing their confidentiality, integrity, and availability.

DATA TRANSFER

We inform you that LALIC DERIEN transfers your personal information to the Tax Administration Service (SAT) and its certifying entities; for this, your consent will not be required in accordance with the provisions of Article 37, Section I, of the Federal Law on the Protection of Personal Data Held by Private Parties.

Likewise, we inform you that LALIC DERIEN has chosen payment platforms that comply with the highest information security standards; therefore, when making a payment, your information regarding name, address, and telephone number will be shared with the payment platform you have chosen, which may be Conekta and/or PayPal.

Please note that banking data is not collected by our platform, and we recommend that you review the privacy policies of your chosen payment platform, where you can exercise your rights of Access, Rectification, Cancellation, and Opposition (ARCO) via the following links:

– Conekta: https://conekta.com/legal/privacy

– PayPal: https://www.paypal.com/mx/webapps/mpp/ua/privacy-full?locale.x=es_MX

Additionally, when generating an order, in order for us to send you the product at the best market price, we use the platform mienvio.mx, with whom we will share your personal data consisting of your name, address, and telephone number. We suggest you review their privacy notice so that you may exercise your rights of Access, Rectification, Cancellation, and Opposition (ARCO) at the following link:

– https://www.mienvio.mx/privacy.html

EXERCISING ARCO RIGHTS

In all legally applicable cases, you may at any time exercise your rights of Access, Rectification, Cancellation, and Opposition (ARCO) through the procedures we have implemented.

The corresponding request must meet the requirements established in current legislation and be sent in writing to our Personal Data Department at the address: Avenida de los Industriales number 216, Fraccionamiento Industrial Julián de Obregón, León, Guanajuato, Mexico. The request must contain and be accompanied by the following:

– Your name and address or another means for us to communicate the response to your request.

– The documents that prove your identity or, if applicable, your legal representation.

– A clear and precise description of the personal data regarding which you seek to exercise any of the ARCO rights; and

– Any other element or document that facilitates the location of the personal data.

The Responsible Party will communicate the decision reached within a maximum period of twenty business days, counted from the date the request was received. If the request is found to be valid, it will be made effective within fifteen business days following the date on which the Responsible Party communicates the response. In the event that the information provided in your request is erroneous or insufficient, or if the necessary documents to prove your identity or the corresponding legal representation are not provided, the Responsible Party, within five business days following the receipt of your request, will require you to correct the deficiencies in order to process the request. In such cases, you will have ten business days to respond to the requirement for correction, counted from the day after you received the request. The request will be considered not submitted if you do not respond within that timeframe.

You are responsible for keeping your personal data held by the Responsible Party updated. Therefore, you guarantee and are liable, in any case, for the truthfulness, accuracy, validity, and authenticity of the personal data provided, and you commit to keeping them duly updated, communicating any changes to the Responsible Party.

REVOCATION OF CONSENT

You may revoke your consent for the processing of your personal data, without retroactive effect, in all cases where such revocation does not make it impossible to fulfill obligations derived from a valid legal relationship between you and the Responsible Party.

The procedure for the revocation of consent, if applicable, shall be the same as that established in the immediately preceding section for the exercise of ARCO rights.

LIMITATIONS ON THE USE AND DISCLOSURE OF YOUR PERSONAL DATA

You may limit the use or disclosure of your personal data by directing the corresponding request to our Personal Data Officer at the address located at Avenida de los Industriales number 216, Fraccionamiento Industrial Julián de Obregón, León, Guanajuato, Mexico.

The requirements to prove your identity, as well as the procedure to address your request, will be the same as those indicated in the "Exercising ARCO Rights" section. The Responsible Party has the means and procedures to ensure the inclusion of some of your data in its own exclusion lists, when you expressly request your inclusion in them. The Responsible Party will provide registered holders with the corresponding proof of registration.

SECURITY MEASURES

Because the protection of your personal data and your privacy is very important to us, LALIC DERIEN complies with all technical, administrative, and physical security measures to safeguard your personal information against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

MODIFICATIONS TO THE PRIVACY NOTICE

The Responsible Party may modify, update, extend, or in any other way change the content and scope of this privacy notice at any time and at its sole discretion.

If the privacy notice undergoes substantial changes, you will be notified via the email address you provided, and it will also be published on our website, www.lalicderien.com.

Last modification March 12, 2020. Version 1.0