PRIVACY POLICY

Pursuant to the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (the "LFPDPPP"), its Regulations (the "Regulations"), and the Privacy Notice Guidelines (the "Guidelines"), this Privacy Notice is issued under the following terms:

I. Data Controller

OREN ("OREN"), with its registered address at Presa Falcón 243, Ampliación Granada, Miguel Hidalgo, Mexico City, Mexico, is responsible for the collection, use, disclosure, storage, access, handling, utilization, transfer, and, where applicable, disposal of the personal data collected from its clients, prospects, suppliers, candidates, business partners, and any other individuals with whom it maintains a legal or commercial relationship (the "Data Subjects"), in accordance with the LFPDPPP, its Regulations, and other applicable legal provisions.

For any matter related to the protection of personal data, Data Subjects may contact the responsible department at: privacy@oren.mx.

II. Personal Data That May Be Collected

OREN may collect, directly or indirectly, the following categories of personal data:

a) Identification Data

  • Full name
  • Date of birth
  • Nationality
  • Signature
  • Official identification
  • Tax Identification Number (RFC)
  • CURP (Unique Population Registry Code)
  • Address
  • Marital status

b) Contact Information

  • Email address
  • Telephone number
  • Physical address
  • Corporate information
  • Official identification

c) Employment and Professional Information

  • Position or title
  • Company
  • Economic activity
  • Professional background
  • Curriculum vitae information
  • Academic background
  • Certifications

d) Financial and Asset Information

Where necessary for the engagement or provision of services:

  • Billing information
  • Banking information for payment purposes
  • Financial information related to specific projects

e) Information Obtained Through the Website

  • IP address
  • Browser information
  • Operating system
  • Cookies
  • Browsing patterns

OREN does not collect sensitive personal data unless strictly necessary for the provision of specific services and there is a legal basis permitting such collection.

III. Purposes of Data Processing

Personal data will be processed for the following purposes:

A. Primary Purposes

  • Identifying and understanding clients and prospects
  • Evaluating business opportunities
  • Preparing commercial proposals
  • Formalizing contractual relationships
  • Providing consulting services
  • Managing projects and client relationships
  • Processing payments and invoicing
  • Complying with legal and regulatory obligations
  • Managing recruitment and hiring processes
  • Responding to inquiries, requests, and requirements
  • Protecting OREN's legal interests

B. Secondary Purposes

Additionally, OREN may use personal data to:

  • Share publications and specialized content
  • Send invitations to events, seminars, or training sessions
  • Distribute newsletters
  • Conduct quality and satisfaction surveys
  • Share institutional information and updates regarding OREN

Data Subjects may object to the processing of their personal data for these secondary purposes at any time.

IV. Transfers of Personal Data

OREN may transfer personal data, without requiring additional consent where permitted by applicable law, to:

  • OREN affiliates and related entities
  • External consultants and strategic partners
  • Specialized firms collaborating on specific projects
  • Financial institutions
  • Technology providers and cloud service providers
  • External auditors
  • Competent administrative or judicial authorities

In all cases, recipients of personal data shall be subject to confidentiality and data protection obligations equivalent to those imposed by OREN. OREN does not sell or commercialize personal data.

V. ARCO Rights

Data Subjects may exercise their rights to:

  • Access
  • Rectification
  • Cancellation
  • Opposition

Likewise, Data Subjects may revoke their consent for the processing of personal data when legally permissible.

Requests must be submitted to:

privacy@oren.mx

and must include:

  • Name of the Data Subject
  • Documentation proving identity
  • Clear description of the request
  • The personal data with respect to which the rights are being exercised

OREN will respond within the timeframes established under the LFPDPPP.

VI. Security Measures

OREN implements reasonable physical, administrative, technical, and organizational measures to protect personal data against damage, loss, alteration, destruction, or unauthorized access.

OREN also maintains internal confidentiality controls regarding all strategic, financial, corporate, operational, and commercial information provided by its clients.

VII. Use of Technological Tools and Artificial Intelligence

To improve operational efficiency and the provision of professional services, OREN may utilize technological tools, document analysis platforms, automation systems, artificial intelligence technologies, and cloud storage services.

Under no circumstances will such tools be used in a manner that results in the unauthorized disclosure of confidential information. OREN implements reasonable security, anonymization, and access-control measures whenever applicable.

VIII. Amendments to This Privacy Notice

OREN may amend this Privacy Notice at any time to comply with legal, regulatory, operational, or business changes.

Any amendments will be made available through OREN's official website and shall become effective upon publication.

IX. Governing Law

This Privacy Notice shall be governed by and construed in accordance with the laws of the United Mexican States, particularly the Federal Law on Protection of Personal Data Held by Private Parties and other applicable legal provisions.