This privacy notice corresponds to the vp360.com.mx website and explains what personal data VP 360, SA de CV collects about its clients and their suppliers and how we use it.

We update this privacy notice from time to time in response to changes in applicable laws and regulations, our processing practices, and the products and services we offer, so they may be changed at any time at VP360°'s discretion. When changes are made, we will update the "Last Updated" date at the bottom of this page. Please review this privacy notice periodically for updates.

The legal entity called “VP360, S.A. de C.V.” , a civil society incorporated in accordance with the laws of the Mexican Republic, with address at Tecoyotitla, number 412, arenal building, ground floor, Col. Ex Hacienda de Guadalupe Chimalistac, Álvaro Obregón, CP 01050, Mexico City , is the owner of each and every one of the rights to the brand and trade name “VP360°” and is responsible for collecting and processing the personal data of customers and suppliers who use the service provided by VP360°.

VP360° is a technological platform based on data science (big data and machine learning) that safely groups together and/or consults in real time various sources of information in the public domain that are available through web pages managed by different authorities as well as third parties authorized by the Mexican authorities, and thanks to its powerful real-time search engine integrated by different algorithms, models and expandable modules, it allows users to obtain data that may be useful for strengthening internal monitoring controls and regulatory compliance (preventive and corrective) of its client and supplier portfolio, as well as any other business relationship.

The services provided by VP360° are basically related to the periodic consultation of specific information on the Internet as part of online data processing.

Consequently, it is a tool that provides risk analysis services to strengthen the internal controls for monitoring and regulatory compliance (preventive and corrective) of its clients and their suppliers, as well as for its own control and internal regulatory compliance.

Personal data we collect

The personal information that is collected for the provision of the service through VP360° is: official and commercial name of the contracting party, code of the Federal Taxpayer Registry of the contracting party, name and code of the Federal Taxpayer Registry of the legal representative, fiscal address of the contracting party, email, mobile phone number, articles of incorporation and its modifications, birth certificate, proof of address, copy of official identification, power of attorney of the legal representative, proof of tax status, compliance opinions (SAT, IMSS and INFONAVIT) , tax returns, financial statements, bank account statements, curriculum vitae, photographic evidence of the fiscal domicile, geolocation and/or georeferencing, unique population registration key and others at the request of the associated member with whom the VP360° member is related.

This personal information will be collected through the website once the user has their registration and access profile and through their interaction on the platform.

From Associate Members: We collect your personal data when your organization has provided us with such personal data in connection with the services provided to your organization by VP360°.

We also collect information about provider organizations from publicly available sources and screening service providers and combine it with other information we have. This sometimes includes information about directors or persons associated with or working at a supplier organization and therefore could include your personal data.

If you pay for our services with a credit or debit card in your name directly, we do not store your card information since payment processing will depend on your bank portal.

When paying for our services using a credit or debit card in your name, we are using the personal data associated with the card because it is necessary for the execution of the contract that we have concluded with your organization.

When you provide your credit or debit card information to pay for our services, we share this information with banks and our payment transaction providers.

From VP360° members: we collect your information when one of our associate members, who is in turn a client of yours, has provided it to us for consultation and analysis purposes for the prevention of commercial and reputational risks, for the purposes of fiscal and commercial good practices.

How we use your personal data

When we use personal data provided by buying or supplying organizations to provide our services to them, we do so because it is necessary for the provision of the service for which your organization has registered or subscribed, and the contract we have entered into with you. When we collect personal data provided by buying organizations that wish to interact with their supplier or recruitment organization, we do so because it is in our legitimate interest to invite supplier organizations to become suppliers to our buying organisations. When we collect personal data from publicly available sources or screening service providers, we do so because it is in our legitimate interest to provide our associated members with information that helps them identify suitable suppliers and risks in their supply chain.

The personal information collected is used for consultation purposes in terms of tax compliance and good business practices; Above all, to provide greater confidence on the part of suppliers to their clients and thus prevent risks and avoid damages to the recipients of the goods and services provided by suppliers. Thus, VP360° members authorize VP360° to provide their information to associated members with whom they have commercial relations or potentially may contract commercial relations. In this line is that, for service reasons, in case of the VP360° member's refusal to provide their personal data and the handling indicated here, the service given by VP360° cannot be provided since the nature of the service requires the use and handling of information as has been indicated here.

Therefore, the holders of this information accept, when contracting the service, that VP360° safeguards and transfers their data for the aforementioned purposes, observing due confidentiality and information security practices at all times.

In addition, the associate member and VP360° member accept that their information will be collected in a database with exclusive access to the VP360° management team and that it will integrate an additional source of information to those that VP360° already has; same that will have this information in its safekeeping with the appropriate computer security measures and confidentiality practices.

We also share your data with service providers and subcontractors of our company who process data on our behalf. This includes, for example, cloud service providers such as Microsoft and Amazon Web Services. In such cases, our service providers and subcontractors are data processors and may only use the data in accordance with our instructions and not for any other purpose. This and other obligations are agreed in the contract we enter into with them.

We may be required to share your data to comply with applicable laws or valid legal process, such as in response to a court order or with government or law enforcement agencies.

In the event that the owner of the information wishes to revoke the permission given to provide their information to associate members or potential clients of theirs, as well as to limit the use and disclosure of their information, they must request it by written to VP360° through the visible email on the website, also resulting in the early termination of the contract for the agreed services.

You have at all times the right to know what personal data we have about you, what we use it for and the conditions of use we give it (access). Likewise, it is your right to request the correction of your personal information in case it is outdated, inaccurate or incomplete (rectification); Similarly, you have the right to have your information removed from our records or databases when you consider that it is not being used properly (cancellation); as well as to oppose the use of your personal data for specific purposes (opposition).

The foregoing may be done by written through the email visible on our website, in which the owner or legal representative of the owner must indicate / accompany:

• The name of the owner and email to communicate the response to your request.
• The documents that prove the identity or, where appropriate, the legal representation of the owner.
• The clear and precise description of the personal data with respect to which one seeks to exercise any of the aforementioned rights.
• Any other element or document that facilitates the location of personal data.

In the case of requests for rectification of personal data, the owner must indicate, in addition to what is indicated above, the modifications to be made and provide the documentation that supports their request.

The response will be sent by email within a period not exceeding 20 days from the day the request was received.

Finally, the associate member and VP360° member authorize VP360° to collect information for marketing purposes and for service improvement purposes.

How long we keep your data

We will retain personal data provided to us by supplier and buyer organizations for as long as necessary to provide our services to them. Where we rely on our legitimate interests or your consent to process your personal data, we will retain your personal data until you object to our processing or withdraw your consent.

We will also retain personal data where necessary to comply with our legal obligations, resolve disputes and enforce agreements.

We do not retain credit or debit card information after payment is made.

Please note that we need to maintain the contact details of people in supplier and buyer organizations for the provision of the service and the contract we have entered into.

In the event that the associate member or VP360° member wishes to modify or rectify their personal data and information provided at the beginning of the contract, they may do so by written through the email visible on the website; Therefore, they are obliged to keep their personal information permanently updated.

How we protect your personal data

The security and confidentiality of the data that users provide when contracting the online service will be protected with an SSL certificate that allows secure business transactions encoded in base 64 URLs and we operate with a JWT API connection standard - ERP; data encryption for access credentials; we implement a CSRF Token that prevents third parties from sending requests to our application; SQL injection prevention standard that prevents malicious code from infiltrating our platform; no bank data is saved, since at the time of making any transfer, it is made directly on the banking pages; if payments are made with credit cards or debit cards, we do not store any bank security code such as the CVV; we have a security firewall to prevent more advanced computer threats and specific attacks; and internal protocols for physical access to the servers, which are conditioned and monitored 24/7.

However, despite having more secure tools every day, the protection of data sent over the Internet cannot be guaranteed 100%, so once received, everything possible will be done to safeguard the information.

About cookies

VP360° uses cookies and web beacons on our website and in some emails we send. Cookies are small text files and web beacons are small graphic images. They are downloaded to your device when you visit a website or receive certain emails, unless you have set your browser to stop them.

We use cookies to remember your preferences, display content that is more relevant to you, and improve your overall experience on our site. We use web beacons to track people's actions (such as email recipients) and measure the success of our marketing campaigns and response rates.

Our website includes social sharing buttons and links that allow you to share our content through your preferred social media site or by email directly from one of our web pages. These features may collect your IP address and which page you are visiting on our website, and may set a cookie on your device.

When you use one of these buttons or links, you are sharing information with another website or service (such as Twitter, LinkedIn, or Facebook) and this privacy notice will no longer apply. Please read the privacy notices provided by the particular social media website through which you are sharing before posting any personal information using these links.

When entering the web page, the user may or may not accept the use of cookies indicated here on the banner that is displayed.

The associate member and the VP360° member accept and acknowledge fully understanding these terms contained in this privacy notice and their full compliance with them.

In case of violations of the rights of use and privacy of personal data, those affected may go to the National Institute of Transparency, Access to Information and Protection of Personal Data (INAI) to resort to their legal means.

This privacy notice was last updated on September 23, 2021.

Notice of privacy     Terms and conditions     ARCO Bill of Rights     Terms of use     Accessibility     Cookie Notice