Comprehensive Privacy Notice

Identity and address of the data controller

SERVICIOS INDUSTRIALES DEL NORTE VAFLO, S.A. DE C.V., doing business as Syntra ("Syntra"), with its address at Avenida Sierra del Parque 100, Ciudad Santa Catarina, Santa Catarina, Nuevo León, C.P. 66368, Mexico, is the data controller responsible for the personal data you provide through the website www.syntra.mx, and will protect it in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties and other applicable provisions.

Personal data we process

Through the website’s contact form, Syntra collects the following personal data: your name, the name of the company you work for, your email address and, optionally, your phone number, as well as any information you choose to include in the message field. Syntra does not request or process sensitive, financial or asset-related personal data through this channel. Please do not include information of that nature in your message.

As part of the website’s technical operation, data such as your IP address, browser type and the date and time of your visit may be recorded automatically. This data is used solely for website security, the prevention of automated submissions (spam) and the website’s proper operation.

Purposes of processing

Personal data is processed for the following primary purposes, which are necessary to respond to your request:

• Receiving, recording and responding to your contact request.
• Communicating with you by email, phone or WhatsApp to follow up on your request.
• Where applicable, preparing and sending you proposals or quotes related to the industrial procurement management services you request.
• Protecting the security of the website and preventing fraudulent or automated use of the form.

In addition, your data may be processed for a secondary purpose, which is not necessary to respond to your request but allows us to serve you better: occasionally sending you information about Syntra’s services. If you do not want your data to be processed for this purpose, you may say so at any time by emailing ventas@syntra.mx with the subject line "Objection to secondary purpose". Your objection will not prevent us from responding to your request.

Data processors and processing outside Mexico

To operate the contact form, Syntra uses the services of Netlify, Inc., a company located in the United States of America, which provides website hosting and the receipt and storage of form submissions. As a result, the information you submit through the form is transmitted to and stored on servers located in the United States of America. Netlify acts as a data processor: it processes the data solely on Syntra’s behalf, to provide that service, and in accordance with its own privacy and security policies.

Notifications of each submission are also received through Syntra’s corporate email provider, which likewise acts as a data processor.

If you choose to contact us via WhatsApp, the messaging service is provided by WhatsApp LLC, a subsidiary of Meta Platforms, Inc., under its own terms and privacy notice, which you accept directly with that provider when using its application.

Transfers of personal data

Syntra does not transfer your personal data to third parties other than the processors mentioned above, except where the law permits it without your consent, such as to comply with requests from competent authorities or to fulfill a legal relationship between you and Syntra.

Retention period

Data received through the form will be retained for as long as necessary to respond to your request and to follow up on any business relationship that may result. If no business relationship arises, the data will be retained for a maximum of twenty-four months from the last contact and then deleted. If a business relationship is established, the data will be retained for the periods required by applicable tax and commercial regulations.

Options and means to limit the use or disclosure of your data

You may limit the use or disclosure of your personal data, including the receipt of marketing information, by emailing ventas@syntra.mx with the subject line "Limitation of use of personal data", stating your name and the limitation you request. Syntra will confirm that your request has been handled through the same channel.

How to exercise ARCO rights and revoke consent

You have the right to access your personal data, rectify it if it is inaccurate or incomplete, cancel it if you consider that it is not required for any of the purposes stated, and object to its processing for specific purposes. These are the rights of access, rectification, cancellation and objection, known as ARCO rights. You may also revoke the consent you have given for the processing of your data at any time, without retroactive effect.

To exercise any of these rights, or to revoke your consent, you must send a request to ventas@syntra.mx, addressed to Syntra’s department responsible for personal data. The request must include:

• Your name and an email address or mailing address to receive notifications.
• A copy of a valid official ID and, where applicable, of the document proving the authority of your legal representative.
• A clear and precise description of the personal data regarding which you wish to exercise any of these rights, except in the case of the right of access.
• The right you wish to exercise or what you are requesting.
• Any other information that helps locate your data.

For rectification requests, you must also indicate the changes to be made and provide documentation supporting your request.

Syntra will inform you of its decision within a maximum of twenty business days from the date the request is received. If the request is granted, Syntra will carry it out within fifteen business days from the date it communicates its response. These periods may be extended once for an equal period when justified by the circumstances. The response will be sent through the same channel through which the request was received. Exercising ARCO rights is free of charge; only reproduction or shipping costs, if any, may be charged.

If you believe your right to the protection of personal data has been violated, you may file a complaint with Mexico’s Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance).

Use of cookies and tracking technologies

The website www.syntra.mx does not use advertising cookies or tracking technologies for marketing or profiling purposes. The only technical data recorded is that described in the section on personal data, which is necessary for the security and operation of the website.

Security measures

Syntra and its processors maintain administrative, technical and physical security measures to protect your personal data against damage, loss, alteration, destruction or unauthorized use, access or processing. These include encrypted transmission of form information over HTTPS.

Changes to this privacy notice

Syntra may amend this privacy notice to reflect changes in legislation, in its practices or in the providers it uses. Any amendment will be made known by publishing it at www.syntra.mx/aviso-de-privacidad, indicating the date of the last update. If an amendment involves new purposes that require your consent, we will request it before processing your data for those purposes.