PRIVACY NOTICE

MGCS, S.C. (hereinafter “MGCS”), in compliance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (“LFPDPP”) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data (“GDPR”), is responsible for your personal data and is committed to ensuring that your personal information is protected and not misused.

The processing of your personal data is carried out lawfully and in accordance with the principles of legality, purpose, loyalty, consent, quality, proportionality, information, and accountability established in Article 5 of the LFPDPP, based on the following grounds:

• The processing will be lawful, observing the principles of legality, purpose, loyalty, consent, and information (Art. 5).
• It will be carried out with your express or implied consent, except for legal exceptions (Art. 7 and 9).
• We will respect your ARCO rights and the purposes established in this notice (Art. 13, 14, and 15).

The purpose of this Privacy Notice is to inform our prospects, clients, suppliers, candidates, and employees who maintain a professional or commercial relationship with MGCS about the data that MGCS may collect, the purposes and handling of your personal data, the retention periods, and other essential aspects regarding your personal and/or sensitive data.

RESPONSIBLE PARTY INFORMATION

MGCS, S.C.
Oxford No. 30, Col. Juárez, Cuauhtémoc, 06600, Mexico City
https://mgcs.ws
Email: [email protected]

Personal Data Protection Officer: Hernán García
Email: [email protected]

TYPES OF DATA COLLECTED AND CONSENT

In accordance with the GDPR and the LFPDPP, by accepting this Privacy Notice, the Client and User provide their informed, express, free, and unequivocal consent for the processing of personal data collected through our website or by any lawful means.

MGCS collects the following personal data, only with the consent of its Clients and Users:

• Identity data: full name, date and place of birth, gender, marital status, nationality, photograph, CURP, official identification documents.
• Contact data: address, phone (landline or mobile), email, fax.
• Employment data: CV, cover letter, academic background, references.
• Tax and accounting data: RFC, tax address, e-signature, tax returns, accounting records, and books.
• Banking data: bank account information, credit history, transfers, payment methods.
• Economic data: income, assets, professional category.
• Family data: marriage, birth, or death certificates.
• Corporate data: Articles of Incorporation, Powers of Attorney, Notarial Instruments.
• Public and social media data: publicly available data, references, or third-party information.
• Minor data: only with prior authorization from parents or guardians.
• Sensitive data: chronic illnesses, blood type, or allergies, collected exclusively for employment purposes.

CONTACT FORMS AND JOB BOARD

Data collected through contact or job application forms (name and email required) are not stored in an automated file.

PURPOSE OF PERSONAL DATA PROCESSING

All processing carried out by MGCS responds to specific, explicit, and legitimate purposes, as required by law.

I. Purposes that do not require the Data Subject’s consent

• Contractual purposes: candidate contact, employment compliance, social benefits, workplace security, quotes, accounting, legal, and fiscal services.
• Legal purposes: identity verification, compliance with tax and social obligations, risk management, fraud prevention, and anti-money laundering measures.

II. Purposes that require the Data Subject’s consent

• To notify about new MGCS services related to those already contracted.
• To communicate service updates.
• To conduct quality assessments of services.
• To provide exclusive benefits based on your relationship as client, employee, or candidate.
• To carry out marketing, commercial, and statistical activities.
• To manage social media content and newsletters.

RECIPIENTS OF PERSONAL DATA

MGCS may transfer personal data to national third parties, only when necessary to comply with the purposes stated herein and in accordance with the law. Recipients will assume the same confidentiality obligations.

• Banks and credit institutions (salary and benefit payments).
• Tax and social security authorities (SAT, IMSS, INFONAVIT, SAR, INFONACOT).
• Public notaries (authentication of legal documents).
• Parent, subsidiary, or affiliated companies under MGCS group control.

DURATION OF PERSONAL DATA RETENTION

Personal data will be retained for 5 to 10 years following the end of the business or employment relationship, in accordance with Mexican law. Newsletter data will be retained until consent is withdrawn.

DATA SECURITY

MGCS applies administrative, technical, and physical security measures to protect personal data from loss, destruction, or unauthorized access.

INTERNATIONAL DATA TRANSFER

MGCS will not transfer Clients’ or Users’ personal data to third parties located outside the European Union.

COOKIES

Our website https://mgcs.ws does not allow the use of cookies.

LIMITATION OF USE OR DISCLOSURE, CONSENT REVOCATION, AND ARCO RIGHTS

As the Data Subject, you have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Cancel data no longer used lawfully.
• Object to processing for specific purposes.
• Limit use or disclosure of your data.

EXERCISING YOUR RIGHTS

You may exercise your rights in writing at our address or by email to [email protected], including your identification and the description of the data and rights you wish to exercise.

CONFIDENTIALITY IN PERSONAL DATA PROCESSING

All personnel and third parties involved in the processing of personal data by MGCS must maintain strict confidentiality, even after their professional relationship ends.

MODIFICATION OF THE PRIVACY NOTICE

MGCS reserves the right to modify this Privacy Notice due to new legal requirements or internal needs. Updates will be published at https://mgcs.ws.

ACCEPTANCE

You, as the Data Subject, acknowledge that you have read and understood this Privacy Notice.

Date of last update: April 8, 2025.