APDEAOVI Privacy Notice I, 1-1 Intercambio

Pursuant to the Federal Law on Protection of Personal Data Held by Private Parties, the Instituto Tecnológico Autonómo de México, whose main offices are on Río Hondo Street 1, Colonia Progreso Tizapán, Alcadía Álvaro Obregón, Zip Code 01080, Mexico City, Mexico has a responsibility to appropriately use and protect your personal data, and through its International Office it hereby notifies you of the following:

I. Purposes for which your personal data will be used.

The personal data we collect from you will be used for the following purposes, which are necessary to our legal relationship with you:

Identification data: To identify you; contact you; have contact information for possible emergencies; profile you in general and determine if you are eligible to enroll or are currently enrolled in some program; inform you and/or manage any obligation you may incur; integrate you into the community; permit you to enter our buildings; allow you to use the facilities and services provided by the institution; maintain communication regarding activities and events relating to school activities, extracurricular activities and/or those that may interest you; facilitate and allow for the development of school and extracurricular activities that may be managed by the institution on and off campus; facilitate communication among the members of various programs; send you information regarding the programs in which you are enrolled or information you request; academic and administrative procedures; provide security in our facilities; issue official documents, ID cards and certificates required in the programs; send documents; gather information for participation in national and international rankings; asses the quality of services, evaluations, accreditations and certifications; verify nationality to comply with the legal requirements necessary to provide you services; acquire the necessary insurance policies; obtain academic records and keep you apprised of your performance; publish your data, photographic images, audio or video recordings on informative web pages, social media and documents of informational and/or common interest; determine if ITAM internal regulations are complied with; use platforms with interactive audio and video recordings to provide the services; know their interests, preferences and personality traits; comply with legal requirements inside and outside of Mexican territory.

Financial data: Assist and inform of you of necessary payments and collections; generate and send invoices.

Sensitive information: Diagnose and correctly treat any medical emergencies; have the information needed to follow up on medical emergencies, when necessary; channel you to your preferred place for medical attention; request the appropriate support in a medical emergency.

Secondary purposes: Your data may be used for statistical purposes, after being appropriately disassociated.

II. The personal data we use are the following

Personal data that you provide, in person or remotely; these are received by ITAM or by a third party commissioned by ITAM.

Personal data for national and foreign students or applicants: Full name; gender; address; mailing address; nationality; marital status; date and place of birth; age; e-mails; landline; cell phone; official ID card (INE or Passport); Mexican Tax ID number (RFC); Mexican population registry code (CURP); photo; academic program you are applying to; remote link videos and audios; academic degrees or certificates; data to determine your academic level; language mastery certificates; extra data included in the documents you supply to us; audio and video recordings of some courses and examinations; photographs of participants in events relating to the programs; information regarding events or which is generated at the event; information generated because of our legal relationship itself; and data generated out of our legal relationship with you. For foreign students: documents accrediting your nationality, ID card and immigration status; immigration documents with permit to study at ITAM.

Financial data: Billing information; party financing the program; extra data presented in the documents you supply to us; data required to manage payments; and data generated out of our legal relationship with you and; the data you choose to provide us.

Sensitive data: The hospital you choose to be taken to in the event of some medical emergency; the name and contact information of the people we should notify in the event of some medical emergency; information required to deal with medical emergencies; data generated during the treatment of a medical emergency; and data generated out of our legal relationship with you and all the information you provide us.

Personal data collected by ITAM are protected by appropriate security, administrative and physical measures to prevent damage, loss, alteration, destruction, or unauthorized use, access or handling, in accordance with the Federal Law on Protection of Personal Data Held by Private Parties and its Regulation.

III. Sharing of your personal information and its purposes

You are hereby informed that, in the contractual engagement and provision of some services necessary to our legal relationship with you, your personal data may be shared with third parties, inside and outside of Mexico, with whom ITAM has agreements to carry out certain tasks relating to the services corresponding to the programs. These third parties may handle your personal information under instructions from ITAM or make decisions based on this information as part of the legal relationship. We therefore inform you that in providing such services, we may share your personal data with:

Sharing of information that does not require authorization:

  1. Designers and printers, to generate documents.
  2. Transfer and receipt of data on behalf of ITAM through companies dedicated to mass communication and radio and video stations. They will be responsible for possible damage or loss of information on their computers due to the use of their platforms.
  3. Educational institutions who provide tools for assessing students.
  4. Companies that asses the quality of services, evaluations, accreditations and certifications of educational institutions.
  5. Sundry institutions that manage mandatory social services or internship requirements or activities necessary for engaging in school and extracurricular activities.
  6. Companies specialized in determining the behaviors and conducts that take place in a video recording.
  7. Insurance companies, for acquiring insurance
  8. National and international institutions, in order to place students in foreign exchange programs.
  9. Transfer of information to meet legal obligations. Your data may be shared nationally or internationally in cases in which this communication of data is provided for by Law or Treaty, upon request of the authorities or when required by order of a competent authority.

Sharing of information that requires authorization:

  1. Transfer of invoices for the payment of services. The transfer authorization is implicit in your provision of data required to generate invoices.
  2. With third parties that request information.
  3. Data generated out of our legal relationship with you, shared with third parties.

No transfer of sensitive data will be made to any entity, person or body other than ITAM, with the understanding that the only disclosures that could eventually be made would be in compliance with an order from a competent authority, or in case of compliance with a legal obligation, in the terms provided in the Federal Law on Protection of Personal Data Held by Private Parties.

IV. Your rights regarding your personal data

You have certain rights regarding the way we handle your data. These include:

  1. Access: You have the right to know what personal data we have on you, what we use them for, and under what conditions.
  2. Rectification: You may correct your personal data if they are out of date, incorrect or incomplete.
  3. Cancellation: You may ask that we eliminate your personal data from our records or databases when you believe they are not being used in accordance with the principles, duties and obligations specified in the laws and regulations.
  4. Opposition: You may oppose the use or dissemination of your data for specific purposes.
  5. You may limit the use or dissemination of your personal data.
  6. You may revoke the consent you have given us regarding the use of your personal data.

You may at any time convey your refusal to allow sharing of your data for secondary purposes or revoke the consent you have given us regarding the use of your personal data by presenting a written notice at the International Office, requesting exercise of one or more of your ARCO (Access, Rectification, Cancellation, Opposition) rights at the following address: Río Hondo Street 1, Colonia Progreso Tizapán, Alcadía Álvaro Obregón, Zip Code 01080, Mexico City, Mexico, from Monday to Friday, from 8:00 a.m. to 14:00 pm, addressed to the International Office, or you may also attach your written notice in an email to arco@itam.mx with the legend EXERCISE OF ARCO RIGHTS in the subject of the email.

Your request must include the following: (I) name of the owner of the personal data; (II) e-mail to receive notifications; (III) documents accrediting your identity, or the power of attorney for your legal representative; (IV) a clear and precise description of the right(s) you intend to exercise; (V) any other element or document that might facilitate the location of your personal data. If the request fails to meet any of these requirements, the Chair of the Legal Office may, within 5 business days following receipt of your request, ask that you supply the additional evidence or documents necessary to process it; and (VI) ask for an e-mail address where you will receive a response to your request.

The response time for exercise of your rights is stipulated in the Federal Law on Protection of Personal Data Held by Private Parties and its Regulation.

There is no charge for exercising your rights. You may, however, be asked to cover the justified expense of postage or courier, photocopying or printing of other forms. Furthermore, if the same party repeats his or her request in a period of less than twelve months, the costs may not exceed three times the Daily Minimum Wage in effect in Mexico City, unless there are substantial changes to the privacy notice that merit a new inquiry.

V. The use of tracking technology on our website

You are hereby informed that our website uses cookies, web beacons and other technologies through which your browsing behavior may be monitored. The personal data we collect through these technologies will be used for you to browse the web easily and only for statistical purposes and fully disassociated from the owner of the information. The data we obtain in this manner have to do with your browsing activity.

These technologies may be disabled. To learn how to do this, you can look up the instructions and manuals for your browser, following the steps given to accept or block cookies. For more information, we suggest you search your web browser for the phrase “how to administer cookies in [name of your web browser].”

VI. Modifications and mechanisms for having access to the the full privacy notice

The full privacy notice may be viewed at the International Office at the following address: Río Hondo Street 1, Colonia Progreso Tizapán, Alcadía Álvaro Obregón, Zip Code 01080, Mexico City, Mexico, form Monday to Friday, from 10:00 a.m. to 14:00 p.m. Please be informed also that ITAM may update this privacy notice at any time, and any changes will be announced by the International Office and in future versions of this privacy notice. We suggest you regularly check this Privacy Notice to stay informed.

ITAM is committed to taking the measures necessary to protect all the information collected, using security technology and procedures for controlling access, use and dissemination of your personal data. Nevertheless, no security or data transmission system over which the company does not have absolute control and/or which depends on the use of the Internet can be guaranteed completely secure.

Last update: April 21st, 2022.