Textura TorotoTextura TorotoTextura Toroto
Textura Toroto

PRIVACY NOTICE

TOROTO, S.A.P.I. DE C.V.

This document constitutes the Privacy Notice for the purposes of the provisions of the Federal Law for the Protection of Personal Data in Possession of Individuals (hereinafter, the "Law"), its Regulations, as well as the Privacy Notice Guidelines (hereinafter, the "Legislation"). Therefore, this Privacy Notice (hereinafter, the "Notice") applies to the personal information collected about the Data Subject by Toroto, S.A.P.I. de C.V. (hereinafter "Toroto"). For the purposes of this Notice, the terms used herein that are not defined herein shall have the meaning attributed to them in the Legislation.

1.Identity and Address of the Responsible

Toroto, a company incorporated under the laws of the United Mexican States, domiciled in Tabasco 166, Colonia Roma Norte, Mexico City, is responsible for the collection, use, storage and disclosure of personal data of the Owners, as set forth in this Notice, ensuring in its capacity as responsible for the proper use, protection and confidentiality of the same, observing at all times the principles of legality, consent, information, quality, purpose, loyalty, proportionality and accountability, provided in the Legislation.

2. Personal Data

In order to provide you with the services and products you request or contract with Toroto, we require identification and contact data including full name, address(es), cell phone number, landline and alternate numbers, email, unique population registry code (CURP), place and date of birth, sex, marital status, nationality, fiscal address, digitalized autograph signature, RFC, voter registration number, social security number, labor information including type of employment, employer and employment telephone number, patrimonial and/or financial, geolocation and labor information. Additionally, we may collect sensitive data classified as biometric, such as fingerprint, facial recognition and iris recognition and the following data of the company, which you represent: company name, address, RFC; identification and contact data, data verification through social networks, assets and/or financial data, current debt data, data on income and expenses, type and line of business. Information about the devices or computers from which you access the Platform and other automatically captured data (such as the type or version of the browser or operating system, settings, connection data, information about some of the downloaded applications and parameters), internet IP address used when connecting to our services or browsing the Platform, certain information about the activity of users and visitors within our website and apps, the URL from which they come or what URL they access next (whether or not they are on our website). Also the pages visited, interactions with these pages, searches performed, publications, purchases or sales, ratings and responses entered, complaints made and received, messages in forums, among other information may be stored and retained.

It is important to mention that the previously mentioned items are categories of personal data; in case you require to know each of the personal data that are collected, please contact Toroto through the means indicated in this Notice. The personal data that we may request and that are collected, will be treated under the strictest security measures to ensure its confidentiality, once your consent is obtained.

Personal Data may be collected in person or through our website https://toroto. com/ (the "Site"), our computer application (the "App") or by any other electronic, telephonic, video, or other technology (the "Electronic Media" and together with the Site and the App, the "Platform") including Landing Pages, hyperlinks or Plug-ins within the Platform and, if applicable, through agents, promoters, commission agents, suppliers, or business partners when (including without limitation) the Data Subject: (i) registers to make use of any of the services available from the Platform, including Landing Pages, hyperlinks, or Plug-ins within the Platform; (ii) uses the Platform; (iii) submits questions, inquiries, or comments or contacts the Platform; (iv) requests information or materials; and/or (v) provides in any way information to the Platform (chats, forums, uploads, etc. ).

The foregoing in order to follow up on a user creation request made by you, to provide you with services that are promoted on the Site, in accordance with the Platform Terms and Conditions set forth on the Site (the "Services"), or to enforce agreements or contracts entered into with Toroto.

Toroto may perform the analysis, reports, video calls and/or photographs, conduct interviews in person or by remote means (electronic media or any other technology), as well as the necessary actions to verify by itself or through third parties hired specifically for this purpose, the veracity of the data that were provided by you.

The Platform may contain links to and from other Internet sites. Toroto is not responsible for the privacy practices or the treatment of personal data on those sites. Toroto recommends that you consult the privacy practices of such websites before using them.

3. Purposes

Toroto will use your data for the following purposes:

  • The fulfillment of the contractual relationship derived from the request and/or contracting of our Services.
  • To identify the person who hires any of Toroto's Services.
  • Identification or verification of the identity of a person, based on the biometric data provided, in internal systems, authorized third parties and authorities.
  • Verify and validate the information provided by the customer for the contracting of any of Toroto's Services.
  • Manage, operate and follow up the Services and products requested or contracted with Toroto.
  • The performance of each and every one of the operations and the provision of services, as well as the celebration of the other acts that Toroto may perform in accordance with the law and its bylaws.
  • To generate files for customer tracking in our database, directly or through a third party.
  • Process the requests you make through the Platform. To create your profile as a user of the Platform.
  • To comply with know your client (KYC) and money laundering prevention provisions, either for Toroto or for its affiliates or subsidiaries, as provided by the respective legislation and to consult restrictive lists and financial reports with banking entities and/or governmental authorities.
  • Inform about changes or new products or services that are related to the contracted service.
  • To comply with regulatory obligations contained in the Legislation and those obligations contracted with our clients.
  • Evaluate the quality of the service.
  • Validate the financial conditions of people who present debts or payment delays;
  • The promotion of products, services, additional benefits, discounts, promotions, bonuses, contests, market research, sweepstakes and advertising in general.
  • Respond to queries, claims or complaints raised by the Holders about the products and services provided.
  • To elaborate, for research purposes, statistics and derive, by means of mathematical models, conclusions from them.
  • In connection with a possible merger, acquisition, restructuring or sale of assets or shares of Toroto.
  • Linkages between accounts and users in connection with fraud prevention efforts.

In addition, we will use your personal information for the following purposes that are not necessary for the requested service, but allow and facilitate us to provide you with better service:

  • Sending newsletters, as well as sending information for marketing, advertising and commercial prospecting purposes.
  • To inform about new products or services.
  • Conduct business intelligence, conduct market research, give visibility to your activity on the Platform, monitor the quality of the Platform, evaluate and improve the Platform and send our newsletter and offers. Send and receive communications through the Platform in connection with our Services.

If you, the Data Subject, do not wish your personal data to be processed for the secondary purposes, you may, at any time, object to the processing for such purposes by exercising your right to object in accordance with this Notice. In case you do not want your personal data to be processed for these additional purposes, you may, from this moment on, submit a written statement to hola@toroto.mx.

4. Transfer of Personal Data

Toroto informs you that some or all of your personal data may, where appropriate, be transferred, within and outside the country, to any affiliate, controlling or subsidiary company, as well as all those companies with which we have business relationships, for the purposes set forth in this Notice. In the event that such transfer is made, it will be made in order to comply with the legal relationship with you and with the authorities of the countries in which it operates. The transfers provided for in this paragraph may be carried out without the consent of you Holder under the provisions of Article 37 of the Law, which are cases of exception to your consent.

Your personal data may, where appropriate, be communicated to any natural or legal person providing services for the maintenance or fulfillment of the legal relationship between you and us, assuming at all times Toroto the corresponding obligations in terms of the Legislation. In the case of our employees and suppliers, with respect to your personal data, these are not subject to any transfer, except for the exceptions provided in the aforementioned article 37 of the Law. In any case, the recipient of your personal data will treat them according to this Notice and in accordance with the Legislation.

In that sense, the information of the Data Subject may be shared with: (i) employees, parent, controlling, affiliated or subsidiary companies of Toroto, (ii) service providers who have entered into a contract with Toroto and business partners with whom contracts have been entered into for the marketing of products and/or services for the benefit of customers, (iii) public agencies, public administrations (federal, state or municipal), commissions, institutes, and/or regulatory bodies for the fulfillment of informational obligations, (iii) public agencies