Privacy notice

1. Identity and address of the person responsible

Soluciones Digitales IBIS, S.A. de C.V. (hereinafter, "IBIS" or "the Controller"), a variable capital corporation incorporated under the laws of the United Mexican States, is responsible for the processing of personal data collected through its sites, applications and contracting flows.

Address: Calle Arquímedes number 130, Floor 5, Office A, Colonia Polanco V Section, Mayor's Office Miguel Hidalgo, C.P. 11560, Mexico City, Mexico.

Privacy contact email: info@cykadas.com

2. Scope

This notice applies to the processing of personal data of people who visit IBIS sites, who initiate a process of contracting digital services, who contract a subscription charged to their mobile operator account, or who communicate with our customer service channels.

3. Personal data we process

IBIS processes the following categories of data:

• Identification and contact: mobile line number (MSISDN); email.
• Connection and device: IP address, browser type and version, operating system, device type, network operator, country.
• Navigation: pages visited, times, origin of the visit and campaign parameters, interactions with the form.
• Customer service: content of queries, complaints and requests provided by the owner.

Sensitive data. IBIS does not collect or process sensitive personal data. We do not ask for data on health, ethnicity, beliefs, union membership, sex life or biometric data.

Financial data. IBIS does not collect card numbers or banking credentials. The collection is made through the mobile operator, which invoices the amount to the account or balance of the owner's line in accordance with its own contractual relationship.

4. Purposes of the treatment

4.1 Primary purposes

They are necessary to provide the service. Without them it is not possible to maintain the relationship with the owner:

• Verify the ownership of the mobile line using a single-use password.
• Record the contract and prove the consent given by the owner.
• Enable and provide the contracted digital service.
• Manage periodic charging through the mobile operator.
• Respond to queries, complaints, cancellations and requests to exercise rights.
• Prevent, detect and investigate fraudulent or non-consensual registrations.
• Comply with legal and contractual obligations and requirements of competent authority.

4.2 Secondary purposes

They are not necessary for the service. The holder can refuse them without this affecting the benefit:

• Send communications about IBIS products and promotions.
• Prepare aggregate statistics and usage studies to improve the service.

To refuse secondary purposes, the owner can write to info@cykadas.com at any time, indicating your line number.

5. Consent

The consent of the owner is obtained in advance, free, express, informed and unequivocal. In the contracting flow, the owner declares his will through two independent and consecutive acts: the explicit acceptance of the conditions of the service, in which the price, the periodicity of the charge and the cancellation procedure are informed; and confirmation of the one-time password received on your mobile line.

IBIS keeps a technical record of both acts as evidence of consent, including date, time and connection data.

The owner may revoke his consent at any time in accordance with section 10.

6. Data recipients

IBIS does not sell personal data. It shares them only with the third parties necessary to provide the service, each under contractual obligations of confidentiality and security:

• Mobile operators. We can share MSISDN, contracted service, amount and frequency in order to send a single-use key and execute the payment.
• Aggregators. We may share MSISDN, subscription status and charges.
• Web analytics provider. We may share connection and browsing data.
• Competent authorities. We can share strictly required data upon express request.

IBIS will carry out communications and transfers that require consent from the owner only when this has been granted, and those excepted by law under the applicable legal assumption.

7. International transfers

IBIS is domiciled in Mexico and provides services in several countries. Consequently, the personal data of holders residing in one country may be processed or stored in another, including Mexico, the United States of America and the countries where the providers indicated in section 6 operate.

IBIS adopts the guarantees required by the applicable regulations for the cross-border flow of data.

8. Conservation period

We will not retain your personal data longer than necessary, unless otherwise required by applicable law. After this time, the data will be deleted or will undergo an irreversible anonymization process.

9. Cookies, tracking technologies and session recording

The site uses cookies and similar technologies to operate the contracting flow, measure usage and prevent fraud. The owner can configure his browser to restrict them, considering that some are necessary to complete the contract.

Technical recording of the session. With the exclusive purpose of preventing fraudulent or non-consensual registrations, the fraud prevention provider records the interaction of the owner with the contracting page, including movements, scrolls and clicks on the elements of the page. This record applies masking to the mobile line number and the one-time key, so these values ​​are not stored in the clear.

IBIS does not instruct or suggest the owner disable blockers, security extensions or any other protection technology on his or her browser.

10. Rights of the owner

The owner may, at any time, access their personal data, request their rectification when they are inaccurate or incomplete, request their cancellation or deletion when they consider that they are not required for the purposes reported, and oppose their processing for specific purposes. You can also revoke the consent given.

10.1 How to exercise rights

By request addressed to info@cykadas.com, indicating: name of the owner or mobile line number over which the rights are exercised; the right that is exercised and the specific request; a means of communicating the response; and documents that prove the identity of the owner or representation, when applicable.

IBIS will respond within the deadlines established by the applicable regulations, indicated in the annex of the corresponding country.

10.2 Cancellation of service

The cancellation of the subscription is independent of the exercise of rights and can be requested at any time through the channels informed in the conditions of service, without the need to express a cause and without penalty.

10.3 Limitation of use and disclosure

The owner can request the limitation of the use or disclosure of their data through the same channel, and in Mexico register in the public registries provided to avoid unwanted publicity.

11. Security measures

IBIS implements reasonable administrative, technical and physical measures to protect personal data against loss, misuse, unauthorized access, alteration or disclosure, including encryption of communications, role-based access control, transaction logging and confidentiality agreements with suppliers.

12. Minors

The services are aimed exclusively at people of legal age who own a mobile line. IBIS does not knowingly collect data from minors. If treatment of this nature is detected, it will be deleted and the service terminated.

13. Changes to the privacy notice

IBIS may modify this notice. Any modification will be published in https://www.ibis-pe.com, indicating the date of the last update.

By installing, using, registering or otherwise accessing our sites, applications and recruitment flows, you express your acceptance of this Privacy Notice. If you do not accept this Privacy Notice, you must not install, use, register or otherwise access IBIS sites, applications and recruitment flows.