How we handle your personal data.

xGem IT is not yet incorporated as a company in Mexico. Until it is, the controller of your personal data is the individual who runs it.

Controller

Sergio Rodriguez

Address

Avenida Ejército Nacional Mexicano 453, Ciudad de México, México

Privacy email

contacto@xgemit.com

Once the company is incorporated, we will update this notice to name it.

Only what you choose to send us when you write to our email address:

• Your name.
• Your email address.
• The company you work for, if you tell us.
• Whatever you tell us in your message about your project or business.

The site uses no cookies, analytics, forms or third-party resources: fonts and images are served from the site itself. Browsing it gives us no information to identify you; only the hosting's technical logs, explained below, are kept.

The only thing the site stores in your browser is the language you pick in the language selector, to remember your choice. It never leaves your device, it never reaches us, and you can clear it in your browser settings.

The site is hosted on Vercel, a service of Vercel Inc., based in the United States. Like any web server, Vercel processes technical data about each visit, such as your IP address, your browser and the pages you request, to deliver the site and protect it from abuse. Vercel acts as our processor: it handles those logs on our behalf and only to provide the service. We do not use them to identify you or for analytics; we would only look at them to fix a fault or a security incident.

We do not handle sensitive personal data, such as data about health, ethnic origin, beliefs or sexual orientation. Please do not include it in your messages.

Primary purposes

These are needed to deal with your request:

• Replying to your enquiry and following it up.
• Preparing and sending you a proposal, if you ask for one.

Secondary purposes

None. We do not send you advertising or newsletters, we do not build profiles, and we do not use your data for anything other than the above.

If you write to us after reading this notice, we take it that you agree to this use. You can withdraw your consent at any time, as explained below.

We do not sell, rent or share your personal data with third parties. Only these can access it:

• The providers that host this site (Vercel Inc.) and our email, who act on our behalf as processors and may not use your data for their own purposes.
• Competent authorities, when a law or a court order requires us to hand it over.

These providers may store or process your data on servers outside Mexico, for example in the United States.

We keep your messages and data for up to two years after our last contact. If a business relationship begins, or a law requires us to keep them longer, we keep them for the period that applies. After that, we delete them.

Mexican law lets you exercise these rights at any time:

Access

Find out what data we hold about you and how we use it.

Rectification

Have it corrected if it is inaccurate or incomplete.

Cancellation

Ask us to delete it.

Opposition

Object to a specific use of it.

How to exercise them

Write to our privacy email with the subject “ARCO rights” and include:

• Your name and an email address for our reply.
• A document proving your identity or, if you act on someone else's behalf, your authority to represent them.
• Which right you want to exercise and over which data; for a rectification, the correction you need.
• Anything that helps us find your information, such as the approximate date of your email.

Privacy email

contacto@xgemit.com

We will reply within 20 business days of receiving your request. If it is granted, we will act on it within the following 15 business days.

Exercising these rights is free of charge.

If you are not satisfied with our reply, you can turn to the personal data protection authority in Mexico.

You can withdraw your consent to our handling of your data, or ask us to limit its use or disclosure, by writing to the same address with the same information as for ARCO rights. We reply within the same time limits.

Please note that if you withdraw your consent, we may not be able to continue with your enquiry or proposal.

If you write to us from the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) also protects you.

We handle your data to take steps at your request before a possible contract, such as preparing a proposal, and on the basis of our legitimate interest in replying to the messages we receive. The hosting's technical logs rely on our legitimate interest in delivering the site and keeping it secure.

In addition to the ARCO rights, you have the right to restrict processing and the right to data portability.

We handle your data from Mexico, which does not have an adequacy decision from the European Commission. The transfer of the data in your messages is necessary to deal with the request you make to us. The hosting's technical logs are processed by Vercel in the United States, with the safeguards set out in its data processing agreement.

If you believe we are not handling your data properly, you can lodge a complaint with the data protection authority in your country.

If we change this notice, we will publish the new version on this page with its update date. We recommend checking it from time to time.