Privacy Policy
For the protection of personal data
CENTRO DE MEDIACIÓN Y ARBITRAJE BCS, S.A.P.I. DE C.V. ("CMA-BCS"), with registered office at Paseo de la Marina #4107, Colonia La Marina (Medano), Cabo San Lucas, Baja California Sur, Zip Code 23453, hereby informs, through this privacy policy ("Privacy Policy"), of the existence and main characteristics of the processing to which the personal data of individuals who have any relationship with CMA-BCS will be subject, in accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties and the Federal Copyright Law ("Law").
I. Personal data collected
CMA-BCS may collect the following personal data directly or indirectly, in person or through various means such as websites, social media, digital platforms, email, telephone, or through transfers provided by third parties:
Prospects or information requesters: Full name, date and place of birth, age, gender, nationality, marital status, address, telephone number, and email address. If they are foreign nationals, a passport, visa, immigration form, or other documents proving their identity, nationality, and legal status in the country may also be requested.
Customers or service users: Full name, date and place of birth, age, gender, nationality, marital status, address, phone number, email address, official ID, CURP, RFC, billing information, payment information, and data derived from your digital interaction with our communication channels. When participating in meetings, sessions, hearings, or in-person or virtual interactions, your image, voice, and, where applicable, audio and/or video recordings may also be collected.
Sensitive data (customers): If necessary due to the nature of the matter, sensitive data contained in the dispute documentation or the data subject's statements may be processed, such as health data, racial or ethnic origin, religious, philosophical, or moral beliefs, union membership, political opinions, or sexual orientation. Financial or asset-related data may also be collected. In the case of minors, data regarding the father, mother, or guardian will also be collected.
Parties involved in mediation or arbitration proceedings: Full name, date and place of birth, age, gender, nationality, marital status, address, telephone number, email address, official identification, CURP, RFC, and the personal information contained in applications, briefs, statements, records, agreements, case files, annexes, and other documentation related to the dispute.
Sensitive data (parties): If necessary due to the nature of the matter, sensitive data contained in the dispute documentation may be processed, such as health data, racial or ethnic origin, religious, philosophical, or moral beliefs, union membership, political opinions, or sexual orientation. Financial or asset-related data may also be collected.
Legal representatives, attorneys-in-fact, lawyers, and advisors: Full name, gender, nationality, address, phone number, email address, official identification, CURP, RFC, position, profession, professional license, professional history, powers of attorney, authorizations, and documentation proving their legal capacity, representation, or technical or professional competence.
Witnesses, experts, interpreters, translators, and other involved third parties: Full name, gender, nationality, address, phone number, email address, official identification, CURP, RFC, occupation, profession, professional license, professional history, and documentation proving their technical or professional qualifications.
Mediators, arbitrators, secretaries, and specialists: Full name, gender, nationality, address, telephone number, email address, official identification, CURP, RFC, handwritten signature, professional history, commercial and professional references, documentation proving their technical or professional capacity, as well as, where applicable, information regarding representatives, employees, or personnel assigned to the matters.
Employees and job applicants: Full name, gender, nationality, address, phone number, email address, official ID, CURP, RFC, social security number, bank details, emergency contacts, education, employment information, professional history, employment references, professional license, and documentation proving their technical or professional qualifications.
Suppliers and contractors: Full name, gender, nationality, address, phone number, email address, official identification, CURP, RFC, tax information, bank details, powers of attorney, professional history, commercial references, and documentation proving their technical or professional capacity.
Website users: Full name, gender, nationality, address, phone number, email address, IP address, online identifiers, browsing data, and other data derived from the use of our website, forms, platforms, and digital channels.
II. Purposes of personal data processing
The personal data collected by CMA-BCS will be used to fulfill the obligations arising from the legal relationship established with each data subject, as well as to comply with applicable legal and administrative requirements. Additionally, such data may be used for secondary purposes aimed at improving the experience of customers and other individuals associated with CMA-BCS.
Primary purposes: Respond to inquiries, formalize the legal or contractual relationship, provide the requested services, manage and follow up on entrusted matters, schedule and hold in-person or virtual meetings, sessions or hearings, issue invoices, manage payments, comply with legal and contractual obligations, and in general, carry out all activities necessary for the provision of CMA-BCS services, considering the particularities applicable to each category of data subject.
Secondary purposes: Additionally, and provided the data subject does not object to such use, your personal data may be processed for marketing, advertising, and commercial prospecting purposes, including sending information about our services, promotions, newsletters, events, invitations, satisfaction surveys, informational content, institutional updates, and activities related to alternative dispute resolution mechanisms.
III. Options and means to limit the use or disclosure of personal data
In order to ensure the protection of personal data, data subjects or their representatives may request that CMA-BCS limit the use or processing of their data (other than the exercise of ARCO rights). To do so, they must send an email to direccion@cma-bcs.com, indicating their full name, relationship with CMA-BCS, documents proving their identity or legal status, as well as the type of limitation they wish to apply.
These requests will be granted only to the extent that applicable law does not require CMA-BCS to retain or process the data for specific purposes. Limiting the processing of personal data may make it impossible to continue the corresponding legal relationship.
Likewise, data subjects or their representatives may revoke the consent granted for the processing of their personal data by sending an email to direccion@cma-bcs.com, in which they must include their full name, relationship with CMA-BCS, documents proving their identity or legal status, and a brief explanation of the reasons for the revocation.
IV. Mechanisms and means for exercising ARCO rights
Data subjects have the right at any time to exercise their rights of access, rectification, cancellation, and opposition ("ARCO") regarding the processing of their personal data, by sending a written notice to the CMA-BCS address, addressed to the personal data department, or by submitting a request via email to: direccion@cma-bcs.com
The request to exercise ARCO rights must include:
·: The name of the data subject and their address or any other means for receiving notifications.
·: Documents proving the identity of the data subject or, where applicable, the legal status and identity of their representative.
·: A clear and precise description of the personal data regarding which you seek to exercise any of the ARCO rights, except in the case of the right of access.
·: A description of the ARCO right to be exercised, or the specific request made by the data subject.
·: Any other information or document that facilitates the identification of the personal data.
If requesting the correction of personal data, the data subject or their representative must also specify the changes to be made and provide documentation supporting their request.
CMA-BCS will notify the data subject, within a maximum of twenty calendar days from the date the request was received, of the decision reached, so that, if applicable, it may be implemented within fifteen days following the date the response is communicated. The aforementioned deadlines may be extended once for an equal period.
V. Transfer of personal data
CMA-BCS will not rent or sell your information to third parties. Personal data may be shared only in the following cases:
With suppliers and service providers: CMA-BCS may share your data with individuals or entities that provide goods or services to fulfill its corporate purpose. In these cases, only the strictly necessary data will be provided.
With affiliated companies: CMA-BCS may transfer your personal data to entities or companies that are part of its corporate group or that are considered related parties.
By legal or judicial mandate: CMA-BCS may transfer personal data when necessary to comply with requests from a competent authority, safeguard a public interest or pursue justice, recognize, exercise, or defend rights in a judicial proceeding, and fulfill obligations arising from an employment or contractual relationship.
With the Colegio de Corredores Públicos del Estado de Jalisco, A.C.: CMA-BCS may share your personal data when necessary for the referral, follow-up, validation, institutional coordination, or handling of matters related to the services provided by CMA-BCS. In such cases, only the personal data strictly necessary for the corresponding purpose will be transferred.
If you do not wish for your personal data to be transferred for any of these purposes, you may indicate this by sending an email to: direccion@cma-bcs.com
VI. Retention, blocking, and deletion period
The duration of the processing of data subjects' personal data shall be indefinite, calculated from the date on which the data subjects provide their personal data to CMA-BCS, and is subject to the duration of the legal relationship maintained with the data subject ("Retention Period"). Once the Retention Period has ended, CMA-BCS will block the personal data for a period of 72 months ("Blocking Period"). Once the Blocking Period has elapsed, CMA-BCS will delete the data subject's personal data.
VII. Use of cookies, web beacons, or other similar technologies
CMA-BCS informs you that it uses cookies and similar technologies to improve your browsing experience on our website. Through these tools, we can collect and store information when you access our digital services, which allows us to analyze traffic and usage of our website, remember your language preferences, identify your IP address, time of day, and browsing duration, as well as track the sections you visit.
VIII. Changes to the Privacy Policy
CMA-BCS reserves the right to modify and/or change this Privacy Policy at any time; in such cases, any modifications may be viewed at https://cma-bcs.com/es/privacidad.
IX. Security measures to ensure the protection of personal data
CMA-BCS, as the data controller responsible for processing personal data, is obligated to comply with the principles of lawfulness, consent, information, quality, purpose, fairness, proportionality, and accountability established by law. CMA-BCS undertakes to maintain strict confidentiality regarding the data subjects' personal data, as well as to maintain the administrative, technical, and physical security measures necessary to protect such data against any damage, loss, alteration, unauthorized access, use, disclosure, or processing.
Last updated: April 9, 2026
I acknowledge and understand the scope and meaning of this Privacy Policy and consent to the processing and transfer of my personal data and sensitive personal data in accordance with the terms and conditions set forth herein.