Privacy Policy

Privacy Policy

Comprehensive Privacy Notice for the Gavea website
Last updated: october, 2026]
At Gavea, confidentiality is one of our non-negotiable principles. This Privacy Policy explains, in clear and simple terms, what personal data we collect through our website, how we use it, with whom we may share it, and how you can exercise your rights.
This document is our Comprehensive Privacy Notice (Aviso de Privacidad Integral) under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Gazette of the Federation on March 20, 2025 (the “Law”), and other applicable regulations.

1. Identity and address of the data controller

Gavea Consultoría y Servicios, operating under the trade name Gavea (“Gavea”, “we”, “us”), with its address at Anatole France, 354 – G2, Polanco IV Sección, Miguel Hidalgo, CDMX, CP 11550, México, is responsible for processing your personal data.
Privacy contact: contacto@gavea.com.mx
Website: www.gavea.com.mx (the “Site”)

2. Personal data we collect

We only collect the data needed to respond to your interest in our logistics engineering, simulation, and intralogistics design services:

Category

Data

How we obtain it

Identification and contact

Name, email address, phone number

Contact forms or email

Professional data

Company, job title, industry, country, city

Contact forms or assessment requests

Request details

Message, general description of your operation or project

Contact forms or email

Job applications (if applicable)

Résumé, experience, education, professional profile

Careers section or voluntary CV submission

Browsing data

IP address, browser and device type, pages visited, date and time of access

Cookies and similar technologies

 

We do not collect sensitive personal data (such as ethnic origin, health status, religious beliefs, or political opinions) or financial data through the Site. Please do not include such data in forms or in your résumé.

If you share data about other people (for example, colleagues at your company), you confirm that you are authorized to do so.

3. Purposes of processing

Primary purposes (necessary to handle your request):
1. Responding to your inquiries, information requests, proposals, or assessments.
2. Following up on any business or professional relationship arising from your request.
3. Evaluating job applications and contacting candidates (if applicable).
4. Operating, maintaining, and securing the Site.
5. Complying with legal obligations and requests from competent authorities.
Secondary purposes (not necessary; require your consent):
1. Sending newsletters, technical articles, event invitations, and communications about our services.
2. Producing statistics and analysis on Site usage to improve our content.
If you do not want your data used for secondary purposes, you can tell us at any time by writing to [privacy@domain.com] or by using the “unsubscribe” link in each communication. Opting out will not affect how we handle your request.

4. Data transfers

Gavea does not sell or rent your personal data. We may only transfer it without your consent in the cases provided for in Article 36 of the Law, including:
• To companies within the same group operating under the same internal processes and policies.
• To competent authorities, when there is a legal obligation or a duly grounded order.
• When necessary to establish, exercise, or defend a right in legal proceedings.
Any other transfer requiring your consent will be disclosed to you in advance so you can accept or decline it.
Service providers. To operate the Site, we rely on providers that process data on our behalf (for example, web hosting, email, form management, and analytics). These providers act on our instructions, are contractually bound to protect your data, and may not use it for their own purposes. Some may be located outside Mexico.

5. Cookies and similar technologies

The Site uses cookies to function properly, remember your preferences, and understand how it is used:
• Essential cookies: required for the Site to work and stay secure. They cannot be disabled.
• Analytics cookies: help us measure visits and improve content (for example, [Google Analytics]). They are only activated with your consent.
You can accept, reject, or configure non-essential cookies through the Site’s cookie banner or your browser settings. Disabling them may affect some features.

6. Your rights and withdrawal of consent

You have the right to:
• Access: know what data we hold about you and how we process it.
• Rectification: correct it if it is inaccurate or incomplete.
• Cancellation: request its deletion when it is no longer needed.
• Objection: object to its processing on legitimate grounds or for specific purposes.
These are known in Mexico as ARCO rights. You may also withdraw your consent at any time, without retroactive effect.
How to exercise them. Send an email to [contacto@gavea.com.mx] with the subject line “Privacy Rights Request”, including:
1. Your name and a way to send you, our response.
2. A document proving your identity or, where applicable, that of your legal representative.
3. A clear description of the right you wish to exercise and the data involved.
4. Any information that helps us locate your data.
We will respond within a maximum of 20 business days from receipt of your request and, if applicable, carry it out within the following 15 business days. These periods may be extended once for an equal period when justified, in accordance with Article 31 of the Law.
If you believe your request was not properly handled, you may contact Mexico’s Secretaría Anticorrupción y Buen Gobierno, the competent data protection authority.

7. Options to limit use or disclosure

In addition to your rights, you can limit the use of your data by:
• Unsubscribing from our communications via [contacto@gavea.com.mx] or the “unsubscribe” link.
• Rejecting non-essential cookies.
• Registering with PROFECO’s Public Registry to Avoid Advertising (REPEP), if you are in Mexico.

8. Security and retention

Gavea serves clients in Latin America and other regions. If you access the Site from another country, your data will be processed in accordance with this Policy and Mexican law, while also respecting the rights granted by your local data protection law (for example, Brazil’s General Data Protection Law (LGPD) or the European Union’s General Data Protection Regulation (GDPR)). You can exercise those rights through the same channels described in Section 6.

9. Users outside Mexico

Gavea serves clients in Latin America and other regions. If you access the Site from another country, your data will be processed in accordance with this Policy and Mexican law, while also respecting the rights granted by your local data protection law (for example, Brazil’s General Data Protection Law (LGPD) or the European Union’s General Data Protection Regulation (GDPR)). You can exercise those rights through the same channels described in Section 6.

10. Minors

The Site is intended for businesses and professionals. We do not knowingly collect data from individuals under 18. If we discover that we have, we will delete it.

11. Changes to this Policy

We may update this Policy due to legal changes or changes in our services or practices. The current version will be published at [www.gavea.com.mx/privacy], showing the last updated date. If changes are significant, we will also highlight them on the Site or notify you by email when we have your address.

12. Contact

For any questions about this Policy or how we process your data:
Gavea Consultoría y Servicios
Anatole France 354 – G2, Polanco IV Sección, Miguel Hidalgo, CP 11550, CDMX, México
contacto@gavea.com.mx

Scroll to Top