Comprehensive Privacy Notice

Updated Legal Version: September 2025

In compliance with the Federal Law on Protection of Personal Data Held by Private Parties (the “Law”), FinTech ACMX, A.C. (“FinTech México”), with registered address at Av. Paseo de la Reforma 255, Floor 14 A, Col. Cuauhtémoc, Cuauhtémoc Borough, C.P. 06500, Mexico City (for service of process), is responsible for the processing of your personal data under this privacy notice (the “Notice”).

1. Personal Data We May Collect

We may collect the following categories of personal data: identification data, contact data, employment (or professional) data, and financial data, strictly as necessary for the purposes described in this Notice.

If we collect sensitive personal data—such as information related to verification of financial standing and legal background—we will request your express written consent.

2. Purposes of Processing

Primary Purposes (Necessary)

The Personal Data we collect from you will be used for the following primary purposes, which are necessary to fulfill our obligations arising from a legal relationship with you:

  • To identify you, contact you, and register you for FinTech México activities, services, or events.
  • To manage payments, invoicing, and access to contracted benefits, which are necessary to fulfill our obligations arising from a legal relationship between FinTech México and the data subject.
  • To generate administrative and legal evidence necessary for the proper operation of the Association, which is necessary to fulfill our obligations arising from a legal relationship between FinTech México and the data subject.
  • To comply with obligations arising from your relationship with FinTech México as a member, attendee, or participant, which are necessary to fulfill our obligations arising from a legal relationship between FinTech México and the data subject.

Secondary Purposes (Optional; Require Your Consent)

With your consent, we may also use your Personal Data for the following secondary purposes:

  • To send you promotional communications, newsletters, and event invitations.
  • To conduct statistical analyses, satisfaction surveys, and internal studies to improve our services.
  • To disseminate content related to the fintech ecosystem.

If you do not wish your data to be used for secondary purposes, you may express your preference by emailing: asociacion@fintechmexico.org.

If you do not want your Personal Data to be processed for any or all secondary purposes, you may notify us at any time by following the procedure described in the “ARCO Rights” section of this Notice. Your objection will not be a reason to terminate the relationship established with us.

If we obtain your Personal Data indirectly, you will have a period of five (5) business days, as of our first contact with you, to express your refusal for processing your Personal Data for secondary purposes, through the email address provided in the “ARCO Rights” section.

3. Transfers

Your Personal Data may be transferred for the following necessary purposes, as applicable, which—pursuant to the exceptions provided by the Law—do not require your consent:

  • Competent authorities, when required by law.
  • Service providers that support us in event organization, invoicing, database hosting, logistics, ticket issuance, or technology services, as necessary to fulfill contractual obligations in the interest of the data subject.
  • Strategic partners and sponsors, to fulfill contractual obligations in the interest of the data subject.

Your Personal Data may be transferred with the data subject’s consent for the following secondary purposes:

  • Business partners for marketing purposes, under your tacit consent. Under no circumstances will your Personal Data be commercialized without your consent.

If you do not want your Personal Data to be processed for any or all secondary purposes, you may notify us at any time by following the procedure described in the “ARCO Rights” section of this Notice.

4. ARCO Rights and Revocation

You may exercise at any time your rights of Access, Rectification, Cancellation, and Opposition (known in Mexico as ARCO rights), as well as revoke the consent granted for the processing of your data, or limit the use or disclosure of your Personal Data.

Your request must be sent to asociacion@fintechmexico.org and must include at least:

  • your full name;
  • a contact method;
  • an official identification document (or, if applicable, that of your legal representative);
  • a clear description of the right you wish to exercise; and
  • any other element that facilitates locating the Personal Data with respect to which you seek to exercise ARCO rights.

Once the ARCO rights request is received:

  • FinTech México will have a period of twenty (20) business days to inform you whether the request is granted or denied.
  • If granted, FinTech México will have an additional period of fifteen (15) business days to implement what was requested.
  • The above periods may be extended for an equal period when justified, and you will be informed accordingly.
  • Even if the requested right is not granted, the Controller must respond within the same twenty (20) business-day period, explaining the reasons for denial.

5. Security Measures

Your data will be stored in secure physical and electronic media with restricted access. FinTech México implements reasonable administrative, technical, and physical measures to protect information against damage, loss, alteration, destruction, or unauthorized use.

6. Cookies, Web Beacons, and Similar Technologies

When you visit our website, it may store or retrieve information in your browser, primarily in the form of cookies and other similar technologies. These technologies allow us to analyze your behavior as a user to improve your browsing experience (e.g., remembering preferences such as language or region) and/or to identify and prevent fraudulent activities.

Through cookies and similar technologies, we may collect the following Personal Data: (i) the web pages you visit; (ii) the links you follow; (iii) your IP address; and (iv) the site you visited before entering ours.

These cookies and other technologies may be disabled. To learn how to do so, please consult your browser’s help menu. Please note that if cookies are disabled, you may not be able to access certain personalized features on our websites.

7. Changes to This Privacy Notice

This Notice may be updated at any time to address legal provisions or internal needs. Any modification will be published on the official website www.fintechmexico.org, under the “Privacy Notice” section.

‍