Privacy Notice
Nemak México, S.A. (“Nemak”) is committed to protecting your personal data in accordance with applicable data protection laws, including the Mexican Federal Law for the Protection of Personal Data Held by Private Parties and the General Data Protection Regulation (GDPR). This Privacy Notice describes how we collect, use, disclose, and safeguard your personal data when you interact with our website.
What is personal data?
“Personal data” is defined in both the Mexican Federal Law for the Protection of Data in Possession of Private Companies or Individuals and in the General Data Protection Regulation (GDPR) as any information concerning an identified or identifiable individual, including but not limited to information such name, address, phone number or date of birth.
Data Collection
In processing personal data, we abide by the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, security, responsibility, integrity, confidentiality, accountability, consent, information, quality and proportionality. By preserving your anonymity, some information will be transferred while accessing this website, such as your IP address, used device, browser type/version, Referrer URL, time of server request, transferred data volume, among others. Nemak cannot allocate this data to a certain person. In addition to the foregoing, the subsequent identification through fusion of data will not be possible, because such a fusion will not take place. However, we reserve the right to subsequently check the content of the data in case of justified suspicion of unlawful use. The storage is also required to ensure the proper functioning of our website and helps optimize and secure our systems. Our legitimate interest in data storage pursuant to Art. 6(1)(f) of the GDPR also lies in these purposes.
Cookies
Our website uses cookies to make our offers more user friendly and effective (“Performance and Analytics Cookies”). Performance and Analytics Cookies and similar technologies are used to analyze reach and performance in order to enable an evaluation of website usage.
Learn more about our Cookies Policy
Contact
Your personal data will only be used for the purpose for which you transferred it to us. A statement of this information is expressly provided on a voluntary basis and with your consent. So long as this information includes communication channels (i.e. e-mail address or phone number), you agree that we may contact you through these means to answer your request. You may also decide to contact us through the suppliers’ form. In such case, the data filled in the fields will be transmitted and stored. Such data may include your name, email address, phone number, IP address and the date and time of sending the message.
Of course, you have the right to revoke your declarations of consent at any time. In doing so, please send an e-mail to
dataprivacy@nemak.com. The legal basis for the processing of data in the presence of a consent and for the processing of data transmitted in the course of sending an e-mail is Art. 6(1)(a) and Art. 6(1)(f) of the GDPR.
We will erase your information obtained by contacting you as soon as it is no longer needed to achieve the underlying purposes.
Business partners, clients and suppliers
We process personal data that we have received from you in the course of our business relationships, for example, to prepare and execute contractual relationships and for communication purposes. In doing so, we (including third parties or processors commissioned by us) process the following data from you or your employees, provided that you have communicated these to us before or during the course of the contractual relationship:
- your contact data or the contact details of the respective contact person (including, without limitation, name, telephone number, e-mail address)
- bank data, if this concerns personal data (IBAN, bank, account holder) and payment information (turnover data in payment transactions)
To the extent necessary to provide our services, we transfer personal data to other companies within the Nemak Group and process personal data that are rightfully transmitted to us by other companies within the Nemak Group.
The recipients may also be in third countries (i.e. countries outside the European Union and the European Economic Area "EEA"). We conclude the standard privacy clauses provided by the Commission of the European Union with third-country service providers or other companies of the Nemak Group. These clauses provide appropriate safeguards for the protection of your data with service providers in the third country.
The legal basis for this data processing is Art. 6(1)(b) and Art. 6(1)(f) of the GDPR. The data will be stored until the expiration of mutual legal claims and in accordance with statutory storage obligations.
Newsletter
If you wish to subscribe to our newsletter, you may enter your e-mail address where applicable. After entering your e-mail address, you will receive a confirmation e-mail. The newsletter will be sent only after your express consent by clicking on a link in the confirmation email. We process your e-mail address only for the purpose of delivering the newsletter, with the legal basis for the processing of the data after registration for the newsletter being Art. 6(1)(a) of the GDPR.
Your e-mail address will be stored until you unsubscribe from the newsletter. Of course, you have the right to revoke your consent at any time and, thus, unsubscribe from the newsletter. Please click on the corresponding button in the sent newsletter or send an e-mail to
dataprivacy@nemak.com.
Application
There is a possibility for you to apply electronically. We will use your personal data only for the processing of your application and will not transfer the data to third parties other than the Nemak Group. For more detailed information, please take note of the declaration of consent provided in the application process or in our application management system.
Transparency Helpline
Nemak uses a “Transparency Helpline”, an internal whistleblower system, designed to facilitate the reporting of compliance concerns. We have undertaken measures to establish appropriate safeguards according to Art. 46 of the GDPR to ensure the safety of your personal data being processed in a third country.
Personal data is processed for the purpose of reviewing and documenting the reports, for internal investigations (including disclosure to external attorneys, auditors or other professionals bound by professional secrecy as well as to the involved Nemak Group companies) and, if necessary, for disclosure to government agencies (such as the police, public prosecutor's office or courts). The legal basis for the processing of personal data in the scope of the Transparency Helpline is Art. 6(1)(c) of the GDPR, where it is necessary to fulfil legal obligations and Art. 6(1)(f) of the GDPR where the processing is based on our legitimate interests to ensure the compliance with our internal guidelines, such as the code of conduct or to protect us from legal claims.
When you use the Transparency Helpline, we will process the content of your notice, including any personal data included therein. Your name will only be processed if you decide to disclose it in your notice. Depending on the communication channel you choose, we will also store data relating to this (e.g. e-mail address, fax number). Kindly take note that you have no obligation to share this data with us but can also communicate any information anonymously. When we receive information, including personal data, via the Transparency Helpline, we handle this information with caution and confidentiality. Only such employees with a need-to-know basis in order to investigate the filing, are granted access to this information. We will store the information received in a filing for as long as required to fulfil the purposes mentioned above, but in no case exceeding a period of three years following the end of an investigation.
No transferring data to third parties
No personal data is transferred to third parties except if necessary to comply with applicable law. Given that external companies will process your personal data, we take all necessary legal, technical and organizational measures to make sure that these companies comply with the provisions of Data Protection Law.
Protection of Personal Data
Nemak is committed to implementing stringent mechanisms for the protection of personal data, in order to ensure the proper use of your data, always safeguarding their security, privacy, and confidentiality. To achieve this, Nemak will employ administrative, technical, and physical measures to prevent loss, unauthorized use, unauthorized access, disclosure, alteration, or destruction.
ARCO Rights, Limitations, and Revocation
We would like to inform you that you have the right to request from Nemak the exercise of the ARCO rights (Access, Rectification, Cancellation, or Opposition) according to applicable law. It is understood that, for Nemak to properly and promptly address the ARCO request, it must contain and be accompanied by the following: (i) the data subject’s name and address or other means to communicate the response to their request; (ii) the documents that prove the data subject’s identity or, if applicable, legal representation; (iii) a clear and precise description of the personal data for which any of the aforementioned rights are being exercised, and (iv) any other element or document that facilitates the location of the personal data. Nemak’s response to your request will be sent within a reasonable timeframe to the sender’s email address.
Please direct any inquiries to the following e-mail address:
dataprivacy@nemak.com
Responsible
The legal entity responsible for the website (website operator) is:
Nemak México, S.A. Libramiento Arco Vial Km. 3.8, García, Nuevo León C.P. 66017 Telephone: +52 81 87485200 Telefax: +52 81 87485210 Web:
www.nemak.com Commercial Register: 43888*9 - Tax I.D. (RFC): NEM790312D81
Legal Notice
Nemak makes the required efforts to ensure that the information contained on this website is accurate at the time it is uploaded. However, inadvertent errors and inaccuracies may occasionally occur involuntarily. Nemak makes no expressed or implicit guarantee as to the accuracy or validity of the information contained on this website, including any links and other accessories that may be used directly or indirectly for the same purposes, and it reserves the right to make any changes or additions without prior notice.
Nemak does not undertake any responsibility for any direct or indirect damages that may arise as a result of the use of the information contained on this website. The information contained on this website does not constitute or should not be taken as an invitation to invest in or do any business with Nemak’s shares. Any user who provides information to Nemak through this website, implicitly accepts that this information is non-confidential and therefore, Nemak has the right to use it for the purposes that it deems convenient.
Contact information
Any clarification or doubt regarding this Privacy Notice should be reviewed with Nemak's Governance and Compliance department by sending an email to: governance@nemak.com