Privacy Policy
ORBE BPO, S. DE R.L. DE C.V. (“OBPO”), with its registered address at Paseo de la Reforma No. 333, 7th Floor, Col. Cuauhtémoc, Alcaldía Cuauhtémoc, Mexico City, Postal Code 06500, is the Data Controller responsible for the processing of your personal data, pursuant to the Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), its Regulations and Guidelines (hereinafter referred to as the “LFPDPPP”), in accordance with the following provisions:
1. Data Protection Officer
The Data Controller has appointed a Data Protection Officer, whose contact details are as follows:
Name: Ana María Ortínez Mosqueda
Address: Paseo de la Reforma No. 333, 7th Floor, Col. Cuauhtémoc, Alcaldía Cuauhtémoc, Mexico City, Postal Code 06500.
Telephone: (55) 5980-0200
Email: ana.ortinez@obpo.com.mx
2. Personal Data Collected from Data Subjects
The personal data we collect from our clients, individuals making inquiries, job applicants, and employees vary depending on the purposes for which such data are collected, as described below.
Depending on the nature of each matter, we may collect the following categories of personal data:
a) For the Provision of Our Services
Personal Data:
First name, last name, business address (street, neighborhood, postal code, state, and municipality), registered tax address (street, neighborhood, postal code, state, and municipality), Tax Status Certificate (Constancia de Situación Fiscal), Federal Taxpayer Registry number (RFC), landline telephone number, mobile telephone number, email address, Unique Population Registry Code (CURP), date of birth, signature, and voter identification code.
Financial or Asset-Related Personal Data:
Bank name, CLABE (standardized bank account number), bank branch, agreement, reference number, bank address, assets (current and fixed), liabilities, contracts, sales, sales discounts, cost of goods or services sold, selling expenses, administrative expenses, non-operating income, operating profit, income tax, net profit, type of tax return, tax filing period, fiscal year, date and time of tax filing, and electronic signature (FIEL).
Sensitive Personal Data:
Photograph, nationality, and photographs of the registered tax address.
b) For Recruitment and Employment Purposes
Personal Data:
First name, l´ast name, business address (street, neighborhood, postal code, state, and municipality), registered tax address (street, neighborhood, postal code, state, and municipality), Federal Taxpayer Registry number (RFC), Mexican Social Security Institute (IMSS) registration number, landline telephone number, mobile telephone number, email address, Unique Population Registry Code (CURP), date of birth, age, educational background, school or university attended, desired income, emergency contact name, emergency contact telephone number, job position, previous employment, signature, place of birth, department, employment start and termination dates, reason for termination, termination-related remarks, marital status, and address of the property subject to an INFONAVIT housing loan.
Sensitive Personal Data:
Photograph, nationality, and sex.
By providing us with your information and documentation, you declare, under a formal statement of truthfulness (bajo protesta de decir verdad), that the information provided is complete, truthful, and accurate.
The personal data and information submitted may be verified as part of the advisory or recruitment process.
1. Purposes of Personal Data Processing
a) For the Provision of Our Services
OBPO processes your personal data for the following purposes:
- To identify and contact you;
- To provide you with professional services;
iii. To coordinate the provision of requested third-party services;
- To establish and maintain client records;
- To issue invoices and collect payments;
- To comply with applicable laws and regulations;
vii. To provide quotations;
viii. To clarify payments and/or invoices; and
- To pursue any legal actions that may be appropriate.
Secondary Purposes:
OBPO also processes your personal data to send informational emails regarding tax and legal obligations and regulations applicable to companies and business owners.
b) For Recruitment and Employment Purposes
OBPO processes your personal data for the following purposes:
- To assess your qualifications and suitability for an available job position;
- To conduct interviews and verify the information provided in your curriculum vitae; and
iii. To carry out the personnel selection process, where applicable.
If you are hired, your personal data will additionally be processed for the following purposes:
- To create and maintain your employee personnel file;
- To execute the agreements and documents necessary to formalize your employment relationship;
- To store the information required for salary payments;
vii. To provide the statutory employment benefits to which you are entitled;
vii. To maintain information concerning your economic dependents for applicable employment-related legal procedures;
- To establish health and sanitary measures aimed at disease control and employee protection;
- To comply with the legal provisions governing your employment relationship; and
- To pursue any legal actions that may arise from your employment and legal relationship with OBPO.
c) Secondary Purposes
OBPO does not process your personal data for secondary purposes.
If you do not meet the required qualifications or no suitable employment vacancy is available, your personal data will be destroyed within thirty (30) days following the submission of your job application.
If you participate in a recruitment and selection process conducted by OBPO, your information will be retained for the entire duration of that process.
By signing this document, you expressly consent to the processing of your personal data in accordance with the terms of this Privacy Notice.
4. Domestic and International Transfers of Personal Data
Pursuant to Article 37 of the LFPDPPP, OBPO may transfer all or part of your personal data to the Mexican Tax Administration Service (SAT), the Mexican Social Security Institute (IMSS), the National Workers’ Housing Fund Institute (INFONAVIT), the National Fund Institute for Workers’ Consumption (FONACOT), and other authorities that may require such information pursuant to applicable law.
OBPO also carries out the following domestic transfers of personal data, which do not require your consent:
- To law firms for the provision of legal advice;
- In connection with legal proceedings; and
iii. To insurance companies for the provision of major medical expense insurance coverage, where applicable.
5. Procedures for Exercising Rights of Access, Rectification, Cancellation, and Opposition (ARCO Rights)
To exercise your rights of Access, Rectification, Cancellation, or Opposition (ARCO Rights), you must send an email to the Personal Data Department at:
You will be provided with the corresponding application form, which must be completed with the following information:
- The name and address of the Data Subject;
- Documents establishing the identity of the Data Subject and/or the authority of their representative or legal representative, as applicable;
iii. A clear and precise description of the personal data in relation to which the Data Subject seeks to exercise their rights;
- Any additional information or documentation that may facilitate the identification and location of the relevant personal data; and
- Identification of the specific right the Data Subject wishes to exercise.
OBPO will respond to your request in accordance with the provisions of the LFPDPPP.
6. Procedure for Withdrawal of Consent
The Data Subject may withdraw, at any time and without retroactive effect, the consent previously granted to the Data Controller for the processing of their personal data.
To withdraw consent, the Data Subject must submit a request by email to:
The request must include the Data Subject’s full name, telephone number, and address, together with a copy of an official identification document establishing their identity.
If the request is submitted through a legal representative, the representative must provide documentation evidencing their legal authority, together with a copy of their official identification document.
Where applicable, the request must also include the date of the Data Subject’s most recent request, as well as an email address or physical address to which the Data Controller may send its response within the time limits established by the LFPDPPP.
Alternatively, the Data Subject may complete and submit a written request directly at OBPO’s offices, located at the address specified in the introductory paragraph of this Privacy Notice.
7. Use of Technological Mechanisms for Collecting Personal Data (Cookies and Web Beacons)
Please be advised that OBPO does not collect personal data through the use of cookies or web beacons on its website, nor does it use any other technologies to obtain personal information, such as:
- Your browser type and operating system;
- The websites you visit;
- The links you follow;
- Your IP address; or
- The website you visited before accessing ours.
8. Security Measures Implemented
To protect your personal data, we have implemented administrative, physical, and technical security measures designed to prevent the loss, misuse, or alteration of such information.
The Data Controller applies the same security measures to the protection of your personal data as those used to safeguard its own proprietary information.
9. Amendments to the Privacy Notice
The Data Controller reserves the right to amend or update this Privacy Notice at any time to reflect changes in legislation or judicial precedents, internal policies, new requirements relating to the provision or offering of our services or products, and prevailing market practices.
Any such amendments will be communicated to you at our offices, located at:
Paseo de la Reforma No. 333, 7th Floor, Col. Cuauhtémoc, Alcaldía Cuauhtémoc, Mexico City, Postal Code 06500.
Alternatively, amendments may be communicated through the following website:
If Data Subjects do not submit an objection within five (5) calendar days after becoming aware of an amendment, the Data Controller will deem them to have consented to and accepted the amended terms.
Any objection must be submitted in accordance with the procedure established in Section 6 of this Privacy Notice.
10. Right to Initiate Data Protection Rights and Verification Proceedings Before the INAI
For complaints or additional information, you may contact our Personal Data Department using the telephone number and email address provided in this Privacy Notice.
If you disagree with any response issued by OBPO, you may file the corresponding complaint or report with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI).