1. Who is responsible for your data
KEY SERVICES 5LG, S.C., which uses the trade name Grupo 5LG, with its address at Av. Lázaro Cárdenas 2953, Col. Chapalita, C.P. 44500, Guadalajara, Jalisco, Mexico, which is also its address for receiving notifications, is the controller (responsable) of the personal data we collect through this site: the data you send us through the contact form and the data you send us when you write to hola@grupo5lg.com, the email address we publish here.
Grupo 5LG is the trade name of this single company. No other group companies receive your data.
Personal data department: the internal Grupo 5LG team that handles requests about personal data. Contact: hola@grupo5lg.com.
2. What data we collect
The only place on the site where we ask you for data is the contact form. There we collect:
- Name (required)
- Company (optional)
- Email (required)
- Phone (optional)
- Message (optional, free text)
- Whether or not you want to receive promotions, newsletters and updates from Grupo 5LG (the checkbox is explained in section 4)
When you submit the form we also record the date and time of the submission, its status, the fact that you accepted this notice and the version of the notice you accepted. The email we receive also includes the language of the page you are writing from. Your IP address is used for the anti-bot check and to limit the number of submissions; in our database we do not store the IP as such, but a fingerprint derived from it (a salted hash), which we delete within a maximum of 48 hours.
Cloudflare, which hosts the site and runs the anti-bot check, also processes your IP address and technical data about your browser and your connection. We explain this in sections 5 and 6.
If instead of using the form you write to us directly at hola@grupo5lg.com, we process your name, your email address and whatever you send us only for necessary purposes 1 and 3 in section 3 (not for promotions, unless you ask us to in writing), with the providers in section 5 that apply, and we keep that data as described in section 7. When we reply, we will send you the link to this notice.
Data from follow-up channels. If we follow up on your request through WhatsApp, we process your number, the messages and calls we exchange and whatever you send us through that channel, and we will see the name, photo and profile information you have made visible according to your privacy settings in that app. If we arrange a video call on Microsoft Teams, your image and your voice are transmitted during the call.
Video call recording. We only record a video call if you authorize us to, and we always ask you before we start recording. If you do not authorize it, we do not record it. The recording contains the image and voice of the participants and whatever is shared on screen during the meeting. We use it only to follow up on what was agreed in that meeting, and we keep it for 12 months from the date of the meeting (section 7).
We do not ask you for sensitive personal data, or for financial or asset-related data. Because the Message field is free text, we ask you not to write sensitive data there (such as data about your health, ethnic origin, beliefs, political opinions or sexual preference) or data about other people that is not needed for your request. The same applies if you write to us by email or WhatsApp. If we nonetheless receive sensitive data we did not ask for, we will not use it for any purpose and we will delete it from the database, from email and from chats as soon as reasonably possible after detecting it.
3. What we use your data for
Purposes necessary to handle your request:
- To reply to your message and follow up commercially on that request: schedule a first meeting (by video call on Microsoft Teams, if we arrange one) or send you a proposal. We contact you by email and, if you gave us your phone number, also by WhatsApp messages or calls. If you did not check the promotions checkbox, we will only contact you about the request you sent us. If you authorize us to record a video call, we use the recording only to follow up on what was agreed in it.
- To protect the form against abuse: verify that the submission is not made by an automated program and limit the number of submissions.
- To comply with legal obligations, respond to requests from competent authorities, process your requests regarding your rights, revocation or limitation and, where applicable, exercise the rights or fulfill the obligations arising from our relationship with you. The law does not require your consent for this purpose.
For purposes 1 and 2 you give us your consent by checking the box "I accept the privacy notice, including Cloudflare's use of the anti-bot check data". The anti-bot check (section 6) starts at that moment; the rest of the processing starts when you submit the form. Without your consent to these purposes, we cannot handle your request through the form. Recording a video call also requires your express authorization, which we ask for before we start recording.
Secondary purpose (marketing), which is not necessary to handle your request:
- To send you, by email, promotions, newsletters and updates about Grupo 5LG's products and services.
We only use your data for this purpose if you give us your consent by checking the corresponding box. If you do not check it, we handle your request just the same.
We do not use your data for purposes other than those in this notice. If we wanted to do so, we would ask for your consent again.
4. Promotions, newsletters and updates: you decide
The form has a checkbox that reads "I'd like to receive promotions, newsletters and updates from Grupo 5LG.". That checkbox appears unchecked and is optional.
- If you do not check it, we will not use your data to send you promotions, newsletters or updates, and your request is handled just the same.
- If you check it, we will use the contact details you gave us in the form to send you, by email, what is described in purpose 4 of section 3. We send them from our Microsoft 365 email. We store your choice together with the date and time of the submission.
- If you change your mind later, you can unsubscribe at any time and free of charge by writing to hola@grupo5lg.com (section 11).
5. Who else processes your data
Within Grupo 5LG, your data is used only by our staff. We do not sell or assign it, and we do not share it with other companies, partners or firms for them to use for their own purposes, except for Cloudflare's uses explained below and in section 6.
To make the site and the form work and to handle your request, we use these providers, which process the data on our behalf (with their own sub-processors):
- Cloudflare: hosts the site, receives the form submissions and stores them in its database, and provides us with the anti-bot check (Turnstile), described in section 6.
- Microsoft (Microsoft 365): the content of the form reaches us by email at hola@grupo5lg.com through its email service; from our email we reply to you and, if you accepted it, send you promotions, newsletters and updates. We also use Microsoft Teams for the video calls we schedule with you and, if you authorize us, to record them.
- WhatsApp: if you gave us your phone number, we may message or call you on WhatsApp to follow up on your request. We use the WhatsApp Business app, in which WhatsApp processes your number on our behalf. If you also use WhatsApp, your use of that app is governed by its own terms and its privacy notice.
These providers may process the data on servers located outside Mexico.
Cloudflare's own use and your choice. Cloudflare (Cloudflare, Inc., headquartered in the United States), in addition to providing us with the anti-bot check, uses the technical data from that check (your IP and data about your browser and your connection) on its own account and as a controller (responsable) to improve its bot detection, under its Turnstile privacy notice: cloudflare.com/turnstile-privacy-policy. Cloudflare states that it cannot directly identify anyone from that data; even so, under Mexican law your IP may be personal data, and that is why we ask for your acceptance. You decide whether to accept that use: you accept it if you check the box "I accept the privacy notice, including Cloudflare's use of the anti-bot check data"; if you do not accept it, do not check the box and write to us directly at hola@grupo5lg.com: we will handle your request just the same. Without checking that box, the form is not submitted.
Outside those cases, we would only disclose your data without your consent when a law or a treaty to which Mexico is a party provides for it; when it is necessary or legally required to safeguard a public interest or for law enforcement or the administration of justice; when it is needed to recognize, exercise or defend a right in a judicial proceeding; when it is necessary under a contract entered into, or to be entered into, in your interest between us and a third party; or when it is needed to maintain or fulfill a legal relationship between you and us. If in the future we wanted to transfer your data in a case that requires your consent, we would ask you for it beforehand.
6. Cookies and storage in your browser
- The site does not use its own cookies or tracking cookies, or analytics tools, tracking pixels or advertising. While you browse grupo5lg.com no cookie is set in your browser; the only ones that may be used are those of the anti-bot check, only when you check the notice box (last bullet).
- The site stores two preferences in your browser's local storage (
localStorage): whether you prefer the light or dark theme and whether you paused the animations. They stay on your device, are not sent to our servers, and you can delete them from your browser settings. - As a hosting service, Cloudflare processes your IP address and technical data about your browser and your connection every time you open a page on the site, in order to deliver it to you and protect it against attacks. Cloudflare also uses the traffic data from its network on its own account, as a controller, under its privacy policy (cloudflare.com/privacypolicy), for the security of its network and its services. We do not use that data to identify you or to build profiles.
- Cloudflare's anti-bot check (Turnstile) loads only when you check the box "I accept the privacy notice, including Cloudflare's use of the anti-bot check data". Before that, the site does not load it. When it loads, it processes your IP address and technical data about your browser and your connection, and it may use Cloudflare's own cookies or storage that are necessary to perform the check. Cloudflare also uses that data on its own account to improve its bot detection (section 5). If you uncheck the box, we remove the check; processing that has already taken place cannot be undone (section 11). Because these cookies and storage are necessary for the form to work, they cannot be turned off within the site. You can block or delete them from your browser settings, but then you may not be able to submit the form. In that case, write to us directly at hola@grupo5lg.com.
7. How long we keep your data
- Form database: submissions are kept for 12 months from when we receive them and are deleted no later than one day after that period ends. The fingerprint of your IP is deleted sooner, within a maximum of 48 hours (section 2).
- Email and calendar (Microsoft 365): the emails about your request in our Microsoft 365 accounts (hola@grupo5lg.com and those we use to follow up with you), whether the form message or the one you write to us directly, as well as those we send or receive about it, are deleted when 12 months have passed from their date. Calendar appointments for the meetings we schedule with you, and your contact if we save it in Outlook, are deleted no later than 30 days after they are 12 months old. Permanent deletion in Microsoft's systems may take up to 30 more days (calendar appointments, up to 120 days).
- WhatsApp and Teams: WhatsApp and Teams chats about your request, and your contact if we save it on a work phone, are deleted no later than 30 days after they are 12 months old. Video call recordings you have authorized are kept for 12 months from the date of the meeting and are then deleted.
- Promotions, newsletters and updates: if you agreed to receive them, we send them using the data from your submission for as long as that data is kept under this section, or until you ask to unsubscribe, whichever comes first.
- Backups: a deleted record may remain for up to 30 more days in the database restore points. In Microsoft 365, permanent deletion follows the periods in the "Email and calendar" bullet (up to 30 more days; calendar appointments, up to 120 days).
We only stop applying these periods when there is a specific obligation to keep the data (a request from an authority, a rights request or a claim in progress). In that case we block the data, do not use it for anything else and delete it when that obligation ends. If you engage our services, the data needed for that relationship will be processed under the client privacy notice, which we will give you at that time.
8. How we protect your data
We apply administrative, technical and physical measures to protect your data, including an encrypted connection (HTTPS), validation and size limits on the data, the anti-bot check and a submission limit, storing the IP only as a salted fingerprint and for a maximum of 48 hours, access limited to our staff, and handling of credentials outside the code. No measure completely eliminates risk.
If a security breach occurs that significantly affects your property (economic) or moral (non-economic) rights, we will inform you immediately so that you can take steps to defend them.
9. How to limit the use of your data
- Promotions, newsletters and updates: do not check the box when you submit the form or, if you already checked it, ask to unsubscribe at hola@grupo5lg.com (section 11).
- Cloudflare's own use: if you do not accept it, do not check the notice box and write to us directly at hola@grupo5lg.com (section 5). If you already used the form, see section 11.
- WhatsApp: if you do not want us to contact you on WhatsApp, tell us in your message or write to us at hola@grupo5lg.com, and we will contact you only by email.
- Video call recording: if you do not want us to record, do not authorize it when we ask you. If you already authorized it, you can revoke it at hola@grupo5lg.com (section 11).
- What you share: the phone number and the message are optional; share only what you need for your request.
- Any other use or disclosure: you can ask us at any time, at hola@grupo5lg.com, to limit the use or disclosure of your data. We will handle that request, where applicable, with the requirements in section 11 and the periods in section 10.
10. Your ARCO rights (access, rectification, cancellation and opposition)
You have the right to:
- Access: know what data of yours we hold and how we process it.
- Rectification: correct it if it is inaccurate, incomplete or out of date.
- Cancellation: ask us to delete it from our files and systems. Where applicable, the data is first blocked (it is kept only to address the responsibilities arising from the processing, during the limitation period for the actions arising from the legal relationship on which the processing is based, under the applicable law) and then deleted. If there are no such responsibilities to address, we simply delete it. We will let you know when the cancellation has been carried out.
- Opposition: object to its processing, or ask us to stop processing it, for a legitimate reason.
If a cancellation, or a rectification affecting the anti-bot check data, is granted, we will also communicate it to Cloudflare with respect to the use it makes on its own account (section 5).
Exercising one of these rights does not prevent you from exercising another.
Where. Write to hola@grupo5lg.com. Requests are handled by the personal data department indicated in section 1.
What your request must include:
- Your name and an email address or other means for us to reply to you.
- A copy of an official ID attached to the email (you may black out the data not needed to identify you, such as the CURP, the voter ID number (clave de elector) or the address). If a representative submits it, also their ID and the document proving the representation (a public instrument (instrumento público) or a power of attorney letter (carta poder) signed before two witnesses). We may ask you to confirm the request from the email address you wrote to us from.
- A clear description of the data regarding which you want to exercise your right (not needed if you are requesting access).
- Which right you want to exercise or what you are asking us for.
- Any other data or document that helps us locate your information.
If you request a rectification, also indicate what change needs to be made and attach, if applicable, the document that supports it.
We will use those documents only to verify identity and handle your request. We delete the copy of the ID as soon as we verify identity, and we keep only the record that we did so. We keep the request, the other documents and our response for 12 months from when we close the request, and then we delete them.
Time periods. When we receive your request, we will confirm the date we received it. If any data or document is missing, we will ask you for it only once within the following 5 business days, and you will have 10 business days to send it. The response period is always counted from when we receive your request. If we do not receive what is missing, we will tell you within that period that we cannot handle the request without that information, and you may submit it again whenever you want.
We will communicate our response to you within a maximum of 20 business days from when we receive your request. If the request is granted, we will carry it out within the 15 business days following that response. These periods may be extended only once by an equal period when the circumstances of the case justify it; if we extend a period, we will tell you the reason before it expires. We will reply to you through the same channel you used to write to us.
How we deliver your data to you. For access requests, once your identity is verified, we will send you your data in an electronic document by email.
Cost. Exercising these rights is free of charge. Because we reply to you by email, there are no reproduction or shipping costs.
If you do not agree with our response, you can file a data protection request (solicitud de protección de datos) with the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance) within the 15 business days after we communicate it to you. You can do the same if we do not deliver the data you requested, if we deliver it in an incomprehensible format, incomplete, or not matching what you requested, or if we refuse to make the corrections you requested. If we do not reply to you on time, you can file it once the response period has expired; keep the email with which you sent us your request, because it proves the date.
11. How to revoke your consent or unsubscribe
You can revoke the consent you gave us at any time, without retroactive effect: to stop receiving promotions, newsletters and updates, or for us to stop using your data entirely, except for data we must keep by law or to address responsibilities arising from the processing (sections 7 and 10).
How. Write to hola@grupo5lg.com and state your name, the email address you wrote to us from and which consent you are revoking; to unsubscribe from promotions, it is enough to write "unsubscribe" (or "baja") to us from the email address where you receive them. You can also use the contact form and request the revocation in the message; if you do so, we will use that submission only to process it. To withdraw your acceptance of Cloudflare's use, write to us at hola@grupo5lg.com and not through the form, because the form asks you to accept it again. If you write to us from an email address different from the one you used, we will ask you to confirm from the original email address; if you no longer have access to it, you may verify your identity in another way. We will ask you to verify your identity only if we have a reasonable doubt about it. It is free of charge.
Cloudflare's own use. That use is decided by Cloudflare as a controller. If you already used the form and want to withdraw your acceptance or exercise your rights regarding that use, you can write to Cloudflare at sar@cloudflare.com (section 8, "Data Subject Rights and Choices", of its privacy policy) or at dpo@cloudflare.com. You can also ask us at hola@grupo5lg.com: we will forward your request to Cloudflare and confirm to you that we did so within the periods in section 10. Keep in mind that Cloudflare states that it cannot directly identify anyone from that data, so it may ask you for information to locate it.
Time periods and response. We will reply to you through the same channel, within the same periods as in section 10. If you ask us to, we will confirm to you when we have stopped using your data for what you revoked.
If you revoke your consent for the necessary purposes, we may no longer be able to handle your request. Revoking consent for the secondary purpose does not affect how your request is handled.
12. Changes to this notice
If we change this notice, we will publish the new version on this same page (grupo5lg.com/privacy-notice.html), with its last updated date at the top. We suggest you check it from time to time.
If the company responsible for your data changes, or if we wanted to use your data for a new purpose or transfer it in a case that requires your consent, updating this page will not be enough: we will make a new notice available and, when your consent is needed, we will ask you for it beforehand. If the conditions of Cloudflare's use that you accepted change, we will publish a new notice and ask for your acceptance again for the submissions we receive from then on.
This notice was written in Spanish; this English version of the site is a translation of the Spanish version. If there is any difference between the two, the version more favorable to you will apply.