The fact that an individual has knowledge of the destination of the personal data that he or she provides to any other person or company is part of his right to privacy.
Many people provide data on websites or applications without even consulting the purposes of collecting such information, how it will be used and with who it will be shared.
On the internet, when a “benefit” is obtained for free, the user must know that it is likely that their data is being shared for, among other things, advertising.
In Mexico, according to the Federal Law for the Protection of Personal Data in Possession of Individuals (LFPDPPP), both natural and legal persons through their legal representatives have the right to know the treatment that is being given to their personal data, the person responsible for the treatment must have available the Privacy Notice that must contain, among other elements, the way the owners of the data may access to their “ARCO RIGHTS”.
When we refer to ARCO Rights, we are talking about the right of a data holder to carry out the following actions with respect to the shared data:
- Access: Know at all times who has your data, what data they have and what they are being used for.
- Rectify: Request rectification of your data in case it is incomplete or inaccurate.
- Cancel: Request the cancellation of the same for not complying with the applicable provisions.
- Oppose: Oppose the use of your data if it was obtained without your consent.
It is important to note that the exercise of ARCO rights has no cost to the owner, and must have a response from the responsible person within a period of no more than 20 days after receiving the request in accordance with article 32 of the LFPDPPP.
If you have doubts about how to exercise your ARCO rights or need advice to start a complaint procedure due to the lack of protection of your personal data, send us an email to comunicacion@gphlegal.mx to support you.
María Galaviz
Gloria Ponce de León & Hernández
