ACERTIVA INVESTIGACIÓN DE MERCADOS, S.C. (hereinafter “Acertiva”), with headquarters at Rio Misisipi 49, Piso 14, Cuauhtemoc, C.P. 06500, Cuauhtemoc, CDMX, Mexico, and website www.acertiva.com, is responsible for the processing of your personal data and for compliance with the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality, and accountability established in applicable laws.
1. PERSONAL DATA WE COLLECT
- We may collect the following personal data depending on your interaction with us:
- Contact details: Address, phone number, email address.
- Identification data: Name, gender, age, profession, specialty.
- Professional data: Professional license number, workplace, work experience, academic degrees.
Financial data: Banking information for incentive payments.
Sensitive data: Health information (only when participating in studies related to specific medical conditions and with prior express consent).
2. PURPOSES OF PROCESSING
Your personal data will be processed for the following purposes:
Primary purposes (necessary for the relationship with Acertiva):
- To identify you as a potential participant in market research studies.
- To contact you to invite you to participate in research studies.
- To manage your participation in market research projects.
- To verify your identity and professional credentials.
- To manage corresponding incentive payments.
- To comply with tax and legal obligations.
- To verify that you do not appear on exclusion or debarment lists.
- To provide attention to requests, complaints, or claims.
Secondary purposes (not necessary for the relationship with Acertiva):
- To keep you informed about future market research studies.
- To conduct internal statistical and market analyses.
- To improve our processes and services.
- To send you communications about relevant events or publications.
3. TRANSFERS OF PERSONAL DATA
Your personal data may be transferred and processed within and outside of Mexico by entities other than Acertiva. The information will only be shared with:
- Our clients (companies that contract market research studies) under strict confidentiality agreements and exclusively for the authorized research purposes.
- Service providers that assist us in conducting market research studies.
- Competent authorities when required by law.
For international data transfers, we implement mechanisms such as standard contractual clauses and appropriate security measures in accordance with applicable regulations, including GDPR, CCPA/CPRA, and VCDPA.
4. SECURITY MEASURES
Acertiva has implemented and maintains administrative, technical, and physical security measures that comply with international standards (aligned with ISO 27001) to protect your personal data against damage, loss, alteration, destruction, unauthorized access, or processing, which include:
- Information security policies and procedures
- Strict access controls to personal data
- Encryption of sensitive data
- Regular training for our staff
- Risk assessments and security audits
- Incident response plans
5. ARCO RIGHTS AND CONSENT REVOCATION
You have the right to:
- Access your personal data and know the details of the processing.
- Rectify your data when it is inaccurate or incomplete.
- Cancel your data, which implies its deletion from our records.
- Object to the processing of your data for specific purposes.
- Revoke your consent for the processing of your personal data.
To exercise these rights, you may contact our Data Protection Officer at the email address: contacto@acertiva.com, or submit your request in writing at our address. Your request should contain:
- Full name and contact information
- Documents that prove your identity
- Clear description of the rights you wish to exercise
- Any document that facilitates the location of your data
We will respond to your request within a maximum period of 20 business days.
6. LIMITATION OF USE OR DISCLOSURE
To limit the use or disclosure of your personal data, you can send your request to the email address contacto@acertiva.com. Your registration in the corresponding registry will be confirmed via email.
7. INTERNATIONAL COMPLIANCE AND CROSS-BORDER TRANSFERS
Acertiva complies with applicable data protection regulations, including:
- European Union General Data Protection Regulation (GDPR)
- Federal Law on Protection of Personal Data Held by Private Parties (Mexico)
- California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
- Virginia Consumer Data Protection Act (VCDPA)
- EU-U.S. Data Privacy Framework
For international transfers, we implement the Standard Contractual Clauses approved by the European Commission and additional security measures when necessary.
8. CHANGES TO THE PRIVACY NOTICE
Any modification to this privacy notice will be communicated through our website www.acertiva.com or by email if we have your address. The date of the last update of this notice is: May 19, 2025.
9. CONTACT
For any questions or clarifications regarding this privacy notice, you may contact our Data Protection Officer:
- Email: contacto@acertiva.com
- Address: Rio Misisipi 49, Piso 14, Cuauhtemoc, C.P. 06500, Cuauhtemoc, CDMX, Mexico
By providing us with your personal data, you acknowledge that you have read and understood the terms of this Privacy Notice and consent to the processing of your personal data as established herein.