Privacy Notice

Privacy Notice Responsible for the protection of your personal data

This Privacy Notice is issued to regulate the collection, obtaining, storage, disclosure, transfer, processing, and use of personal data of users of the Monterrey-Saltillo Highway and the Santa Catarina Viaduct, which are collected indistinctly by CONCESIONARIA AUTOPISTA MONTERREY – SALTILLO, S.A. DE C.V. ("CAMS") AND/OR VÍAS ADMINISTRACIÓN Y LOGÍSTICA, S.A. DE C.V. ("OPERADORA VIAL"), both with address at Blvd. Manuel Ávila Camacho No. 36, Floor 20, Lomas – Virreyes, Lomas de Chapultepec, Miguel Hidalgo Municipality, 11000 Mexico City, Mexico. For the purposes of this Privacy Notice, you are informed that CAMS will be the company responsible for the processing (use) of your personal data.

Any doubt, comment, complaint, or exercise of rights related to your personal data should be directed to the following email address: avisodeprivacidad@operadoravial.com.

What personal data do we collect?
Some of the personal data we collect serve to identify and contact users of the Monterrey-Saltillo Highway, the Santa Catarina Viaduct, and users of our products/services.
This data may consist of the following information:

Name and surnames;
Images and video of the Highway and Viaduct where you appear;
Payment and billing information (RFC);
Contact information (email and phone);
Vehicle information (make, model, color, weight, and license plate);
Insurance policy information;
Information necessary to use the electronic toll system (last digits of bank card and tag number);
Banking information;
Address and place of residence; and
Any similar information that allows identifying or contacting users.
In this regard, it is informed that sensitive personal data will not be collected for any reason.

For what purposes do we collect and use your personal data?
Your personal data will be used for the following purposes:

To make available the purchase and recharge of prepaid cards, license plates, or tags for crossing the Monterrey-Saltillo Highway and the Santa Catarina Viaduct;
To provide the crossing service for the Monterrey-Saltillo Highway and the Santa Catarina Viaduct through the purchase of prepaid cards;
In the case of video recording activities, to ensure the safety of users of the Monterrey-Saltillo Highway and the Santa Catarina Viaduct, for control and incident reporting; statistics and historical records on the use of toll points and booths, including traffic and circulation analysis;
The insurance policy will be used to address accident cases;
To manage user access to our QuickPass service;
Users' banking information will only be necessary to make refunds for incorrect or duplicate charges;
To keep a record of prepaid cards in circulation;
To manage the filing and integration of records and files of the contractual relationship for future service follow-up;
Financial management, billing, and collection;
Statistics on user behavior patterns;
To comply with the obligations and commitments we have made with you;
Marketing or advertising efforts related to the Monterrey-Saltillo Highway and the Santa Catarina Viaduct;

If you do not want your Personal Data to be used for the secondary purposes indicated, you can express your refusal for the processing of your personal data for those purposes by sending a message to the following email address: avisodeprivacidad@operadoravial.com.mx.

Whenever your Personal Data is no longer necessary for the fulfillment of the purposes described above and those provided for in the applicable legal provisions, they must be canceled, under the terms provided in this Privacy Notice and by the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations.

With whom do we share your personal information and for what purposes?
Your personal data may be sent or transferred to affiliated companies or the commercial group of CAMS, as well as commercial allies, in accordance with the assumptions allowed by the legal provisions on personal data protection or in the other cases established by applicable legislation, for the purposes previously described in this Privacy Notice, as well as for the purposes of management, administration and centralized safekeeping of information, and for attention to queries related to companies of the corporate group of the Responsible Party.

To obtain more information related to the sending or transmission of your personal data, we invite you to contact us through the email address mentioned in this Privacy Notice.

How can I access, rectify or cancel my personal data, or oppose its use?
You have the right to (i) access your personal data, (ii) rectify it if it is inaccurate or incomplete, (iii) cancel it when you consider that it is not required for any of the purposes indicated in this Privacy Notice, that it is being used for purposes not consented to or the service relationship has ended, or (iv) oppose its processing for specific purposes (collectively, "ARCO Rights"), under the terms established by the legislation on personal data protection that is applicable.

The exercise of these rights is subject to the following procedure:

The request must be in writing and signed, delivered to our address or sent to our email address indicated in this Privacy Notice (avisodeprivacidad@operadoravial.com.mx) and must always obtain an acknowledgment of receipt.
In case of acting through a legal representative, you must accompany your request with a certified copy of the corresponding notarial power granted under the terms provided by applicable legislation.
Your request must be accompanied by a copy of identification with photograph and signature, as well as any documentation referred to or related to your request and address to hear and receive notifications (physical and, if applicable, electronic).

Our response will be sent to the email address indicated in your request within a maximum period of 20 business days from the day your request was received. In case your request is answered affirmatively or favorably, the requested changes will be made within a maximum period of 15 business days. In case of an access request, personal data will be informed via email. CAMS may extend the periods referred to in this paragraph, only once, for a period equal to the original, which will be communicated to you.

CAMS may deny the exercise of your ARCO Rights only in the cases allowed by the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations. The reason for such decision will be communicated to you. Our refusal may be partial, in which case COPEX will carry out the access, rectification, cancellation or opposition in the appropriate part.

How can I revoke my consent for the use of my personal data?
As long as the revocation of consent does not result in the impossibility of complying with any of the obligations acquired by virtue of the relationship between you and CAMS, the consent granted by you to revoke for the processing of personal data may be revoked by delivering a request, in writing and signed, at our address or sending it to our email address (avisodeprivacidad@operadoravial.com.mx).

How can I limit the use or disclosure of my personal data?
You can limit the use or disclosure of your personal data to prevent them from being used or disclosed for purposes other than those that gave rise to or are necessary for your legal relationship with CAMS. If you wish to limit the use or disclosure of your personal data, you must submit a notification, in writing and signed, at our address or send it to our email address (avisodeprivacidad@operadoravial.com.mx).

If after having exercised your Data Protection Rights through the mechanisms established in this Privacy Notice, you consider that your right to personal data protection has been violated by any conduct or omission on our part; or you have evidence that in the processing of your personal data there is any violation of the provisions provided in the LFPDPPP, we invite you to contact us again to exhaust all internal procedures in order to fully satisfy your request. If this is not the case, you may file the corresponding complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI). For more information visit: https://home.inai.org.mx/

Personal data will be kept in the strictest confidentiality and will be adequately safeguarded.
For this purpose, CAMS has implemented and maintains the necessary security, technical, administrative, and physical measures to protect your personal data and prevent its loss, alteration, destruction or unauthorized use, access, or processing.

Changes to the Privacy Notice.
Any changes or updates to this Privacy Notice will be published through our website (http://www.operadoravial.com) or through the email address you have provided to us.

For the purposes of the provisions of the legal provisions on personal data protection, you grant your consent for the collection, processing, and use of your personal data from the moment you have provided them for the first time until the conclusion of your legal, professional or commercial relationship with us. By providing us with your data, we will understand that you have read, understood, and accepted the terms set forth in this Privacy Notice for the processing and use of your personal data.

Date of modification: December 4, 2023