Privacy Notice

1. Data controller

Matus Ruiz & Romero Apis, located at Blvd. de los Virreyes 220, Lomas de Chapultepec IV Secc., Miguel Hidalgo Borough, 11000, Mexico City, is the controller of the personal data collected through any means, including this website, email, telephone, or in-person communications.

For any matter related to personal data protection, the contact email is contacto@matus-ruiz.com.

2. Personal data we collect

Depending on your relationship with the firm, we may process the following categories of personal data:

• Identification and contact data: name, company, position, email address, telephone number, and address.
• Professional and academic data: background, practice area, curriculum vitae, and professional credentials.
• Data arising from the legal relationship: information about matters, inquiries, counterparties, background, and related documentation.
• Billing and administrative data: tax identification number, billing information, and receipts.
• Technical website data: IP address, browser type, language, pages visited, and cookie preferences.

3. Sensitive personal data

In the course of certain legal matters, we may receive sensitive personal data, meaning data that affects the most intimate sphere of its owner or whose improper use may give rise to discrimination or entail serious risk. In such cases, the data will be processed only when necessary to provide the services, with enhanced security measures and, where required by law, with your express written consent.

4. Primary purposes

Your personal data will be used for the following purposes, which are necessary for our legal relationship:

• Responding to contact requests, inquiries, and service proposals.
• Assessing conflicts of interest and documenting the beginning of the professional relationship.
• Providing legal services, carrying out formalities, and following up on entrusted matters.
• Preparing documents, opinions, contracts, and other professional deliverables.
• Complying with legal, tax, accounting, and regulatory obligations.
• Collecting fees and administering the commercial relationship.
• Responding to requests from competent authorities and exercising or defending rights.

5. Secondary purposes

In addition, we may process your data to send you updates on legal developments, Perspectiva MR publications, event invitations, and materials of professional interest. These purposes are not necessary for the legal relationship, and you may object to them at any time by writing to contacto@matus-ruiz.com.

Refusing the processing of your data for secondary purposes will not be a reason to deny the services you request.

6. Consent

Consent for the processing of personal data may be express or implied under the LFPDPPP. Where express consent is required, it will be requested through legally permitted means, including forms, email, or specific clauses.

You may revoke your consent or limit the use or disclosure of your personal data by submitting a request to the contact email indicated in this Notice.

7. Transfers of personal data

Matus Ruiz & Romero Apis will not transfer your personal data to third parties without your consent, except in the cases permitted by the LFPDPPP, including compliance with legal obligations, responses to competent authorities, fraud prevention or detection, or services provided by suppliers acting on behalf of the firm under confidentiality and security obligations.

When it is necessary to share information with counterparties, authorities, experts, notaries, financial institutions, or other third parties to handle a matter, you will be informed within the professional relationship, and applicable contractual and security measures will be adopted.

8. ARCO rights

You have the right to access your personal data, rectify it when inaccurate or incomplete, cancel it when it is no longer necessary for the purposes that justified its processing, and object to its processing for specific purposes.

To exercise your ARCO rights, please send a request to contacto@matus-ruiz.com including: (i) your name and means of receiving notifications; (ii) a document proving your identity or representation; (iii) a clear description of the right you wish to exercise and the data involved; and (iv) any element that facilitates locating the information.

The firm will respond to your request within a maximum of twenty business days from receipt of the complete request. If the request is granted, it will be implemented within the following fifteen business days from the date of the response.

9. Limitation of use or disclosure

In addition to ARCO rights, you may request the limitation of the use or disclosure of your personal data by writing to contacto@matus-ruiz.com. The firm will keep a list of persons who request such limitation in order to avoid unwanted communications.

10. Retention and security

Personal data will be retained for the time necessary to fulfill the purposes described and applicable legal obligations. When it is no longer necessary, it will be deleted or anonymized in accordance with applicable law and the firm's internal policies.

The firm adopts reasonable administrative, technical, and physical measures to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, or disclosure. However, no system is completely infallible, so we recommend avoiding the transmission of sensitive information through insecure channels.

11. Cookies and website technologies

This website uses essential cookies to operate and, with your authorization, analytics cookies to understand how the site is used. You may accept all, keep only essential cookies, or configure your preferences in the cookie notice. Cookies are not used to personally identify visitors without their consent.

12. Minors

This website is not directed to minors, and the firm does not intentionally collect personal data from minors. If the firm becomes aware that a minor's data has been collected without proper authorization, it will take the necessary measures to delete it.

13. Changes to this Privacy Notice

The firm may modify or update this Privacy Notice to reflect legal or regulatory changes or changes in its processing practices. Modifications will be published on this site, indicating the date of the last update. In relevant cases, they may be notified through the contact means on record.

14. Authority and applicable law

This Notice is governed by Mexican law. If you believe your right to the protection of personal data has been infringed, you may resort to the competent federal authority on personal data protection, without prejudice to any other available remedies or defenses.

15. Contact

For any question, request, or clarification regarding this Privacy Notice, please write to contacto@matus-ruiz.com or to the address indicated in the first section. We will be pleased to assist you with the confidentiality that characterizes the firm.