Notice of Privacy
In accordance with the “Ley Federal de Protección de Datos Personales en Posesión de Particulares” (Federal Law on the Protection of Personal Data Held by Private Parties hereinafter referred to as the “Law”), the Contrato de Fideicomiso de Administración Irrevocable número 5270 (Admnistration Trust Agreement number 5270, hereinafter referred to as the “Controller”), with Federal Taxpayer Registry FCM2307135R3, with registered address at Av. Roble #600, Office 11-01, Colonia Valle del Campestre, San Pedro Garza García, Nuevo León, is responsible for the processing of your personal data.
For purposes of this Notice, “Data Subject” shall mean the individual whose personal data is subject to processing, in accordance with the Law.
We acknowledge the importance of the privacy of your personal and sensitive personal data; therefore, in compliance with the Law, we implement administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.
In the collection of personal data, we follow all the principles established by the Law (Art. 5): lawfulness, purpose, loyalty, consent, quality, proportionality, information, and accountability.
1. Sources of Personal Data:
For the provision of our commercial services and administrative and employment activities, we use:
- Information provided directly through various means such as in-person or remote, such as in interviews, paper forms, telephone, and/or electronic media.
- Information collected when you visit our websites.
- Information obtained from publicly available lawful sources.
2. Personal Data Subject to Processing:
- Identification data
- Contact information
- Socioeconomic data
- Personal characteristics
- Employment data
- Academic data
- Tax information
- Immigration data
- Asset data
- Financial data
- Family information
Likewise, we may collect sensitive personal data when it is strictly necessary to comply with legal or contractual obligations.
3. Use of Personal Data:
- To assess the legal and financial feasibility for the acquisition of real estate units.
- For collection activities arising from the acquisition of real estate units.
- To verify legal background and regulatory compliance.
- To comply with tax obligations and the prevention of transactions with illicit funds in accordance with applicable legislation.
- To formalize transactions before public notaries and trusts.
- To comply with requests from authorities.
Additionally, for secondary purposes, your data may be used for statistical purposes and for sending promotional information or invitations to events, including those related to different units and/or apartment complexes that we consider may be of interest to you, or regarding products provided by any affiliate.
The Data Subject may object to the processing of their data for secondary purposes by sending an email to info@alisia.com.mx.
4. Use of Cookies and/or Similar Technologies:
When using our web portal, we may use cookies and/or similar technologies that allow us to collect your IP address and browser version for security purposes and to reduce risk in your inquiries and transactions. This information will be used to comply with applicable regulatory provisions.
5. Sharing Information:
We may share personal data among the entities that form part of the Controller and its affiliates, as well as with third parties acting as data processors, including:
- Law firms
- Public Notaries
- Trustee institutions
- Auditors
- Financial consultants
- Technology providers (CRM, cloud storage)
The processors will handle the data under the Controller’s instructions and with the security measures provided by the Law.
Additionally, we may share information to respond to requests from authorities and to protect and defend the Controller’s rights, always in accordance with Chapter V, Articles 35 and 36 of the Law.
Transfers made to the persons indicated in this section, when necessary to comply with contractual or legal obligations, will not require additional consent from the Data Subject as provided by the Law.
6. Retention Period:
Your data will be retained:
- During the term of the contractual relationship.
- For up to 5 years after the termination of the contractual relationship or for the longer period applicable under legal obligations.
Afterwards, the data will be deleted or anonymized.
7. How We Protect Personal Data:
- Personal data will be protected administratively, technically, and physically to prevent loss, misuse, unauthorized access, disclosure, modification, or destruction of the personal data you have provided.
- Security measures are adopted considering the type of data processed and the risks involved, in accordance with applicable legislation.
8. How to Contact Us:
- For any matter related to personal data protection and to exercise your ARCO rights (access, rectification, cancellation, and objection), please contact Contrato de Fideicomiso de Administración Irrevocable numero 5270 at Av. Roble #600, Office 11-01, Colonia Valle del Campestre, San Pedro Garza García, Nuevo León, Monterrey, from 9:00 a.m. to 6:00 p.m. on business days, as applicable, or by email to the Data Protection Department at info@alisia.com.mx.
- The ARCO request must contain and be accompanied by the requirements set forth in Article 28 of the Law, including:
- Name
- Identification
- Description of the right to be exercised
- Documents proving identity
The Controller will respond within a maximum period of 20 (twenty) business days from receipt of the request, which may be extended in accordance with the Law. If applicable, the right will be enforced within the following 15 (fifteen) business days.
In case of denial, you may file a complaint before the Ministry of Anti-Corruption and Good Governance.
9. Changes to this Privacy Notice:
At any time, the necessary modifications may be made to adapt, update, improve, or comply with new legal provisions regarding this Privacy Notice.
10. Sensitive Personal Data:
- In accordance with the Law, sensitive personal data are those relating to racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union membership, political opinions, and sexual preference. In such cases, the Data Subject must provide express consent through a handwritten signature, electronic signature, or any verification mechanism established for such purpose.
- The processing of sensitive personal data will be carried out only when strictly necessary and with the prior express written consent of the Data Subject.
Last update February 26, 2026