Privacy notice

1. Identity and address of the data controller

GECIAE S.A. de C.V. (hereinafter "the Controller"), with address at Predio Benjamina, Camino al Tazajal, La Victoria, Hermosillo, Sonora, CP 83304, Mexico, is responsible for the processing of personal data collected through the portal campusciae.com, in accordance with Mexico's Federal Law for the Protection of Personal Data in Possession of Private Parties (LFPDPPP).

Tax ID (RFC): pending — will be updated upon issuance

2. Personal data collected

Through the portal we collect:

• Visit form: name, email, phone, company or institution, visit type requested, party size, preferred and alternate dates, optional message.
• Contact form: name, email, subject, message.
• Navigation data: IP address, browser type, pages visited, time on site. Collected in aggregate and anonymous form via Cloudflare Web Analytics (cookieless, no individual tracking).

3. Sensitive data

Campus CIAE DOES NOT collect sensitive personal data per article 3 fraction VI of the LFPDPPP. We do not request information on racial or ethnic origin, health status, genetic information, religious beliefs, political opinions, sexual preference or union affiliation.

4. Processing purposes

Collected data is used for the following primary purposes (necessary for the relationship):

• Schedule and coordinate Campus visits.
• Respond to queries and messages received through the forms.
• Maintain post-visit communication if requested by the holder.

NOT used for marketing, commercial profiling or sale to third parties without explicit additional consent.

5. Data transfers

Data is not transferred to third parties, except to the following processors necessary for portal operation:

• Cloudflare, Inc. — hosting and CDN infrastructure provider.
• Resend — transactional email provider for confirming requests.
• Google Maps — only if the user interacts with the embedded map on the contact page.

No commercial transfer to third parties for marketing purposes. Stored data lives in Cloudflare's network (Cloudflare D1) under security policies and encryption in transit and at rest.

6. ARCO Rights

As data holder, you have the right to:

• Access the personal data we have about you.
• Rectify inaccurate or incomplete data.
• Cancel processing when you consider it no longer required for the purpose.
• Object to the use of your data for specific purposes.

To exercise any of these rights, send an email to info@ciae.com.mx with subject "ARCO Request" including: full name, copy of official ID, clear description of the right to exercise, and data the request refers to. We respond within a maximum of 20 business days.

7. Data retention

Data is retained for 24 months from the last active contact, then anonymized or deleted, unless legal obligation requires longer retention.

8. Cookies and similar technologies

This site DOES NOT use tracking or advertising cookies. Cloudflare Web Analytics is cookieless. The only technical cookie is the language preference (pref-lang, valid 1 year, only to remember your ES/EN choice).

9. Changes to this notice

This notice may be updated. The current version is always published on this page with the last update date at the top.

10. Consent

By using the portal forms and checking the acceptance box, you express your explicit consent for the processing of your personal data in accordance with this notice.