CCTV

• Aeropuerto de Monterrey, S.A. de C.V.
• Aeropuerto de Acapulco, S.A. de C.V.
• Aeropuerto de Ciudad Juárez, S.A. de C.V.
• Aeropuerto de Culiacán, S.A. de C.V.
• Aeropuerto de Chihuahua, S.A. de C.V.
• Aeropuerto de Durango, S.A. de C.V.
• Aeropuerto de Mazatlán, S.A. de C.V.
• Aeropuerto de Reynosa, S.A. de C.V.
• Aeropuerto de San Luis Potosí, S.A. de C.V.
• Aeropuerto de Tampico, S.A. de C.V.
• Aeropuerto de Torreón, S.A. de C.V.
• Aeropuerto de Zacatecas, S.A. de C.V.
• Aeropuerto de Zihuatanejo, S.A. de C.V.
• OMA Logística, S.A. de C.V.
• Servicios Complementarios del Centro Norte, S.A de C.V.

This privacy notice (hereinafter the “Privacy Notice”) is governed by the principles of legality, purpose, loyalty, consent, quality, proportionality, information and responsibility in the processing of personal data.

OMA makes this Privacy Notice available to all those who enter or transit through the OMA facilities and who may be videorecorded by the Closed Circuit Television (CCTV) system. By this means, you are informed of the purpose of the processing of your Personal Data, in accordance with article 14 of the Federal Law on Protection of Personal Data Held by Private Parties (the “Law”).

The processing of your Personal Data will be understood as any operation or set of operations carried out through manual or automated procedures applied to Personal Data, related to the obtaining, use, registration, conservation, utilization, storage, possession, access, handling or disposal thereof.

You are informed that the treatment is part of the security measures adopted inside the OMA facilities, through monitoring of the CCTV system.

It is important that the Owner takes into consideration that, due to the fact that OMA collects your Personal Data through the video surveillance system, it is not obliged or committed to initiate or maintain any legal and/or commercial and/or administrative relationship with the Owner.

Likewise, it is important to note that, if the Owner does not agree to the processing of his/her Personal Data, he/she will not be obliged to provide OMA with any data. In this sense, the Owner accepts the possibility that OMA may restrict access to or stay in the video-recorded areas. Likewise, if, having accepted this Privacy Notice, the Owner subsequently exercises its rights of cancellation or opposition as defined below, OMA may limit access to said facilities, given the impossibility of complying with the purposes of the video surveillance system.

The Personal Data that can be collected and, where appropriate, will be subjected to processing by OMA are the following (hereinafter, the “Personal Data”):

Data on physical characteristics

Moving images of the Owner and the general public, who enter and transit within the OMA facilities, as well as in the perimeter area. OMA informs that, through the video surveillance system (CCTV), no sensitive personal data will be collected, understood as those that may reveal aspects such as racial or ethnic origin, health status, genetic information, religious, philosophical or moral beliefs, union membership, political opinions or sexual preference, in terms of what is established by the Law.

OMA will process the Owner's Personal Data for the following purposes:

1. Preserve the security of people, facilities, goods and information within OMA and its perimeter area.
2. Keep track of entries and exits of employees, visitors, suppliers, contractors and any other person who accesses OMA facilities.
3. Ensure the safety and integrity of airport personnel, concessionaires, service providers, users and visitors, both national and foreign.
4. Prevent, detect and, where appropriate, alert the competent authorities about any risk situation, emergency, illegal act or event that endangers operational security.
5. Prepare reports, statistics and internal reports related to security and access to facilities.
6. Respond to requirements from any competent authority.
7. Comply with applicable legal provisions.
8. Deliver evidence of regulatory compliance to airport and aviation authorities such as the Federal Civil Aviation Agency, when required.

OMA will keep the Owner's Personal Data for a period of up to 30 calendar days from the date of obtaining it, as long as there is no requirement from any competent authority, that there is no longer period due to applicable legal provisions or that the Owner and OMA are in any judicial or administrative procedure pending resolution, in which case, said period may be extended as required.

OMA will only transfer the Owner's Personal Data to its national and/or foreign affiliates, which belong to the same business group and operate under the same policies as OMA, so in terms of article 36, sections IV and VII of the Law, it will not be necessary to have the Owner's consent to make such transfers.

However, if OMA needs to transfer the Owner's Personal Data with third parties other than its national and/or foreign affiliates, OMA will inform the third parties of the Privacy Notice, as well as the purposes to which the Owner subjected the processing of its Personal Data, so the third party that receives the transfer of said Personal Data will be obliged to process said Data in accordance with this Privacy Notice.

Unless expressly stated otherwise, the Owner accepts the transfer of his/her Personal Data to third parties in accordance with the above.

OMA collects the Owner's Personal Data only through the following means:

• Through the Owner directly by electronic means.
• By direct transfer from its national and/or foreign affiliates of OMA, which belong to the same business group and operate under the same policies as OMA.

As part of the security measures that allow the Owner's Personal Data to be protected, access for the processing of said Data is limited and is exclusive to authorized personnel from the Operations and Security area of OMA and, exceptionally, your data may be shared with the legal area of OMA or with the people referred to in fractions (vi) or (vii) of the section “Purposes of the Processing of Personal Data” of this Privacy Notice, if those arise. assumptions.

Likewise, OMA has administrative, technical and physical security measures that protect the Owner's Personal Data against damage, loss, alteration, destruction or unauthorized use, access or processing.

OMA does not use or disclose the Owner's Personal Data for purposes other than those described above; However, if the Owner wishes to limit the use or disclosure of his/her Personal Data, he/she will be registered on an exclusion list, and the Owner must send to the address of OMA or to the email datapersonales@oma.aero, a written request addressed to the Department of Protection and Processing of Personal Data, which must contain at least the name or company name of the Owner along with an identification that proves his/her personality, his/her address, an email to hear and receive notifications and indicate the express request that you want your Personal Data to be registered on an exclusion list.

The Owner has at all times the right to access, rectify, cancel or oppose the processing of their Personal Data, in accordance with the means and procedures indicated below.

Access: Know what Personal Data OMA has, what it will use it for and the treatment it will give it.

Rectification: Request the correction of Personal Data if it is outdated, inaccurate or incomplete.

Cancellation: Request the deletion of your Personal Data from OMA databases, when you consider that they are not being used appropriately. The request to exercise this right will give rise to a blocking period where the Personal Data that you wish to cancel will be archived for a maximum of 30 days.

Opposition: Oppose the use of your Personal Data for a specific purpose.

In this regard, OMA makes the following mechanisms, means and procedures available to the Owner to request their ARCO rights:

1. Make a written request addressed to the Department of Protection and Processing of Personal Data of OMA, located at Avenida Patriotismo number 201, Floor 5, Colonia San Pedro de los Pinos, Alcaldía Benito Juárez, C.P. 03900, Mexico City, which must contain at least the following information:

a)     Full name of the owner.

b)     Address to hear and receive notifications (email address or home address).

c)    Copy of the identification with which the Owner proves his/her personality, or, where applicable, of the Owner and his/her legal representative.

d)    Indicate which right or rights ARCO wishes to exercise.

e)    Clear and precise description of the Personal Data, with respect to which you request to exercise your ARCO rights.

 

2. Send the request to the email: ventaspersonales@oma.aero, for the attention of OMA, Department of Protection and Processing of Personal Data, which must contain the same requirements as the immediately preceding number: ventaspersonales@oma.aero

Once the request is received, OMA will have a period of twenty business days following the date of its receipt, to decide on its admissibility or inadmissibility, the resolution of which will be notified to the Owner at the address provided for such purposes.

Said period may be extended on a single occasion for up to an equal period, as long as it is justified and the circumstances of the case so warrant.

In the event that the Owner's request is declared inadmissible, the corresponding evidence will be accompanied by the corresponding resolution.

If the request is appropriate, the exercise of the ARCO right(s) requested by the Owner will be effective within fifteen business days following the day in which the adopted resolution was communicated.

OMA may deny the exercise of ARCO rights, in the following cases:

a) If the applicant is not the Owner or his legal representative, he does not prove his personality or that of his client.

b) If the applicant's Personal Data is not found within the OMA databases.

c) When the rights of a third party are violated.

d) If there is a legal impediment or requirement by an authority.

e) When the rectification, cancellation or opposition has been previously made so that the request lacks substance.

In the event that the Owner wishes to revoke his consent for the processing of his Personal Data in accordance with this Privacy Notice, the Owner may externalize his revocation following the same procedure that is applicable for the exercise of ARCO Rights, described above.

The revocation of consent by the Owner to the processing of their Personal Data will not generate retroactive effects, however, once said consent is revoked, the Controller may terminate any relationship that exists between it and the Owner if it is necessary to have said data to meet the objectives of the relationship.

Any change or modification to this Privacy Notice will be made known to the Owner, making the new Privacy Notice physically available to them, in the event that their Personal Data is collected personally and, electronically, when their Personal Data is obtained by any electronic, optical, sound, visual, or through any other technology, so that they can stay informed regarding it and, where appropriate, exercise their rights. The modifications to the Privacy Notice will come into force at the time the Notice is made available to the Owner.

This Privacy Notice is available to the Owner at the address of OMA, or through the following email address: https://www.oma.aero/es/derechos-de-privacidad/

By making this Privacy Notice available to the Owner and, there being no opposition on his part, it is understood that the Owner has read this Privacy Notice, is aware of its scope and purposes and consents to his Personal Data being processed in accordance with it.