Privacy notice

I. Data controller

CEREBREX, TECNOLOGÍA Y SERVICIOS S.A.S. de C.V., operating under the Ascendio Tech brand, is responsible for processing your personal data.

For anything related to this notice, contact us at:

• Email: info@ascendiotech.com
• WhatsApp: +52 81 1554 1168

II. Personal data we collect

When you message us on WhatsApp or fill out a form:

• Name
• Phone or WhatsApp number
• Email address
• Company, industry and role
• Any information you share about your business and what you need

Automatically, when you visit the site:

• Pages visited, time on site and buttons you click
• Device type, operating system and browser
• Approximate location (city or region), based on your IP address
• The campaign or ad that brought you, if any

Ascendio Tech does not collect sensitive personal data such as racial or ethnic origin, health, religious beliefs, union membership, political opinions or sexual orientation.

III. Purposes

Primary purposes (needed to serve you):

• Replying to your messages and information requests
• Scheduling and carrying out your business diagnosis
• Preparing quotes and proposals
• Providing the services you hire, with follow-up and support
• Invoicing and meeting legal and tax obligations

Secondary purposes:

• Sending you information about new services, products and content
• Measuring and improving our website and ad campaigns
• Running satisfaction surveys

If you do not want your data used for secondary purposes, email info@ascendiotech.com with the subject "I do not authorize secondary purposes". Saying no does not affect the services you request.

IV. Products with their own notice

Some Ascendio Tech products process additional data and have their own privacy notice, which applies in addition to this one:

• Numma (invoicing over WhatsApp): www.ascendiotech.com/numma/privacy
• AutoPartner: www.ascendiotech.com/autopartner/aviso-de-privacidad

V. Cookies and tracking technologies

Our website uses third-party cookies and similar technologies to measure visits and ad performance:

• Google Analytics: pages visited, time on site, device and browser type, and approximate location.
• Meta Pixel (Facebook and Instagram): visits and clicks to WhatsApp, to measure and improve our campaigns.
• Browser session storage: remembers the campaign that brought you during your visit. It is deleted when you close the tab.

These technologies do not collect the content of your conversations or forms. You can disable or delete them in your browser's privacy settings; the site keeps working.

VI. Data transfers

To operate, we use providers that process data on our behalf: Meta (WhatsApp, Facebook and Instagram), Google (Analytics and Workspace) and our web hosting providers.

We may transfer your data without your consent only where the law allows it, such as when a competent authority requires it. We do not sell your data or share it with third parties for their own purposes.

VII. ARCO rights

You have the right to access your personal data, rectify it if it is inaccurate, cancel it when you consider it unnecessary, and object to its processing for specific purposes.

How to request it:

Send your request to info@ascendiotech.com including:

• Your full name and how we should reply
• A clear description of the right you want to exercise and the data involved
• A copy of an official ID (INE or passport)

We will acknowledge receipt within 5 business days and reply within 20 business days. If your request is approved, it takes effect within the following 15 business days. These periods may be extended once for an equal period when justified.

VIII. Withdrawing consent and limiting use

You can withdraw your consent or limit the use of your data at any time by following the ARCO procedure. Withdrawal does not apply to data we must keep due to a legal obligation or an active contract.

You can also sign up for PROFECO's Public Consumer Registry (REPEP) to stop receiving advertising.

IX. Security

We apply administrative, technical and physical measures to protect your data, such as encrypted connections (HTTPS), access control and confidentiality agreements with our team.

X. Data retention

• Prospect data: up to 12 months after the last contact
• Client data: during the business relationship and 5 years after, for tax obligations
• Website measurement data: according to Google Analytics and Meta retention periods

XI. Changes to this notice

We may update this notice. Any change will be published on this page, with the update date at the top.

XII. Competent authority

If you believe your right to personal data protection has been violated, you can file a complaint with Mexico's Secretaría Anticorrupción y Buen Gobierno, which took over the duties of the former INAI.