Comprehensive Privacy Notice

1. Data controller

Projectcor, S.A. de C.V. (hereinafter, “Balloon Group”), with its address at Torcuato Tasso 245, Office 404, Polanco V Sección, Mexico City, Mexico City, 11560, is responsible for the processing of your personal data under the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

Contact for any privacy matter: privacidad@balloon-group.com

2. Personal data we process

• Identification and contact data: name, company, job title, email address, and phone number.
• Professional and employment data (candidates in recruitment processes): résumé, experience, education, and references.
• Tax and billing data (individual clients and suppliers): RFC (Mexican tax ID), tax address, and payment details. We process this financial data with your express consent.
• Browsing data: IP address, device and browser type, and pages visited, collected through cookies and similar technologies.

We do not process sensitive personal data.

3. Purposes

Purposes necessary for our relationship with you:

• Responding to requests for contact, information, quotes, and proposals.
• Providing, managing, and following up on contracted services, including invoicing and collection.
• Managing recruitment and selection processes.
• Complying with legal obligations and requests from authorities.
• Maintaining the security of our websites and systems.

Voluntary purposes, which require your consent:

• Sending you newsletters, content, event invitations, and commercial communications.
• Inviting you to satisfaction surveys.
• Conducting statistical analysis of how our website is used.

If you do not want us to process your data for the voluntary purposes, you may let us know at any time by writing to privacidad@balloon-group.com or by using the unsubscribe link included in each communication. Your refusal does not affect the services you contract with us.

4. Data we process on behalf of our clients

When we provide services to our clients, we may process information on their behalf. In those cases we act as processors:

• We process the information only in accordance with the client’s instructions and its privacy notice.
• We do not use it for our own purposes.
• We do not use it to train artificial intelligence models.
• We protect it with the security measures agreed in the contract.

5. Disclosures and transfers

Disclosures. We share data with vendors that provide services to us and act on our behalf: cloud infrastructure, email, customer management, sending communications, and web analytics. They are required to protect the data and to use it only to provide the service to us.

Transfers without your consent, in the cases permitted by the LFPDPPP:

• To FastForward Inc., a company in our same group, which operates under the same privacy policies, for handling commercial relationships in the United States.
• To competent authorities, when there is a legal requirement.

We do not sell your personal data.

6. ARCO rights and withdrawal of consent

You may access your data, rectify it, cancel it, or object to its processing (ARCO rights), and withdraw your consent, free of charge.

To do so, send a request to privacidad@balloon-group.com with:

• Your name and a way for us to send you our response.
• A copy of an official ID or, where applicable, the document proving that you represent the data subject.
• A clear description of the right you wish to exercise and of the data involved.
• Any document that helps us locate your data.

We will respond within the time limits set by the LFPDPPP. Please note that we may not always be able to act on a withdrawal or cancellation immediately when a legal or contractual obligation requires us to retain the data.

7. How to limit the use or disclosure of your data

You may request to be added to our internal exclusion list by writing to privacidad@balloon-group.com. You may also unsubscribe from our communications at any time using the link included in each email.

8. Cookies and similar technologies

Our website uses cookies for its operation and to analyze its use. Through them we obtain browsing data such as IP address, browser type, pages visited, and time spent. You can disable them in your browser settings; some site features may be affected.

9. Security

We apply administrative, technical, and physical security measures to protect your data against damage, loss, alteration, destruction, or unauthorized use, access, or processing. These include encryption of information and least-privilege access control.

10. Changes to this notice

Any change to this notice will be published on this page, together with its last-updated date.

11. Authority

If you believe your right to the protection of personal data has been violated, you may contact the Secretaría Anticorrupción y Buen Gobierno (Secretariat for Anticorruption and Good Governance), the competent authority in this matter.