Privacy Policy

OUR COMMITMENT TO YOUR PRIVACY

This Privacy Policy applies to the processing of personal data carried out by LABORATORIA with email address privacy@laboratoria.la, through the website www.laboratoria.la and mobile application (jointly or individually, the “Platform”)

This Privacy Policy has been prepared in accordance with the international standards adopted by Laboratoria for the processing of personal data of individuals who, like you, entrust them to us as data subjects. This policy applies generally across all territories where Laboratoria operates, provided that its provisions do not contravene applicable local legislation, which shall prevail in the event of a conflict.

Due to Laboratoria's presence in various countries, the platform may contain specific sections intended solely for users residing in those territories where Laboratoria operates. Said sections will be drafted in strict compliance with the applicable local regulations. For this reason, we kindly ask you to review, in addition to this Privacy Policy, the corresponding sections for each country, available on the website. www.laboratoria.la

The purpose of this Privacy Policy is to provide you with a clear overview of how we use your personal data, as well as to inform you of the rights you have in accordance with the applicable data protection legislation in your case.

For your convenience, we provide an index below to facilitate the reading of this Privacy Policy:

‍

I. Controller of Personal Data Protection
II. What Personal Data do we collect from you?
III. How do we obtain your Personal Data?
IV. For what purposes do we collect and use your Personal Data?
V. Information Regarding the Processing of Your Personal Data
- A. Website
- B. Lead
- C. Applicant
- D. Member
- E. Coach
- F. Staff
- G. Donors
- H. Service Providers (Contractors and volunteers)
VI. Transfer of your Personal Data – With whom do we share your Personal Data?
VII. How do we protect your Personal Data?
- Your ARCO rights – How can you access, rectify, cancel, or oppose the processing of your Personal Data?
- How can you revoke your consent to the processing of your Personal Data?
- How can you limit the use or disclosure of your Personal Data?
VIII. Retention Periods
IX. Cookies
X. Social Media
XI. Security Measures
XII. Minors
XIII. Third-party personal data and data provided about you
XIV. Changes to the Privacy Policy

We kindly ask you to read this Privacy Policy in its entirety in order to understand how we will use your personal data and the rights you have regarding them. Please keep in mind that your personal data is valuable and you are the owner thereof; therefore, below we describe how and for what purpose we use them, with whom we share them, and what rights you can exercise to protect them.

I. Controller of Personal Data Protection

Laboratoria and, specifically, each of the entities that comprise it in the various countries where it operates, shall be responsible for the processing of your personal data. Being responsible implies assuming the duty to give the data a lawful and proportional use, as well as implementing the administrative, technical, and physical security measures necessary to prevent its loss, misuse, unauthorized access, alteration, or destruction.

‍

Laboratoria operates in different jurisdictions and, through its local entities, processes the personal data it accesses. In the following table, you will find the list of group entities, the country where they are located, and their address:

Legal Name: Laboratoria Coding, A.C.
- Tax ID: RFC LCO1505291D7
- Country: Mexico
- Address: Liverpool 174, Colonia Juárez, Cuauhtémoc Borough, Mexico City, Mexico. Postal Code 06600
Legal Name: Laboratoria Association
- Tax ID: RUC 20566216281
- Country: Peru
- Address: Av. Almirante Miguel Grau 629 int. 107 – Barranco, Lima
Legal Name: Laboratoria Inc.
- Tax ID: Tax ID 81-5071835
- Country: United States
- Address: 755 Crandon Blvd S4, Key Biscayne, FL 33149
Legal Name: Non-profit civil association Laboratoria Colombia
- Tax ID: NIT 901380337-4
- Country: Colombia
- Address: Av. CL 100 No. 8 A 37 Of 1102
Legal Name: Laboratoria Foundation
- Tax ID: RUT 65.110.975-2
- Country: Chile
- Address: Región Metropolitana de Santiago, Santiago, Recoleta, Puma 1180, Chile
Legal Name: Laboratoria Association
- Tax ID: CNPJ: 29.797.064/001-47
- Country: Brazil
- Address: Av Paulista, 2278 – Pilotis Floor, Bela Vista – SP, Zip Code 01.310 – 300

Notwithstanding the foregoing, in certain cases, depending on your location, the service you use, or your relationship with Laboratoria, it may be determined that a specific entity acts as the data controller for your personal data individually (and not the rest of the group). If you have any questions regarding this, you can write to our personal data protection officer or department at the following email address: privacy@laboratoria.la

II. What Personal Data do we collect from you?

The personal data that Laboratoria may request and process will depend on the records, services, or features you wish to access at any given time, and may therefore vary depending on the case. Below are some examples:

Identifying/generic data: (i) full names; (ii) address; (iii) telephone number; (iv) email address; (v) company where they work; (vi) position and/or occupation; (vii) website; and (viii) LinkedIn profile.
Financial or asset data: bank card data, whether credit or debit.
Registration data: information required for your subscription to newsletters, communications or Laboratoria programs
Data on inquiries o Complaints that he has done to us.

In cases where you are asked to complete specific sections with personal data for the purpose of registration or access to certain services or functionalities of our platform, you may be expressly indicated which fields are mandatory. The failure to provide such data could prevent your registration from being completed or prevent you from accessing certain services or functionalities.

In specific cases, you may provide us with personal data of third parties. In such cases, it shall be your sole responsibility to have the prior and informed consent of said third parties to provide us with their information. Laboratoria undertakes to process such data solely for the purpose that motivated its communication and in accordance with this Privacy Policy.

Likewise, you agree to provide truthful, accurate, and up-to-date information at all times, avoiding the transmission of erroneous data or data for which you do not have authorization to use. In the event that you notice you have provided incorrect, third-party, or unauthorized information, you must immediately report it to the email address privacy@laboratoria.la, in order to manage its rectification or deletion.

Finally, by clicking“click”on the button“I have read and accept the Privacy Policy” (or the equivalent) incorporated into our forms or by providing your consent through other electronic, technological, or auditory means, you declare that the information provided is accurate and truthful.

By accepting this Privacy Policy, you grant your express consent for Laboratoria to process your personal data, including, where applicable, those of a financial, patrimonial, or sensitive nature. This processing is necessary for the compliance of primary purposes described below, which support the existing relationship between you and Laboratoria. In the event of not granting said consent, Laboratoria might find itself unable to establish, maintain, or continue said relationship, as well as to provide you with certain benefits or facilities derived from it.

III. How do we obtain your Personal Data?

Laboratoria may collect your personal data directly when you provide it through our platform, via email, or by filling out electronic, technological, or audio forms.

Additionally, our platform automatically collects certain data through the use of cookies. You can configure your browser to disable the use of cookies; however, you should consider that this action could affect the functionality of the platform.

For more information, see the Section VIII of this Privacy Policy.

IV. For what purposes do we collect and use your Personal Data?

Laboratoria will use the personal data collected for the following purposes necessary:

Manage your registration as a user on our platform.
To process and manage your application and/or request to Laboratoria.
Process your application to Laboratoria.
Register him for events organized by Laboratoria.
To handle inquiries, requests and applications submitted through our communication channels.
Register her as a user of the Laboratoria platform.
To send you institutional communications, such as our newsletter.

Under applicable law, Laboratoria is authorized to process your personal data on various legal grounds, including:

The need to manage their registration, applications, participation in events, and access to programs.
The authorization to send you communications of interest related to the services offered.
The legitimate interest in addressing queries and requests made by users.

Likewise, the following are considered purposes secondary Those related to sending commercial or advertising communications, for which it will be necessary to obtain your express and separate consent.

For more detailed information about how Laboratoria will use your personal data, please consult the Section V of this Privacy Policy.

V. Information Regarding the Processing of Your Personal Data

Your personal data is collected exclusively for specific, explicit, and legitimate purposes, and will not be further processed in a manner incompatible with those purposes.

The following describes the different ways Laboratoria may process your personal data, depending on the type of relationship you have with us. This information is provided to ensure you are fully informed about the processing we carry out and the personal data we may collect.

For a better understanding of the scope of this treatment, some useful general concepts are presented beforehand:

‍

Personal Data: any information concerning a person that identifies or makes him or her identifiable.
Sensitive Personal Data: Information related to physical, moral, or emotional characteristics, events or circumstances of personal or family life, personal habits belonging to the private sphere, as well as data relating to physical or mental health, or any other analogous information that may affect the privacy of the data subject. Data related to income, political opinions, religious, philosophical, or moral beliefs are also considered sensitive.
Treatment: The collection, use, disclosure, or storage of personal data by any means. Use includes any action of accessing, handling, utilizing, transferring, or disposing of personal data.
Purposes of the treatment: The specific purpose for which we use your personal data and the uses that derive from it.

Depending on how you interact with Laboratoria, your personal data may be processed for the following purposes:

A. Website

What personal data do we collect from you?

The personal data that Laboratoria may request through the website www.laboratoria.la These are the details strictly necessary to establish contact with you. The specific list of data we may request includes:

Name and surname
Postal address
Email
Telephone number
Age
Country of residence

How do we obtain your personal data?

Laboratoria may collect your personal data directly when you provide it to us by completing the forms available on our platform, or when you contact us through the communication channels indicated there.

For what purposes do we collect and use your personal data?

Regarding the use of our platform, and because these are purposes necessary, We will collect and use your personal data to:

Register her as a user of the platform and be able to manage the registrations, cancellations, payments, billing and identification of users, as well as the courses they are enrolled in.
to attend to and follow up on complaints, questions, comments or contact requests that you make to us;
create and maintain databases for administrative and organizational purposes;
provide information required by government authorities in compliance with laws or regulations applicable to Laboratoria in the various territories in which it operates;
to process your request to receive information about Laboratoria, its calls for proposals, invitations, events and news; and
to send you notifications about changes to this Privacy Policy.

Additionally, if you expressly authorize it by giving your consent at the end of this document, your personal data may be used to secondary purposes, such as advertising or marketing activities related to programs, initiatives, opportunities, or events organized by Laboratoria. You may revoke this consent or object to the processing of your data for these secondary purposes at any time, either by using the "unsubscribe" option available in promotional emails or by sending us an email to privacy@laboratoria.la

B. Lead

A Lead is defined as the person who makes initial contact with Laboratoria by expressing interest in its programs, events, or initiatives. This initial interaction is exploratory in nature and is therefore limited to gathering basic personal and professional information that allows Laboratoria to identify the interested party, establish communication, and provide them with relevant information about its activities.

What personal data do we collect from you?

Laboratoria may request the following personal data:

Name and surname
Email
Telephone number (in some cases)
Country and city of residence
Basic professional information (level of education, occupation, area of interest)
General demographic information (age, gender), when relevant for impact analysis purposes
Curriculum vitae
Video or audio recording

How do we obtain your personal data?

Paid advertising: through campaigns on Google Ads and social networks (Facebook, Instagram, LinkedIn), which invite people to complete interest or application forms.
Email marketing: This involves sending emails to existing databases and new leads generated through advertising. These emails include links to forms where the recipient voluntarily registers their information.
Organic social media: through content publication and community interaction on platforms such as Facebook, Instagram, and LinkedIn. Data is collected only when provided voluntarily by the individual.
Events and strategic alliances: in activities carried out with allied organizations, where contact information can be requested to follow up and share information about our programs.
Application forms: interested individuals are redirected to the Laboratoria platform, where the necessary information is collected to continue with the process.

For what purposes do we collect and use your personal data?

In relation to your category as a Lead, and because these are purposes necessary, We will collect and use your personal data to:

‍

Identify him as an interested party and establish communication.
2. Provide information about programs, follow up on applications, and send related communications.
3. Determine eligibility for programs and segment communication based on geographic location.
4. Register her as a user of the platform and be able to manage the registrations, cancellations, payments, billing and identification of users, as well as the courses in which they are enrolled.
5. To understand the profile of interested individuals, evaluate participation requirements, and improve the relevance of our programs.
6. Prepare statistical and institutional impact analyses, without individually identifying the data subjects.

C. Applicant

An applicant is defined as someone who, after initial contact with Laboratoria, formally decides to begin the registration or selection process for one of the programs offered. At this stage, the interaction is more in-depth. The objective is to evaluate the applicant's eligibility, availability, and circumstances to determine their participation in Laboratoria's programs, as well as to closely monitor the process and related communications.

What personal data do we collect from you?

Laboratoria may request the following personal data:

Name and surname
Email
Telephone number
Age
Country and city of residence
Schedule availability
Gender according to which one identifies
Employment status and conditions of the current employment contract
Curriculum vitae or resume

Likewise, in certain cases, Laboratoria may collect sensitive personal data, such as:

Current economic and family situation

How do we obtain your personal data?

Laboratoria may obtain your personal data through the following means during your application process:

Application forms: interested individuals are redirected to the Laboratoria platform, where the necessary information is collected to continue with the process.
Interview: As part of the process, Laboratoria may conduct virtual interviews with applicants.

For what purposes do we collect and use your personal data?

In relation to your category as an Applicant, and because it concerns purposes necessary, We will collect and use your personal data to:

Identify him as an interested party and establish communication.
8. Provide information about programs, follow up on applications, and send related communications.
9. Determine eligibility for programs and segment communication based on geographic location.
10. Prepare statistical and institutional impact analyses, without individually identifying the data subjects.

D. Member

A user is considered a Member once they have successfully completed the application process and formally joined the Laboratoria community. During this phase, the relationship is ongoing and focused on support and development. This includes onboarding, profile creation, and active participation in community activities and benefits. The information gathered allows us to grant access, personalize recommendations, and coordinate follow-up with coaches.

What personal data do we collect from you?

Laboratoria may request the following personal data in your capacity as a member:

Name and surname
National identification (CURP in Mexico, RUT in Chile, CPF in Brazil, DNI in Peru, Citizenship Card in Colombia)
Birthdate
Home
Emergency contact information (name and telephone number)
Information regarding your current working conditions

‍

Likewise, in certain cases, Laboratoria may collect sensitive personal data, such as:

‍

Information regarding medical diagnoses and ongoing treatments
Information on properly diagnosed disabilities

How do we obtain your personal data?

Laboratoria may obtain your personal data through the following mechanisms during your membership process: During the process of onboarding, by completing the onboarding checklist, which includes signing a commitment, responding to a baseline survey, and creating a personal profile on our platforms.

For what purposes do we collect and use your personal data?

In relation to your status as a member, and because these are purposes necessary, We will collect and use your personal data to:

‍

Identify you as a member of Laboratoria and enable your access to community benefits.
2. Generate, once the creation of your profile is complete, contact recommendations with other users within the community, using your information in conjunction with artificial intelligence tools.
3. Integrate the information gathered in the baseline survey and in the profile with that previously recorded, forming a single file used by Laboratoria staff and coaches in the support processes.
4. Process your information using artificial intelligence services for tasks related to your support and development within the community.

‍

E. Coach

A user who collaborates with Laboratoria by providing support, mentorship, and follow-up to community members is considered a Coach. Their relationship involves a hiring process and the creation of a detailed professional profile to verify their suitability, coordinate sessions, facilitate matching with coachees, and maintain effective communication. The information gathered allows for personalized interactions.

What personal data do we collect from you?

Laboratoria may request the following personal data in its capacity as Coach:

‍

Name and surname
Email
Telephone number
Home
Tax identification number or equivalent according to the country of tax residence AND Tax regime (when applicable)
Country of residence
Company where I collaborate
Position or professional title and seniority level
Industries in which he/she works
Area of technical expertise
Countries where he has professional experience
Personal review or biography
LinkedIn Profile
Personal link (blog, website, podcast, etc.)
Permissions linked to your Google Calendar and Google Meet account

‍

Laboratoria may collect personal financial data, such as:

‍

Bank details

How do we obtain your personal data?

Laboratoria may obtain your personal data through the following mechanisms during your process as a Coach: During the hiring process and the creation of a personal profile on our platforms.

For what purposes do we collect and use your personal data?

In relation to his category as a Coach, and because it concerns purposes necessary, We will collect and use your personal data to:

‍

Identify him as a Laboratoria coach and enable his access to the community benefits.
2. Maintain communication with you regarding your process of supporting the assigned coachees.
3. Once the creation of their profile is complete, generate contact recommendations with their coachees within the community, thus facilitating interaction and follow-up.
4. Process your information through artificial intelligence services designed to support the tasks of accompaniment and development within the community.

‍

F. Staff

Staff refers to a user who has an employment or service provision relationship with Laboratoria and is part of its internal team. This category includes recruitment, selection, hiring, and onboarding processes, as well as the creation and management of their employee file for payroll, benefits, occupational health and safety, performance, and compliance with legal obligations.

What personal data do we collect from you?

Laboratoria may request the following personal data in its capacity as Staff:

‍

Identification and contact information

‍

Name and surname
Email
Country of residence
Contact information of related people
Curriculum vitae
Federal Taxpayer Registry (RFC) and Unique Population Registry Code (CURP), or their equivalents according to the host country. LinkedIn Profile
Personal link (blog, website, podcast, etc.)
Work experience
Academic background
Position or professional title and seniority level
Personal review or biography
Recordings of technical challenges

‍

Laboratoria may collect personal financial data, such as:

‍

Bank details
Current salary
Legal contributions and deductions
Discounts on mortgage loans or alimony payments

‍

Likewise, Laboratoria may collect sensitive personal data, such as:

‍

Information regarding health plans
Information on financial dependents
Health insurance information
Medical examination reports
Information about diagnosed disabilities
Ethnic origin

‍

Regarding the personal and professional references you provide, it is your responsibility to obtain the necessary consent from those individuals before sharing their personal data with Laboratoria. This is so that Laboratoria can contact them and verify the information you have provided.

How do we obtain your personal data?

Laboratoria may obtain your personal data through the following mechanisms during your process as part of the Staff:

‍

Publication of vacancies in official Laboratoria channels, including its institutional website, LinkedIn, university job boards and social media.
Receiving, storing and managing information through the Jazz HR platform when applications are made through this tool.
Filling out supplementary forms in Typeform or Google Forms to collect specific information that will expedite the selection processes.
Evaluation and resolution of practical challenges that may include recordings using the Loom application, in order to assess the technical and communication skills of the applicants.
Comprehensive management of the recruitment process, including reviewing resumes, exchanging communications, conducting virtual interviews via Google Meet or Zoom, and monitoring the status of applications.
Receiving applications sent via institutional email and storing information and documents in institutional Google Drive, in cases where the process is not carried out through the Jazz HR platform.
Receipt of resumes sent spontaneously through the form “Contact us”"available on the Laboratoria website or via email comunicaciones@laboratoria.la.
Responding to applicants through thank you emails, information on vacancy availability, and invitations to consult official publication channels.
Storage of resumes, emails and other information received in institutional repositories, including Gmail and Google Drive.
Retention of personal data to create and maintain an internal database of potential candidates, in order to consider their participation in future selection processes.
Requesting and receiving personal documentation during the hiring and onboarding processes, including filling out forms and integrating digital employment files.
Registration in internal systems for access to work tools and management of corporate and legal benefits.
Processing of payments, contributions and deductions related to payroll management and compliance with tax and social security obligations.
Application of performance evaluations, feedback surveys, and periodic reviews of results and productivity metrics.
Management of processes for reporting, investigating and preventing psychosocial risks, as well as mechanisms for resolving labor disputes.
Implementation of preventive and follow-up actions in matters of occupational safety and health, in accordance with the regulations applicable in each country.
Preparation of employment termination documentation, exit surveys and formal closure of the employment relationship as part of the offboarding processes.
Application of internal surveys and studies on organizational climate, satisfaction, leadership and institutional perception, for the purpose of continuous improvement.

For what purposes do we collect and use your personal data?

In relation to your category as Staff, and because these are purposes necessary, We will collect and use your personal data to:

‍

Identify him as part of the Laboratoria staff and enable his access to community benefits.
Identify, select, and hire candidates who meet the needs and requirements of the positions.
To create and maintain a database of people interested in joining Laboratoria, to be considered in future selection processes.
Create personnel files, register employees on payroll, and comply with applicable legal and contractual requirements.
Maintain the necessary communication to manage the employment relationship with Laboratoria.
Perform employee termination processes (termination documentation, exit surveys, delivery of certificates).
Manage aspects of occupational safety and health, including the procurement of medical insurance.
Generate indicators on diversity, equity and inclusion, and institutional reporting for donors and strategic partners
Provide access to work tools and manage membership in corporate and legal benefits.
Comply with the payment of salaries and tax obligations.
Measure performance, manage teams, monitor key performance indicators (KPIs), calculate performance bonuses, and apply organizational climate assessments.
Prevent, investigate and resolve conflicts or complaints, ensuring a favorable organizational environment.
Implement actions to prevent and mitigate psychosocial risks, evaluate working conditions, and inform and train staff on occupational safety.
Comply with specific regulations in certain countries (for example, Brazil), related to the identification, prevention and care of occupational risks.
To terminate the employment relationship properly and in accordance with legal provisions.
Gather feedback from employees to improve internal processes.
Analyze job satisfaction and work environment in order to implement continuous improvement measures.

‍

F.1. Staff with access to the Laboratoria website

Any employee with an institutional account registered under the domain is considered Staff with access to the Laboratoria website. @laboratoria.la. This access is granted in a controlled and exclusive manner for the performance of the functions inherent to their position.

‍

Access to Laboratoria's digital platforms and tools aims to enable staff to perform their responsibilities efficiently and securely, in accordance with the following purposes:

‍

Performance of work functions: accessing the information and resources necessary for the correct execution of assigned tasks and responsibilities.
Technical staff and those involved in the development of products or programs: design, configure, maintain and supervise the proper functioning of the website and digital platforms, ensuring that members can carry out their training activities without interruption.
Administrative, financial and partnership areas (partnerships): consult indicators and impact information on the programs and their operation, for the purpose of preparing institutional reports, measuring results, complying with transparency obligations, justifying the use of resources and communicating the social impact generated by Laboratoria.

‍

Access to the information available on the website is strictly limited to that which is necessary for the performance of the Staff's duties. The only exception is the content related to individual meetings between coaches and members, access to which is restricted to the parties involved, in order to safeguard the confidentiality and privacy of those sessions.
Access to institutional accounts and platforms will remain active only for the duration of the employment or contractual relationship. Once this relationship ends, Laboratoria will immediately revoke access permissions, including deactivating the institutional email under the domain. @laboratoria.la, This prevents any further access to the website or the information it contains.

G. Donors

A Donor is defined as any individual or organization that contributes financially or materially to the support of Laboratoria's activities, programs, projects, or initiatives, whether through regular contributions, one-time donations, or in-kind contributions. This category includes managing institutional relations, administering funds, issuing tax receipts, submitting transparency reports, and communicating the results or impacts of the contributions received.

What personal data do we collect from you?

Laboratoria may request the following personal data in your capacity as a Donor:

‍

a) From contacts of donor companies:

‍

Name and surname
Position or role
Email
Telephone number

‍

b) From individual donors:

‍

Name and surname
Email
Telephone number
Home
Tax identification number or equivalent according to the country of tax residence
Business activity or corporate purpose

‍

c) From donor companies:

‍

Company name or business name
Tax identification number or equivalent according to the country of tax residence
Legal address
Business activity or corporate purpose
Name of legal representative or equivalent
Institutional and reputational background
Public information regarding compliance or potential legal disputes

‍

Laboratoria No collects sensitive personal data from its donors.

How do we obtain your personal data?

Donors' personal data may be obtained through the following means:

‍

Direct communication via email, telephone contact, instant messaging, or face-to-face and virtual meetings held with the Laboratoria team.
Participation in corporate volunteering activities or other collaboration programs promoted by Laboratoria.
Forms, institutional records, or electronic platforms used to document contributions or coordinate relationship-building activities.
Information provided directly by the donor or by authorized representatives of the donating entity.

For what purposes do we collect and use your personal data?

In relation to your status as a Donor, and because these are purposes necessary, We will collect and use your personal data to:

‍

Identify and maintain an up-to-date record of individual and institutional donor contacts.
Establish, maintain and document communication between Laboratoria and the donor.
Coordinate meetings, information exchanges, and collaborative or volunteer activities.
Manage, monitor and document the financial or in-kind contributions made.
Prepare and submit institutional reports, impact reports and accountability reports.
Update, correct, or clean up contact information as needed.
Maintaining a relationship history for the purposes of traceability and institutional continuity.
To handle requests for limitation or deletion of the use of personal data.

‍

H. Service Providers (Contractors and volunteers)

A Service Provider is considered to be any individual or legal entity that collaborates with Laboratoria by providing independent or voluntary professional services, where the difference may or may not be reflected in the compensation received, and by virtue of a contractual or non-subordinate collaborative relationship. This category includes the contractors and volunteers who participate in Laboratoria's institutional projects, activities or programs, in any of its locations or operating modalities.

What personal data do we collect from you?

Laboratoria may request the following personal data, depending on the nature of the collaboration:
a) Volunteers:

‍

Name and surname
Email
Telephone number
Private residence
Nationality
Identity document
Curriculum vitae
Federal Taxpayer Registry (RFC) and Unique Population Registry Code (CURP), or their equivalents according to the host country
Proof of address
Proof of studies or academic degree

‍

b) Professional service providers:

‍

Name and surname
Email
Telephone number
Tax domicile
Nationality
Tax regime or its equivalent under the applicable legislation of the host country
Identity document
Federal Taxpayer Registry (RFC) and Unique Population Registry Code (CURP), or their equivalents according to the host country
Proof of address
Bank details
Tax status certificate or equivalent from the host country
Tax compliance opinion or equivalent
Compensation or amount of fees for the service provided
Articles of incorporation and powers of attorney (in the case of legal entities)

‍

Laboratoria No collects sensitive personal data from its donors.

How do we obtain your personal data?

Donors' personal data may be obtained through the following means:

‍

Request and receipt of personal information and documentation through institutional forms (Google Forms) or by email, where people share their data and attach the required documents.
Through the exchange of emails with the responsible team, in which the documents required to formalize the contractual or collaborative relationship are shared and attached.
Through the voluntary delivery, by the holder, of the identification documents, proof of address, tax, banking and academic data requested according to the type of service or collaboration to be provided.
Through the submission of information by companies, partners or institutions that channel the collaboration of volunteers or contractors, provided that the data subject has given their prior consent.
Through the integration of data into Laboratoria's internal systems for registration and administrative control purposes, exclusively when necessary for the management of the established link.
In the case of volunteers, by collecting basic contact information and accreditation documents during the process of joining programs, workshops or activities organized by Laboratoria.
In the case of professional service providers, by delivering the required tax and legal documentation for the validation of regulatory compliance and the formalization of the service provision contract.

For what purposes do we collect and use your personal data?

In relation to your status as a Donor, and because these are purposes necessary, We will collect and use your personal data to:

‍

Integrate administrative files and comply with applicable legal, tax and contractual requirements.
Verify the identity and capacity of hired or collaborating individuals.
Provide access to the tools or platforms necessary for the performance of assigned functions.
Manage and process payments related to services provided.
Comply with applicable tax and withholding obligations, including the issuance of Digital Tax Receipts via the Internet (CFDI) or their equivalents in the host country.
Formalize the contractual documents or collaboration agreements that regulate the relationship with Laboratoria.
Manage the closure of the contractual or collaborative relationship and keep the necessary records for legal and administrative purposes.

‍

VI. Transfer of your Personal Data – Who do we share your Personal Data with?

Laboratoria may share your personal data with service providers that support us, including companies, associations, or foundations that are part of the same corporate group, as well as with external collaborators with whom the corresponding agreements have been signed. Some of these recipients may be located in third countries.

‍

Likewise, your personal data may be accessed by those in charge of processing, that is, those service providers who, by virtue of their work, require access to them to develop our relationship with you, attend to your requests, provide a specific service or comply with obligations derived from the legal relationship that binds us.

‍

At any time, you may request additional information about the recipients of your personal data by sending an email to privacy@laboratoria.la, Please indicate the reason for your inquiry. For your reference, we also provide a link to a detailed list of the third parties who may have access to your information.

‍

Apart from the cases mentioned above, Laboratoria will not transfer your personal data to third parties, except in the following circumstances:

‍

there is an applicable legal obligation,
the contractual relationship requires it, or
you have previously given your express consent, in which case you will be informed of the safeguards adopted for the transfer, in compliance with current legislation.

‍

In some cases, fulfilling and executing our legal relationship with you may involve the international transfer of data to countries where Laboratoria has a presence. Likewise, if any of our service or IT system providers are located outside the data subject's country of origin, Laboratoria will adopt all applicable measures and safeguards in accordance with current regulations to ensure proper data management and protection.

‍

Similarly, Laboratoria reserves the right to share your personal data with administrative, judicial, or governmental authorities in any jurisdiction where it operates, provided that such sharing is required by law, whether judicial or administrative. It may also share personal data with third parties such as lawyers, accountants, or other service providers acting on Laboratoria's behalf and solely in accordance with its instructions. These transfers do not require your consent, as they are disclosures permitted under applicable law.

‍

Finally, we inform you that all disclosures made to data processors or members of the Laboratoria group are regulated and subject to internal protocols and specific guidelines, adopted to guarantee at all times the confidentiality, security and integrity of your personal information.

VII. How do we protect your Personal Data?

We are committed to ensuring that your Personal Data will be processed under the administrative, physical and technical security measures established by the Law and its Regulations, and thus prevent its damage, loss, destruction, theft, misplacement, alteration and/or unauthorized processing.

A. Your ARCO rights – How can you access, rectify, cancel or oppose the processing of your Personal Data?

As the owner of the Personal Data that you provide to us, you will have the right to exercise the following rights, known as ARCO rights:

‍

Right of Access. You have the right to know what Personal Data we hold about you, what we use it for and under what conditions we process it.
Right of Rectification. You may request the correction or updating of your Personal Data when it is inaccurate, incomplete, or outdated.
Right to Cancellation. You have the right to request the deletion of your Personal Data from our records or databases when you consider that its use does not comply with applicable legal provisions.
Right to Object. You may object to the processing of your Personal Data for specific purposes, provided that such processing is not necessary to comply with legal or contractual obligations.

‍

To exercise any of your ARCO rights, you must send a request to the email address of our Privacy Officer, who will provide you with the necessary information about the corresponding procedure, the requirements that must be met, the applicable response times, and how your right will be enforced. They can also address any questions, complaints, or comments related to the processing of your Personal Data.

‍

The request to exercise ARCO rights must contain and be accompanied by the following:

‍

Your name and address or any other means to receive notifications;
A copy of your official identification (passport, voter ID or driver's license);
A clear and precise description of the Personal Data regarding which you seek to exercise any of the ARCO rights, unless it is the right of access;
Any other element or document that facilitates the location of Personal Data; and
Only in the case of exercising the right of Rectification, must the modifications to be made be indicated and the documentation supporting the request be provided.

‍

Laboratoria will respond to any complete request within a maximum of 20 business days or the maximum period allowed by law. The response will indicate whether your ARCO rights request is valid and, if so, Laboratoria will implement the decision within 15 business days following the date on which it communicates the response to the data subject or their representative, as applicable. These timeframes may be extended as provided by applicable law. Laboratoria will provide electronic copies of your personal information if you exercise your right of access upon request.

B. How can you revoke your consent to the processing of your Personal Data?

In accordance with applicable regulations, you may revoke any consent you have previously given us. However, please note that your request may not be granted in all cases, or we may not be able to immediately cease processing your data, as we may be legally required to continue processing your Personal Data.

‍

To revoke your consent, you must submit your request via email to our privacy officer, who will inform you about the procedure and requirements for exercising this right, response times, how we will make your right effective, and will address any questions, complaints or comments you may have in this regard.

C. How can you limit the use or disclosure of your Personal Data?

You have the right, at any time, to limit, in whole or in part, the use or disclosure of your Personal Data for purposes that are not necessary for our legal relationship. To do so, please send an email to our Data Privacy Officer at the following address: privacy@laboratoria.la indicating either one or all of the purposes for which you wish to limit the use or disclosure of your Personal Data, so that you may be registered on an exclusion list, for which you will be given an electronic or physical certificate, as requested.

VIII. Retention Periods

Laboratoria, through any of its constituent entities, may store your personal data in databases located in any of the countries where it operates, in the United States of America, or in other jurisdictions, always in compliance with applicable law. The purpose of data retention is to fulfill the objectives outlined in this Privacy Policy.

‍

We also inform you that, in certain cases, the information may be stored in cloud services, under strict security measures and with the adoption of specific protocols, contractual clauses and mechanisms that guarantee the protection, confidentiality and privacy of the data.

‍

Personal data will be processed only for as long as strictly necessary to fulfill the purpose that legitimizes its processing. In some cases, processing will be limited to the time you maintain your consent, for example, in the case of your subscription to our communications.

‍

Notwithstanding the foregoing, the data may be subsequently stored in a duly protected state for the period during which legal, administrative, or tax liabilities related to the processing may arise, in accordance with the regulations in force at any given time. Once these periods have expired and any potential actions have been barred by the statute of limitations, Laboratoria will proceed with the permanent deletion of the personal data.

‍

Finally, if your personal data is cancelled or deleted, it will remain blocked exclusively for the purpose of addressing any potential legal, administrative or tax claims, for the limitation periods established by applicable legislation.

IX. Cookies

We inform you that the platform automatically obtains data through cookies.“cookies”"These are temporary data that your browser stores on the hard drive of your computer or mobile device in order to check your activity on our platform and measure information about the users who visit the Laboratoria platform.

‍

We use the following types of cookies:

‍

Necessary cookies. These settings are essential for the platform to function and enable features such as security, so they cannot be disabled. This includes your country and language selection. These settings are only valid for visiting our platform and cannot be used by third parties.
Performance-related cookies. By using this data, we aim to improve the usability of our platform. We identify which areas users visit most frequently and pinpoint potential improvements. For this analysis, we use your shortened IP address.
Personalization cookies. They allow us to provide you with interesting information about our services. For example, if you clicked on an article about a specific topic in our newsletter, we can show you related content on the platform.
Third-party content. To protect your privacy, we block access to third parties. If you agree, access to third-party content can be unblocked.

‍

You can prevent the use of cookies on your computer through the corresponding settings in your browser, but please note that this may hinder the functionality of the platform.

‍

In some cases, we will request your prior consent to insert cookies, in accordance with what is indicated in the browser pop-up window when you, as a user, access our platform for the first time, and in the other terms and conditions indicated in the Cookie Policy.

X. Social Media

If you contact Laboratoria through any of our social media networks and provide us with personal data through that means, the processing of said data will be governed, firstly, by the privacy policy of the corresponding social network and, secondarily, by the provisions of this Privacy Policy.

‍

Laboratoria has profiles on various social networks and, with respect to them, assumes the status of responsible party only in relation to the data published in said profiles or those that users decide to send privately through the mechanisms enabled on each platform.

‍

The processing of personal data carried out within social media will be limited to what is permitted by each platform for corporate profiles. In this regard, and in accordance with the privacy policy applicable to each social network, as well as this Policy, Laboratoria may inform its followers and contacts, provided that applicable regulations do not prohibit it, about services, promotions, events, activities, publications, and, where appropriate, provide customer service.

‍

Laboratoria's use of social media does not involve the processing of sensitive personal data. The only data we may request through these platforms is that which users voluntarily choose to share through interactions such as registration forms, direct messages, or comments. Furthermore, information that Laboratoria publishes on its social media may include personal data only when we have the prior, specific, and explicit consent of the user or the individuals involved, as in the case of testimonials or photographs.

XI. Security Measures

Laboratoria adopts the security levels required by applicable regulations regarding the protection of personal data. The technical, physical, and administrative measures implemented are designed to protect personal data according to its nature, seeking at all times to guarantee its integrity, confidentiality, and availability.

‍

However, it is important to note that security in a digital environment such as the Internet cannot be absolutely guaranteed against potential unlawful acts by third parties. Nevertheless, Laboratoria employs all reasonable means and best practices within its reach to prevent unauthorized access, use, or disclosure. Among the measures implemented to protect the owners of personal data are, but are not limited to:

‍

Access restricted to duly authorized personnel only.
Data blocking when necessary.
Use of encryption techniques when advised by the risks detected.
Application of pseudonymization or anonymization/dissociation processes, when these are appropriate to ensure the protection of information.
Implementation of custody protocols to prevent damage, loss, destruction, theft, misplacement, alteration or unauthorized processing of personal data.

‍

Furthermore, Laboratoria has reviewed and strengthened its internal policies regarding the collection, storage and processing of data, including physical security measures, in order to prevent unauthorized access to its systems.

‍

In compliance with the principle of data minimization, Laboratoria limits access only to the information strictly necessary to fulfill the purposes of the processing. Likewise, it guarantees that all individuals involved in the processing of personal data are subject to strict confidentiality obligations, whether contractual or derived from applicable regulations.

‍

Failure to comply with these confidentiality obligations or with the disciplinary provisions related to data protection will be considered a serious offense and may result in sanctions in accordance with the relevant labor, contractual or administrative regulations.

XII. Minors

Minors may not use the services available through our website without the prior authorization of their parents, guardians or legal representatives, who will be solely responsible for all actions carried out through our platform by the minors in their care, including filling in forms with the Personal Data of said minors and, where applicable, checking the boxes that accompany them.

XIII. Third-party personal data and data provided about you

If you provide us with personal data of third parties, you declare and guarantee that you have the corresponding authorization and that, where required, you have obtained their informed consent, having communicated to them the purposes of the processing, the identity of Laboratoria as the data controller, as well as the other details provided for in this Privacy Policy. Laboratoria will process said data exclusively for the functionality or service that motivated its communication and in accordance with the provisions of this document.

‍

If a third party has provided us with your personal data, you may object to its processing or exercise your corresponding rights by sending an email to privacy@laboratoria.la. Once your request is received, Laboratoria will take reasonable steps to address it and, where appropriate, will cease processing, unless there is a legal basis that legitimizes it or a legal obligation that requires it.

XIV. Changes to the Privacy Policy

Laboratoria is constantly evolving to offer better service and ensure the security of personal data. In response to legislative, regulatory, or technological changes, as well as the needs of our users, clients, or the organization itself, this Privacy Policy may be subject to periodic modifications or updates.
In this regard, Laboratoria reserves the right to modify or update this Privacy Policy at any time and at its sole discretion, when necessary.

‍

In the event of substantial modifications to this Privacy Policy or the Cookie Policy, these updates will be notified through the channels Laboratoria deems appropriate, including, but not limited to, publication on our platform or sending a notification to the email address registered by the data subject, provided that the change may significantly affect their privacy. In this way, you will be able to review the changes, assess them, and, where applicable, exercise your corresponding rights, such as the cancellation or deletion of data, the revocation of previously granted consent, the restriction of processing, or the objection to such processing.

‍

In any case, we recommend periodically consulting this Privacy Policy and the Cookie Policy, in order to be aware of possible minor changes or improvements in their content, which will always be available as a permanent source of information on our platform.

‍

Finally, each time this Privacy Policy is updated, the "last updated" date at the beginning of the document will be changed.

‍

The processing of your personal data will be governed by this Privacy Policy. In those sections, links, or processing activities indicated as applicable only to certain countries, the corresponding local legislation will apply.

‍

If you believe that your personal data has not been processed appropriately, you can contact our data protection officer or department at the following email address: privacy@laboratoria.la

‍

By expressly accepting this Privacy Policy, as well as by using our platform and providing us with your personal data, you acknowledge that this Policy has been made available to you and you give your consent for Laboratoria to process your personal data in accordance with what is established herein.

‍

OPTIONAL TREATMENTS

‍

I declare that I have been informed and understand that I may or may not give my consent for the processing of my personal data for secondary purposes, which are not necessary for the provision of services or for the essential purposes described in this Privacy Policy. (Mark the corresponding box with an “X”):

‍

I authorize the sending of information, newsletters, magazines and news from the sector or on topics that Laboratoria considers to be of possible interest, as well as commercial or advertising communications from Laboratoria.

‍

I acknowledge that refusing to check any of the above boxes does not condition or limit the execution of the essential purposes set out in this Privacy Policy.

‍

If I grant my consent for any of the secondary purposes, such processing will be carried out for as long as the legal relationship between me and Laboratoria remains in effect or until I revoke my consent. I may express my refusal or revoke the consent granted at any time by using the option of “to unsubscribe” or equivalent mechanism included in the communications you receive, or by sending an email to privacy@laboratoria.la.

‍