Privacy Policy

Thank you for visiting the website diveintomexico.mx (the “Site”), operated by SERVICIO RANGO EXTENDIDO, SC, the entity responsible for processing your personal data, located at Avenida Las Flores 617, Col. Flor de María, Álvaro Obregón, Mexico City, ZIP Code 01760.

At Rango Extendido, we work every day to provide you with better service whenever you purchase our products or use our services. Protecting the personal data you share with us is a fundamental part of this. That’s why we want you to feel confident that your information is safe and secure with us, and to understand how we use it to offer you a better, more personalized customer experience when you use our services.

This Privacy Policy explains how we process your personal data, to whom we transfer and/or disclose your personal data under certain conditions, as well as the security measures we have taken to protect it. It also explains the rights you have as the User and how you can exercise them.

We encourage you to read this Privacy Policy carefully. If you have any questions, please contact us by email at ventas@rangoextendido.com, by phone at (55) 8940 5226, or by mail at Avenida Las Flores 617, Col. Flor de María, Álvaro Obregón, Mexico City, CP 01760.

I. Some definitions you need to know:

For the purposes of this policy, the terms defined below shall have the meanings assigned to them in this chapter, regardless of whether they are capitalized or not, or whether they appear in the singular or plural.

Business Partner: An individual or entity that markets or offers products and/or services that enhance the value proposition for Rango Extendido’s customers, such as financial institutions, insurance companies, and retail establishments, among others.

Privacy Notice: A document—whether in physical, electronic, or any other format—generated by the Data Controller and made available to the User regarding the processing of their personal data. This document informs the User of the existence of the data processing policies that will apply to them, how to access those policies, and the nature of the processing to be performed on their personal data.

Contact Channels: The methods through which you can exercise your rights are as follows: (i) email at ventas@rangoextendido.com, (ii) in person at Avenida Las Flores 617, Col. Flor de María, Álvaro Obregón, Mexico City, ZIP Code 01760, or by phone at (55) 8940 5226

Responsible: SERVICIO RANGO EXTENDIDO, SC..

Personal Data: Any information relating to an identified or identifiable natural person. For example, Rango Extendido may collect the following Personal Data: name, identification number, address, phone number, email address, geolocation data, website usage and visitation, browsing history, purchasing habits, and other biometric data such as your fingerprint, facial features, and voice.

Sensitive Personal Data: Sensitive data refers to data that pertains to the User’s most intimate sphere, or whose misuse could lead to discrimination or pose a serious risk to the User. Sensitive data includes information that could reveal aspects such as racial or ethnic origin, current health status, moral character, union membership, political opinions, sexual orientation, etc.

Consent: An expression of the User’s will by which the processing of their data is carried out.

Data Processor: A natural or legal person, whether public or private, that, either alone or jointly with others, processes personal data on behalf of the Data Controller.

Data Controller: A natural or legal person, acting in a private capacity, who makes decisions regarding the database and/or the processing of data.

User: An individual whose personal data is being processed.

Processing of Personal Data: The collection, use, disclosure, or storage of personal data, by any means. “Use” includes any action involving the access, handling, utilization, transfer, or disposal of personal data.

II. Authorization

By accepting this Privacy Policy, you authorize Rango Extendido to process your Personal Data.

Rango Extendido will process your Personal Data only with your consent and solely for the purposes set forth in Section V of this document. You may revoke your consent at any time by submitting a request through any of the methods listed in Section VIII.

III. Transfer of Personal Data to Affiliated Companies and Others.

In addition, by accepting this Privacy Policy, you authorize Rango Extendido to share your Personal Data with its Affiliated Companies and Business Partners, and to allow them to process such data for the purposes set forth in Section V. However, at any time, as the User you may revoke the authorization granted or object to the sending of commercial communications by requesting it through any of the channels indicated in Section VIII.

Furthermore, in the event that all or part of Rango Extendido’s business is sold, you authorize Rango Extendido to transfer to the buyer the databases containing your Personal Data.

Except as provided in this Privacy Policy, Rango Extendido will not sell or disclose your Personal Data to third parties unless it has obtained your prior consent or is required to do so by law.

Rango Extendido shall be responsible for ensuring effective compliance with obligations regarding the processing of personal data, without prejudice to its liability for any breach of such obligations. Similarly, in the event that the processing of personal data is to be carried out by service providers for Rango Extendido, such service providers must enter into confidentiality agreements and adopt measures to ensure proper compliance with personal data protection regulations, particularly those established in the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations.

IV. General Principles for the Processing of Personal Data.

We are committed to ensuring that all processing of personal data we carry out is done in a manner that respects the rights granted to you by the Constitution and the law. For this reason, we would like to share with you the principles that guide us in this area:

Principle of Lawfulness: Personal data must be collected and processed lawfully. Personal data must not be obtained through deceptive or fraudulent means.

Principle of Consent: All processing of personal data shall be subject to the consent of the user. Consent shall be deemed express when the data user’s intent is communicated verbally, in writing, by electronic or optical means, through any other technology, or by unambiguous signs. The user is deemed to have tacitly consented to the processing of their data if, after being provided with the privacy notice, they do not object.

Principle of Transparency: The Data Controller is required to inform the User, through the privacy notice, of the personal data being collected and the purposes for which it is being collected.

Quality Principle: The Data Controller shall ensure that the personal data contained in the databases is relevant, accurate, and up-to-date for the purposes for which it was collected.

Principle of Purpose: The processing of personal data must be limited to the purposes set forth in the privacy notice. If the data controller intends to process the data for a purpose that is not compatible with or analogous to the purposes established in the privacy notice, the user’s consent must be obtained again.

Principle of Fairness: This principle requires that the processing of personal data be carried out in a fair and lawful manner, that is, in full compliance with the law and with respect for good faith and the rights of the User whose information is being processed.

Principle of Proportionality: The Data Controller shall use the User’s Personal Data only for the specific purposes for which it was collected.

Principle of Accountability: The Data Controller shall ensure compliance with the principles of personal data protection established by the Federal Law on the Protection of Personal Data Held by Private Parties, and shall take the necessary measures to enforce them, even when the data is processed by a third party at the request of the Data Controller. The Data Controller must take the necessary and sufficient measures to ensure that the privacy notice provided to the User is respected at all times by the Data Controller or by third parties with whom the Data Controller has a legal relationship.

Rango Extendido shall be responsible for ensuring that its Affiliated Companies effectively comply with their obligations regarding data processing, without prejudice to the liability of such Affiliated Companies for any breach of those obligations. Similarly, in the event that data processing is to be carried out by service providers for Rango Extendido or its Affiliated Companies, such service providers must enter into confidentiality agreements and adopt measures to ensure proper compliance with the obligations of the Data Protection Act.

V. Purposes for Which Your Personal Data May Be Processed.

Your Personal Data may be processed by Rango Extendido and its Business Partners, either directly or through their suppliers, exclusively for the following purposes:

Take the necessary steps to carry out Rango Extendido’s corporate purpose as it relates to fulfilling the terms of the contract entered into with the User.

To fulfill the obligations entered into with the User.
To provide Personal Data to third parties with whom Rango Extendido has a contractual relationship and to whom such data must be disclosed in order to fulfill the terms of the agreement. For example, Rango Extendido may use third parties to assist with product promotions, collect payments, ship products, or operate our customer service systems.

To develop, implement, promote, and offer you new products and services, or new features, options, or characteristics for the products and services already available to you.

Automatically fill out the documents associated with the transactions you make based on the products and services you have purchased, used, or subscribed to, or that you may purchase, use, or subscribe to in the future, with Rango Extendido.

Tailor the product and service offerings of Rango Extendido and its Affiliated Companies to your customer profile, or conduct analyses, prepare reports, and perform evaluations regarding them

To carry out marketing activities or provide after-sales services—whether general in nature or tailored specifically to you—aimed at improving your customer experience.

To send information via postal mail, email, text messages (SMS and/or MMS), digital platforms such as Facebook, WhatsApp, or other similar platforms, to the mobile phone number or contact information you provide to us, in order to send you the following information: (i) Regarding the delivery and status of your orders placed on the Site; (ii) To send you commercial information, or offers or promotions regarding the products or services of Rango Extendido or its Affiliated Companies, or to conduct surveys or confirm your Personal Data; and (iii) So that you may take advantage of the benefits of Falabella’s “CMR Puntos” loyalty program through any of the available communication, sales, or redemption channels, whether in-person or remote.

Sharing personal data with third parties to enable Rango Extendido to comply with anti-money laundering and counter-terrorism financing regulations.

Sharing Personal Data with third parties for the purposes of fraud prevention and credit risk mitigation.

Sharing Personal Data with third parties acting as Partners

Businesses and related companies so that they may offer products and/or services that enhance the value proposition for Rango Extendido’s customers, all in accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties.

To transfer personal data within or outside the country to Affiliated Companies so that they may process your Personal Data in accordance with the purposes set forth in this Policy, as provided in Section V thereof.

To transfer Personal Data within or outside the country to third parties in accordance with the provisions of Section III of this policy.

VI. Collection of Your Personal Data

In this section, we list some of the ways in which Rango Extendido accesses your Personal Data:

  • When you create an account on the Site.
  • When you visit our Site, log in to your account, browse the website, or purchase a product or service.
  • When you visit our Site—whether you log in to your account, browse the site, or purchase a product or service.
  • When you participate in an Extended Range loyalty program.
  • When you fill out a form, enter a contest or survey, or leave a comment or review about a product or service.
  • When a Related Company that you have previously authorized shares the Personal Data it holds about you with Rango Extendido.
  • When a third party, previously authorized by you, shares your personal data with Rango Extendido.

VII. Rights of Data Subjects under the Federal Law on the Protection of Personal Data Held by Private Parties.

The User shall have the following rights:

ARCO Rights (Access, Correction, Deletion, and Objection) Regarding Your Personal Data.

  • Request proof of the authorization granted to Rango Extendido to process your personal data
  • To be informed by Rango Extendido, upon request, in accordance with Section VIII of this Policy, regarding how your Personal Data has been used.
  • To be informed by Rango Extendido, upon request, in accordance with Section VIII of this Policy, regarding how your Personal Data has been used.
  • Submit inquiries to the Data Controller or Data Processor, in accordance with section 3 of this policy, and file complaints with the National Institute for Transparency, Access to Information, and Protection of Personal Data.
  • To access, free of charge, the Personal Data that is being processed in accordance with Article 22 of the Federal Law on the Protection of Personal Data Held by Private Parties.
  • Revoke the authorization granted for the processing of Personal Data

The User is responsible for keeping their information up to date and ensuring its accuracy at all times. Rango Extendido shall not be held liable under any circumstances for any claims arising from the inaccuracy of such information.

VIII. Procedure for Exercising ARCO Rights in Accordance with the Federal Law on the Protection of Personal Data Held by Private Parties.

You may exercise the rights set forth in the preceding paragraph and all other rights granted by the Federal Law on the Protection of Personal Data Held by Private Parties by contacting Rango Extendido via email at ventas@rangoextendido.com, or by phone at (55) 8940 5256, or by sending a letter to Avenida las Flores 617, Flor de María, Álvaro Obregón, Mexico City. ZIP Code 01760. The Administrative Department will be responsible for issuing guidelines for handling requests, inquiries, and complaints, through which the User may exercise their rights to access, update, rectify, and delete Personal Data, as well as revoke authorization for the processing of Personal Data.

Derechos ARCO

If you wish to exercise your ARCO rights (access, cancellation, rectification, and objection to the processing of your personal data) or revoke the consent you have granted to Rango Extendido for the processing of your personal data stored in our databases, you must contact Rango Extendido through our Customer Service Channels and submit a request for access to your personal data. To do so, when submitting the request, you must: (a) provide documents verifying the identity of the User or the representative’s authority; (b) provide the User’s name and address; (c) provide a clear and precise description of the Personal Data regarding which the User seeks to exercise any of the rights; (d) An express statement revoking consent to the processing of your personal data and, therefore, requesting that it not be used, and (e) any other information or documents that facilitate the identification of the Personal Data. If the request from the User is unclear, erroneous, or incomplete, Rango Extendido may ask the User to provide additional information to address their request within five (5) business days of receiving the request; if the User does not respond within ten (10) business days to the request for additional information, their request will be deemed not to have been submitted.

Rango Extendido will notify the User, via email or any other means it deems appropriate, within a maximum of twenty (20) business days from the date of receipt of the request, of the decision reached; provided that, if applicable, the decision will take effect within fifteen (15) business days following the date on which the response is communicated. If it is not possible to address the inquiry within the timeframes established in the preceding paragraph, the aforementioned deadlines may be extended once for equal periods, and the User will be notified of this situation, indicating the reasons for the delay and specifying the date on which the inquiry will be addressed.

Request for Correction, Deletion, or Objection Regarding Personal Data

If you wish to file a request for correction, deletion, or objection regarding your Personal Data, please contact Rango Extendido through our Customer Service Channels, and Rango Extendido will process your request in accordance with the terms set forth in the preceding section of this document.

If you indicate, through any of our Customer Service Channels, that you do not wish to receive advertising, Rango Extendido will process your request within twenty (20) business days of receiving it. You will then receive an email confirming that your Personal Data has been removed from Rango Extendido’s advertising databases. Additionally, you will be asked to confirm whether you wish to have your Rango Extendido account deleted. You will have five (5) business days from the date the email is sent to provide such confirmation. If the User confirms that they wish to have their Rango Extendido account deleted, or if they do not respond to the email by the end of the five (5) day period, Rango Extendido, in order to comply with current regulations regarding personal data protection, will proceed to delete their Rango Extendido account within five (5) business days.

Deleting your Rango Extendido account will result in the deletion of all your Personal Data, causing the loss of your entire purchase history, as well as any refund or discount coupons, and any other personal information that Rango Extendido holds about you.

A request to object to the processing of your data or to withdraw your consent will not be accepted if there is a legal, contractual, or business obligation requiring your data to remain in our database.

IX. Cookies and Their Use by Rango Extendido

At Rango Extendido, we use cookies and similar technologies to personalize and improve your customer experience and to show you relevant online ads.

Cookies are small text files containing a unique identifier that are stored on the computer or mobile device you use to access the Site, so that they can be recognized each time you use the Site.

You can choose to disable some or all of the cookies we use at any time. However, this may restrict your use of the Site and limit your experience on it. The use of cookies does not contain or affect Personal Data and does not pose a virus risk. For more information about cookies, visit http://www.allaboutcookies.org. For information on how to delete cookies, visit thehttp://www.allaboutcookies.org/manage-cookies/index.html website.

X. Measures Taken by Rango Extendido to Protect Your Personal Data

Rango Extendido maintains the physical, electronic, and procedural safeguards required by law regarding the collection, storage, and transfer of your Personal Data, and periodically evaluates their effectiveness. The purpose of these safeguards is to prevent unauthorized or unlawful access to, or the accidental loss, destruction, or damage of, your Personal Data.

For this reason, when Rango Extendido collects data through the Site, it does so via a secure server equipped with protective software. In addition, Rango Extendido’s security procedures require that you may occasionally be asked to provide proof of identity before we can disclose information regarding your Personal Data. In the case of electronic payment card information, Rango Extendido also uses Secure Socket Layer (SSL) encryption systems that encode the information to prevent fraudulent use. While it is not possible to guarantee this, these systems have proven effective in handling confidential information by preventing access by external threats (e.g., hackers). Notwithstanding the foregoing, we recommend that you do not send credit or debit card information in unencrypted form or from public or unsecured sites or devices. Please note that you are solely responsible for protecting your password and computer from unauthorized access.

XI. Term and Amendments to This Privacy Policy.

This policy will take effect on August 8, 2022, and your Personal Data will be retained only for as long as required by law or to fulfill the purposes for which you have given your consent.

This Policy may be modified by Rango Extendido at any time. Notwithstanding the foregoing, Rango Extendido will notify you, by whatever means it deems appropriate, of any substantial changes prior to such modifications taking effect.

en_GB
es_MX en_GB