Legal document

Privacy Notice

OCEANUS, A.C. · Version 2.0 · Last updated: April 2025 · In force

In accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations, this Privacy Notice is issued under the following terms.

01

Controller of personal data processing

OCEANUS, A.C. (hereinafter "OCEANUS") is responsible for the processing of your personal data in accordance with the LFPDPPP.

Controller details
Organization: OCEANUS, A.C.
Address: Calle Río Verde Lote 7 Mza 235, Col. Proterritorio, Chetumal, Quintana Roo, C.P. 77086
Phone: +52 983 118 1165
02

Personal data we collect

OCEANUS collects the following personal data from members, donors, suppliers, volunteers and participants in its programs:

  • Identification data: full name, surnames
  • Contact data: address, email, phone number
  • Employment/institutional data: name of organization or company (where applicable)
  • Financial data: bank accounts and information needed to process donations, payments or tax receipts (CFDI)
  • Legal data: incorporation documents and documentation required by the SAT for donors with vulnerable transactions under the Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin

Your data are collected through: online forms, email, physical registration forms and direct communication with our team.

03

Purpose of processing

Primary purposes (necessary for the legal relationship with you):

  • Build and maintain the database of OCEANUS members, donors, volunteers and participants
  • Issue digital tax receipts (CFDI) and comply with obligations before the SAT
  • Manage donations and coral colony adoptions, including issuing certificates and impact reports
  • Process payments and manage supplier relationships
  • Respond to legal requirements from competent authorities
  • Comply with the Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin regarding donations that exceed the limits set as vulnerable activities

Secondary purposes (you may object at any time):

  • Sending newsletters, impact reports and communications about marine restoration projects
  • Invitations to events, expeditions and volunteer activities
  • Evaluation of the quality of our services and programs

To object to the processing of your data for secondary purposes, send your request to info@oceanus.org.mx with the subject "OBJECTION TO SECONDARY PURPOSES".

04

Sensitive data policy

OCEANUS does not request or process sensitive data as defined by the LFPDPPP. This includes, by way of example and not limitation: racial or ethnic origin, health status, genetic information, religious, philosophical or moral beliefs, political opinions, sexual preferences.

OCEANUS, A.C. actively supports diversity and inclusion and prohibits any discriminatory act or the request of information that could imply it.

05

Transfer of data to third parties

OCEANUS does not sell, rent or trade your personal data. It will not transfer data to third parties except in the following cases, which do not require your consent under Article 37 of the LFPDPPP:

  • When required by a competent authority through a legal resolution
  • When necessary to comply with tax obligations before the SAT
  • When indispensable for the legal relationship you maintain with OCEANUS (e.g. payment processors such as PayPal, only with the data needed to complete the transaction)

Any additional transfer will require your prior express consent.

06

Your ARCO rights and additional rights

As the owner of personal data, you have the following rights at all times:

A
Access
Know what personal data of yours we hold, what we use it for and the general conditions of processing.
R
Rectification
Request the correction of your data when it is inaccurate, incomplete or outdated.
C
Cancellation
Ask us to delete your data from our records when it is no longer necessary for the purpose that justified it.
O
Objection
Object to the processing of your data for specific purposes, including the sending of non-essential communications.

Additional rights:

  • Withdrawal of consent: You may withdraw at any time the consent you granted us for the processing of your data. Withdrawal does not have retroactive effects.
  • Limitation of use: You may request that we limit the processing of your data to specific purposes.
  • Portability: When technically possible, you may request that we provide your data in a structured, commonly used format.

Exercising one of these rights does not exclude or condition the exercise of any other.

How to exercise your rights

Send your request to the email info@oceanus.org.mx with the subject "ARCO RIGHTS — PERSONAL DATA", including:

① Full name of the data owner
② Email or address to notify you of the response
③ A clear description of the right you wish to exercise and the data it refers to
④ Copy of valid official identification
⑤ Where applicable, a document proving legal representation

You may also go directly to our address at Calle Río Verde Lote 7 Mza 235, Col. Proterritorio, Chetumal, Q.R.

07

Response times

StageTime limit
Response to your ARCO request20 business days from receipt
To carry out the response (if applicable)15 business days from notification
Exceptional extension (justified causes)20 additional business days, notified in advance

The response will be communicated to the email or address you provided in your request.

08

Cookies and tracking technologies

The site oceanus.org.mx uses first-party and third-party cookies for the following purposes:

  • Strictly necessary cookies: Basic functioning of the website. They cannot be disabled.
  • Analytics cookies: Google Analytics — measure traffic and visitor behavior anonymously. You can disable them from your browser.
  • Preference cookies: They remember the selected language and settings (Polylang).

You can manage or disable cookies from your browser settings. Disabling non-essential cookies does not affect the site's core functioning or your ability to donate.

09

Security measures

OCEANUS implements administrative, physical and technical security measures to protect your personal data against loss, unauthorized use, improper access, disclosure, alteration or destruction:

  • Data transmission under HTTPS protocol with SSL certificate
  • Payment processing exclusively through PayPal — OCEANUS does not store bank card data
  • Database access restricted to authorized staff with individual passwords
  • Internal policy for secure data handling and disposal
10

Changes to the Privacy Notice

OCEANUS may modify this Privacy Notice at any time to address legislative developments or changes in internal policies. Any modification will be communicated through:

  • Email sent directly to registered data owners
  • A visible notice on this page, indicating the update date
  • Notices in the controller's operating area

If the modifications involve changes to the purposes of processing that require new consent, OCEANUS will request it expressly before proceeding.

Continued use of the website or of OCEANUS's services after the publication of changes constitutes tacit acceptance of them, under the terms established by Law.

11

Data protection contact

For any query, complaint or exercise of rights related to your personal data, you can contact us through the following means:

Subject: "ARCO RIGHTS — PERSONAL DATA" or "PERSONAL DATA HANDLING"
Address: Calle Río Verde Lote 7 Mza 235, Col. Proterritorio, Chetumal, Q.R., C.P. 77086
Phone: +52 983 118 1165

If you believe your request was not handled correctly, you can file a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), the regulatory authority for personal data protection in Mexico. More information at www.inai.org.mx.

Have questions about your data?

Our team responds within 20 business days. Write to us directly and we'll help you.

Go to Contact