Personal data collected will be protected, incorporated, and processed in the GALERÍA EXU Personal Data System, based on Article 6, Section I of the Mercantile Establishments Law.

Its purpose is to integrate and safeguard information of individuals or entities that register for billing or any other means obtained in the exercise of the functions of this establishment.

They cannot be transmitted according to the Law for the Protection of Personal Data for Mexico City.

Your data will not be disclosed without your express consent, except as provided by law. We commit to treating your personal data in accordance with the principles of legality, quality, consent, information, purpose, loyalty, proportionality, and responsibility established by law.

 

Exercising Your Rights

To exercise your rights, you must submit a request:

• By email or

• At our address during business hours from 9:00 am to 1:00 pm.

You may do so:

• In person, presenting an original of your official identification.

• Through a legal representative, who must present the original public deed accrediting their powers.

• Outside Mexico City, exceptionally by sending copies of identification documents via email.

We may require additional documents or authentication mechanisms to verify your identity unequivocally.

 

Access to Your Data

We may provide you with access to personal data, if any, by:

• Providing a copy of the information.

• Giving you access to the information on a computer.

• Using any other means established by law.

Your request must contain at least:

1. Name of the personal data holder.

2. Address, phone, and email to communicate the response.

3. Clear description of the personal data related to your request.

4. Any other element that facilitates locating your data.

We will respond within 20 days through the means provided (email or physical address).

 

Personal Data We May Collect

• Identification: full name, date of birth, nationality, gender, photographs and/or video recordings at our facilities or events.

• Contact information: address, phone (mobile/fixed), email, social media usernames (Facebook, Twitter, Instagram, etc.).

• Financial/patrimonial: bank accounts, income, insurance, tax declarations, credit bureau reports, assets.

• Electronic data: device information, IP address, cookies, web beacons, geolocation, closed-circuit camera recordings.

 

How We Collect Data

• Directly from you: when you provide information at our establishments.

• Optical, electrical, or digital means: by phone, email, or when captured by closed-circuit cameras.

• Automatically: through cookies, web beacons, or other tracking technologies (device identifiers, location, browsing history, etc.).

 

Security Measures

We have implemented administrative, physical, and technical security measures to protect your personal data against:

• Damage

• Loss

• Alteration

• Destruction

• Unauthorized use, access, or processing

We also ensure that your data remains accurate and updated for the purposes for which it was collected.

---

Last modification date: 23/09/2025