Pursuant to the provisions of the Federal Law on the Protection of Personal Data Held by Private Individuals (Ley Federal de Protección de Datos Personales en Posesión de Particulares) (“LFPDPPP” by its Spanish acronym), its Regulation, the Privacy Notice Guidelines, and any other applicable legal dispositions (hereinafter jointly referred to as the “Law”), this Privacy Notice is issued in the following terms:
A. PERSONAL DATA CONTROLLER
For the purposes of this Privacy Notice, Kueski, S.A.P.I. de C.V., SOFOM, E.N.R. (hereinafter the “Controller” or “Kueski,” interchangeably), with registered address at Av. Américas 1297, Floor 03-15, Col. Circunvalación Américas, Guadalajara, Jalisco, Mexico, C.P. 44630, is responsible under the terms of the Law for the collection, disclosure, storage, and/or use, including access, handling, exploitation, transfer, disposal, registration, organization, preservation, preparation, utilization, communication, dissemination, or possession (hereinafter, “Processing”) of all your personal data collected in your capacity as a candidate for any vacancy at Kueski (hereinafter, the “Data Subject(s)”).
B. PERSONAL DATA COLLECTED AND SUBJECT TO PROCESSING
We inform you that Kueski will obtain your personal data in the following ways:
In person: When you provide your data physically and personally to start and/or manage the hiring process for a job vacancy at Kueski.
Directly: When you provide your personal data to apply for a job vacancy at Kueski, whether through our website, by email, or by telephone.
Indirectly: From any other publicly available source and/or as permitted by Law, as well as from the organizers of any public or private recruitment event you attend as a candidate, or from private entities to which you authorize the transfer of your data for the purposes described below.
The categories of personal data to be collected and subject to processing are:
a) Identification data
b) Biometric data
c) Academic data
d) Asset data
e) Employment data and references
f) Financial data
g) Personal reference data
The categories of sensitive personal data to be collected and subject to processing are:
a) Immigration data
For the purpose of referring a third party, it will be your sole responsibility to notify them about the transfer of their personal data to the Controller. Likewise, Kueski will process such information in accordance with the provisions of the Law.
C. PURPOSES FOR WHICH PERSONAL DATA WILL BE PROCESSED
The processing of your personal data, including any sensitive personal data collected, has the following primary purposes:
Hiring.
Placement.
Risk identification in hiring.
Notifications about changes in hiring conditions.
Compliance with legal requirements from competent authorities.
Requesting employment references from third parties.
The purposes described above gave rise to and are necessary for your hiring process.
Additionally, Kueski may use your personal data for the following secondary purposes:
Invitation to recruitment events.
For quality purposes and to improve the skills of Kueski’s staff.
If you do not wish your data to be used for these additional purposes and/or you want to update your previous consent, please follow the instructions in Section H.
Likewise, if you wish to revoke your consent for any of the primary purposes, you must follow the procedure indicated in Section F, applicable to ARCO rights. In such case, please note that this revocation will imply that Kueski will not be able to continue with your current or future recruitment process.
D. OPTIONS AND MEANS THAT KUESKI OFFERS TO DATA SUBJECTS TO LIMIT THE USE OR DISCLOSURE OF THEIR PERSONAL DATA
You may limit the use of your personal data by sending your ARCO rights request with the elements described in Section F of this Notice to the email address dataprotection@kueski.com
E. AUTOMATED MEANS OF COLLECTING PERSONAL DATA.
Kueski only uses cookies and/or web beacons to facilitate navigation on the website https://kueski.com. It is not necessary to log in to the main page to submit your application for any of the vacancies published at https://kueski.com/careers.
F. MEANS FOR EXERCISING THE DATA SUBJECT’S ARCO RIGHTS.
In order to protect the personal data, privacy, and trust of our candidates, we make the following form available to you, where the Data Subject may, at any time, limit the use or disclosure of their personal data, as well as deny or revoke authorization for its processing, by exercising the rights of access, rectification, cancellation, or opposition (ARCO) provided for in the Law.
You may submit your request via email to dataprotection@kueski.com, fulfilling all the requirements set forth in the ARCO Rights request form, in accordance with the LFPDPPP:
The request must contain and be accompanied by the following:
I. The Data Subject’s name and address or any other means to receive notifications;
II. Documents proving the Data Subject’s identity or, where applicable, the identity and authority of their representative;
III. A clear and precise description of the personal data for which any of the ARCO rights is to be exercised, except in the case of the right of access;
IV. A description of the ARCO right to be exercised, or what the Data Subject is requesting; and;
V. Any other element or document that facilitates the location of the personal data.
VI. In the case of requests to exercise the right of rectification of personal data, the Data Subject must also indicate the modifications to be made and provide the documentation supporting their request.
Kueski will inform you, within a maximum of twenty (20) business days from the date the corresponding request is received, of the determination made. If the request is deemed appropriate, it will be carried out within fifteen (15) business days following the date on which the Controller communicates the response.
If the information provided in your request is incorrect or insufficient, or if the necessary documents to prove your identity or legal representation are not attached, or any other that may be necessary to exercise your rights, the Controller will, within five (5) business days from receipt of your request, request that the deficiencies be corrected in order to proceed with it. In such cases, you will have ten (10) business days to comply with the correction request, counted from the day after you receive it. If you do not respond within this period, the corresponding request will be considered as not submitted.
Remember that, in the event of dissatisfaction or non-compliance on our part, you may turn to the Secretaría de Anticorrupción y Buen Gobierno (Anti-Corruption and Good Governance Secretariat) to request the initiation of the rights-protection procedure.
As the data subject, you are responsible for keeping your personal data held by Kueski up to date. Accordingly, you warrant and are liable, in all cases, for the truthfulness, accuracy, validity, and authenticity of the personal data provided to Kueski, and you undertake to keep it duly updated by notifying the Controller of any changes.
The exercise of ARCO rights may be restricted for reasons of national security, public order provisions, public safety and health, or to protect the rights of third parties, in the cases and to the extent provided for in applicable legislation, or by resolution of the competent authority.
Furthermore, please note that Kueski will not be obliged to cancel your personal data in any of the circumstances listed in Article 25 of the LFPDPPP.
Finally, Kueski may deny a request to exercise any of the ARCO rights in the following cases: (i) When the applicant is not the owner of the personal data, or their legal representative is not duly authorized to act on their behalf; (ii) When the personal data is not found in Kueski’s database; (iii) When exercising such rights would infringe the rights of a third party; (iv) When there is a legal impediment or a resolution from a competent authority that restricts it; and/or (v)When rectification, cancellation, or opposition has already been carried out previously. In any of the above cases, Kueski will inform the applicant of the reason for its decision by the same means in which the request was made and within the deadlines established in the LFPDPPP and its Regulations.
Please remember that the exercise of your ARCO rights is completely free of charge, and Kueski will never charge any fee for this service.
G. TRANSFER OF PERSONAL DATA
Kueski may carry out the transfer and/or referral of data to:
| Kueski could transfer your personal data to: | Purpose | Can you limit or cancel the transfer of your data? |
| Competent authorities | To comply with requirements that may arise at the request of any competent authority. | No |
| Kueski-related and subsidiary companies | To comply with legal obligations arising from the legal relationship between the Data Subject and the Controller. | No |
| Third parties resulting from a corporate restructuring or merger | To comply with legal obligations. | No |
| Other transfers provided for in the Law | To comply with legal obligations. | No |
The third parties and entities receiving personal data assume the same obligations and/or responsibilities as Kueski, in accordance with this Privacy Notice.
H. WITHDRAWAL OF CONSENT.
At any time, you may withdraw your consent for the processing of your personal data for our secondary purposes by submitting your request in accordance with Section F of this Notice.
Refusal regarding the processing of your personal data for these purposes will not affect your selection process with Kueski.
I. CHANGES TO THE PRIVACY NOTICE.
Any update, modification, or change to this Privacy Notice made in response to legislative developments and/or modifications to Kueski’s internal policies will be published on our website www.kueski.com
You will be informed of any change to this Privacy Notice through any of the means Kueski makes available for this purpose and via email from your recruiter with such notification.
Date of last update: October 2025.