Pursuant to the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, the Privacy Notice Guidelines and the other applicable provisions (hereinafter, collectively, the “Law”), this Privacy Notice is issued on the following terms:
A. CONTROLLER OF THE PERSONAL DATA.
For purposes of this Privacy Notice, Kueski, S.A.P.I. de C.V., SOFOM, E.N.R. (hereinafter the “Controller” or “Kueski”, interchangeably), with address at Av. Américas 1297, Floor 03-15, Col. Circunvalación Américas, Guadalajara, Jalisco, Mexico, C.P. 44630, is the party responsible, under the terms of the Law, for the obtaining, disclosure, storage and/or use, including access, handling, exploitation, transfer, or disposal, recording, organization, retention, preparation, utilization, communication, dissemination or possession (hereinafter the “Processing”) of all of your personal data that we collect in your capacity as a candidate for a vacancy at Kueski (hereinafter the “Data Subject(s)”).
B. PERSONAL DATA COLLECTED AND SUBJECT TO PROCESSING.
In accordance with the foregoing, we inform you that Kueski will obtain your personal data, whether directly, in person or indirectly, when you submit a request and provide your personal data for purposes of the contractual relationship with Kueski.
The categories of personal data to be collected and subject to processing are:
Personal data comprising: | |
|---|---|
| 1. Identification data | |
| 2. Contact data | |
| 3. Employment and academic data | |
| 4. Personal/employment reference data |
Sensitive data comprising: | |
| 1. Identification data | Nationality, sex, official photo identification (INE). |
| 2. Biometric data | Fingerprint. |
| 3. Immigration data | Residence card, passport, immigration status, nationality. |
Financial and asset data comprising: | |
| 1. Financial and asset data | Bank accounts, CLABE and salary. |
For purposes of referring a third party, it will be your sole responsibility to notify that third party of the transfer of their personal data to the Controller. In addition, Kueski will process such information in accordance with the provisions of the Law.
C. PURPOSES FOR WHICH PERSONAL DATA WILL BE PROCESSED.
Kueski uses your personal, sensitive and financial data for the following purposes:
a) Primary purposes, necessary for the provision of the service.
- Identification of the applicant, as the case may be.
- Compiling the information file.
- Contracting.
- Placement.
- Identification of risks in contracting.
- Notices of changes in the terms of contracting.
- Responding to legal requirements of competent authorities.
- Requesting employment references from third parties.
The purposes described above gave rise to, and are necessary for, your hiring process.
Likewise, if you wish to revoke your consent for any of the primary purposes, please follow the instructions in section H; we inform you that such revocation implies that Kueski cannot continue with your present or future recruitment process.
b) Secondary purposes.
- Invitation to recruitment events.
- For quality purposes and to improve the skills of Kueski’s personnel.
If you do not wish your data to be used for the secondary purposes and/or you wish to update your prior consent, please follow the instructions in section H. Refusal of the processing of your personal data for the secondary purposes will not affect your selection process with Kueski.
D. OPTIONS AND MEANS THAT KUESKI OFFERS TO DATA SUBJECTS TO LIMIT THE USE OR DISCLOSURE OF THEIR PERSONAL DATA.
You may limit the use of your personal data by sending your ARCO rights request, with the elements described in section F of this Notice, to the email address dataprotection@kueski.com
E. AUTOMATIC MEANS OF COLLECTING PERSONAL DATA.
Kueski only uses cookies and/or web beacons to facilitate browsing on the website https://kueski.com. It is not necessary to log in on the main page in order to submit your application for any of the vacancies published on the page https://kueski.com/careers
F. MEANS FOR EXERCISING THE DATA SUBJECT’S ARCO RIGHTS.
In order to protect personal data and the privacy and trust of our candidates, we make available the following form, through which the Data Subject may at any time limit the use or disclosure of their personal data, and refuse or revoke authorization for its processing, by exercising the rights of access, rectification, cancellation or objection (ARCO) provided for by the Law.
You may submit your request by email to dataprotection@kueski.com, meeting all the requirements set out in the ARCO Rights request form, in accordance with the LFPDPPP:
The request must contain, and be accompanied by, the following:
- The name of the Data Subject and their address or any other means of receiving notifications;
- The documents proving the identity of the Data Subject or, as applicable, the capacity and identity of their representative;
- A clear and precise description of the personal data with respect to which any of the ARCO rights is sought to be exercised, unless the right of access is concerned;
- A description of the ARCO right sought to be exercised, or otherwise what the Data Subject is requesting, and
- Any other element or document that facilitates locating the personal data.
- In the case of requests to exercise the right of rectification of personal data, the Data Subject must also state the modifications to be made and provide the documentation supporting the request.
Said request will be handled by the Legal and Compliance department.
Kueski will notify you of the determination adopted within a maximum period of twenty business days, counted from the date on which the corresponding request is received. If the request is granted, it will be implemented within the fifteen business days following the date on which the Controller communicates its response.
If the information provided in your request is erroneous or insufficient, or is not accompanied by the documents necessary to prove your identity or the corresponding legal representation, or any other document necessary to exercise your rights, the Controller shall, within five business days following receipt of your request, require you to cure the deficiencies so that the request may be processed. In such cases, you will have ten business days to comply with the requirement, counted from the day following the day on which you received it. The corresponding request shall be deemed not filed if you do not respond within that period.
Please remember that, in the event of dissatisfaction or non-compliance on our part, you may go before the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno) to request the initiation of the rights protection procedure.
As the Data Subject, you shall be responsible for keeping your personal data held by Kueski up to date. Accordingly, you warrant and are liable in all cases for the truthfulness, accuracy, currency and authenticity of the personal data provided to Kueski, and you undertake to keep it duly updated, notifying the Controller of any change.
The exercise of ARCO rights may be restricted for reasons of national security, public order provisions, public safety and health, or to protect the rights of third parties, in the cases and to the extent provided for in applicable law, or by resolution of the competent authority.
In addition, we inform you that Kueski shall not be obliged to cancel your personal data in any of the cases listed in Article 25 of the LFPDPPP.
Finally, Kueski may deny a request to exercise any of the ARCO rights in the following cases: (i) when the requester is not the Data Subject of the personal data, or the legal representative is not duly authorized to act; (ii) when the requester’s personal data are not found in Kueski’s database; (iii) when exercising them would infringe the rights of a third party; (iv) when there is a legal impediment, or a resolution of a competent authority restricting it; and/or (v) when the rectification, cancellation or objection has previously been carried out. In any of the foregoing cases, Kueski will inform the requester of the reason for its decision by the same means by which the request was made and within the periods established in the LFPDPPP and its Regulations.
Please remember that the exercise of your ARCO rights is completely free of charge and that Kueski will at no time charge any fee for this service.
G. TRANSFER OF PERSONAL DATA.
Kueski may transfer and/or remit data to:
Kueski may transfer your personal data to: |
Purpose and legal basis (Federal Law on the Protection of Personal Data Held by Private Parties) |
Can you limit it on the basis of your active legal relationship with Kueski? |
| Individuals or legal entities in the event of corporate restructuring, merger, acquisition, assignment of portfolio or any other form of business transfer. | Maintenance or performance of the legal relationship between Kueski and the Data Subject, as well as the entering into of a contract in the interest of the Data Subject. | No. |
| Controlling companies, subsidiaries or affiliates under the common control of Kueski, or a parent company or company of the same group operating under the same internal processes and policies. | For compliance with the legal obligations arising from the contractual relationship between the data subject and the controller. | No. |
| Service providers, subcontracted third parties and providers of risk management, information security and/or specialized software. | For compliance with the legal obligations arising from the contractual relationship between the data subject and the controller. | No. |
| Administrative, judicial or governmental authorities. Other transmissions provided for in the aforementioned LFPDPPP and its Regulations. | For compliance with the legal obligations arising from the contractual relationship between the data subject and the controller. | No. |
The third parties and receiving entities of personal data assume the same obligations and/or responsibilities as Kueski, in accordance with the terms of this Privacy Notice.
H. REVOCATION OF CONSENT.
At any time you may revoke and/or update your consent to the processing of your personal data for our purposes by submitting your request in accordance with section F of this Notice.
I. CHANGES TO THE PRIVACY NOTICE.
Any update, modification or change to this privacy notice, made in response to legislative developments and/or modifications to Kueski’s internal policies, will be published on our website www.kueski.com
You may learn of any change to this Privacy Notice through any of the means by which Kueski makes it available to you and through the email that your recruiter sends you with such notification.
Date of last update: October 2026.