Additional Disclosures for Individuals in Mexico
Updated: October 6, 2023
I. ARCO RIGHTS
If you reside in Mexico, pursuant to the Federal Law on Protection of Personal Data Held by Private Parties, you are entitled to exercise certain rights with respect to your personal information. The rights that any person may exercise, in relation to the processing of their personal data are the following: (1) right of access, which is the right to obtain your personal data from us, as well as the information regarding the conditions and generalities of the treatment; (2) right of rectification, which is the right that the owner may, at any time, request the person responsible to rectify their personal data in the event that such data is inaccurate or incomplete; (3) right of cancellation, which implies the cessation of the processing of data or information by us; and (4) right of opposition, which is the right to oppose the processing of your personal data or demand the cessation thereof.
Subject to certain limitations, you or your legal representative may exercise any of your rights of access, rectification, cancellation, or opposition (hereinafter, the "ARCO Rights") and revoke your consent for the processing of your personal information. By virtue of these ARCO Rights, you are entitled to request access to a copy of the personal information we hold about you, the right to ask that your personal information be corrected or erased, and the right to object to, or request that we restrict, certain processing. You may use the League's Data Subject Request Portal to exercise rights (1) through (3) above (i.e., access, rectification, and cancellation) and the League's Your Privacy Choices portal to exercise right (4), the right of opposition. Click here to file an appeal or submit an inquiry.
Your request shall include and be attached with: (i) name of the incumbent, address, or email address to receive an answer, (ii) documents to confirm the identity of the owner or incumbent and his or her legal representative (if applicable); (iii) an accurate description of the personal data in respect of which the incumbent is exercising his or her ARCO rights, or is revoking his or her consent, or otherwise limiting the use or dissemination of such personal information; and (iv) any other element or document which may facilitate the identification of your personal data. If you wish to include more detail about your specific ARCO request, please click here to select the "Inquiry" option to describe your request (please be sure to include reference to the "Arizona Cardinals" in the detailed summary textbox).
If the information provided on the application does not comply with any of these formal requirements, the applicant will be informed by the means indicated within 5 (five) business days following receipt of the application, requesting the supply of the elements or documents needed to process the same. You will have ten (10) business days to respond to such request, as of the day after receipt of the same. If you do not respond within the aforementioned time frame, the application will be considered as not filed. If the application complies with all the formal requirements, the process will continue in accordance with the following procedure:
(1) We will communicate the response of the request to the incumbent or his legal representative, within a maximum period of 20 (twenty) business days, counted as of the date of receipt of the request to exercise the ARCO rights, through the means indicated in the request. (2) If the request is appropriate, it will be effective within 15 (fifteen) business days following the date on which the response is communicated. (3) The aforementioned terms may be extended only once for an equal period, so long as the circumstances of the case justify it. (4) Access or request to rectify, cancel, or oppose the processing of personal information may be denied to the applicant in the following cases: (a) when the applicant is not the holder of the personal data or the legal representative is not duly identified as such; (b) when the applicant's personal data is not found in our database; (c) when the rights of a third party are impaired; (d) when there is a legal impediment or a resolution of a competent authority that restricts access to personal data, or does not allow its rectification, cancellation, or opposition; and (e) when the rectification, cancellation, or opposition has already been previously made by us.
Please bear in mind that the exercise of the right to opposition will not proceed in those cases in which the processing of information is necessary for the fulfillment of a legal obligation imposed upon us.
II. DATA TRANSFERS
Information about data we transfer to third-party recipients is available under the "Use of Information" and/or "Disclosure of Information" sections. Personal information is transferred subject to your consent, except as otherwise permitted under Article 37 of the applicable law. We will request your express consent before sharing your personal information with business partners for their marketing or other commercial purposes.
When we transfer your personal information to third parties, some of these parties may be located in countries other than your own, such as the United States, whose privacy and data protection laws may not be equivalent to those in your country of residence. When we transfer your personal information to other countries, we apply appropriate safeguards, to protect your information in accordance with applicable laws. If you would like to know more about the processing of your personal information and whether your personal information is transferred to a third country, please contact us using any of the methods described in Contact Us.