Additional Disclosures for Individuals in Mexico
Updated: October 6, 2023
This section should be read and understood in conjunction with the rest of the Privacy Policy. This supplementary section, together with the provisions stated in the Privacy Policy, applies to events held within Mexican territory, as well as activities like contests, sweepstakes, skill-based games, and similar promotions conducted through any Member Clubs or the NFL's social media platforms, or outside of social media, and executed on behalf and representation of the said Member.
I. ARCO RIGHTS
If you reside in Mexico, pursuant to the Federal Law on Protection of Personal Data Held by Private Parties, you are entitled to exercise certain rights with respect to your personal information. The rights that any person may exercise, in relation to the processing of their personal data are the following: (1) right of access, which is the right to obtain your personal data from us, as well as the information regarding the conditions and generalities of the treatment; (2) right of rectification, which is the right that the owner may, at any time, request the person responsible to rectify their personal data in the event that such data is inaccurate or incomplete; (3) right of cancellation, which implies the cessation of the processing of data or information by us; and (4) right of opposition, which is the right to oppose the processing of your personal data or demand the cessation thereof.
Subject to certain limitations, you or your legal representative may exercise any of your rights of access, rectification, cancellation, or opposition (hereinafter, the "ARCO Rights") and revoke your consent for the processing of your personal information. By virtue of these ARCO Rights, you are entitled to request access to a copy of the personal information we hold about you, the right to ask that your personal information be corrected or erased, and the right to object to, or request that we restrict, certain processing. You may use the League's Data Subject Request Portal to exercise rights (1) through (3) above (i.e., access, rectification, and cancellation) and the League's Your Privacy Choices portal to exercise right (4), the right of opposition. Click here to file an appeal or submit an inquiry.
Your request shall include and be attached with: (i) name of the incumbent, address, or email address to receive an answer, (ii) documents to confirm the identity of the owner or incumbent and his or her legal representative (if applicable); (iii) an accurate description of the personal data in respect of which the incumbent is exercising his or her ARCO rights, or is revoking his or her consent, or otherwise limiting the use or dissemination of such personal information; and (iv) any other element or document which may facilitate the identification of your personal data. If you wish to include more detail about your specific ARCO request, please click here to select the "Inquiry" option to describe your request (please be sure to include reference to the "Arizona Cardinals" in the detailed summary textbox).
If the information provided on the application does not comply with any of these formal requirements, the applicant will be informed by the means indicated within 5 (five) business days following receipt of the application, requesting the supply of the elements or documents needed to process the same. You will have ten (10) business days to respond to such request, as of the day after receipt of the same. If you do not respond within the aforementioned time frame, the application will be considered as not filed. If the application complies with all the formal requirements, the process will continue in accordance with the following procedure:
(1) We will communicate the response of the request to the incumbent or his legal representative, within a maximum period of 20 (twenty) business days, counted as of the date of receipt of the request to exercise the ARCO rights, through the means indicated in the request. (2) If the request is appropriate, it will be effective within 15 (fifteen) business days following the date on which the response is communicated. (3) The aforementioned terms may be extended only once for an equal period, so long as the circumstances of the case justify it. (4) Access or request to rectify, cancel, or oppose the processing of personal information may be denied to the applicant in the following cases: (a) when the applicant is not the holder of the personal data or the legal representative is not duly identified as such; (b) when the applicant's personal data is not found in our database; (c) when the rights of a third party are impaired; (d) when there is a legal impediment or a resolution of a competent authority that restricts access to personal data, or does not allow its rectification, cancellation, or opposition; and (e) when the rectification, cancellation, or opposition has already been previously made by us.
Please bear in mind that the exercise of the right to opposition will not proceed in those cases in which the processing of information is necessary for the fulfillment of a legal obligation imposed upon us.
II. DATA TRANSFERS
Information about data we transfer to third-party recipients is available under the "Use of Information" and/or "Disclosure of Information" sections. Personal information is transferred subject to your consent, except as otherwise permitted under Article 37 of the applicable law. We will request your express consent before sharing your personal information with business partners for their marketing or other commercial purposes.
When we transfer your personal information to third parties, some of these parties may be located in countries other than your own, such as the United States, whose privacy and data protection laws may not be equivalent to those in your country of residence. When we transfer your personal information to other countries, we apply appropriate safeguards, to protect your information in accordance with applicable laws. If you would like to know more about the processing of your personal information and whether your personal information is transferred to a third country, please contact us using any of the methods described in Contact Us.
III. MISCELLANEOUS
The foregoing shall apply to any retention and processing of personal data carried out by any of the Member Clubs or the NFL. The processing of personal data described herein and in the NFL's Privacy Policy shall apply in the same manner (but not limited to) for those individuals who provide their data through any social media platform of the Member Clubs or the NFL, or any digital platform, as the case may be, whether for marketing and promotional activities, additional information requests regarding any event, or other purposes.