Donner & Asociados
DONNER AGENTE DE SEGUROS Y FIANZAS, S.A. DE C.V.

Comprehensive Privacy Notice

This is an unofficial English translation provided for convenience. The Spanish version prevails for legal purposes.

I. Identity and address of the data controller

In compliance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (the LFPDPPP), DONNER AGENTE DE SEGUROS Y FIANZAS, S.A. DE C.V. (hereinafter “THE CONTROLLER”), makes this Comprehensive Privacy Notice available to its clients, prospects, candidates, agents, collaborators, and any person whose personal data is processed.

THE CONTROLLER’s main activity is the brokerage of insurance and surety bonds in Mexico, as well as activities related to the selection, onboarding, training, and management of agents and collaborators under its brand.

  • Address: BU/PUERTA DE HIERRO 5153, 11th Floor - Suite 210, ZAPOPAN, JALISCO, 45116, Mexico.
  • Contact email: legal@donnerseguros.com
  • Phone: +52 (984) 116-6918

II. Personal data collected

For its purposes, THE CONTROLLER may collect directly, indirectly, through automated processing and/or artificial intelligence the following personal data, by way of example and not limitation:

1. Identification and contact data

  • Full name
  • Address
  • Phone number
  • Email
  • Nationality
  • CURP and RFC (Mexican tax IDs)
  • Government-issued IDs

2. Employment and professional data (candidates and agents)

  • Résumé and academic information
  • Employment history
  • Professional licenses or CNSF authorizations
  • Psychometric and performance assessments
  • Employment references
  • Questions related to income goals and basic personal finances

3. Financial and asset data

  • Tax information
  • Banking data (exclusively for payments, commissions, or reimbursements)

4. Client and prospect data

  • Information required to quote, contract, and manage insurance and surety products
  • Information related to insurable risks

5. Image, voice, and audiovisual content

  • Photographs
  • Video
  • Voice recordings
  • Images captured by video-surveillance cameras
  • Recordings of interviews, training sessions, client meetings, and in-person or virtual meetings

III. Purposes of processing

Primary purposes (necessary)

  • Broker, quote, contract, manage, and follow up on insurance and surety products
  • Comply with legal obligations before regulatory and tax authorities
  • Maintain files for clients, agents, and candidates
  • Evaluate, select, and onboard agents and collaborators
  • Manage payments, commissions, and incentives
  • Comply with contractual obligations

Secondary purposes

  • Training, internal evaluations, and process improvement
  • Internal statistics and market analysis
  • Distribution of institutional, promotional, or educational content
  • Use of audiovisual materials for corporate, commercial, or training purposes

If you do not wish your data to be used for secondary purposes, you may state so through the mechanisms described in this notice.

IV. Audiovisual materials and video surveillance

  • Our facilities may be equipped with video-surveillance cameras for security, access control, and the protection of people and property.
  • We may record interviews, training sessions, client meetings, and in-person or virtual meetings, and generate multimedia content for internal or institutional purposes.
  • Such materials are handled confidentially by authorized personnel, applying administrative, technical, and physical safeguards.

V. Data transfers

THE CONTROLLER may transfer personal data without requiring additional consent when necessary to:

  • Insurance and surety companies
  • Competent authorities
  • Technology, administrative, or legal service providers
  • Financial institutions
  • Related or affiliated companies

Only the strictly necessary data will be transferred, in accordance with the LFPDPPP.

VI. Means to limit the use or disclosure of data

You may request the limitation of the use or disclosure of your personal data by writing to the email indicated in this notice.

VII. ARCO rights

You may exercise your rights of Access, Rectification, Cancellation, or Opposition (ARCO) at any time by submitting a request that includes:

  • Full name of the data subject
  • Copy of a government-issued ID
  • Clear description of the right to be exercised
  • Documentation that helps locate the data

THE CONTROLLER will respond within a maximum of 20 business days, as required by law.

VIII. Revocation of consent

You may revoke your consent to the processing of your personal data, to the extent permitted by law, following the procedure described in this notice.

IX. Changes to the Privacy Notice

Any changes to this Privacy Notice will be published on the official website of THE CONTROLLER and will take effect upon publication.

Last updated: July 22, 2026

ES