Privacy Notice

1. Data Controller and contact

The Data Controller responsible for processing your personal data is Karam Mass Abogados. For any communication relating to this notice or to the processing of your personal data, you may write to contacto@karammass.com.

2. Personal data we process

The Data Controller processes the personal data that you provide directly and voluntarily when writing to the email addresses published on this website:

1. Identification and contact data: name, email address and, where applicable, telephone number, company and position.
2. Information about your matter that you choose to include in your message, which may include financial or asset-related data.
3. Personal data of third parties related to your matter that you choose to share.

Sensitive personal data. The Data Controller does not request sensitive personal data and asks you not to include it in your messages. If you send it, it will not be processed for any purpose without first obtaining your express written consent, as provided by the Law; if such consent is not obtained, it will be deleted.

Financial or asset-related data. Where handling your matter requires processing financial or asset-related data, the Data Controller will obtain your express consent, unless one of the exceptions provided by the Law applies.

Third-party data. By sharing personal data of third parties, you state that you are entitled to do so. The Data Controller will process such data only for the purposes set out in this notice.

3. Purposes of processing

Your personal data will be processed for the following purposes, which are necessary to handle the communication you initiate:

1. To respond to your inquiry or request.
2. To assess your matter, including checking for potential conflicts of interest.
3. To schedule meetings and keep in contact with you.
4. To prepare and, where appropriate, send you a proposal for professional services.

The Data Controller does not process your personal data for secondary purposes, such as sending advertising or newsletters. Should it do so in the future, it will update this notice and request your consent.

If an engagement for professional services is formalized, the processing of data relating to your matter will also be governed by the terms of the respective agreement.

4. Options to limit the use or disclosure of your data

You may request at any time that the use or disclosure of your personal data be limited, by sending an email to contacto@karammass.com stating your name and the scope of the limitation you request. The Data Controller will reply by the same means.

5. Processors and transfers

To operate this website and its email, the Data Controller uses technology service providers, such as website hosting and email providers, which process personal data on the Data Controller’s behalf as processors. This does not constitute a transfer under the Law.

The Data Controller does not transfer your personal data to third parties, except in the cases in which the Law allows it without your consent, for example, where the transfer is required by law or is necessary for the recognition, exercise or defense of a right in judicial proceedings.

6. Rights of access, rectification, cancellation and objection

You have the right to access your personal data, to have it rectified if it is inaccurate or incomplete, to have it cancelled and to object to its processing (ARCO rights). To exercise these rights, send your request to contacto@karammass.com with the following information:

• Your name and the means for receiving notifications.
• Documents evidencing your identity or, where applicable, the legal authority of the person acting on your behalf.
• A clear and precise description of the personal data in respect of which you wish to exercise any of these rights, except in the case of the right of access.
• The right you wish to exercise.
• Any other information that may help locate your personal data.

Rectification requests must also state the changes requested and be accompanied by supporting documentation.

These requests will be handled by the person designated by the Data Controller for that purpose. The Data Controller will communicate its response within a maximum of twenty days from the date it receives the request and, if the request is granted, will give effect to it within fifteen days following the date on which the response is communicated. Both periods may be extended once for an equal period where the circumstances of the case justify it.

Access will be provided by sending your data in electronic format to the email address you indicate. Exercising ARCO rights is free of charge; only justified reproduction, copying or shipping costs may be charged, where applicable.

7. Withdrawal of consent

You may withdraw at any time the consent you have given for the processing of your personal data, without retroactive effect, by sending a request to contacto@karammass.com in the terms of the preceding section. Withdrawal may prevent the Data Controller from continuing to handle your matter.

8. Use of cookies and other technologies

The Data Controller does not use its own cookies and has not enabled advertising cookies or third-party analytics tools on this website. The website’s hosting platform (Wix) sets cookies and uses similar technologies that the platform itself classifies as essential for the website’s security and operation, as well as for measuring its performance. Through them, the platform may automatically obtain technical information about your visit, such as your browser and device type, IP address and the pages viewed, which may constitute personal data. The Data Controller does not use this information to identify you.

You can disable or delete cookies in your browser settings, although doing so may affect how the website works. For more information about the cookies used by the platform, please see Wix’s cookie policy.

9. Competent authority

If you believe that your right to the protection of your personal data has been infringed, you may file a complaint with the Secretaría Anticorrupción y Buen Gobierno, the competent authority under the Law.

10. Changes to this privacy notice

The Data Controller may amend this privacy notice. Any amendment will be published on this same page of the website, together with the date of its last update.