Privacy policy

Digital user

Conservas La Costeña S.A. de C.V., hereinafter La Costeña, with tax address at Vía Morelos 268, Santa María Tulpetlac, Ecatepec de Morelos, 55400, State of Mexico, Mexico and website http://www.lacostena.com.mx , is responsible for the processing of your personal data in accordance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and applicable Guidelines; and when applicable by territory or residence of the data subject, this notice is intended to inform you how La Costeña protects your privacy in a high-technology environment.

To ensure transparency in our digital and technological infrastructure, we guarantee that your information is handled securely.

1. SCOPE AND KEY DEFINITIONS (PROTECTION OF THE CONTROLLER)

For purposes of this notice, the following definitions apply:

“Advertising platforms”: Advertising and measurement services (e.g., Meta/Facebook/Instagram, Google/YouTube/Bytedance/TikTok) that may operate as Independent Controllers or, in certain flows, as joint controllers depending on the tool used.
“Processor”: Providers that process data on behalf of and under the instructions of La Costeña (e.g., cloud services, Customer Data Platform (CDP), analytics, CRM) or other technologies and are subject to contractual security and confidentiality obligations add links to their privacy policies.
“AI/Models”: Automated systems for classification, segmentation, affinity detection and inferences for analytics and marketing purposes, without decisions that produce significant legal effects on the data subject.

2. PERSONAL DATA WE COLLECT

2.1 Data provided directly

Identification: first and last name (if applicable).
Contact: email address telephone (if applicable).
Account/registration: username, preferences, consents (if applicable).

2.2 Data collected automatically (digital environment)

Online identifiers: IP address, browser, operating system, browsing events, pages visited, traffic source, (Common practice in website privacy notices.)
Cookies and similar technologies.
Account/registration: username, preferences, consents (if applicable).

2.3 Data collected indirectly / from permitted sources

Podemos obtener datos de:

Publicly available sources and/or public content on social media (e.g., public posts), solely for purposes of analytics, reputation measurement, trends and non-sensitive segmentation.
Advertising platforms (reports, metrics, audiences, conversions) in accordance with their policies and configurations.

La Costeña does not request sensitive personal data through social media, nor do we intend to infer special/sensitive categories (health, religion, orientation, biometrics, etc.) for marketing.

3. PURPOSE OF PROCESSING

3.1 Primary purposes (necessary)

Operation of the site/digital services and user assistance.
Information security, fraud prevention, access control.
Compliance with legal obligations and exercise/defense of rights.

3.2 Secondary purposes (marketing/analytics)

Advanced analytics and campaign measurement.
Content and experience personalization.
Interest-based advertising and retargeting.
Generation of segments/audiences for marketing.
Social listening (trends, affinities, aggregated insights).

You may refuse or revoke your consent at any time for the processing of your personal data for secondary purposes. To do so, you must submit a request addressed to the area responsible for personal data protection through email (*) or at the address (*) indicated in this Privacy Notice.

The request must contain at least: (i) the name of the data subject and a means to communicate the response; (ii) documents proving your identity or, where applicable, the corresponding legal representation; (iii) a clear and precise description of the personal data with respect to which you seek to exercise the corresponding right; (iv) the express statement of your request for refusal or revocation for the processing of your personal data for secondary purposes; and (v) any other element that facilitates the location of the personal data.

The controller will communicate to the data subject the determination adopted regarding the request within a maximum period of 20 (twenty) business days counted from the date the request is received. If appropriate, it will become effective within the following 15 (fifteen) business days from the date the response is communicated.

4. RELATIONSHIP WITH THIRD PARTIES.

To offer you aunified experience, in our portals and social networks we use Customer Data Platforms, Customer Relationship Management tools, supported by:

REFERRAL CLAUSE

Your data may be processed by technology providers (Processors) for purposes of storage, advanced behavior analysis, unification of your digital profile and personalization of your experience.

SECURITY

At La Costeña, we ensure that all our providers are contractually obligated to implement technical, physical and administrative security measures equivalent to ours and are strictly prohibited from using your information for their own purposes or for purposes other than those indicated in our instructions.

Important Note

La Costeña is not responsible for third-party websites that are not under its domain or knowledge. It is recommended that you consult the respective privacy notices of such websites and applications to properly inform yourself about the use of your personal information by other websites or other tools, contacting the third party responsible directly in case of doubts.

5. INTERNATIONAL DATA TRANSFERS

Because our digital infrastructure may use cloud services, customer data platforms and Customer Relationship Management tools that may be located outside the country, we assure you that:

TRANSFER

Your data may be sent and stored on servers in the U.S., European Union, among others and will be carried out in accordance with the LFPDPPP.

COMPLIANCE FRAMEWORK

These transfers are carried out under standard contractual clauses and data protection frameworks and in accordance with applicable legislation; and when applicable by territory or residence of the data subject internationally, guaranteeing a level of protection in accordance with Mexican legislation.

6. COOKIES AND TRACKING TECHNOLOGIES

Nuestras políticas de cookies

On our web portals that use cookies, web beacons and similar technologies, we implement:

Consent banner: Upon entry, our banner allows you to:

Accept all: Enables complete and personalized experience.
Reject all: Only essential technical cookies are maintained.
Configure preferences: You choose between Statistics, marketing or personalization cookies.

Control panel: You can change your settings at any time at the Privacy preferences panel on the page footer.

And on our social networks we have:

Privacy policies: For transparency, you can consult how our key providers / business partners manage your data in these media.
1. Name of the provider or Business Partner - Link to its policy
2. META: https://www.facebook.com/privacy/policy/?locale=es_LA
3. TikTok: https://www.tiktok.com/legal/page/row/privacy-policy/es
4. Google: https://policies.google.com/privacy?hl=es

7. OPTIONS TO LIMIT USE/DISCLOSURE.

You may request to unsubscribe from marketing communications (unsubscribe).
You may disable non-essential cookies from the CMP panel.
You may use interest-based advertising controls from platforms (when applicable), in addition to our internal mechanisms.

8. EXERCISE OF ARCO RIGHTS IN DIGITAL / EXTERNAL ECOSYSTEMS

You maintain the right of Access, Rectification, Cancellation and Opposition, and must submit the respective request through the following means: privacidad@lacostena.com.mx,

where the corresponding procedure will be made known to you; if you prefer you may appear in person at the address indicated at the beginning of this privacy notice, addressing the Human Resources department, including:

Name and response method
Identification and, where applicable, representation.
Clear description of the right and data involved

Deadlines: : response within 20 business days, and execution within the following 15 business days (except for exceptions).

When your data resides in third-party and/or external systems:

Single point of contact: It is not necessary to contact our providers / business partners (CDP, Google or cloud), you only need to submit the respective request through the following means: privacidad@lacostena.com.mx. and we will manage with the third-party processors (CDP, Google, cloud, etc.) to ensure attention to your request, guaranteeing that your right becomes effective throughout our digital infrastructure, own or subcontracted.
Automated mechanisms / expedited channels: If our platform has a user profile, you may exercise downloading your data or deleting your account / profile directly in the section "Privacy Settings – Account Privacy", this being the fastest method to exercise your rights.

9. RETENTION AND DELETION

We retain data only for the time necessary for:

Described purposes
Legal obligations
Exercise/defense against claims

Subsequently we apply blocking and secure deletion, and/or anonymization when appropriate.

10. INFORMATION SECURITY AND CONTROLS

We implement a structure of controls that includes data encryption, technical, administrative, physical measures and the dissociation of profiles in the CDP and strict data deletion protocols when the purpose of the processing has concluded or the legal relationship ends.

11. MINORS

LA COSTEÑA digital services are not directed at minors. If we identify data from minors without authorization, we will proceed with its deletion as appropriate.

This Notice may be modified due to regulatory or internal changes. The current version will be available on the website http://www.lacostena.com.mx.

Last update: February 2026.