At Grupo STT, it is important that you understand how we may use your personal data and that you retain control and choices over how we manage it.
Purpose and scope
This Privacy Policy informs employees, clients, suppliers, shareholders, collaborators and other parties interested in Grupo STT services about the criteria governing the use, processing and transfer of personal data held in its databases or files.
It applies to shareholders, clients, board members, job applicants, employees and officers of national and foreign subsidiaries, business partners, contractors, employees’ or officers’ children, providers of goods and services and, generally, third parties with a direct or indirect relationship with Grupo STT.
Why do we collect personal data?
We need certain personal data to provide our services and offer solutions suited to each type of business. Purposes vary by service and will be disclosed in the relevant instruments or contracts.
Consent: when the data subject authorises one or more specific purposes. Consent remains valid until it is withdrawn or the stated purpose has been fulfilled.
Performance of a contract or pre-contractual measures: when collection is necessary for a contract or pre-contract between the data subject and Grupo STT.
Legal obligation: when collection or retention is necessary for Grupo STT to meet a legal obligation.
Public interest or exercise of official authority: when processing relates to the public interest or applicable official powers.
Legitimate interest: when Grupo STT or a third party involved in the contractual relationship needs to process data for a legitimate interest while respecting the data subject’s rights.
Data may be used to communicate activities, projects or calls for participation; meet contractual, legal and transparency obligations; improve content relevance; and ensure the integrity, confidentiality and availability of information.
Sensitive data and children’s data
Certain contracts may require sensitive data or data concerning children and adolescents. In those cases, we will first obtain informed consent from the data subject or their legal representative and explain the purpose of collection.
What data do we collect?
When you visit this site, we may collect anonymous browsing-behaviour data through cookies, pixels or similar technologies, such as visit duration and viewed content.
We may also collect anonymous technical information about access to and interaction with the site, including IP address, browser and device characteristics, language preferences, referring URL and other technical data.
The website is not directed at minors and does not intentionally collect or retain personal information from minors through the site.
Grupo STT also collects client, employee and supplier information that varies according to the applicable contract or relationship. The relevant documents describe the data and purposes in detail.
Use, sharing and disclosure
Grupo STT will not sell, distribute or lease personal data to third parties except as provided by this Policy, local law or an applicable authorisation.
Grupo STT may use service providers bound by privacy obligations that prevent them from sharing data, except where required by law or court order, where necessary to protect Grupo STT’s rights or property, or to prevent fraud.
Your rights
Rights may vary under local law. In general, the data subject may:
- Access their data and receive clear information about its processing.
- Correct or update inaccurate or outdated data.
- Withdraw consent where consent is the legal basis for processing.
- Restrict, erase or cancel data they no longer want Grupo STT to process, subject to legal retention duties.
- Object to processing. If processing is essential to a contract, the objection may prevent the contract from continuing.
- Where applicable, request portability in a standard, machine-readable format without impediment to transfer to another controller.
You may also lodge a complaint with your local data protection authority.
International transfers
Grupo STT has subsidiaries in different countries. Depending on the service or contract, some personal data may be processed by other subsidiaries. Information about these transfers is provided in contracts, authorisation documents and this Policy. You may request further details through the contact channels below.
Automated decisions
Certain contracts may involve processing based on automated decisions, but the final decision is not made exclusively by automated means. The technology team reviews these procedures to ensure human involvement. Where applicable, the purpose and categories of data involved will be disclosed to the data subject in advance.
Data retention
Personal data is processed and retained for as long as necessary for the purpose for which it was collected. It may be retained longer where required by law, supported by valid consent, or necessary to comply with a legal obligation or authority order. Data must be deleted after the applicable retention period ends.
Data security
Grupo STT uses administrative and technological measures to protect records against alteration, loss, unauthorised or fraudulent consultation, use or access. However, no system offers absolute security, and Grupo STT cannot guarantee complete security against technical failures or improper third-party access.
Cookies
Cookies are small text files stored in the browser. They can enable technical site functions, remember preferences, personalise content and produce usage statistics.
Grupo STT uses its own technical cookies, and the site or its sub-sites may use similar technologies to retain anonymous browsing information. You may accept, reject or change preferences through the cookie notice and delete cookies through browser settings. Disabling them may limit some functions.
For current categories, purposes and the cookie list, see the Cookie Policy available in the footer.
Changes
Grupo STT may amend this Privacy Policy at any time. Because the site is updated periodically, we recommend reviewing the published content regularly.
Contact
For questions, concerns or complaints about this Policy or personal data:
- Mexico: privacidad.mx@grupostt.com
- Brazil: privacidade@grupostt.com
- All other countries: privacidadinformacion@grupostt.com