Dear owner of personal data

This Privacy Notice (hereinafter, the “Privacy Notice”) is provided consistent with Article 3 Section VI, 9, 15, 16, 17 and other applicable provisions of the Federal Law for the Protection of Personal Data in Possession of Individuals (hereinafter, the “Law”), to inform you about your rights related to the management, updating, transfer and control of your personal data, including sensitive personal data (hereinafter, “Personal Data”) maintained by the responsible organization identified below.

Collection and use of personal data

The Medical Institute collects from the User personal data when they fill out an online admission form, medical history form, request a medical consultation, or contact an admissions representative. When this occurs, the Medical Institute collects from the User general Personal Data consisting of; full name, nickname, biological sex, date of birth, full address, occupation, contact telephone numbers, e-mail address, payment information, marital status, language, clothing size, relevant transportation or travel information, the name, contact information and type of relationship with third parties that may be contacted in case of emergency, and information about how they heard about the Medical Institute. In addition, the Medical Institute collects sensitive personal data from the User, consisting of: race, religious preferences, summary of medical history, current health status, medical diagnoses, medical examinations, medical treatment history, physical condition, medical history of mental illness, mental status (including whether or not the User has been hospitalized for mental or emotional problems), allergies, dietary needs, infectious diseases and their exposure to them, use of medications or supplements, including the use of alcohol, tobacco, or any drugs, and family medical history.

When the User has medical consultations and answers questions about their medical history, the Medical Institute stores all their answers in Promedicis and the Sanoviv Portal (the Medical Institute’s electronic health record systems). If the Service User provides copies of medical records, they may be stored electronically, on paper, or in any other format.

The Medical Institute uses, manages, and stores the Personal Data of the User. This use of your Personal Data is intended for the following purposes:

I. Fulfill their request for health services
II. Provide medical advice
III. Enable Aftercare contact after their departure for follow up
IV. Inform them about special events and new products
V. Create their Medical Records and process them in agreement with health regulations.
VI. For statistical and internal reporting, including collecting data for research
VII. Issue charges to their Bank Card when applicable.

The purposes indicated in subsections (I), (II), (III), (V), (VI), and (VII) above are those that give rise to and are necessary for the existence, maintenance, and fulfillment of the legal relationship between the User and the Medical Institute. The purpose indicated in subsection (IV) is used for marketing, advertising, and commercial prospecting purposes.

In compliance with Article 9 of the Law, the User authorizes the Medical Institute to collect, store, process and, if applicable, transfer his/her personal data only to affiliated organizations of the medical industry or sector, for purposes strictly necessary for his/her medical care, either by means of his/her autograph signature, electronic signature, digital signature, or any other authentication mechanism implemented by the Responsible Party for such purpose. The Medical Institute may send the User’s personal data to third parties only when it has their consent or when it is indispensable for the prevention, diagnosis, or treatment of a medical condition or the provision of health services that they are unable to give their consent due to a medical condition, as established by the Health regulations and other applicable legal provisions.

Authorization, transfer, and disclosure of personal information.

By signing this document, the User authorizes the Medical Institute to collect, store, process, and transfer their Personal Data only to affiliated organizations of the medical industry and sector for purposes strictly necessary for their medical care.

The User and/or Service Applicant acknowledges and agrees that, for the purpose of receiving medical care, the Medical Institute may share, transfer, or make available the User’s Personal Data and/or Sensitive Personal Data to third-party platforms associated with the healthcare sector, including, but not limited to, prescription, medication management, dispensing, or dietary supplement platforms, solely for the purpose of facilitating the User’s medical treatment, nutritional follow-up, or the prescription of products recommended by the User’s healthcare team. The User expressly consents to such use and transfer of Personal Data, acknowledging that the sole purpose of such use and transfer is the provision of medical care

The Medical Institute may send their Personal Data to third parties only when:
I. The User ‘s consent is obtained
II. Are essential for the prevention, diagnosis, or treatment of any medical condition or provision of health services given the situation where the User is unable to provide the Medical Institute with consent due to any medical condition, in accordance with the provisions of health regulations and other applicable legal provisions, and that a person with a professional or equivalent guarantee carries out such data processing.
III. By court order or administrative authority.

In congruence with Mexican law, the Medical Institute maintains an official medical record in Spanish for each patient admitted to the Medical Institute. This official document may not be delivered to the User or third parties unless required by a court order or other administrative authority in the jurisdiction of Playas de Rosarito, Baja California, United Mexican States. The User has access to the results of their medical examinations, the physician’s discharge, and the physician’s recommendations but does not have access to the complete official medical records. A medical summary of their medical care may be provided upon written request.

The Mexican Official Standard NOM-004-SSA3-2012, on clinical records, mentions that the medical professionals of the Medical Institute are obliged to provide verbal information to the patient, those who exercise parental authority, guardianship, legal representative, relatives, or competent authorities. When a clinical summary or other clinical record is required, it must be requested in writing. The competent authorities to request clinical records are judicial authorities, law enforcement agencies, and administrative authorities.

Updates, access and preferences.
In agreement with the provisions of the Law, the User has the right to request access to Update (when inaccurate or incorrect), Delete their Personal Data provided to the Medical Institute, Oppose the processing of their Personal Data, or Revoke consent granted in harmony with the mechanisms provided by the Law and that the Medical Institute has implemented.
To do this, the User should contact the Responsible of the Medical Institute by telephone, by e-mail or in writing as indicated below:

Name: Amarevita, S.C.
Attention: Responsible for Personal Data Management.
Address: Km.39 Carretera Libre Tijuana-Ensenada S/N interior 6, Playas de Rosarito, Baja California, C.P. 22710, México.
Telephone number: +52 (661) 614 9200
E-mail: aftercare@Sanoviv.com

EIGHTEEN – Privacy notice.
The User must take into account that requests to Access, Update, Delete, or Revoke their personal data must contain and be accompanied by at least the following:

I. The name and address of the owner and other means to respond to your request.
II. Documents proving their identity or, if applicable, proof of legal representation on your behalf.
III. The clear and precise description of the Personal Data that they wish to apply any of the above actions.
IV. Any other information that facilitates the location of the Personal Data.

Once the request has been made, the Medical Institute will issue a written response in the terms provided by the Law. In case it does not respond, or the response is not satisfactory, the User has the right to go to the National Institute of Transparency, Access to Information, and Protection of Personal Data to request its intervention. You should also note that requests for deletion, modification, or access to medical or clinical records cannot be carried out in conformity with the provisions of the Health Law because the Medical Institute is required to keep these records active in its database for the period of time provided by the Health Law. As allowed by law, the Medical Institute will permit the User to update their personal information, not including medical records, including whether the User wishes the Medical Institute to communicate with them about services and new offers.

Security of Personal Data
The Medical Institute will establish and maintain appropriate administrative, technical, and physical strategies in accordance with the law to protect the User’s Personal Data against damage, loss, alteration, destruction, or unauthorized access. To protect Personal Data as well as medical and clinical records, the Medical Institute has implemented a system that provides access only to Users and processors with valid passwords and credentials.

Changes to this privacy notice.
The Medical Institute may amend this privacy notice policy from time to time. If the Medical Institute makes substantial changes in the way it uses the User’s Personal Data, it will notify the User by posting a notice on its website and sending an email notification to the e-mail address the User provided.