Privacy PolicyPREMSA Industries

We may collect, process, and store information about you across different Platforms, devices, systems, and communication channels in various ways when you interact with PREMSA, visit our Platforms, request or receive Services, or otherwise communicate with us in a commercial or operational context.

If you access or use our Services from multiple devices, browsers, locations, or communication channels, information such as your account details, project history, quote activity, communication history, transaction records, device identifiers, technical preferences, or service interactions may be associated across those touchpoints in order to help you maintain continuity, access information, continue activities, and benefit from more efficient service delivery.

Your information may be updated, linked, transferred, or synchronized across internal systems or service environments using secure and commercially reasonable methods where necessary to support account administration, quote handling, project execution, customer service, supplier management, invoicing, logistics coordination, security, fraud prevention, or other legitimate operational purposes.

Where required by applicable law, PREMSA will rely on consent or another lawful basis before engaging in processing activities that require such basis. Please note that limiting certain types of data collection or refusing to provide required information may affect PREMSA’s ability to provide some features, quotations, commercial responses, or related services.

• Personal information you voluntarily provide, such as your first and last name, email address, phone number, company name, job title, department, country, city, billing details, shipping details, tax or invoicing details, and other professional or business contact information.
• Information you provide when requesting a quote, submitting an RFQ, asking for a manufacturing review, requesting sourcing support, sending a contact inquiry, participating in supplier onboarding, or otherwise engaging with PREMSA about a potential or active commercial opportunity.
• Project-related files and content you provide through our Platforms or communications, including drawings, CAD files, models, technical specifications, bills of materials, process notes, revision records, photographs, documents, certificates, packaging instructions, quality requirements, inspection notes, and other supporting materials reasonably necessary to review, quote, source, coordinate, or support your request.
• Information relating to transactions, quote history, order history, sourcing records, communications, prior projects, support requests, account activity, and other records maintained in order to service your relationship with PREMSA and deliver our Services.
• Information submitted through communications with PREMSA personnel or representatives, including the content of emails, phone discussions, messages, meeting notes, attached files, and other correspondence relevant to quotations, sourcing, project handling, logistics, support, invoicing, or operational collaboration.
• Identity verification, tax documentation, fraud prevention materials, sanctions-screening information, or related verification data that may be requested in certain circumstances for compliance, account validation, fraud prevention, payment review, or other legitimate business purposes.
• Information you provide when participating in surveys, promotional initiatives, events, business development activities, feedback programs, supplier evaluations, or other optional interactions.
• Any other information you voluntarily provide at points on our Platforms or through our Services where personal information is requested, collected, or reasonably necessary to respond to your request or support a transaction.

We collect certain information automatically from your browser, device, network, and interactions with our Platforms through various technological means. We collect this information to operate, administer, secure, measure, improve, and troubleshoot our Platforms and Services.

As is true of most websites and online services, we may automatically gather and store technical and usage information when you access our Platforms. The specific information collected may vary depending on the device, browser, operating system, connection type, settings, and technologies used to access our Platforms.

This automatically collected information may be used to analyze trends, administer our Platforms, improve performance, maintain security, detect misuse or technical issues, understand how users interact with our content and workflows, and better tailor our Services to business and operational needs.

• Log Files. We may collect and store information in server logs and related records, including IP address, browser type, internet service provider, operating system, device type, date and time stamps, referral and exit pages, page views, clickstream activity, diagnostic data, error logs, crash records, performance data, and other platform usage details.
• Cookies. Like many online services, we may use cookies and similar technologies to help recognize your browser or device, maintain session continuity, remember preferences, support website functionality, measure traffic and interactions, and improve user experience. Some cookies and similar technologies may be strictly necessary for our Platforms to function properly and securely.
• Pixel Tags and Similar Technologies. We may use pixel tags, web beacons, scripts, or similar technologies to understand interactions with our Platforms, communications, and content, such as whether an email has been opened or whether a page or workflow has been accessed or completed.
• Analytics and Monitoring Tools. We may use third-party or internal analytics, diagnostics, monitoring, session replay, event tracking, or performance tools to understand how users use our Platforms, diagnose technical issues, capture operational events, measure website or form performance, and improve the efficiency and reliability of our Services.
• Security Technologies. We may use security and integrity tools intended to detect malicious traffic, suspicious activity, abuse, unauthorized access attempts, technical anomalies, or misuse of our Platforms or Services.

PREMSA Industries uses cookies and similar technologies to operate our Platforms, maintain essential website functionality and, when you permit it, collect analytics or advertising information that helps us improve our Services.

When you first visit our Platforms, you may be presented with a cookie notice that allows you to accept, reject or configure the use of optional cookies. This notice is designed to provide transparency and control regarding the use of tracking technologies that are not strictly necessary for the operation of the website.

Strictly necessary cookies are used to enable basic website functions, maintain secure sessions, protect the integrity of the platform and ensure that essential services operate correctly.

With your consent, PREMSA may also use analytics cookies, traffic measurement tools and advertising technologies to understand how users interact with our Platforms, measure website performance, improve the user experience and optimize marketing campaigns.

When you accept analytics or advertising cookies, your browser may store identifiers that allow measurement tools to understand aggregated interactions with our Platforms. This data may be processed through analytics or advertising services provided by third parties.

You may modify or withdraw your consent for optional cookies at any time by adjusting the cookie settings available on our Platforms or by changing your browser settings.

If you choose to reject optional cookies, certain analytics features, traffic measurements or website personalization functions may be limited.

• Strictly necessary cookies required for the operation of the website.
• Analytics cookies used to understand website traffic and improve performance.
• Advertising cookies used to measure the effectiveness of marketing and advertising campaigns.
• Measurement and analytics tools that may include third-party analytics or advertising providers.
• Consent settings that allow users to accept, reject or limit optional cookies.

PREMSA does not intentionally collect special categories of personal data unless such collection is specifically required, lawfully permitted, and reasonably necessary for a legitimate business, contractual, verification, legal, or compliance purpose.

Accordingly, please do not submit highly sensitive personal information through our quote forms, contact forms, file uploads, or general communications unless PREMSA specifically requests that information for a lawful and necessary purpose.

To the extent special categories of personal data or similarly sensitive data are inadvertently submitted to PREMSA, we may limit use of that information, restrict access to it, or delete it where appropriate and permitted.

• Examples may include information revealing racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, health information, genetic data, biometric data, sexual orientation, sex life, or information relating to criminal convictions or offenses.

We use your personal information for the purposes for which we collected it, unless we reasonably determine that we need to use it for another purpose that is compatible with the original purpose and permitted by applicable law.

PREMSA uses personal information to operate its business, provide requested Services, manage quoting and sourcing activities, coordinate project execution, communicate with customers and suppliers, maintain security and integrity, comply with legal obligations, and improve the administration and effectiveness of our Platforms and Services.

If we need to use your personal information for a purpose that is materially different from the purpose for which it was collected, we will take steps appropriate under applicable law, which may include updating this Privacy Policy, providing notice, or obtaining consent where required.

• Facilitate the creation, administration, and security of your account, inquiry profile, supplier profile, or internal service record within our systems.
• Identify you as a user, customer, prospective customer, supplier, representative, or other business contact in our systems or in the systems of authorized service providers or business partners assisting us in delivering Services.
• Review quote requests, evaluate project requirements, analyze manufacturability, coordinate sourcing, manage supplier participation, and support the provision of manufacturing-related or commercial Services.
• Communicate with you regarding inquiries, quotes, files, project status, sourcing activity, revisions, pricing, support matters, logistics, invoicing, order activity, account administration, and related transactions.
• Verify identity or ownership of an account, email address, communication channel, or business relationship, including by sending administrative or validation communications.
• Maintain the security, integrity, reliability, scalability, and performance of our Platforms, Services, workflows, communications, and internal systems.
• Provide customer service, supplier support, dispute handling, troubleshooting, administrative assistance, and other service-related functions.
• Respond to your inquiries, requests, submissions, complaints, or other communications.
• Request information from you or provide information to you regarding your account, project, quote, order, supplier relationship, or our Services.
• Prevent fraud, verify business legitimacy, enforce terms, investigate suspicious activity, protect rights and property, and reduce misuse of our Platforms or Services.
• Send newsletters, surveys, commercial updates, promotional materials, event invitations, or other marketing-related communications concerning PREMSA Services where permitted by law.
• Create aggregated, anonymized, or de-identified information records from technical, project, or usage data for operational analysis, service improvement, demand forecasting, workflow optimization, business intelligence, pricing refinement, or similar legitimate business purposes.

In respect of each purpose for which we process personal information, applicable law may require us to ensure that we have a valid legal basis for that processing.

Depending on the jurisdiction and the nature of the processing, PREMSA may rely on one or more legal bases when processing your personal information.

Most commonly, PREMSA will rely on one or more of the following legal bases:

• Contractual Necessity. Where processing is necessary for us to take steps at your request, provide Services, prepare or issue quotes, manage sourcing activities, coordinate manufacturing-related services, administer orders, or perform obligations related to an actual or proposed contract or commercial transaction.
• Legitimate Interests. Where processing is necessary for our legitimate business interests and your interests or fundamental rights do not override those interests. This may include business administration, platform management, communications, fraud prevention, service improvement, workflow coordination, analytics, commercial planning, and protection of our rights and systems.
• Compliance With Law. Where we need to process information to comply with a legal, tax, accounting, regulatory, audit, trade, customs, law-enforcement, or other legal obligation.
• Consent. Where applicable law requires consent for a specific processing activity, such as certain types of marketing communications, optional cookies, or other consent-based processing.

Where we need to process your personal information either to comply with law, provide the Services, or perform the terms of a contract or proposed transaction with you, and you fail to provide that information when requested, we may not be able to provide the Services, respond to your request, issue a quote, maintain your account, or perform the transaction we have or are trying to enter into with you.

For example, we may not be able to set up or maintain your account, review your technical request, provide a quote, validate shipping or billing details, coordinate manufacturing support, or respond fully to an operational or commercial request.

In such circumstances, we may have to suspend, delay, or decline the relevant service, request, account activity, or transaction, although we will attempt to inform you where appropriate.

We may disclose your personal information as described in this Privacy Policy and as otherwise permitted or required by law. PREMSA does not sell your personal information to third parties.

PREMSA may share personal information with third parties where such disclosure is reasonably necessary to provide Services, support our Platforms and business operations, administer commercial relationships, comply with law, or protect our rights, users, and systems.

Any disclosure of personal information is limited to legitimate commercial, contractual, operational, technical, compliance, or service-related purposes.

• Sharing With Service Providers. We may share personal information with third-party service providers that support hosting, infrastructure, analytics, communications, customer support, cybersecurity, website functionality, payment processing, quality assurance, account administration, file handling, document exchange, or other operational services on our behalf.
• Sharing With Manufacturing Partners, Suppliers, and Subcontractors. PREMSA may work with third-party manufacturing partners, suppliers, subcontractors, or other vendors that assist in providing the Services. In order to review, quote, source, manufacture, inspect, package, ship, or otherwise support a project or transaction, PREMSA may need to share relevant information with those parties.
• Sharing With Logistics and Commercial Partners. We may share information with freight carriers, brokers, customs-related service providers, warehousing providers, insurers, payment processors, banks, financial institutions, or other business counterparties where necessary to support delivery, payment, risk management, or related commercial operations.
• Professional Advisors. We may share information with legal counsel, accountants, auditors, tax advisors, insurers, consultants, and similar advisors where reasonably necessary for legitimate business, legal, financial, or compliance purposes.
• Corporate Restructuring. We may share some or all personal information in connection with or during negotiations of any merger, financing, acquisition, restructuring, insolvency proceeding, sale of assets, or other corporate transaction involving all or part of our business.
• Other Disclosures. Regardless of any privacy preferences you may have, PREMSA may disclose personal information where it believes in good faith that such disclosure is necessary to comply with law, legal process, subpoena, warrant, regulatory request, or governmental inquiry; to protect or defend the rights, property, or safety of PREMSA, its users, personnel, or third parties; or to investigate, prevent, or address actual or suspected violations of law, this Privacy Policy, contractual terms, or misuse of our Platforms or Services.

Because PREMSA supports domestic and international commercial operations, personal information may be processed, accessed, stored, or transferred across borders in connection with communications, sourcing, supplier management, manufacturing support, logistics execution, invoicing, cloud infrastructure, technical support, and other related activities.

Where personal information is transferred internationally, PREMSA will take commercially reasonable and legally appropriate steps to implement safeguards suitable to the nature of the transfer and the requirements of applicable law.

Such safeguards may include contractual protections, operational controls, confidentiality obligations, security procedures, consent where applicable, or other legally recognized transfer mechanisms.

We have implemented commercially reasonable administrative, technical, organizational, and physical safeguards designed to prevent personal information from being accidentally lost, used, altered, disclosed, or accessed in an unauthorized manner.

We maintain procedures intended to address actual or suspected data incidents affecting personal information. In the event of such an incident, PREMSA may work with relevant service providers, advisors, business partners, regulators, or authorities as appropriate. In certain circumstances, and where legally required, we may notify affected individuals and relevant authorities of incidents involving personal information.

We limit access to personal information to those employees, contractors, service providers, and authorized business parties who have a legitimate business need to know such information. Such persons are subject to contractual, professional, or legal confidentiality obligations as applicable.

We will retain personal information only for so long as we reasonably need to use it for the purposes set out in this Privacy Policy unless a longer retention period is required or justified by law, regulation, tax requirements, accounting obligations, dispute-related needs, contractual obligations, quality traceability, operational continuity, fraud prevention, or other legitimate business purposes.

Retention periods may vary depending on the type of information, the nature of the relationship, the status of the transaction or account, the applicable legal framework, backup requirements, document control obligations, and the sensitivity or relevance of the information.

• No method of transmission, storage, or electronic processing is completely secure, and PREMSA cannot guarantee absolute security.
• Information used to provide Services or maintain an ongoing commercial relationship may be retained for the duration of that relationship and for a reasonable period thereafter.
• Where legally required or operationally justified, information may be retained beyond the end of an account, quote, order, supplier relationship, or service interaction.

Under certain circumstances and depending on applicable law, you may have rights regarding the personal information PREMSA holds about you.

These rights may vary depending on your jurisdiction, the nature of the relationship, and the legal basis on which PREMSA processes your personal information.

Subject to applicable law, you may have the right to:

• Request access to your personal information and receive a copy of the personal data we hold about you.
• Request correction of incomplete, outdated, or inaccurate personal information we hold about you.
• Request erasure, deletion, or cancellation of personal information where there is no valid reason for us to continue processing it, subject to legal and operational exceptions.
• Object to processing of your personal information where we rely on Legitimate Interests as the legal basis and your particular situation gives rise to an objection, including, where applicable, objection to direct marketing.
• Request restriction of processing of your personal information in circumstances permitted by law.
• Request transfer of certain personal data to you or to a third party in a structured, commonly used, machine-readable format where applicable.
• Withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
• If you are located in Mexico, exercise rights commonly referred to as ARCO rights, including the rights of access, rectification, cancellation, and opposition, subject to applicable law and procedures.

If you would like to exercise any of the rights described above, please contact PREMSA using the contact information provided below.

We may need to request specific information from you to help us confirm your identity and ensure your right to access personal information or exercise another applicable right. This is a security measure to ensure that personal information is not disclosed to a person who has no right to receive it.

We may also contact you to request additional information in relation to your request in order to clarify its scope, confirm relevant details, speed up our response, or comply with applicable legal requirements.

PREMSA will endeavor to respond to legitimate requests within the time period required by applicable law. In some cases, it may take longer if your request is particularly complex, involves multiple systems or records, or you have made a number of requests. In those cases, where required, we will inform you accordingly.

Except where applicable law provides otherwise, you generally will not have to pay a fee to exercise your rights. However, PREMSA may charge a reasonable fee or decline to act on a request where permitted by law, including where a request is manifestly unfounded, repetitive, excessive, abusive, or technically disproportionate.

If you would like to make a complaint regarding this Privacy Policy or PREMSA’s practices in relation to personal information, please contact us using the contact details below. We will review and respond to your complaint in accordance with applicable law and our internal procedures.

If you believe your complaint has not been adequately resolved, you may also have the right to contact a relevant data protection authority, supervisory authority, or consumer protection authority in your jurisdiction.

This Privacy Policy applies solely to information collected through PREMSA’s Platforms and Services. Our Platforms may contain links to third-party websites, tools, or services that are not operated or controlled by PREMSA.

These third-party sites and services operate under their own terms and privacy policies. PREMSA does not control, review, or assume responsibility for the content, privacy practices, security practices, or activities of third-party sites or services.

Nonetheless, PREMSA seeks to protect the integrity of its Platforms and welcomes feedback about third-party links or services made available through our Platforms.

This Privacy Policy applies to information collected through our Platforms, digital communications, email, messaging, and Services and does not necessarily apply to information collected entirely offline or by unaffiliated third parties acting independently of PREMSA.

Some web browsers may transmit “do not track” signals to websites and online services with which the browser communicates. There is currently no universally accepted standard governing what websites should do when they receive such signals.

Accordingly, PREMSA does not currently take action in response to do not track signals. If a standard for responding to such signals is established and adopted in a way that applies to our operations, PREMSA may revise this Privacy Policy accordingly.

Certain jurisdictions may provide additional privacy rights, disclosure obligations, or legal requirements that apply to PREMSA’s processing of personal information. Where required by applicable law, PREMSA may provide supplemental notices, regional disclosures, consent mechanisms, or additional rights information tailored to a specific jurisdiction or processing activity.

For example, individuals located in certain jurisdictions may have rights relating to access, correction, deletion, restriction, portability, objection, opt-out rights, non-discrimination, complaint rights, or rights relating to categories of personal information collected, sources of information, purposes of use, and categories of third parties with whom information is shared.

PREMSA does not sell personal information. Where required by law, PREMSA will provide additional information regarding categories of personal information collected and disclosed, categories of sources, categories of recipients, business or commercial purposes of processing, and mechanisms available to exercise applicable rights.

If you have questions about this Privacy Policy, would like to exercise a privacy-related right, need additional information regarding how PREMSA processes personal information, or wish to submit a complaint or request, please contact PREMSA Industries using the information below.

To help us process your request efficiently, please include your full name, company name, contact information, the nature of your request, and sufficient details to allow us to identify the relevant account, quote, order, file submission, communication, or other interaction.

• Email: ventas@premsaindustries.com
• Website: www.premsaindustries.com
• Phone: +52 81 2634 1113
• Please include enough detail for us to identify your request and respond appropriately.