PRIVACY NOTICE

DELMAR SCHOOL ASOCIACIÓN, A.C. (“Delmar”) is committed to the protection of personal data and the privacy of the members of the Delmar community (applicants, students, alumni, parents and/or guardians). Therefore, in compliance with Articles 14, 15, and 16 of the Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Gazette of the Federation on March 20, 2025 (the “Law”), through this Privacy Notice, Delmar informs you of the processing that will be given to your personal data when such data is collected, used, stored, and/or transferred by Delmar.

In accordance with the provisions of the Law and this Privacy Notice, Delmar shall be responsible for collecting, using, protecting, incorporating, processing, and safeguarding your personal data within the systems and databases of the association. Such data may be collected through applications, statements, notices, and/or other declarations made by you, either verbally or through electronic and/or printed means, as well as through the video surveillance system installed on its premises, including common areas, entrances, and classrooms.

Identity and Address of the Data Controller:

Delmar School Asociación, A.C., with address at Paseo del Sol No. 1255, Colonia El Tezal, Cabo San Lucas, Baja California Sur, Postal Code 23454, Mexico.

Purposes of Data Processing:

To provide information regarding Delmar’s academic programs and/or educational services.
To provide educational, training, coaching, and continuing education services.
To conduct studies, analyses, and/or statistics regarding students’ academic performance and achievement.
To create and maintain academic records.
To conduct studies, maintain records, compile statistics, perform analyses and evaluations, and maintain school information databases.
To organize, promote, and carry out educational, cultural, and sports events within and outside the institution.
Financial management, billing, and collection.
To preserve the safety of students, staff, and visitors.
To prevent, identify, and address risk situations, incidents, or unlawful acts.
To safeguard the institution’s property and facilities.
To provide evidence in the event of internal investigations or legal requirements.
In general, to comply with the obligations and commitments related to the academic programs and/or educational services provided by Delmar School Asociación, A.C..

Delmar hereby informs you that, under no circumstances will the recordings obtained through the video surveillance system be used for commercial, disciplinary, or academic evaluation purposes.

Personal Data Collected and Source:

Related to the student, parents, and/or guardians:

Full name
Date of birth
Place of birth
Nationality
Unique Population Registry Code (CURP)
Address
Telephone number
Email address
Information of third parties designated as contact persons
Static image or video and, where applicable, audio

In the particular case of parents and/or guardians, the following personal data is also collected:

Federal Taxpayer Registry (RFC)
Educational background
Occupation
Contact information of the company where they work
Marital status

Likewise, we require the following personal data of the student, which is considered sensitive in accordance with the Law:

Academic history
Blood type
Genetic information
Health status and medical information

Similarly, we require the following personal data of parents and/or guardians, which is considered sensitive in accordance with the Law:

Socioeconomic study

The personal data described above is collected through the following means:

When you visit our website or use our online services
By telephone
When you provide it to us personally at our offices
Through the video surveillance system installed on the premises, including common areas, entrances, and classrooms

Delmar hereby informs you that:

No biometric data is collected, and no recordings are made in private spaces such as restrooms, changing rooms, medical offices, or other areas that may compromise privacy.
We do not transfer Personal Data, except in those cases provided for in Article 36 of the Law.

Security Measures for the Protection of Personal Data:

Personal information (personal and sensitive personal data) will be safeguarded under strict confidentiality. In order to reasonably prevent the improper use or disclosure of such information, Delmar has implemented physical, technical, and administrative security measures, in accordance with the Law and other applicable regulations.

Furthermore, we inform you that the security and confidentiality of data received and/or sent via email will be protected through a secure server under the Secure Socket Layer (SSL) protocol, which is part of Delmar’s database infrastructure. This ensures that the data transmitted is encrypted to safeguard its protection. Notwithstanding the foregoing, data transmitted over the Internet cannot be guaranteed to be 100% secure; therefore, once received, Delmar will make every reasonable effort to safeguard your information and will apply the necessary administrative, technical, and physical security measures to protect personal data against any breach, including damage, loss, alteration, destruction, or unauthorized use, access, or processing.

In the event of any security breach that significantly affects the rights of the data subjects, Delmar will notify you immediately so that you may take the appropriate measures to protect your rights.

Retention Period of Personal Data:

Delmar informs you that the retention periods for your personal data in our database will be as follows:

If you are a Delmar student and/or graduate: personal data will be retained for the duration of your enrollment and thereafter for a maximum period of five (5) years.
If you are a parent or guardian of a Delmar student: personal data will be retained for as long as your child or ward is enrolled at Delmar and thereafter for a maximum period of five (5) years.
Images and/or recordings will be retained for an approximate period of 20 days, unless they must be preserved to comply with a legal request or for the investigation of an incident.

Once these periods have elapsed, or when the purpose of processing sensitive personal data has been fulfilled, such data will be canceled and subsequently deleted from our database. Likewise, once the retention period for recordings has expired, they will be securely and irreversibly deleted.

Exercise of ARCO Rights (Access, Rectification, Cancellation, or Objection to the Use of Personal Data):

As permitted by applicable regulations, you may know what personal data we hold about you, how we use it, and the conditions under which it is used (Access). You may also request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); request that it be deleted from our records or databases if you believe it is not being used appropriately (Cancellation); object to the use of your personal data for specific purposes (Objection); or revoke at any time the consent you may have granted us.

To do so, you may submit a written and duly signed request addressed to the person responsible for data processing, Claudia Ramírez Grajales, Marketing and Communications Department, at Delmar’s address indicated in the first section of this Privacy Notice, during office hours from 7:00 a.m. to 3:00 p.m., or by email at info@delmarschool.edu.mx. Your request must include the following:

Full name, address, and email address.
Copy of the identification of the data subject or a document proving the legal representation of the data subject.
A clear and precise specification of the personal data to which you wish to have access and the ARCO right (Access, Rectification, Cancellation, or Objection) you wish to exercise. If your personal data has previously been transferred to third parties and continues to be processed by them, Delmar will inform them of the request for rectification or cancellation so that they may proceed accordingly.
Any other element or document that facilitates the identification of the personal data.

In the case of Rectification, you must also specify the data to be corrected and provide documentation supporting the requested correction.

In the case of Objection, you must specify the reasons why you oppose the processing of your personal data.

Once your request has been submitted, and unless you expressly indicate that you wish to receive a response through another means, Delmar will respond via the email address provided in your request within a maximum period of twenty (20) business days. If the request is deemed appropriate, Delmar will enforce the exercised right(s) within fifteen (15) business days following the aforementioned 20-day period.

For requests for access to personal data, Delmar or its authorized personnel will provide the information once the identity of the applicant or their legal representative has been verified, as applicable. These time periods may be extended once for an additional equal period when justified by the circumstances of the case.

Mechanisms to Limit the Use and Disclosure of Personal Data

In addition to the procedure described in the previous section, you may limit the use or disclosure of your personal data. To do so, you may submit a written and duly signed request addressed to the person responsible for data processing, Claudia Ramírez Grajales, Communications and Marketing Department, at Delmar’s address indicated in the first section of this Privacy Notice, during office hours from 7:00 a.m. to 3:00 p.m., or by email at info@delmarschool.edu.mx.

Modifications to the Privacy Notice

Delmar may modify and/or update this Privacy Notice. Any modifications or updates will be communicated through our website: