In compliance with the provisions of Mexico's Federal Law on the Protection of Personal Data Held by Private Parties and other applicable regulations, SULTANA PACKAGING, S.A. de C.V.; CARTONAJES SULTANA, S. de R.L. de C.V.; and SULTANA PACKAGING CORP., hereinafter jointly referred to as “SULTANA PACKAGING GROUP” or “the Controllers,” make this Privacy Notice available to data subjects.
Each of the aforementioned companies shall be responsible for the personal data it collects and processes within the scope of its respective operations and of the relationship it maintains with the data subject.
For the purposes of this Privacy Notice and for handling requests related to personal data, the Controllers designate the following address: Carretera Tijuana–Tecate km 160 y Avenida Palmera núm. 12341, Fideicomiso El Florido, Tijuana, Baja California, Mexico.
The contact channel for matters related to the protection of personal data is:
privacy@sultanapkg.comThrough the contact forms and information or quote requests available on the sultanapkg.com website, we may collect the following personal data:
When a user chats with the website's virtual assistant, we retain the content of that conversation — the questions written and the assistant's replies — along with the page the chat was opened from, the language, and a random identifier used solely to group the messages of a single conversation, which does not identify the person on its own. This information is used to handle the request, improve the assistant's answers, and follow up commercially when the person provides their contact details. Please do not enter sensitive or confidential information in the chat.
Likewise, through cookies, Google Analytics and similar technologies, we may obtain certain technical and browsing data, depending on the device configuration, browser and the user's privacy preferences, such as:
The Controllers do not intentionally collect sensitive personal data through the forms available on the website.
We ask users to refrain from providing information related to their health status, racial or ethnic origin, genetic information, religious, philosophical or moral beliefs, political opinions, sexual preference or any other data that may be considered sensitive.
If a person voluntarily provides this type of information without it having been requested, the Controllers will endeavor to delete it when it is not necessary to handle the request.
The personal data collected through the website will be used for the following primary and necessary purposes:
These purposes are necessary to handle the requests made through the website.
Additionally, contact personal data may be used for the following secondary purposes:
The data subject may object to the processing of their data for these purposes by sending an email to privacy@sultanapkg.com. In the subject line they must state: “Restriction of commercial communications”.
Objecting to processing for secondary purposes will not affect the handling of requests, quotes or services. When forms are used to obtain authorization to send advertising or promotions, consent must be requested through a separate, voluntary option.
By providing their personal data through the website, after this Privacy Notice has been made available to them, the data subject consents to its processing for the primary purposes described herein.
Consent for secondary purposes may be denied or revoked at any time via the email privacy@sultanapkg.com or by using the unsubscribe mechanisms included in electronic communications.
The data subject may withdraw their consent without retroactive effect, provided the processing is not necessary to comply with a legal or contractual obligation or one arising from the existing relationship with any of the Controllers.
For the operation, maintenance, security and analysis of the website, the Controllers may use technology providers that process information on behalf of and following the instructions of SULTANA PACKAGING GROUP. Such providers may include services related to:
These providers must process the information solely to provide the contracted services and will be subject to applicable privacy, security and confidentiality obligations.
Personal data may be shared among SULTANA PACKAGING, S.A. de C.V.; CARTONAJES SULTANA, S. de R.L. de C.V.; and SULTANA PACKAGING CORP., when necessary to handle a request, route a quote, provide a service or maintain a commercial relationship.
Information may be shared among companies belonging to the same group when they operate under compatible internal personal-data protection processes and policies.
Likewise, data may be transferred without the need to obtain additional consent when:
Except for the cases permitted by applicable law, the Controllers will not carry out transfers of personal data that require consent without first obtaining the corresponding authorization. Transfers among companies of the same group operating under the same internal processes and policies may be carried out without additional consent in the cases provided for by law.
The website uses Google Analytics, a measurement and analytics tool that provides statistical insight into how users interact with the site.
Depending on the configuration implemented and the preferences selected by the user, Google Analytics may use cookies and similar technologies to obtain information related to:
The information obtained through this tool will be used to measure the approximate number of visitors, analyze site performance, detect errors or navigation problems, identify the most relevant content, improve the structure and experience of the website and produce general browsing statistics.
Google Analytics uses cookie-associated identifiers, such as _ga, to distinguish users and sessions. Google also provides mechanisms to adapt how its tags behave based on the choices made in a consent banner.
The website uses first-party and third-party cookies.
Necessary cookies. They enable basic functionality, security and proper navigation within the website. These cookies cannot be disabled from the consent manager when they are strictly necessary to provide the service requested by the user.
Analytics cookies. They provide statistical information about the use and performance of the website. This category includes cookies related to Google Analytics. The user may accept, reject or configure analytics cookies through the banner or cookie manager available on the website.
Cookie preferences may be modified later through the configuration mechanism available on the site. For detailed information about the cookies used, their purposes and duration, the user may consult the Cookie Notice available at sultanapkg.com.
The data subject or their legal representative may exercise at any time their rights of:
To exercise any of these rights, you must send a request to privacy@sultanapkg.com. The request must contain:
The Controllers will communicate the decision adopted within a maximum of 20 business days from receipt of the request. When the request is granted, it will take effect within the 15 business days following the date on which the response is communicated.
These periods may be extended once for an equal period when the circumstances of the case justify it. The above requirements and periods correspond to articles 28 to 31 of the applicable law. Exercising ARCO rights is free of charge; only the reasonable costs of reproduction, copies or shipping that may apply can be charged.
The data subject may revoke the consent granted for the processing of their personal data by sending a request to privacy@sultanapkg.com. In the subject line they must state: “Revocation of consent”. The request must state:
Revocation will not have retroactive effect and may not be granted when the processing is necessary to comply with a legal or contractual obligation or one arising from an ongoing relationship.
The data subject may request that their personal data no longer be used for promotions, advertising or commercial communications. The request must be sent to privacy@sultanapkg.com. In the subject line they must state: “Limitation of use of personal data”.
They may also use the unsubscribe mechanisms included in the commercial emails sent by SULTANA PACKAGING GROUP.
Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected and for the periods established by applicable legal, tax, administrative, contractual or regulatory provisions.
Conversations held with the website's virtual assistant are retained for a maximum of 12 months from the date of the conversation, after which they are deleted automatically. Contact details provided within the chat to request a quote are retained under the periods applicable to quote requests.
Once the purposes have been fulfilled and the applicable retention periods have ended, the data will be blocked and subsequently deleted or anonymized in accordance with the Controllers' internal procedures.
The Controllers will maintain reasonable administrative, technical and physical measures to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, disclosure or processing.
Personnel and providers involved in any stage of the processing must maintain the confidentiality of personal data, even after their relationship with the Controllers ends.
When a security breach occurs that significantly affects the property or moral rights of data subjects, the corresponding notifications will be made in accordance with applicable law.
The website may contain links to pages, platforms or social networks operated by third parties. SULTANA PACKAGING GROUP does not control the privacy practices of those external sites. When the user leaves sultanapkg.com, they should review the privacy notices and policies of the site they visit.
This Privacy Notice may be modified or updated as a result of:
The updated version will be available in the Privacy Notice section of the sultanapkg.com website. When changes are substantial, they may be communicated through a visible notice on the site or through the contact details provided by the data subject, where appropriate.
If the data subject considers that their right to the protection of personal data has been violated, they may file the corresponding request or complaint with the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance), in accordance with applicable law. The law expressly identifies that Ministry as the competent authority in this matter.
SULTANA PACKAGING GROUP
Email: privacy@sultanapkg.com
Contact address: Carretera Tijuana–Tecate km 160 y Avenida Palmera núm. 12341, Fideicomiso El Florido, Tijuana, Baja California, Mexico.
Website: sultanapkg.com
