ARCO Rights Request — Mexico
Maintained by Cyntar S.C., publisher of MagDIGuide.com.
Last updated: July 22, 2026
Legal Basis
This process is provided under Mexico’s Ley Federal de Protección de Datos Personales en Posesión de los Particulares, or LFPDPPP, and its applicable regulations and guidance. The law recognizes the rights of Acceso, Rectificación, Cancelación, and Oposición, commonly known as ARCO rights.
Data Controller
The data controller for personal data processed through MagDI Guide is Cyntar S.C., represented by Lic. Jorge Arriaga and domiciled at Paseo de los Héroes 9111-100, Zona Urbana Río Tijuana, C.P. 22010, Tijuana, Baja California, México. The privacy function responsible for receiving ARCO requests may be contacted at privacy@magdiguide.com.
Right of Access
You may request confirmation of whether Cyntar S.C. holds personal data about you and ask to know the data, the conditions of processing, and the information required by applicable law.
Right of Rectification
You may ask Cyntar S.C. to correct personal data that is inaccurate or incomplete. Your request should identify the correction requested and include supporting documentation when needed.
Right of Cancellation
You may ask that personal data be cancelled when it is no longer necessary, is processed unlawfully, or another legal basis for cancellation applies. Cancellation may be subject to a blocking period and lawful retention obligations.
Right of Opposition
You may object to processing for a legitimate reason recognized by law, including certain uses that cause harm or are not necessary for the relationship. You may also object to marketing and request placement on applicable suppression lists.
Revocation and Limitation
You may revoke consent for processing that depends on consent, without retroactive effect. You may also request limitation of the use or disclosure of personal data, including limitation of marketing communications. Some requested services may not be possible when necessary processing permission is withdrawn.
Contents of an ARCO Request
Under the current LFPDPPP, an ARCO request should include the name of the data holder; an address, email, or other method for receiving notices; documents that establish the holder’s identity or the identity and authority of a representative; a clear and precise description of the personal data involved, except where the request is solely for access; the ARCO right being exercised or the specific action requested; and any other element or document that helps locate the data. A rectification request should also identify the requested changes and include supporting documentation.
How to Submit a Request
Send the request to privacy@magdiguide.com with the subject line “Solicitud ARCO,” or submit it through the secure form on this page. A written request may also be mailed or delivered to Cyntar S.C. at Paseo de los Héroes 9111-100, Zona Urbana Río Tijuana, C.P. 22010, Tijuana, Baja California, México. Do not send an unredacted government identification document by ordinary email unless specifically instructed through a secure verification process.
Identity Verification
Cyntar S.C. will verify identity in a manner proportionate to the sensitivity of the data and the risk of unauthorized disclosure. A representative must establish both identity and legal authority. Verification information will be used only to process and protect the request.
Response and Execution Time
Cyntar S.C. will communicate its determination within a maximum of 20 business days after receiving a complete request. If the request is granted, it will be made effective within the following 15 business days. These periods may be extended once for an equal period when the circumstances justify the extension and the law permits it.
Access Format and Cost
When access is granted, data may be made available electronically, through copies, or through another method described in the privacy notice. ARCO rights are generally exercised without charge, although reasonable reproduction, delivery, or repeated-request costs may apply when permitted by law.
Denial or Limitation
An ARCO request may be denied or limited only for a reason permitted by law, such as failure to establish identity, protection of another person’s rights, a legal restriction, or the need to preserve data required by law. The response will explain the determination and available next steps to the extent legally permitted.
Request for Protection Before the Mexican Authority
If you do not receive a response within the applicable period or disagree with the response, you may seek the protection procedure available under the LFPDPPP before the Secretaría Anticorrupción y Buen Gobierno, which currently exercises the relevant federal private-sector data-protection authority. References to the former Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales, or INAI, should not be used as the current complaint instruction.
Language
Requests may be submitted in Spanish or English. A Spanish-language version of this notice is recommended and should be reviewed by Mexican privacy counsel before publication.
Contact Information
Cyntar S.C.
Legal representative: Lic. Jorge Arriaga
Paseo de los Héroes 9111-100, Zona Urbana Río Tijuana, C.P. 22010, Tijuana, Baja California, México
privacy@magdiguide.com