This Privacy Notice describes the manner in which we collect and use the personal data you provide when registering as an attendee, exhibitor, buyer, or professional at the Obra Blanca Exhibition (“the Expo” or “the Event”), organized and produced by EXPO OBRA BLANCA, S. DE R.L. DE C.V. (hereinafter, the “Company”), through the website https://www.obrablancaexpo.com, via the Call Center (+52) 83 47802304, or at the Event registration area.
The purpose of this Notice is to explain the processing of your personal data, how we protect it, and what options you have to limit its use, as well as the procedure to exercise your rights, in compliance with the provisions of the “Federal Law on the Protection of Personal Data Held by Private Parties” (Ley Federal de Protección de Datos Personales en Posesión de los Particulares).
We are committed to protecting the privacy of your personal data.
1.- DATA CONTROLLER
The Company, with its registered address at Avenida Batallón de San Patricio Sur No. 109-628, Colonia Valle Oriente, San Pedro Garza García, Nuevo León, México, C.P. 66269, is responsible for the processing, use, storage, safeguarding, and confidentiality of the personal data provided.
The Company acts as the sole Data Controller in accordance with the “Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations” (Ley Federal de Protección de Datos Personales en Posesión de los Particulares y sus Regulaciones).
WK Eventos shall act exclusively as the Data Processor, pursuant to the “Federal Law on the Protection of Personal Data Held by Private Parties”, limiting its role to the provision of technological services and operation of the registration system, without determining purposes or making decisions regarding the processing of personal data.
2.- PURPOSES OF DATA PROCESSING
The personal data we collect from you will be used for the following primary purposes, which are necessary for the requested service:
- To integrate the data subject´s personal data into the Event registration, accreditation, and access control systems, including incorporation into badges, passes, or physical/digital identification media.
- To objectively determine and display the data subject´s category, profile, or participation modality within the Event, based on the type of registration, invitation, or contractual relationship.
- To authorize, manage, and monitor the data subject´s entry to the Event venue, as well as access to the areas, schedules, and activities corresponding to them.
- To comply with legal, contractual, administrative, and operational obligations arising from agreements entered into by the Company with attendees, exhibitors, sponsors, suppliers, or third parties related to the Event.
- To maintain, administer, and, where applicable, execute the current or future legal relationship between the data subject and the Company, including follow-up, support, assistance, and regulatory compliance activities.
Additionally, your personal information may be used for the following secondary purposes, which are not necessary for the requested service but allow us to provide better assistance:
- To communicate information to the data subject regarding updates, changes, new products, or services directly or indirectly related to the event, as well as related organizational activities.
- To inform the data subject about future events, exhibitions, promotions, campaigns, or activities organized or sponsored by the Company, through physical or electronic means.
- To evaluate and analyze the quality, logistics, organization, and overall experience of the Event, with the aim of implementing continuous improvements in its planning and execution.
- To conduct surveys, questionnaires, or feedback mechanisms related to the contracted service or the data subject’s participation in the Event, for evaluation and improvement purposes.
- To prepare internal statistical and analytical studies on consumer habits, general preferences, and market trends, using aggregated or dissociated information without individual identification of the data subject.
You may express your refusal for the use of your personal data for secondary purposes by sending your request to info@obrablancaexpo.com.
The processing of personal data is carried out based on the consent of the data subject and, where applicable, on the execution of the legal relationship arising from their registration, participation, or contractual relationship with the Company.
Refusal to allow the use of personal data for secondary purposes will not be grounds for denying access to the Exhibition or for affecting the primary legal relationship.
3.- PERSONAL DATA WE COLLECT
The personal data we collect includes:
- Full name.
- Address.
- Postal Code.
- Telephone number.
- Email address.
- Gender.
- Age.
- Company.
- Business sector or activity.
- Professional status (e.g., student or employee).
- Information related to interests and purchasing habits regarding products and services offered by Obra Blanca to its visitors.
- Information obtained from other sources permitted by law.
We do not collect sensitive personal data as defined by the “Federal Law on the Protection of Personal Data Held by Private Parties”.
Gender and age data are used exclusively for general statistical purposes and aggregated analysis, without individual identification.
4.- ACCEPTANCE OF THE PRIVACY NOTICE
At the time of pre-registration or final registration, the data subject will have access to this Privacy Notice.
By continuing with the registration process and using the enabled electronic mechanisms (such as checking a box or clicking “Accept”), the data subject confirms that they have read and accept the processing of their personal data in accordance with this Notice.
The use of personal data for necessary purposes (registration, identification, Event access, and compliance with legal or contractual obligations) is deemed tacitly authorized, as it is indispensable for the provision of the service.
For non-essential or secondary purposes, as well as for the transfer and international storage of personal data, consent is expressly granted through clearly visible acceptance mechanisms during the registration process.
5.- COMMUNICATION CHANNELS
For the fulfillment of the purposes described in this Privacy Notice, the Company may contact you through email, telephone calls, and instant messaging, including applications such as WhatsApp, solely for informational and operational purposes related to the Company.
6.- RETENTION PERIOD OF PERSONAL DATA
Personal data will be retained for a period of five (5) years counted from the date of your pre-registration or from the termination of the legal relationship, or for the period established by applicable tax or contractual provisions. Once this period has expired, the data will be blocked and subsequently deleted in accordance with applicable regulations.
7.- EXERCISE OF ARCO RIGHTS
You may exercise your rights of Access, Rectification, Cancellation, and Opposition (ARCO) with respect to your personal data, as well as limit their use, by sending a request to info@obrablancaexpo.com or in writing to the following address: Avenida Batallón de San Patricio Sur, No. 109-628, Colonia Valle Oriente, San Pedro Garza García, Nuevo León, México, C.P. 66269.
The request must include:
(i) The name of the data subject and a means of response.
(ii) Documents proving identity.
(iii) A clear and precise description of the personal data for which the right is to be exercised.
The Company will respond to the request within a maximum of twenty (20) business days from its receipt and, if applicable, will carry out the corresponding actions within the following fifteen (15) business days.
If the application does not meet the legal requirements, the Company may request the data subject to provide the necessary corrections in accordance with applicable legislation.
For any questions related to the processing of your personal data, please contact the Operations Department at (+52) 83 47802304.
8.- TRANSFER AND INTERNATIONAL STORAGE OF DATA
We inform you that the personal data collected are processed by WK Eventos, in its capacity as Data Processor, and stored in technological infrastructure located in Canada. This infrastructure is operated by specialized data center service providers.
The Company has entered into the necessary contracts and confidentiality agreements with WK Eventos and the involved technology providers to ensure that the processing and storage of personal data are carried out under security standards equivalent to or higher than those required by Mexican legislation.
In accordance with Articles 36 and 37 of the “Federal Law on the Protection of Personal Data Held by Private Parties”and Articles 68 to 74 of its Regulations, you expressly consent for your personal data to be processed and stored outside the national territory under the conditions described exclusively for the purposes established in this Notice.
The Company may rely on current or future technological, operational, or commercial providers, including applications and digital tools contracted for the operation, organization, promotion, registration, special guest services, or event management, such as registration systems, QR code reading and management, electronic communication platforms, CRM, analytical tools, or commercial support agencies. These providers shall act at all times as Data Processors, exclusively under documented instructions from the Company and subject to contract and rigorous confidentiality obligations.
The voluntary scanning of the QR code contained in the badge constitutes a free and informed manifestation of consent by the data subject for the Exhibitor performing such scan to receive the visible data associated with their registration, under their own responsibility and in accordance with their Privacy Notice.
The Company and WK Eventos will not be responsible for any subsequent processing carried out by Exhibitors, insofar as the data have been obtained directly from the data subject through such voluntary action.
Personal data may be transferred without requiring additional consent in the cases expressly provided for in Article 37 of the “Federal Law on the Protection of Personal Data Held by Private Parties”.
In all instances, the Company will ensure that third-party recipients assume obligations of protection, confidentiality, and security equivalent to or greater than those established in this Privacy Notice and in applicable Mexican legislation.
Notwithstanding the foregoing, the Company may in the future change the technology service provider or the location of the storage infrastructure, provided that a level of protection equivalent to or greater than that set forth in this Notice is guaranteed.
9.- RESPONSIBILITY FOR DATA PROCESSING
The Company is the sole entity that manages the processing of the personal data referred to herein.
The Company shall not be responsible for the misuse of personal data when such misuse is:
- Exclusively attributable to the data subject.
- Attributable to third parties who have obtained the data directly from the data subject.
- The consequence from fortuitous events or force majeure.
Therefore, the Company will not incur any liability arising from the legal obligations that may be applicable under the “Federal Law on the Protection of Personal Data Held by Private Parties” and other provisions in force.
10.- SECURITY MEASURES
The processing of collected personal data is administered by the Company in compliance with applicable provisions on personal data protection and information security.
In the event of a security breach that significantly affects the patrimonial or moral rights of the data subjects, the Company will promptly notify the data subject in accordance with applicable legislation.
The Company acknowledges that no technological system is completely invulnerable; however, it implements security protocols aligned with international standards to mitigate risks and protect personal information.
Administrative, technical, and physical security measures are applied to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing, in accordance with international information security standards.
11.- MODIFICATIONS TO THE PRIVACY NOTICE
We reserve the right to make modifications or updates to this Privacy Notice at any time, in order to comply with new legal provisions or internal policies. Any changes will be communicated through general and accessible means of dissemination, such as:
- Visible notices in our offices.
- Our official website.
- Email sent to the last registered contact address.
12.- CONTACT
For any information related to this Notice or the exercise of ARCO Rights, you may contact us:
- Phone: (+52) 83 47802304
- Email: info@obrablancaexpo.com
- Address: Avenida Batallón de San Patricio Sur, No. 109-628, Colonia Valle Oriente, San Pedro Garza García, Nuevo León, México, C.P. 66269.
13.- USE OF TECHNOLOGICAL TOOLS AND ARTIFICIAL INTELLIGENCE
The Company may use advanced technological tools, including Artificial Intelligence (AI), exclusively as internal support for statistical, analytical, and operational improvement purposes, operating only on dissociated, aggregated, or anonymized data, without individual profiling or automated decisions with legal effects on data subjects. Therefore, under no circumstances will automated decisions be made that produce legal or significant effects on the data subjects.
14.- EXPRESS CONSENT
By registering on the website www.obrablancaexpo.com, through the Call Center, or at the Event registration area, you declare that you have read and understood this Privacy Notice and expressly consent to the processing and international storage of your personal data in accordance with it.
Updated in January 2026 in compliance with the “Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations” (Ley Federal de Protección de Datos Personales en Posesión de los Particulares y sus Regulaciones).
