ARCO rights procedure

ATEB Procedure for Attention to Requests from Holders



ATEB in compliance with the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations, the GDPR (General Data Protection Regulation), and Convention 108 and 108 Plus, and other relative ones, but above all aware of the importance of Your privacy, makes this procedure available to request the exercise of any of the recognized rights of Access, Rectification, Cancellation and Opposition (ARCO).


The rights that any person may exercise, in relation to the treatment of their personal data are:


  • Right of Access: You have the right to obtain your personal data from ATEB, as well as information regarding the conditions and generalities of the treatment.
  • Right of Rectification: The owner may, at any time, request the person responsible to rectify their personal data that prove to be inaccurate or incomplete.
  • Right of Cancellation: implies the cessation of the treatment by the person in charge, from a blocking of the same and their subsequent deletion.
  • Right of Opposition: to oppose the processing of your personal data or demand its cease, the owner may define the purposes in the processing of your data.


The exercise of the right of opposition will not proceed in those cases in which the treatment is necessary for the fulfillment of a legal obligation imposed on the person in charge.


To perform any exercise related to your personal rights, you must follow the following procedure:


  • The Owner of the Personal Data or its Legal Representative are the only ones empowered to request the exercise of their ARCO rights.
  • The Request to exercise ARCO rights may be submitted through:
    • Free writing or application form delivered directly to our offices located at: Avenida Insurgentes Norte, No. 554, Piso 2, Col. Atlampa, Del. Cuauhtémoc, Ciudad de México, C.P. 06450. Attention hours from Monday to Friday from 09:00 to 18:00.
    • Free writing or application form, delivered to any of our offices.
    • Addressed email: protecciondedatos@ateb.com.mx.
  • The request will be directed to those responsible for the Protection of Personal Data, who will verify that it contains the following:
    • The name of the owner of the data, telephone number, as well as full address, email or other means to communicate the response to your request.
    • Current document that proves the identity of the Holder or, where appropriate, document that proves the legal representation of the Holder.
    • The clear and precise description of the personal data and / or the reasons why it's wanted to exercise any of the ARCO rights.
    • Any other element or document that facilitates the location of personal data.
    • The request for rectification must indicate what personal data it refers to, as well as the correction to be made and must be accompanied by the documentation that supports the origin of the request.
  • In case the application does not comply any of these formal requirements, the application will be rejected and the applicant will be informed by the means indicated.
  • If the application complies all the formal requirements, the process will continue in accordance with the following procedure.


ATEB Procedure for Attention to Requests from Holders regarding the exercise of ARCO Rights:


  • The Responsible for the Protection of Personal Data will communicate the response of the request to the Holder or his Legal Representative, within a maximum period of 20 (twenty) business days, counted from the date of receipt of the request to exercise rights ARCO, through the means indicated in the request.
  • If the request is appropriate, it will be effective within 15 (fifteen) business days following the date on which the response is communicated.

    Note: In the case of requests for ACCESS to personal data, it will proceed to delivery, after accreditation of the identity of the applicant or legal representative, as appropriate, which will have to be done face-to-face by the Holder or his legal representative.
    The obligation of ACCESS to the information will be considered fulfilled when the personal data is made available to the Holder; or, by issuing simple copies, electronic documents or any other means.

  • The aforementioned terms may be extended only once for an equal period, as long as the circumstances of the case justify it.
  • In case the owner requests access to the data to a person who presumes he is responsible and this turns out not to be, it will be enough that the owner is indicated in this way by any of the means referred to in the previous paragraph, to have the request fulfilled.
  • Access may be denied to the Holder of personal data, or to rectify or cancel or grant opposition to the treatment thereof, in the following cases:
    • When the applicant is not the owner of the personal data, or the legal representative is not duly accredited for it;
    • When the applicant's personal data is not found in its database;;
    • When the rights of a third party are injured;
    • When there is a legal impediment, or the resolution of a competent authority, that restricts access to personal data, or does not allow their rectification, cancellation or opposition, and
    • When the rectification, cancellation or opposition has already been previously made.


The person in charge must inform the reason for their decision and communicate it to the Holder, or, where appropriate, to the legal representative, within the deadlines established for that purpose, by the same means established in the request.


In case of doubts about the procedure, you can contact the Customer Service area by telephone at the number 51180300.

ARCO Rights Request