Privacy policy

Last updated: May 2026

I. Identity and address of the Data Controller

AUTOMATIZACIÓN INDUSTRIAL ROMA, S.A. DE C.V. (hereinafter, the "Data Controller"), with its address for the purposes of this Notice at Condominio Michoacán 35, Col. Las Americas Ecatepec, State of Mexico, Postal Code 55076, is responsible for the processing of personal data collected through the website www.roma-refacciones.com.mx, physical forms, emails, telephone calls, social media, commercial events, and any other means.

For any matter related to personal data protection, the Data Subject may contact the Privacy Department via email at privacidad@roma-refacciones.com.mx or by phone at +52 55 5 99 1186.

II. Personal data collected

For the purposes described in this Privacy Notice, the Data Controller may collect the following categories of personal data:

From individuals:

•        Identification data: full name, date of birth, nationality, official identification, handwritten or electronic signature;

•        Contact information: address, landline or mobile phone, email;

•        Job or professional data: company, position, area, seniority;

•        Tax data: Federal Taxpayer Registry (RFC) number, Certificate of Tax Status, tax domicile postal code, tax regime;

•        Financial and asset data: banking information, trade references, credit history (when commercial credit is requested), proof of income;

•        Transactional data: purchase history, products viewed, payment methods used, shipping and billing addresses.

Regarding representatives of legal entities:

•        Identification and contact details of the legal representative and/or authorized personnel;

•        Details regarding the articles of incorporation and powers of attorney (where applicable).

The Data Controller states that it does NOT collect sensitive personal data. In the exceptional event that it were to collect such data (for example, biometric data for facility access), it will obtain express written consent in accordance with Article 9 of the LFPDPPP.

III. Purposes of processing

Primary purposes (which give rise to and are necessary for the legal relationship):

•        Handling requests for quotes, information, or technical advice;

•        Processing, confirming, and following up on purchase orders;

•        Send the Products to the indicated address;

•        Issue Digital Tax Receipts over the Internet (CFDI) and comply with tax obligations;

•        Process payments and, where applicable, refunds;

•        Evaluate and manage the granting of commercial credit, including inquiries to credit reporting agencies subject to specific prior authorization;

•        Handle warranties, returns, and claims;

•        Address inquiries, questions, complaints, and proceedings before PROFECO or other authorities;

•        Comply with applicable legal and contractual obligations;

•        Retain data for evidentiary and legal defense purposes in accordance with applicable statutes of limitation.

Secondary purposes (not necessary, require consent, may be revoked at any time):

•        Sending commercial information, promotions, offers, newsletters, and product updates;

•      Conducting satisfaction surveys and market research;

•        Personalization of the Site experience and product recommendations;

•        Invitations to events, training sessions, and technical demonstrations.

If the Data Subject does not wish for their data to be processed for secondary purposes, they may express this at any time by sending an email to the privacy department. Refusal to allow processing for secondary purposes shall not be grounds for denying or conditioning the requested services.

IV. Personal data transfers

 

•        To parcel and transport companies for the delivery of the Products;

•        To competent tax, judicial, or administrative authorities, upon a substantiated and reasoned request;

•        To financial institutions and payment processors, to complete transactions;

•        To companies belonging to the same corporate group as the Data Controller, for administrative and commercial purposes;

•        To accounting, tax, legal, and debt collection firms, for the fulfillment of obligations;

•        To credit reporting agencies, in the event of a credit application and subject to specific authorization.

 

V. Means to exercise ARCO rights

The Data Subject has the right to Access, Rectify, Cancel, or Oppose the processing of their personal data, as well as to revoke consent (ARCO rights).

To exercise these rights, the Data Subject must send a written request to the email address privacidad@roma-refacciones.com.mx containing the following information: