1. Determine the responsible party

For employee, candidate or payroll data, your employer or the AlloraHR customer will often be the controller and should receive the request first. AlloraHR will assist that customer as processor.

2. Submit a request

Email privacidad@allorahr.com with your full name, contact method, the right you wish to exercise, a clear description of the data and information needed to locate the relevant account or record.

3. Identity and representation

We may request reasonable proof of identity. A representative must also provide evidence of authority. Do not send unnecessary sensitive documents before receiving instructions.

4. Review and response

We will acknowledge the request, determine the applicable role and request clarification if needed. Timing follows applicable Mexican law and may pause while required information is missing.

5. Outcomes and limitations

A request may be granted, partially granted or denied when a legal exception applies, including mandatory retention, protection of third-party rights or defense of legal claims. The reason will be explained.

6. Revocation and complaints

Consent may be withdrawn where processing depends on it. Individuals may also approach the competent Mexican data-protection authority or another applicable regulator.

ARCO Rights Procedure