Privacy Policy

This document outlines the privacy practices for the Lony Human Resource Management System.

Privacy Policy for Lony

Introduction

At Lony, we prioritize your privacy and are committed to safeguarding your personal information. This Privacy Policy outlines the types of data we collect, how we use it, and the measures we take to protect your privacy when using our Human Resource Management System (HRMS) application.

Data Controller

The entity responsible for processing your data is:

IoT Mexico
Address: Marsella 570 Guadalajara Jalisco Email: soporte@iotmexico.com

Information We Collect

To provide our services, we collect the following types of data:

  • Personal Information: Includes name, email address, phone number, job title, and other personal details.
  • Employment Information: Covers employment history, performance evaluations, payroll data, and benefits.
  • Sensitive Data: Includes sensitive data such as employee evaluations, medical benefits, or any other personal details related to employment.
  • Usage Data: Includes log data, IP addresses, browser types, and access times.

Purpose of Data Collection

We collect and process your data for the following purposes:

Primary Purposes

These are necessary for delivering our core services:

  • Service Provision: To manage HRMS services, including payroll processing and employee benefits management.
  • Account Management: For user authentication, support, and account management.
  • Compliance: To meet legal obligations and protect both your and our rights.

Secondary Purposes

These purposes are aimed at improving your experience and service offerings:

  • User Experience Improvement: To enhance our services and functionality based on your usage and feedback.
  • Marketing and Promotions: To send you relevant updates and promotions, with your consent.
  • Research and Development: To analyze data and develop new features or services.

Sharing Your Information

We do not sell your personal information, but we may share it under the following conditions:

Essential Transfers

  • Service Providers: We share data with trusted vendors and service providers that help operate our platform and services (e.g., cloud storage, IT services).
  • Legal Obligations: We may disclose data to comply with applicable laws, regulations, or legal processes.

Non-Essential Transfers

For transfers that are not critical to the services we provide, we will request explicit consent:

  • Marketing Partnerships: We may share information with partners for promotional or research purposes with your consent.
  • Research Collaborations: If we engage in research activities, we may share anonymized data with research institutions.

You can withdraw your consent for non-essential transfers at any time.

If we collect sensitive data such as medical records or employee evaluations:

  • Explicit Consent: We will obtain your explicit consent before collecting or processing sensitive data.
  • Protection Measures: Sensitive data is encrypted and access is restricted to authorized personnel only.

Data Security

We employ stringent security measures to protect your information, including:

  • Encryption: All sensitive data is encrypted to ensure confidentiality.
  • Access Control: Strict access controls to limit who can access your data.
  • Regular Audits: Ongoing security assessments to identify and address vulnerabilities.

Your Rights

You have the right to:

  • Access: View your personal information we hold.
  • Rectification: Correct any inaccuracies or incomplete data.
  • Deletion: Request deletion of your data, subject to legal obligations.
  • Opposition: Object to the processing of your data for certain purposes.

Exercising Your ARCO Rights

To exercise your rights to Access, Rectification, Cancellation, and Opposition (ARCO), please follow these steps:

  1. Submit a Request: Email us at soporte@iotmexico.com with the subject line "ARCO Rights Request."
  2. Provide Information: Include your full name, contact details, and a description of the ARCO right you wish to exercise.
  3. Verification: Attach a copy of a valid identification document for identity verification.
  4. Response Time: We will acknowledge receipt of your request within 5 business days and respond within 20 business days.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes.

Policy Updates

We may update this Privacy Policy occasionally. When significant changes are made, we will notify you through the following methods:

  • Email Notification: You will receive an email outlining the changes and the effective date.
  • In-App Notification: A prominent notification will be displayed within the application.
  • Website Update: The updated policy will be posted on our website.

We encourage you to periodically review this policy to stay informed about how we protect your privacy.

Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us at:

Email: soporte@iotmexico.com Phone: [Phone Number] Address: Marsella 570 Guadalajara Jalisco

Thank you for trusting Lony with your personal information. We are committed to protecting your privacy and ensuring a secure experience.