Processing of Personal Information in Mexico

For the purposes of processing your Personal Information in Mexico, we will follow all applicable Data Privacy Principles including the Federal Law on Protection of Personal Data Held by Private Parties (FLPPDPP). Please note that the following provisions will additionally apply to you if you are a Data Subject (resident or citizen) in Mexico, in addition to Infosys Global Privacy Statement.

Cross Border Transfer of Data

In general, Infosys Limited, domiciled in Bangalore, is the data controller processing your Personal Information. We may transfer your personal data outside Mexico to third parties including countries where the data protection legislation may differ from that of Mexico.

As per the obligation called out under the Data Protection law in Mexico, when we transfer your personal information to Infosys group companies and service providers outside Mexico, Infosys as the transferring organization will remain accountable for the protection of your personal information and ensuring ‎compliance with the applicable legislation, using contractual or other means to provide a same level of protection while the personal data is being processed by the third party. Additionally, we shall also take all the necessary steps to ensure confidentiality and security of the transferred data.

Your Data Subject Rights in Mexico

As a Data Subject located in Mexico, you are entitled to the following rights (ARCO):

• The right to access your personal data that is being processed.
• The right to rectification of incomplete, inaccurate data.
• The right to cancellation of personal data, which results in a period of blocking after which the data may be deleted.
• The right to oppose the processing of your personal data for legitimate reasons.

If you are a resident of Mexico and you wish to exercise your data subject rights as called out above, please refer to section on exercising ‘Your Rights’ in the Infosys Global Privacy Statement.