Comprehensive Privacy Notice
Last updated: October 26, 2026
This is a convenience translation; the Spanish version is the legally binding one.
This Notice covers only the corporate site xn-systems.com (the "Site"). It does not cover deliverycontrol.mx, app.deliverycontrol.mx or the internal tool XN Finance - Tools, which have their own notices or policies.
1. Identity and domicile of the Responsible Party
XN SYSTEMS, S.A.S., RFC XSY260421UC3, with conventional domicile for receiving notices at Manzana B, Carretera Transpeninsular km 5, Interior 2, Corredor Turístico, Cabo Bello, C.P. 23454, Cabo San Lucas, Baja California Sur, Mexico (the "Responsible Party"), processes the personal data generated on the Site under the Federal Law on the Protection of Personal Data Held by Private Parties (DOF 20 March 2025; the "Law").
If you are the person to whom that data belongs (the "Data Subject"), write to support@xn-systems.com about any matter concerning its processing.
2. Personal data processed
The Site is informational: it has no forms, user accounts, shop or private area, sets no cookies and runs no analytics tools. It processes only this data:
| Source | Data | Who receives it |
|---|---|---|
| Your browser's connection to the server hosting the Site | IP address and the technical data every browser sends when requesting a page (for example, browser type, page requested, date and time) | The Site's hosting provider, Vercel Inc. (United States of America), which may keep them in standard server logs for no more than 30 days (Clause 9) |
| Loading the Site's typeface | Your browser's IP address | Google, which serves the typeface from its Google Fonts service and receives it under its own privacy policy |
| Messages you choose to send us | Your email address and whatever you include in the message | The Responsible Party, at the support@xn-systems.com mailbox |
Sensitive data. The Responsible Party does not process, through the Site, sensitive personal data (Art. 2, section VI of the Law). Do not include such data in your messages.
What is mandatory. Nothing. The technical data is generated by your browser when it requests the page; without it the page cannot be delivered.
3. Purposes of processing
3.1 Primary purposes (necessary for the Site to work or to deal with what you ask)
- Delivering the Site's pages and typeface to you.
- Maintaining the Site's security and technical integrity and detecting abusive use.
- Answering the messages you send to support@xn-systems.com.
- Complying with legal obligations and responding to well-founded requests from a competent authority.
3.2 Secondary purposes
None. The Responsible Party does not use Site data for marketing, advertising, profiling or analytics. Should it wish to do so, it will first amend this Notice under Clause 14 and, where the Law requires, obtain your consent (Art. 11 of the Law).
4. Cookies and tracking technologies
The Site sets no cookies and uses no browser local storage, pixels, analytics tags or other tracking technologies.
Your browser downloads the typeface directly from Google Fonts; the Responsible Party does not control which technical data Google records.
5. Communication and transfer of personal data to third parties
| Third party | What it receives | Preliminary classification |
|---|---|---|
| Vercel Inc., the Site's hosting provider | Technical connection data | Processor (persona encargada; Art. 2, sections XII and XX of the Law): processes the data on behalf of the Responsible Party to run the Site |
| Google (Google Fonts service) | Your browser's IP address | To be classified |
Communications outside Mexico. Google provides the Google Fonts service from outside Mexico, and Vercel Inc. provides the hosting from the United States of America, so the IP address and the technical connection data leave the national territory. Vercel Inc. receives that data solely as a processor, to run the Site.
The Responsible Party does not sell, rent or trade personal data and does not transfer it to third parties, except where a law requires it (Art. 36, section I of the Law).
6. Basis for processing and consent
The processing in Clause 3.1 rests on your tacit consent when you browse the Site or write to us (Art. 7 of the Law).
Revocation. You may revoke your consent at any time, without retroactive effect, by writing to support@xn-systems.com (Art. 7, last paragraph of the Law). To stop generating technical data, simply stop browsing the Site.
7. Options and means to limit the use or disclosure of the data
You can limit the use or disclosure of your data:
- By writing to support@xn-systems.com to ask that the data in your messages be used only to answer you, or to object to its processing (Art. 26 of the Law).
- By setting your browser to block third-party typeface downloads; the Site will keep working with a system typeface.
8. ARCO rights
You have the right, at any time, to Access your personal data, Rectify it when inaccurate or incomplete, Cancel it and Object to its processing ("ARCO" rights, Art. 2, section VII and Art. 27 of the Law).
Objection. It applies on legitimate grounds when your specific situation requires it, or against automated processing that, without human intervention, evaluates personal aspects of you and produces unwanted legal effects or significantly affects you (Art. 26, sections I and II of the Law). It does not apply where the processing is necessary to comply with a legal obligation of the Responsible Party.
How to exercise them. Send your request to support@xn-systems.com with: (i) your name and a means of receiving the answer; (ii) documents proving your identity or, where applicable, your representative's; (iii) a clear description of the data concerned, unless you are exercising the right of access; (iv) the right you are exercising or what you request; and (v) anything that helps locate your data (Art. 28 of the Law).
Deadlines. The Responsible Party will communicate its determination within at most twenty (20) business days of receiving the request and, if it is upheld, will give it effect within the following fifteen (15) business days. Each period may be extended once by an equal period when the circumstances justify it (Arts. 2, section VIII, and 31 of the Law).
Cost. Exercising ARCO rights is free of charge; only reproduction, copying or delivery costs may be charged. If you repeat your request within less than twelve months, the cost will not exceed three times the current Unidad de Medida y Actualización, unless substantial changes to this Notice prompt the new request (Art. 34 of the Law).
Complaint. If you are not satisfied with the answer, or do not receive it in time, you may file a request for data protection with the Secretaría Anticorrupción y Buen Gobierno within fifteen (15) business days of the answer or, failing an answer, once the deadline for giving it has passed (Art. 40 of the Law).
9. Data retention period and criteria
Technical data is kept only as long as needed for the Site's security and operation. Messages, while the matter is dealt with and afterwards for the period required by the Responsible Party's legal obligations or the defence of claims. Once the purpose is fulfilled, the data is deleted after blocking, where applicable (Art. 10 of the Law). Hosting server logs will not be kept for more than 30 days, a period the Responsible Party takes on as its own commitment to you.
10. Security measures
The Responsible Party maintains administrative, technical and physical security measures to protect personal data against damage, loss, alteration, destruction or unauthorised use, access or processing (Art. 18 of the Law).
11. Notification of security breaches
If a security breach occurs that significantly affects your property or moral rights, the Responsible Party will inform you immediately, so that you can take the corresponding measures to defend your rights (Art. 19 of the Law).
12. Automated decisions and profiling
The Responsible Party does not make, through the Site, decisions based solely on automated processing, nor does it build profiles.
13. Minors
The Site is not directed at minors. If the Responsible Party learns that a minor sent it personal data without the authorisation of the person exercising parental authority or guardianship, it will delete that data.
14. Changes to this Privacy Notice
The Responsible Party may amend this Notice because of legal changes, changes in its processing practices or changes to the Site. It will communicate any change by publishing the updated version on xn-systems.com, with its effective date, before the change takes effect (Art. 15, section VI of the Law).
15. Competent authority
The competent authority is the Secretaría Anticorrupción y Buen Gobierno (Art. 2, section XV of the Law).
16. Language and binding version
This Notice is issued in Spanish. If the Responsible Party makes a translation available, the Spanish version is the only binding one.
Executive summary (plain language)
xn-systems.com is an informational page: no forms, cookies or analytics. When you open it, the server hosting it and Google (for the typeface) see your IP. If you write to us, we keep your email and message to answer you. We do not sell data. To see, correct or delete your data, or object to its use, write to support@xn-systems.com; we answer within at most 20 business days.