1. Introduction and Data Controller Information
This Privacy Policy outlines how GRUPO MARTI, S.A.B. DE C.V. collects, stores, processes, and protects personal data obtained from visitors and customers.
For the purposes of applicable data protection legislation, including the European Union General Data Protection Regulation (GDPR) and Mexican federal data protection laws (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), the Data Controller is:
Company Name: GRUPO MARTI, S.A.B. DE C.V.
Registered Address: FRANCISCO I MADERO NO. 12 SANTA URSULA XITLA TLALPAN, 14420, MEXICO CDMX
Contact Email: equipment@grupomartisab.com
Telephone: +52 5587518110
2. Information We Collect
We collect personal information necessary to facilitate orders for our winter sports and skiing equipment range and to comply with legal obligations. This information includes:
Identification and Contact Data: Full name, billing address, shipping address, email address, and telephone number.
Transaction Details: Details concerning products purchased and order history.
Technical Data: IP address, browser type, device information, and browsing interactions collected via standard website analytics and cookies.
3. Payment Processing via Stripe
To securely process financial transactions, our website integrates payment processing services provided by Stripe. When you complete a purchase, your payment details (such as credit or debit card information) are transmitted directly to Stripe.
Stripe processes your personal and financial data in accordance with its own privacy policies and international security standards (PCI-DSS compliance). We do not store full credit card numbers or sensitive authentication data on our local servers. For further details on how Stripe handles your payment data, please review Stripe’s official privacy documentation.
4. Legal Basis and Purpose of Data Processing
We process personal data lawfully under the following legal grounds:
Contractual Necessity: Processing is required to fulfill and manage purchase orders, deliver goods, and provide customer support.
Legal Compliance: To comply with mandatory commercial, tax, and accounting obligations under Mexican and European legislation.
Legitimate Interests: To maintain website functionality, secure our infrastructure, and prevent fraudulent activities.
5. Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or regulatory reporting requirements:
Transactional and Tax Records: Financial records, invoices, and associated customer data are retained for the duration mandated by applicable Mexican fiscal laws and European commercial retention statutes, typically ranging from 5 to 10 years.
Account and Support Data: Customer communication history and general profile data are kept for a period not exceeding 5 years from the last active interaction, unless a longer retention period is required by law.
Once the applicable retention period expires, personal data is securely deleted, anonymized, or destroyed.
6. Data Subject Rights
Depending on your geographical jurisdiction (including rights under EU GDPR and Mexican regulations), you may hold specific rights regarding your personal data, including:
Right of Access: Request confirmation of whether we process your data and obtain a copy of your information.
Right of Rectification: Request correction of inaccurate or incomplete data.
Right of Erasure: Request the deletion of your personal data under specific statutory conditions.
Right to Restriction or Objection: Object to or restrict the processing of your data under lawful grounds.
To exercise any of these rights, please contact our data management team at equipment@grupomartisab.com.
7. Updates to This Privacy Policy
We reserve the right to modify or update this Privacy Policy at any time to reflect operational adjustments or changes in legal compliance standards. Any revisions will be published directly on this page with an updated effective date.
