Global Privacy Notice

QRit.mx, part of the business group A2Z México, located at Ave. 16 de Septiembre No. 1123, Acámbaro, Gto. Mexico, is responsible for the processing of your personal data in accordance with the Federal Law on Protection of Personal Data Held by Private Parties (Mexico), the General Data Protection Regulation (GDPR, European Union), and the California Consumer Privacy Act (CCPA, United States).

Personal data we collect

We may request information such as name, email, phone number, and, if applicable, sensitive health data (medical history, prescriptions, clinical studies, allergies, conditions, among others). Filling out these fields in the form is optional, but we recommend completing them so that first response services can act with greater accuracy and speed in case of emergency.

Purposes of processing

The personal and medical data provided will be used exclusively for:

  • The creation and management of smart identifications without photographs, which include a QR code, an NFC chip, and the user’s web address in our database.
  • The updating of medical information in such identifications, intended exclusively for emergency cases.
  • Facilitating immediate care by first response services, who may consult the registered medical conditions to act with greater accuracy and speed.
  • Communication related to our services.

Important note: Although the identifications are designed for exclusive use in emergencies, the QR code and NFC chip may be read by third parties in case of accident or physical access to the credential. QRit.mx implements digital security measures and restricted access protocols on the platform, but the user acknowledges that it is not possible to completely prevent physical reading of the code by unauthorized persons.

Explicit consent

By providing sensitive medical information, you grant your explicit consent for QRit.mx to use it solely for emergency purposes and the protection of your health.

Data subject rights

  • Mexico (ARCO): Access, Rectification, Cancellation, and Opposition.
  • European Union (GDPR): Right to erasure, data portability, restriction of processing, and objection.
  • United States (CCPA): Right to know what data is collected, request its deletion, and opt out of data sharing.

To exercise any of these rights, you may send a request to contacto@qrit.mx. Responses will be provided within the timeframes established by applicable regulations.

International data transfer

Your data may be stored on servers located outside of Mexico. In all cases, QRit.mx guarantees that security standards equivalent to those required by GDPR, CCPA, and LFPDPPP will be applied, ensuring the protection and confidentiality of your information.

Security and limitations