Privacy Notice

Last updated: October 2026.

1. Regulatory framework

This Privacy Notice is issued in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties and other applicable provisions in Mexico.

2. Data controller and scope

Jorge Rubalcava is the controller of any personal data collected directly through jorgerubalcava.com. In its current configuration, the website does not ask visitors to provide personal data directly through forms, registrations, comments, newsletters, or equivalent mechanisms. This Notice describes the privacy practices applicable to this configuration and must be updated before introducing new data collection or processing mechanisms.

3. Technical information and infrastructure

The website uses technology infrastructure services provided by third parties, including Cloudflare, for its operation, availability, and security. In providing these services, these providers may process technical information needed to operate and protect the infrastructure, such as IP addresses, device and browser information, network requests, security logs, and equivalent technical data. This processing is subject to the relevant provider's applicable terms and privacy policies.

4. Cookies and similar technologies

The current version of the website does not include Google Analytics, Meta Pixel, advertising networks, or proprietary tools for behavioral tracking or profiling. Infrastructure providers may use cookies or other technical mechanisms where necessary for security, abuse prevention, operation, or delivery of the website, in accordance with their own policies.

5. Purposes

Where technical information associated with the website's operation is processed, its purposes are to enable operation, availability, integrity, and security; prevent abuse; diagnose technical incidents; and protect the infrastructure.

6. No sale of data

Jorge Rubalcava does not sell or trade website visitors' personal data. The current version is also not designed to build visitor databases for advertising or profiling purposes.

7. Data subjects' rights

Under applicable Mexican law, data subjects may, where applicable, exercise their rights of Access, Rectification, Cancellation, and Opposition (ARCO rights), and request information about the processing of their personal data.

The following address has been made available for these purposes: privacidad@jorgerubalcava.com.

Requests must contain the information needed to identify the requester, specify the right they wish to exercise, and enable the relevant personal data to be located, in accordance with the requirements of applicable law.

Making this email address available does not mean that the website directly collects personal data through forms, registrations, subscriptions, or similar mechanisms.

8. Transfers and third parties

The website's current configuration is not designed to transfer personal data for commercial, advertising, or profiling purposes. Technology providers involved in the website's operation, security, or delivery may process technical information under the legal relationship and policies applicable to their services. Where an operation constitutes a personal data transfer under applicable law, the corresponding legal requirements will be observed.

9. Changes to the Privacy Notice

This Privacy Notice may be amended or updated as a result of changes to the website's configuration, new features, changes in personal data processing practices, or regulatory changes. Amendments will be made available on this page, indicating the date of the latest update.

10. Address and comprehensive notice

Applicable law includes the controller's identity and address among the elements that, where applicable, must form part of a privacy notice. For security reasons, and because the current version of the website does not directly request personal data through forms, registrations, or subscriptions, a residential address is not published as though it were a professional address.

Before introducing direct personal data collection mechanisms that require a comprehensive notice, a legally appropriate address and contact mechanism must be defined, and this Privacy Notice must be updated in accordance with applicable law.