INSTITUTO MONTRER, S.C.
In compliance with the Federal Law on Protection of Personal Data Held by Private Parties and to ensure the protection and privacy of personal data, as well as to regulate access, rectification, cancellation, and opposition regarding their processing, INSTITUTO MONTRER S.C., located at Av. Lázaro Cárdenas number 1760, Colonia Chapultepec Sur, C.P. 58260, informs you that your personal data and sensitive personal data will be used for identification, operation, administration, and analogous purposes necessary for the provision of academic and administrative services in the Educational System of Instituto Montrer S.C., as holder of the official recognition of studies (RVOE) for Universidad Montrer and Instituto Montrer preparatoria in its campuses in Morelia, Jesús del Monte, Apatzingán, Uruapan, and Los Reyes, Michoacán.
Exercise of Rights
The rights of access, rectification, cancellation, opposition, limitation of use, or revocation of consent may be requested in writing to Instituto Montrer S.C. or by email at informes@unimontrer.edu.mx
Publication of the Policy
The Privacy Policy and any changes to this notice are published at www.unimontrer.edu.mx. If the data subject provides personal data, it means that they have read, understood, and accepted the terms set forth.
Privacy Policy
This policy aims to ensure the privacy of data provided by students, former students, graduates, parents, guardians, collaborators, and employees of Instituto Montrer S.C., in order to link them with the academic or administrative services provided by Instituto Montrer S.C. By providing personal data, the data subject agrees to the collection, use, transfer, and storage of personal and sensitive personal information, which means that they have read, understood, and accepted the terms set forth. If they do not agree, the data subject should not provide personal information.
Purpose of the Information
Instituto Montrer S.C., as the legal entity responsible for personal data and sensitive personal data, may collect for its academic, administrative, and/or operational processes data including name, address, email, phone number, date of birth, and sex; listed by way of example and not limitation, and such data may have one or more of the following purposes:
- Academic management processes.
- Administrative management processes.
- Admissions processes.
- Announcements, calendars, and related communications.
- Programs, processes, groups, and student participation activities.
- Collection and publication of photographs in printed media and electronic media for academic, administrative, and special events.
- Offering the educational proposal through photographs of students in educational, recreational, sports, cultural, and civic activities.
Protection Principles
Instituto Montrer S.C. observes the principles of confidentiality, lawfulness, consent, information, quality, purpose, loyalty, proportionality, and accountability in the protection of personal data. To obtain personal data, Instituto Montrer S.C. collects the consent provided for by the Federal Law on Protection of Personal Data Held by Private Parties, except for the exceptions provided by law.
Limitation of Use and Disclosure
The processing of personal data will be limited to what is necessary, appropriate, and relevant in relation to the purposes described in this Privacy Policy. Instituto Montrer S.C. complies with the personal data protection principles established by the Federal Law on Protection of Personal Data Held by Private Parties and adopts the necessary measures for their application. This also applies when data is processed by a third party at the request of Instituto Montrer S.C. to provide the required academic or administrative service, maintaining confidentiality at all times.
Rights of Personal Data Subjects
Any data subject or, where applicable, their legal representative may exercise the rights of access, rectification, cancellation, and opposition, and Instituto Montrer S.C. will provide the means for the timely exercise of such rights. Consent may be revoked at any time without retroactive effects. To start the revocation process, the data subject must precisely indicate the consent they wish to revoke in writing or by email at informes@unimontrer.edu.mx
ARCO Request Requirements
Written and/or electronic requests for access, rectification, cancellation, or opposition must include and attach the following:
- The data subject's name and address or another means to communicate the response.
- Documents proving identity or, where applicable, legal representation.
- A clear and precise description of the personal data regarding which the right is being exercised.
- Any other element or document that facilitates locating the personal data.
- For rectification requests, the data subject must indicate the modifications to be made and provide the supporting documentation.
Response to Requests
Instituto Montrer S.C. will inform the data subject within twenty business days, counted from the date on which the request for access, rectification, cancellation, or opposition was received, of the adopted decision so that, if applicable, it may be carried out within fifteen days following the date on which the response is communicated. For access requests, delivery will proceed after verifying the identity of the requester or legal representative, as applicable. These periods may be extended once for an equal period when justified by the circumstances of the case.
Grounds for Denial and Retention
Instituto Montrer S.C. may deny access to personal data, rectification, cancellation, or opposition to processing when the requester is not the data subject, when legal representation is not duly accredited, when the personal data is not found in its database, when third-party rights may be affected, when there is a legal impediment or competent authority resolution, or when rectification, cancellation, or opposition has already been carried out. Instituto Montrer S.C. will limit the use of personal and sensitive personal data at the express request of the data subject and will not be required to cancel personal data when it is necessary to comply with contractual, legal, academic, administrative, or public interest obligations.
Data Processing in SIGMA
SIGMA is Universidad Montrer's institutional platform for academic, administrative, and service operations. When a WhatsApp Business channel is enabled, SIGMA processes data received through that channel only to receive, route, and respond to institutional communications, manage templates and delivery statuses, apply the rules configured for the workspace, and retain the corresponding operational record.
Data Processed by SIGMA
Based on the module and authorized configuration, SIGMA may process contact identifiers, information about the relationship with the institution, service history, shared messages and files, conversation and delivery statuses, approved templates, CRM activities, technical metadata, applicable preferences, and audit records. Only the information necessary for the configured institutional purpose is used.
Integrations, WhatsApp, and Artificial Intelligence
SIGMA may connect to authorized institutional services and providers, including Meta WhatsApp Business Platform for business messaging. Information is shared with each provider only when necessary for the enabled function, such as sending or receiving messages, checking their status, synchronizing authorized information, or processing an approved automation. Artificial intelligence features, when enabled by the institution, are limited to the scope, permitted knowledge sources, and rules defined by the administrator.
Security, Permissions, and Traceability in SIGMA
Access is controlled through authentication, organization roles, operational profiles, data scopes, and restrictions by area or workspace. Integration credentials are managed outside public interfaces. SIGMA records relevant changes and events to provide security, traceability, and support; those records are available only to people authorized for that purpose.
Retention of Messages and Events
Retention and archival periods are defined by the institutional configuration that applies to the workspace and data type. SIGMA may purge messages, technical events, and operational records when that period expires. Items strictly necessary for security, fraud prevention, audit, request handling, or compliance with applicable obligations may be retained.