Privacy Notice
Simplesleep.mx Privacy Statement
We are pleased that you use our website. The protection of your personal data is important to us and we want you to feel secure when using our website.
Information on the collection of personal data
a. Below, we provide information on the collection, processing, and use of personal data on our website. Personal data refers to any information related to a living person who can be identified.
b.The data controller according to the Federal Law for the Protection of Personal Data in Possession of Individuals is:
Nezt Descanso SA de C.V
You may contact our Data Security Officer (“DPO”) at the following details:
admin@simple.mx
c. If we use contracted service providers for specific functions to present our services to you or process your data for advertising purposes, we will provide detailed information about the respective processes below.
2. Your rights as a data subject
a.You have the following rights against us with respect to personal data concerning you:
The data subject’s right of access:
You have the right to request information about the personal data we hold about you. This information includes, among other things, the categories of data we process, the purposes for which it is processed, the source of the data if it was not obtained directly from you, and, if applicable, the recipients with whom we have shared your Personal Data. You can also obtain a copy of your Personal Data from us free of charge once every twelve (12) months, except for justified shipping costs or the cost of copies, or the provision of Personal Data in other formats. If you require additional copies, we reserve the right to charge for them.
Right of rectification (Article 24, LFPD):
You have the right to request that we rectify any inaccurate or incomplete Personal Data concerning you, except in situations listed in Article 34 of the LFPD, such as when the requester is not the data subject, or the legal representative is not properly accredited for such purposes; when the Personal Data is not found in Nezt Descanso’s database; when third-party rights are affected; when there is any legal impediment, or a decision by a competent authority, that restricts access to the Personal Data or prevents its rectification, cancellation, or opposition; or when the cancellation has already been carried out. We will take the appropriate measures to ensure that the Personal Data we store and process on an ongoing basis is accurate, complete, and up-to-date, based on the most current information available.
Right of deletion (Article 25, LFPD):
You have the right to request the deletion of your Personal Data that we store, except in situations listed in Article 26 and Article 34 of the LFPD, including but not limited to when they relate to parts of a private or administrative contract or a collaboration agreement and are necessary for its execution and compliance; when the law requires its processing; when such action hinders judicial or administrative procedures related to tax obligations, the investigation and prosecution of crimes, or the enforcement of administrative penalties; when it is necessary to protect your legally protected interests; when it is necessary to carry out a public interest action; when it is necessary to comply with a legally contracted obligation; when it is processed for medical diagnosis or the prevention or management of healthcare services, provided such processing is carried out by a healthcare professional subject to confidentiality obligations; when the requester is not the data subject, or the legal representative is not properly accredited for such purposes; when the Personal Data is not found in Nezt Descanso’s database; when third-party rights are affected; when there is any legal impediment, or a decision by a competent authority, that restricts access to the Personal Data or prevents its rectification, cancellation, or opposition; or when the cancellation has already been carried out.
Right to object (Article 27, LFPD):
You have the right to object to the processing of your Personal Data at any time for reasons related to your particular situation, as long as the processing of Personal Data is based on your consent, our legitimate interests, or those of a third party. In this case, we will stop processing your Personal Data. This does not apply if we can demonstrate that there are overriding legitimate grounds for the processing that outweigh your interests, or if we need your Personal Data for the establishment, exercise, or defense of legal claims, or if any of the situations listed in Article 34 of the LFPD apply, including but not limited to when the requester is not the data subject, or the legal representative is not properly accredited for such purposes; when the Personal Data is not found in Nezt Descanso’s database; when third-party rights are affected; when there is any legal impediment, or decision by a competent authority, that restricts access to the Personal Data or prevents its rectification, cancellation, or opposition; or when the cancellation has already been carried out. We will take the appropriate measures to ensure that the Personal Data we store and process on an ongoing basis is accurate, complete, and up to date, based on the most current information available.
Right to revoke consent (Article 8, LFPD):
You have the right to revoke your consent at any time. Accordingly, we cannot continue in the future the processing of data that was based on this consent.
b.If you feel that we have not adequately responded to your complaints or you have other concerns, you also have the right to file a complaint with a data protection authority such as the National Institute for Access to Information and Protection of Personal Data (“INAI”): http://inicio.inai.org.mx/SitePages/ifai.aspx.
- To stop receiving the newsletter, you may withdraw your consent or object to receiving the newsletter at any time by clicking on the unsubscribe link provided in each newsletter email or by contacting us at. admin@simple.mx
- Additionally, to help you limit the use and disclosure of your personal information, we provide the following resource: the Public Registry to Avoid Advertising, managed by the Federal Consumer Protection Agency (PROFECO), to ensure your personal data is not used to receive advertising or promotions from goods or services companies. For more information about this registry, you can visit the PROFECO website or contact them directly.
3.Collection of personal data when visiting our website
When you visit our website, i.e. without registering or giving your consent to the further processing or use of data, only the personal data that your browser transmits to our server is automatically saved. In order to meet these technical requirements for you to view our website and to provide the necessary security, the following data is saved:
IP address,
Date and time of your visit,
Time zone difference from Greenwich Mean Time (GMT),
Content of the query (specific site visited),
HTTP access status/status code,
Amount of data transferred,
Web site from which the initial request originates,
Navigator,
Operating system, device and its user interface
Language and browser software version.
The aforementioned personal data is processed for the following purposes and legitimate interests:
To ensure a smooth website connection
To ensure a comfortable use of our website
To evaluate the security and stability of the system, as well as for other administrative purposes.
This information is temporarily stored in what are known as log files. When you visit this website, this information is automatically recorded without your intervention and is stored until it is automatically deleted. If you do not wish for the mentioned personal data to be collected, you should not access our website, as we will not be able to grant you access to our website without such personal data.
4.Use of our webshop: orders and product returns
If you wish to place an order on our online store, it is necessary for the conclusion of the contract that you provide us with your personal data, which we need to process your order and fulfill the sales contract with you. The mandatory data required for contract processing is marked, while other data is optional. We use the personal data you provide to process your order and returns. To do so, we may transmit your payment data to our bank or the selected payment service provider. If we deliver the products, we will transmit your personal data to the assigned shipping company for delivery. If you wish to return products, we will transmit your personal data to the assigned non-governmental/charitable organization for product collection. The legal basis for this is that the processing is necessary to fulfill the sales contract with you and for our legitimate interest in achieving a logistics process that meets our business needs. Failure to provide the mandatory personal data may mean that your order cannot be processed with us.
5.Recipients of personal data
a. As part of our activities and services, it may be necessary for us to communicate the personal data we store about you to individuals, legal entities, or public authorities. We enter into contracts with our service providers, ensuring that they can only process your personal data in the manner we have explicitly instructed. Additionally, we ensure that they adopt the necessary technical and organizational measures to process your data securely and that they store your personal data only for as long as necessary. External service providers who may receive personal data typically belong to the following categories of recipients:
Subsidiaries and affiliates
Credit institutions and payment service providers for billing and payment processing (online payment providers)
Package shippers
Non-governmental/charitable organization that collects product returns
IT service provider to maintain our IT infrastructure
Cloud provider
Service provider for the optimization of online offerings
Collection service providers or lawyers to collect receivables and enforce claims in court. If, in the event of a collection case, personal data (customer and contact data, payment and consumption data and data on the claim) is transferred to a collection service provider, we will inform you in advance of the intended transfer.
b.If personal data is processed in countries outside of Mexico, we will ensure that your personal data is processed in accordance with Mexico’s level of data protection.
6.Communications and contact form
When you contact us, for example, via email or the contact form, the information you provide will be processed to handle your request and in case follow-up questions arise. If you contact us regarding your purchase, our legal basis for processing your personal data is that it is necessary to fulfill our sales contract with you. If you contact us regarding other matters, our legal basis for processing your personal data is our legitimate interest in addressing your concern and allowing you to contact us quickly and easily. The personal data collected by us in this context will be deleted once the request associated with the contact has been fully clarified and it is not expected that the specific contact will be relevant in the future, unless legal storage obligations prevent this.
If you participate in our referral program, certain information mentioned above will be collected and processed to verify and enable the referral discount code. This information will be used to identify your referral login and to detect fraud. In connection with this, we may receive personal data from your friends who have referred you using the “refer a friend” option in the referral program registration.
7.Bulletins and electronic notifications
a.We send newsletters, e-mails and other electronic notifications containing promotional information. Our newsletters contain information about our products, offers, promotions and our company. With the following notes we inform you about the content of our newsletter, as well as about the registration, sending and statistical evaluation procedure and your right to object.
For the subscription to our newsletter, we use a registered Double-Opt-in procedure. This means that, after subscribing, you will receive an email asking you to confirm your registration. This confirmation is necessary to prevent anyone from registering with foreign email addresses. Newsletter subscriptions are recorded to demonstrate the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address. Any changes to your stored data by the service provider are also recorded. The purpose of this procedure is to be able to demonstrate your registration and, if necessary, clarify any potential misuse of your personal data.
To subscribe to the newsletter, simply enter your e-mail address. The provision of further data is voluntary and is used to address you personally. After your confirmation, we will save your e-mail address for sending the newsletter. The sending of the newsletter and performance measurement are based on your consent if you have subscribed.
b.If you receive a newsletter, notification and/or marketing without subscribing, we do so on the basis of our legitimate interest for marketing and to inform you about our products and services.
c.To stop receiving the newsletter, you may withdraw your consent or object to receiving the newsletter at any time by clicking on the unsubscribe link provided in each newsletter email or by completing the DSR request form at the bottom left of this page.
8.Data Retention
We retain your personal data during the period of the customer relationship or for the legally required period after the termination of such relationship or agreement, in order to defend our legal claims, protect and enforce our rights, or comply with laws and regulations. In general, the legal retention period for documents important for tax purposes (such as accounting receipts) is ten (10) years, while other documents that may be considered as business or commercial transaction documents are retained for six (6) years.
9.Social media portals
a. We are represented on social media and employer review portals listed below. These presences are operated exclusively by the respective provider. They serve to communicate directly with customers, interested parties, and users. If you contact us through our social media channels, we process the personal data you provide, as well as any personal data necessary to process your request. To the extent that you have given consent to the operators of the respective social media platforms (e.g., by checking an opt-in box), the processing is carried out based on your consent. You can withdraw your consent at any time with the operator of the respective platform, with effect for the future.
b.When you visit our social media pages, your user data is recorded and provided to us by the operator. The exact types of data differ from provider to provider, but generally include the following information:
Followers: number and profiles stored; information on growth and development in a defined time frame.
Reach: number of people who see a specific contribution; number of interactions with a contribution. From this you can deduce, for example, which contents are better received by the community than others. For example, number of people viewing a specific contribution; number of interactions with a contribution.
Ad performance: how many people did a contribution or paid advertisement reach and have interacted with it?
Demographics: average age of visitors, gender, location, language.
c. Since our social media channels are operated by the respective social network providers, there may be additional use of your personal data by the respective operator, over which we have no control. This often involves the recording of your IP address, the creation of static evaluations, and the processing of further information stored in the form of cookies. We have no influence over the generation and presentation of this personal data, and we cannot deactivate this feature or prevent the processing of personal data.
d.The assertion of data subject rights and requests can be more effectively addressed directly to the platform providers, as only they have access to your personal data and can take immediate action and provide information. If our cooperation is required for this, we will support you in asserting your rights as a data subject.
e.More detailed information on the terms of use of the respective platform as well as a detailed description of the further processing of the data and the respective possibilities of objection can be found on the pages of the providers.
10.Social media plugins
We have integrated plug-ins into our web services. These plug-ins are indicated by the respective button belonging to the service. With the help of the plug-ins, users can share or post links to the corresponding websites on social networks such as Facebook or Twitter or recommend the contents there. Through their active interaction with these plug-ins, (e.g. by clicking on the respective button or leaving a comment) this information is transmitted directly to the respective service and stored there.
When you visit one of our web services that contains an activated plugin, your browser establishes a connection with the servers of the respective service, which in turn transmits the content of the plugin to your browser, integrating it into the displayed page. In this way, information about your visit to our web services is transmitted to the respective service. We do not collect personal data through social plugins or about their use, and we have no influence over what data an activated plugin collects or how the provider uses it. It can be assumed that, at a minimum, the IP address and device-related information are collected and used. The service provider may also attempt to store cookies on the computer used. If you are logged into the respective service at the same time you visit our web services via your personal user account (e.g., through another browser session), the service provider may link the visit to our web services to your account.
11.Facebook Insights – “Facebook Fanpages”.
When you visit our Facebook page, your IP address, among other information, is collected and stored on your device in the form of cookies. This information will be used to provide us, as the operator of the Facebook page, with statistical information about the use of Facebook. We can access these statistics through Facebook’s “Insights.” These statistics are collected and provided exclusively by Facebook. As page operators, we have no influence over their generation and presentation. We cannot stop or prevent their generation and data processing. You can find more information about Facebook’s “Insights” here: https://www.facebook.com/help/pages/insights. The following information will be provided to us by Facebook through “Insights”: page views, likes, page activities, reach, impressions, video views, clicks, and reactions to posts, post reach, comments, shared content, responses, gender ratio, regional distribution of users (origin based on country and city), language, store opens and clicks, clicks on the address and phone number. The operation of this Facebook page and the processing of the personal data of users resulting from it are based on our legitimate interest in informing and interacting with users and visitors of our Facebook page.
12.Cookies
a.In addition to the categories of data mentioned above, we use cookies to make the experience of visiting our website as user-friendly as possible and to enable you to make use of certain functions. Cookies are small text files that are stored on your browser’s delegated hard drive, through which certain information flows to the person setting the cookie (in this case us). Cookies are used to improve the user experience and the effectiveness of our website.
b.This website uses the following types of cookies:
Transient Cookies – Transient cookies are automatically deleted when you close your browser. These are mostly session cookies, which store a so-called “session ID”, which allows you to assign different queries within your browser during a particular session. This can be used to identify your device when one repeatedly visits a website during a session. These cookies are deleted once the session or browser window is closed. This is a non-paid website.
Persistent Cookies – Persistent cookies allow the website to remember your information and settings on your next visit. This provides you with faster and more convenient access to the website, as you do not have to change the language settings again, for example. How long the cookie remains on your device depends on the duration or expiration date of the respective cookie and your browser settings. These cookies are automatically deleted after a certain period of time which may vary from cookie to cookie. Persistent cookies can be deleted through your browser’s security settings at any time.
c.Depending on the type of cookie, we use cookies on the basis of our legitimate interests (technically necessary cookies) or on the basis of your presumed consent (opt-in cookies), depending on your selection of the cookie banner displayed when you access the website. You can also configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. This may result in a functional limitation of our offers and our website.
13.Updates
This privacy notice may undergo modifications, changes or updates derived from new legal requirements; from our own needs for the products or services we offer; from our privacy practices; from changes in our business model, or from other causes. For this reason, we encourage you to regularly reread this Privacy Policy. This privacy policy is effective as of the date indicated at the end of the document.
We commit to keep you informed about the changes that this privacy notice may undergo, through the appearance of the notice of changes that will be made available on the website itself.
