AURAMIP Intellectual Property logo - Premium IP attorney services in Mexico for trademarks, patents and copyright
+52 55 59 54 74 06

Privacy Notice

Last updated: November 30, 2025

1. Identity and Contact Details of the Data Controller

  • Legal name: Cristian Orta Corona
  • Trade name: AURAMIP INTELLECTUAL PROPERTY
  • Address: Joaquín Velázquez de León #8, Suite 403, San Rafael, Cuauhtémoc, ZIP 06470, Mexico City
  • Email: coc@auramip.com
  • Phone: +52 55 5954-7406
  • Website: https://auramip.com/

Person responsible for personal data processing: Cristian Orta Corona

2. What Personal Data Do We Collect?

When you use our website or request our professional services, we may collect the following types of personal data:

2.1 Data you provide directly

Identification data:

  • Full name
  • Email address
  • Phone number
  • Company or legal entity (if applicable)
  • Position or title (if applicable)

Contact data:

  • Mailing address
  • Mobile phone number
  • Corporate or personal email

Professional data:

  • Information about intellectual property projects
  • Details of legal consultations
  • Documents related to trademarks, patents, copyrights, or other IP assets
  • Corporate information relevant to legal services

2.2 Data we collect automatically

Browsing data:

  • IP address
  • Browser type
  • Operating system
  • Pages visited on our website
  • Date and time of access
  • Internet service provider
  • Referring URL

Cookies and similar technologies:

  • We use analytics cookies to improve user experience
  • Preference cookies to remember your settings

3. Purposes of Personal Data Processing

We process your personal data for the following purposes:

3.1 Primary Purposes (Necessary for service delivery)

✓ Provision of legal services: Provide specialized advice on intellectual property, including registration of trademarks, patents, copyrights, designations of origin, geographical indications, and other related services.

✓ Communication: Respond to your inquiries, information requests, and maintain communication related to contracted services.

✓ Administrative management: Processing requests, drafting contracts, billing, and payment management.

✓ Compliance with legal obligations: Comply with obligations established under applicable Mexican law, including tax, commercial, and professional obligations.

✓ Protection of rights: Exercise and defend the data controller's rights when necessary.

For these purposes, your additional consent is not required, as they are necessary for the provision of the requested service.

3.2 Secondary Purposes (Require your consent)

☐ Marketing and communications: Send information about our services, IP-related news, blog articles, case studies, and educational content.

☐ Analytics and improvement: Analyze website usage to improve our services and user experience.

☐ Market research: Conduct studies on our clients' needs to develop new services.

For these secondary purposes, you may refuse processing by indicating so on the contact form or by sending an email to coc@auramip.com. Refusal for these purposes will not be grounds for denying the requested services.

4. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your experience. You can configure your browser to reject cookies, although this may affect some site functionality.

Types of cookies we use:

Cookie Type Purpose Duration Requires consent?
Strictly necessary cookies Basic site operation Session No

For users in the European Union: We comply with the ePrivacy Directive and GDPR. You can manage your cookie preferences through the consent banner that appears when visiting our site.

5. Legal Basis for Processing (GDPR)

For visitors from the European Union, we process your personal data under the following legal bases:

  • Performance of contract: When processing is necessary to provide requested services
  • Consent: When you have given express consent for specific purposes
  • Legitimate interest: To protect our rights and improve our services
  • Legal compliance: To comply with applicable legal obligations

6. Data Sharing and Transfers

6.1 Who do we share your data with?

Your personal data will NOT be sold, rented, or transferred to third parties without your consent, except in the following cases:

Competent authorities:

  • Mexican Institute of Industrial Property (IMPI)
  • National Copyright Institute (INDAUTOR)
  • Tax authorities (SAT)
  • Other authorities when legally required

Service providers:

  • Hosting and cloud storage providers
  • Payment processors
  • Email and CRM services

All our service providers are contractually obligated to maintain the confidentiality of your data.

6.2 International data transfers

Some of our service providers may be located outside Mexico or the European Union. In these cases, we ensure that the necessary safeguards are implemented:

  • For the EU: We use Standard Contractual Clauses (SCCs) approved by the European Commission
  • For Mexico: We comply with the requirements of the Federal Law on the Protection of Personal Data Held by Private Parties

7. ARCO Rights and Other Data Subject Rights

7.1 For users in Mexico

Under Mexican law, you have ARCO rights (Access, Rectification, Cancellation, Opposition):

  • ACCESS: Know what personal data we hold about you and what we use it for.
  • RECTIFICATION: Request correction of your personal data if it is outdated, inaccurate, or incomplete.
  • CANCELLATION: Request the deletion of your personal data from our databases when you consider that it is not being used in accordance with the principles and obligations of the law.
  • OPPOSITION: Object to the processing of your personal data for specific purposes.
  • WITHDRAWAL OF CONSENT: Withdraw the consent previously given for the processing of your personal data.
  • LIMITATION OF USE AND DISCLOSURE: Request that we limit the use or disclosure of your personal data.

7.2 For European Union users (GDPR)

In addition to ARCO rights, EU residents have:

  • Right to data portability: Receive your data in a structured format and transfer it to another data controller
  • Right not to be subject to automated decisions: Including profiling
  • Right to file a complaint: With the data protection authority of your country

7.3 How to exercise your rights

To exercise any of these rights, you can:

Request requirements:

  • Full name of the data subject
  • Address or email to receive a response
  • Copy of official identification (passport, INE, or equivalent)
  • Clear description of the right you wish to exercise
  • Any document that helps locate your data

Response timeframe:

  • Mexico: 20 business days
  • EU: 1 month (extendable to 3 months in complex cases)

8. Data Retention Period

We will retain your personal data for as long as necessary to fulfill the purposes described in this notice, unless there is a legal obligation to retain it longer.

General timeframes:

  • Active client data: For the duration of the contractual relationship + 10 years (in accordance with tax and commercial obligations)
  • Prospect data: 2 years from last contact
  • Marketing data: Until you withdraw your consent

After these periods, we will delete or anonymize your data.

9. Security Measures

We implement administrative, technical, and physical security measures to protect your personal data:

Technical measures:

  • SSL/TLS encryption on all communications
  • Firewalls and intrusion detection systems
  • Encrypted backups
  • Restricted access through authentication

Organizational measures:

  • Confidentiality policies for employees
  • Data protection training
  • Incident response procedures
  • Contracts with providers that guarantee security

In case of a security breach:

  • Mexico: We will notify the Ministry of Anti-Corruption and Good Governance when applicable
  • EU: We will notify the supervisory authority within 72 hours
  • We will inform affected data subjects when there is a high risk to their rights

10. Modifications to This Privacy Notice

We reserve the right to modify this Privacy Notice at any time. Modifications will be available at:

Last updated: November 30, 2025

11. Consent

For users in Mexico:

By providing your personal data through our website, contact forms, or any other means, you accept and consent that your data be processed in accordance with the terms of this Privacy Notice.

If you do NOT want your data to be used for secondary purposes (marketing, analytics, etc.), you can indicate this when providing your data or later through an express request.

For European Union users:

We comply with GDPR. Your consent will be requested specifically, in an informed and unambiguous manner for each purpose that requires it. You can withdraw your consent at any time.

12. Supervisory Authority and Procedures

12.1 For residents of Mexico

Competent authority: Ministry of Anti-Corruption and Good Governance

Procedure: If you believe your right to personal data protection has been violated, you can file a complaint with the competent authority.

12.2 For residents of the European Union

You have the right to file a complaint with the data protection authority of your country:

  • Spain: Spanish Data Protection Agency (AEPD)

13. Use of the Site by Minors

Our services are intended for persons over 18 years of age. We do not intentionally collect data from minors. If a parent or guardian discovers that their minor child has provided us with personal data, they should contact us immediately so we can proceed with deletion.

14. Links to Third-Party Sites

Our website may contain links to external sites. We are not responsible for the privacy practices of these sites. We recommend that you read their privacy notices.

15. Contact

For any questions, comments, or to exercise rights related to this Privacy Notice:

  • Email: coc@auramip.com
  • Phone: +52 55 5954-7406
  • Address: Joaquín Velázquez de León #8, Suite 403, San Rafael, Cuauhtémoc, ZIP 06470, Mexico City
  • Business hours: 9:00 AM to 7:00 PM, Monday to Friday

16. Acceptance and Consent

  • ☐ I accept the processing of my personal data for primary purposes (necessary for service delivery)
  • ☐ I accept the processing of my personal data for secondary purposes (marketing, analytics, service improvement)
  • ☐ I accept receiving commercial communications by email
  • ☐ I accept the use of analytics and preference cookies

Date of preparation: November 30, 2025
Version: 1.0
Data Controller: Cristian Orta Corona

Additional Information for GDPR Compliance

Automated processing and profiling: We DO currently carry out automated processing or profiling of personal data (Web Scraping).

Right to file a complaint: EU residents may file a complaint with their national data protection authority if they believe that the processing of their data violates GDPR.

This Privacy Notice has been prepared in accordance with:

  • Federal Law on the Protection of Personal Data Held by Private Parties (Mexico, 2025)
  • General Data Protection Regulation – GDPR (EU 2016/679)
  • ePrivacy Directive (EU)

For more information about our intellectual property services, visit https://auramip.com/.