Privacy Notice

Laboratorio JABA, S.A. de C.V. (hereinafter “JABALAB”) is responsible for the use and protection of your personal data, in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and other applicable regulations.

Company name

Laboratorio JABA, S.A. de C.V.

Address

Blvd. Garita de Otay No. 750, Frac. Garita de Otay, Tijuana, B.C., Mexico

Privacy contact

[email protected]

Phone

+52 (664) 623-1937

We collect personal data when you provide it to us directly (for example, through our forms, by email or by phone), when your company hires our services, or when you take part in an assessment or course we carry out at your workplace.

Psychosocial risk factor assessments under NOM-035-STPS-2018 may collect data considered sensitive, such as information about severe traumatic events experienced at work or aspects related to your emotional well-being and health.

• We only process it with your express written consent (including by electronic means), which is requested before you answer the questionnaires.
• Your individual answers are confidential. The workplace receives results under the terms set out in NOM-035, generally aggregated by area or department.
• Only authorized personnel bound by confidentiality obligations have access to this information.

We do not sell or rent your personal data. We only share it in the following cases, which the law permits without your consent because they are necessary to provide the service or to meet legal obligations:

• Competent authorities (STPS, Ministry of Economy, SENER, SAT or others), when required by regulations or requested through a justified order; for example, the registration of DC3 certificates.
• Mexican Accreditation Entity (EMA) and assessment bodies, during accreditation audits, under confidentiality obligations.
• The company that hired the service, regarding the results of the assessments carried out at its workplace, under the terms of the applicable standard.

We may also rely on providers that process data on our behalf (for example, email, web hosting or electronic invoicing services). These providers act as processors, are contractually bound to protect your information and may not use it for their own purposes.

For statistical measurement of the site we use Google Analytics, by Google LLC, which acts as a processor and handles browsing data on servers that may be located outside Mexico (mainly in the United States), in accordance with its data processing terms and its privacy policy. We do not share with Google the data you send us through the forms.

You have the right to know and decide about the use of your personal data:

How to exercise them

1. Send your request Write to [email protected] with the subject “ARCO rights request”, stating your name, a way to reply to you, the right you wish to exercise and a clear description of the data involved. Attach an official ID (or, if you act on someone's behalf, the document that proves it).
2. We respond We will let you know whether your request is admissible within a maximum of 20 business days from the date we receive it. If information is missing, we will ask you for it within the first 5 business days.
3. We carry out your request If admissible, we will apply it within the 15 business days following our response. Exercising your rights is free of charge; only justified shipping or reproduction costs may apply.

You may withdraw the consent you have given us to process your data at any time, following the same procedure as for ARCO rights. Please note that we may not always be able to act on the withdrawal immediately, since a legal obligation may require us to keep processing your data, and that withdrawing consent may mean we can no longer provide the service you requested.

• Ask to be added to our internal exclusion list by writing to [email protected]; we will stop sending you promotional communications.
• Register with the Public Registry to Avoid Advertising (REPEP) of Mexico's Federal Consumer Protection Agency (PROFECO) to limit advertising calls and messages.
• Every informational email we send you will include an easy way to unsubscribe.

This site uses Google Analytics to learn, statistically, how many people visit it and how they use it. To do so it places analytics cookies in your browser. We do not use advertising cookies or identify visitors, and Google Analytics does not log or store your full IP address.

How to disable analytics

• With the button above, we stop sending data about your visits to Google Analytics from this browser.
• You can also install the Google Analytics opt-out browser add-on, or block or delete cookies in your browser settings.
• Disabling analytics does not affect how the site or the forms work.

Fonts and icons are served from our own server. When you submit a form, your data travels encrypted to our API (api.jabalab.com), which temporarily logs your IP address to prevent automated submissions (spam). The blog pages fetch articles and their images from our content service (api.perender.com); those requests do not send any of your personal data, only the technical data inherent to any internet connection, such as your IP address.

As a laboratory accredited under NMX-EC-17025-IMNC-2018 (ISO/IEC 17025:2017), the confidentiality of our clients' information is an operating requirement. We apply administrative, technical and physical security measures to protect your data against damage, loss, alteration, destruction or unauthorized use, access or processing, including:

• Access restricted to authorized personnel bound by confidentiality commitments.
• Access control, backups and safekeeping of physical and electronic records.
• Encrypted connections on our sites and platforms.

In the event of a security breach that significantly affects your rights, we will inform you without delay so you can take the necessary measures.

We keep your data only for the time needed to fulfill the purposes described, as well as for the periods required by tax and labor regulations and by the traceability requirements of our accreditation. Once those periods end, the data is blocked and then securely deleted.

This notice may change due to legal changes, our own needs or changes in the services we offer. Any change will be published on this same page, at jabalab.com/en/privacy-notice, stating the date of the last update.

For any question, request or complaint related to your personal data, contact us:

If you believe your right to the protection of personal data has been violated, you may go to the competent data protection authority in Mexico to file the corresponding complaint.