PRIVACY NOTICE
beeside
Connecting operations to market
Federal Law on the Protection of Personal Data Held by Private Parties (amendment of November 14, 2025). Competent authority: Ministry of Anti-Corruption and Good Governance (SABG).
Version FA-PRIV-1.0
Mexico city, Mexico
Binding language: Spanish, The English version is a reference translation approved by Legal.
Operating entity: Innworking Networks, S.A. de C.V.
Latest update: 23 october 2026
IMPORTANT NOTICE: This Privacy Notice describes how Innworking Networks, S.A. de C.V., the operator of the beeside platform, collects, uses, retains, and protects its users’ personal data. By using beeside or accepting its Terms and Conditions through the enabled clickwrap mechanism, the data subject acknowledges having been informed through this Notice.
1. IDENTITY OF THE DATE CONTROLLER
The data controller responsible for processing your personal data is:
Legal entity name: Innworking Networks, S.A. de C.V.
Address: Vito Alessio Robles 280-1 Florida, Alvaro Obregón Cdmx México
Website: beeside.you
General contact email: contact@beeside.you
Privacy / ARCO email: privacy@beeside.you
2. PERSONAL DATA WE PROCESS
We process only the personal data necessary for the purposes set forth in this Notice:
2.1 Identification and Contact Information
• First and last name(s).
• Email address.
• Company or organization.
• Position or role.
• Country of origin or residence.
• Telephone number, when voluntarily provided by the data subject.
2.2 Expansion Project Data
• Responses to the First Assessment questionnaire.
• Target market or country of the project.
• Free-form information entered in open fields of the Platform.
• Documents uploaded during the FA or Premium service.
• Data relating to the investment, expansion, or establishment project.
• Content generated in the Operation Hub: chats, documents, tasks, and progress updates.
2.3 Technical and Browsing Data
• IP address.
• Device type and operating system.
• Browser identifier.
• Access and usage logs.
• Cookies and tracking technologies, in accordance with Section 9.
2.4 Billing and Payment Data (Premium, When beeside Bills Directly)
• Name of the data subject or legal entity name.
• Federal Taxpayer Registry (RFC) number or equivalent tax identifier.
• Tax address.
2.5 Data We Do Not Intentionally Collect
beeside does not intentionally request sensitive personal data. If a data subject voluntarily provides such data in an open field, beeside will process it using the enhanced safeguards required by law.
3. PURPOSES OF PROCESSING
3.1 Primary or Necessary Purposes
3.2 Secondary Purposes
4. LEGAL BASIS FOR PROCESSING
5. TO WHOM WE TRANSFER YOUR DATA
5.1 Technology providers- Data processors
beeside uses technology providers that process data on behalf of and under the instructions of beeside. The complete inventory is included in Addendum II. It currently operates on Google Cloud Platform and Google Workspace infrastructure, both subject to the data processing agreements of Google LLC.
5.2 Authorized Partners and Specialists of the Hive
When the Client purchases a Premium service, beeside may share project information with the Authorized Partners and Specialists involved, in accordance with Clause 7 of the T&C and Section 6 of this Notice.
5.3 Goverment Authorities and Legal Compliance
beeside may disclose data when required by law, a request from a competent authority, or a court order.
5.4 Business Succession
In the event of a merger, acquisition, or restructuring, data may be transferred to the successor, subject to the same obligations under this Notice.
6.THE HIVE- DATA PROCESSING IN PREMIUM PROJECTS
6.1 Before Premium: Full Project Protection
Project information is not shared with Partners, Specialists, or providers within The Hive while the Client remains in the pre-Premium stage. Without exception.
6.2 During Premium: Authorized Sharing
By accepting the Terms and Conditions, the Client grants advance authorization—effective only upon purchasing Premium—to share project information with the Authorized Partners and Specialists involved in its execution, in accordance with Clause 7 of the T&C.4
6.3 Legal role of the Partner or Specialist
7. TECNOLOGY PROVIDERS
beeside uses the following principal technology providers, which may have access to personal data in their capacity as data processors:
8.INTERNATIONAL DATA TRANSFERS
beeside’s principal technology providers—Google Cloud Platform and Google Workspace—are operated by Google LLC, a company headquartered in the United States of America. The processing of data by these providers constitutes the transmission of personal data to a foreign country.
Such transmission takes place in the providers’ capacity as data processors, pursuant to the Google Cloud Data Processing Amendment and the Google Workspace Data Processing Amendment, which include safeguards providing a level of protection equivalent to that established under Mexican law, in accordance with Article 37, section VI, of the LFPDPPP.
For users located in the European Union or the EEA, transfers to Google LLC are covered by the European Commission’s Standard Contractual Clauses (SCCs), executed through the aforementioned Google data processing agreements. Addendum I to this Notice also applies.
9. DATA RETENTION PERIODS
10.SECURITY MEASURES
Innworking Networks, S.A. de C.V. implements reasonable administrative, technical, and physical measures to protect personal data, including role-based access controls, user authentication, encryption in transit and at rest where technically feasible, and periodic security reviews.
No Internet-connected system can guarantee absolute security. beeside will not make representations implying complete protection against incidents.
10.1 Procedure in the Event of a Security Breach
In the event of a breach that significantly affects the rights of the data subject, beeside will provide notice as promptly as possible, specifying the nature of the incident, the compromised data, the measures taken, and the contact channel.
11. YOUR RIGHTS- ARCO RIGHTS AND ADDITIONAL MECHANISMS
11.1 How to excercise Your Rights
Submit your request to the privacy/ARCO email address specified in Section 1. Your request must include your full name, official identification, a description of the right you wish to exercise, and the data to which it relates.
11.2 Response Periods
Response to request: 20 business days from receipt of a complete request.
Implementation of response: An additional 15 business days from notice of a favorable determination.
Extension: Both periods may each be extended once for an equal period when justified.
Denial: beeside will provide written notice of the reasons and the procedure for challenging the decision before the SABG.
12. CONCENT TO COMMERCIAL COMMINICATIONS
Acceptance of the Terms and Conditions and acknowledgment of this Notice do not constitute authorization to receive commercial communications. Consent to such communications is managed under the beeside Commercial Communications Policy (FA-COM-1.0), through an independent, separate, and unchecked-by-default mechanism, in accordance with Section 3.2 of this Notice.
13. MINORS
beeside is not intended for individuals under 18 years of age. If beeside becomes aware that a minor has provided data without the legally required authorizations, it will delete that information in accordance with the time periods set forth in this Notice. Parents or legal guardians may request deletion through the privacy contact channel in Section 1.
14. CHANGES TO THIS PRIVACY NOTICE
beeside may amend this Notice when necessary. Each version will be identified by its version number and effective date (e.g., FA-PRIV-1.0, FA-PRIV-1.1). Material changes will be communicated with reasonable advance notice.
15. LANGUAGE AND JURISDICTION
This Notice is published simultaneously in Spanish and English. The Spanish version (FA-PRIV-1.0) is legally binding. The English version (FA-PRIV-1.0-EN) is a reference translation; in the event of any discrepancy, the Spanish text shall prevail.
Disputes concerning this Notice shall be governed by the laws of the United Mexican States and submitted to the courts of competent jurisdiction in Mexico City, without prejudice to any mandatory provisions applicable under the data subject’s jurisdiction.