Privacy Notice

Last updated: March 10, 2026

1. Identity and Address of the Controller

Kanaa (hereinafter "Kanaa"), in its capacity as responsible for the processing of personal data ("Controller"), makes available to you this Privacy Notice in compliance with the provisions of the Federal Law of Personal Data in Possession of Individuals, its Regulations and the Guidelines of the Privacy Notice. For any questions regarding the processing of your data, please contact us at: legal@kanaa.mx

2. Personal Data Collected

Kanaa, in its capacity as Controller, may collect one or more of the following Personal Data: a. Identification Data: name, home address, date of birth, age, nationality, CURP, RFC, telephone number (landline or mobile), email, copy of official identification and copy of proof of address. b. Financial or Property Data: bank account and credit card information, securities and real estate information, and any financial information necessary to fulfill the processing purposes set forth in this Privacy Notice.

3. Primary Purposes of Data Processing

a. Users / Customers: Personal data may be used for: (i) identification and verification of identity; (ii) sending information on use of real estate, lodging, acquisition of products and/or contracting of services; (iii) delivering information on products and services; (iv) showing advertising and announcements related to services and products; (v) attending to doubts, complaints and suggestions; (vi) processing payments; (vii) invoicing payments by any means; (viii) communicating offers through the account; (ix) making online payments authorized by telephone or other means; and (x) requesting, contracting, changing or canceling services offered by Kanaa or by third parties. b. Property Owners: Personal data may be used for: (i) performing audits on properties; (ii) preparation of a real estate catalog within a technology platform; (iii) reproducing photographs, videos, plans, diagrams, sketches, renderings and any material of the properties; (iv) advertising and/or offering properties for rent or use; and (v) complying with regulatory obligations, including the prevention of money laundering and financing of terrorism.

4. Secondary Purposes of Data Processing

Personal data may be used for: (i) offering promotions and events; (ii) conducting market research and analysis; (iii) understanding consumption patterns or trends; (iv) receiving printed advertising or through electronic media, including online marketing or telemarketing communications; and (v) participating in surveys. To opt out of secondary processing, contact: legal@kanaa.mx

5. Sensitive Personal Data

The Controller does not collect or process Sensitive Personal Data in the ordinary course of its activities. In the event that Sensitive Personal Data is collected and processed, such data will be collected, maintained and processed with strict security and confidentiality.

6. Transfer of Personal Data

By accepting this Privacy Notice, the Data Subject consents to the Controller transferring Personal Data to any third party, whether domestic or foreign. Third parties are obliged to maintain confidentiality and comply with this Privacy Notice. The Controller may transfer Personal Data to companies in the same business group. No authorization is required for transfers falling under Article 37 of the Federal Law on Personal Data in Possession of Individuals. To refuse transfer, contact: legal@kanaa.mx

7. Use and Disclosure Limitations

Physical, electronic and administrative procedures limit the use or disclosure of data. Personal Data will be processed exclusively by persons who perform activities requiring knowledge of such data. All data is safeguarded under the highest security standards. To limit the use of your data, contact: legal@kanaa.mx. Data Subjects may also register with REPEP (PROFECO's registry).

8. ARCO Rights

Data Subjects have the right to Access, Rectify, Cancel or Object to the processing of their personal data, and to revoke consent. Requests must include: full name, address, documents proving identity, and a clear description of the personal data in question. Kanaa will respond within 20 calendar days; changes will be effective within 15 calendar days of notification. Kanaa may deny access in the following cases: (i) the applicant is not the Data Subject or their representative; (ii) data is not found in the database; (iii) the rights of a third party are injured; (iv) there is a legal impediment or resolution of a competent authority; (v) rectification, cancellation or opposition has been previously made. Data Subjects may initiate protection procedures before INAI within 15 calendar days of an unsatisfactory response. Submit your request to: legal@kanaa.mx

9. Revocation of Consent

To revoke your consent, send an email to: legal@kanaa.mx. Third parties with access to the data will also be informed of the revocation.

10. Personal Data Protection Unit

You may contact our Personal Data Protection Unit at: legal@kanaa.mx. For INAI inquiries: http://inicio.inai.org.mx

11. Modifications to the Privacy Notice

Modifications to this Privacy Notice will be made available on the Kanaa website. Data Subjects are responsible for periodically reviewing the Privacy Notice.

12. Use of Cookies

The correct functioning of the Controller's sites, applications and platforms requires the use of cookies. Cookies are small data files stored on the user's hard drive when browsing a specific Internet site, and allow the exchange of status information between the site and the user's browser, including session identification, authentication, user preferences, and any data stored by the browser. In most browsers, cookies are automatically accepted by default, although Data Subjects can adjust their browser preferences to accept or reject cookies. Disabling cookies may disable various functions or cause incorrect display. Cookie information can be deleted at the end of each browser session.

13. Third-Party Pixels and Cookies

When you visit our website, log in, register or open an email, online data partners or vendors may use cookies, ad beacons, and similar technologies to associate these activities with information they or others have about you, including your email address. Marketing communications may then be sent to these email addresses. You may opt out by visiting: https://www.smartrecognition.com/database-opt-out/. To opt out of email marketing from a specific brand, click the "unsubscribe" link in the footer of any marketing email.
Política de privacidad | Kanaa | Kanaa