Privacy Notice
Nov 2026
This document describes the processing of personal data for which Edelon Technologies is the controller: the processing that takes place when you visit this site or contact us. It does not cover the processing that an institution carries out with our software, where Edelon acts as a processor and makes no decisions about the data.
Who the controller is
Edelon Technologies, incorporated in Mexico, develops decision software for public institutions and for defense. It is the controller of the processing described in this notice and the party that determines its purposes and means.
What this notice covers and what it does not
It covers the processing in which Edelon decides why and how data is used: your browsing of this site and the communications you initiate with us.
It does not cover the data that an institution processes using Edelon’s software. In those deployments the institution is the controller—it defines the purposes, legal basis and retention—and Edelon acts solely as a processor, following its instructions. If you wish to exercise rights over data that an institution processes with our software, you must contact that institution, which is the party able to resolve your request.
This distinction is not a technicality: it is the same boundary that Edelon upholds in Architecture of Limits. Operating an institution’s infrastructure does not make the provider the owner of its information.
What data is processed and where it comes from
Data you provide. When you use the «Get started» form, your browser opens your own email client with the message already drafted: name, email address, organization, job title, country, phone number if you give one, and the description you write. The site does not send or store that information on any Edelon server: the data reaches us only when you decide to send the email, and from that point on it is handled like any other communication received.
Technical connection data. The infrastructure provider that serves this site logs the IP address, user agent, timestamp and requested resource for purposes of delivery, security and abuse prevention.
Third-party data. Edelon does not acquire contact databases or enrich profiles with information from data providers.
This site includes no third-party analytics, advertising or profiling; the details are set out in the Cookie Policy.
Purposes and legal basis
Responding to your communication. Answering inquiries, evaluating a request and maintaining the resulting conversation. Legal basis: the pre-contractual relationship that you initiate and the legitimate interest in responding to those who write to us.
Operating and protecting the site. Delivering the pages, preventing abuse and detecting incidents. Legal basis: legitimate interest in the security of the service.
Complying with legal obligations. Retaining or providing information when required by law or by a competent authority. Legal basis: compliance with a legal obligation.
Edelon does not send mass marketing communications, does not engage in advertising profiling and does not make automated decisions with legal effects concerning visitors to this site.
With whom data is shared
Edelon does not sell, rent or assign personal data. The following may have access to it:
- Infrastructure and email providers, as processors, solely to provide the contracted service and subject to a duty of confidentiality.
- Competent authorities, upon a duly grounded and reasoned request in accordance with applicable law.
Retention
Communications are retained for the duration of the conversation and, thereafter, for the period necessary to meet legal obligations or to address potential claims. The infrastructure provider’s technical logs follow its operational retention periods, which are oriented toward security and diagnostics. When data is no longer necessary for the purpose that justified it, it is deleted.
International transfers
The infrastructure that serves this site and the email service may operate from servers located outside Mexico, including in the United States. Where this involves an international transfer, Edelon requires those providers to provide contractual safeguards equivalent to those imposed by applicable law, including standard contractual clauses where appropriate.
Minors
This site is intended for people acting in a professional or institutional capacity and is not directed at minors. Edelon does not knowingly collect data from minors; if it discovers that it has received such data without a legal basis, it will delete it. If you are responsible for a minor and believe that the minor provided us with data, write to us at the address at the foot of this notice.
Your rights
In Mexico, under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (Federal Law on the Protection of Personal Data Held by Private Parties), you may exercise the derechos ARCO (ARCO rights): to access your data, to request its rectification when it is inaccurate, to request its cancellation when you consider that it is not required, and to object to a specific processing activity. You may also revoke your consent where consent is the applicable legal basis, and limit the use or disclosure of your data.
In the European Economic Area and the United Kingdom, you also have the rights to erasure, to restriction of processing, to data portability and to object to processing based on legitimate interest, under the GDPR.
Exercising these rights is free of charge and may not give rise to discriminatory treatment.
How to exercise them
Write to the address at the foot of this notice, stating which right you wish to exercise and with respect to which data. Edelon may request reasonable information to verify your identity, solely for that purpose, and will respond within the time limits set by applicable law.
If your request concerns data processed by an institution through Edelon’s software, please say so: we will confirm who the controller is and will forward the request to the extent that this falls to us as processor.
Current phase and planned processing
Edelon is in its build phase. This notice describes the processing that exists today, which is deliberately limited; it does not describe a permanent limit on the company.
As operations advance, processing activities that are inactive today are expected to be added: audience measurement for the site, management of contacts and business opportunities, communications to people who request them, registration of attendees at sessions or events, and applicant data once hiring takes place. Each will require its own legal basis, retention period and, where applicable, consent.
Edelon makes the following commitment: no new processing will be activated before this notice declares it. The date in the heading makes it possible to verify which version was in force at any given time, and previous versions are kept for reference.
Supervisory authority
If you believe that your request was not properly addressed, you may refer the matter to the competent authority: in Mexico, the organismo garante (guarantor authority) for the protection of personal data; in the European Economic Area or the United Kingdom, the data protection authority of your country of residence.
Changes
This notice will be updated when the purposes, the means or the applicable law change, and the date in the heading will reflect the latest revision. When a change substantially affects individuals’ rights, notice of it will be given prominently before it is applied.