1. Our Commitment to Privacy
Ternium is committed to protecting the privacy and personal data of employees, job applicants, customers, suppliers, visitors, users of its websites, and other individuals with whom it maintains a relationship.
This Privacy Notice describes how Ternium collects, uses, shares, stores, and protects personal data, as well as the rights data subjects have regarding such information.
By interacting with Ternium, using our services, accessing our websites, or providing your personal data, you acknowledge that you have been informed of the practices described in this Notice.
2. Who is responsible for the processing of personal data?
Personal data processing activities may be carried out by different companies within the Ternium Group, each acting as a controller, joint controller, or processor, as appropriate depending on the nature of the activity and the applicable legal requirements.
The Company's commitment to data protection is reflected in its corporate privacy and personal data protection policies.
3. What personal data may we collect?
Depending on the nature of your relationship with Ternium, we may collect and process the following categories of personal data:
Identification Data
- Full name.
- Identification document.
- Nationality.
- Date of birth.
Contact Data
- Address.
- Telephone number.
- E-mail address.
Professional Data
- Position.
- Employer company.
- Professional background.
- Résumé/CV and information related to job applications.
Access and Browsing Data
- IP address.
- Browser and device information.
- Access logs to our websites and systems.
- Cookies and similar technologies.
Security-Related Data
- Images captured through video surveillance systems.
- Access records to company facilities and assets.
In specific situations and where permitted by applicable law, we may process special categories of personal data in order to comply with legal, regulatory, employment, social security, health, or occupational safety obligations.
4. Why do we use personal data?
Personal data may be used for the following purposes:
Commercial Relationship Management
- Managing customers and suppliers.
- Contract administration.
- Processing orders, purchases, and sales.
- Responding to inquiries and requests.
Recruitment and Selection
- Evaluating applicants.
- Managing recruitment processes.
- Maintaining talent databases where authorization has been provided.
Corporate Communications
- Responding to inquiries and requests.
- Sending communications related to Ternium’s services and activities.
- Managing contact and service channels.
Physical and Asset Security
- Controlling access to facilities.
- Protecting employees, visitors, and company assets.
- Investigating and preventing incidents.
Compliance with Legal and Regulatory Obligations
- Responding to legal or regulatory requirements.
- Exercising and defending rights in administrative, judicial, or arbitration proceedings.
- Complying with labor, tax, social security, and other legal obligations.
Systems Operation and Security
- Ensuring the security of technological environments.
- Preventing fraud and unauthorized access.
- Detecting and responding to security incidents.
Improvement of Services and Digital Experience
- Developing and improving products and services.
- Conducting statistical and performance analyses.
- Enhancing user experience across our digital channels.
These purposes are aligned with the principles of necessity, transparency, and legitimate use of personal data established in the Company’s corporate guidelines.
5. Legal Bases for Processing
Ternium processes personal data based on the legal grounds provided under applicable legislation, including:
- Data subject consent.
- Compliance with legal or regulatory obligations.
- Performance of contracts or pre-contractual measures.
- Exercise of legal rights.
- Protection of life or physical integrity.
- Legitimate interests of Ternium or third parties, where applicable.
- Other legal bases provided under applicable law.
6. Sharing Personal Data
Ternium may share personal data when necessary to fulfill the purposes described in this Notice, including with:
- Companies within the Ternium Group.
- Service providers and business partners.
- Government authorities and regulatory bodies.
- Auditors, consultants, and external advisors.
- Third parties involved in contract execution or compliance with legal obligations.
Companies within the Ternium Group may share personal data with one another where necessary for internal administrative purposes, legal compliance, corporate security, human resources management, or the execution of legitimate business activities, always in accordance with applicable law and the principles set forth in this Notice.
Where appropriate, we require such third parties to implement adequate measures to protect personal data processed on our behalf.
7. International Data Transfers
As a global company, Ternium may transfer personal data to other countries where it operates or where its affiliates or service providers are located.
Where such transfers occur, appropriate measures will be adopted to ensure an adequate level of protection for personal data, in accordance with applicable legal requirements and through mechanisms designed to safeguard the rights of data subjects.
Such transfers will be carried out using appropriate contractual, organizational, or legal mechanisms to ensure an adequate level of protection for personal data.
8. Jurisdiction-Specific Information
The personal data processing activities carried out by Ternium are subject to the legal and regulatory requirements applicable in each jurisdiction where the Company operates.
Certain countries or regions may require additional information regarding the processing of personal data, the rights of data subjects, or the mechanisms available to exercise those rights.
Where applicable, Ternium may provide supplementary notices, annexes, or jurisdiction-specific statements, which shall form an integral part of this Privacy Notice.
9. How Long Do We Retain Personal Data?
Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, contractual, or legitimate business requirements.
Once the applicable retention period has expired, personal data may be deleted, anonymized, or securely retained where permitted or required by applicable law.
Retention periods may vary depending on the purpose of processing, applicable legal obligations, and Ternium’s legitimate interests in establishing, exercising, or defending legal rights.
10. Rights of Data Subjects
In accordance with applicable law, data subjects may exercise, among others, the following rights:
- Confirm the existence of processing of their personal data.
- Access their personal data.
- Correct incomplete, inaccurate, or outdated information.
- Request deletion of their personal data where applicable.
- Request data portability.
- Obtain information regarding third parties with whom their data has been shared.
- Withdraw previously granted consent.
- Request review of certain automated decisions, where applicable.
- Exercise any other rights provided by applicable law.
Where Ternium uses automated processes that produce significant effects on individuals, such processing will be carried out in accordance with applicable law and with due respect for the rights of data subjects.
11. How Can You Exercise Your Rights?
The Personal Data Protection Officer (DPO) plays a fundamental role within Ternium and is responsible for providing guidance and clarification regarding personal data processing, as well as serving as a point of contact with competent data protection authorities, where applicable.
If you wish to exercise any of the rights recognized under applicable law or submit a privacy-related inquiry, you may do so through Ternium’s Privacy Portal by clicking the link below:
Privacy Portal: Submit a Privacy Request
You will be required to specify the type of request, which may include:
- Access to personal data.
- Correction or update of personal data.
- Deletion of personal data where applicable.
- Objection to processing.
- Withdrawal of consent.
- Review of automated decisions.
- Data portability.
- Restriction of processing.
To process your request, Ternium may require additional information to verify your identity.
Responses and communications related to the exercise of rights will be managed through Ternium’s official privacy channels.
The Personal Data Protection Officer (Data Protection Officer – DPO) appointed by Ternium is Mr. Carlos Russell.
In addition, the official channel for privacy and personal data protection inquiries and requests is the Ternium Privacy Portal and the e-mail address privacidad@ternium.com
Furthermore, the Data Protection Officer (DPO) function within Ternium is responsible for providing guidance regarding privacy and personal data protection matters. Updated DPO contact information will remain available through Ternium’s official privacy channels.
12. How Do We Protect Your Data?
At Ternium, the protection of personal information is a priority. We adopt appropriate technical, organizational, and administrative measures to protect personal data against unauthorized access, loss, alteration, disclosure, or any unlawful or improper processing.
Our processes include the implementation of security controls, good governance practices, and mechanisms designed to preserve the confidentiality, integrity, and availability of personal information processed by the Company.
In the event of a security incident that may pose a significant risk or harm to data subjects, Ternium will adopt appropriate measures to manage and mitigate the incident and will provide any notifications required under applicable law.
We remain committed to privacy, transparency, and the continuous improvement of data protection measures in accordance with applicable legislation.
13. Cookies and Similar Technologies
Our websites may use cookies and similar technologies for the following purposes:
- Ensuring the proper functioning of services.
- Improving the browsing experience.
- Measuring website performance and usage.
- Remembering user preferences.
- Enhancing content and functionality.
Certain cookies may be managed by third parties that provide analytics, functionality, or security services for Ternium websites.
Additional information regarding the use of cookies can be found in our Terms and Conditions.
14. Changes to This Notice
This Privacy Notice may be updated periodically to reflect legal, regulatory, or operational changes.
The current version will always be available through Ternium’s official channels.