This is an English translation provided for convenience. If there is any discrepancy, the Spanish version prevails.
1. Data controller
The controller of your personal data is:
In this policy we refer to it as “the Firm”.
2. Legal framework
This policy is governed by article 66, paragraph 19, of the Constitution of the Republic of Ecuador, which recognizes the right to the protection of personal data; by the Organic Law on Personal Data Protection (LOPDP), published in the Fifth Supplement of Official Register No. 459 of May 26, 2021; by its General Regulations; and by the resolutions of the Superintendency of Personal Data Protection.
3. Data we process
Data you give us. When you write to us through the contact form, through the email box on this website, by email, by phone or by WhatsApp, we process the data you choose to share: your name, company, email address, phone number, the area of your inquiry and the content of your message. If you use the WhatsApp button on this website, before opening the conversation we ask for your name, email and WhatsApp number; those details reach us by email even if you then do not send the message. If you book a consultation online, we also process your position, the format, the date and time you choose and the details needed to issue the invoice: tax ID (RUC) or ID number, legal name, address and billing email.
Technical data. This website does not use advertising or analytics cookies. It only stores in your browser what it needs to work and, if you accept, the language you choose; the details are in our Cookie Policy. The website's hosting provider may log technical data about each visit, such as the IP address, the date and the page viewed, for security and operational purposes.
Sensitive data. We do not request sensitive data. Please do not include confidential information, health data or other sensitive data about yourself or others in your first message. If your matter requires it, we will process it once the Firm confirms it can take on your matter, with the safeguards the law requires.
4. Purposes
We use your data to:
- Answer your inquiry and arrange a meeting or call.
- Book the consultation you request, issue the corresponding electronic invoice and manage its payment.
- Check for conflicts of interest before accepting a matter.
- If you engage the Firm, provide the agreed professional services under the corresponding engagement agreement.
We do not use your data to send advertising, we do not sell it and we do not share it with third parties for commercial purposes.
5. Legal bases
Under article 7 of the LOPDP, we process your data on the following bases:
- Your consent, which you give by ticking the box on the form or by writing to us directly.
- Pre-contractual steps you request, such as the initial review of your inquiry, and, where applicable, the performance of the professional services agreement.
- Compliance with the Firm's legal obligations.
You may withdraw your consent at any time, without giving a reason. Withdrawal does not affect processing carried out before it.
6. Retention
If your inquiry does not lead to a professional relationship, we will keep your data for up to two (2) years from our last communication and then delete it.
If you become a client, we will keep your data for the duration of the professional relationship and, afterwards, for the periods required by law and by the limitation periods of any claims that may arise from it.
7. Providers and recipients
Only Firm personnel have access to your data. To operate, the Firm uses technology providers that act as data processors and may only use your data to provide their service to us:
- Google, for the Firm's email, the calendar in which consultations booked online are recorded, and the hosting of this website.
- Formspree, to receive messages from the contact form, the email box and the WhatsApp button, and forward them to our email.
If you choose to continue the conversation on WhatsApp, that service, provided by Meta Platforms, applies its own terms and privacy policy.
We may also disclose your data to public authorities when required by law or by a court order.
8. International transfers
The providers listed above store data on servers located outside Ecuador, mainly in the United States of America. When you send us a message through the form or by email, your data is transferred to those servers for the sole purpose of allowing the Firm to receive it and reply to you. The Firm chooses providers that apply internationally recognized security measures.
9. Security
We apply technical and organizational measures to protect your data, including access restricted to Firm personnel and the use of encrypted connections. In addition, all information you entrust to us is protected by the professional secrecy that governs the practice of law.
10. Your rights
Under the LOPDP, you have the right to:
- Be informed about the processing of your data.
- Access your data.
- Rectify and update it.
- Request its deletion.
- Object to its processing.
- Request its portability.
- Request the suspension of processing.
- Not be subject to decisions based solely on automated assessments.
How to exercise them. Write to us at notificaciones@olayalaw.com with the subject “Personal data protection”. Include your name, the right you wish to exercise and a means for us to verify your identity. There is no charge. We will reply within the fifteen (15) day period set by the LOPDP.
If you believe we have not handled your request properly, you may file a complaint with the Superintendency of Personal Data Protection.
11. Minors
This website is intended for people aged 18 and over. If an inquiry involves a minor, we ask that their legal representative write to us.
12. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. We will publish the version in force on this page with its date of last update.