{"id":1264,"date":"2023-06-12T17:06:12","date_gmt":"2023-06-12T17:06:12","guid":{"rendered":"https:\/\/ccbabogados.com\/?page_id=1264"},"modified":"2023-07-05T14:18:03","modified_gmt":"2023-07-05T14:18:03","slug":"politica-de-proteccion-de-datos-personales-2","status":"publish","type":"page","link":"https:\/\/ccbabogados.com\/en\/politica-de-proteccion-de-datos-personales-2\/","title":{"rendered":"PERSONAL DATA PROTECTION POLICY"},"content":{"rendered":"<div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-1 nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\"  style='background-color: rgba(255,255,255,0);background-position: center center;background-repeat: no-repeat;padding-top:0px;padding-right:30px;padding-bottom:0px;padding-left:30px;'><div class=\"fusion-builder-row fusion-row\"><div  class=\"fusion-layout-column fusion_builder_column fusion_builder_column_1_1 fusion-builder-column-0 fusion-one-full fusion-column-first fusion-column-last 1_1\"  style='margin-top:0px;margin-bottom:20px;'><div class=\"fusion-column-wrapper\" style=\"padding: 0px 0px 0px 0px;background-position:left top;background-repeat:no-repeat;-webkit-background-size:cover;-moz-background-size:cover;-o-background-size:cover;background-size:cover;\"   data-bg-url=\"\"><style type=\"text\/css\"><\/style><div class=\"fusion-title title fusion-title-1 fusion-title-text fusion-title-size-one\" style=\"font-size:36px;margin-top:0px;margin-bottom:31px;\"><h1 class=\"title-heading-left\" style=\"margin:0;font-size:1em;\"><p style=\"text-align: center;\">PERSONAL DATA PROTECTION POLICY<\/p><\/h1><div class=\"title-sep-container\"><div class=\"title-sep sep-\" style=\"border-color:#e0dede;\"><\/div><\/div><\/div><div class=\"fusion-text\"><p style=\"text-align: left;\">CCBABOGADOS CIA. LTDA.<\/p>\n<p style=\"text-align: left;\">PERSONAL DATA PROTECTION POLICY<br \/>\n1.\tThe Company<br \/>\nCCBABOGADOS CIA. LTDA., hereinafter referred to simply as CCB ABOGADOS or the Company, is a company whose main purpose is to provide high-quality legal and accounting services, with expertise in advising clients from the private sector and public institutions in Ecuador. CCB ABOGADOS' client portfolio includes commercial and industrial companies in sectors such as technology and telecommunications, automotive, retail, education, non-governmental organizations, energy, construction, pharmaceuticals, among others.<br \/>\nCCB ABOGADOS has received several recognitions from different international legal directories in its areas of practice.<br \/>\n2.\tPurpose, Scope, and Users<br \/>\nCCB ABOGADOS is committed to complying with the Organic Law on Personal Data Protection, hereinafter referred to as LOPDP, its implementing regulations, and in general all the legal framework related to personal data protection in force in Ecuador. This policy establishes the basic principles by which CCB ABOGADOS processes personal data of its clients, suppliers, partners, employees, and third parties (who have direct links with CCB ABOGADOS), as well as the obligations of its employees, associates, and partners regarding the processing of personal data as defined in the LOPDP.<br \/>\nThis policy applies to the Company and related third parties who process personal data on its behalf and conduct business within the Ecuadorian territory or process personal data of individuals domiciled in Ecuador or abroad.<br \/>\nThe users of this document are all employees, permanent or temporary, associates, partners, and all professionals and\/or suppliers working on behalf of CCB ABOGADOS.<br \/>\n3.\tReference Documents<br \/>\na)\tThe Organic Law on Personal Data Protection - LOPDP, published in the Fifth Supplement of the Official Registry, No. 459, on May 26, 2021<br \/>\nb)\tGeneral Regulation of the Organic Law on Personal Data Protection.<br \/>\nc)\t Personal Data Protection Policy.<br \/>\nd)\tGeneral Manual of Processes of CCB ABOGADOS.<\/p>\n<p style=\"text-align: left;\">4.\tDefinitions<br \/>\nThe following definitions of terms used in this document come from Article 4 of the Organic Law on Personal Data Protection:<\/p>\n<p style=\"text-align: left;\">\u2022\tPersonal Data Protection Authority: An independent public authority responsible for supervising the application of this Law, its regulations, and the resolutions issued by it, in order to protect the fundamental rights and freedoms of natural persons regarding the processing of their personal data.<\/p>\n<p style=\"text-align: left;\">\u2022\tAnonymization: The application of measures aimed at preventing the identification or re-identification of a natural person without disproportionate efforts.<\/p>\n<p style=\"text-align: left;\">\u2022\tDatabase or file: Structured set of data, regardless of the form, mode of creation, storage, organization, type of support, treatment, processing, location, or access, whether centralized, decentralized, or functionally or geographically distributed.<\/p>\n<p style=\"text-align: left;\">\u2022\tConsent: The voluntary, specific, informed, and unequivocal expression of the will by which the data subject authorizes the data controller to process their personal data.<\/p>\n<p style=\"text-align: left;\">\u2022 Dato biom\u00e9trico: Dato personal \u00fanico, relativo a las caracter\u00edsticas f\u00edsicas o fisiol\u00f3gicas, o conductas de una persona natural que permita o confirme la identificaci\u00f3n \u00fanica de dicha persona, como im\u00e1genes faciales o datos dactilosc\u00f3picos, entre otros.<\/p>\n<p style=\"text-align: left;\">\u2022 Dato gen\u00e9tico: Dato personal \u00fanico relacionado a caracter\u00edsticas gen\u00e9ticas heredadas o adquiridas de una persona natural que proporcionan informaci\u00f3n \u00fanica sobre la fisiolog\u00eda o salud de un individuo.<\/p>\n<p style=\"text-align: left;\">\u2022 Dato personal: Dato que identifica o hace identificable a una persona natural, directa o indirectamente.<\/p>\n<p style=\"text-align: left;\">\u2022 Datos personales crediticios: Datos que integran el comportamiento econ\u00f3mico de personas naturales, para analizar su capacidad financiera.<\/p>\n<p style=\"text-align: left;\">\u2022 Datos relativos a la salud: datos personales relativos a la salud f\u00edsica o mental de una persona, incluida la prestaci\u00f3n de servicios de atenci\u00f3n sanitaria, que revelen informaci\u00f3n sobre su estado de salud.<\/p>\n<p style=\"text-align: left;\">\u2022 Datos sensibles: Datos relativos a: etnia, identidad de g\u00e9nero, identidad cultural, religi\u00f3n, ideolog\u00eda, filiaci\u00f3n pol\u00edtica, pasado judicial, condici\u00f3n migratoria, orientaci\u00f3n sexual, salud, datos biom\u00e9tricos, datos gen\u00e9ticos y aquellos cuyo tratamiento indebido pueda dar origen a discriminaci\u00f3n, atenten o puedan atentar contra los derechos y libertades fundamentales.<\/p>\n<p style=\"text-align: left;\">\u2022\tData Protection Officer: The natural or legal person without a dependent relationship who is responsible for advising, overseeing, and ensuring compliance with the obligations attributable to CCB ABOGADOS regarding personal data, as well as managing and provision of all instruments adopted to comply with the applicable rules and the application of good data management practices within the company. Additionally, this person will be responsible for the obligations and functions set out in this Manual.<\/p>\n<p style=\"text-align: left;\">\u2022\tRecipient: Natural or legal person who has been provided with personal data.<\/p>\n<p style=\"text-align: left;\">\u2022\tProfiling: Any processing of personal data that allows for the evaluation, analysis, or prediction of aspects of a natural person to determine behaviors or patterns related to professional performance, economic situation, health, personal preferences, interests, skills, location, physical movement of a person, among others.<\/p>\n<p style=\"text-align: left;\">\u2022\tData Processor: Natural or legal person, public or private, public authority, or other body that, alone or jointly with others, processes personal data on behalf of a data controller.<\/p>\n<p style=\"text-align: left;\">\u2022\tCertification Entity: An entity recognized by the Data Protection Authority, which may, non-exclusively, provide certifications in the field of personal data protection.<\/p>\n<p style=\"text-align: left;\">\u2022\tPublicly Accessible Source: Databases that can be accessed by anyone, with public, unconditional, and widespread access.<\/p>\n<p style=\"text-align: left;\">\u2022\tData Controller: Natural or legal person, public or private, public authority, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.<\/p>\n<p style=\"text-align: left;\">\u2022\tPersonal Data Protection Seals: Accreditation granted by the certification entity to the data controller or data processor for having implemented best practices in their processes, with the aim of promoting the trust of the data subject, in accordance with the technical regulations issued by the Data Protection Authority.<\/p>\n<p style=\"text-align: left;\">\u2022\tPseudonymization: Processing of personal data in such a way that it can no longer be attributed to a data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures aimed at ensuring that the personal data is not attributed to an identified or identifiable natural person.<\/p>\n<p style=\"text-align: left;\">\u2022\tData Subject: Natural person whose data is subject to processing.<\/p>\n<p style=\"text-align: left;\">\u2022\tTransfer or Communication: Expression, declaration, delivery, consultation, interconnection, assignment, transmission, dissemination, disclosure, or any form of disclosure of personal data to a person other than the data subject, data controller, or data processor. The communicated personal data must be accurate, complete, and up-to-date.<\/p>\n<p style=\"text-align: left;\">\u2022\tProcessing: Any operation or set of operations performed on personal data, whether by automated, partially automated, or non-automated technical procedures, such as collection, gathering, obtaining, recording, organization, structuring, retention, storage, adaptation, modification, deletion, indexing, extraction, consultation, use, possession, exploitation, distribution, transfer, communication, or any other form of enabling access, comparison, interconnection, limitation, erasure, destruction, and, in general, any use of personal data.<\/p>\n<p style=\"text-align: left;\">\u2022\tPersonal Data Security Breach: A security incident that affects the confidentiality, availability, or integrity of personal data.<\/p>\n<p style=\"text-align: left;\">5.\tBasic principles of personal data processing<br \/>\nThe principles of data protection describe the basic responsibilities of organizations that process personal data (in this case, applicable to the Company). Article 10 of the LOPDP establishes the following principles for personal data processing:<br \/>\n5.1.\tLegality<br \/>\nPersonal data must be processed in strict compliance with the principles, rights, and obligations established in the Constitution of Ecuador, the LOPDP, and other applicable regulations.<br \/>\n5.2.\tLoyalty<br \/>\nThe processing of personal data must be loyal, meaning that the data subject must be clear that their data is being processed through lawful and fair means or for lawful purposes.<br \/>\n5.3.\tTransparency<br \/>\nInformation or communication related to the processing must be accessible and easy to understand for the data subject, using simple and clear language.<br \/>\n5.4.\tPurpose<br \/>\nThe purposes of the processing must be determined, explicit, legitimate, and communicated to the data subject. Personal data processing for purposes other than those initially collected should only be allowed when compatible with the purposes of the initial collection.<br \/>\n5.5.\tData Minimization<br \/>\nPersonal data must be relevant and limited to what is strictly necessary for the fulfillment of the processing purpose.<br \/>\n5.6.\tProportionality of processing<br \/>\nEl tratamiento de datos debe ser adecuado, necesario, oportuno, relevante y no excesivo con relaci\u00f3n a las finalidades para las cuales hayan sido recogidos o a la naturaleza misma de las categor\u00edas especiales de datos.<br \/>\n5.7.\tPreservation<br \/>\nPersonal data will be retained for no longer than necessary to fulfill the purpose of the processing. Timeframes for deletion or periodic review will be established.\nPersonal data should not be kept for longer than necessary for the purposes for which the personal data are processed.<br \/>\nLos datos personados no deben ser conservados m\u00e1s de lo necesario para los fines para los cuales los datos personales son tratados.<br \/>\n5.8.\tConfidentiality<br \/>\nThe processing of personal data must be based on due secrecy and confidentiality. It must not be processed or disclosed for a purpose other than that for which it was collected, unless one of the justifications allowing for further processing is present.<br \/>\n5.9.\tQuality and accuracy<br \/>\nPersonal data subject to processing must be accurate, complete, precise, verifiable, clear, and, if applicable, duly updated. All reasonable measures will be taken to delete or rectify personal data that is inaccurate with respect to the purposes for which they are processed.<br \/>\n5.10.\tSecurity of personal data<br \/>\nThe controller or processor of personal data must implement appropriate and necessary security measures, accepted by the state of the art, whether organizational, technical, or of any other nature, to protect personal data against any risk, threat, vulnerability, taking into account the nature of personal data, the scope, and context.<br \/>\n5.11.\tProactive responsibility<br \/>\nThe controller of personal data processing must implement mechanisms for the protection of personal data, in compliance with the principles, rights, and obligations established in the Organic Law on Personal Data Protection. For this purpose, it may rely on standards, best practices, self-regulation schemes, protection codes, certification systems, personal data protection seals, or any other mechanism deemed appropriate for the purposes.<br \/>\n6.\tDevelopment of data protection in CCB ABOGADOS\u2019 activities<br \/>\n6.1.\tIn order to comply with the principles of personal data protection, CCB ABOGADOS will follow the following provisions: Legitimate processing<br \/>\nData processing is considered legitimate and lawful when one of the following conditions is met:<br \/>\na)\tConsent of the data subject for one or more specific purposes.<br \/>\nb)\tCompliance with a legal obligation.<br \/>\nc)\tJudicial order.<br \/>\nd)\tIn compliance with an obligation carried out in the public interest, subject to compliance with applicable international human rights standards, principles of the LOPDP, and criteria of legality, proportionality, and necessity.<br \/>\ne)\tFor the execution of pre-contractual measures at the request of the data subject or for the fulfillment of contractual obligations.<br \/>\nf)\tTo protect the vital interests of the data subject or another natural person.<br \/>\ng)\tTo satisfy a legitimate interest.<br \/>\n6.2.\tLegitimate interest<br \/>\nWhen the processing of personal data is based on a legitimate interest of the Company, it will be subject to the following conditions:<br \/>\na)\tOnly those personal data that are strictly necessary for the fulfillment of the purpose can be processed.<br \/>\nb)\tTransparency of the processing must be ensured to the data subject.<br \/>\nc)\tThe Data Protection Authority may require CCB ABOGADOS to provide a report to verify that there are no concrete threats to the legitimate expectations of the data subjects and their rights.<br \/>\n6.3.\tConsent for processing<br \/>\nThe consent of the data subject for the processing of their personal data will be valid when the consent is:<br \/>\na)\tFreely given: voluntary, without any form of intimidation or error.<br \/>\nb)\tSpecific: with a specific determination of the means, purposes of the processing, and transfer for processing.<br \/>\nc)\tInformed: easy to understand, in simple and clear language.<br \/>\nd)\tUnambiguous: leaving no doubt as to the scope of the authorization.<br \/>\n6.4.\tCollection of personal data<br \/>\nCCB ABOGADOS must strive to collect the minimum amount of personal data possible, without prejudice to its social purpose and its inherent activities of legal advice and representation. If personal data is obtained from a third party, CCB ABOGADOS\u2019 collaborator must ensure that the personal data is obtained legally.<br \/>\n6.5.\tProcessing, storage, and deletion<br \/>\nThe purpose of the processing, methods, storage limitation, and retention period of personal data must be consistent with the information contained in CCB ABOGADOS' Privacy Policy. CCB ABOGADOS must maintain the accuracy, integrity, confidentiality, and relevance of personal data in relation to the purpose of the processing. Adequate security mechanisms designed to protect personal data must be used to prevent leakage, theft, misuse, or abuse of personal data and mitigate potential security breaches of systems and\/or databases containing personal data. The designated personal data protection officer (referred to as the \"Designated\") is responsible for complying with the requirements listed in this section.<br \/>\n6.6.\tTransfer and communication of data to Data Processor<br \/>\nWhenever CCB ABOGADOS uses a data processor (referred to as the \"Processor\") to process personal data on its behalf, the Designated must ensure that the Processor provides security measures to safeguard the personal data that are appropriate to prevent misuse, unauthorized disclosure, security breaches of personal data systems, and any associated risks.<br \/>\nThe processing of personal data carried out by the Processor must be specified in a \"Personal Data Processing Agreement,\" which must include at least the following provisions:<br \/>\na)\tSpecification of the data to be processed.<br \/>\nb)\t Methods of data processing.<br \/>\nc)\tSpecific purposes of the processing.<br \/>\nd)\tTransfer or communication to third parties.<br \/>\ne)\tFinal disposal of the data.<\/p>\n<p style=\"text-align: left;\">6.7.\tInternational Transfer or Communication of Personal Data<br \/>\nBefore transferring personal data outside the Ecuadorian territory, the Designated must review whether the country to which the transfer will be made provides adequate levels of protection, in accordance with the standards and criteria established in the Organic Law on Personal Data Protection, or, failing this, in accordance with the provisions of the relevant international treaties on personal data protection. If necessary, authorization must be obtained from the Personal Data Protection Authority.<br \/>\n6.8.\tRight to information of data subjects<br \/>\nThe Designated is responsible for informing data subjects, through any channel, about the following regarding the personal data subject to processing:<br \/>\na)\tPurposes of the processing.<br \/>\nb)\tLegal basis for the processing.<br \/>\nc)\tTypes of processing.<br \/>\nd)\tRetention period.<br \/>\ne)\tSource of the data, when it has not been obtained directly from the data subject.<br \/>\nf)\tExistence of a database.<br \/>\ng)\tIdentity and contact information of the Company as the data controller, which will include:<br \/>\na.\tResidential address.<br \/>\nb.\tPhone number.<br \/>\nc.\tEmail address.<br \/>\nh)\tIntended national or international transfers or communications.<br \/>\ni)\tConsequences for the data subject in case of refusal to provide personal data.<br \/>\nj)\t Effect of providing incorrect or inaccurate personal data.<br \/>\nk)\tPossibility to revoke consent.<br \/>\nl)\tExistence and procedure to exercise the data subject's rights provided in the Organic Law on Personal Data Protection.<br \/>\nm)\tMechanisms for data portability.<br \/>\nn)\tWhere and how to file complaints with the Company and the Personal Data Protection Authority.<br \/>\no)\tExistence of automated assessments and decisions.<br \/>\n6.9.\tRights to access, rectification and update of data subjects<br \/>\nAs the data protection officer, the Designated must provide data subjects with a reasonable mechanism that allows them to access their personal data, as well as request the rectification and updating of their inaccurate or incomplete personal data.<br \/>\n6.10.\tRight to Data Portability<br \/>\nData subjects have the right to receive their data from CCB ABOGADOS in a structured format or to transmit them to other data controllers, free of charge. The Designated is responsible for ensuring that these requests are fulfilled when technically feasible. The transferred data must be deleted unless the data subject requests their retention.<br \/>\nCCB ABOGADOS will authorize data portability when one of the following conditions is met:<br \/>\na)\tThe data subject has given consent for the processing.<br \/>\nb)\tThe processing is carried out by automated means.<br \/>\nc)\tIt concerns a substantial volume of personal data.<br \/>\nd)\tThe processing is necessary for the performance of obligations or the exercise of rights of the data controller, data processor, or data subject.<br \/>\nIf technically feasible, data portability will be conducted between data controllers.<br \/>\nThis right shall not apply to information derived or generated from analysis or processing performed by the Company.<br \/>\n6.11.\tSuspension of Processing<br \/>\nData subjects may request CCB ABOGADOS to suspend the processing of their data in the following cases:<br \/>\na)\tThe data subject challenges the accuracy of the data.<br \/>\nb)\tThe processing is unlawful, and the data subject opposes the erasure of the data and requests the limitation of its use.<br \/>\nc)\tCCB ABOGADOS no longer needs the personal data for the purposes of processing, but the data subject requires it for the formulation of claims.<br \/>\nd)\tThe data subject has objected to the processing of health-related data.<br \/>\n6.12.\tDeletion of personal data<br \/>\nData subjects may request CCB ABOGADOS to delete their personal data in the following cases:<br \/>\na)\tThe processing is no longer necessary for the fulfillment of the purpose.<br \/>\nb)\tThe data has fulfilled the purpose for which it was obtained.<br \/>\nc)\tThe retention period for the data has expired.<br \/>\nd)\tThe processing affects fundamental rights or individual liberties.<br \/>\ne)\tThe data subject explicitly withdraws their consent.<br \/>\nf)\tLegal obligation.<br \/>\n6.13.\tRequest for the exercise of Rights<br \/>\nRequests made to CCB ABOGADOS to exercise the rights detailed in sections 6.9, 6.10, 6.11, and 6.12 must be addressed within 15 days by the Designated. CCB ABOGADOS will provide data subjects with a \"Request or Complaint Form\" and implement a process for handling such requests. The requests must be addressed within 15 calendar days.<br \/>\n7.\tGuidelines for lawful processing<br \/>\nPersonal data should only be processed when explicitly authorized by the Company.<br \/>\nThe Company must decide whether to conduct a data protection impact assessment for each data processing activity.<br \/>\n7.1.\tNotice to data subjects<br \/>\nEn el momento de la obtenci\u00f3n o antes de recoger datos personales para cualquier tipo de actividades de tratamiento de datos personales, el Designado es responsable de informar adecuadamente a los titulares sobre los siguientes tipos de datos personales: los tipos de datos personales recogidos, los fines del tratamiento, los derechos de los titulares con respecto a sus datos personales, el per\u00edodo de conservaci\u00f3n, las posibles transferencias de datos a tercer internacionales, si los datos ser\u00e1n compartidos con terceros y las medidas de seguridad de CCB ABOGADOS para proteger los datos personales. Esta informaci\u00f3n es proporcionada mediante cl\u00e1usulas en los contratos laborales y de prestaci\u00f3n de servicios t\u00e9cnicos especializados, ofertas y contratos de prestaci\u00f3n de servicios legales suscritos por los clientes, y mediante un Aviso de Privacidad visualizados tanto en la p\u00e1gina web de la Empresa como en los correos electr\u00f3nicos (oficiales asignados por la Empresa) de los trabajadores, profesionales de CCB ABOGADOS.<br \/>\nIn the event that CCB ABOGADOS shares personal data with a data processor or a third party, the Designated must ensure that data subjects have been notified of this.<br \/>\nWhen personal data is transferred to another country, it must be clearly stated where and to which entity the personal data is being transferred.<br \/>\nWhen sensitive personal data is obtained, the Designated must explicitly indicate to the data subject the purpose for which this sensitive personal data is being collected.<br \/>\n7.2.\tObtaining consent<br \/>\nWhenever the processing of personal data is based on the consent of the data subject or other legal grounds, the Designated is responsible for maintaining a record of such consent. CCB ABOGADOS is responsible for providing options to data subjects to provide consent and must inform and ensure that their consent (when consent is used as the legal basis for processing) can be revoked at any time.<br \/>\nFor children and adolescents under the age of 15, the consent for the processing of personal data must be provided by their legal representative.<br \/>\nPersonal data should only be processed for the purpose for which it was initially obtained. In the event that CCB ABOGADOS needs to process the collected personal data for another purpose, the Designated is responsible for obtaining the consent of the data subjects. Any such request must include the initial purpose for which the data was collected, as well as the new additional purpose(s). The request must also include the reason for the change in the purpose(s).<br \/>\n8.\tOrganization and responsibilities<br \/>\nThe responsibility for ensuring the proper handling of personal data rests with all individuals working for CCB Abogados, whether they have an employment relationship or not, and have access to the personal data processed by the Company.<br \/>\nThe key areas of responsibility for the processing of personal data lie with the following positions within the organization:<br \/>\nThe General Board of Partners: This body makes decisions and approves the general strategies of CCB ABOGADOS regarding personal data protection, including the present Policy (in accordance with its powers established in the Companies Law and the Bylaws of CCB Abogados C\u00eda. Ltda).<br \/>\nThe Designated Data Protection Officer is responsible for:<br \/>\n\u2022\tManaging the personal data protection program and the development and promotion of personal data protection policies.<br \/>\n\u2022\tApproving any data protection statements included in communications such as emails, letters, social networks, and the website.<br \/>\n\u2022\tAddressing any data protection inquiries made by third parties.<br \/>\n\u2022\tMonitoring and analyzing changes in laws and regulations concerning personal data, ensuring compliance with requirements, and assisting all parties involved in the Company in complying with this Policy (especially) and all applicable national regulations on personal data protection.<br \/>\nThe IT Coordinator of the Company is responsible for:<br \/>\n\u2022\tEnsuring that all systems, services, and equipment used for data storage comply with acceptable security standards.<br \/>\n\u2022\tCarrying out regular checks and scans to ensure that hardware and software are functioning properly.<br \/>\nThe Administrative and Human Resources Management is responsible for:<br \/>\n\u2022\tDisseminating knowledge of personal data protection to all employees and all collaborators and associates.<br \/>\n\u2022\tOrganizing training sessions on specialized knowledge and raising awareness regarding personal data protection for employees working with personal data.<br \/>\n\u2022\tEnsuring the comprehensive protection of personal data of employees, collaborators, associates, and partners.<br \/>\n\u2022\tEnsuring that personal data of employees, collaborators, associates, and partners are processed based on legitimate business purposes and needs.<br \/>\n\u2022\tTransmitting data protection responsibilities to suppliers and improving the suppliers' knowledge levels in personal data protection matters.<\/p>\n<p style=\"text-align: left;\">9.\tResponse to data security breaches.<br \/>\nWhen CCB ABOGADOS becomes aware of an actual or suspected personal data security breach, the Designated must conduct an internal investigation and take timely corrective measures within a period of fifteen days (from the knowledge of the incident).<br \/>\nIf there is a risk to the rights and freedoms of the data subjects, the Company must notify the Personal Data Protection Authority and the Telecommunications Regulation and Control Agency without undue delay and within five (5) days after the occurrence of the event. In the event that the Company acts as a Data Processor, it must notify the security breach to the Data Controller within two (2) days after the occurrence of the event.<\/p>\n<p style=\"text-align: left;\">10.\t Auditing and proactive responsibility<br \/>\nThe General Board of Partners or the person designated by it is responsible for auditing how well the departments implement this policy.<br \/>\nAny employee, collaborator, associate, or partner who violates this policy will be subject to disciplinary measures, and the employee may also be liable for civil or criminal responsibilities if their conduct violates laws or regulations in accordance with the due constitutional and legal process that will be established for the determination of respective responsibility.<br \/>\nIn the event of non-compliance with obligations by employees of the Company regarding this Policy, it will be considered a serious offense under the Company's Internal Regulations and therefore sanctioned accordingly.<\/p>\n<p style=\"text-align: left;\">11.\t Conflicts of legislation<br \/>\nThis policy is intended to comply with the laws and regulations regarding the protection of personal data in Ecuador. In the event of a conflict between this policy and the applicable laws and regulations, the laws and regulations of Ecuador shall prevail.<\/p>\n<p style=\"text-align: left;\">12.\t Management of records stored based on this document<br \/>\nRecord name Location Person responsible for storage Record protection controls<br \/>\nRequest for consent of the owner Files of each client<br \/>\nOnly authorized personnel can access applications 7 years<br \/>\nRequest for withdrawal of the consent of the person in charge Files of each client Administrative and Human Resources Management Only authorized personnel can access the requests 7 years<br \/>\nRequest for parental consent File of the Human Resources area Administrative and Human Resources Management Only authorized personnel can access the requests 7 years<br \/>\nRequest for access, rectification and updating, deletion of personal data. And request for opposition to the processing of personal data. Files of each client, employees and suppliers. Administrative department Only authorized personnel can access requests 7 years<br \/>\nSupplier data processing agreements Administrative area file Administrative department Only authorized personnel can access the folder 7 years after the agreement has expired<br \/>\nRegistration of privacy notices File of each client Administrative department Only authorized personnel can access the folder Permanent<\/p>\n<p style=\"text-align: left;\">13.\t Validity and management of documents<br \/>\nThis document is valid starting from May 8, 2023.<\/p>\n<\/div><div class=\"fusion-clearfix\"><\/div><\/div><\/div><\/div><\/div><style type=\"text\/css\">.fusion-fullwidth.fusion-builder-row-1 a:not(.fusion-button):not(.fusion-builder-module-control):not(.fusion-social-network-icon):not(.fb-icon-element):not(.fusion-countdown-link):not(.fusion-rollover-link):not(.fusion-rollover-gallery):not(.add_to_cart_button):not(.show_details_button):not(.product_type_external):not(.fusion-quick-view):not(.fusion-rollover-title-link) , .fusion-fullwidth.fusion-builder-row-1 a:not(.fusion-button):not(.fusion-builder-module-control):not(.fusion-social-network-icon):not(.fb-icon-element):not(.fusion-countdown-link):not(.fusion-rollover-link):not(.fusion-rollover-gallery):not(.add_to_cart_button):not(.show_details_button):not(.product_type_external):not(.fusion-quick-view):not(.fusion-rollover-title-link):before, .fusion-fullwidth.fusion-builder-row-1 a:not(.fusion-button):not(.fusion-builder-module-control):not(.fusion-social-network-icon):not(.fb-icon-element):not(.fusion-countdown-link):not(.fusion-rollover-link):not(.fusion-rollover-gallery):not(.add_to_cart_button):not(.show_details_button):not(.product_type_external):not(.fusion-quick-view):not(.fusion-rollover-title-link):after {color: #8f140b;}.fusion-fullwidth.fusion-builder-row-1 a:not(.fusion-button):not(.fusion-builder-module-control):not(.fusion-social-network-icon):not(.fb-icon-element):not(.fusion-countdown-link):not(.fusion-rollover-link):not(.fusion-rollover-gallery):not(.add_to_cart_button):not(.show_details_button):not(.product_type_external):not(.fusion-quick-view):not(.fusion-rollover-title-link):hover, .fusion-fullwidth.fusion-builder-row-1 a:not(.fusion-button):not(.fusion-builder-module-control):not(.fusion-social-network-icon):not(.fb-icon-element):not(.fusion-countdown-link):not(.fusion-rollover-link):not(.fusion-rollover-gallery):not(.add_to_cart_button):not(.show_details_button):not(.product_type_external):not(.fusion-quick-view):not(.fusion-rollover-title-link):hover:before, .fusion-fullwidth.fusion-builder-row-1 a:not(.fusion-button):not(.fusion-builder-module-control):not(.fusion-social-network-icon):not(.fb-icon-element):not(.fusion-countdown-link):not(.fusion-rollover-link):not(.fusion-rollover-gallery):not(.add_to_cart_button):not(.show_details_button):not(.product_type_external):not(.fusion-quick-view):not(.fusion-rollover-title-link):hover:after {color: #8f140b;}.fusion-fullwidth.fusion-builder-row-1 .pagination a.inactive:hover, .fusion-fullwidth.fusion-builder-row-1 .fusion-filters .fusion-filter.fusion-active a {border-color: #8f140b;}.fusion-fullwidth.fusion-builder-row-1 .pagination .current {border-color: #8f140b; background-color: #8f140b;}.fusion-fullwidth.fusion-builder-row-1 .fusion-filters .fusion-filter.fusion-active a, .fusion-fullwidth.fusion-builder-row-1 .fusion-date-and-formats .fusion-format-box, .fusion-fullwidth.fusion-builder-row-1 .fusion-popover, .fusion-fullwidth.fusion-builder-row-1 .tooltip-shortcode {color: #8f140b;}#main .fusion-fullwidth.fusion-builder-row-1 .post .blog-shortcode-post-title a:hover {color: #8f140b;}<\/style>","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1264","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.5 (Yoast SEO v26.9) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>POL\u00cdTICA DE PROTECCI\u00d3N DE DATOS PERSONALES - CCB Abogados<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ccbabogados.com\/en\/politica-de-proteccion-de-datos-personales-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"POL\u00cdTICA DE PROTECCI\u00d3N DE DATOS PERSONALES\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ccbabogados.com\/en\/politica-de-proteccion-de-datos-personales-2\/\" \/>\n<meta property=\"og:site_name\" content=\"CCB Abogados\" \/>\n<meta property=\"article:modified_time\" content=\"2023-07-05T14:18:03+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"26 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ccbabogados.com\/politica-de-proteccion-de-datos-personales-2\/\",\"url\":\"https:\/\/ccbabogados.com\/politica-de-proteccion-de-datos-personales-2\/\",\"name\":\"POL\u00cdTICA DE PROTECCI\u00d3N DE DATOS PERSONALES - CCB Abogados\",\"isPartOf\":{\"@id\":\"https:\/\/ccbabogados.com\/#website\"},\"datePublished\":\"2023-06-12T17:06:12+00:00\",\"dateModified\":\"2023-07-05T14:18:03+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/ccbabogados.com\/politica-de-proteccion-de-datos-personales-2\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ccbabogados.com\/politica-de-proteccion-de-datos-personales-2\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ccbabogados.com\/politica-de-proteccion-de-datos-personales-2\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\/\/ccbabogados.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"POL\u00cdTICA DE PROTECCI\u00d3N DE DATOS PERSONALES\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/ccbabogados.com\/#website\",\"url\":\"https:\/\/ccbabogados.com\/\",\"name\":\"CCB ABOGADOS\",\"description\":\"CCB Abogados\",\"publisher\":{\"@id\":\"https:\/\/ccbabogados.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/ccbabogados.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/ccbabogados.com\/#organization\",\"name\":\"CCB Abogados\",\"url\":\"https:\/\/ccbabogados.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/ccbabogados.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/ccbabogados.com\/wp-content\/uploads\/2023\/07\/ccb-logo-new-1.png\",\"contentUrl\":\"https:\/\/ccbabogados.com\/wp-content\/uploads\/2023\/07\/ccb-logo-new-1.png\",\"width\":934,\"height\":917,\"caption\":\"CCB Abogados\"},\"image\":{\"@id\":\"https:\/\/ccbabogados.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"POL\u00cdTICA DE PROTECCI\u00d3N DE DATOS PERSONALES - CCB Abogados","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ccbabogados.com\/en\/politica-de-proteccion-de-datos-personales-2\/","og_locale":"en_US","og_type":"article","og_title":"POL\u00cdTICA DE PROTECCI\u00d3N DE DATOS PERSONALES","og_url":"https:\/\/ccbabogados.com\/en\/politica-de-proteccion-de-datos-personales-2\/","og_site_name":"CCB Abogados","article_modified_time":"2023-07-05T14:18:03+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"26 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/ccbabogados.com\/politica-de-proteccion-de-datos-personales-2\/","url":"https:\/\/ccbabogados.com\/politica-de-proteccion-de-datos-personales-2\/","name":"POL\u00cdTICA DE PROTECCI\u00d3N DE DATOS PERSONALES - CCB Abogados","isPartOf":{"@id":"https:\/\/ccbabogados.com\/#website"},"datePublished":"2023-06-12T17:06:12+00:00","dateModified":"2023-07-05T14:18:03+00:00","breadcrumb":{"@id":"https:\/\/ccbabogados.com\/politica-de-proteccion-de-datos-personales-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ccbabogados.com\/politica-de-proteccion-de-datos-personales-2\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ccbabogados.com\/politica-de-proteccion-de-datos-personales-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/ccbabogados.com\/"},{"@type":"ListItem","position":2,"name":"POL\u00cdTICA DE PROTECCI\u00d3N DE DATOS PERSONALES"}]},{"@type":"WebSite","@id":"https:\/\/ccbabogados.com\/#website","url":"https:\/\/ccbabogados.com\/","name":"CCB ABOGADOS","description":"CCB Abogados","publisher":{"@id":"https:\/\/ccbabogados.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ccbabogados.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/ccbabogados.com\/#organization","name":"CCB Abogados","url":"https:\/\/ccbabogados.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ccbabogados.com\/#\/schema\/logo\/image\/","url":"https:\/\/ccbabogados.com\/wp-content\/uploads\/2023\/07\/ccb-logo-new-1.png","contentUrl":"https:\/\/ccbabogados.com\/wp-content\/uploads\/2023\/07\/ccb-logo-new-1.png","width":934,"height":917,"caption":"CCB Abogados"},"image":{"@id":"https:\/\/ccbabogados.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/ccbabogados.com\/en\/wp-json\/wp\/v2\/pages\/1264","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ccbabogados.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ccbabogados.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/ccbabogados.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ccbabogados.com\/en\/wp-json\/wp\/v2\/comments?post=1264"}],"version-history":[{"count":0,"href":"https:\/\/ccbabogados.com\/en\/wp-json\/wp\/v2\/pages\/1264\/revisions"}],"wp:attachment":[{"href":"https:\/\/ccbabogados.com\/en\/wp-json\/wp\/v2\/media?parent=1264"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}