Privacy policy
1. Who we are
• Responsible for the Treatment: Katia Maria Tufiño Mateus
• Address: Avenida Pampite N2-54, Carlos Chacón
• Phone: 099917942
• E-mail: contacto@coraec.com
The address of our website is: coraec.com.
2. Information we collect
In order to fulfill the purposes established by CORA, it is necessary for the Data Controller to process the personal data of the data subjects (hereinafter referred to as the “Data Subjects”), either through automated means or otherwise (mixed processing), and to collect, gather, obtain, record, organize, structure, store, safeguard, adapt, modify, delete, index, extract, consult, develop, use, leverage, distribute, assign, disclose or transfer, access, restrict, erase, and generally process the personal data of the Data Subjects, in accordance with what is permitted under the Organic Law on Personal Data Protection.
Depending on the type of processing carried out by CORA in relation to the Data Subjects, the following categories of data may be processed:
• Identifying data such as: name and surname, id, home address, driver’s license, fingerprint and/or image of the face, etc
• Contact details such as: personal email, phone number and cell phone, etc
• Data on personal characteristics, such as sex, marital status, nationality, age, etc
• Family circumstances such as: marital Status, affiliation, number of children, age of the minor children and disabled children of any age.
• Details of job as: Post or position held in other institutions, whether public or private, identifying information of co-workers and superiors in the positions held, etc
• Academics and professionals such as: Qualifications, training, experience, professional, resume, etc
• Presence control and safety such as: Date and time of entry and departure to the place of work or the facilities of CORA, biometric data, the images of the security cameras, and geolocation data.
• Financial: banking Data.
• Special categories such as: immigration Status, health data, biometric data etc
• Credit data such as: data of economic behavior to analyze capabilities and payment of indebtedness.
Both types of treatment such as the category of data are examples, so that the types of processing and the categories of data shall be determined in each case, and depending on, for each of the purposes established by CORA. The controller shall inform the Holders in due time about the processing of your data, and if necessary, shall obtain the consent of these.
When visitors complete our contact form, we collect the following information:
Full name
E-mail address
Phone number
Message sent via the form
If you make a purchase on our site, we collect additional information needed to process the transaction, including:
Full name
E-mail address
Payment information is processed through Stripe
3. How we use your information
We use the information we collect for the purposes described below, not only by the consent granted by the user at the time of the form, but also for the fulfillment of the contractual obligations that have been purchased:
Respond to queries submitted through the contact form.
Process and manage purchases made on the site.
Send updates on the status of your purchase.
To improve our services and customize the user experience.
Send special offers and promotions if you have given your consent.
Payments through Stripe
Transactions on our site are processed through Stripe, a secure payment provider. We do not store information of credit and debit cards in our servers. Stripe manages and protects this data under their own privacy policies, which you can check in:
The treatment of the employees and executives is determined in a manner independent of the respective contracts of employment or provision of services. In any case, and as applicable, the collaborators and service providers should refer to this Privacy Policy when it is determined independently.
In the case of CORA processes personal data of people that are not set forth within this Privacy Policy, the data controller shall inform adequately on the treatment that is being carried, and, if necessary, will be counted with the consent of the respective order.
CORA does not perform further processing of the data that is neither used for purposes different to those reported within this Policy. In the course of that CORA may need to treat personal data to other end, the data controller undertakes to inform in a manner appropriate to the Holders, and, if necessary, raise the consents of the case.
4. Security of data
We implement security measures to protect your personal information against unauthorized access, alteration or disclosure. In addition, we do not share your data with third parties.
5. Cookies
If you complete our contact form, you can choose to save your name, email address and phone number in cookies. This is for your convenience so that you do not have to re-enter your data in future forms. These cookies will last for one year.
If you make a purchase, Stripe may install cookies necessary for the functioning of the payment service.
6. Embedded content from other websites
The articles on this site may include embedded content (e.g. videos, images, articles, etc). Embedded content from other websites behaves in exactly the same way as if the visitor had visited the other website.
These websites may collect data about you, use cookies, embed additional monitoring of third parties, and monitor your interaction with that content.
7. How long we retain your data
The data provided through the contact form will be stored for a period of up to 12 months for follow-up consultations. The purchase data will be retained according to the tax rules and applicable laws.
In any case, the personal data will be processed to the extent that this is necessary to fulfill the purposes for which it was collected, or to comply with any legal requirement, so the deadline could be extended.
In the course of the authority to set specific time periods, CORA agrees to process personal data until the maximum period laid down by this.
CORA commits that, in the event the processing of the Data Subjects’ personal data is not required for a reasonable period of time, it will take all relevant security measures to block, pseudonymize, or anonymize the personal data.
8. What rights you have over your data
If you have completed the contact form or made a purchase, you may request to receive an export file of the personal data we hold about you. You may also exercise all the rights established under the Organic Law on Personal Data Protection, such as the right to information, access, rectification and updating, restriction of processing, erasure, objection, data portability, suspension of processing, and the right not to be subject to a decision based solely or partially on automated evaluations.
To exercise any of the rights herein, or complaints about the processing of personal data, the Holders shall submit a request to the following email address: contacto@coraec.com or in his absence, to the legal address of CORA.
The application shall contain at least the following:
1. Full names of Owners, number of identity card or passport and home address or email for notification. When acting as a legal representative, it will be recorded and the data is represented.
2. If possible, the clear and precise description of the personal data in respect of which it seeks to exercise any of the rights mentioned in point 11 of this Policy, and any other element or document that facilitates the location of personal data;
3. Relationship as requested by exposed so clear and precise.
4. Right or rights that you wish to exercise.
The application shall be accompanied by documents proving the identity or,in your case, the representation legal and / or conventional of the Holder.
In the case that the constant information in the application is required to be clarified or expanded, CORA will require the Holders, for a one-time and within the term of five (5) days of receipt of the application, to clarify or complete.
The Holders shall have the term of ten (10) days from the day following that on which you have been notified with the request for clarification or expansion to clarify or complete the application.
If the Holders will clarify or complete the request within the term mentioned, the controller shall give due attention to the request, otherwise CORA reserves the right to file the application, which shall be notified to the Holders of this fact with the reasons for the decision.
In the event that this is required, the Holders may communicate directly with the Authority for Personal Data Protection of the ecuadorian people.
9. Where we send your data
The data of the contact form can be reviewed by a service automated spam detection. The payment information is sent to Stripe for secure processing.
10. Changes in our privacy policy
We reserve the right to modify these policies at any time. Any changes will be posted on this page with the date of the last update.