Privacy Policy

Privacy policy of IDEATI S.A.

Privacy Policy

This Privacy Policy complies with the provisions of Law 81 of 2019.05.26 - Personal Data Protection and DE-285 of 2021.05.28 - Regulation of Law 81 on Personal Data Protection, as well as other complementary, amending, and related regulations.

Second. Data Controller

IDEATI S.A. is a company based in Panama that provides Information Technology services in several Latin American countries for public and private entities. IDEATI is responsible for processing personal data collected in the development of its activities from its clients and from users in general when they use its website. In accordance with Law 81 of 2019.05.26 - Personal Data Protection and DE 285 of 2021.05.28 Regulation of Law 81 on Personal Data Protection, it keeps a record of databases transferred to third parties, which will be available to ANTAI if required.

IDEATI is located at HiTech Plaza, Office 5D, Obarrio, Panama City, Panama.

Contact channels are: in person at its offices and remotely through the channels available on the website, by email at info@ideati.net, and by phone at (+507) 3984664.

The processing of IDEATI client personal data aims to ensure an appropriate contractual relationship and provide information about products and promotions, as applicable.

The processing of user personal data collected through automated mechanisms when users access digital media provided by IDEATI aims to generate records of visit numbers and frequency, user activity, personalize social media campaigns, and analyze and monitor results of these actions in order to provide better service and facilitate use of digital channels, for which IDEATI uses cookies and similar technologies (collectively, “cookies”).

Data collection and processing through these automated mechanisms in IDEATI digital channels does not in any case constitute operations involving association of this information with any identified or identifiable user, nor will IDEATI use information from networks or analytics providers for purposes other than those strictly informed.

The processing of personal data provided by users in forms and/or digital contracts and/or any other document or record suitable for such capture aims to manage the sending of information or other requests submitted by the user, respond to inquiries and/or requests, and/or carry out activities necessary to execute a contractual relationship, as well as obtain statistical data from such interactions.

In the case of identification and/or contact data provided by the user, IDEATI may also use it to send commercial offers about its own products and services or those of collaborating third parties compatible with IDEATI services, and information about marketing actions to be carried out (including campaigns, projects, raffles, contests, events of any kind and theme), conduct satisfaction surveys, and send news (including by electronic or remote means).

The legal basis for data processing for this communication purpose is the informed consent of the user, collected at the time of data collection. The user may withdraw consent for this purpose at any time through the channels informed in this policy, without this implying any condition on access to services provided or marketed by IDEATI, or on the use of tools made available to users in general.

Fourth. Third Party Data Transfer and Data Security

IDEATI does not sell, rent, or share personal or business data with third parties for commercial purposes. Data collected through our electronic invoicing services is shared exclusively with the parties directly involved — the Dirección General de Ingresos (DGI) of Panama as required by law, and the counterparties designated by the user (such as invoice recipients or taxpayer representatives) — solely to fulfill the contracted service.

Some providers may host data, even temporarily, on servers located outside Panama, including territories such as the United States not considered adequate for international data transfers. Such transfers, when necessary for the informed purpose, are carried out only with the data subject’s informed and unequivocal consent.

Consent for international transfer tied to email communications is collected at the time of data capture in the relevant form, contract, or record, after providing appropriate information. The user may withdraw consent at any time through the channels listed in this policy; the only consequence is no longer receiving personalized ads on social networks or our email communications, respectively.

IDEATI is committed to protecting the security of user and client data, including data exchanged with the authorized third parties referenced above. All data transmitted through our electronic invoicing platform is encrypted in transit using industry-standard TLS protocols. Access to personal and fiscal data is restricted to authorized personnel only, under strict access controls and confidentiality obligations. IDEATI has adopted the technical and organizational measures necessary to ensure the integrity, availability, and confidentiality of personal data in its databases, considering the state of technology, the nature of processed data, and the risks to which it is exposed. These measures are under permanent review, update, and improvement to comply with national laws and regulations and recommendations on best practices in Personal Data Protection.

Fifth. Use of Instant Messaging Applications

IDEATI may offer user communication channels through instant messaging applications such as WhatsApp and Telegram in order to streamline request handling, follow-up, or sending commercial information about launches or products, and in general to establish a communication channel for receiving and sending messages of any nature related to IDEATI activity.

Data required for the use of these channels will only be in the referenced WhatsApp/Telegram group managed by IDEATI, with the mobile number indicated as responsible for processing, who has adopted the necessary technical and organizational measures to ensure an appropriate level of security for personal data.

Without prejudice to the above, users should note that the companies providing these instant messaging applications operate under their own terms of service and use servers located outside the country, including territories considered not adequate by Panama for international data transfers such as the United States of America. Therefore, users are advised to carefully read their terms of use and privacy policies and configure their data processing preferences directly in those applications.

Use of these instant messaging applications with IDEATI is entirely optional for the user, as IDEATI will always provide alternative communication channels.

Having been duly informed of these aspects, by using these instant messaging applications with IDEATI, the user declares awareness and acceptance of the terms of this clause and gives unequivocal consent to their use, including consent to international data transfer that may be involved.

Sixth. Data Subject Rights

Data subjects, after proving their identity, may exercise their rights of access, rectification, cancellation, and opposition (ARCO), according to Law 81 of 2019.05.26 - Personal Data Protection and DE 285 of 2021.05.28 - Regulation of Law 81 on Personal Data Protection, amendments and related regulations, before IDEATI via email at info@ideati.net or in person at HiTech Plaza, Office 5D, Obarrio, Panama City, Panama.

To facilitate exercise of the right of deletion for data linked to email marketing purposes, all communications include an unsubscribe note, the use of which results in immediate removal of the user’s personal data from the database for that purpose.

This Privacy Policy applies exclusively to data held by IDEATI due to user activity on the website. It does not in any case extend to access through external links, nor to links from the IDEATI website and IDEATI application to other websites.

Users may join pages or groups that IDEATI may have on different social networks; however, data will belong to the corresponding social network, so IDEATI is not responsible for processing any personal data revealed by users through those social network pages. Users are advised to carefully read social networks' terms of use and privacy policies and configure their preferences regarding data processing.

Eighth. Retention Period

Data will be retained for as long as necessary for the purposes for which it was collected in each case, or until the user requests its deletion. When applicable, data will be retained for the period necessary to comply with legal requirements.

Ninth. Privacy Policy Updates

IDEATI may permanently review and/or update all aspects related to its Privacy Policy. When updated, it will be informed through the IDEATI website, as appropriate.

Use of the IDEATI website by users after these changes are informed means acceptance of the revised Privacy Policy.

Tenth. Applicable Law and Jurisdiction

This Privacy Policy is governed in all its clauses and without exception by the laws of Panama.