We make this Privacy Policy available to the users of the website located at https://heka.com.ec/, in order to provide information on how we treat your personal data and protect your privacy and information. This Privacy Policy is designed to communicate to you in a transparent and clear manner how we collect, use, protect and share your personal data, always respecting your rights and complying with the Organic Law on Personal Data Protection, in force since May 26, 2021.

At HEKA, we understand that data is an essential part of our business, but we recognize even more the importance of the people behind that data. We are committed to treat your personal data with the utmost respect and care, guaranteeing transparency, security and confidentiality.

In the event that we make changes, we will inform you via the website or other appropriate means, so that you are aware of the updates made.

I. PERSON IN CHARGE OF THE TREATMENT

The personal data provided by the Personal Data Holders through the means provided by HEKA, from any physical form or within the website or that may be provided in the future, will be collected and processed by:

LEGALPARTNERS ECUADOR S.A.S.

Address: MOKAI Building, 7th floor. Av. Paul Rivet and Joseph Orton N30-54. Quito, Ecuador.

Phone: +593 2 500 1120

E-mail: privacidad@heka.com.ec

 

II. TYPES AND PURPOSES OF DATA PROCESSING

Personal data collected by Heka, may be processed for the following purposes:

  1. Provision of Specialized Services:

a. Your information is essential to provide you with quality legal, accounting and financial services. This ranges from advice and representation in judicial and administrative proceedings, to the implementation of legal technology solutions and accounting records. We strive to ensure that each service is tailored to your specific needs.

b. Types of Data Processed: contact data, identification data, demographic data, digital identifiers, bank and transfer data, professional information, third party data, socioeconomic data, family data and any data communicated by you for the provision of services.

  1. Administrative Operation:

a. We use your data to carry out HEKA’s administrative operations. This includes activities such as recruiting personnel, managing access to our facilities, recording employee activities, managing payments and accounting for the firm.

b. Types of Data Processed: contact, identification, bank, family and professional information.

  1. Specialized Events:

a. Purpose: In case we organize events related to the legal, technological and accounting fields, we may use your data to keep you informed about these learning and networking opportunities.

b. Types of Data Processed: contact, identification, demographic, family data.

  1. Communication and Relationship Maintenance:

a. We use your data to communicate with you in connection with the services offered by HEKA. We also keep you informed about the relevant legal landscape to keep you up to date.

b. Types of Data Processed: contact and identification data.

  1. Legal Compliance and Defense of Rights:

a. In compliance with current regulations, we use your data to comply with legal requirements and competent authorities, as well as to defend our rights in necessary situations.

b. Types of Data Processed: contact data, identification data, demographic data, digital identifiers, bank and transfer data, professional information, third party data, socioeconomic data, family data and any data communicated by you for the provision of services.

  1. Service Analysis and Improvement:

a. Your data is valuable for analyzing and improving the services we offer. This helps us understand your changing needs and assess the feasibility of developing new services to benefit our customers.

b. Types of Data Processed: demographic data, professional information, third party data and socioeconomic data.

  1. Promotion of Our Firm:

a. In some cases, we use information to promote the firm, our Business Group services and our associates, which may include participation in legal guides and other means of recognition.

b. Types of Data Processed: contact data, identification data, demographic data, digital identifiers, bank and transfer data, professional information, third party data, socio-economic data, family data and any data communicated by you for the provision of services.

Your data will not be processed for purposes other than those detailed in this section without your consent. We also inform you that we do not make decisions based on automated processing of your data nor do we create profiles.

 

III. LEGAL BASIS FOR PROCESSING

Our treatment is based on:

a) Consent and authorization given by the holders.

b) The contractual relationship that exists with our Customers and Suppliers.

c) Applicable legal obligations.

d) The processing of personal data contained in publicly accessible databases.

e) In some cases, we base the processing of your data on a legitimate interest.

 

IV. ORIGIN OF THE DATA

The source of the personal data we collect and process may be of the following types:

a) From public or publicly available sources: HEKA obtains information from websites such as the Superintendence of Companies, SRI, Property Registry.

b) From third parties: In some cases, HEKA acts as a processor for our customers. In these cases we collaborate with third parties who provide us with information relevant to our services. This information may be provided by third parties as part of an agreement or in the context of providing services to these same third parties. Our collaboration is governed by strict confidentiality and security policies, ensuring that shared information is handled responsibly.

c) Directly from the owner: HEKA may request and obtain information directly from the owner to ensure the best quality of its services.

 

V. THIRD PARTY INFORMATION

If you provide us with information from any third parties, you must ensure that those third parties understand how this information will be used and that they have given their consent for this information to be transferred to and used by Heka.

 

VI. CONSEQUENCE OF THE REFUSAL TO PROVIDE INFORMATION

If we are required by law to collect certain personal information or if such information is essential to provide you with services that meet your requirements, and you choose not to provide it or the information provided is inaccurate or inaccurate, we may need to terminate our existing contractual relationship with you, provided that we have notified you of these possible outcomes.

 

VII. DATA COMMUNICATION, INTERNATIONAL TRANSFERS AND DATA PROCESSORS

For the performance of professional services provided by HEKA we may communicate, share or transfer personal data nationally and internationally to third parties as recipients of personal data or under a processing order. Data recipients may include:

  • Members of our team.
  • Third parties that help us provide our services, such as technology and software companies, expert consultants or security services.
  • Third parties designated by you, such as professionals entrusted by a client or counterparty in the negotiation of a contract.
  • Customers, prospective customers and parties involved in interactions with prospective customers, their representatives, consultants or dependents.
  • State authorities.

For the transfer of personal data, HEKA obtains the consent of its owners and/or verifies the legitimate bases determined in the Organic Law on the Protection of Personal Data.

 

VIII. SECURITY

We have implemented appropriate security systems to prevent the loss, use, unauthorized access or misuse of your personal data. Processes have also been implemented to identify gaps in this information. We comply with the duty to inform that HEKA has protected databases where your personal data is stored.

 

IX. DATA RETENTION

We store the information in our databases only for as long as strictly necessary to fulfill the purpose for which they were collected, including compliance with legal provisions, competent authorities or for the defense of the rights of HEKA and its team. In determining the data retention period, HEKA takes into account the amount, nature and sensitivity of the personal data.

 

X. DATA PROTECTION RIGHTS THAT YOU CAN EXERCISE

As a Data Subject, if you believe there is an opportunity for improvement in the way we handle data, you may exercise the following rights recognized in the Organic Law on Data Protection:

  1. Access
  2. Disposal
  3. Rectification and updating
  4. Opposition
  5. Cancellation
  6. Treatment limitation
  7. Not be the subject of a decision resulting from automated treatment
  8. Portability

In order to exercise them we put at your disposal the e-mail privacidad@heka.com.ec. The request for access, rectification, updating, deletion of personal data, opposition or suspension of processing must contain, at least, the following requirements:

  • The full names and surnames of the Holder, copy of his/her citizenship card or passport. When acting through a representative, this capacity must be proven.
  • An e-mail address and contact information of the Holder.
  • If possible, a clear and precise description of the data subject of the request and any element that facilitates the identification and location of the personal data.
  • Clear request of the right you intend to exercise.

If these requirements are not met, HEKA will ask the Data Subject to clarify or complete his or her request within 10 days. Failure to do so will result in the application being filed without any further processing.

If you are not satisfied with HEKA’s response to your request, you may appeal to the Data Protection Authority.

 

XI. RIGHT TO REVOKE YOUR CONSENT

If you wish to completely or partially revoke your consent to the processing of your personal data, you must request it by sending an e-mail to privacidad@heka.com.ec. Once we have analyzed your case, we will stop processing the information for which you have revoked your consent. However, there may be additional legal grounds that justify further processing of certain data. If this is the case, we will inform you about these alternative legal bases in due course.

 

XII. UPDATE OF THIS POLICY

This policy may be updated from time to time. Updates will be uploaded to the Heka website for easy access. You should always refer to the latest version, in case you need to access information concerning the processing and protection of personal data by Heka.