1. Scope
This document informs about the processing that Smartbiz365 performs on the personal data of website visitors and interested parties who initiate contact through the available channels, in accordance with Ecuador's Organic Law on Personal Data Protection (LOPDP).
2. Categories of Data Processed
2.1 Contact Data
Phone number (provided when contacting via WhatsApp). No data is collected through web forms.
2.2 Browsing Data
Technical data collected automatically: IP address (anonymized), device type, browser, pages visited, and interaction metrics.
2.3 Project Data (active clients)
When a service relationship is formalized, the data necessary for project execution is processed: company data, client team contact data, and operational data relevant to the contracted service. This processing is governed by the terms of the service contract and the corresponding confidentiality agreement (NDA).
3. Legal Basis for Processing
- Consent (Art. 7, LOPDP): for optional cookies and voluntary contact via WhatsApp.
- Contract execution (Art. 7, LOPDP): for data processing within the scope of service projects.
- Legitimate interest (Art. 7, LOPDP): for strictly necessary cookies and site security.
- Legal obligation (Art. 7, LOPDP): for compliance with applicable tax, fiscal, or regulatory requirements.
4. Data Transfers
Browsing data is processed by Google LLC (Google Analytics 4) with servers in the United States. This international transfer is based on standard contractual clauses and Google's data protection commitments, in accordance with Art. 39 of the LOPDP.
Smartbiz365 does not sell, transfer, or share personal data with third parties for commercial purposes.
5. Security Measures
Smartbiz365 implements technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or destruction, including:
- Encrypted communications (HTTPS/TLS)
- Data access restricted on a need-to-know basis
- Confidentiality agreements with all team members
- Periodic review of access and permissions
6. ARCOP Rights
In accordance with articles 17 to 24 of the LOPDP, the data subject may exercise the following rights:
Access
Obtain confirmation of whether your data is being processed and access it.
Rectification
Request correction of inaccurate or incomplete personal data.
Cancellation
Request erasure of data when it is no longer necessary for the purpose for which it was collected.
Objection
Object to data processing at any time, on grounds relating to your particular situation.
Portability
Receive personal data in a structured, commonly used, and machine-readable format.
Suspension
Request restriction of processing when the conditions provided by law are met.
To exercise your rights
Send your request to hola@wootraffic.com stating the right you wish to exercise, along with a copy of your identity document. Response deadline: 15 business days.
7. Data Protection Authority
If the data subject believes that the processing of their personal data does not comply with applicable regulations, they may lodge a complaint with the Superintendencia de Protección de Datos Personales del Ecuador.
8. Updates
This document will be updated when there are changes in data processing, applicable legislation, or services offered by Smartbiz365. The date of last update is stated at the top of this document.