Skip to main content

Service Policy

Personal Data Privacy, Information Management, Ethics, Transparency, Anti-Corruption, and Conflict of Interest

1. Introduction

Objective:

  • Guide clients on the aspects governing this service relationship.
  • Implement actions and safeguards to protect clients' privacy and the confidentiality of their personal data.
  • Comply with the constitutional guarantee of Habeas Data and other applicable laws on privacy in Paraguay.
  • Promote and uphold high standards of ethics, integrity, and transparency in the organization’s activities.
  • Prevent and combat corruption and conflicts of interest.

Principles of Ethics and Transparency

Integrity:

  • Our associates and collaborators must act with honesty and uprightness in all their operations and organizational decisions.

Transparency:

  • The company conducts its activities openly and transparently, providing accurate and complete information to relevant stakeholders.

Scope:

  • Our service is exclusively governed by the legislation of the Republic of Paraguay, these terms and conditions, and the documentation created to formalize services, such as service budgets and specific terms.
  • Applicable to all personal data collected, stored, and processed by the organization.
  • Employees and contractors are informed about the validity of this policy.

2. Collection and Use of Personal Data

2.1 Types of Data Collected:

  • Personal Identification Data: Name, address, identification number, etc.
  • Contact Information: Email, phone number, and postal address.
  • Legal Data: Contracts, agreements, plans, permits, assets, disputes, other controversies, legal acts, facts, and documents.

2.2 Purpose of Collection:

  • Provide legal services to clients.
  • Comply with legal and regulatory obligations.
  • Improve the quality of services offered.

3. Data Processing Principles

3.1 Accuracy and Quality:

  • Ensure personal data is accurate, complete, and up to date.

3.2 Legitimacy:

  • Collect and process personal data lawfully and fairly.

3.3 Restricted Access and Circulation:

  • Limit access to personal data solely to those who need it to perform their functions.

3.4 Temporality:

  • Retain personal data only for as long as necessary to fulfill its purpose.

3.5 Security and Confidentiality:

  • Implement adequate technical and organizational measures to protect personal data against loss, theft, unauthorized access, and other risks.

3.6 Freedom and Transparency:

  • Inform individuals about the collection and use of their personal data and obtain their consent when required.

4. Data Subjects’ Rights

4.1 Access:

  • Individuals have the right to access their personal data held by the organization.

4.2 Rectification and Updating:

  • Individuals may request correction and updating of their personal data if inaccurate or incomplete.

4.3 Deletion and Erasure:

  • Individuals may request the deletion of their personal data when it is no longer necessary or when consent is withdrawn.

4.4 Objection:

  • Individuals may object to the processing of their personal data on legitimate grounds. If such data is processed in connection with ongoing services, termination of services may be required, with no reimbursement of amounts already paid.

4.5 Habeas Data:

  • In accordance with the constitutional guarantee, individuals may petition competent courts for the updating, correction, or destruction of data that unlawfully affect their rights.

5. Security Measures

5.1 Encryption:

  • Robust encryption is used to protect personal data in transit and at rest (e.g., data stored on computers, email servers, and backup systems).

5.2 Access Control:

  • Implement access controls to ensure only authorized personnel can access personal data.

5.3 Monitoring and Auditing:

  • Conduct periodic monitoring and audits to detect and mitigate potential security breaches.

5.4 Training:

  • Provide information on cybersecurity and personal data protection to all employees and collaborators.

6. Personal Data Transmission

6.1 Platforms and Networks:

  • Prioritize secure platforms and networks for data transmission.
  • Liability is disclaimed when clients choose platforms like WhatsApp, indicating that the organization cannot ensure data protection during transmission or via third-party internet service providers.

6.2 Third-Party Responsibility:

  • Ensure third parties with access to personal data comply with applicable data protection standards.

7. Legal Compliance

7.1 Local Regulations:

  • Comply with laws and regulations governing the legal profession, as well as privacy and personal data protection in Paraguay.

7.2 Telecom User Protection Regulation:

  • Select telecommunication service operators that promise to adhere to the principles of confidentiality, integrity, and availability of personal data per the applicable regulation.

8. Anti-Corruption Policy

8.1 Prohibition of Corrupt Practices:

  • Offering, giving, receiving, or soliciting benefits or gifts of value related to services is strictly prohibited.

8.2 Legal Compliance:

  • The organization strives to comply with all applicable anti-corruption laws.

8.3 Prevention and Detection:

  • Implement controls and procedures to prevent and detect corrupt practices.

8.4 Reporting Corrupt Conduct:

  • Suspicions of corrupt conduct must be reported immediately. Whistleblowers will be protected from retaliation.

9. Conflict of Interest

9.1 Identification of Conflicts:

  • Employees and contractors must avoid situations where personal interests may conflict with the organization or clients' interests.
  • Likewise, we may not provide you a service if, after an analysis, it is found that your interests may directly collide with current clients, without obtaining an authorization from those directly interested.

9.2 Declaration of Conflicts:

  • Potential conflicts of interest must be disclosed immediately.

9.3 Conflict Management:

  • Conflicts will be managed and resolved fairly and transparently.

10. Implementation and Compliance

10.1 Training:

  • All associates, collaborators, and contractors will receive basic training on ethics, transparency, anti-corruption, and conflict of interest.

10.2 Monitoring and Auditing:

  • Periodic monitoring and audits will ensure compliance with this policy.

10.3 Sanctions:

  • Non-compliance will result in disciplinary actions, including employment or contract termination and reporting to competent authorities.

11. Policy Review and Updates

11.1 Periodic Review:

  • The policy will be reviewed and updated regularly to reflect legal and organizational changes.

11.2 Change Notification:

  • Significant changes will be communicated to the parties in a timely manner.

12. Leadership Commitment

12.1 Leadership Example:

  • The organization’s leaders are committed to setting an example, promoting, and implementing the highest standards of ethics, transparency, and conflict management.

13. Review and Update

13.1 Periodic Review:

  • Review and update this privacy policy at least annually or as necessary to reflect changes in laws or organizational practices.

13.2 Notification of Changes:

  • Inform customers and data subjects of any significant changes to this policy.