Privacy policy

Data controller

Fernando André Rojas Yerovi, an Ecuadorian citizen domiciled in the city of Quito.

Scope

ROYER Abogados makes the information in this Privacy Policy available to all users of its Website, in order to communicate the purpose for which data is collected, the processing it undergoes, as well as the rights of data subjects and the procedures ROYER Abogados has implemented for exercising them.

Personal data processed

The personal data processed by ROYER Abogados may come from the following categories and sources:

Categories: data provided by the data subject · data generated as a result of a contract · inferred data · data obtained from third parties.

Sources: website and social-media users · other technological means.

Types of data processed

• Data of job candidates: contact information, résumé, employment history, references, and education information.
• Personal data of prospective clients and clients: basic data (name, surname, address, city, phone, email, nationality) and, where applicable, credit information, occupation, handwritten or electronic signature, company, position, and financial data.
• Personal data of staff: basic personnel data (names, phones, date of birth, emails) and, where applicable, special data such as image, credit, and health data.
• Personal data of suppliers and business partners: contact information, commercial communications, bank accounts, products and services contracted, invoicing, and claims.
• Personal data of website users: IP addresses, location data, log-file data, and contact information.

Sensitive data

For sensitive data, it is the data subject’s prerogative to grant explicit authorization for its processing. Where sensitive data is received, ROYER Abogados guarantees to keep it secure and confidential: image, physical appearance, and voice; data on criminal record and biometric data; health data, processed with the duty of confidentiality and medical secrecy required by applicable law; data of minors; and data of persons with disabilities.

Processing principles

The principles governing the processing of personal data are those set out in the Ley Orgánica de Protección de Datos Personales (Ecuador’s data protection act).

Purpose of processing

For clients and prospective clients: to process the data provided in order to deliver the legal service contracted or to be contracted; to send information about the service acquired or of interest; to handle inquiries, complaints, and claims; to comply with legal and contractual obligations; and, where applicable, to provide data to supervisory authorities pursuant to a legal requirement.

For staff and candidates: to record and process applicants’ information in current or future selection processes; to verify the truthfulness of the information provided; to comply with ROYER Abogados’ obligations as an employer; and to carry out the activities inherent to the employment relationship.

In addition, ROYER Abogados may carry out other processing of personal data on the basis of the legitimizing grounds that empower it, in which case the data subject will receive the necessary information regarding such processing.

Consent

In compliance with the legal framework for personal data protection, ROYER Abogados declares that it will use adequate and sufficient mechanisms to obtain the data subject’s prior, free, specific, informed, and unequivocal authorization and consent — through various forms, the website, or any other format that allows subsequent verification — for the processing of personal data.

Rights

The rights of Website users are those set out in the Ley Orgánica de Protección de Datos Personales: among others, access, rectification, updating, erasure, objection, and portability of their data. You may exercise them by writing to info (arroba) royerabogados.com .

Security policy

ROYER Abogados has chosen to manage its information systems using international best practices. Given the importance of information systems, the following fundamental information-security principles are established:

• Principle of regulatory compliance
• Principle of risk management
• Principle of awareness and training
• Principles of confidentiality, integrity, and availability
• Principle of proportionality
• Principle of accountability
• Principle of continuous improvement

This policy is the reference framework for setting security objectives.

In force since February 2024, revised in August 2026. If you need additional information about this policy or have any suggestions, write to info (arroba) royerabogados.com .