Privacy & Personal Data Protection Policy

TREU Abogados (hereinafter, “TREU”) protects the personal data of everyone who interacts with the firm, in accordance with the Constitution of the Republic of Ecuador and the Organic Law on Personal Data Protection (LOPDP), published in Official Register Supplement 459 of May 26, 2021, its regulations and related legislation.

As a law firm devoted to criminal law, TREU treats its clients’ information with strict confidentiality and under the professional secrecy that governs the practice of law.

This policy explains how TREU collects, uses, retains, discloses and deletes personal data obtained through its website treuabogados.com, its contact channels (forms, email, WhatsApp and telephone) and the provision of its professional services.

It applies to clients, prospective clients, victims and represented persons, allied lawyers and firms, suppliers, job applicants and website visitors.

TREU Abogados is the controller of the personal data described in this policy.

Data protection contact: info@treuabogados.com

For the purposes of this policy, the definitions of the LOPDP apply. In particular:

• Data subject: the natural person whose data is processed.
• Personal data: data that identifies or makes a natural person identifiable, directly or indirectly.
• Sensitive data: data relating to ethnicity, gender identity, cultural identity, religion, ideology, political affiliation, judicial record, migratory status, sexual orientation, health, biometric data, genetic data and any data whose improper processing may give rise to discrimination.
• Processing: any operation performed on personal data, such as collection, recording, organization, storage, consultation, use, disclosure, anonymization or erasure.
• Processor: a natural or legal person who processes personal data on behalf of TREU.

4.1. Sources of the data

• Data you provide to us directly: website forms, email, WhatsApp, calls, meetings and documents you hand over to us.
• Data generated during the professional relationship: communications, proceedings, filings and case documentation.
• Data obtained from publicly accessible sources, such as the public consultation systems of the Judiciary (E-SATJE) and the Attorney General’s Office (SIAF), when necessary to provide the service.
• Browsing data obtained when you visit the website (see the Cookie Policy).

4.2. Categories of data

• Prospective clients and clients: full name, national ID or passport number, contact details (telephone, email, address), information about your legal situation and the proceedings you are involved in, documents you provide and billing data.
• Allied lawyers and firms: professional identification and contact details, and information about shared matters.
• Suppliers: contact details, contractual, banking and billing information.
• Job applicants: contact details, résumé, education, work experience and references.
• Website visitors: IP address, browser and device type, pages visited and browsing data.

4.3. Sensitive data

Given the nature of criminal-law services, TREU may process sensitive data, especially information about judicial records, criminal proceedings, or the health or integrity of victims. Such data is processed only when strictly necessary for the defense or representation entrusted to us, with the data subject’s authorization or where permitted by law, and under reinforced confidentiality and security measures.

4.4. Children and adolescents

The website is not directed at minors and TREU does not knowingly collect their data through it. When, due to the nature of a case, it is necessary to process data of children or adolescents, this will be done with the authorization of their legal representative or where permitted by law, always in their best interests and with due reserve.

4.5. Mandatory nature

Providing data through the website is voluntary. However, without certain data it will not be possible to handle your inquiry or provide the requested service.

TREU processes personal data in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, relevance and data minimization, proportionality, confidentiality, quality and accuracy, limited retention, security, proactive accountability and interpretation in favor of the data subject.

6.1. Clients and prospective clients

• Handling inquiries and requests for information or appointments.
• Analyzing your legal situation and providing criminal defense, victim representation, data removal and other contracted services.
• Communicating with you about the status of your case.
• Preparing service proposals, contracts, invoices and collections.
• Complying with legal, tax and professional obligations.
• With your additional, separate consent, sending you information about our services, publications and legal news. Declining this does not affect the handling of your inquiry or the provision of the service.

6.2. Allied lawyers and firms: coordinating professional collaboration on shared matters.

6.3. Suppliers: managing the contractual relationship, payments and tax obligations.

6.4. Job applicants: evaluating profiles in selection processes and, with your consent, keeping them for future processes.

6.5. Website visitors: ensuring the operation and security of the site and, with your consent where applicable, analyzing its use in aggregate form to improve it.

TREU does not use the data to make decisions based solely on automated processing that produces legal effects on the data subject.

TREU processes personal data on the basis of Article 7 of the LOPDP, in particular:

• The data subject’s consent.
• The performance of the professional relationship or of pre-contractual measures requested by the data subject.
• Compliance with legal obligations.
• The exercise of the right of defense and appearances before judicial, prosecutorial and administrative authorities.
• TREU’s legitimate interest, in the cases permitted by law and provided the data subject’s rights do not prevail.

Where processing is based on consent, it will be free, specific, informed and unequivocal, and will be obtained through forms, the website or other verifiable means. TREU keeps records of the authorizations granted.

You may withdraw your consent at any time, without retroactive effect, by writing to info@treuabogados.com.

TREU does not sell, rent or trade personal data.

Data may only be disclosed:

• To judicial, prosecutorial or administrative authorities, when necessary for the defense or representation entrusted to us, or where there is a legal obligation or an order from a competent authority.
• To allied lawyers or firms involved in a matter, with the client’s knowledge and under a duty of confidentiality.
• To professionals who provide services to TREU under a duty of confidentiality, such as auditors, accountants or expert witnesses.
• To technology providers acting as data processors (for example, web hosting, email or cloud storage), under confidentiality and security obligations.
• In any other case, with the data subject’s prior and express consent.

Some of TREU’s technology providers may store or process information on servers located outside Ecuador. In such cases, TREU will seek to ensure that the recipient offers an adequate level of protection and assumes obligations equivalent to those of the LOPDP, or that the transfer is authorized by law.

Data will be kept for as long as necessary to fulfill the purpose for which it was collected, manage the professional relationship and comply with applicable legal, tax and professional obligations. It may be kept, duly blocked, for the limitation periods of any actions that may arise from the professional relationship.

Once those periods have elapsed, the data will be securely deleted or, where this is not technically possible, anonymized.

TREU adopts appropriate technical, organizational and legal measures to protect personal data against loss, unauthorized access, alteration or disclosure, including restricting access to each case’s information solely to the people working on it, the use of passwords and encrypted communication through the website.

No system is completely infallible. In the event of a security breach affecting personal data, TREU will act in accordance with the LOPDP.

In accordance with the LOPDP, you have the right to:

• Information: know how and for what purposes your data is processed.
• Access: know what personal data of yours we process.
• Rectification and updating: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data in the cases provided for by law.
• Objection: object to certain processing, including the sending of commercial communications.
• Portability: receive the data you provided to us in a structured, commonly used format. This does not include information produced by TREU through its professional analysis.
• Suspension of processing: in the cases provided for by law.
• Not to be subject to decisions based solely on automated assessments.

Exercising these rights is free of charge. TREU will respond to requests for access, rectification, updating and erasure within fifteen (15) days.

Some rights may be limited where their exercise would affect professional secrecy, a client’s right of defense or compliance with legal obligations.

Send your request in writing to info@treuabogados.com with the subject line “Personal Data Protection”, indicating:

• Your full name and a means of contact.
• A copy of your identity document or, if acting through a representative, the corresponding power of attorney.
• The right you wish to exercise and a clear description of the data concerned.
• Any documents supporting your request, where applicable.

If the request is incomplete, TREU may ask you to complete it. If you consider that your request was not handled adequately, you may file a complaint with the Superintendency of Personal Data Protection.

The website uses cookies in accordance with our Cookie Policy, available at treuabogados.com/en/cookie-policy.

TREU may update this policy to adapt it to regulatory changes or changes in its services. The current version will always be published at treuabogados.com, with its update date.