Privacy Policy

Last updated: October 18, 2026.

At AFC IT Solutions we take the protection of your personal data seriously. This policy explains what data we process, why, on what legal basis and what rights you have. It complies with Ecuador’s Organic Law on Personal Data Protection (LOPDP) and its Regulations and, for people located in Spain or the European Union, with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD) and Law 34/2002 (LSSI-CE).

1. Data controller

  • Controller: AFC IT Solutions.
  • Address: Calle José Aguilera N6655 y César Endara, Comité del Pueblo, Quito, Ecuador.
  • Contact: the contact form on this website, stating “Data protection”.

2. What data we process, why and on what legal basis

  • Enquiries and quote requests (contact form): name, email address and message content. Purpose: to answer your enquiry and, where applicable, prepare a proposal. Legal basis: your consent when submitting the form and pre-contractual measures taken at your request.
  • Clients and suppliers: identification, contact and billing data needed to provide the contracted services. Legal basis: performance of the contract and compliance with legal obligations (tax and accounting).
  • Browsing and analytics: IP address, device, browser and pages visited, through cookies and similar technologies. Legal basis: your consent for non-essential cookies. More information in the Cookie Policy.
  • Security and spam prevention: IP address and technical browser data, including verification through Google reCAPTCHA. Legal basis: legitimate interest in protecting the website and the form from abuse.

We do not process specially protected data or make decisions based solely on automated processing that produce legal effects on you.

3. Retention period

We keep your data for as long as necessary for the purpose for which it was collected: enquiries, for the time needed to answer them; client data, for the duration of the contractual relationship. Afterwards we keep it blocked for the applicable statutory limitation periods and for tax and commercial record-keeping, and then delete or anonymise it.

4. Recipients and processors

We do not sell your data. To provide the service we may share it with providers acting on our behalf and under our instructions:

  • Web hosting and email services (Hostinger).
  • Google services (Tag Manager and analytics, reCAPTCHA, Google Fonts and Google Maps).
  • Email delivery and form management tools used by the website.
  • Public authorities, judges and courts where there is a legal obligation.

5. International transfers

Some providers may process data outside Ecuador or the European Economic Area, for example in the United States. In those cases we require appropriate safeguards under the LOPDP and the GDPR, such as adequacy decisions, standard contractual clauses or equivalent mechanisms.

6. Your rights

You may exercise the following rights at any time, as recognised by the LOPDP and the GDPR:

  • Access to your personal data.
  • Rectification and updating of inaccurate or incomplete data.
  • Erasure of your data.
  • Objection to processing, and suspension or restriction of processing.
  • Portability of your data in a structured, commonly used format.
  • Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
  • Not to be subject to decisions based solely on automated processing.

To exercise them, write to us through the contact form stating the right you wish to exercise and proving your identity. We will reply within the periods set by the applicable law.

7. Complaints

If you believe we have not handled your data properly, you may lodge a complaint with Ecuador’s Superintendence of Personal Data Protection or, if you are in Spain, with the Spanish Data Protection Agency (www.aepd.es) or the supervisory authority of your country of residence in the European Union.

8. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration, including encrypted connections (HTTPS), access controls and spam filters.

9. Minors

This website is not aimed at minors and we do not knowingly collect their data. If you believe a minor has provided us with data, please contact us so we can delete it.

10. Changes to this policy

We may update this policy to reflect legal or website changes. The current version is always the one published on this page. See also our Legal Notice, the Terms and Conditions and the Cookie Policy.