Privacybeleid

1. Responsible Party

The entity responsible for the processing of your personal data is LEALTIS, with registered office in Asunción, Paraguay. You may contact us at info@lealtis.com for any questions relating to this privacy policy.

2. Categories of Personal Data

We may collect and process the following categories of personal data:

• Identification data: full name, date of birth, nationality, passport number, national ID number.
• Contact data: email address, phone number, postal address.
• Professional data: occupation, company name, tax identification number.
• Immigration data: criminal record certificate, birth certificate, marriage certificate (if applicable), apostilled documents.
• Technical data: IP address, browser type, device information, cookies and usage analytics.
• Financial data: bank account details required for service delivery (never stored beyond what is necessary).

3. Purposes of Processing

Your personal data is processed for the following purposes:

• To provide our residency, company formation, and bank account coordination services.
• To communicate with you regarding your application status, document requirements, and service delivery.
• To comply with Paraguayan legal and regulatory obligations, including migration and tax requirements.
• To respond to your enquiries and provide customer support.
• To send relevant updates about our services, only with your prior consent.
• To improve our website, services, and user experience through anonymised analytics.

4. Sharing of Personal Data

We share your personal data only with the following categories of recipients, strictly as necessary for service delivery:

• Government authorities: Paraguayan migration department, tax authorities (DGII), and other public bodies as required by law.
• Banking institutions: for the purpose of opening and maintaining your business bank account.
• Legal professionals: notaries, lawyers, and translators engaged in your service delivery.
• Service providers: technology and communication providers who process data on our behalf under data processing agreements.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

5. International Data Transfers

As our services involve procedures in Paraguay and clients primarily based in Europe, your data may be transferred between Paraguay and European countries. We ensure appropriate safeguards are in place, including standard contractual clauses where applicable, to protect your data during international transfers in accordance with applicable data protection regulations.

6. Data Retention Periods

We retain your personal data only for as long as necessary:

• Service-related data: retained for the duration of the service plus 5 years for legal and tax compliance purposes.
• Enquiry data: if you contact us but do not engage our services, your data is retained for 12 months and then deleted.
• Marketing data: retained until you withdraw consent or request deletion.
• Website analytics: anonymised within 24 hours; aggregated data retained for 26 months.

7. Your Rights

In accordance with applicable data protection legislation (including the EU General Data Protection Regulation where applicable), you have the following rights:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data, subject to legal retention obligations.
• Right to restriction: request limitation of processing in certain circumstances.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@lealtis.com. We will respond to your request within 30 days.

8. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest where applicable.
• Access controls limiting data access to authorised personnel on a need-to-know basis.
• Regular security assessments and vulnerability monitoring.
• Secure document storage and destruction procedures for physical records.
• Staff training on data protection and confidentiality.

9. Cookies

Our website uses cookies to enhance your browsing experience and collect usage analytics. We use the following types of cookies:

• Essential cookies: necessary for the website to function properly (session management, security).
• Analytics cookies: help us understand how visitors interact with our website (anonymised, aggregated data).
• Preference cookies: remember your settings and preferences (language, region).

You can manage your cookie preferences at any time through the cookie consent banner or your browser settings. Disabling certain cookies may affect website functionality.

10. Modifications to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technologies, or legal requirements. We will notify you of material changes by posting the updated policy on our website with a revised “Last updated” date. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the revised policy.