Privacy and Personal Data Protection Policy

1. Data controller

Quimelia C.A., Ecuadorian tax ID RUC 1791408950001, is the controller of personal data related to this website whenever it determines the purposes and means of processing.

• Address: Av. Zamora Oe3-222 and Av. Brasil, Quito, Ecuador.
• Phone: +593 (02) 244-2227.
• Email: quimelia@quimelia.com.
• Website: www.quimelia.com.

This policy applies to quimelia.com and its public internal pages. Other portals, stores, extranets or services operated by related brands may have separate policies when their processing activities differ.

2. Applicable law and principles

Personal data is processed in accordance with the Constitution of the Republic of Ecuador, the Ley Orgánica de Protección de Datos Personales (LOPDP), its Reglamento General, and applicable regulations, guidelines and criteria issued by Ecuador's Superintendence for Personal Data Protection.

Quimelia applies principles including lawfulness, fairness, transparency, purpose limitation, data minimization, proportionality, confidentiality, security, accuracy and storage limitation.

3. Personal data we may process

• Identification and contact data: name, company, position, email, phone number and information you voluntarily provide when requesting information or contacting Quimelia.
• Professional or business data: company, industry, technical interest, requirement or project related to your inquiry.
• Technical browsing data: IP address, date and time, browser type, operating system, pages visited, referrer URL and technical or security server logs.
• Cookie preferences: the choice you make through the website's consent manager.
• Communications: messages, requests, observations and documents you choose to send us.

4. Sources of personal data

Data may be collected directly from you when you contact us, or automatically through your browser and the technical infrastructure required to operate and secure the website. In business relationships, professional information may also be obtained from public sources or legitimate corporate contacts for the relevant purpose.

5. Purposes and legal bases

6. Types of processing

Processing may include collection, recording, organization, storage, consultation, use, updating, disclosure to authorized processors or recipients, restriction, deletion and anonymization as needed for each purpose.

7. Providing data and consequences of refusal

General browsing does not require you to voluntarily provide identifying information. When a request requires contact data, those details are necessary for us to respond or manage the request. If you choose not to provide them, we may be unable to handle the request, without restricting access to the public areas of the website.

8. Retention periods

Quimelia retains personal data only for the period strictly necessary to fulfill the purpose that justified the processing. Records and communications are reviewed periodically and, once the purpose has been fulfilled, are deleted, restricted or anonymized unless a legal, contractual or other legitimate ground requires further retention.

9. Recipients, processors and international transfers

Quimelia may allow access to personal data, under instructions and confidentiality safeguards, to providers of web hosting, technology, cybersecurity, email, support, maintenance or professional advisory services. Data may also be disclosed to authorities when required by law or a valid request.

Where a provider involves processing or hosting outside Ecuador, Quimelia will seek to ensure that any international transfer or disclosure is carried out with the safeguards required under applicable Ecuadorian law.

10. Data subject rights

Where applicable, you may exercise rights of information, access, rectification and updating, deletion, objection, portability, restriction/suspension of processing, and the right not to be subject to a decision based solely on automated assessment that produces legal effects or similarly significant impacts.

Where processing is based on consent, you may withdraw consent at any time through a simple mechanism, without affecting the lawfulness of processing carried out before withdrawal.

11. How to exercise your rights

Send your request to quimelia@quimelia.com, stating the right you wish to exercise and the information reasonably necessary to verify your identity and locate the relevant data.

Quimelia will handle requests under the LOPDP and applicable rules. If you believe your rights have not been properly addressed, you may contact Ecuador's Superintendencia de Protección de Datos Personales and other competent authorities.

12. Security and confidentiality

We apply reasonable administrative, technical, organizational and legal measures to protect personal data against loss, alteration, unauthorized access, disclosure or processing, taking into account the nature of the information, context and risks.

13. Children and adolescents

Quimelia's corporate website is not specifically directed to children or adolescents and does not seek to intentionally collect their personal data. Where authorization from a legal representative is required, applicable Ecuadorian rules will be followed.

14. Automated decision-making

Browsing this website does not involve solely automated decisions intended to produce legal effects or similarly significant impacts on visitors.

15. Cookies and similar technologies

See our Cookie Policy. Optional technologies requiring consent should not be activated before the visitor accepts them.

16. Changes to this policy

We may update this policy to reflect legal, technological or processing changes. The current version will always be available on this page and will show the date of its latest update.

17. Language

This English version is provided for the convenience of international visitors. In the event of any interpretive inconsistency, the Spanish version and applicable Ecuadorian law will be the primary reference.