Privacy Policy
This Privacy Policy describes how Nobispot Educación Financiera S.A.S. ("Nobispot", "we") processes the personal data of visitors of nobispot.com and subscribers of the educational newsletter. Data processing is carried out in accordance with the Ecuadorian Organic Law on Personal Data Protection (LOPDP), published in Official Gazette Supplement 459 of May 26, 2021.
1. Data controller
Controller: Nobispot Educación Financiera S.A.S., RUC 1793201956001, with legal address at Av. República del Salvador N36-84 y Naciones Unidas, Edificio Mansión Blanca, floor 8, office 802, Quito 170135, Ecuador. Data protection officer email: privacidad@nobispot.com.
2. Data we collect
We collect: (a) name and email address submitted through the subscription form; (b) technical browsing data such as IP address, device type, browser, operating system, pages visited and time on site; (c) cookie consent preferences. We do not collect sensitive data.
3. Purposes
We use the data to: (i) send the monthly educational newsletter on real estate crowdlending; (ii) measure aggregate usage of the site and improve the content; (iii) comply with legal obligations; (iv) respond to data-subject requests. We do not use the data to produce profiles with automated legal effects.
4. Legal basis
Processing is based on the free, specific and informed consent you provide when checking the box in the form or accepting the cookie banner. For legal obligations the basis is the applicable statutory mandate.
5. Transfers and processors
We rely on processors to deliver the newsletter (a transactional email provider with servers in the European Union) and for statistical measurement (Google LLC, through Google Analytics 4 with IP anonymization). These international transfers rely on standard contractual clauses and safeguards equivalent to those required by the LOPDP.
6. Retention period
Newsletter data is kept while the subscription remains active and up to 12 months after unsubscription, unless a longer legal retention duty applies. Consent records are kept for 5 years.
7. Data subject rights
You may exercise the rights of access, rectification, updating, erasure, opposition, portability and to not be subject to automated decisions by writing to privacidad@nobispot.com. You may also file a complaint before the Ecuadorian Superintendency for the Protection of Personal Data.
8. Security
We apply reasonable technical and organizational measures: encryption in transit (TLS 1.3), role-based access control, encrypted backups and incident logging. No system is infallible; please notify us about any suspected breach.
9. Minors
The site and the newsletter are addressed to people 18 years of age or older. We do not knowingly collect data from minors. If we detect a minor's registration, we delete it.
10. Changes to this policy
We may update this policy. The current version is published at this URL together with the last update date. Material changes are notified by email to subscribers.