Institutional Policies

The policies governing Universidad Tecnológica ECOTEC are defined as the set of general guidelines that regulate the institution’s management processes.

The social nature of learning based on scientific and global content in changing action-training contexts.

Research training as a tool for solving professional problems.

A humanistic, scientific, and creative education process that contributes to identifying social needs through engagement with different environments and contexts.

Faculty with deep mastery of science, didactics, methodology, research competencies, and the use of ICTs for the comprehensive education of students.

The education of professionals who, through the integration of theory and practice, address problems in professional and social environments with creative thinking, learning, and research competencies.

Systemically conceive the interaction of the organizational structures responsible for this activity with the different academic programs and the institution’s lines, groups, and research projects, aligned with the needs of science and society.

Strengthen the development of scientific research through the management of scientific-technological knowledge and innovation, from an ethical and humanistic perspective, as an axis that articulates teaching and community engagement processes, aimed at educating competent professionals who can have a comprehensive impact in national, regional, and international contexts.

Contribute to the education of competent professionals capable of addressing the social, scientific, and technological needs of business and society. Conceive business and society as dynamic learning environments for the comprehensive education of future professionals.

Propose solutions to society’s problems and needs through the generation of knowledge, contributing to social and human development and making a better quality of life possible for the population.

Educate professionals with environmental thinking and responsibility who contribute to the sustainable development of business and society. Manage the environmental aspects associated with university activities and processes by increasing efficiency in the use of natural and energy resources.

Promote an environmental culture through the prevention, mitigation, and reduction of environmental impact.

Integrated Management Policy

ECOTEC is an inclusive higher education institution that integrates its processes with relevance and promotes the strengthening of its management through academic quality and social responsibility, preserving the environment and protecting the health and safety of its employees with ethics and transparency, respecting the current legal framework, and incorporating the needs and expectations of stakeholders for continuous improvement.

Senior Management Commitments

  1. Assign, document, and communicate the specific responsibilities for the Integrated Management System models at all levels of the institution.
  2. Promote the dissemination and understanding of the Integrated Management System Policy and its purposes within the framework of strategic planning.
  3. Periodically review the performance of the Integrated Management System with the specific persons responsible for each area in order to make the decisions and take the actions needed to strengthen its performance and results.
  4. Develop a culture of academic reflection, evaluation, continuous improvement, intellectual property management, and accountability at all levels and in all modalities of the Institution, integrating the relevant stakeholders in order to fulfill the institutional philosophy.
  5. Promote innovation and the permanent updating of processes, articulating and integrating their substantive axes with the needs of the national and international environment, while observing labor market trends that support the academic relevance and prospective development of relevant educational, scientific, and technical work.
  6. Ensure compliance with laws and regulations within the framework of university autonomy, mainly those related to the quality of the higher education offered, the environment, and occupational health and safety, as well as any other requirement assumed as a commitment.
  7. Minimize the environmental impact of the activities inherent to the actions carried out by ECOTEC by enhancing the sustainable use of resources and reducing waste whenever technically and economically feasible.
  8. Permanently promote the implementation of cutting-edge technological innovations to manage sustainable and safe campuses for the development of institutional activities.
  9. Promote and apply safe and healthy working conditions by identifying risk factors and hazards for the prevention of occupational risks and the active protection of the health and safety of employees, workers, and visitors, as a basic principle for carrying out activities, as well as a favorable work environment.
  10. Strengthen the professional and occupational development of human talent and their active participation in the Institution as an essential factor for achieving institutional objectives.
  11. Support and respect the protection of fundamental human rights within the institution’s sphere of influence, ensuring that they are not violated.
  12. Promote equal opportunities for students, academic staff, and administrative staff by guaranteeing the same possibilities for access and retention, gender equity, and the inclusion of historically excluded vulnerable groups; eliminating all forms of forced or coerced labor; eradicating child labor; and abolishing discriminatory practices in the workplace.
  13. Promote institutional values and fight corruption in all its forms, including extortion, procurement fraud, influence peddling, illegal use of assets, bribery, and unethical conduct.
  14. Establish cooperation links with national and foreign higher education institutions for knowledge transfer and participation by the university community.

The values declared by Universidad Tecnológica ECOTEC support the fulfillment of its Vision, shape its Mission and organizational culture, and reflect the established standards in its performance. These values represent the institution’s identity and, as such, underlie all decisions that are made and implemented.

Humanism, understood as the recognition of the dignity of the person as the center of the educational process and as the foundation of a comprehensive education aimed at human and social development.

Integrity, understood as upright, honest, consistent, and responsible conduct in the performance of academic and institutional functions. In the university context, integrity is expressed in the pursuit of truth, respect for evidence, transparency in management, observance of applicable regulations, and compliance with standards of rigor and academic excellence in teaching, research, assessment, and the production of knowledge.

Freedom, understood as the ability to think, teach, learn, conduct research, deliberate, and express ideas responsibly, within the framework of intellectual pluralism, respect for human dignity, the legal system, and the institutional principles that guide university life. Freedom promotes open dialogue, critical judgment, and the reasoned exchange of ideas in the generation and transmission of knowledge.

Social, corporate, and environmental responsibility, understood as the commitment of the University and its community to sustainable development, the generation of value for society and the productive sector, and the responsible management of the social, economic, and environmental impacts arising from its academic and institutional work.

Respect, , understood as the recognition of the dignity of persons and the appreciation of diversity in relationships within the university community.

The protection of personal data is of vital importance to UNIVERSIDAD TECNOLÓGICA ECOTEC. Our processes, processing activities, operations, and educational services are aimed at ensuring data protection and information security as part of our institutional objectives for continuous improvement. For this reason, through this Policy, we inform all our students, applicants, alumni, employees, candidates, faculty members, suppliers, and data subjects in general, in a simple and transparent manner, about the processing of their personal data.

1. What is the purpose of our Privacy Policy?

To establish the general guidelines for the processing of personal data at Universidad Tecnológica ECOTEC, in compliance with the duty to inform and in order to strengthen the level of trust between the Data Controller and the Data Subjects in relation to the processing activities carried out. In addition, this Policy fulfills the purpose of informing Data Subjects of the purposes for which their personal data are processed and the mechanisms available for exercising their rights.

2. What is the scope of this Policy?

This Policy shall apply to all databases or files that include personal data and are subject to processing by Universidad Tecnológica ECOTEC. The activities carried out by the institution, as Data Controller, comply with the principles and rights set forth in the Organic Law on Personal Data Protection, published on May 26, 2021, in Official Gazette No. 459, Fifth Supplement, and its General Regulations, published on November 13, 2023, in Official Gazette No. 435, Third Supplement.

3. Who is responsible for the processing of personal data?

Universidad Tecnológica ECOTEC, hereinafter ECOTEC, identified by Taxpayer Identification Number No. 0992489812001, with address at Km. 13.5 Vía a Samborondón, ECOTEC Campus, Samborondón canton, province of Guayas, Ecuador.

You may contact us at the following email address: dpd@ecotec.edu.ec

4. What is the role of the Data Protection Officer?

The Data Protection Officer, DPO, is the person who supervises compliance with our data protection policy, ensuring that data are processed properly and that the rights of Data Subjects are protected. The DPO’s duties include addressing any questions, suggestions, complaints, or claims submitted by the individuals whose data we process. The Data Protection Officer may be contacted in writing at our institutional address or directly by email at dpd@ecotec.edu.ec.

5. For what purposes and on what legal basis do we process data?

The personal data processing activities we carry out are focused on protecting the rights of Data Subjects and on the principle of proportionality. This means that, in each case, we process data that are adequate, relevant, and limited to the fulfillment of the explicit purposes for which they were collected, in order to make it possible to provide the educational services that constitute our mission and to ensure the proper functioning of the institution.

ECOTEC processes personal data mainly to provide academic, research, and cultural services; to send communications related to our activities and services; and to develop the relationships we maintain with our visitors, employees, faculty members, suppliers, and other Data Subjects.

Depending on the Data Subject, we use personal data for the following activities and under the following legal bases established in Article 7 of the Organic Law on Personal Data Protection:

a) Based on the implementation of pre-contractual measures

  • To verify, analyze, and register applicant information and manage the admission process for the different academic programs.
  • To manage supplier selection processes.
  • To manage candidate selection processes.
  • To review the academic and professional profiles of faculty members during selection processes.

b) For compliance with contractual obligations

  • To register and maintain the information of admitted students in the University’s academic information system.
  • To manage the notification and resolution of payment issues by email.
  • To categorize payment rates according to the academic plan and the student financial aid system.
  • To manage the legal relationship with suppliers, including the corresponding payment.
  • To manage human talent records, including payroll management, employee communications, and additional employment benefits.
  • To manage and resolve issues related to Technology and Information at the University involving students, staff, and faculty members.
  • Likewise, to fulfill mission-related processes, such as responding to requests, reviewing academic and professional profiles for the retention of faculty members, and communicating work-related activities, research activities, and invitations to events.
  • To manage communications and incidents related to studies and work.
  • To manage accreditations and certifications for students and faculty members.
  • To manage community engagement, pre-professional practices, internships, mobility, and internationalization processes, including communications related to social impact projects, exchange activities, international cooperation, and scholarship opportunities.
  • To manage library services.
  • To carry out activities related to Student Wellness, including student profiling to ensure the well-being of different vulnerable groups.

c) In compliance with legal obligations

  • To manage accident insurance for students.
  • To manage financial processes related to the registration and payment of Social Security contributions, as well as the issuance of payment receipts, withholding certificates, and other tax documents.
  • To monitor and record the working hours of employees and tenured faculty members, in compliance with obligations and the exercise of specific rights in the labor field.
  • To profile student and faculty information for reporting and registration in the Comprehensive Higher Education Information System, as well as to register information required by the competent public institutions, such as SENESCYT, CACES, and CES.

d) Based on free, unequivocal, and informed consent

  • Explicit consent is required for the control of student, faculty, employee, and staff entry to and exit from ECOTEC facilities through the use of biometric data, such as facial recognition or fingerprint records, depending on the system implemented on each campus. Likewise, explicit consent is requested for body temperature control through the technical systems implemented by the University depending on each campus, for the purpose of preventing the spread of viruses and avoiding the transmission of diseases within the facilities.
  • To manage candidate selection processes when the processing of special-category data is required.
  • To monitor call center calls and handle requests for information.
  • To communicate work-related activities, research activities, and event invitations to Data Subjects with whom there is no contractual relationship.
  • To carry out commercial and marketing activities.
  • To manage host family information in mobility and internationalization processes.
  • To control the loan of audiovisual equipment and the sharing of videos and photographs produced by students.

e) Based on our legitimate interest

  • To control access to University facilities, including video surveillance and/or vehicle license plate capture, in order to preserve the safety of individuals, facilities, movable property, and infrastructure through formal physical access control, always in accordance with the applicable security measures, principles, and limitations.
  • To verify the proper use of resources by users of ECOTEC applications and platforms and to maintain the security of the University’s information systems.
  • To investigate violations of the University’s internal regulations, policies, and manuals and to apply sanctions.
  • To analyze the University’s installed and operational capacity.
  • To conduct performance evaluations of University employees and faculty members and to manage surveys and training activities.
  • To analyze information for the generation of academic planning indicators.

In relation to the foregoing, the main purposes for which the University processes data are detailed below:

Academic management

ECOTEC records and processes the data of individuals who apply during the admission process and subsequently formalize their enrollment, in order to provide its higher education services. Additionally, during their time at the University, personal data may be requested on different occasions, such as for the development of teaching activities, student participation in activities, the internal processes of each faculty, among others.

The data provided and the data resulting from academic activity make it possible to monitor and evaluate students. The management of the student academic record is the most relevant data processing activity, as it is interconnected with the other areas of the University, including enrollment processes, registration, record custody, campus life, and compliance with mission-related, academic, and legal obligations.

Student data is also used for administrative management purposes, that is, to identify students as users of the University’s services; enable access to these services; send information of interest; process and issue degrees; and monitor employment placement and alumni benefits. They are also used to follow up on national and international student mobility processes, the management of pre-professional practices and internships, class recordings, among others.

In online academic services, ECOTEC may record virtual or online assessment sessions to ensure security during their administration and to preserve evidence of the assessment. In view of the foregoing, such recordings are intended to verify student attendance, confirm that the assessment has been completed, and prevent students from engaging in inappropriate conduct during the assessment. In addition, when necessary, classes delivered and academic events held remotely may be recorded; therefore, the image data and, where applicable, voice data of students who are either physically present in the classroom or who interact through digital tools may be processed.

The University may disseminate class recordings through the training tools or platforms established by ECOTEC. In this case, access shall be restricted exclusively to University students and faculty members, as well as to University employees responsible for maintaining such systems. Dissemination by students is strictly prohibited. Under no circumstances may students record classes unless they have requested the consent of the attendees, bearing in mind that ECOTEC shall have the decision-making authority to share class recordings.

If any of the personal data required by the University are not provided, we would not be able to carry out academic management or the purposes associated with these processes.

Contact management

We process personal data to channel requests for information, suggestions, and complaints that may be submitted to us; to contact the sender of the information; to respond to requests made by Data Subjects through any of the contact methods made available to them; and to carry out subsequent follow-up.

We also obtain data through in-person interactions and other channels, such as the receipt of emails, telephone calls, or our social media profiles. In all cases, the data are used only for the explicit purposes that justify their collection and processing.

Human talent management and personnel selection

We process personal data within the framework of the employment relationship with the University’s administrative employees, general service staff, and faculty members. This management includes the processing of personal data for payroll management, well-being and employment benefits, work-related communications, access control and compliance with working hours, and the management of general information contained in human resources records in order to comply with legal and contractual obligations.

In addition, data are processed for personnel selection processes, with the purpose of analyzing whether candidates’ profiles are suitable for vacant or newly created positions. We collect and safeguard résumés submitted by individuals interested in working with us. Our criterion is to retain, for an approximate period of one year, the data of individuals who, after completing the selection process, are not hired by ECOTEC. The reason for retaining these data is to consider the candidate for any new vacancy or position that may arise in the short term and fit the candidate’s profile. However, in this latter case, we immediately delete the data if the Data Subject has requested this.

Management of information on activities and services

Based on the information provided, we send commercial communications through electronic means to inform interested Data Subjects about the different services and activities offered by ECOTEC, as well as the events organized by the University. In relation to the sending of such communications, we may prepare commercial profiles in order to offer the academic services that best match your interests.

In addition, once students have completed their studies, we use their contact data to send alumni information about our services and activities.

Management of suppliers and faculty members

We register and process the data of suppliers and external or guest faculty members from whom we obtain services or goods. This category includes data obtained from Data Subjects who represent or work for legal entities and whose data are processed within the framework of the contractual relationship. We obtain only the data strictly necessary to maintain the commercial relationship and/or provision of services, and we use them solely for this purpose and within the ordinary use of this type of relationship.

Management of statistical reports

The purpose of processing data to prepare statistical reports is to comply with the obligation to analyze the quality of the academic service offered and the student and faculty population. These reports shall be communicated to the competent public education authorities in anonymized form and/or in accordance with the guidelines issued by the relevant authority. The processing of data for this purpose is mandatory; otherwise, such reports could not be prepared.

Likewise, the processing is intended for the internal assessment of the quality of the academic services offered by ECOTEC and for proposing improvements. Statistical reports shall be retained indefinitely in cases where they contain anonymized information.

The processing of data for statistical purposes is legally based both on compliance with a legal obligation, in the case of reports that must be submitted to public education authorities, and on legitimate interest, in the case of internal reports, with the processing being proportional to the purpose pursued.

Management of video surveillance and facility security

At the entrance to our facilities, when applicable, the existence of video surveillance cameras is communicated through informational signs. Likewise, visitors may be asked to provide their identification cards for entry registration, and vehicle license plate information may be captured in order to maintain the control and security of the individuals who enter and remain within the University’s facilities, as well as of all its property and assets. The cameras record images only at points where recording is justified to ensure the security of property and individuals, and the images are used solely for this purpose. They are retained for an approximate period of 20 days.

Management of access control and working hours through facial recognition or fingerprint identification, and body temperature control measurement

ECOTEC may, on certain occasions, process biometric data involving facial recognition or fingerprint identification to verify the identity of students, faculty members, staff, or employees who access our systems and facilities, for the purpose of maintaining University control and security. Likewise, these biometric data may be processed to monitor employee and faculty working hours, in compliance with obligations and the exercise of specific rights in the labor field. Body temperature control information is processed for the purpose of preventing the spread of viruses and avoiding the transmission of diseases within the facilities.

These biometric data processing activities are carried out depending on the systems implemented by the University on each campus. For this purpose, ECOTEC has taken the necessary actions to ensure compliance with data protection regulations, guaranteeing at all times the confidentiality, integrity, availability, and resilience of the entity’s personal data and systems.

Management of Data Subject participation in academic events

During participation in the different activities and events carried out by the University, images of participants and visitors may be captured through photographs and videos. The University reserves the right to take photographs and make recordings of all activities and events it organizes, either individually or in collaboration with third parties, as part of its legitimate interest.

Web portal users and management of proper resource use

The navigation system and the software that enable the operation of our web portal collect the data that are ordinarily generated through the use of Internet protocols. This category of data includes, among others, the IP address or domain name of the computer used by the person connecting to the website. This information is not associated with specific users and is used exclusively to obtain statistical information on website use. ECOTEC’s web portal uses cookies that facilitate browsing and provide us with information about our users. In addition, personal data are processed to verify the proper use of resources by users of the University’s applications and platforms.

6. What categories of data do we process?

Depending on the Data Subject and the processing activities carried out, the categories of data may include the following:

  • a. Identification data. Such as student code; first and last names; email address; telephone number; city; image, photograph; home address; mobile phone number; among others.
  • b. Personal characteristics data. Such as sex; date and place of birth; marital status; among others.
  • c. Family and social circumstances data. Such as the number of people in the family unit; number of siblings and their ages; among others.
  • d. Academic and professional data. Such as educational history, including school, type of school, year, and higher education studies; grades; résumé; employment history; among others.
  • e. Employment details. Such as workplace; workplace address and telephone number; position; among others.
  • f. Economic, financial, and insurance data. Such as scholarships; discounts; financial aid; bank certificates; among others.
  • g. Sensitive data. Such as ethnic identification and biometric data, including fingerprint, facial recognition, and temperature control data.
  • h. Health data. Such as illnesses, medical examinations, medical conditions, among others.
  • i. Data of persons with disabilities. Type of disability and degree of disability.
  • j. Data of adolescents. Students who enter the University before turning 18 years old, or students who are still attending school and participating in events organized by the University.

7. How do we obtain data?

Section 5 refers to some of the sources of the data we process, according to each process. In most cases, the data come directly from the Data Subjects, and we obtain them mainly through forms, agreements, or contracts prepared for this purpose. Likewise, we obtain data at events, fairs, and academic participation activities where we present our academic offerings.

During the development of the relationship with students, faculty members, employees, and service providers, other data are generated and incorporated into ECOTEC’s systems.

8. To whom are data disclosed?

As a general criterion, we disclose personal data to the competent authorities in compliance with legal obligations. Likewise, in certain cases, personal data are disclosed for the proper provision of educational services and for the execution of the contractual relationship with our suppliers. Recipients may include, among others, the following:

  • a) Ministry of Education, CACES, CES, SENESCYT, SIIES, SRI, IESS, judges and courts of Ecuador, the Prosecutor’s Office, UAFE, among others.
  • b) Companies providing insurance services.
  • c) Companies or institutions with which ECOTEC has signed contracts, agreements, or strategic alliances.
  • d) External auditors and University service providers for the execution and management of academic, technological, administrative, Student Wellness, employment benefits, and other services.
  • e) National and foreign universities, as well as other educational institutions that are part of the group, and allied third parties with whom strategic, academic, research, and cooperation links are established.

In all cases, ECOTEC shall ensure that your personal data are processed securely and confidentially, in accordance with the Organic Law on Personal Data Protection. ECOTEC shall only share your personal data with trusted third parties that provide an adequate level of data protection.

9. How long do we retain data?

Personal data shall be stored solely and exclusively for the time necessary to fulfill the purposes of processing, for the legal periods provided in the applicable regulations, and for no longer than the time necessary for the limitation period of legal actions. After this period, the data shall be deleted, anonymized, or blocked, in accordance with the mechanisms, tools, and strategies implemented by ECOTEC.

Likewise, the personal data necessary to address potential judicial or administrative liabilities arising from ECOTEC’s processing of data, and to respond to any request from Data Subjects, public administrations, or judicial bodies, may be retained.

In the case of commercial communications and service promotion based on consent, your data shall be retained until you express your wish to withdraw the consent granted. You may exercise your right to deletion or objection to this processing at any time.

Finally, in the case of images obtained through video surveillance cameras, the data are retained for approximately 20 days, although, in the event of incidents that justify it, they shall be retained for the time necessary to facilitate the actions of the competent authorities.

10. What happens when you provide us with incorrect or inaccurate data?

Data Subjects have the right to quality services. For this purpose, we need you to entrust us with your information. If you refuse to provide it or provide it incorrectly or inaccurately, we will not be able to provide our services, fulfill our obligations, or execute the contractual relationship with the highest standard of quality and excellence that characterizes us.

11. What are your rights and how can you exercise them?

Depending on the circumstances applicable in each case and the current legislation related to personal data protection, you have the right to request the following:

a) Right of Access

You will be provided with further details about how we use your data.

b) Right to Rectification and Updating

Any data that have been modified or changed may be updated, and any inaccuracy in the personal data we process shall be rectified, in accordance with the guidelines of the LOPDP.

c) Right to Deletion

Any personal data whose processing is not justified by any lawful basis shall be deleted.

d) Withdrawal or Revocation of Consent

When processing is based on consent, you may withdraw your consent so that the specific processing activity ceases.

e) Right to Object

The Data Subject may object to or refuse data processing when:

  1. The fundamental rights and freedoms of third parties are affected, the law permits it, and the information is not public, of public interest, or subject to processing ordered by law.
  2. The purpose of the personal data processing is direct marketing. The Data Subject shall have the right to object at any time to the processing of personal data concerning him or her, including profiling, in which case the personal data shall no longer be processed for those purposes.
  3. Consent is not required for processing as a consequence of the existence of a legitimate interest, as provided in Article 7 of the LOPDP, and the objection is justified by a specific personal situation of the Data Subject, provided that no law states otherwise, and unless our grounds for carrying out such processing override any harm to the Data Subject’s data protection rights.

f) Right to Restriction of Processing

You may request the restriction of the processing of your data in the following situations:

  1. When the Data Subject disputes the accuracy of the personal data, while the Data Controller verifies their accuracy.
  2. When the processing is unlawful and the Data Subject objects to the deletion of the personal data and requests the restriction of their use instead.
  3. When the Data Controller no longer needs the personal data for the purposes of processing, but the Data Subject needs them for the filing, exercise, or defense of claims.
  4. When the Data Subject has objected to processing pursuant to Article 31 of the LOPDP, while it is verified whether the legitimate grounds of the Data Controller prevail over those of the Data Subject.

g) Right to Portability

The portability of your data in a compatible, updated, structured, commonly used, interoperable, and machine-readable format, while preserving their characteristics; or the right to transmit them to other controllers in accordance with the guidelines of the LOPDP.

h) Right not to be subject to fully or partially automated decisions

Including profiling, that produce legal effects concerning the Data Subject or that affect his or her fundamental rights and freedoms.

i) All rights established in the LOPDP and its General Regulations

ECOTEC shall verify the legitimacy of the request. If the information requires clarification or expansion, the Data Subject may be required, only once and within a period of five (5) days from receipt of the request, to clarify or complete it. The Data Subject so required shall have a period of ten (10) days, counted from the day following notification, to clarify or complete the request.

If the Data Subject clarifies or completes the request within the granted period, the Data Controller shall duly process it. Requests related to the rights of access, rectification and updating, deletion, and objection shall be answered within a period of 15 days.

Requests concerning the exercise of other rights that do not have a specific response period under the LOPDP shall be addressed within a period of 15 days counted from the day following receipt of the request and/or the clarification submitted.

If the Data Subject so required does not clarify or complete the request within the period of 10 days counted from the day following notification, the request shall be filed, and the Data Subject shall be notified of this circumstance.

To exercise these rights, the Data Subject may submit a written request to the address indicated in Section 3 of this Policy. The Data Subject must send the written request including, at a minimum, the following information:

  • a) The name and email address of the Data Subject or any other means for receiving the response and notifications.
  • b) A document proving the identity of the applicant and, where applicable, that of his or her representative or attorney-in-fact, together with the corresponding authorization.
  • c) A clear and precise description of the personal data with respect to which the Data Subject seeks to exercise any of the rights, and the specific request.

Notwithstanding the foregoing, ECOTEC may refuse the request submitted, stating the reasons for such refusal. In addition, ECOTEC may retain certain information of the Data Subject requesting erasure or deletion so that it may serve as evidence in the event of a future claim against ECOTEC. The duration of such retention shall be for the time necessary according to ECOTEC’s legitimate interest in defending itself against any potential claim that the Data Subject may initiate.

If deletion of the personal data is appropriate but cannot be carried out due to technical limitations, such data shall be anonymized so that they cannot be used to identify or make the Data Subject identifiable.

If you are not satisfied with the use made of your personal information or with the response received when exercising your rights, you have the right to file a complaint with the Personal Data Protection Authority through the channels it establishes for that purpose.

12. Amendments to the Personal Data Protection Policies

ECOTEC expressly reserves the right to modify, update, or supplement this Privacy Policy at any time. Any modification, update, or expansion of the Policies shall be communicated through one of ECOTEC’s official channels.

The latest version shall always be available on our website, and the date of the most recent update shall appear at the end of this Policy.

13. Applicable law and dispute resolution

The terms of this Policy shall be governed by and interpreted in accordance with the laws in force in the Republic of Ecuador, subject to the competence and jurisdiction of the judges of the city of Guayaquil, Ecuador, and of the National Personal Data Protection Authority.

Date of last update: May 23, 2024.