LEGAL DOCUMENT
Privacy Policy
1. Data controller
Noakkalva S.A. (hereinafter, «Noakkalva»), Tax ID 0993412876001 and registered office at Av. Francisco de Orellana 234, World Trade Center, Tower B, Floor 12, Guayaquil, Ecuador, is the controller of the personal data collected through the noakkalva.com website.
2. Data we collect
We only collect data you voluntarily provide when subscribing to our newsletter (name and email) and technical data generated during your browsing (IP address, browser type, operating system, pages visited and date and time of access).
3. Purposes of processing
We use your data to: (i) send you the 2026 educational guide and periodic communications about real estate crowdlending in Ecuador, (ii) analyse site usage for statistical purposes, (iii) comply with applicable legal obligations in Ecuador, and (iv) respond to contact requests.
4. Legal basis
Processing is grounded on the free and informed consent you provide by submitting the form, in accordance with article 7 of the Ecuadorian Organic Personal Data Protection Law (LOPDP), and on the legitimate interest of Noakkalva to operate and improve the site.
5. Retention period
We keep your data while your subscription remains active and, after unsubscription, for the periods required by Ecuadorian tax and commercial regulations — currently seven years.
6. Recipients
We do not share your data with third parties except by legal obligation. We use cloud service providers located in the European Union and the United States with whom we have signed processing agreements and standard contractual clauses approved by the Superintendency of Personal Data Protection.
7. Rights of the data subject
You may exercise at any time your rights of access, rectification, updating, deletion, opposition, portability and not to be subject to automated decisions by writing to privacy@noakkalva.com or lodging a complaint before the Ecuadorian Superintendency of Personal Data Protection.
8. Security
We apply reasonable technical and organisational measures — TLS 1.3 encryption, two-factor access control and annual audits — to protect your data against loss, alteration or unauthorised access.
9. Changes to the policy
We may update this policy when processing practices or applicable regulations change. The date of the last update is always published at the top of the document.