1. Controller and contact
The data controller is COMPASS ABOGADOS, S.A.S. DE C.V., publicly operating as Compass Abogados, with offices at 12 Calle Poniente and 43 Avenida Sur, number 535, Colonia Flor Blanca, San Salvador District, El Salvador.
Data-protection delegate and contact: Juan Manuel Uceda.
juan.uceda@compassabogados.com+503 7786-02762. Data that may be processed
- Technical connection and security data, such as IP address, browser, device, date, requested URL and hosting logs.
- Identity and contact details voluntarily provided by email or telephone.
- The initial, non-confidential description of an inquiry and names needed to assess fit and potential conflicts.
- If a professional engagement is formed, data needed to provide the service, meet legal and professional duties and administer the matter.
Do not send documents or sensitive or confidential information before the firm completes conflict clearance and accepts the engagement in writing.
3. Purposes and legal basis
- Deliver and protect the website, prevent abuse and maintain availability.
- Respond to a request initiated by the individual, perform conflict checks and determine whether the firm may provide the service.
- Meet contractual, legal, regulatory, accounting and professional duties when an engagement exists.
- Measure website use and campaign effectiveness only after prior consent for analytics or advertising measurement.
Processing is limited to the purposes described and relies, as applicable, on the individual’s request or professional relationship, compliance with applicable duties and consent for non-essential purposes.
4. Cookies and local storage
The site stores a technical preference in the browser’s local storage containing the notice version, selected categories and date of the decision. That preference does not by itself identify the visitor. If non-essential categories are rejected, no Google tag is loaded.
When a visitor authorizes analytics, the site loads Google Tag Manager (container GTM-NS77BH6R) to activate Google Analytics 4 (ID G-K7MJDXJP64). It records page views and generic email or telephone clicks without sending the address, number or inquiry contents to Google. Enhanced measurement, Google Signals, personalized advertising and remarketing remain disabled.
Google Analytics may create the first-party cookies _ga, to distinguish users, and _ga_K7MJDXJP64, to preserve session state. Their default duration is two years, subject to browser limits. User and event data retention in the Analytics property is configured for two months.
5. Processors and international access
The website is hosted through OpenAI Sites and its technical infrastructure. The firm uses Google Workspace for email. These providers may process technical data or communications under their contracts, security measures and applicable policies.
Some providers may store or permit access to data outside El Salvador. Compass seeks to limit processing and use providers with appropriate contractual commitments and safeguards. The firm does not sell personal data.
6. Retention and security
Data is kept for the period reasonably needed for the stated purpose, conflict assessment, professional relationship and applicable legal or professional duties. Technical logs are kept under the provider’s security retention periods. The local preference remains until withdrawn, browser storage is cleared or the notice version changes.
Compass applies reasonable confidentiality, access-control and security measures. No system offers absolute security; a breach will be handled under applicable duties.
7. ARCO-POL rights and withdrawal
Individuals may exercise, free of charge, their rights of Access, Rectification, Cancellation, Objection, Portability, Erasure and Restriction, and may withdraw consent for non-essential purposes.
Send the request to the delegate listed above with the subject “ARCO-POL privacy request”, your name, response channel, right being exercised, description of the relevant data and information needed to verify identity or authority. Only necessary proof will be requested, and the firm will respond within applicable legal periods.
Website choices may be withdrawn or changed under “Privacy settings”. Withdrawal does not affect lawful processing completed beforehand.
8. Changes and governing framework
Changes will be posted on this page with a new effective date. If they materially affect consent, purposes or non-essential technologies, the site will request a new choice.
This notice is issued under El Salvador’s Personal Data Protection Law and applicable policies of the State Cybersecurity Agency.