Privacy and cookie policy
How Abisoft S.A. processes the personal data of people who visit this site or contact us, under Regulation (EU) 2016/679 (GDPR) and Ecuador’s Organic Law on Personal Data Protection (LOPDP).
Last updated: 12 November 2026
1. Data controller
Abisoft S.A.
República del Salvador y Suiza Esq., Edificio EURO, Piso 3, Oficina 301, Quito, Pichincha, Ecuador
Email: info@abisoft.it · Phone: +593 98 515 8131
For any question about this policy or your data, write to info@abisoft.it. We reply in English, Spanish or Italian.
2. What data we process
- Data you send us through forms (contact and service pages): name, company, role, email, phone or WhatsApp, country, project type, budget, timeline, the description of your needs and the page you write from, including the campaign parameters (UTM) of the link that brought you here.
- Data you send us by email or WhatsApp: whatever you choose to share in the conversation.
- Technical browsing data: IP address, date and time, requested page and browser, logged by the server for security. The IP is also used for one hour to limit mass form submissions (anti-spam).
- Site usage data, only if you accept analytics cookies: pages viewed, visit length, device type, approximate city or country and clicks on contact buttons, measured with Google Analytics 4.
We do not ask for sensitive data and ask you not to include it in messages. The site is not aimed at children under 14.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your request, preparing a proposal or quote and following up | Pre-contractual steps at your request (Art. 6(1)(b) GDPR) |
| Site security, preventing spam and abuse | Legitimate interest in protecting the site (Art. 6(1)(f) GDPR) |
| Usage statistics with Google Analytics | Your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time |
| Meeting legal, accounting or tax obligations if we sign a contract | Legal obligation (Art. 6(1)(c) GDPR) |
Required form fields are needed to reply to you; without them we cannot handle the request. We do not make automated decisions or profile you with legal effects, and we do not use your data for advertising.
4. How long we keep it
- Requests and conversations that do not lead to a contract: up to 24 months from the last contact.
- If we sign a contract: for its duration and afterwards for as long as the law requires (for example, accounting and tax rules).
- Anti-spam IP record: 1 hour.
- Server technical logs: only as long as needed for security, according to the hosting provider’s configuration.
- Google Analytics data: according to the retention period set in the property (14 months at most).
5. Who we share it with
Your data is processed by authorised Abisoft S.A. staff. The following providers are also involved, as processors or independent controllers depending on the service:
- Aruba S.p.A. (Italy): website hosting and email.
- Google Ireland Ltd.: Google Analytics, only if you accept it, and Google Maps, only if you click to load the map.
- WhatsApp Ireland Ltd. (Meta): only if you choose to message us on WhatsApp, under its own privacy terms.
We do not sell or pass on your data to third parties for marketing.
6. International transfers
Abisoft S.A. is based in Ecuador, so your requests are handled outside the European Economic Area. This transfer is necessary to reply to your request (Art. 49(1)(b) GDPR) and is carried out with appropriate security measures. Google Analytics data may be transferred to the United States under the EU-U.S. Data Privacy Framework and Google’s standard contractual clauses.
7. Your rights
You can ask at any time to access, correct or erase your data, restrict processing, receive it in a portable format and object to processing based on legitimate interest. You can also withdraw your consent to analytics cookies, without affecting processing carried out before. Write to info@abisoft.it and we will reply within one month.
If you believe your data is not being handled properly, you can lodge a complaint with the supervisory authority in your country, such as Italy’s Garante per la protezione dei dati personali.
8. Cookies and similar technologies
On your first visit we show a banner where you can accept or reject analytics cookies. Closing it without choosing counts as a rejection. Until you accept, the site does not load Google Analytics. We remember your choice for 6 months and then ask again.
| Name | Type | Purpose | Duration |
|---|---|---|---|
abisoft-consent | Technical (local storage) | Remembers whether you accepted or rejected analytics cookies | 6 months |
abisoft-lang | Technical (local storage) | Remembers the language you chose | Until you clear your browser data |
_ga, _ga_* | Google analytics, only with consent | Tells visits apart and measures site usage in aggregate | Up to 2 years |
Technical cookies do not require consent. Fonts are served from our own server, with no connection to Google. The map on the contact page only loads if you click the button to see it; at that point Google may set its own cookies under its privacy policy.
You can also block or delete cookies in your browser settings.
9. Changes to this policy
We may update this policy to reflect changes to the site or the law. The current version will always be published here with its update date.