Privacy and Personal Data Protection Policy

1. Data controller

SITCON DIGITAL S.A.S DE C.V ("SITCON Digital", "we"), domiciled at Col. Las Brisas, Calle Dalton, Block D, Lourdes, Colón, La Libertad, El Salvador, is the controller of the personal data collected through www.sitcondigital.com. For any matter related to your data, write to us at info@sitcondigital.com.

This policy is issued in accordance with the Personal Data Protection Law (Ley para la Protección de Datos Personales) of El Salvador.

2. Scope

It applies to this website, its forms, webinar registration, the blog, and the contacts you initiate from the site via WhatsApp or email. The BitGen and AgendaMax products have their own privacy policies, published on their respective websites.

3. Data we collect

• Data you provide to us: name, company, job title, email address, phone number, service of interest, and the content of your message or request.
• Browsing data (only if you accept it in the cookie banner): IP address, device and browser type, pages visited, source of the visit and campaign parameters (for example, UTM), and analytics and advertising cookie identifiers.
• Messaging: if you write to us via WhatsApp, we process your number and the messages we exchange.

We do not request sensitive personal data. We ask you not to include in forms or initial messages sensitive information about yourself or third parties (for example, data leaked in an incident); if your case requires it, we will agree on a secure channel.

4. Purposes

We process your data to:

• a) respond to your inquiries and requests for quotes or consulting;
• b) prepare technical and economic (pricing) proposals;
• c) manage your registration for and participation in webinars;
• d) send you commercial communications and content about our services, only if you expressly authorize it;
• e) measure and improve the site and our campaigns, only with your cookie consent;
• f) protect the security of the site and prevent abuse;
• g) comply with legal obligations.

5. Basis for processing

Your consent, the performance of pre-contractual measures you request from us, and compliance with legal obligations. You may withdraw your consent at any time, without retroactive effect.

6. Recipients and transfers

We do not sell or rent your data. To operate the site, we rely on providers that act as data processors: hosting and infrastructure (Vercel, Supabase), analytics and advertising (Google and Meta, only with your consent), messaging (WhatsApp).

Some of these providers store data on servers located outside El Salvador, mainly in the United States. By accepting this policy and, where applicable, the corresponding cookies, you expressly consent to such transfer. We only work with providers that apply adequate security and confidentiality measures.

We may also disclose data to authorities when required by a law or by an order of a competent authority.

7. Retention

We retain contact data for 24 months from the last contact if no business relationship is established; after that, we delete or anonymize it. If you become a client, we will retain it for as long as the relationship lasts and for the periods required by applicable laws.

8. Security

We apply technical and organizational measures to protect your data against unauthorized access, loss, or alteration, including encryption in transit, access control, and activity logging. If a breach affecting your data were to occur, we will notify it in accordance with the law.

9. Your rights (ARCO-POL)

You may exercise at any time your rights of Access (Acceso), Rectification (Rectificación), Cancellation (Cancelación), Objection (Oposición), Portability (Portabilidad), Erasure or "right to be forgotten" (Olvido), and Limitation of processing (Limitación del tratamiento).

To do so, write to info@sitcondigital.com with the subject line "Derechos ARCO-POL" (ARCO-POL Rights), stating your name, the right you wish to exercise, and a means to verify your identity. The procedure is free of charge, and we will respond within the time limits established by law. If you consider that your request was not properly addressed, you may turn to the State Cybersecurity Agency (Agencia de Ciberseguridad del Estado, ACE).

10. Cookies

We use cookies necessary for the operation of the site and, only if you accept them, analytics cookies (Google Analytics) and advertising cookies (Meta Pixel, Google Ads). You can change your choice at any time from the "Cookie preferences" link in the site footer.

11. Minors

This site is intended for businesses and professionals. We do not knowingly collect data from persons under 18 years of age.

12. Changes

We may update this policy. We will publish the current version on this page with its update date.