Contents
General information
Panama Empresas seeks to ensure your privacy and personal data are regulated according to the GDPR 679/2016 and ASEDIE’s Sectoral Code of Conduct. Under these regulations, your privacy and personal data are protected when we request or collect information from you. In both cases, all personal information will be used as described in this Privacy Policy and in accordance with the ASEDIE Code of Conduct and the GDPR.
Acceptance of the privacy policy
By visiting and browsing the website, you accept this Privacy Policy, complemented by our Cookies Policy at Cookies Policy and our Terms of Service at Terms & Conditions.
When requesting a report on a company, executive, shareholder, beneficial owner or person with significant control, you confirm you have a legitimate interest in the subject’s personal data under GDPR article 6.1.
As privacy and personal‑data protection are important to Panama Empresas, this policy describes what data we may collect from you, directly or indirectly, and how this complies with personal‑data legislation (GDPR).
This policy may change over time. When it does, the reference date at the top will be updated accordingly.
Types of information processed
a) IP addresses: We may collect your computer’s IP address for each request, both from active visits and passive requests sent by your browser.
b) Computer information: We may collect info sent by your browser about your device, including: browser version, add‑ons, OS, available resolution, connection speed, cookie availability and time zone.
c) Activity info: We may collect detailed usage data, including access dates/times and page interaction via keyboard, screen, mouse or other inputs, tied to your IP address. Third parties may also collect this for remarketing (see http://adssettings.google.com/ and https://www.networkadvertising.org/managing/opt_out.asp).
d) E‑mail, phone and name: We may request your e‑mail and/or name to deliver products/services and to address you in our communications.
e) Billing details: We use PayPal as payment processor, which may request details about you or your company for billing purposes.
f) Contact details: We may store your contact data if you communicate with us via forms, e‑mail, phone or other methods.
g) Password: We may request a password for some services.
h) Cookies: See Cookies Policy.
i) Corporate roles: We process first and last names of natural persons who hold or held public roles, are or were shareholders, beneficial owners or persons with significant control, together with the corresponding role or holding. To differentiate homonyms we may process birthdate and passport or national ID number. These data are public as they come from official gazettes, commercial registries or other official publications, and refer only to the person’s business activity.
Legitimate interest in data processing
The information indicated in section i) above is processed without obtaining prior consent from the data subjects, based on the legitimate interest of Panama Empresas’s clients to access that information, under GDPR:
- Article 6.1.f: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.
This allows our clients to comply with due‑diligence obligations imposed by Directive (EU) 2015/849 (AML/CFT) and Spain’s Law 10/2010 of April 28.
Data sources
Corporate‑role data are obtained from official public publications such as official gazettes, edict boards and public websites of registries in Panama.
How information is collected and where it’s stored
Information exchanged with you through our website is transmitted from your browser to our secure servers via HTTPS. Sensitive information is encrypted. Information collected by e‑mail is stored on our mail provider’s servers and non‑electronic information at our offices. While we strive for maximum security, we cannot fully guarantee information security. We and our hosting provider keep security measures to protect collected data. Data is stored in Canada.
Personal information — unlike public‑domain data — is always collected with your explicit consent.
Data retention period
Personal data will be kept indefinitely unless you request deletion.
Purpose of processing
Information on companies and corporate roles is used to produce company, executive, shareholder and PSC reports requested by our clients.
In general, we collect information to improve the performance and quality of our services, understand client needs and strengthen the security of our systems.
Contact information such as e‑mail is required to deliver the products and/or services you request.
We may contact you via e‑mail, phone or other methods to fulfill delivery of our products/services. We may also inform you about new products/services and promotional materials (you can unsubscribe at any time).
We may keep internal records and generate reports, statistics and tests with the information, to improve quality, performance and security of our services and products.
Who has access to the collected information
In general, only Panama Empresas has access to your personal data. In some cases, some or all data may be shared with third parties; we restrict as much as possible the amount of data and situations where this happens.
Panama Empresas clients have access to data collected without explicit consent when requesting reports under legitimate interest.
Your data cannot be shared if Panama Empresas or website assets are acquired by a third party; in that case, data ownership would not be transferred.
We may share information with third‑party providers when necessary to fulfill contractual obligations with you or with them.
We may share information when required to comply with legal obligations.
International transfers of personal data may occur between companies incorporated in different jurisdictions.
We do not transfer or sell your personal data to third parties except when required by authorities.
Access and modify your personal information (as a client)
Your personal information as a registered user or client of Panama Empresas is regulated by the GDPR, as defined in point 9 of the Terms of Service. You can access, modify and cancel your data by going to your Dashboard at Dashboard.