1.
Our commitment to your information
Osvaldo Quintero understands the value and sensitivity of the information he handles. The confidentiality and protection of the personal data of our clients, users and everyone else we deal with is a priority of our service.
As legal professionals and providers of legal services, we are bound by ethical, professional and legal duties of confidentiality. All information received within the attorney–client relationship is handled under strict standards of secrecy, and we adopt measures to protect any information —personal or corporate— stored or processed by our organisation.
This Policy describes how we collect, use, store and share the personal data entrusted to us, and supplements any prior agreement, whether oral or written, relating to the processing of personal, commercial or financial information.
2.
Scope
This Policy applies:
-
To Osvaldo Quintero, in his capacity as controller of personal data processing.
-
To any natural or legal person whose data we process. The terms “we” or “our” refer to Osvaldo Quintero or to his business name “tradslegal”.
-
The terms “you” or “data subject” refer to the person whose personal data is being processed.
3.
Legal framework
Our handling of personal data is based principally on:
-
Law 81 of 2019 — on the Protection of Personal Data.
-
Executive Decree 285 of 2021 — implementing Law 81 of 2019.
-
These rules govern the processing of personal data in the Republic of Panama, including due diligence obligations, retention of information and disclosure of data to the competent authorities where legally required.
4.
Key definitions
For the purposes of this Policy:
-
Personal data: any information concerning natural persons that identifies them or makes them identifiable.
-
Sensitive data: data relating to the data subject’s private sphere, or whose improper use may give rise to discrimination or entail a serious risk to them —including data revealing racial or ethnic origin, religious or philosophical beliefs, trade union membership, political opinions, health, sexual orientation, or genetic and biometric data intended to uniquely identify a person.
-
Database: an ordered set of data of any nature that allows the data to be related to one another and to be processed or transmitted by its custodian.
-
Data processing: any technical operation or procedure, whether automated or not, that allows data to be collected, stored, organised, retrieved, communicated, assigned, transferred, erased or otherwise used.
-
Consent: an expression of the data subject’s will by which their data is processed.
-
Transfer: to disclose, publish, communicate, exchange or transmit data, by any means, within or outside the country, to persons other than the data subject.
5.
Principles governing the processing
-
Fairness: data is collected without deceit or falsehood and without fraudulent, unfair or unlawful means.
-
Purpose: data is collected for specified purposes, is not processed for incompatible purposes and is not kept longer than necessary.
-
Proportionality: only data that is adequate, relevant and limited to the minimum necessary is requested.
-
Accuracy: data is accurate and kept up to date with the data subject’s current situation.
-
Data security: technical and organisational measures are adopted to guarantee data security, particularly for sensitive data, and the data subject is informed as soon as possible if that security has been breached.
-
Transparency: all communication to the data subject about the processing is made in plain and clear language.
-
Confidentiality: those involved in the processing are bound to secrecy, even after the relationship ends.
-
Lawfulness: processing requires the data subject’s prior, informed and unambiguous consent, or a legal basis.
-
Portability: the data subject may obtain a copy of their data in a structured, generic and commonly used format.
6.
How we obtain your data and what we use it for
We collect personal data with your express consent, given from the moment you agree to use our services, make enquiries in person or electronically by any means, access or use our website, or send us an email; this is necessary as part of our professional activity.
We do not transfer, sell or assign data for third-party advertising purposes. We do not store your personal data in cloud services.
Legal basis: the data subject’s consent, and the necessity of the processing for the performance of a contractual obligation to which the data subject is a party.
7.
Clients and prospective clients
We may collect information for:
-
Full identification: name, date of birth, identity document, nationality and role within a legal entity.
-
Contact and billing: address, email address, telephone and taxpayer registration number (RUC).
-
Due diligence: compliance with due diligence and Know Your Client policies. Information may be verified against public sources, before the competent authorities or through specialised providers where necessary to meet legal or contractual obligations.
-
Purposes: provision of legal services, contract management and billing, conflict-of-interest checks, compliance with regulatory obligations and response to judicial or administrative requests.
-
Retention: data is kept for a maximum of seven (7) years after the professional relationship ends.
8.
Website (cookies) and electronic forms
-
Our website may use cookies to collect data such as your IP address. That information is not stored by us but by the web service, and this is beyond our control; something similar may occur when you contact us via WhatsApp or email, services operated by international companies.
-
Data provided through contact forms is used solely to respond to your request.
9.
Social media
Our accounts on platforms such as LinkedIn, Facebook, Instagram and YouTube are governed by each network’s own privacy policy. We do not collect personal data through these platforms, nor do we provide legal advice by those means.
10.
Sharing and transfers
We may share data:
-
With our authorised personnel.
-
With external providers —expert witnesses, translators, banks and money remittance houses for client payments— as part of the legal service you have requested.
-
With the competent authorities where there is a legal obligation.
11.
Information security
We apply physical, technical and organisational measures to protect information against unauthorised access, loss or misuse.
12.
Accuracy and updating
The data subject is responsible for keeping their information up to date and for notifying us of any relevant change.
13.
Data subject rights
You may exercise the rights of access, rectification, erasure, objection and portability. We will respond within the time limits set by the applicable rules.
14.
How to exercise your rights
Requests must be sent by email to tradslegal@outlook.com.
15.
Effective date and amendments
This Policy takes effect on 13 February 2026. We reserve the right to amend it to reflect regulatory changes or better practices.
