Data protection notice (Ley 172-13)

1. About Ley 172-13

Dominican Republic Law No. 172-13 on the Comprehensive Protection of Personal Data ("Ley 172-13") governs how personal data is collected and processed in the Dominican Republic. It gives individuals rights over their data and places duties on the organisations that hold it. Corpshore Dominicana S.R.L. processes personal data in compliance with Ley 172-13, and this notice explains, in plain terms, how we handle the personal data you provide through this site and how you can exercise the rights the law grants you. It supplements our fuller privacy policy.

2. Responsible party

The party responsible for your personal data ("responsable") is Corpshore Dominicana S.R.L., with registered office at Santo Domingo 10405, Dominican Republic. For any matter relating to your personal data, including exercising your rights, contact info@corpshore.solutions.

3. Principles we apply

In line with Ley 172-13, we handle personal data according to the following principles:

• Lawfulness and consent. We process data on a lawful basis and, where the law requires it, with your free, informed and specific consent, which we record so it can be demonstrated.
• Purpose and proportionality. We collect data for defined, legitimate purposes and limit what we collect to what those purposes need.
• Data quality. We keep data accurate and up to date, and correct or delete it when it is inaccurate or no longer necessary.
• Security and confidentiality. We apply technical and organisational safeguards to protect data and keep it confidential.
• Transparency. We tell you what we do with your data, as in this notice and the privacy policy.

4. What data we process and why

Through this site we process the data you give us in enquiry, proposal, application, talent-community and booking forms, together with the technical data needed to run and secure the site. We use it to respond to you, prepare proposals, evaluate applications, operate the talent community, hold discovery calls, keep the site secure and, where you consent, to measure and improve the site. Full detail of the data, purposes and legal bases is in the privacy policy.

5. Consent

Where we rely on consent, you give it by a clear affirmative action, and we store the exact text and version of the consent with a timestamp so that, as Ley 172-13 requires, the consent is demonstrable. You may withdraw consent at any time; withdrawal does not affect processing carried out before it.

6. Your rights

Ley 172-13 gives you rights over your personal data. You may request:

• Access: confirmation of whether we hold data about you, a copy of it, and information about how and why we process it.
• Rectification (correction): that we correct data that is inaccurate, out of date or incomplete.
• Cancellation (deletion): that we delete your data where there is no lawful basis to keep it, subject to any retention the law requires.
• Objection: that we stop a specific processing you object to, where the law allows.

These are often referred to together as ARCO rights (access, rectification, cancellation, objection).

7. How to exercise your rights

The easiest way is the data subject request form below on this page, which lets you choose the type of request and give the details we need. You may also write to info@corpshore.solutions. To protect you, we verify your identity before acting on a request; we may ask for information reasonably necessary to confirm who you are. We respond within the period the law requires, keep a record of the request and our response, and do not charge you for making a request in the ordinary course. If we cannot fully action a request, we will explain why and tell you what options you have.

8. Data quality and retention

We keep personal data only as long as necessary for the purpose we collected it and to meet legal and legitimate business requirements, and then delete or irreversibly anonymise it. The specific retention periods are set out in the privacy policy. If your data changes, you can ask us to update it at any time.

9. Security

We protect personal data with technical and organisational measures proportionate to its sensitivity, including encryption in transit, least-privilege access, logging and monitoring, secure development and vendor management, under the information-security governance of our Toronto-headquartered parent.

10. International transfers and standards

Some processing happens through service providers located outside the Dominican Republic, under their contractual and technical safeguards (see the privacy policy for the list of providers). Our operations are aligned and compliant with ISO 27001, ISO 9001, SOC 2 Type II, PCI-DSS, HIPAA and GDPR under the group's information-security governance, which supports the protection of data transferred internationally.

11. Complaints

If you believe we have not handled your personal data in accordance with Ley 172-13, you may complain to the competent data-protection authority in the Dominican Republic. We would welcome the opportunity to resolve your concern first, so please consider contacting us before you do.