01 Data controller
Juriscorp S.C. is the controller of personal data collected through juriscorppanama.com.
- Controller
- Juriscorp S.C.
- Principal
- Nelson Ruiz Pinilla, attorney
- Address
- Ancón, Republic of Panama
- nelsonhruiz18@gmail.com
- Phone
- +507 6673-0357
This policy is governed by Law 81 of 26 March 2019 on the Protection of Personal Data of the Republic of Panama and its implementing regulation, Executive Decree No. 285 of 28 May 2021. Where the data subject is located in the European Economic Area, the safeguards of Regulation (EU) 2016/679 (GDPR) also apply, as set out in sections 5, 9 and 13.
02 Data we collect
We collect only what you send us voluntarily through the enquiry form. We do not buy databases, we do not obtain your data from third parties, and we do not build profiles.
Data you provide
- Full name — required.
- Phone or WhatsApp — required.
- Email address — optional. You may leave it blank.
- Practice area of your enquiry — required.
- Summary of your case — required.
Technical data
- IP address. Used at the moment of submission to limit the number of requests per sender and for anti-fraud verification. It is not stored in our database: it is held in volatile memory for a few minutes and transmitted to Cloudflare as part of the anti-bot check (section 5).
- Date and time of submission, and an internal enquiry identifier.
Data we generate
While handling your enquiry we may add a status (new, contacted, closed and so on), the attorney's internal notes, and a change log for traceability. These are internal records and you may request access to them under section 9.
The summary of your case may contain sensitive data within the meaning of Law 81 — for example, if your enquiry concerns a criminal or immigration matter. We ask that at this first contact you describe your situation in general terms and avoid including third-party data, identity documents or details that are not necessary for an initial assessment. We can gather the full information later through an appropriate channel.
03 Purpose and legal basis
Your data is processed exclusively in order to:
- Assess your enquiry and determine whether we can assist you.
- Contact you by phone, WhatsApp or email to respond.
- Manage internally the follow-up of the enquiry.
- Prevent abuse of the form through anti-bot verification.
The legal basis for each purpose is as follows:
| Processing | Basis under Law 81 (Panama) | Basis under GDPR (EU) |
|---|---|---|
| Assessing and responding | Express consent of the data subject | Art. 6(1)(b) — pre-contractual steps |
| Case summary | Express consent for sensitive data | Art. 9(2)(f) — establishment of legal claims |
| Anti-bot verification | Legitimate interest in security | Art. 6(1)(f) — legitimate interests |
We do not use your data for advertising purposes, we will not send you newsletters or unsolicited commercial communications, and we do not sell or transfer your data to anyone for commercial purposes.
04 Attorney-client privilege
Independently of what data protection law requires, all information you communicate to us is covered by attorney-client privilege, under the Judicial Code of the Republic of Panama and the Code of Ethics and Professional Responsibility of the Attorney.
That duty is stricter than general confidentiality obligations, it does not expire even if you never engage our services, and it survives the end of the relationship.
Submitting the form does not by itself create an attorney-client relationship. That relationship is formed solely by express agreement between the parties. The content of this site is informational and does not constitute legal advice.
05 Processors and international transfers
To deliver the service we rely on technology providers acting as data processors: they process data on our instructions and are not authorised to use it for their own purposes. This is the complete list:
| Provider | Function | Data it accesses |
|---|---|---|
| Supabase | Database and authentication | All enquiry data, including the case summary |
| Resend | Sending the new-enquiry notification | Name, phone, email and practice area. It does not receive the case summary |
| Cloudflare | Anti-bot verification (Turnstile) | IP address and a technical identifier for the check |
| Netlify | Website hosting | Server access logs, including IP address |
The summary of your case does not leave the database: it does not travel in the email notification and is not shared with any other provider.
Transfers outside Panama
These providers operate infrastructure located outside the Republic of Panama, primarily in the United States. Such transfers are carried out on the basis of your express consent and the contractual confidentiality and security commitments assumed by each provider, in accordance with Law 81 of 2019.
For data subjects in the European Economic Area: the Republic of Panama is not covered by an adequacy decision of the European Commission. Transfers to our providers rely on the Standard Contractual Clauses adopted by the European Commission and on your explicit consent under Article 49(1)(a) GDPR. You may request information about these safeguards at the address given in section 10.
06 Retention period
| Situation | Period |
|---|---|
| The enquiry does not lead to an engagement | 12 months from the last contact, after which it is deleted |
| A professional relationship is formed | The statutory periods applicable to the case file and to the attorney's professional obligations |
| You request erasure | Deleted immediately, unless a legal retention obligation applies |
The twelve-month period reflects the fact that legal matters mature slowly and that people who enquire often return months later. Once that period passes without contact, the purpose lapses and the data is erased.
08 Security measures
We apply, among others, the following technical and organisational measures:
- Encryption in transit through mandatory HTTPS across the site.
- Encryption at rest of the database by the provider.
- Row-level access control: enquiry data is not publicly readable, only by authenticated firm accounts.
- Restricted access to the internal panel through individual credentials.
- Change logging on each enquiry, for internal traceability.
- Anti-bot verification and rate limiting per sender.
- Validation and sanitisation of all data received before it is stored.
No system is invulnerable. Should a security breach occur affecting your personal data, we will inform you and notify the competent authority within the time limits set by applicable law.
09 Your rights
Law 81 grants you the following rights over your personal data, free of charge:
- Access — to know what data of yours we hold and how we process it.
- Rectification — to correct inaccurate or incomplete data.
- Cancellation or erasure — to ask us to delete your data.
- Objection — to object to a specific processing operation.
- Portability — to receive your data in a structured, commonly used format.
You may also withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
If you are in the European Economic Area, you additionally have the right to restriction of processing (Art. 18 GDPR) and the right not to be subject to automated decision-making (Art. 22 GDPR). We confirm that we make no automated decisions about your enquiry: every enquiry is reviewed by a person.
10 How to exercise your rights
Write to nelsonhruiz18@gmail.com stating:
- The right you wish to exercise.
- Your full name, exactly as entered in the form.
- A means of contacting you with our reply.
We may ask you to prove your identity before acting on the request. This check is not an obstacle: it is what prevents a third party from accessing your data by impersonating you.
We will respond within a maximum of thirty (30) calendar days of receiving a valid request.
11 Minors
This site is intended for adults. We do not knowingly collect data relating to minors. If we detect that we have received data from a minor without the authorisation of a parent or guardian, we will delete it. If you believe this has occurred, please tell us at the address in section 10.
12 Changes to this policy
We may update this policy to reflect changes to the site, to our providers or to applicable law. The last updated date appears at the top of the document, alongside the version number.
If a change materially affects how we process your data and you have an active enquiry, we will inform you through the contact details you have provided.
13 Complaints
If you believe we have not properly addressed your rights, we would be grateful if you came to us first: most issues are resolved in an exchange of emails.
In any event, you may lodge a complaint with the competent supervisory authority:
- Panama: the National Authority for Transparency and Access to Information (ANTAI), the data protection authority under Law 81 of 2019.
- European Economic Area: the supervisory authority of your country of residence, place of work, or of the place where the alleged infringement occurred, under Article 77 GDPR.