Who handles your data
Cognitex Industrial, established in Quito, province of Pichincha, Ecuador, is the data controller for the personal data you submit through this site and through the services you contract.
For anything to do with this policy, including exercising your rights, write to [email protected].
This processing is governed by Ecuador's Ley Orgánica de Protección de Datos Personales (LOPDP) and its implementing regulation.
What we collect
We ask for the minimum needed to reply to you. The contact form collects the fields you fill in:
- Name.
- Company, if you choose to give it.
- Phone, if you choose to give it.
- Email address.
- Engine of interest: energy, support agents or fleets.
- The message you write.
How the form travels
This site is static and the contact form posts nothing to a server of ours. When you press "Send", the browser assembles a message from the fields you filled in and opens it in WhatsApp. Until you send that message, the data never leaves your device.
Once you send it, the conversation is hosted by WhatsApp and WhatsApp/Meta's own privacy policy applies as well — something outside our control. If you would rather not use that channel, email us instead: the address is on the same contact page.
Browsing data and analytics
If you accept analytics, we collect aggregate technical browsing data: pages viewed, time on page, device type, browser and approximate country derived from the IP address. Measurement is done with Google Analytics 4, with Google LLC acting as a data processor. We do not build advertising profiles, we do not track you across sites, and we neither sell nor share this data.
We do not collect sensitive data in the sense of the LOPDP — ethnic origin, health, beliefs, political or union affiliation, biometric data or sexual orientation — and we never ask for national ID numbers, bank details or card data through this site.
Why we use it, and on what legal basis
The declared purpose for contact data is a single one: to answer your commercial enquiry, prepare a quote, a diagnostic or a proposal, and keep the conversation going while it is live. We do not use it for third-party advertising or for any purpose other than the one that prompted your message.
The legal basis is your free, specific and informed consent, given when you submit the form, together with pre-contractual steps taken at your request. For analytics the basis is your consent alone, and you may withdraw it at any time.
If we ever needed to process your data for a different purpose, we would tell you and ask for fresh consent before doing so.
How long we keep it
Contact form data is kept for as long as the commercial conversation lasts and for up to twenty-four (24) months after the last contact. After that it is deleted, unless a legal, tax or contractual obligation requires us to keep it longer, in which case it is blocked and used only to meet that obligation.
Analytics data is kept in aggregate form for a maximum of fourteen (14) months.
If you ask for deletion before those periods elapse, we act on it as described below.
Where it is processed
This site, the Sentinel platforms and the telemetry we capture run on Google Cloud Platform infrastructure, which acts as a data processor on our behalf and under our instructions.
This means data may be stored and processed in data centres outside Ecuador, including in the United States. For those international transfers we require our providers to give contractual guarantees of security, confidentiality and purpose limitation equivalent to the level of protection the LOPDP demands.
We apply encryption in transit and at rest, named credentials with least privilege, and access logging.
Client telemetry
The telemetry we capture from a plant, a fleet or a support channel belongs to the client that generates it. Each client lives in a logically segmented space with its own credentials and access controls: no client can read another client's data, and our staff access only the project they are working on.
We do not train models on one client's information in order to serve another client. When a support agent uses language models, it does so over that client's context and under agreements with the model provider that forbid using the data to train general-purpose models.
When the relationship ends we hand over the history in a structured, commonly used format and delete it from our systems within thirty (30) days, unless the client instructs otherwise in writing.
Cookies and how to switch them off
This site uses no advertising cookies and no cross-site tracking. The only cookies that are not strictly necessary are Google Analytics 4 cookies, which tell us which sections get read and which do not.
Analytics starts denied. Consent is asked for in the notice shown on your first visit and, until you accept, no Google script loads and no measurement cookie is set. Once enabled, IP addresses are anonymised and no advertising feature is switched on.
Your choice is stored in your browser's local storage under the key "cgx-consent". To change it, clear this site's data from your browser: the notice appears again on your next visit. Declining analytics limits no feature of the site.
Your rights
The LOPDP grants you the following rights over your own personal data:
- Access: to know what data of yours we process, where we got it, for what purpose and to whom it is disclosed.
- Rectification and updating: to correct anything wrong, out of date or incomplete.
- Deletion: to have your data erased once it is no longer needed for the declared purpose, or when you withdraw consent.
- Portability: to receive your data in a structured, commonly used and machine-readable format, or to have us hand it directly to another controller.
- Objection: to object to a specific processing activity, analytics included, with no need to justify it where the basis is your consent.
- Suspension of processing while a rectification or objection request is resolved, and not to be subject to automated decisions producing legal effects on you.
How to exercise them
Write to [email protected] from the address you contacted us with, saying which right you want to exercise. If we cannot identify you with reasonable certainty we will ask for further verification before acting: handing your data to someone else would be worse than not handing it over at all.
We reply within the fifteen (15) day period set by the LOPDP. If the request is complex we tell you within that same period how much longer we need and why. The process is free of charge.
If you believe we handled your request badly, you may complain to Ecuador's Superintendencia de Protección de Datos Personales.
Changes to this policy
If this policy changes, the new version is published here with its update date. Where the change affects the purpose of processing or adds a new recipient, we tell you by the email address you wrote to us from before it takes effect.