Privacy notice

Who is responsible for your data

The data controller is AGORA Advisory, with Pedro Pistoni as the person responsible for handling any request, in the City of Buenos Aires, Argentina.

You can contact him at pedro@agora-latam.com. If you need the full postal address for a formal filing, ask through that same channel and we will provide it in writing.

What data we process

When you request an exploratory assessment we collect: name, organisation, role, sector, email address, the language chosen for the response, and your answers to the questionnaire, including any free text you write.

When you write to us through the contact form we collect: name, organisation, email address and the message.

We also record the date and time of receipt and the version of the questionnaire and notice in force at that moment.

We do not ask for a phone number, billing details or internal documentation, and we expressly ask you not to include third-party personal data, credentials or trade secrets in free-text fields.

What we use it for, and on what basis

The primary purpose is to prepare and send you the assessment response or to reply to your enquiry. The basis is your consent, given by ticking the corresponding box before submitting the form.

If you additionally agree to receive content from AGORA, we use your email for that purpose. It is a separate, optional and revocable consent: declining it does not prevent you from receiving the assessment.

We do not make automated decisions about you and we do not build profiles. The assessment response is written by a person: the system calculates no result.

Who has access, and who processes data on our behalf

Only authorised AGORA Advisory personnel, with verified identity and an assigned role. A consultant accesses only the cases assigned to them, and every access is logged.

To send you emails we use Resend, a provider with servers in the United States, which processes the data on our behalf and solely for that purpose. This involves an international transfer of your name and email address.

The provider hosting the site and the database will be identified in this notice once selected.

We do not publish, sell or transfer your data to anyone else. Requests are not accessible to search engines or through a public address.

How long we keep it

We keep the request and its response for 24 months from the date it was received. After that period we delete them, unless an ongoing contractual relationship justifies keeping them longer or a legal obligation requires it.

When we delete a case we erase the answers, the consents, the drafts, the notes and the email bodies. The audit log retains only minimal metadata, without your data.

Server backups rotate on their own schedule: a deletion does not reach them immediately. If you request erasure we will tell you within what period it also disappears from the backups.

Your rights

You may request access to your data, its rectification, updating and erasure, and you may object to the processing or withdraw any consent at any time, by writing to pedro@agora-latam.com.

Withdrawing marketing consent is immediate and does not affect the assessment response. Withdrawing processing consent means we can no longer reply to you.

To act on such a request we first verify your identity, so that nobody can request your data on your behalf.

If you believe we have not handled your request properly, you may lodge a complaint with the Agencia de Acceso a la Información Pública (AAIP), Argentina's data protection authority.

Applicable law

Processing is governed by Argentina's Personal Data Protection Act (Ley 25.326) and its supplementary regulations, and the supervisory authority is the Agencia de Acceso a la Información Pública.

We additionally take the European Union's General Data Protection Regulation (GDPR) as a reference framework for our practices, because many of our clients answer to it. AGORA Advisory is not established in the European Union: the GDPR guides how we work, it is not the law that governs us.

Site measurement

We measure site usage with our own tool, hosted on the same infrastructure. We do not use Google Analytics or any third-party service, and we do not send information about your visit outside AGORA.

We set no tracking cookies and store no visitor identifier: we do not record your IP address, your browser or anything that would let us recognise you across visits. That is why we count events, not people.

For each event we store only: which page was visited (identified by an internal name, without the full address), the language, which section a button was pressed from, the questionnaire step number and the questionnaire version. Never your name, your email, your answers or your request reference.

Blocking measurement does not prevent you from completing or recording the assessment: the journey works the same.

Changes to this notice

Every request is linked to the version of this notice in force when it was submitted, so it is always possible to know what we told you when you gave your consent. If we change this text we publish a new version with its date.