This translation is provided for convenience; the Spanish version prevails.
Here we explain what data Advanced Systems Supply, S.A. receives through the advsysa.com site and through the channels the site offers you (forms, chat, WhatsApp, email and phone): what we use it for, who else receives it, how long we keep it and how to use your rights. We follow Law 81 of 2019 (Panama’s Personal Data Protection Law) and its regulations, Executive Decree 285 of 2021.
In short
We use your data to answer what you ask us. News and offers, only if you check that box.
We do not sell or rent your data.
We do not use advertising cookies or measurement tools from other companies. To count visits, your browser does store a few pieces of data from our own system: in point 2 we tell you which ones and how to ask us not to measure you.
Your data is stored outside Panama, mainly in the United States; in point 4 we tell you with whom.
You can ask to see, correct or delete your data, object to a use or take it with you: write to us at soporte@atg.com.pa or call (507) 209‑5151.
1. Who is responsible for your data
Advanced Systems Supply, S.A., RUC 49930-2-316585 DV 70. Vía España, Las Sabanas, Calle 77A, ATG Building, Panama. For any privacy matter: soporte@atg.com.pa (subject «Privacidad») or (507) 209‑5151. Our support team handles it.
2. What data we receive and what for
Forms (contact, quote, CCTV and quote builder). We receive what you write: name, company, email, phone, the project’s area, your message and what you choose (the service, the size of the project; in the quote builder, also the estimate it calculated for you). The site adds the page you send it from, where you came from (for example, an ad or a campaign), your IP address and your browser; the IP and the browser help us stop submissions from bots. Some automatic rules set aside submissions that look like they come from bots (for example, a name made of random letters and no message): they are still stored, the email alert still reaches the team and a person can recover them. What for: to answer your request and prepare your quote. Each request arrives as an alert at soporte@atg.com.pa and opens a case in our customer service system. Why we may: because you ask us to, as a step before a possible contract with you (Executive Decree 285 of 2021, article 17, item 2).
Site assistant («¿Te ayudo?» chat). What you write travels to our server, which stores the full conversation, the page where you opened the chat, your visit code (to join your messages) and your IP address. The answers are prepared by Claude, the artificial intelligence of the company Anthropic, in the United States; prices and timelines are only confirmed to you by a person on the team. If you write your name, email or phone in the chat, it becomes a request like the one from a form. Do not write passwords, card numbers or health data there. What for and why we may: the same as for the forms.
WhatsApp, email and phone. If you tap WhatsApp, WhatsApp opens with a ready message; if you write to us, the message reaches our customer service system and a person on the team reads it. If you send us a voice note or leave us a voicemail, we transcribe it and summarize it with artificial intelligence so the team can read it (point 4). If you write to soporte@atg.com.pa, your email opens a case. If you call the support line, (507) 202‑3585, the call is recorded and we tell you so at the start; if you do not want to be recorded, hang up and write to us. What for and why we may: the same as for the forms. The recording helps us review how we served you and serves as a record of what you asked for; it is a legitimate interest of ours, and we tell you beforehand so you can decide (Law 81 of 2019, article 8, item 9).
Proposals and presentations we send you. If we send you a link to a proposal or a presentation on advsysa.com, we record when you open it, how long you look at it, whether you tap accept or reject and, in presentations, which slides you view, with your IP address and your browser. So as not to count twice if you reload the page, those pages store a visit code in your browser until you close the tab. The emails we send you from our system may also tell us when you open them. What for: to know whether it reached you and to follow up. Why we may: it is part of the business conversation you started with us (Executive Decree 285 of 2021, article 17, item 2).
Visit measurement. With our own system we count which pages you view, which site or link you came from, whether you use a phone, tablet or computer, and whether you tap WhatsApp, call, email, a maps link («Get directions») or the button that switches the page between Spanish and English. We do not use advertising cookies or measurement tools from other companies. In the record of this measurement we do not store your IP (the server does note it in its own logs: see «Server logs»). If your browser has «Do Not Track» turned on, we count the visit without a code or a mark. What for: to know which pages are useful and where visits come from. Why we may: it is a legitimate interest of ours, and it is not used to identify you or for advertising (Law 81 of 2019, article 8, item 9).
If you do not want us to measure you, check the box (it is your right to object, point 6). This browser stops sending us visits and taps, and its visit code and first-visit mark are deleted. Forms and the chat do not change, because you send those yourself.
It applies only to this browser; if you clear the site’s data in your browser, it is undone.
What your browser stores for this measurement. There are no advertising cookies. These are the marks:
Only during this visit (deleted when you close the tab):
atg_sid: your visit number, a random code. It joins the pages you view in the measurement and, if you use it, your chat messages.
atg_utm and atg_campaign: where you came from, the site and campaign of the link you opened, if the link carried them.
atg_asist_off: that the chat is turned off for this visit, so it is not checked again on every page. It only appears if the chat is not available.
atg_aviso: that we already showed you the first-visit notice during this visit.
Until you delete them (they stay in your browser):
atg_seen: the date of your first visit, to tell new visits from returning ones.
atg_aviso: that you already saw the first-visit notice, so we do not show it to you again.
atg_no_medir: that you asked us not to measure you. It only exists if you check the box.
Server logs. Like every website, the server notes each request it receives: your IP address, the date and time, the page requested, the page you came from and your browser. What for: the security of the site, and to investigate failures or abuse. Why we may: it is a legitimate interest of ours (Law 81 of 2019, article 8, item 9).
Google fonts and map. The pages of this site use fonts stored on advsysa.com. Some private proposals we send by link still load their typeface from Google Fonts: when you open them, your browser connects to Google, which receives your IP address and your browser. The map on the Contact page is from Google Maps and only loads if you tap «See map»; at that moment Google receives your IP address and may use its own cookies. If you prefer not to load it, use the «Open in Google Maps» link.
3. News and offers: only if you want them
Our forms have a separate, unchecked box to receive news and offers by email or WhatsApp. If you do not check it, we do not send them to you, and that changes nothing in the answer to your request. If you check it, we keep the exact text you agreed to and the date. You can withdraw that permission whenever you want, just as easily: reply «BAJA» (unsubscribe) to the news message, or write «BAJA» to us on WhatsApp or at soporte@atg.com.pa. Withdrawing it does not affect what was already done with your permission (Executive Decree 285 of 2021, articles 19 and 29).
4. Who else receives your data
The ATG Group team that handles sales and support for Advanced Systems Supply: the soporte@atg.com.pa mailbox and the customer service system belong to the group. It uses them only to serve you (Law 81 of 2019, article 33, item 5).
Providers that render a service to us:
Amazon Web Services, in the United States (Virginia): the site’s server and the database where requests, the chat and visit measurement are stored.
Google, a US company: the soporte@atg.com.pa mailbox; also the fonts of some private proposals, and the map if you open it.
Anthropic, a US company: Claude, the artificial intelligence that answers in the chat, summarizes notes and voice messages and helps us sort clients, suppliers and spam. That sorting is only an opinion; a person on the team decides how to serve you.
Meta, if you write to us on WhatsApp.
Twilio, a US company, if you call (507) 202‑3585: it carries the call and stores the recording.
OpenAI, a US company: it transcribes the voice notes you send us on WhatsApp and the messages you leave in the (507) 202‑3585 voicemail.
Authorities, only when a law or a court order requires us to (Law 81 of 2019, article 24).
We do not sell or rent your data, and we do not give it to anyone for their advertising. Google and Meta (WhatsApp and Instagram) also have their own privacy policies for their services.
Data outside Panama. Your data leaves Panama: Amazon Web Services stores it in Virginia (United States) and the other providers in their own data centers. Sending there what you send us is necessary to handle the request you make (Law 81 of 2019, article 33, item 9, and Executive Decree 285 of 2021, article 51, item 7). Visit measurement and server logs are also kept at Amazon Web Services, which stores them on our behalf.
5. How long we keep it
Forms and chat on this site: if you become our client, or you are already listed as a contact of a company we work with, for as long as that business relationship lasts, plus what commercial and tax laws require. If not, 24 months after our last contact (your request, when we answered you or your last chat message), your name, company, email, phone, what you wrote in the form or the chat, the notes we took about your request, the page you came from, your IP address and your browser are deleted automatically. A row with none of your data remains, to count how many requests arrived. For every request, clients’ included, the IP address and the browser are deleted after 24 months; for every chat, the IP address and the visit code. The alert we received by email and the case opened in our customer service system follow the rule in the next point.
WhatsApp, email and voicemail messages: while they help us serve you and for the business relationship that comes out of them, plus what commercial and tax laws require. Today they are not deleted automatically: if you ask us to delete them, we delete them, except what a law requires us to keep.
Permission for news: until you withdraw it. If you are not a client and 24 months go by without contact between us, it is deleted with your request and we stop sending you news.
Visit measurement: we use it to compare months, so it is kept. After 24 months, the site or link you came from and the ad codes are deleted from it, and your visit number is no longer joined to your chat. It does not store your IP.
Proposals and presentations we send you: after 24 months, the IP address and browser of each time you opened them are deleted. If you accept, reject or sign a proposal or a presentation, we keep that record for as long as the business relationship lasts, plus what commercial and tax laws require; today it is not deleted automatically.
Server logs: page logs, 7 days on the server, after which they go to an internal company backup, where today we have no set deletion period; logs of the system that receives forms and the chat, 14 days.
Calls to (507) 202‑3585: the recording is kept for 365 days in our system and then goes to an internal archive; today Twilio also keeps its copy. The call record (number, date and duration) is kept for 5 years; after that, the number and the contact are removed from it.
In your browser: some marks are deleted automatically when you close the tab and others stay until you clear the site’s data in your browser. Which is which is in «Visit measurement», together with the box to ask us not to measure you.
6. Your rights and how to use them
Law 81 of 2019 gives you these rights, free of charge and at any time:
Access: to know whether we have data about you, which data, where it came from and what we use it for, and to receive a copy.
Rectification: to correct data that is wrong, incomplete or out of date.
Cancellation: to ask us to delete your data.
Objection: to ask us to stop using it for something, or to withdraw a permission you gave us.
Portability: to receive the data you gave us in a commonly used file, to take it elsewhere.
How: write to us at soporte@atg.com.pa with the subject «Privacidad» or call (507) 209‑5151. Tell us which right you want to use and how we should answer you. To protect your data, we will ask you to confirm that it is you (or that you represent that person).
Legal deadlines: up to 10 business days to give you your data (Law 81 of 2019, article 16) and up to 5 business days to correct wrong data (article 17).
The site and its forms travel encrypted (HTTPS). Only the people who need your data to serve you can see it, each with their own user account. If an incident put your data at risk, the law requires us to notify you and the ANTAI (Executive Decree 285 of 2021, article 37).
8. Minors
The site is intended for adults and businesses. If you are a minor, ask your mother, your father or your guardian to write to us.
9. Changes to this policy
If we change it, we publish the new version here with its date. If a change is to use your data for something new, we will tell you beforehand and, when the law requires it, we will ask for your permission (Law 81 of 2019, article 11). You can read Law 81 of 2019 and Executive Decree 285 of 2021 in the Gaceta Oficial (Official Gazette), in Spanish.
Your recordings and your data (clients with camera monitoring)
If you contract monitoring of your cameras, the video is handled by the center of Advanced Monitoring Services, S.A. (AMS), an ATG Group company, under its own contract. In that contract you are the controller of the video: you decide what is recorded and what for. AMS processes it on your behalf, as custodian, and only for the service you contracted (Executive Decree 285 of 2021, articles 47 to 49). For the ANTAI, security camera video is biometric data and, therefore, sensitive data with special protection (Law 81 of 2019, article 4, item 11, and article 13; ANTAI statement of February 2, 2023).
Who sees your cameras: only the center’s operators, each with their own user account, when an alarm comes in or when you ask for a review. Each access is logged with the person, the date and the time, and you can ask us for that list.
Where the recordings are kept: on the recorder installed at your property. The center keeps only the short videos of the alarms it handles. If you contract cloud recording, your video is kept on AMS’s servers and AMS manages it.
How long: the recorder keeps what fits on its drive, about 30 days, and then records over it. Alarm videos are kept for 90 days. In the cloud, the time your plan states. After that time they are deleted, except what a law or a claim requires us to keep.
Who they are shared with: no one outside the center, except you, whoever you authorize in writing, or the authorities when a law or a court order requires it.
Video analytics: some cameras can recognize faces, read license plates or count people. Those functions are turned on only if you contract them, and with the lists you define (for example, the people or plates you allow). As the controller, it is up to you to inform the people who pass in front of those cameras and, when the law requires it, to have their permission (Law 81 of 2019, article 13).
The people who appear in your video (employees, visitors): as the controller, you put up the signs that tell them there are cameras and you handle their requests. If you need what the center keeps in order to answer them, AMS gives it to you.
What you can ask for: a copy of a video, the list of who viewed your cameras, or that we delete what the center keeps, except what a law or a claim requires us to keep. Write to us at soporte@atg.com.pa with the subject «Privacidad»: AMS’s operations management handles it, within the deadlines in point 6.
If someone views or takes your video without permission: AMS calls you and writes to you as soon as it knows, within 24 hours at the latest, and helps you notify the ANTAI and the people affected within the 72 hours the law requires (Executive Decree 285 of 2021, article 37).
Contact
Advanced Systems Supply, S.A. · RUC 49930-2-316585 DV 70 Vía España, Las Sabanas, Calle 77A, ATG Building, Panama Email: soporte@atg.com.pa · Phone: (507) 209‑5151 · Website: advsysa.com