Privacy Policy
1. Overview
General information
The following information gives you a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information is given in the sections below.
Who is responsible for data processing on this website?
Data on this website is processed by the website operator, Debt Enforcement Agency S.A. (DEASA). The contact details are given in section 2.
How do we collect your data?
Some data is collected because you provide it to us, for example by entering it in a contact form. Other data is recorded automatically by our IT systems when you visit the website. This is mainly technical data such as your web browser, operating system or the time of access.
What do we use your data for?
Technical data is collected to provide the website securely and without errors. Data you send us is used to handle your enquiry. Our own form software also keeps statistics on how the forms are used (see section 7). We also use Google Analytics to see how visitors use the website (see section 5).
What rights do you have regarding your data?
You have the right at any time to obtain, free of charge, information about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted. If you have given consent to data processing, you can withdraw it at any time with effect for the future. Under certain circumstances you can request that the processing of your data be restricted. You also have the right to lodge a complaint with the competent supervisory authority. Details are given in section 4. You can contact us at any time about these and any other questions on data protection.
2. Controller
The controller responsible for data processing on this website is:
Debt Enforcement Agency S.A. (DEASA)
Edif. 6/2-2, Calle B, Esq. 27 De Febrero
Ensanchez El Vergel, Santo Domingo, Dominican Republic
Phone: +1 809 913 7359
E-mail: [email protected]
The controller is the natural or legal person that alone or jointly with others decides on the purposes and means of processing personal data (for example names or e-mail addresses).
3. Hosting, Cloudflare and where your data is processed
This website is operated on servers in data centres in Singapore, rented from professional hosting providers. All requests to the website pass through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which we use as a content delivery network and to protect the website against attacks. Cloudflare processes your IP address and technical request data for this purpose. Because the encrypted connection from your browser ends at Cloudflare and the data is sent on from there to our servers over a second encrypted connection, the content of your requests, including what you send through our forms, also passes through Cloudflare’s systems. Cloudflare may set technically necessary cookies when it checks that a request comes from a real browser (see section 5). Cloudflare is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (current status: https://www.dataprivacyframework.gov/). Details: https://www.cloudflare.com/privacypolicy/
We are a company based in the Dominican Republic. Data you send us is therefore processed in the Dominican Republic and on our servers in Singapore and, through the providers we use, in other countries as well, in particular in the European Union (Brevo, see section 7) and in the USA; Cloudflare handles requests at network locations around the world, usually at one near you. For the Dominican Republic and Singapore there is no adequacy decision of the European Commission and no corresponding recognition by Switzerland; the level of data protection there is not recognised as equivalent to that of the EU. For the USA such recognition exists only for companies certified under the Data Privacy Framework.
The use of these providers is based on our legitimate interest in a secure, fast and reliable website (Art. 6(1)(f) of the EU General Data Protection Regulation, GDPR).
4. Legal bases, storage period and your rights
Legal bases
Where you have given consent, we process your personal data on the basis of Art. 6(1)(a) GDPR. Where your data is needed to perform a contract or to take steps before entering into a contract, we process it on the basis of Art. 6(1)(b) GDPR. Where we have to keep data to comply with legal obligations that apply to us in the Dominican Republic (for example retention periods under tax or commercial law), we do so on the basis of our legitimate interest in complying with them (Art. 6(1)(f) GDPR). Processing may also be based on our other legitimate interests under Art. 6(1)(f) GDPR. The legal basis that applies in each case is stated in the relevant section of this policy.
Storage period
Unless a more specific storage period is stated in this policy, your personal data remains with us until the purpose of the processing no longer applies. If you make a justified request for deletion or withdraw your consent, your data will be deleted unless we have other legally permissible reasons to keep it (for example retention periods under tax or commercial law); where such reasons exist, it is deleted once they no longer apply.
Withdrawing your consent
Some processing is possible only with your consent. You can withdraw your consent at any time simply by sending us a message, for example by e-mail; no particular form is required. The lawfulness of the processing carried out before the withdrawal is not affected.
Right to object (Art. 21 GDPR)
Where data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims (objection under Art. 21(1) GDPR).
If your personal data is processed for direct marketing, you have the right to object at any time to the processing for that purpose; your data will then no longer be used for direct marketing (objection under Art. 21(2) GDPR).
Right to lodge a complaint with a supervisory authority
If the GDPR is infringed, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedy.
Note for visitors from Switzerland
Where the Swiss Federal Act on Data Protection (FADP) applies to the processing of your data, the references to the GDPR in this policy apply by analogy to the corresponding provisions of the FADP. You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch).
Right to data portability
You have the right to receive the data that we process by automated means on the basis of your consent or in performance of a contract, or to have it handed over to a third party, in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will be done only where technically feasible.
Information, correction and deletion
Within the scope of the applicable legal provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin and recipients and the purpose of the processing, and, where applicable, a right to have this data corrected or deleted.
Right to restriction of processing
You have the right to request that the processing of your personal data be restricted. This right applies in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the check you can request that processing be restricted.
- If the processing of your personal data was or is unlawful, you can request restriction of processing instead of deletion.
- If we no longer need your personal data but you need it to establish, exercise or defend legal claims, you can request restriction of processing instead of deletion.
- If you have lodged an objection under Art. 21(1) GDPR, your interests and ours have to be weighed against each other. As long as it has not been determined whose interests prevail, you can request restriction of processing.
If the processing of your personal data has been restricted, this data may – apart from being stored – be processed only with your consent, or to establish, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
No automated decision-making
We do not use automated decision-making.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, such as the enquiries you send to us, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in the address bar of your browser and by the padlock symbol. Data you transmit to us over an encrypted connection cannot be read in transit by unauthorised third parties.
5. Cookies and Google Analytics
We use Google Analytics, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to see how visitors use our website, for example which pages are viewed and how visitors found us. Google Analytics sets cookies in your browser (“_ga” and “_ga_K8K7BDDX69”, kept for up to 2 years) and sends information about your visit, including your IP address and details of your device and browser, to Google, which may process it in the USA. You can prevent this by blocking these cookies in your browser or by installing Google’s opt-out add-on: https://tools.google.com/dlpage/gaoptout. Google’s privacy policy: https://policies.google.com/privacy. Legal basis: our legitimate interest in improving our website (Art. 6(1)(f) GDPR).
Cloudflare may also set technically necessary security cookies (for example “cf_clearance” or “__cf_bm”) while its browser check or bot protection is switched on (see section 3). You can block or delete cookies in your browser settings; while a security check by Cloudflare is active, this may prevent access to the website.
6. Server log files
When you visit the website, our servers automatically record the following: your IP address, the date and time of the request, the page requested, the server’s response status, the amount of data sent, the referrer URL, the browser type and version, and the operating system. We use this data only to operate the website securely and to detect and investigate attacks and faults. It is not combined with other data and is deleted after 14 days, unless it is needed for longer to investigate a specific security incident. Legal basis: our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR).
7. Contact and enquiry forms, e-mail and telephone
Forms on this website
If you send us an enquiry through a form on this website, the details you enter (such as your name, e-mail address, postal address, telephone numbers, information about the debtor or the person sought, and your message) are stored in the website’s database and forwarded to us by e-mail so that we can handle your enquiry. We do not store your IP address with the form entry. Providing your details is voluntary; without the details marked as required, however, we cannot process your enquiry. For the delivery of the e-mails that forward your enquiry to us we use Brevo (Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France) as a processor.
If your enquiry concerns persons or companies you want us to investigate or collect from, you also give us data about those third parties. Please only send us data you are entitled to pass on. We process the data about those third parties in order to examine and handle your enquiry; the legal basis is our legitimate interest, and yours, in clarifying and pursuing the matter (Art. 6(1)(f) GDPR).
Legal basis for your own details: where a form asks for your consent to store them, that consent is the basis (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future; we then stop handling your enquiry (for deletion see “Storage period” in section 4). Where a form does not ask for consent, we process your data in order to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR). As soon as an enquiry leads to a mandate, we process your data to perform that contract, whichever form you used (Art. 6(1)(b) GDPR).
Correspondence that leads to a mandate is kept for as long as the mandate and statutory retention periods require. The copy of your enquiry that reaches us by e-mail is kept as described below for enquiries by e-mail. The website’s database is backed up every night; the backups, which may still contain a deleted entry, are kept for 14 days.
Form statistics
To improve our forms, the form software on our own servers records how often a form is displayed, how often each field is selected, clicked or typed in, how long each field takes to complete, where input errors occur and where a form is abandoned. This also happens if you do not send the form. For this it uses a random identifier that is valid for a single page view only. No cookies are set and what you type is not recorded. Your IP address is not stored with these figures; it is used only briefly, in hashed form, to limit the number of transmissions within 60 seconds. The individual records are deleted after about 30 days; after that only daily totals remain, which are kept without a time limit. The figures are not passed on to third parties. Legal basis: our legitimate interest in forms that are easy to use (Art. 6(1)(f) GDPR).
Enquiries by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, we store and process your enquiry and the personal data it contains (such as your name and the content of the enquiry) in order to handle it. Legal basis: Art. 6(1)(b) GDPR where your enquiry is aimed at concluding a contract with us; otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). This data remains with us until the purpose for storing it no longer applies, for example once your enquiry has been dealt with; statutory retention periods remain unaffected.
8. Changes to this privacy policy
We update this privacy policy when the website or the legal requirements change. Last updated: 14 October 2026.