Places automated calls, in El Salvador

Decreto Legislativo No. 144, arts. 6-24 and 46-48 (ARCO-POL rights) · Read the law's page

• Let a data subject know whether you are processing their personal data, and give them, free of charge, an intelligible copy of it, telling them its origin and whether it was shared with other institutions.
• Tell a data subject, before you collect their data, its purpose, its recipients, the database it will sit in, how to reach you and your processor, the content of their ARCO-POL rights, and the security measures you keep; get a fresh authorization if you later plan a different purpose.
• Correct or update a data subject's personal data within twenty business days of the request, and block the data under review while you do.
• Erase a data subject's personal data without undue delay on request, including the right to be forgotten reaching search engine results and other data holders, subject only to this Law's listed exceptions.
• Stop processing a data subject's personal data, including profiling for direct marketing, as soon as they object, unless a listed exception applies, and limit processing on request while a dispute is pending.
• Give a data subject a structured, commonly used, machine readable and interoperable copy of their personal data, and transmit it to another responsible party at their request, where the processing rests on their consent and is automated.
• Answer an ARCO-POL request within twenty business days, extendable once by another twenty for justified cause, return a request you are not competent to handle within five business days, and notify anyone who received the data within five business days of deciding that a request to correct, update or delete it is proper.
• Charge nothing for exercising ARCO-POL rights beyond reproduction, certification or delivery costs, and give a reasoned written denial within three business days when you refuse a request.
• Publish a privacy notice, consistent with your privacy policy, naming your address, which data are sensitive, your legal basis, your purposes, how to exercise ARCO-POL rights and revoke consent, and your use of cookies, and give it to the data subject in writing before they consent.
• As a public body, appoint a data protection delegate, who may be your Information Officer, preserve a narrower set of ARCO-POL rights for the personal data you process without consent, and tell your users that their data may be collected and the means to exercise their rights.when it serves a public body