Personal Data Protection Policy

Personal Data Protection Policy

This Personal Data Protection Policy contains the guidelines to be applied by Padilla Gaitan Francisco (hereinafter "Immi-Law"), for the Processing of Personal Data of the Holders thereof, such as customers, suppliers and employees of Immi-Law, in accordance with the provisions of Law No. 81 of 2019 (Personal Data Protection Law),  its regulations (Executive Decree No. 285 of 2021) and in the rules that modify, add or complement them, adopted by the National Authority for Transparency and Access to Information (ANTAI).

In addition to the above rules, Immi-Law must comply with the laws governing the legal profession:

  • LAW No. 9 (of April 18, 1984) Regulating the Practice of Law. (Amended by Law 8 of April 16, 1993),
  • Law No. 23 of April 27, 2015, which adopts measures to prevent money laundering, the financing of terrorism and the financing of the proliferation of weapons of mass destruction, and dictates other provisions.
  • Law 124 of January 7, 2020, which creates the Superintendence of Non-Financial Subjects and dictates other provisions
  • Law 129 of March 17, 2020, which creates the Private and Single System for the Registration of Final Beneficiaries of Legal Entities
  • Law No. 21 of May 10, 2017 Establishing Rules for the Regulation and Supervision of Trustees and the Trust Business and Dictates Other Provisions
  • Law No. 70 of January 31, 2019 Amending the Penal Code and Enacting Other Provisions
  • Law No. 47 of August 6, 2013 Adopting a Custody Regime Applicable to Bearer Shares
  • Law No. 18 of April 23, 2015 amending articles of Law 47 of 2013, Adopting a custody regime applicable to bearer shares,
  • Law 2 of February 1, 2011 - Which regulates know-your-customer measures for the RAs of existing legal entities in accordance with the laws of the Republic of Panama.
  • Law 129 of March 17, 2020 - Which creates the Private and Single System for the Registration of Final Beneficiaries of Legal Entities.
  • Law 254 of November 11, 2021 - Introducing adjustments to legislation on international tax transparency and the prevention of money laundering, the financing of terrorism and the financing of weapons of mass destruction.
  • Executive Decree No. 363 of August 13, 2015 regulating Law No. 23 of April 27, 2015 and related laws.

The objective of this policy is to inform all data subjects processed by IMMI-LAW about the processing of data, the rights of the holders of Personal Data and the duties of the Data Controller and/or the Data Processor to faithfully comply with Law 81, reducing the risks for the Company.

Additionally, the procedure that must be taken into account for dealing with requests, complaints and claims related to the Processing of personal data is indicated.

Data to be collected:

Customer data:

Full Name, ID or Passport, Date of Birth, Gender, Email, Telephone, Physical Address and other documents as proof of identity: For identification of the client under the rules of Know Your Client, for the execution of the contracted service and to comply with any other legal obligation.

Supplier data:

Copy of legal representative's identity card: to identify the signatory in service contracts.

Data of collaborators or candidates:

Full Name, ID or Passport, Date of Birth, Gender, Physical Address, Health Information: For identification and to fulfill work obligations.

Email, Phone: For communication and to fulfill work obligations.

Processing of personal data

If Immi-Law receives information classified as "personal data," such information will be processed for a purpose in accordance with Law 81 and as described in the privacy notice. Immi-Law may maintain and process this information solely to:

  1. Provide our services to you;
  2. Facilitate the management, development and effective operation of Immi-Law's business; and
  3. Comply with applicable law, prevent and detect fraud, and cooperate with supervisory authorities or regulatory bodies, where necessary, as set forth in Immi-Law's Privacy Notice.

By virtue of our activities of providing legal and administrative services, for the Processing of Personal Data, Immi-Law will collect, store, update, use, circulate, transmit and delete the Personal Data of the Owner in accordance with the purposes indicated in this document. This Policy shall apply  to the Processing carried out by Immi-Law's employees  and also by those third parties with whom  Immi-Law has  entered into a contract for the transfer of Personal Data or has agreed to carry out activities related to the Processing of Personal Data on behalf of Immi-Law.

The Processing of the Owner's Personal Data will be carried out to comply with the following purposes:

  1. Execute the pertinent processes that are necessary for the operational development and/or for the administration of systems within Immi-Law.
  2. To send commercial information and offer our products.
  3. Conduct marketing campaigns.
  4. Conduct satisfaction surveys on the services provided.
  5. Carry out market and statistical research to offer products or services focused directly on the needs of our customers.
  6. To inform the Data Subjects about the modifications made to this Policy, as well as to request, in the event that a new authorization is necessary for the Processing of their data.
  7. Carry out customer segmentation processes to establish market niches.
  8. Execute and comply with the contracts entered into between the parties.
  9. Send information of any nature, of convenience or at the request of the owner.
  10. In general, to carry out all activities related to our business activity in order to carry out the adequate and efficient provision of our services and/or for compliance with the applicable legal regulations and the policies of Immi-Law.
  11. Carry out the control and prevention of fraud, money laundering and terrorist financing.

In particular, IMMI-LAW will process the Personal Data of candidates for employees, former employees and pensioners, in order to comply with the following purposes:

a) Verify your personal, family, financial, credit, business, and employment information.

b) Carry out any type of procedure related to the Social Security System and the employment contract that you have entered into or intend to enter into with Immi-Law.

(c) To take the necessary steps to control and prevent fraud, money laundering and terrorist financing.

In particular, Immi-Law will process the Personal Data of its suppliers to comply with the following purposes:

  1. Respond to requests related to contracts entered into with Immi-Law;
  2. Carry out the pertinent procedures for the control and prevention of fraud, money laundering and terrorist financing.
  3. Credit risk consultation and reporting.

In particular, IMMI-LAW will process the Personal Data of its shareholders to comply with the following purposes:

  1. Verify the information provided.
  2. Administer and manage actions.
  3. Statistical and consultation purposes.
  4. To comply with any legal obligation.

Data Transfer

Padilla (Immi-Law) does not transfer any type of data to third parties.


A cookie refers to a file that is sent from our portal in order to request permission to store and install it on your device, when you accept such a file it is created and the cookie then serves to store information regarding web traffic, and also facilitates future visits to a frequently visited page. Another function of cookies is to save the user's browsing preferences such as the chosen language, the color scheme or other browsing preferences on our website in order to provide you with a better personalized service.

Our website uses cookies to identify the pages that are visited and their frequency. This information is used only for statistical analysis and then the information is permanently deleted. You can delete cookies at any time from your browser. You can accept or deny the use of cookies, however most browsers automatically accept cookies as it serves to have a better web service. You can also change your browser settings to decline cookies. If they decline, you may not be able to use any of our services.

We use Google Analytics and Google Ads on our website to recognize a device when a user visits the website; monitor users as they browse the website; improve the usefulness of the site; analyze the use of the website; administering the Website; prevent fraud and improve the security of the website and personalize advertisements that are of particular interest to specific users.

Lifetime of personal data

Personal data will be deleted from our databases as soon as it is no longer necessary to comply with a legal obligation.

Immi-Law may keep personal data when required by law to keep it or for statistical purposes, in which case it will be de-identified.


This Website may contain links to other sites that may be of interest to you. Once you click on these links and leave our site, we no longer have control over the site to which you are redirected and therefore are not responsible for the terms or privacy or protection of your data on those other third party sites. These sites are subject to their own privacy policies, so you should check them to confirm that you agree to them.

Rights of Data Subjects


It is the right of the owner of the data to access their personal information in order to know what personal data Immi-Law  has and/or what it uses them for, as well as the way in which they were obtained.


It is the right to rectify the personal data in the possession of Immi-Law, only when it is incomplete or inaccurate.


It is the right to erase  the personal data in the possession of Immi-Law; that is, to delete your personal data when the purposes of use are not those necessary or stipulated. It is not always possible to delete them as some data is necessary for the execution of the agreed purposes.


It is the right to object to the use of personal data, i.e. to indicate that you do not want your personal data to be processed by Immi-Law for a purpose other than the main and necessary one.


The right to portability allows the Data Controller, under certain circumstances, to receive  your personal data from Immi-Law or request its transmission to another data controller.

Privacy Notice

Padilla (Immi-Law). You are responsible for your personal data. The data requested from the client by any means will be used for advertising and marketing purposes. We ensure the confidentiality of Personal Data and its protection, therefore, they will not be transferred or assigned.

If data collected with the consent of the data subject is used for statistical purposes, it will be dissociated from the identity of the individual.

The consent of the owner of the data will be requested in a prior and informed manner to use the data in accordance with the functions described above.

In those processes where personal data is required, and the owner decides not to provide it, it may limit the performance of the contracted services, so the user acknowledges giving consent to the use of their information, to give continuity to them, and only for those purposes.

The rights of access, rectification, cancellation, and opposition are recognized, to the extent that the processing or collection of the data is not required, retained or stored by Law, according to the powers of each public institution that possesses them, and in general

in accordance with current regulations. You may exercise these rights by sending an email or calling our Padilla Protection Officer at +507 6855 5415.

Personal data is stored in databases that have security measures in place

ensuring their integrity, availability and confidentiality, including those

technical and administrative controls available, and which may be within the reach of Immi-Law, to

prevent the loss, misuse, alteration, unauthorized access and illegal theft of users' Personal Data. Immi-Law has a Personal Data Privacy and Management Manual which details the protocols, processes and procedures to carry out a secure treatment of your personal data, always seeking its due protection, as provided in Law 81 of 2019.

If you want to know more about our Personal Data Protection Policy and its updates to date, you can go to our website