Privacy

Last updated: August 28, 2026. This privacy notice explains how codeCrafters PY S.A. processes personal data when this website is visited, the contact form is used, or contact is made by email, phone or social networks.

codeCrafters PY S.A. is based in Paraguay. This notice considers the currently relevant Paraguayan privacy framework, including the right to habeas data, Ley N° 6534/2020 for credit data and the new Ley N° 7593/2025 de Protección de Datos Personales, which, according to current public information, is expected to enter into force at the end of 2027. It also considers the GDPR where relevant because of contacts with people in the European Economic Area, contractual requirements or TISAX-related data protection requirements.

We process only the data required for the relevant function or communication. The website has no customer account, login or public comment feature.

Processing follows the principles of transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality.

Where the GDPR applies, processing is based in particular on Article 6(1)(b) GDPR for pre-contractual steps and contract performance, Article 6(1)(f) GDPR for legitimate interests in communication, website operation and security, Article 6(1)(c) GDPR for legal obligations and Article 6(1)(a) GDPR where explicit consent is requested.

Personal data is not sold and is not disclosed for third-party advertising. Access is limited to parties that need it for handling requests, technical operation, security or legal obligations.

Technical service providers may include hosting, infrastructure, email, security and IT support providers. This website is operated through Azure Static Web Apps. The contact form is processed through an Azure Static Web Apps managed function with email delivery via Microsoft Graph.

Because codeCrafters PY S.A. is based in Paraguay and technical providers may operate internationally, personal data may be processed outside the data subject's country of residence.

Where the GDPR applies and data is transferred to third countries, suitable safeguards are used, for example data protection agreements, standard contractual clauses, technical and organizational measures and access restrictions. The European Commission has not issued a general adequacy decision for Paraguay under the GDPR; therefore, appropriate safeguards are especially important for EU-related data flows.

Personal data, and data in general, is retained at least in accordance with legal requirements. Where legal deletion obligations apply, they are implemented.

codeCrafters PY S.A. maintains records of processing activities for central processes in which personal data is processed. These records are reviewed periodically and define the specific retention and deletion practice for the respective process.

The internal deletion concept describes the general deletion procedure. Process-specific deletion is defined in the respective record of processing activity. Technical logs are used for operations, security and troubleshooting and are handled according to the relevant procedures.

This website does not use analytics cookies, advertising cookies, tracking pixels or user profiling. There is no newsletter and no automated marketing segmentation through this website.

If analytics, marketing tags, external media or similar technologies are introduced in the future, this privacy notice must be updated beforehand and, where required, a consent mechanism must be implemented.

This website does not carry out automated decision-making that produces legal effects concerning data subjects or similarly significantly affects them. No profiling is used for advertising or scoring purposes.

If AI-supported tools are used internally to help process requests, they may only be used after internal review, with suitable safeguards and without an unlawful change of purpose.

Data subjects may request access, rectification, erasure, restriction, objection, data portability and withdrawal of consent under applicable law. Under Paraguayan law, the right to habeas data is particularly relevant; under the GDPR, the rights in Articles 12 to 22 GDPR also apply.

Requests can be sent to the Data Protection Officer at omar.acuna@codecrafters.com.py. To protect personal data, we may request reasonable identity verification before disclosing or changing personal data.

In Paraguay, Ley N° 7593/2025 provides for the Agencia Nacional de Protección de Datos Personales as the future control and supervisory authority. Until it is fully operational, the respectively competent public authorities and courts must also be considered.

Where the GDPR applies, data subjects also have the right to lodge a complaint with a competent data protection supervisory authority in the European Economic Area.

codeCrafters PY S.A. treats information security and data protection in a structured way and holds ENX TISAX Labels. Personal data is protected through technical and organizational measures, including access restrictions, role-based permissions, transport encryption, secure configuration, logging, training and internal responsibilities.

TISAX does not replace a statutory privacy notice and is not a public authority approval. It does, however, underline the commitment to organize and continuously improve data protection and information security in a traceable way.

This privacy notice will be updated when website functions, service providers, legal requirements, internal processes or actual processing activities change. The current version is published on this page.