Privacy Policy

At Alquila.Online we handle your personal data responsibly and transparently. This Policy explains what information we collect, for what purposes, on what legal basis and what rights you have. We operate in Latin America, originating in Paraguay.

is operated by EchoSistema S.A. We act as the controller of the data we collect on the platform, and as a processor when we process data on behalf of owners, agencies or providers. We comply with the GDPR, the LGPD and the ISO/IEC 27000/27001 family of standards.

Information we collect

We collect the data you provide (name, ID document, contact, identity-verification data), the data needed for contracts and payments, and usage data (browsing, searches, favorites) to improve the service.

For identity verification (KYC) and fraud and money-laundering prevention (AML), we may process documents and validation data, in accordance with applicable law.

How we use your information

We use your data to:

• Operate the platform: search, listing, communication, contracts and payments.
• Verify identities and assess default and fraud risk (EchoIntel).
• Process payments, deposit insurance and the issuing of receipts and invoices.
• Comply with legal, tax and anti-money-laundering obligations.
• Improve the service and show you properties relevant to your profile.

Legal bases for processing

We process your data on one or more of these legal bases:

• Performance of the contract and delivery of the service you request.
• Your consent, for specific purposes such as marketing communications.
• Compliance with legal obligations (tax, KYC and anti-money-laundering).
• Our legitimate interest in security, fraud prevention and service improvement.

Your rights

Under the GDPR and the LGPD, you have the right to:

• Access your personal data and obtain a copy.
• Rectify inaccurate or incomplete data.
• Request the erasure of your data (right to be forgotten), where applicable.
• Restrict or object to certain processing.
• Request the portability of your data to another provider.
• Withdraw your consent and lodge a complaint with the supervisory authority.

Data retention

We keep your data while your account is active and for as long as needed to fulfill the purposes described in this Policy.

After the relationship ends, we retain data only for the applicable legal periods (for example, tax and contractual obligations) and then securely delete or anonymize it.

International transfers

As Alquila.Online operates in several countries, your data may be processed or stored outside your country of residence, including the Latin American region, Brazil and, where applicable, the European Union.

Every international transfer is carried out with adequate safeguards (contractual clauses, security measures and valid legal bases) in accordance with the GDPR and the LGPD.

Third-party services

Alquila.Online, operated by EchoSistema S.A., integrates both services from its own group (EchoSign for electronic signing, Pigeons for communication) and third-party services (payment processors, deposit insurance, maps and service providers). We share only the data needed to fulfill your request.

Each provider processes the data under its own policies and under agreements that require adequate levels of security and confidentiality.

Cookies and preferences

Alquila.Online uses cookies and similar technologies to remember your preferences (language, currency), keep your session and analyze platform usage.

• Necessary: essential for the site to work and keep your session; they cannot be disabled.
• Preferences: remember your language and currency to personalize your experience.
• Analytics: help us understand platform usage in aggregate to improve it.

You can manage cookies from your browser settings. Some are necessary for the site to function and cannot be disabled.

We do not sell your personal data. Any marketing communication is optional and you can unsubscribe at any time.

Compliance and information security

GDPR (General Data Protection Regulation, EU 2016/679): the European data-protection framework. It sets principles such as minimization and purpose limitation, requires a legal basis for each processing activity, and recognizes rights such as access, rectification and erasure. We apply it to users in the European Economic Area and as a best-practice standard.

LGPD (Lei Geral de Proteção de Dados, Brazil, Law 13,709/2018): the Brazilian data-protection law, inspired by the GDPR. It defines legal bases, data-subject rights and the supervisory authority (ANPD). We apply it in our operation in Brazil.

ISO/IEC 27000 and ISO/IEC 27001: the international family of information-security standards. 27001 specifies the requirements of an Information Security Management System (ISMS): risk assessment, controls and continual improvement. They guide how we technically protect your data, complementing the legal obligations of the GDPR and the LGPD.

Contact and data protection officer

To exercise your rights or ask about the processing of your data, you can contact us through the platform's official channels. We respond within the time frames required by applicable law.

We have a data protection officer (DPO), and if you believe your rights have not been addressed, you may lodge a complaint with the competent supervisory authority.