Privacy Policy

Last updated: April 28, 2026

CEMAS S.R.L. ("CEMAS", "we", "us") is an insurance brokerage incorporated in the Republic of Paraguay, with its registered office at Sargento Primero Manuel Benítez 415, Asunción, Paraguay. This policy describes how we collect, use, store, and protect the personal data you share with us when you interact with us through our website https://cemas.com.py, our WhatsApp Business number +595 976 301058, web forms, and email.

We comply with Paraguay's Law 6534/20 on Personal Data Protection and other applicable Paraguayan regulations.

1. Data Controller

CEMAS S.R.L.

• Tax ID (RUC): 80072539-5
• Registered office: Sargento Primero Manuel Benítez 415, Asunción, Paraguay
• Customer service office: Senador Huey Pierce Long 717, 2nd Floor, Asunción, Paraguay
• Contact email: lucianomarsal@cemas.com.py
• Phone / WhatsApp: +595 976 301058

2. Data we collect

To quote, issue, and manage insurance policies we collect the following categories of data:

Identification data

• Full name
• ID number (cédula de identidad)
• Date of birth
• Address
• Mobile phone
• Email

Vehicle data

• Make, model, year, type
• License plate, chassis number
• Vehicle value
• Documentation: vehicle registration (cédula automotor / cédula verde), municipal permit

Driver data

• Driver's license

Supporting documentation

• Proof of address (utility bill)
• Tax records (IVA Marangatú, when required by the insurer)

Communication data

• Messages exchanged via WhatsApp Business (text, audio, images, documents)
• Emails
• Preferred language

Technical data

• Lead source (web form, WhatsApp, referral, Meta advertising)
• Advertising identifiers when you arrive via digital ad campaigns

3. Purposes of processing

We use your data to:

• Generate insurance quotes with the insurers we work with.
• Issue, modify, and renew policies.
• Coordinate vehicle inspections.
• Process insurance claims and follow up with the insurer.
• Communicate with you via WhatsApp, email, and phone about matters related to your policy.
• Send reminders about expiration dates and renewal opportunities.
• Comply with legal, tax, and regulatory obligations.
• Improve our services through aggregated analytics.

4. Legal basis for processing

We process your data on the following bases:

• Consent: by starting a conversation with us, completing our form, or accepting terms when requesting a quote, you give explicit consent to the described processing.
• Contract performance: when you are already a customer, processing is necessary to manage your policy and provide the service.
• Legal obligation: when applicable regulations require us to retain or report data.
• Legitimate interest: for fraud prevention, service improvement, and operational communications.

5. With whom we share your data

We only share your data with:

• Insurance companies (mainly Royal Seguros S.A.) to quote, issue, and manage your policy.
• Vehicle inspectors appointed by the insurer to coordinate the inspection visit.
• Meta Platforms (WhatsApp Business) to operate the messaging communication channel.
• Technology providers: Google (storage in Drive, messaging), Make.com (internal process automation), Anthropic (AI conversational processing). All these providers are subject to their own privacy policies and contractual obligations with CEMAS.
• Public authorities when required by judicial order, regulator, or legal mandate.

We do not sell your data to third parties for advertising purposes.

6. International transfers

Some of our technology providers (Meta, Google, Anthropic, Make.com) store or process data outside of Paraguay. These transfers are made to countries with recognized protection frameworks or under contractual clauses that ensure an adequate level of protection.

7. Retention period

We retain your data:

• For the duration of our commercial relationship (you have an active policy or quote).
• For the legal period applicable after the relationship ends, typically five (5) years from the last transaction, to comply with tax, regulatory, and anti-money laundering obligations.
• WhatsApp messages and associated files are retained in our systems for the same period.

After that period, data is deleted or anonymized.

8. Security

We apply reasonable technical and organizational measures to protect your data: access controls, encrypted storage on recognized providers, administrator authentication, and activity logging. No system is 100% secure, but we do everything reasonable to protect your information.

9. Your rights

As the data subject you can exercise the following rights:

• Access: know what data of yours we hold.
• Rectification: ask us to correct inaccurate data.
• Erasure: request deletion of your data when it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Objection: object to processing for marketing purposes.
• Portability: receive a copy of your data in a structured format.
• Withdrawal of consent: you can withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights write to lucianomarsal@cemas.com.py with a copy of your ID. We respond within the timeframes set by law.

10. Minors

Our services are directed to persons over 18 years of age. We do not knowingly collect data from minors. If you detect that a minor has shared data with us, contact us to delete it.

11. Cookies and similar technologies

Our website uses cookies and measurement tools (Google Analytics, Meta pixels) to understand site usage and improve our services. You can configure your browser to block cookies, although this may affect site functionality.

12. Changes to this policy

We may update this policy. We will publish the current version at https://cemas.com.py/privacy.html with the date of last update. Substantial changes will be communicated through our usual channel (WhatsApp or email).

13. Contact and complaints

For inquiries, complaints, or to exercise your rights:

CEMAS S.R.L.
Email: lucianomarsal@cemas.com.py
WhatsApp: +595 976 301058
Registered office: Sargento Primero Manuel Benítez 415, Asunción, Paraguay

If you believe the processing of your data does not comply with applicable regulations, you may also file a complaint with the relevant national authority.