Cookie Policy

Who is accountable for this processing

JXBS S.A.S., tax ID 0195153892001, registered at Víctor Manuel Albornoz 555 y Daniel Muñoz, Cuenca, Azuay province, Ecuador, is the controller of the personal data collected through these cookies.

This policy covers cookies only. What other data we process, for which purposes, how long we keep it and how to exercise your rights is set out in our Privacy and Personal Data Protection Policy.

What a cookie is, in one line

A cookie is a small file a site stores in your browser so it can recognise it later. Alongside them we use equivalent technologies — browser local storage and pixels — that do the same thing under a different name. Everything said here about cookies applies to those technologies too. A cookie on its own does not carry your name, but it identifies your browser persistently and, under Ecuador’s Personal Data Protection Act, that is personal data.

The four categories and their legal basis

• Essential

  They keep your session, spread load across servers and protect access. If you block them, you cannot log in.

  Performance of the contract and security (Art. 7 LOPDP). They do not require your consent.

• Analytics

  They measure which pages are visited, how long visits last and where a form is abandoned. They include session recordings and heatmaps.

  They require your prior consent (Arts. 7 and 8 LOPDP).

• Advertising and cross-site tracking

  They let a third party recognise your browser outside JXBS, measure campaigns and build advertising audiences.

  They require your prior consent (Arts. 7 and 8 LOPDP).

• Product

  In-portal walkthroughs, attribution of the source you arrived from, and cart state on the training sites.

  They require your prior consent where they are not strictly necessary to provide the service.

Inventory by platform

Each block is a different surface with different providers. Durations are the ones the browser returned on the verification date.

Last technical verification: 11 September 2026

Who receives this data

These companies receive, at minimum, your IP address, the cookie identifier and your browsing data. Most act as processors, meaning they handle the data on behalf of JXBS and under its instructions. Meta and Microsoft are different: they also use that data for their own advertising purposes, so they act as independent controllers and answer for their own processing.

• Meta Platforms

  Campaign measurement and advertising audiences on Facebook and Instagram. Independent controller.

  _fbp

  https://www.facebook.com/privacy/policy/

• Microsoft

  Session recordings and heatmaps through Clarity, plus its own advertising services. Independent controller for the cookies on its domains.

  _clck, _clsk, MUID, CLID, SRM_B, MR, SM, ANONCHK

  https://privacy.microsoft.com/privacystatement

• Google

  Usage statistics through Google Analytics 4, across two separate properties. Processor.

  _ga, _ga_23MV3DGK08, _ga_5JEF1TSHYJ

  https://policies.google.com/privacy

• Brevo

  Visit-source attribution and marketing automation on the training sites. Processor.

  sbjs_ (seven cookies), sib_cuid

  https://www.brevo.com/legal/privacypolicy/

• UserGuiding

  Product walkthroughs inside the candidate portal. Processor.

  _ugeuid

  https://userguiding.com/privacy-policy

• Clerk

  Authentication and sign-in for the company and university portals. Processor.

  __client, __client_uat

  https://clerk.com/legal/privacy

• Cloudflare

  Protection against automated traffic and content delivery. Processor.

  __cf_bm, _cfuvid

  https://www.cloudflare.com/privacypolicy/

• Amazon Web Services

  Hosting and load balancing for the platform. Processor.

  AWSALB, AWSALBCORS

  https://aws.amazon.com/privacy/

Your data leaving Ecuador

Every provider on the list is based outside Ecuador, mainly in the United States and the European Union. Where they act as processors and handle the data solely on behalf of JXBS, Ecuadorian rules do not treat this as an international transfer but as a processing engagement. Where they act for their own purposes, as Meta and Microsoft do, it is a communication of data to a third party and an international transfer, subject to the safeguards of the Personal Data Protection Act and the rules of the Personal Data Protection Superintendency. The training sites also load services that set no cookies but do receive technical data from your browser: WonderPush, for browser notifications, and the site’s conversational assistant.

How to block or delete them

You can block or delete any cookie from your browser settings, and you can browse the public site with third-party cookies blocked without losing anything. If you block the essential ones — PHPSESSID, the AWS ones or the Clerk ones — you will not be able to sign in to the platforms. Each provider also offers its own opt-out:

• Meta — ad preferences in your account
• Google Analytics — official opt-out add-on
• Microsoft — personalised advertising opt-out
• Microsoft Clarity — information and opt-out

Your rights

Over the data collected through this channel you may exercise the rights of access, rectification, erasure, objection, portability and suspension of processing recognised by Ecuador’s Personal Data Protection Act. We have fifteen days to respond. If we do not reply, or you are not satisfied with the reply, you may complain to the Personal Data Protection Superintendency.

Write to us at [email protected] and we will handle it. It is the single data protection channel for JXBS.