Privacy Policy

This page explains, in plain terms, what otov7.com does with your data: what we collect, why, who we share it with, how long we keep it, and how to take back control.

1. Who is responsible for your data

The data controller is World Activities SRL, a Dominican company operating under the public brand HELIOS RD, part of World Activities Group (WAG).

Processing is governed by Dominican Law 172-13 on the protection of personal data. If you write to us from the European Economic Area or the United Kingdom, we also apply GDPR safeguards — GDPR is in fact the standard our consent banner was built to, wherever you happen to be.

2. What we collect

2.1 What you give us

When you fill in a contact form, request information about a project, join a waiting list, or write to us by email or WhatsApp:

• your name;
• your email address;
• your phone number, if you provide it;
• your country or city, if you provide it;
• the project or type of property you are interested in, an indicative budget, a timeline;
• whatever you write in the free-text message.

Please do not send us sensitive data — health, political opinions, religion, union membership — or identity documents and bank details through a web form or a messaging app. We do not ask for them at this stage, and those channels are not built for it.

2.2 What your browser sends

Like every website, otov7.com records technical data needed to serve pages and keep the site safe: IP address, browser type and version, operating system, language, page requested, referring page, date and time. These logs are used to deliver content, spot abuse and investigate incidents.

2.3 What analytics tools observe — only if you allow it

Pages viewed, time on page, navigation path, clicks on calls to action, approximate device, approximate region. None of these tools runs before you explicitly consent (see the next section).

3. Why we use it, and on what legal basis

Purpose	Data	Legal basis
Answering you, calling you back, sending project documentation	Identity, contact details, message	Steps taken at your request before a contract · your consent
Running a waiting list and telling you about a launch	Email, project of interest	Consent
Operating, securing and maintaining the site	Technical logs	Legitimate interest (security and service continuity)
Measuring audience and improving pages	Navigation statistics	Consent (analytics category)
Measuring advertising campaigns and capping repetition	Advertising identifiers, conversion events	Consent (marketing category)
Performing a reservation or sale agreement	Full client file	Performance of a contract
Meeting due-diligence and record-keeping duties	Client file, supporting documents	Legal obligation — notably Law 155-17 on anti-money laundering and counter-terrorist financing, supervised by the Dominican Financial Analysis Unit (UAF)

The transactional flow — reservation, contract, payment — does not live on this site. It runs on our secured internal platforms, each with its own privacy notice.

4. Consent, cookies and analytics

On your first visit a banner gives you three choices — Decline, Customize, Accept — in English, French or Spanish depending on the page.

• Nothing fires before you choose. We use Google Consent Mode v2 with every category denied by default. Until you decide, no measurement script loads, no request goes out to any advertising platform, and no measurement cookie is written.
• Declining costs you nothing. Every piece of content on the site stays available.
• Two categories can be accepted independently: analytics and marketing.
• You can change your mind at any time through the Manage cookies link at the bottom of every page.
• Your decision is stored locally in your browser (key helios_consent_v1). Clearing site data removes it and the banner comes back.

One deliberate choice is worth flagging: the no-JavaScript fallback used by advertising pixels (the <noscript> image tags from Meta and LinkedIn) has been removed from this site. It would fire on the first byte rendered — before the banner even exists, so with no way to obtain consent. We chose to lose that marginal measurement instead.

5. The trackers, in detail

None of these is active until you accept the matching category.

Tool	Provider	Category	What it does	Typical cookies
Google Analytics 4 (G-35EYP6HSK2)	Google	Analytics	Traffic statistics, popular pages, navigation paths. IP anonymized.	_ga, _ga_*
Microsoft Clarity	Microsoft	Analytics	Heatmaps and session replay, to see where a page loses people.	_clck, _clsk
Meta Pixel	Meta (Facebook, Instagram)	Marketing	Campaign measurement and conversion attribution.	_fbp
TikTok Pixel	TikTok	Marketing	TikTok campaign measurement and conversion attribution.	_ttp
LinkedIn Insight Tag	LinkedIn	Marketing	Measurement of professional campaigns.	li_sugr, UserMatchHistory

The LinkedIn Insight Tag is additionally blocked by design on any page whose address suggests payment, credit, a mortgage, health or a personal file — LinkedIn's terms forbid it there, and we put the guardrail in the code rather than in a policy note.

Strictly necessary cookies: the record of your consent choice and, where relevant, a session token on authenticated areas. They are not used to track you and do not require consent.

6. Social media: what we publish there

HELIOS RD publishes its own brand content — project imagery, announcements, video, articles — on TikTok, Pinterest, YouTube, Facebook, Instagram and LinkedIn. Publishing is automated through the scheduling tool Postiz and the platforms' official APIs.

What that means for your privacy:

• The flow is outbound. We push our own content; we do not use these APIs to collect personal data about the platforms' users.
• What comes back is aggregate statistics on our own posts — views, reach, engagement — with no individual identification.
• If you interact with us on one of those platforms — a comment, a direct message, a follow — that interaction is governed by that platform's privacy policy, and the data you leave there belongs to it first. We see what the platform shows us, like any other account holder.
• The credentials and access tokens for those platforms are held by the group and are not shared.

7. Mobile apps

The group publishes mobile applications on the App Store and Google Play for its clients and its teams. This policy covers otov7.com and serves as the reference privacy policy for those applications: same principles, same controller, same rights, same contacts. Anything specific to an app — location for clock-in, notifications, camera access — is announced inside the app at the moment permission is requested, and is never enabled without your approval at the operating-system level.

8. Who gets access

• Our own staff, strictly on a need-to-know basis: sales advisors, management, compliance.
• Companies within World Activities Group involved in the project you are interested in.
• Our service providers, acting on our instructions: hosting (InterServer, Inc., United States), email delivery, the analytics and advertising providers listed above, social media scheduling (Postiz), e-signature.
• Dominican authorities where the law requires it — notably the tax authority (DGII) and the Financial Analysis Unit (UAF) under Law 155-17.

We do not sell your data, and we do not rent it to anyone.

9. Transfers outside the Dominican Republic

The site is hosted in the United States, and several of our measurement and advertising providers are established in the United States or the European Union. Your data may therefore be processed outside the Dominican Republic and outside your country of residence. We rely on those providers' contractual commitments and, for people covered by GDPR, on the European Commission's standard contractual clauses where they apply.

10. How long we keep it

Data	Retention
Contact request with no commercial follow-up	24 months after the last exchange
Active prospect, waiting list	36 months after the last exchange, then deleted or anonymized
Client file (reservation, sale)	For the life of the relationship, then for the period required by Dominican accounting, tax and AML obligations
Server technical logs	12 months at most
Analytics statistics	14 months
Record of your consent choice	Kept in your browser; the banner is shown again after 13 months at the latest

11. Security

HTTPS encryption in transit, role-based access to applications, logging of administrative access, regular backups, and separation between the public site and our management systems. No system is perfect; if a breach occurs that is likely to harm you, we will notify you and the competent authorities without undue delay.

12. Your rights, and how to use them

Depending on your situation you have the right to:

• Access — find out whether we hold data about you and get a copy;
• Rectification — have inaccurate or incomplete data corrected;
• Erasure — ask us to delete it, subject to our legal retention duties;
• Objection — object to processing based on our legitimate interest, and to marketing at any time;
• Restriction of processing;
• Portability — receive your data in a machine-readable format;
• Withdrawal of consent — at any time, without affecting what was done before.

Write to vente@otov7.com with "Data protection" in the subject line. We answer within 30 days. We may ask for something that lets us verify your identity — that protects you, it is not an obstacle.

To stop receiving our emails, use the unsubscribe link at the bottom of any message.

If our answer does not satisfy you, you can complain to the competent supervisory authority in the Dominican Republic or, if you live in the European Economic Area, to your national data protection authority.

13. Children

This site is not directed at children and we do not knowingly collect their data. If you believe a child has sent us information, write to us and we will delete it.

14. Changes to this policy

We update this page when our tools or our processing change. The date at the top tells you when. A substantive change — a new purpose, a new category of tracker — triggers a fresh request for consent.

15. Contact — data protection and AML compliance

See also our Terms of Use.