This Privacy Policy describes how Servicios Tecnológicos Alicanto SpA ("Alicanto", "we") processes personal data collected through the alicantoai.cl website, its public informational subdomains, and the contact forms.
It is drafted to the standard of Chilean Law 21.719 on Personal Data Protection (published December 13, 2024, with full effect on December 1, 2026), voluntarily applying its stricter guarantees during the transition period currently governed by Law 19.628.
1. Data controller
Controller: Servicios Tecnológicos Alicanto SpA. Domicile: Agustinas 1442, office 402 B, Santiago, Chile.
Sole channel to exercise data subject rights, raise questions or submit complaints about personal data: privacidad@alicantoai.cl. For general commercial enquiries: contacto@alicantoai.cl.
2. Scope of this policy
This policy covers the processing of personal data we perform as controller in respect of:
- Visitors to alicantoai.cl and its language variants.
- People who submit the contact form at /conversemos.
- People who book a meeting through the embedded calendar (Cal.com).
- Technical records generated by the operation of the site (logs, anonymous metrics, anti-bot verification).
It does not cover the processing of personal data that occurs within the solutions Alicanto provides to its client organizations (the financial-data analysis agent, the data protection platform, and the whistleblowing channel). In those services the client organization acts as data controller and Alicanto as data processor, governed by a contractual Data Processing Agreement (DPA).
3. What data we collect
We collect only the data necessary to answer enquiries, schedule meetings, and operate the site securely.
| Category | Specific data | Source |
|---|---|---|
| Identification | Full name, business email | Contact form |
| Professional | Company, role | Contact form |
| Communication | Free-text message, preferred language | Contact form |
| Technical / security | IP address, anti-bot token (Cloudflare Turnstile), submission timestamp | Automatically generated by the browser |
| Scheduling | Data you enter directly in the embedded calendar (Cal.com) | Third-party calendar |
| Navigation metrics | Pages visited and anonymous aggregates (Cloudflare Web Analytics, no tracking cookies) | Automatically generated |
4. Purposes and legal bases
We process your data for the following purposes, each grounded in a legal basis under Law 21.719:
| Purpose | Legal basis | Data involved |
|---|---|---|
| Respond to your enquiry or demonstration request | Pre-contractual measures taken at your request and, failing that, legitimate interest in attending to enquiries from prospective clients | Identification, professional, communication |
| Coordinate and confirm scheduled meetings | Execution of pre-contractual measures at your request | Identification, scheduling |
| Prevent form abuse (anti-bot, rate limiting) | Legitimate interest in service security | Technical / security |
| Operate the website and measure aggregate performance | Legitimate interest in keeping the site functional and efficient | Anonymous metrics |
| Comply with applicable legal obligations (e.g. requests from competent authorities) | Compliance with legal obligation | Whatever is needed to respond to the request |
We do not carry out profiling or automated decisions that produce legal effects on you, we do not sell your data, we will not send commercial communications without your prior consent, and we do not share your information with third parties for advertising purposes.
5. Retention periods
| Data | Retention period |
|---|---|
| Contact form contents (email delivered via Resend) | Up to 24 months from submission, or sooner if you request deletion |
| Data associated with a scheduled meeting | Up to 24 months from the last commercial interaction |
| Technical security records (logs, IP, anti-bot tokens) | Up to 90 days from generation |
| Aggregate navigation metrics | Kept in anonymous, aggregated form with no possibility of re-identification. As it is not personal data, it has no deletion deadline |
These periods may be extended where a legal obligation requires it or a prevailing legitimate interest exists (for example, defense against claims or response to authority requests). If your enquiry leads to a commercial or contractual relationship, the applicable retention periods become those of the corresponding contract and Chilean tax and commercial law.
6. Data processors and international transfers
To operate the site we use the following providers, which act as data processors under Law 21.719, each subject to its own privacy policy and contractual data protection commitments:
| Provider | Function | Location | Data processed |
|---|---|---|---|
| Cloudflare, Inc. | Hosting (Workers), delivery network, anti-bot verification (Turnstile), anonymous analytics | United States (with global network) | IP, user-agent, form contents in transit |
| Resend, Inc. | Transactional delivery of the form email to the Alicanto team | United States | Form contents, source IP address |
| Cal.com, Inc. | Embedded calendar for booking meetings | United States | Whatever data you enter directly in the calendar |
| Google LLC (Google Fonts) | Web font typography service | United States | Browser IP address when loading the fonts |
This list reflects the subprocessors in place as of the publication date of this policy. We may replace them with providers offering equivalent or higher security and data protection standards; material changes will be reflected in future versions of the document.
These international transfers rely on the safeguards that Law 21.719 allows for cross-border data flows. Once the Personal Data Protection Agency (created by that law) publishes its list of countries with an adequate level of protection and its standard contractual clauses, we will update this section to reflect them.
7. Your rights
Under Law 21.719 you can exercise the following rights over your personal data:
- Access: request confirmation of which of your data we process and obtain a copy, along with its origin, purpose, recipients, and retention period.
- Rectification: ask for inaccurate, outdated, or incomplete data to be corrected.
- Erasure: request deletion of your data when it is no longer needed, you withdraw consent, or processing is unlawful.
- Objection: object to the processing on grounds relating to your particular situation.
- Portability: receive your data in a structured, commonly used electronic format, or have it transmitted directly to another controller.
- Blocking: request the temporary suspension of processing while a request for rectification, erasure, or objection is resolved.
- Automated decisions: not to be subject to decisions based solely on the automated processing of your data that produce legal effects or significantly affect you, with the right to request human intervention, an explanation, and a review of the decision.
To exercise any right, write to privacidad@alicantoai.cl with your name, the right you wish to exercise, and the data it refers to. We will acknowledge receipt of your request and respond no later than 30 calendar days after it is received. That period may be extended once, by up to 30 additional calendar days, where the request is complex; in that case we will notify you of the extension and its reasons. Exercising these rights is free of charge.
Where a purpose relies on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.
If you consider that the processing does not comply with the law, you may file a claim with the Personal Data Protection Agency once it is operational, or with the competent authority under the current regime.
8. Security and breach notification
We apply technical and organizational measures to protect your data: TLS encryption in transit, anti-bot verification on forms, request rate control, and least-privilege access to inboxes. We select providers with contractual data protection commitments.
If a breach of security measures affects your personal data and there is a reasonable risk to your rights, we will report it to the Personal Data Protection Agency by the most expeditious means possible and without undue delay, as Law 21.719 requires. We will also inform you when the breach involves sensitive data, data of children or adolescents, or data concerning economic, financial, banking, or commercial obligations. You may report any suspected incident to privacidad@alicantoai.cl.
10. Changes, effective date and contact
We may update this policy to reflect changes in our operation, applicable regulations, or our providers' practices. We will indicate the effective date at the top of the document, and when changes are material, we will announce them on the site with reasonable advance notice before they take effect.
For any question about this policy or the processing of your personal data, write to privacidad@alicantoai.cl.