Privacy Policy

1. Data controller

The controller responsible for the personal data collected through this website is AlayIAtrust, a brand of Alaya Digital Solutions, with offices at Huérfanos 835, floor 17, suite 1701, Santiago, Chile.

For any matter related to the protection of your personal data or the exercise of your rights, you can contact us at privacidad@alayiatrust.com.

2. Personal data we process

We only process the data you provide voluntarily or that is generated by your use of the site. Specifically:

• Contact data: name, company or organization, email address, phone number and the content of the message you send us through the contact form or by email.
• Browsing data: IP address, device and browser type, pages visited and data associated with cookies and similar technologies, subject to your consent preferences.
• Communication data: the information you share with us during the commercial process, assessment meetings or email exchanges.

We do not request sensitive data through the website. Please do not include sensitive information (for example, health or affiliation data) in the free-text fields of the form.

3. Purposes of processing

We use your personal data for the following purposes:

• To respond to your inquiries and requests for information or an assessment.
• To manage the commercial relationship and the delivery of our data protection consulting services.
• To send you communications related to the services you request and, where you authorize it, information of interest about Law 21.719 and industry updates.
• To analyze and improve the operation of the website and the user experience.
• To comply with the legal obligations applicable to us.

4. Legal basis

In accordance with Law No. 21.719, we process your personal data on the following legal bases, as applicable:

• Your consent, which you give by completing the contact form or by accepting the use of non-essential cookies.
• The performance of pre-contractual and contractual measures, when you request information or engage our services.
• Our legitimate interest in handling inquiries, maintaining the security of the site and improving our services, provided your rights do not prevail.
• Compliance with legal obligations applicable to us.

Where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing prior to its withdrawal.

5. Cookies and similar technologies

We use first-party and third-party cookies for the operation of the site, to remember your preferences and for analytics purposes. Essential cookies are necessary for the site to work; the others are only activated with your consent.

You can configure or withdraw your consent at any time from the Cookie preferences link available at the foot of every page, or by adjusting your browser settings.

6. Retention period

We keep your personal data only for as long as necessary to fulfill the purposes for which it was collected and, thereafter, for the applicable legal periods to address possible liabilities. When the data is no longer needed, we securely delete or anonymize it.

7. Data sharing and processors

We do not sell or transfer your personal data to third parties for commercial purposes. We only share data with providers that deliver services necessary to operate (for example, web hosting, analytics tools or technology platforms), who act as processors under our instructions and with appropriate security and confidentiality guarantees.

We may also disclose data where there is a legal obligation or a request from a competent authority.

8. International transfers

Some of our technology providers may process data outside Chile. In those cases, we adopt the safeguards required by Law No. 21.719 to ensure that your data maintains an adequate level of protection during the transfer.

9. Security measures

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or disclosure. These measures are reviewed periodically based on the state of the art and the risks of the processing.

10. Your rights as a data subject

Law No. 21.719 grants individuals a set of rights over their personal data. At any time you may exercise the following:

• Access: find out what data we process about you and for what purpose.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data when it is no longer necessary.
• Objection: object to the processing of your data in certain circumstances.
• Blocking: request the temporary suspension of processing.
• Portability: receive your data in a structured, commonly used format, or request its transfer to another controller.

To exercise these rights, write to privacidad@alayiatrust.com indicating the right you wish to exercise. We will respond within the periods set by law. If you believe we have not adequately addressed your request, you have the right to file a complaint with the Personal Data Protection Agency.

11. Minors

This site and our services are intended for professionals and organizations. We do not knowingly collect data from minors through the website.

12. Changes to this policy

We may update this Privacy Policy to reflect legal, technical or operational changes. We will publish the current version on this page, indicating the date of the last update. We recommend that you review it periodically.

13. Contact

If you have questions about this policy or about the processing of your data, contact us:

• AlayIAtrust — Alaya Digital Solutions
• Huérfanos 835, floor 17, suite 1701, Santiago, Chile
• Privacy: privacidad@alayiatrust.com
• Business inquiries: comercial@alayiatrust.com