Privacy Policy

1. Data controller

• Company name: Tecnoaustral Limitada
• Chilean tax ID (RUT): 76.492.723-0
• Legal representative: Claudio Quezada
• Address: Las Tiacas 535, Puerto Montt, Los Lagos Region, Chile
• Email for requests about your data: [email protected]
• Phone: +56 9 7848 3086

We have not appointed a compliance officer or a data protection officer.

2. What data we process, whose, and where it comes from

We process data of people who write to us through the contact form —clients, prospective clients and their representatives— and of visitors to the site:

• Contact form: name, email address and message; and, if you provide them, phone, company, location, service of interest, project type and timeline, and an attached file.
• Technical connection data: IP address and browser data, used only to deliver the site and protect it from abuse.
• Usage analytics: visit statistics, page views, country and device type. Part of it is measured without cookies and in aggregate; measurement with Google Analytics, which uses cookies, is only enabled if you accept it.

All data is provided directly by you or generated by your use of the site. We do not obtain it from publicly accessible sources or from third parties, and we do not process sensitive data or data of minors.

3. Purposes and legal basis

• Answering your enquiry or quote request. Basis: your consent, given when you submit the form, and taking pre-contractual steps at your request.
• Measuring and improving the site with Google Analytics. Basis: your consent, given in the cookie notice.
• Cookieless aggregate measurement and site security (preventing abuse, spam and attacks). Basis: our legitimate interest in keeping the site available and secure and in knowing how many people visit it, without identifying them.

4. Who we share your data with

We do not sell or transfer your data. We only disclose it to providers that process it on our behalf, for the purposes stated above and under confidentiality obligations:

• Vercel Inc. (United States): website hosting.
• Cloudflare Inc. (United States, global network): site delivery, attack protection and cookieless visit measurement.
• Resend (United States; sent from servers in Brazil): delivery of the email containing your enquiry.
• Google LLC (United States): receipt of your enquiry in our corporate email (Google Workspace) and, only with your consent, Google Analytics.
• Upstash Inc. (United States): rate limiting of the contact form to prevent abuse.

Your data will only be disclosed to an authority when required by law or court order.

5. International transfers

The providers listed above process data outside Chile, mainly in the United States and Brazil. As of the date of this policy, the Personal Data Protection Agency has not determined which countries offer an adequate level of protection, so we cannot state that these countries do.

These transfers rely on the data processing agreements each provider has with us, which include contractual clauses with confidentiality, security and purpose-limitation obligations; and, regarding your enquiry, on the transfer being necessary to take the pre-contractual steps you request (Article 27 of Law No. 19,628).

6. How long we keep your data

• Contact form enquiries: they are not stored on the website or in any database; they arrive as an email in our contact inbox. We keep them while handling your enquiry and for up to 12 months after the last contact, unless they lead to a contract, in which case they are kept for its term and for the applicable legal, accounting and tax periods. They are then deleted.
• Rate-limiting record: 15 minutes.
• Technical server logs: they do not include your name or email and are deleted within 1 day at most.
• Google Analytics: up to 14 months at event level; after that, only aggregated statistics are kept.
• Cookieless measurement: only aggregated statistics are stored, with no data that identifies you.

7. Security measures

We protect your data with technical and organizational measures proportionate to the risk, including:

• Mandatory encrypted connections (HTTPS) across the whole site, with HSTS.
• Enquiries are not stored on the site: they are transmitted encrypted to the contact inbox, with access restricted to authorized staff.
• Server-side data validation, verification of the actual content of attachments, rate limiting and spam protection.
• Security headers (including a content security policy) and attack protection through Cloudflare.
• Technical logs without the sender's name or email, and periodic review of software vulnerabilities.
• Providers with security programs and industry-recognized certifications.

If a breach affecting your data poses a reasonable risk to your rights, we will report it to the Personal Data Protection Agency and, where required by law, to you.

8. Your rights and how to exercise them

You may exercise the following rights at any time, free of charge:

• Access: to know what data of yours we process.
• Rectification: to correct inaccurate or outdated data.
• Erasure: to ask us to delete your data.
• Objection: to object to a specific processing activity.
• Portability: to receive your data in a structured, commonly used format.
• Temporary blocking: while we resolve a rectification, erasure or objection request.

Write to [email protected] stating your name, the right you are exercising and a way to reply to you. We will acknowledge receipt and reply within 30 calendar days, which may be extended once by a further 30 days.

Withdrawing consent. Where processing is based on your consent, you may withdraw it at any time, without giving a reason: for analytics, from “Cookie settings” at the bottom of every page; for your enquiry, by writing to the same email address. Withdrawal does not affect the lawfulness of processing carried out before it.

9. Complaints to the Agency

If we reject your request or do not reply in time, you may file a complaint with the Personal Data Protection Agency (Agencia de Protección de Datos Personales) within the following 30 business days.

10. Automated decisions

We do not make automated decisions or create profiles with your data.

11. Cookies

Details of cookies and cookieless measurement are in our Cookie Policy.

12. Changes to this policy

When we update this policy we will publish the new version here, with its number and date. Current version: 2.0, October 2026.