1 Data controller
The controller of the personal data collected through this site is GRUPO INAN SpA, RUT 77.431.583-7.
- Registered address: Av. La Dehesa 1822 OF 430, Lo Barnechea, Santiago
- Channel for personal data matters: admin@inan.cl
Legal document
Privacy and Cookie Policy
How GRUPO INAN SpA processes the personal data of those who visit this site and hire its services, under Law 21,719 on the protection of personal data.
2 What data we process
Depending on how you interact with us, we may process the following categories of data:
- Identification and contact: name, tax ID, email, phone and address, when you hire a service or write to us.
- Billing and payment: tax details and payment receipts. Your card details are processed directly by the payment gateway; we do not store them.
- Technical connection data: IP address, date and time, browser and server logs, generated automatically when you visit the site.
- Support: the content of the tickets, emails or WhatsApp messages you send us.
- Browsing: the data generated by the cookies described below.
We do not request or process sensitive data through this site.
3 What we use it for
Each processing activity has a specific purpose and a basis that makes it lawful:
| Purpose | Lawful basis |
|---|---|
| Providing, activating and maintaining the services you hired | Performance of the contract |
| Answering sales and support enquiries | Pre-contractual steps or performance of the contract |
| Issuing tax documents and meeting legal obligations | Compliance with a legal duty |
| Protecting network security and preventing abuse and fraud | Legitimate interest |
| Measuring site usage and running marketing activities | Your consent |
We do not make automated decisions that produce legal effects on people or significantly affect them.
4 Cookies and similar technologies
Cookies are small files stored on your device when you visit a site. We use only those strictly necessary for the site to work and, only if you expressly authorize us, analytics and marketing cookies. Nothing beyond the necessary ones is activated before your consent, and you can change your decision at any time.
Purposes
- Strictly necessary: They make the site work: remembering the language and currency you chose and storing this very decision about cookies. The site cannot operate without them, so they do not require your consent.
- Analytics: They let us measure how many people visit the site and which pages they use, so we can improve it. If you decline, you can still browse normally.
- Marketing: They are used to measure how effective our campaigns are and to show INAN.CL ads on other sites. They stay off until you accept them.
Cookies this site sets
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
inan_lang | Remembers the language you chose (Spanish or English). | 1 year | Strictly necessary |
inan_currency | Remembers the currency you chose for prices (CLP or USD). | 1 year | Strictly necessary |
inan_consent | Stores your cookie decision. When it expires, we ask you again. | 1 day | Strictly necessary |
wordpress_*, wp-settings-* | Admin dashboard session. Only set if you log in as a site administrator. | Session or 1 year | Strictly necessary |
The site also stores your chosen language and currency in the browser local storage, for the same purpose as the equivalent cookies. If you accept the analytics or marketing purposes, those tools will also set their own cookies; you can withdraw that consent at any time.
Changing or withdrawing your decision
Withdrawing is as simple as accepting: open the preferences panel, turn off whatever you no longer authorize and save. You can also delete cookies from your browser settings.
Your decision is stored for 1 day. Once that period is over we ask you again, and we also do so sooner if the purposes or the third parties we use change.
5 Who we share it with
We do not sell personal data. We share it only with those who need to process it for the service to work:
- Payment providers: the data needed to process your payment (WebPay Plus, MercadoPago, Transferencia).
- Domain registrars: the registrant details required to register or transfer a domain, including NIC Chile for .CL domains.
- Authorities: when a law, a court order or a substantiated request obliges us to hand it over.
- Technology providers: those listed in the next section, acting as data processors.
6 International transfers
The infrastructure hosting our services is located in Santiago de Chile (infraestructura propia), so the data of your services stays within Chilean territory.
This site does use services that involve transferring data outside Chile:
- Google Fonts (Google LLC, United States): loads the site typefaces. To deliver them, your browser connects to Google servers, which receive your IP address. It sets no cookies.
- Analytics and marketing tools: if you authorize them in the cookie notice, their providers may process data outside Chile under their own policies. If you decline, nothing is loaded and no data is transferred.
7 How long we keep it
We keep data for as long as the contractual relationship lasts and, afterwards, for the periods required by legal and tax obligations and to defend against claims. Once those periods end, the data is deleted or anonymized.
Specific retention periods by data category: to be defined
8 Your rights
As the data subject you may exercise the following rights, free of charge:
- Access: to know what data of yours we process and for what purpose.
- Rectification: to correct data that is inaccurate, outdated or incomplete.
- Erasure: to ask for data to be deleted when it is no longer needed or you withdraw your consent.
- Objection: to object to a specific processing activity, including direct marketing.
- Portability: to receive your data in a structured, commonly used format, or ask for it to be transferred to another provider.
- Blocking: to temporarily suspend processing while a request is being resolved.
To exercise them, write to us at admin@inan.cl stating your name, your tax ID and the right you wish to exercise. We may ask you to prove your identity before responding.
If you believe we did not handle your request properly, you may file a complaint with the Personal Data Protection Agency.
9 Security and breaches
We apply technical and organizational measures to protect data: our own infrastructure with ISO 27001 certification, encryption in transit via SSL, access control, backups and anti-DDoS protection 2 Tbps (BGP Flowspec, incluido), with round-the-clock monitoring.
If a security breach affecting personal data occurs, we will report it to the Personal Data Protection Agency within 72 hours of becoming aware of it and, where there is a significant risk, to the affected individuals as well.
10 Minors
Our services are aimed at adults and organizations. We do not knowingly collect data from minors; if we find that we have received a minor's data without the corresponding authorization, we will delete it.
11 Changes to this policy
We may update this policy when our services, the providers we use or the applicable rules change. The version in force is always the one published on this page, with its last-updated date. If the change affects the purposes you authorized, we will ask for your consent again.
Questions about how we handle your data?