Privacy Policy

This Privacy Policy describes how DITAP (Inversiones Tecnomagallanes SpA) ("DITAP," "we," "us," or "our") collects, uses, shares, and protects your personal information when you visit our website at ditap.io or use our services.

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website.

DITAP operates across Argentina, Chile, and Italy, and is committed to complying with applicable data protection laws in each jurisdiction:

This policy is updated to incorporate international best practices and maintain preventive coverage against claims.

We collect information that you provide directly, information generated automatically when you interact with the site, and information from third-party sources.

Information You Provide Directly:

Information Collected Automatically:

Information from Third Parties:

Special categories of data: We do not knowingly collect sensitive data (racial origin, health, political beliefs, biometric data). If you voluntarily share such data in a free-form message, we will not process it for purposes beyond responding to you.

We use data for the following purposes, each with its own legal basis:

We do not sell, rent, or share personal data with third parties for their direct marketing purposes without your express consent.

Automated decision-making / AI: We do not make decisions producing legal effects based solely on automated processing or profiling, in accordance with GDPR Art. 22. If implemented, we will inform you in advance and guarantee your right to human intervention.

We share information with the following service providers, solely for the stated purposes, under Data Processing Agreements (DPAs) with adequate safeguards:

US-based providers operate under Standard Contractual Clauses (SCCs) approved by the European Commission. Argentina has an EU adequacy decision.

Complete and updated list of sub-processors available upon request at [email protected].

Our site uses cookies and similar technologies. Your consent is requested via the cookie banner on first visit and can be modified at any time.

Strictly necessary cookies (no consent needed, basis: legitimate interest):

Analytics cookies (require consent):

Marketing / advertising cookies (require explicit opt-in consent):

Management:

We comply with Italian Garante guidelines on cookies (Decision 231/2021) and EDPB Guidelines 02/2023.

DITAP operates in Argentina, Chile, and Italy. Your data may be transferred and processed in countries other than your own, including the United States (where many of our sub-processors are based).

For EU / Italy users:

When data is transferred outside the European Economic Area (EEA), we guarantee appropriate safeguards:

For Argentina users:

We comply with AAIP Disposition 60-E/2016 on international data transfer.

For Chile users:

We comply with Law 19,628 and, upon entry into force (December 2026), with Law 21,719 on cross-border transfers to countries offering adequate protection.

We retain personal data only as long as necessary for the purposes for which it was collected:

After these periods, data is deleted or irreversibly anonymized. Data needed for legal defense may be retained until the corresponding limitation period expires.

Depending on your jurisdiction and applicable law, you may exercise the following rights:

How to exercise your rights:

Send your request to [email protected] clearly indicating the right you wish to exercise. We will respond within a maximum of 30 calendar days (extendable to 60 days for complex cases, per GDPR Art. 12 / Law 25,326 Art. 14).

Right to lodge a complaint with supervisory authorities:

We implement appropriate technical and organizational measures per GDPR Art. 32 and international best practices:

Technical:

Organizational:

Data breach protocol:

In the event of a breach posing risk to data subject rights, we will notify the competent supervisory authority within 72 hours (GDPR Art. 33) and affected individuals without undue delay when risk is high (GDPR Art. 34).

Despite these measures, no system is 100% invulnerable. We assume no responsibility for access resulting from force majeure or attacks beyond the state of the art.

Our website and services are directed at companies and adult professionals. We do not knowingly collect data from children under 18 years (or 16 in jurisdictions where that is the digital consent threshold, per GDPR Art. 8).

If a parent or legal guardian discovers a minor has provided data without authorization, please contact [email protected] for immediate deletion.

Prior, express, and informed consent is our basis for sending commercial electronic communications. We will never contact you without prior authorization.

Legal compliance:

Your right to unsubscribe:

Every commercial email includes a one-click unsubscribe link. You may also send your request to [email protected]. We process unsubscribes within 10 business days.

We may update this Privacy Policy to reflect changes in our practices, legislation, or services we use. Material changes will be communicated via:

We recommend reviewing this page periodically. Continued use after changes constitutes acceptance.

For inquiries about this Privacy Policy or data processing:

If you believe processing of your data violates your rights, you may directly contact the supervisory authority in your jurisdiction (see Section 8).