Legal

Personal data processing policy

Version 1.0 · November 5, 2026

This policy explains what personal data Epistema processes through epistema.cl, why, on what legal basis, and what your rights are. It follows Chilean Law No. 19.628 on the protection of private life, as amended by Law No. 21.719, whose entry into force is set for December 1, 2026. The Spanish version prevails.

1. Data controller

  • Controller: Epistema, Chile.
  • General contact: contacto@epistema.cl.
  • Personal data requests: seguridad@epistema.cl.

2. What data we process and whose

We only process data from people who write to us through the contact form or by email. The data comes directly from you; we do not use public sources or buy databases.

  • Form data: name, email, institution or organization (optional), project type, message and site language.
  • Technical browsing data: the server automatically logs the IP address, date, requested page and browser type, like any website.

3. Purposes and legal basis

We do not use your data for advertising, do not sell it and do not build profiles. We make no automated decisions affecting you.

  • Answering your inquiry and, where appropriate, preparing a work proposal. Legal basis: your consent, given by ticking the form checkbox.
  • Keeping the site secure and preventing abuse or automated submissions. Legal basis: Epistema’s legitimate interest in protecting its site and users. Your IP address is used only temporarily to limit repeated submissions and is not stored with your message.

4. Cookies and third-party services

epistema.cl uses no tracking cookies, analytics or advertising tools. Fonts and images are served from our own server, with no third-party connections while you browse.

5. Who we share data with

We do not disclose your data to third parties. To run the site and email we rely on providers acting as processors, on behalf of and under instructions from Epistema:

  • Cloudez, the site’s hosting provider, on Akamai (Linode) infrastructure.
  • Google Workspace (Google LLC), the email service where we receive and answer messages.

6. International transfers

The site’s server is located in the United States and Google’s email service may store data in several countries, so your data may be transferred outside Chile. These transfers are made to providers offering contractual confidentiality and security guarantees, limited to what is needed to provide the service. If the Chilean Data Protection Agency defines adequate countries or standard clauses, we will align these transfers accordingly.

7. How long we keep data

  • Form messages and emails: while your inquiry is handled and at most 24 months after the last contact, unless a professional relationship begins, in which case for its duration and the applicable legal periods.
  • Server technical logs: up to 30 days.

8. How we protect data

  • Encrypted connection (HTTPS) across the site.
  • Messages are stored outside the server’s public area, with access restricted to the Epistema team through cryptographic keys.
  • We collect only what is necessary and install no trackers.
  • If a security breach affects your data, we will notify the Agency and, where applicable, the people affected, as required by law.

9. Your rights

You may exercise at any time, free of charge, your rights of access, rectification, erasure, objection, portability and blocking. If you gave consent, you may withdraw it at any time, without affecting the lawfulness of prior processing.

To do so, write to seguridad@epistema.cl with your name, the right you wish to exercise and a contact email. We will reply within the legal deadlines.

If your request is refused or not answered in time, you may file a complaint with Chile’s Agencia de Protección de Datos Personales.

10. Minors

This site is aimed at professionals and institutions. We do not knowingly collect data from children under 14.

11. Changes to this policy

We may update this policy to reflect legal or service changes. Each version shows its number and date at the top of this page.