Privacy Policy

1. Scope of this document

This policy applies to databridgar.com, to its subdomains and to the email correspondence we hold with you following a request sent from the form. It does not apply to third-party sites you may visit from a link published in our briefs.

Processing is governed by Personal Data Protection Act 25,326, its Implementing Decree 1558/2001, the resolutions of the Agency for Access to Public Information (AAIP) and, where the visitor's origin so requires, Regulation (EU) 2016/679.

2. Information we collect

We work on a minimum-necessary basis. Specifically:

• Data you provide in the form: full name, email address and the text of your message.
• Technical connection data: IP address with the last octet truncated, browser type, operating system, device language and approximate country.
• Aggregated usage data: sections visited and time on page, only if you enabled the “Analytics” category in the cookie panel.
• Correspondence: the content of emails you exchange with our support team.

We do not ask for and do not want to receive ID numbers, asset data, card information, banking credentials or sensitive data within the meaning of section 2 of Act 25,326. If you send them by mistake, we delete them and let you know.

3. Purposes and legal bases

Each data point has a specific purpose and an identifiable lawful basis:

• Handling your request and replying to you — performance of the pre-contractual relationship you initiated.
• Preparing and sending you informational material related to the topic you raised — consent expressed when submitting the form.
• Keeping the site secure, preventing abuse and logging incidents — legitimate interest of the controller.
• Measuring site performance in aggregate — consent given in the “Analytics” category.
• Measuring outreach campaigns and capping notice repetition — consent given in the “Advertising” category.
• Complying with requests from competent authorities — legal obligation.

4. Retention periods

Once those periods elapse, the information is deleted or irreversibly anonymised, unless a legal obligation requires us to keep it for longer.

• Form requests and associated correspondence: 24 months from the last contact.
• Technical security logs: 12 months.
• Aggregated usage metrics: 14 months, with no possibility of re-identification.
• Cookie consent records: 13 months or until you change your choice.

5. Who we share information with

We do not sell, rent or transfer personal data. We rely on a narrow set of providers acting on behalf of and under the instructions of Databridgar, under a processing agreement and bound by confidentiality:

• Infrastructure and hosting provider, with data centres in the European Union and the United States.
• Transactional email provider used to answer your requests.
• Digital measurement and outreach provider (Google Ireland Limited), which only receives data if you enabled the corresponding categories.
• External legal and accounting advisers, where strictly necessary to defend a right.

Where a transfer involves a country without an adequate level of protection according to the AAIP, it is implemented through standard contractual clauses and complementary technical measures.

6. Automated decisions

The ordering of material you see on the platform relies on automatic rules based on the topic you declared and the site language. Those rules produce no legal effects on you, build no creditworthiness or behavioural profiles, and you can always request a human review by writing to privacidad@databridgar.com.

7. Information security

• Encryption in transit via TLS 1.3 and encryption at rest for the request databases.
• Internal access segmented by role, with mandatory two-factor authentication for authorised staff.
• Access audit logging and quarterly permission reviews.
• Annual penetration testing carried out by an independent third party.
• A documented incident response procedure, with notification to the AAIP and to affected individuals where required.

8. Your rights

You may request at any time access to, rectification of, updating of, erasure of or blocking of your personal data, as well as withdraw the consent you gave. You may also object to processing based on legitimate interest and request portability of the information you provided.

Write to privacidad@databridgar.com from the address you registered with. We answer access requests within ten calendar days and all other requests within five business days, in accordance with section 14 of Act 25,326.

The Agency for Access to Public Information, located at Av. Pte. Julio A. Roca 710, Floor 2, Buenos Aires, is the supervisory authority for Act 25,326 and is empowered to handle complaints and claims regarding non-compliance with personal data protection rules.

9. Minors

The platform is intended for people aged 18 or over. We do not address communications to minors and do not deliberately collect their data. If we detect an account created by a minor without the authorisation of their legal representatives, we close it and delete the associated information.

10. Changes to this policy

When we amend this document we will publish the new version at this same address, with an updated date and version number. If the change materially affects the processing of your data, we will notify you by email at least fifteen days in advance.

11. Contact

Data protection officer of Databridgar S.A.S. — privacidad@databridgar.com — Av. Córdoba 1345, Floor 7, Office “B”, C1055AAD, Autonomous City of Buenos Aires, Argentina — +54 11 5263 8470.