DITAP SpA
Privacy and data protection
October 10, 2026
1. Controller and scope
DITAP SpA · RUT 78.532.132-4 · Esmeralda 671, Puerto Natales, Chile · [email protected] · +39 345 243 5103
This policy covers the corporate website and incoming enquiries. When a customer uses our software to process patient, employee or customer data, the customer determines the purpose and DITAP acts as processor under the contract and processing agreement. Browsing is not consent to advertising or optional processing.
2. Data and purposes
We process names, email, telephone, company and enquiry content to respond, prepare proposals and manage customer relationships. Order, payment and invoicing data support delivery and legal obligations. Payment providers collect payment details in their own interface. Technical logs help detect errors, abuse and security issues. Browsing analytics requires consent. Newsletter subscriptions are voluntary and separate from enquiries. Do not send medical records, passwords or sensitive information through commercial forms. These forms do not make automated decisions with legal effects.
3. Legal bases and applicable law
Processing relies, according to the purpose and jurisdiction, on consent, pre-contractual steps or contract performance, legal obligations and service security where a lawful basis applies. Legitimate interests are not applied indiscriminately across countries. Chilean Law 19.628 currently applies; Law 21.719 amendments take effect on 1 December 2026. The GDPR and Argentine Law 25.326 apply when processing falls within their territorial scope.
4. Providers and transfers
The site uses Vercel for hosting, Cloudflare for DNS and protection, Resend for email, Supabase for features that use its database, Sentry for technical diagnostics and Google Analytics with your consent. Stripe or Mercado Pago process purchases depending on the available payment method. WhatsApp processes conversations under its terms when you choose that channel. Some providers process data outside Chile or your country; applicable transfer mechanisms and contracts depend on the service and destination. Contact [email protected] for provider and safeguard details relating to your service. We do not sell data for third-party marketing.
5. Retention and security
We retain data while necessary to handle enquiries or deliver the service, and for applicable legal retention or claims periods. There is no universal tax retention period for every country. Deletion requests are assessed against these obligations; if retention is required, we explain the applicable reason. The site uses HTTPS. Access controls and security measures depend on the feature and contracted service; we do not promise immunity from incidents.
6. Rights and contact
Request access, rectification, deletion or objection and withdraw consent at [email protected]. Restriction and portability apply where recognised by law. We ask only for information needed to verify identity and respond within statutory deadlines. Unsubscribe from newsletters through the message link or by email. EU residents may complain to their data protection authority; in Argentina, to the AAIP. In Chile, remedies under Law 19.628 apply until the new regime takes effect. Requests concerning a customer’s software data are coordinated with that controller.
7. Cookies and updates
See the cookie policy and Cookie settings in the footer. Updates carry a revision date; new consent will be requested where required.
Information specific to this website
Responsible and scope.
DITAP SpA RUT 78.532.132-4
Esmeralda 671, Puerto Natales, Chile.
Commercial attention, support, and privacy. [email protected]WhatsApp: +39 345 243 5103.
This policy outlines the data handling practices for visitors and inquiries of DITAP Holding. It does not replace the privacy documentation or agreements associated with the systems linked to this site.
What data did we receive, and for what purpose?
When you submit an inquiry, we record your name, email, company, and phone number (if provided), the message and its subject. We also retain the source website, page path, campaign parameters associated with the link, date and version of consent, and a reference for tracking. We use this information to respond to your inquiry, prepare the requested proposal, and manage the resulting conversation.
The accommodation processes technical connection data, including IP addresses and request logs, to deliver pages, detect errors, and protect the service. The form does not initiate a subscription or advertising profile.
Consent and contact information.
The form requires your consent to register your inquiry in our CRM. You can choose to write to… [email protected] Or via WhatsApp. Opening a draft doesn't register as a query in the CRM; sending it delivers its content to the chosen channel. These services are also subject to the policies of your providers.
Do not send passwords, payment methods, medical records, identification documents, or any third-party data that is not essential for your consultation. You can withdraw your consent for data tracking by writing to us; this does not affect treatments that have been carried out legally before the withdrawal, nor any legal obligations we are required to fulfill.
Suppliers and access to information
Vercel hosts the website and processes shipments; Supabase stores CRM queries. Their infrastructure may involve processing outside of Chile. Access should be limited to those who need to address the queries and to the providers who deliver these functions. Contractual obligations for the service, including those related to personal data, are specified before incorporating a client’s operational information into a system.
Conservation and applications
Contact information will be retained as long as it’s needed to fulfill the request and monitor its progress. If there’s a contractual relationship, a legal obligation, or a dispute involved, additional periods may be required for this purpose. Any information that is no longer needed should be deleted or anonymized; there is no guarantee of a single, fixed timeframe for all inquiries.
You can request information about your data, access, rectification, deletion, or blocking when applicable, and withdraw your consent by writing to: [email protected] Regarding the “Personal Data” matter. Please specify the email address you’re using and what you are requesting. We may request a proportionate identity verification before providing or modifying information. Do not send sensitive documentation in advance.
Applicable framework and changes.
Chile’s data protection laws, including Law 19.628 and all relevant provisions regarding data processing, apply. The reform to Law 21.719 will take effect on December 1, 2026. This policy does not outline the new obligations as if they are already in effect.
Significant changes to the stated purposes or requested data will be communicated through the appropriate channel and will require new authorization when necessary. The page review date allows you to identify the version being used.