Privacy Policy

For RSK Group, hereinafter referred to as “RSK”, privacy, confidentiality, and taking care of personal data of individuals is essential, which is why it is committed to protecting your personal information and ensuring that your privacy is respected.

This personal data protection policy is based on RSK’S commitment with the privacy and security of information related to the personal data of our clients and users; and it is based on the principles of confidentiality, proportionality, integrity, transparency, availability, and the current legal obligations.

The personal data protection policy described below provides how RSK collects, processes, and protects the personal data that you provide or that RSK collects through the “BOX” platform (hereinafter referred to as the “Platform”), websites that have been implemented and those that will be implemented in the future, as well as forms and other RSK channels.

This policy does not apply to data collected by third parties in other applications, websites, even if they are embedded in the Platform. In such case, the privacy policy of such websites shall apply.

RSK will process personal data in compliance with Law 19.628 “Law on Protection of Privacy”, and other regulations related to the safeguarding, protection, and confidentiality of personal data.

I. Definitions

a) “Personal data”: any information related or referred to an individual, identified or identifiable through means that can be reasonably used.

b) “Sensitive personal data”: data that refers to the physical or moral characteristics of individuals, or to the facts or circumstances of their private life or intimacy, such as personal habits, racial origin, ideologies, beliefs, political opinions, and sexual life.

c) “Data processing”: any operation or complex of operations or technical procedures, whether automated or not, that makes it possible to collect, store, record, organize, elaborate, select, extract, confront, interconnect, dissociate, communicate, assign, transfer, transmit or cancel personal data, or use them in any other way.

d) “Data controller”: individual or private or public legal entity who makes the decisions on data processing, that is, the individual or legal entity who makes decisions on what to do with the data, from the collection until disposal thereof. For the purposes of this privacy policy, as stated above, RSK may act as data controller or as data processor, as applicable, depending on the User’s type of relationship with RSK. If the User is an Inspector, the data controller shall be RSK. If the User is a service provider or employee of an Exporter or client of RSK, the data controller shall be the Exporter or client of RSK, whereas RSK shall act as a data processor.

e) “Data processor”: individual or legal entity who processes personal data on behalf of the data controller by reason of a legal relationship with the latter.

f) “User”: individual who enters or uses the Platform and expressly authorizes the processing of his/her personal data by the Platform.

g) “Personal data subject”: individual whose personal data is subject of processing and regarding which RSK is the controller or the processor, as applicable.

h) “Data transfer”: Occurs when the data controller and/or data processor located in Chile sends the information or personal data to a recipient, which in turn is responsible for its processing and is located inside the country or abroad.

i) “Data transmission”: processing of personal data involving the communication thereof inside or outside the territory of the country when the processing is to be carried out by the data processor on behalf of the data controller.

 II. Data Controller

Provider: RSK Group.

Tax identification number: 76.148.404-4.

Legal representative: María Luisa Flores Olivares.

Address: Avenida Bosques de Montemar No. 30, office 1311, district of Viña del Mar, Valparaíso Region.

Email: info@rskgroupco.com

 

III. Legal Basis for Data Processing.

The processing of personal data by RSK is based on the explicit, prior, unequivocal, free, and informed consent of the data subject and/or the law.

IV. Purpose of Data Processing.

RSK will process data that is strictly necessary for the fulfillment of the following purposes:

1. Provide the services enabled on the Platform properly.
2. Manage your registration, requests, and interaction as User of the Platform.
3. Manage the contractual relationship arising from the execution of the services enabled on the Platform.
4. Manage requests received in the contact form of the Platform, forms of inspectors or your intention to subscribe to our newsletter.
5. Take all necessary actions to confirm and update your User information, including the validation of your identity when performing operations with RSK, analyzing data from your client, service provider or employee profile. For this purpose, RSK will be able to use your geolocation data, data from the device through which you access the Platform and contact data in order to protect the security of your information and that of RSK’s clients.
6. Use your geolocation data to determine the available services in a certain territory. Similarly, in the case of an Inspector, and only while the Platform is in active mode, we will process your geo reference for the traceability of the Services and for determining the rate applicable to the service contracted by the client.
7. For business or advertising purposes, in order to promote and give the possibility to request for Services on the Platform and keep you informed of the features of the Platform.
8. Analyze the User’s behavior while browsing on the Platform.
9. Comply with legal obligations.
10. In order to maintain the quality of the services, verify instructions and prevent fraud.
11. Finally, the data may be used with statistical, historical and research purposes, inter alia, in which cases, to the extent possible, your data will be used anonymously, meaning that it will not be possible to determine the identity of the individual to whom they belong.

For such purposes, RSK may collect your data by different means, such as access and use of the Platform, submittal of online forms, emails, online chat, among other authorized channels in accordance with the current legislation.

V. Data Communication

As a general rule, RSK will not share your personal data with third parties, unless there is a legal mandate that authorizes it, and also when you consent to it.

Notwithstanding the foregoing, by accepting this privacy policy, you authorize RSK to share and communicate your personal data in the following circumstances:

1. With third party service providers that are exclusively related to the services enabled on the Platform. Such providers may access your personal data as Data Processors and may process your data on behalf of RSK. For this, RSK has adopted a selection criterion for providers so they can deliver their services in compliance with the data protection policies defined by RSK in matters of confidentiality, safeguarding of information, cybersecurity, inter alia.
2. With the selected inspector for the execution of the contracted Services through the Platform.
3. To process requests made by Users and to comply with the agreed obligations.
4. Users of the Platform may perform evaluations of Clients and Inspectors. In this regard, data subjects hereby authorize that such opinions be published in the Platform to provide Users with more information on the Services performed by the Inspectors and contracted by the Clients.
5. To contribute to the prevention of fraud or to enforce or protect the rights and property of RSK or RSK’s clients.
6. To protect the personal security of RSK’s employees, third party representatives or the public in general.
7. To comply with any law, regulations, summons or injunction.
8. In the event that, for strategic or other business reasons, RSK decides to sell, purchase, merge or reorganize the business. In such case, such transaction could include the disclosure of your personal information to actual buyers, or the reception thereof by the sellers. RSK’s policy is to adequately protect personal information in these types of transactions.

In all these cases, whoever is the Data Processor must comply with this privacy policy.

VI. International Transmission and Transfer.

By accepting this privacy policy, the data subject expressly authorizes RSK to communicate and/or transfer its personal data to servers located in the cloud and/or in a foreign territory and to the other parties of the contracted Service which may be located in different jurisdictions.

VII. Validity of Data Processing.

Personal data of data subjects regulated by this policy will be kept for as long as necessary in connection with the aforementioned purposes. However, certain personal data may be kept for a longer period if required by legal or regulatory provisions, in which case they will be kept for the period provided for in said provisions.

VIII. ARCO Rights.

Data subjects have the following rights:

• Right of access: Data subjects may request RSK information on whether their personal data are being processed by it, and access them if necessary.
• Right of rectification: Data subjects may request that RSK modify or amend their personal data when they are inaccurate, outdated, incomplete or misleading.
• Right of cancellation: Data subjects may request that RSK suppress or delete their personal data when the consent for its processing has been revoked and there is no lawful basis for processing them, when the processing is unlawful, or when the data have expired.
• Right of opposition: means the right of the data subject to request that RSK refrain from processing specific data.

Data subjects may exercise these rights at any time by contacting RSK through the contact form available at http://rskgroupco.com/company.html or by sending an email to the following email address info@rskgroupco.com.

IX. Security.

For RSK, the security of your information is essential, for which it has appropriate policies and adequate technical and organizational measures to properly safeguard and protect your personal data against unlawful or unauthorized access, loss, accidental destruction, damage, illegal or unauthorized use and disclosure.

X. Contact.

For any questions regarding the terms of this privacy policy or the exercise of the rights granted by law to the Data Subject, you may write to info@rskgroupco.com or fill out the following form http://rskgroupco.com/company.html.

XI. Changes in this Policy.

RSK may introduce changes in this privacy policy. In this case, these changes will be communicated to clients and users and will be published on the Platform and other channels to be defined. If so, RSK will request that the data subject authorize the new conditions.

XII. Validity

This Policy shall be effective as of the date of its publication, i.e., January 1^st, 2023.