1. Introduction and Commitment
For CCL AC Auditores Consultores Limitada and its affiliated companies, confidentiality is not only a legal obligation; it is an essential part of our professional practice.
As a firm dedicated to financial audit, consulting, and tax and legal advisory services, we understand that the personal information we receive is protected and may have financial, patrimonial, and strategic relevance. Therefore, we process personal data with a high standard of diligence, protection, and responsibility.
This Privacy Policy exclusively governs the processing of personal data collected through this corporate website. The processing of data that we carry out in the context of providing professional services is governed by the agreements entered into with each client, applicable regulations, and our internal data protection policies.
2. Data Controller
The controller of the personal data collected through this website is:
CCL AC Auditores Consultores Limitada Tax ID No. 76.917.311-0
However, this channel may also be used to protect data of its affiliated companies Gestion Contable y Tributaria, Tax ID No. 76.503.475-2
Addresses:
Santiago: Napoleón 3037, Las Condes, Santiago.
Viña del Mar: Av. Reñaca Norte 25, Office 1001, Reñaca.
Contact email for personal data matters: adminitracion@cclac.cl
3. Legal Framework
The processing of personal data is carried out in accordance with Law No. 19,628 and its amendments, especially Law No. 21,719.
4. What data do we collect?
Through our website (cclac.cl), we collect the following data, depending on the channel used:
a) Contact form
•First and last name (Name).
•Email address (Email).
•Phone number (Mobile).
•Information voluntarily included (Subject).
•Information voluntarily included (Message).
b) Whistleblowing channel
•Information regarding reported facts.
•Identification of the complainant, if they choose to provide it.
•Attached documents.
•Data of third parties mentioned in the complaint.
The channel allows reports to be submitted confidentially or anonymously, according to the complainant’s preference.
c) Other forms
•Data necessary to coordinate meetings or provide preliminary guidance regarding services.
We do not request sensitive data through the website without a specific purpose. However, if the user provides such data voluntarily, it will likewise be used solely for the purpose associated with their communication.
5. Purpose of processing
The data collected through our website will be used exclusively to:
•Respond to inquiries or requests voluntarily submitted by the user.
•Assess potential contractual relationships.
•For commercial purposes, such as preparing proposals, sending commercial and/or technical information within the framework of the services we provide.
•Manage complaints submitted through the channel enabled for this purpose.
•Comply with legal or regulatory obligations.
•Maintain professional communications requested by the user.
It is important to clarify that we do not use the data collected for unauthorized mass marketing, nor do we commercialize it with third parties.
6. Legal basis for processing
The processing of personal data through our website is based on:
•The consent granted by voluntarily submitting a form.
•The execution of pre-contractual measures requested by the data subject.
•Compliance with legal obligations.
•The legitimate interest in properly managing inquiries or complaints.
7. Confidentiality and whistleblowing channel
The information received through the whistleblowing channel is handled under strict confidentiality standards and is received and managed by an established whistleblowing committee.
Access to such information is restricted exclusively to authorized persons, who act under a duty of professional confidentiality. The identity of the complainant, when disclosed, is protected in accordance with current internal protocols, so that security is provided at all times both to the complainant and to the situation.
8. Do we share information with third parties?
We do not share personal data with third parties, except when:
•There is a legal obligation.
•It is required by a competent authority.
We do not transfer data without complying with the corresponding legal requirements.
9. Information security
We implement technical and organizational measures appropriate to the level of risk, including:
•Restricted access control to information.
•Individual authentication.
•Protection of digital communications when appropriate.
•Internal confidentiality protocols.
•Incident management procedures.
Our security approach is based on international best practices and standards such as ISO/IEC 27001, applied proportionally to the nature of our services.
10. Data retention
The personal data collected through our website will be retained only for as long as necessary to fulfill the purpose that motivated its collection and to address any potential legal and/or contractual liabilities.
Once this period has elapsed, the data will be deleted or blocked within six months in accordance with applicable regulations.
11. Data subjects’ rights
Data subjects may exercise the following rights:
•Access to their data.
•Rectification of the information if it is inaccurate.
•Deletion of their data, provided there are no legal liabilities involved.
•Objection to the retention of the information, provided there are no legal liabilities involved.
•Portability, when applicable.
To exercise these rights, you may write to: administracion@cclac.cl
Requests will be handled within the timeframes established by law.
12. Security incidents
If an incident is detected that compromises personal data collected through this website, we will activate our internal evaluation and mitigation procedures, and we will notify the competent authority or the data subjects when required by law.
13. Updates
This Privacy Policy may be amended when there are legal, technological, or changes in our digital services. The current version will always be available on this website.