Privacy, data protection and cybersecurity policy

SISEP | Sistemas, Servicios y Proyectos SpA is responsible for the processing of personal data collected through the website:

Website: https://www.sisep.cl

Phone: +56 9 8806 9393

Email: info@sisep.cl

For inquiries related to this policy or the processing of personal data, users may use the contact channels published on the website.

Depending on the user's interaction with the website, SISEP may collect:

• First and last name.
• Email address.
• Phone number.
• Company or organization.
• Position or role.
• Information contained in contact forms.
• Information needed to respond to commercial or technical requests.
• IP address.
• Browser and device information.
• Browsing data and website usage.

We do not request or process sensitive personal data unless strictly necessary for the provision of a specific service and a legal basis exists.

When using the Website, we may automatically collect certain technical information, either directly or through analytics tools provided by third parties, such as Google Analytics or equivalent services.

Information collected may include:

• Your IP address and the date and time of your access.
• Your browsing activity within the Website, including pages visited and access times.
• Web browser information.
• Operating system and device type.
• Visit source and usage statistics.
• Information generated through cookies or similar technologies.

This information will be used exclusively for:

• Improving Website functionality.
• Analyzing usage trends.
• Detecting technical errors.
• Optimizing performance and browsing experience.
• Strengthening information security measures.
• Providing better service to our users.

SISEP will not use this information to personally identify visitors, except when required by law, by competent authority request, or when necessary to protect system and service security.

Collected data may be used for:

• Responding to user inquiries and requests.
• Delivering requested commercial or technical information.
• Preparing quotations and service proposals.
• Managing commercial relationships with clients and suppliers.
• Providing technical support.
• Complying with legal and contractual obligations.
• Improving the quality of our products and services.
• Maintaining the security of our computer systems.
• Detecting malicious activities, fraud attempts or unauthorized access.
• Performing statistical analysis of website usage.

SISEP will process personal data only when there is a sufficient legal basis, including:

• Consent of the data subject.
• Performance of contracts or pre-contractual measures.
• Compliance with legal obligations.
• Protection of legitimate interests related to information security.
• Other circumstances permitted by applicable law.

The Website may use cookies, tracking tags and other similar technologies to enhance the browsing experience.

These technologies enable:

• Remembering user preferences.
• Analyzing website usage.
• Obtaining browsing statistics.
• Improving platform security and functionality.

Users may configure their browser to reject or delete cookies. However, some website features may be affected.

SISEP does not sell, rent or trade users' personal data.

Information may be shared only with:

• Hosting and technology infrastructure providers.
• IT service or technical support providers.
• Statistical analytics platforms such as Google Analytics.
• Providers necessary for the provision of contracted services.
• Administrative or judicial authorities when legally required.

In all cases, SISEP will ensure that such third parties maintain adequate security and confidentiality measures.

SISEP implements technical, administrative and organizational measures designed to protect information against security risks.

These measures may include:

• System access control.
• User authentication.
• Protection through strong passwords.
• Technology infrastructure monitoring.
• Vulnerability updates and patching.
• Critical information backups.
• Malware protection.
• Security event logging and analysis.
• Cybersecurity incident management.

These actions seek to safeguard the confidentiality, integrity, availability and resilience of information, in line with the principles promoted by the Cybersecurity Framework Law.

Personal data will be retained only for as long as necessary to:

• Fulfill the purposes described in this policy.
• Maintain the commercial or contractual relationship.
• Comply with legal or regulatory obligations.
• Resolve disputes or requirements from competent authorities.

After such period, data may be deleted or anonymized as appropriate.

Personal data subjects may exercise the rights granted by applicable law, including:

• Right of access.
• Right of rectification.
• Right of update.
• Right of deletion where applicable.
• Right of objection in cases established by law.
• Right to know the purpose of data processing.

To exercise these rights, users may submit a request through the contact channels provided on the website.

When it is necessary to use technology services located outside Chile, SISEP will adopt reasonable measures to ensure that the involved providers maintain adequate levels of protection and security for personal data.

In the event of a security incident that may compromise the confidentiality, integrity or availability of data or systems, SISEP will adopt response, containment, mitigation and investigation measures as appropriate under applicable regulations and its internal procedures.

The Website may contain links to external websites operated by third parties.

SISEP is not responsible for the privacy policies, content or practices of such sites, and recommends that users review the corresponding policies before providing personal information.

SISEP may modify this Privacy, Data Protection and Cybersecurity Policy at any time to adapt to legal, regulatory, technological or operational changes.

Modifications will be published on this same page, indicating the corresponding update date.