Privacy policy

The data controller is Ingeniería y Construcción Jorge Marcelino Navarro Gallardo E.I.R.L., Chilean tax ID (RUT) 77.309.719-4, registered at [address], trading as SUN & WIND. Its legal representative is Jorge Marcelino Navarro Gallardo. We have not appointed a compliance officer (encargado de prevención).

You can exercise your rights or ask us anything about your data using the form at the end of this page, by writing to contacto@sunandwind.cl or by letter to our address.

We process personal data in the following cases. For each one we state the data, where it comes from, the purpose, the legal basis and how long we keep it.

• Project inquiries (through the contact form, or by phone, email or in a meeting, which we log in our system): name, email address, company and phone number if you provide them, and the project information you give us, including the background information and documents we ask for to prepare a proposal (for example drawings, electricity consumption or the site location). We use them to answer you, assess your project and prepare a proposal if you ask for one. Legal basis: pre-contractual steps taken at your request (art. 13 c). If the inquiry doesn't lead to a contract, we anonymise it [number of] months after receiving it and delete its background information and documents; if it becomes a project, we keep it for as long as the relationship lasts and for the periods required by law.
• Technical data of the inquiry: the page you arrived from, your browser and an encrypted identifier of your IP address that cannot be turned back into it. It is used only to prevent abusive submissions. Legal basis: our legitimate interest in protecting the site (art. 13 d). We delete it after 30 days.
• Client portal (people the client company authorises to see its projects, and contacts of an inquiry we give access so they can send us their project information): email address, name, language, invitation and last sign-in dates, the open session, the messages and files you exchange with us in requests, and a log of which documents you download. Your company gives us the email address. Legal basis: performance of the contract with your company and our legitimate interest in keeping you informed of project progress (art. 13 c and d). We keep the account while your access is active; when it ends, we deactivate it and delete it if you or your company ask us to. Messages and files are part of the project records and are kept for as long as the relationship with your company lasts and for the periods required by law.
• Tracker development updates (if you subscribe on the Innovation page): your email address and, if you provide them, your name and profile (developer, investor, EPC, owner), your language and the text of the consent you accepted. We use them only to send you news about that development. Legal basis: your consent (art. 12), which you confirm from the email we send you; you can withdraw it at any time with the unsubscribe link in every email, and we then delete your data. Subscriptions that are not confirmed are deleted after 7 days.
• Rights requests (this form): name, email address, the right you exercise and what you tell us. Legal basis: compliance with the law (art. 13 b). We keep them for three years after answering, as the record of our answer the law requires; requests not confirmed by email are deleted after 7 days.
• Visit statistics: we count visits in aggregate with our own tool, hosted on our servers, which uses no cookies and stores no IP addresses or data that identify you. Legal basis: our legitimate interest in knowing which content is useful in order to improve the site (art. 13 d).

You give us all this data directly, except the email address of portal accounts, which your company provides, and your contact details when someone refers you to us (we tell you so when we first contact you). We use no publicly accessible sources and buy no databases. We don't use your data for advertising.

We don't sell or transfer your data to third parties. To run the site we use providers that process it on our behalf, only for that purpose, under our instructions and under a contract that obliges them to protect it:

• Huiro.dev SpA (Chile): development, maintenance and operation of the site and the portal.
• Hetzner Online GmbH: the servers running the site, the portal and the database, located in Finland, and storage of the encrypted backup copies, in Germany.
• Our email provider, with servers in Chile: receiving and sending email.

Hosting the site in Finland and its backups in Germany involves an international transfer of data. Both countries are part of the European Union and applies the General Data Protection Regulation, which offers safeguards similar to or higher than Chilean law; the contract with the provider includes those safeguards. When the Agencia de Protección de Datos Personales publishes its list of countries with an adequate level of protection, we will update this section.

We apply technical and organisational measures proportionate to the data we process:

• All communication with the site is encrypted (HTTPS).
• Only authorised staff can access the internal panel and each client sees only its own projects; sign-in uses a one-time link sent by email, with no passwords that could leak.
• We collect only the data we need, encrypt the IP identifier and automatically delete or anonymise data when the periods above are reached.
• We back up the database and portal files daily, on the same server and as an encrypted copy in another Hetzner data centre in Germany (European Union). Backups are kept for up to 30 days: erased data disappears from them within that period at the latest.
• We record security incidents and, if they affect your rights, report them to the Agencia de Protección de Datos Personales and, where the law requires it, to you.

You can request access to your data, its rectification, erasure or portability, object to its processing and ask for it to be temporarily restricted while we resolve a request for rectification, erasure or objection.

To do so, use the form below or write to contacto@sunandwind.cl. We'll send you an email to confirm the request is yours, acknowledge receipt and answer within 30 calendar days, extendable once by up to 30 more days (temporary restriction requests, within 2 working days). Rectification, erasure and objection are always free of charge; access, at least once per quarter.

If we refuse your request or don't answer in time, you can file a complaint with the Agencia de Protección de Datos Personales within 30 working days.

Where processing is based on your consent (the updates subscription), you can withdraw it at any time, without affecting what was done before. We make no automated decisions about you and do no profiling.

The site's public pages set no cookies. We use no advertising, social media or tracking cookies, and our visit statistics work without cookies. That's why we don't ask you to accept cookies.

Only when you sign in to the client portal or the internal panel do we use strictly necessary cookies to identify you securely. They don't require your consent because signing in can't work without them, and they're used for nothing else:

• __Host-authjs.csrf-token

  What it does

  Protects the sign-in form against forged requests.

  Duration

  Until you close the browser

• __Secure-authjs.callback-url

  What it does

  Remembers which page to return to after signing in.

  Duration

  Until you close the browser

• __Secure-authjs.session-token

  What it does

  Keeps you signed in to the portal or panel.

  Duration

  7 days, or until you sign out

• sunandwind:consulta (session storage)

  What it does

  Keeps a draft of the contact form in your browser so you don't lose it if you reload the page. It is not sent to us.

  Duration

  Until you close the tab or send the form

If we ever add tools that use non-essential cookies (for example, third-party analytics or advertising), we'll ask for your consent before turning them on, and you'll be able to change your choice at any time.

If we change how we process your data, we'll publish a new version here with its date. If the change affects you significantly and we have your email address, we'll let you know that way.