Privacy and data protection

DITAP SpA · RUT 78.532.132-4 · Esmeralda 671, Puerto Natales, Chile · hola@ditap.io · +39 345 243 5103

This policy covers the corporate website and incoming enquiries. When a customer uses our software to process patient, employee or customer data, the customer determines the purpose and DITAP acts as processor under the contract and processing agreement. Browsing is not consent to advertising or optional processing.

We process names, email, telephone, company and enquiry content to respond, prepare proposals and manage customer relationships. Order, payment and invoicing data support delivery and legal obligations. Payment providers collect payment details in their own interface. Technical logs help detect errors, abuse and security issues. Browsing analytics requires consent. Newsletter subscriptions are voluntary and separate from enquiries. Do not send medical records, passwords or sensitive information through commercial forms. These forms do not make automated decisions with legal effects.

Processing relies, according to the purpose and jurisdiction, on consent, pre-contractual steps or contract performance, legal obligations and service security where a lawful basis applies. Legitimate interests are not applied indiscriminately across countries. Chilean Law 19.628 currently applies; Law 21.719 amendments take effect on 1 December 2026. The GDPR and Argentine Law 25.326 apply when processing falls within their territorial scope.

The site uses Vercel for hosting, Cloudflare for DNS and protection, Resend for email, Supabase for features that use its database, Sentry for technical diagnostics and Google Analytics with your consent. Stripe or Mercado Pago process purchases depending on the available payment method. WhatsApp processes conversations under its terms when you choose that channel. Some providers process data outside Chile or your country; applicable transfer mechanisms and contracts depend on the service and destination. Contact hola@ditap.io for provider and safeguard details relating to your service. We do not sell data for third-party marketing.

We retain data while necessary to handle enquiries or deliver the service, and for applicable legal retention or claims periods. There is no universal tax retention period for every country. Deletion requests are assessed against these obligations; if retention is required, we explain the applicable reason. The site uses HTTPS. Access controls and security measures depend on the feature and contracted service; we do not promise immunity from incidents.

Request access, rectification, deletion or objection and withdraw consent at hola@ditap.io. Restriction and portability apply where recognised by law. We ask only for information needed to verify identity and respond within statutory deadlines. Unsubscribe from newsletters through the message link or by email. EU residents may complain to their data protection authority; in Argentina, to the AAIP. In Chile, remedies under Law 19.628 apply until the new regime takes effect. Requests concerning a customer’s software data are coordinated with that controller.

See the [cookie policy](/en/legal/cookies) and Cookie settings in the footer. Updates carry a revision date; new consent will be requested where required.