Legal

Version 1 · Effective October 5, 2026 · Previous versions

This notice informs you, in accordance with Article 14 ter of Law No. 19,628, how Wiseplan Consultora SpA processes the personal data of individuals who serve as contacts for its clients, prospects, and suppliers.

What data do we process, and where does it come from?

We process your professional contact information: name, job title, organization, email address, phone number, and history of our business relationship, including the information necessary to issue tax documents. This information comes from you, the organization you belong to, or publicly available professional sources.

Why we process your data and on what legal basis

We process your data to manage our business relationship with the organization you represent, respond to your requests, issue and collect tax documents, and maintain contact as is customary in our line of business. The legal bases for this processing are: Wiseplan’s legitimate interest in managing its business relationships with the organization to which you belong (Art. 13(d)), an interest about which you may request information and to which you may object (Art. 8(a)); and compliance with legal obligations, particularly tax obligations (Art. 13(b)).

With whom they are shared and transferred

Your billing information is reported to the tax authorities in accordance with the law and is processed by our billing technology provider on behalf of Wiseplan. We do not share your information with third parties for their own purposes. We are verifying the location of our technology providers’ infrastructure; if an international transfer occurs, it will be subject to Title V of Law No. 19,628.

How long do they last?

Customer contact information is retained for the duration of the relationship and for up to five years after its termination; information on prospects is retained for up to three years from the last active contact; and information on unclosed opportunities is retained for up to one year. Tax documentation is retained for the periods specified in Article 200 of the Tax Code (three years, extendable to six years in certain cases). Once these periods have expired, the data is deleted.

Automated Decisions

We do not make decisions regarding you based on automated processing, nor do we engage in profiling (Art. 8 bis).

Your Rights

You may exercise, free of charge, your rights of access, rectification, erasure, objection, portability, and blocking of your personal data (Articles 4 through 9 of Law No. 19,628) by submitting your request via the email address datospersonales@wiseplan.cl. Upon receipt of the request, Wiseplan will acknowledge receipt and respond no later than thirty calendar days thereafter, a period that may be extended once for up to thirty calendar days (Article 11). If, along with a request for rectification, deletion, or objection, you request the temporary blocking of your data, that request will be addressed within two business days of receipt (Art. 11).

You may object at any time to processing based on legitimate interests (Art. 8(a)) and, in particular, to receiving marketing communications or direct marketing (Art. 8(b)), in which case we will cease sending such communications. If we send you communications that are not related to an existing business relationship, we will do so only with your prior consent (Art. 12), which you may withdraw at any time without retroactive effect (Art. 14b(k)).

If Wiseplan rejects your request or fails to respond in a timely manner, you have the right to file a complaint with the Personal Data Protection Agency, in accordance with the law.

Responsible Party, Policy, and Contact Information

Data Controller: Wiseplan Consultora SpA, RUT 76.425.812-6, with registered office at Los Militares 5953, Office 1208, Las Condes, Santiago, legally represented by Mr. Luis Rosas Asenjo. Wiseplan’s Data Protection Officer is Ms. María de los Ángeles Maturana, whom you may contact through the channel indicated in the previous paragraph. Wiseplan’s General Personal Data Protection Policy, including its date and version, is available on the company’s website. A public summary of the security measures adopted to protect your data—access controls, encryption, and incident management commensurate with the nature of the data processed—is available on the same site.