Privacy Policy

This Privacy Policy describes how AstarLab (“we”, “our”, or “us”) collects, uses, and discloses your information in compliance with Swiss, Chilean, and EU laws including the General Data Protection Regulation (GDPR).

We collect various types of data, including but not limited to:

1. Personal Data

- Name, address, telephone number, company name
- IP address, email (if submitted through forms)
- Other identifiable information provided by you

2. Technical Data

- Browser type, operating system, referring URLs
- Interaction with website features
- Device identifiers

3. Usage Data

- Time spent on pages, click paths
- Scroll behavior, navigation data
- Session duration

4. Tracking & Cookies Data

We use cookies and similar tracking technologies from third parties, including:
- Google Analytics / Ads
- Microsoft Clarity / Bing Ads
- Yahoo Analytics / Advertising
- Other marketing, analytics, or social media tools

These platforms may independently collect and process your data under their own privacy policies.

5. Legal Basis for Processing

We process your data based on:
- Consent (Art. 6(1)(a) GDPR)
- Performance of a contract (Art. 6(1)(b) GDPR)
- Compliance with legal obligations (Art. 6(1)(c) GDPR)
- Legitimate interests (Art. 6(1)(f) GDPR)

6. Data Retention

We retain personal data only as long as necessary for:
- The purposes outlined in this policy
- Legal obligations
- Resolving disputes
- Enforcing our agreements

Technical and tracking data may be stored longer in anonymized or aggregated form.

7. Data Transfers

We operate in Switzerland and Chile, and your data may be processed outside the EU/EEA.
We ensure adequate protection by:
- Using Standard Contractual Clauses (SCCs)
- Operating in jurisdictions with adequate EU-recognized data protection

8. Disclosure of Data

We may share your information with:
- Third-party service providers
- Legal authorities
- Affiliates and subsidiaries

We do not sell your data.

9. Your Rights

You have the following rights (subject to jurisdiction):
- Access to personal data
- Rectification
- Erasure ("Right to be Forgotten")
- Restriction
- Data portability
- Objection
- Withdraw consent

To exercise your rights, please use our Contact Form.

10. Children's Privacy

Our services are not intended for individuals under the age of 16. If we learn that we have collected such data, we will delete it promptly.

11. Security Measures

We use appropriate technical and organizational measures to protect your data, including:
- Encryption
- Access controls
- Secure storage
- Regular audits

12. Third-Party Links

Our website may include links to third-party websites. Please consult their privacy policies directly.

13. Updates to This Policy

We may update this policy periodically. Continued use of our services indicates your acceptance of any changes.

14. Contact Us

For any questions or to exercise your rights, please use our Contact Form.

15. Compliance with International Laws

AstarLab adheres to applicable international data protection laws and strives to meet the highest standards of compliance. Where data protection laws differ, we apply the strictest standard to ensure user privacy.

16. Liability Disclaimer

While we implement rigorous measures to protect your data and comply with all relevant legislation, AstarLab is not liable for damages arising from data breaches, third-party misuse, or unforeseen access unless due to gross negligence or willful misconduct. Users are responsible for maintaining the security of their devices and login credentials.

17. Automated Decision-Making and Profiling

We do not use personal data for automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you, unless explicitly consented to and disclosed during data collection. Any such processing will comply with applicable laws and provide clear information and options to opt out.

18. Data Protection Officer

AstarLab has appointed a Data Protection Officer (DPO) to oversee compliance with this policy. The DPO is responsible for monitoring internal compliance, advising on data protection obligations, and acting as a contact point for data subjects and supervisory authorities.

← Back