PRIVACY POLICY
Below you will find the Privacy Policy (or the "Policy") of the web platforms or mobile applications (the "Platforms") of the group of companies that are under the holding company B BRANDS SPA, RUT No. 77.798.543-4 (hereinafter "we", "our", "Maihue" or the "Company"). Therefore, this privacy policy is adopted and applicable to our entire group of companies and your acceptance of this Policy authorizes us to use and share this data between the same holding companies and the companies that are required for the correct provision of the services, as indicated below.
We respect your privacy with respect to any personal data we may collect while operating our services on the website www.maihuechile.cl, www.maihuego.com, Maihue mobile applications, MaihueGO or any other device on which we may do so (hereinafter, the "Platform").
Consequently, we have developed this privacy policy so that you understand how we collect and process (i.e., use, store, share, communicate and make use of) your personal data. This Policy will also cover your rights in relation to your personal data.
By visiting, using or registering to use or consume any of our products and/or services, you give your consent for us to process your personal information – hereinafter, interchangeably "your personal data" or "your information" – in accordance with this Policy.
This is the legal basis on which we process your personal information, because it is necessary for the fulfillment of our obligations under the Terms and Conditions of our products and services.
By using the Platform, you acknowledge that you have had the opportunity to review and consider this Policy, and you acknowledge that you agree with it. This means that you also accept the use of your personal data and the disclosure methods described in this Policy. If you do not understand the Policy or do not agree with one or more provisions of this Policy, you must stop using the Platform immediately. You may withdraw your consent at any time through the mechanisms we make available to you or simply by contacting us. At that time, you may also want to delete the cookies that have been placed on any device used to access our products and/or services. Your withdrawal of consent will not affect the legality of any processing performed by us before such withdrawal.
This Policy specifically incorporates by reference the entirety of our Terms and Conditions, published on the platforms of the respective products and/or that we offer.
In relation to our products and/or services, we want you to get personalized experiences at any time, anywhere and on any device. This requires us to collect your personal information. However, we want you to have control over that personal information. We want you to know at all times where and how your personal information is collected, shared and used. This is of utmost importance to us.
So, let's describe what this policy tells you. Explaining:
- What information we may collect about you
- What we may do with the information we collect about you
- Whether we share your information with anyone else
- The types of cookies and similar technologies (e.g., device identifiers) we use and how you can reject these cookies
- Where we store your information
- How we keep your information secure
- Your rights and controls in relation to your personal data
We operate on the principle that your personal information belongs to you and only you can decide who you want to share it with and why. This is fundamental to the way we work and we are committed to providing a secure environment for storing your personal information.
HOW WE COLLECT INFORMATION AND WHAT INFORMATION WE MAY COLLECT ABOUT YOU
Information you provide voluntarily
To use the Platform you must create a user account for which we will ask you for some personal data.
Likewise, if you communicate with us, we may keep a record of that correspondence indefinitely in case we need to communicate with you in relation to the matter or problem for which you contacted us, to improve operational performance and/or management of nuisance calls. We will not use it for marketing purposes if you do not wish so.
Information we collect about you and your device
Through the use of the Platform, you will be subject to different types of personal data collected and different forms of collection. We will collect and process your personal data in a legal, fair and transparent manner and, where appropriate, with your prior explicit knowledge or consent. Personal data will be relevant to the purposes for which it will be used and, to the extent necessary for those purposes, must be accurate, complete and up-to-date.
TYPES OF PERSONAL DATA
The Company will collect the following types of personal data through the Platform:
REGISTRATION
As a user of the Platform, you must create a user account in which we may ask for your name, your RUT (or other identification document number), telephone number, addresses and email addresses. We use this personal data to provide you with products and/or services and ensure the security of the Platform.
BILLING
If you choose to use any of our paid services, we will ask you to provide billing information, such as, among others, your credit card number and billing address. This personal data will be used specifically to provide you with the products and/or services you have purchased. Payment and billing information may be stored for the period of time required by applicable law for legal purposes (e.g., accounting records). This storage is performed in encrypted form under international computer security standards.
USAGE
Through the use of the Platform and its various means of communication, you may be asked questions or you may, at some point, communicate with Company representatives about how to improve your products and/or services. Through such use, we will receive your email address, as well as the content of your communications, responses to questions and any other form of contact between you and us. We will use the personal data contained in such communications only for the purpose of providing you with the requested information and to improve our services.
AUTOMATIC COLLECTION
We may collect information about you through automatic tracking systems on your device or other web and mobile analytics software. We may also receive certain usage data, such as your IP address. We use this information for our legitimate business interests, including analysis of Platform usage.
COMBINED OR AGGREGATED INFORMATION
We may combine or aggregate some of your personal data to provide you with better service and improve and update the Platform for your use and that of other consumers, or to create public publications about information or trends on the Platform.
NON-PERSONAL DATA
In addition to personal data, we may collect the URLs of websites you click from and to the Platform, including referral links we may publish on the Platform to analyze what type of users visit the Platform, how they find it, how long they stay, what other websites they come to the Platform from, what pages they look at and what other websites they go to from the Platform, as well as collect browser types and operating systems (the "non-personal data"). In the event that your non-personal data is combined with certain elements of your personal data in such a way that we can identify you, such non-personal data will be treated as personal data.
HOW INFORMATION IS USED
We respect data protection principles and process personal data only for specific, explicit and legitimate purposes for which such personal data was provided. We primarily use your personal data to enable you to use the Platform and provide the products and/or services requested by you. We may also use your personal data for the purposes set forth in this Policy and the purposes listed below:
- Ask you about your experience with us
- Communicate with you about your user account with us
- Analyze our aggregate user data
- Enforce our Terms and Conditions
- Provide you with products and services
- Ensure that the content of the Platform is presented in the most effective way for you and your device and to make the browsing experience more user-friendly
- Provide you with marketing information about us and our products and services (you can opt out of receiving such information at any time)
- Defend our servers against malicious attacks
- Perform analysis and/or consult databases or certificates of commercial background in commercial bulletins or other lawful instances
- Inform you about Platform updates or related elements, and/or
- Provide you with information about services that are similar to the services you use
When we propose to use your personal information for any other use not mentioned above or not described in this Policy, we will make sure to notify you first. You will also be given the opportunity to retain or withdraw your consent to the use of your personal information for purposes other than those set forth in this Policy.
USER COMMUNICATIONS
Newsletter and informative communications
From time to time, we may send you informative communications related to our products and services, such as announcements about Platform updates. You may also receive information from us that is specifically about your use of the Platform or about your account with us, including information about security breaches or other privacy-related matters. Please note that such communication does not fall within the scope of direct marketing communication.
By providing us with any personal information, or by using the Platform in any way, you have created a business relationship with us. As such, you agree that any email sent by us or on our behalf, including unsolicited email, will not be considered SPAM as that term is legally defined.
Advertising and direct email marketing
We may use your email address to send you marketing and advertising communications. These communications may include relevant offers, promotion of new products and services, specific information about Maihue-related promotions and news about our products and services.
Unsubscribe
If you decide at any time that you no longer wish to receive communications from us, follow the "unsubscribe" instructions provided in the communications and that will also be available on the Platform.
USE OF AGGREGATED AND ANONYMOUS INFORMATION
We may share anonymized usage data, meaning data that does not specifically identify you, with third parties. We may combine your data with that of other Platform users and share this information in aggregated and anonymous form with third parties to help us improve the design and delivery of our products and services and software tools, thereby increasing the effectiveness for all users.
YOUR CONSENT
By using the Platform, you agree that we process your personal data as set forth in this Privacy Policy. The term "processing" includes the collection, storage, deletion, use and communication of personal data.
We do not collect any sensitive data about you (for example, your health information, opinions about your religious and political beliefs, racial origins and professional or trade association memberships or similar). In the event that we intend to process any sensitive data collected from you, we will seek your explicit consent in advance.
INFORMATION STORAGE AND SECURITY
Personal data protection
We protect your personal data through the use of reasonable security measures against loss or theft, unauthorized access, disclosure, copying, use or modification. Your personal data is contained behind secure networks and is only accessible by a limited number of people who have special access rights to such systems and must maintain the confidentiality of personal data. We implement a variety of security measures, including all ISO 27001 information security controls. However, please note that no system involving the transmission of information over the Internet or the electronic storage of data is completely secure.
Under the agreements we have with our cloud providers (also known as "the cloud"), your data will be hosted on servers located in the Americas and Europe.
Security breach notification
If a personal data breach occurs, we will inform the relevant authorities without undue delay if applicable, and will immediately take reasonable steps to mitigate the security breach. We will notify you of such breach by email as soon as possible, but no later than within seven business days.
Retention period
Your personal data will be retained for as long as necessary to provide the services. When your personal data is no longer necessary to provide the services, we will delete your personal data immediately, unless we are required by law to retain such personal data for a specific period of time.
COOKIES
The Platform uses cookies and similar technologies (e.g., device identifiers). Cookies are small files stored on your computer or mobile device that collect information about your browsing behavior, information that the platform may use to track user activity, remember their preferences or perform other functions related to the user experience. These cookies do not access information stored on your computer.
We use cookies to help us remember information about your account. For example, cookies are used to help us understand your preferences based on previous or current Platform activity, which allows us to provide you with improved services. We also use cookies to help us compile aggregate data about Platform traffic and interaction so that we can offer better experiences and tools in the future.
- Understand and save user preferences for future visits
- Track advertisements
- Compile aggregate data about traffic and interactions to offer better experiences and tools in the future. We may also use trusted third-party services that track this information on our behalf
Most Internet browsers automatically accept cookies, although you can change your browser settings to control cookies, including whether you accept them or not and how to delete them. You can also set your browser to alert you when it receives a cookie or to block or delete cookies. If you wish to set your browser to reject cookies, please refer to your browser's help information.
We honor Do Not Track signals and do not track, place cookies or use advertising when a Do Not Track (DNT) browser mechanism is in place. Users may also choose to visit the Platform anonymously, but you may not be allowed to access any of the services.
HOW INFORMATION MAY BE SHARED OR COMMUNICATED
We may communicate your personal information if we believe it is reasonable to do so in certain cases. Such communication or transfer is limited to situations where personal data is required for legitimate purposes.
HOW INFORMATION MAY BE SHARED OR COMMUNICATED
- Identify you as a user of the Platform
- Manage the relationship between you and us, which includes: (i) processing payments and related transactions, (ii) your transaction history with us (which we may disclose to payment service or credit verification providers as part of our own credit verification processes) and (iii) communicate with you using the methods described in this Privacy Policy
- Investigate, resolve and/or respond to inquiries or complaints made by you or on your behalf; or prevent, detect and manage any illegal or allegedly illegal activity or contrary to our Terms and Conditions
- Other uses of a legal, regulatory, contractual, financial and other nature
- Comply with an applicable law, regulation, legal proceeding or governmental request
- Enforce our applicable Terms and Conditions, including investigation of potential violations thereof
- Detect, prevent or otherwise address fraud, security or technical issues
- Protect against harm to the rights, property or safety of the Platform, our users or the public as required or permitted by law
- Facilitate the investigation of a crime or suspected crime by the relevant authorities, including when requested by the relevant authorities
- To protect our legitimate business interests and enforce our legal rights
THIRD PARTIES
We may use third-party service providers, from time to time or all the time, to help us with the Platform and to serve you.
- Identity verification service providers
- Electronic payment service providers
- Fraud prevention service providers
- Cloud storage service providers
- Data analytics service providers
- Marketing and advertising service providers
- Customer support service providers
We do not sell, trade or transfer your personal data to third parties not indicated in this Policy, unless we obtain your prior explicit consent.
We may enter into agreements with external service providers whereby we provide them with some of your personal data to receive services such as identity verification, electronic payments and fraud prevention. However, we do not provide such service providers with any permission to disclose or use your personal data except for the purpose of providing us with their services.
We may communicate or transfer non-personal information (e.g., aggregated or anonymous data) to third parties, including but not limited to advisors, advertisers and investors, for the purpose of general business analysis. However, this information does not include personal information and is used solely for legitimate business purposes.
THIRD-PARTY LINKS
The Platform may contain links to third-party websites, applications or services that are not operated by us. If you click on a third-party link, you will be directed to that third party's site.
We have no control over, and assume no responsibility for, the content, privacy policies or practices of any third-party websites or services. We strongly recommend that you review the privacy policies of every site you visit.
YOUR RIGHTS
You have the right to decline to provide personal data to the Platform, with the caveat that this may prevent you from using certain services or features of the Platform.
To decline to provide personal data or to request the deletion of your personal data, you may contact us through the means indicated in the contact section of this Policy.
RIGHT TO ACCESS, CORRECT AND DELETE PERSONAL DATA
You have the right to access, modify and request the deletion of the personal data we hold about you. If you wish to exercise any of these rights, you can contact us through the means indicated in this Policy.
You may request a copy of the personal data we hold about you at any time. We will respond to your request within a reasonable timeframe.
If you believe any of your personal data is inaccurate, you may request its correction or update.
In Chile, the Personal Data Protection Agency is the competent authority for the protection of personal data. You may file a complaint with this agency if you believe your privacy rights have been violated.
MINORS
The Platform is not intended for children under 14 years of age. We do not intentionally collect personal data from children under 14. If you are under 14 years of age, do not use the Platform or provide us with personal data.
If you are a parent or guardian and are aware that your child under 14 years of age has provided us with personal data, please contact us so that we can take the necessary steps to remove such information from our records.
UPDATES, MODIFICATIONS OR REVISIONS
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on the Platform.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on the Platform.
If we make material changes to this Policy, we will notify you through the Platform or by email before the change becomes effective.
COMPLAINTS ABOUT PERSONAL DATA HANDLING
If you believe that the processing of your personal data violates current regulations, you have the right to file a complaint with the competent data protection authority in your country of residence.
You may also contact us directly through the means indicated in the contact section of this Policy so that we can address your concern.
RELATED COMPANIES AND CHANGE OF CONTROL
We may share your personal data with our related companies, subsidiaries and companies within the same corporate group, for the purpose of operating, developing and improving our products and services.
In the event of a merger, acquisition, reorganization, sale of assets or bankruptcy, your personal data may be sold or transferred as part of such transaction. The promises contained in this Privacy Policy will apply to your personal data as transferred to the new owner.
We will notify you of any change in ownership or use of your personal data, as well as any choices you may have regarding your personal data.
DATA CONTROLLER AND CONTACT US
As follows from the beginning of this Policy, the controller of your personal data is the company B BRANDS SPA, RUT No. 77.798.543-4, domiciled at Padre Hurtado Central 1186, Las Condes, Santiago commune.
If you have questions or comments about this Policy, contact us at: