Privacy Policy

This policy describes how Procesadora Barranco Amarillo (PBA), with registered address at Rodolfo Novoa Barría 08260, Punta Arenas, Chile., acting as data controller, collects, uses, retains and protects personal data submitted through this website, in accordance with Law No. 19,628 on the Protection of Private Life and, as of its entry into force on December 1, 2026, Law No. 21,719 that replaces it.

What data we collect

We only collect data that you voluntarily submit through our forms:

• Contact form: name, company (optional), email address and the message you write.
• Work with us: name, email address, position of interest, experience and, if attached, your CV.
• Whistleblower channel: type of report, description of the facts and, only if you do not choose the anonymous option, a contact email address.

We do not use analytics or third-party cookies on this site, therefore we do not collect browsing data for advertising or tracking purposes.

How we use your data

We use this data exclusively to respond to your contact request, evaluate your job application, or manage and follow up on a report received through the ethics channel. We do not use it for other purposes, nor do we sell or transfer it to third parties, except where required by law.

Legal basis for processing

We process your data on the basis of your express consent, given by ticking the acceptance checkbox on each form before submitting it. You may withdraw your consent at any time by contacting us as indicated below, without this affecting the lawfulness of processing carried out prior to withdrawal.

Retention period

We retain contact and job-application data only for as long as we are handling your request. Reports are retained in encrypted form for the duration of the investigation process and any additional period required by law or our internal compliance policies.

Security measures

The whistleblower channel encrypts each report (AES-256-GCM with a key wrapped in RSA-4096-OAEP) before storing it; the private key required to decrypt it is kept off-site and only the compliance team has access to it, offline. The IP address of the person submitting a report is used solely as an ephemeral in-memory key to limit abuse — it is never logged or stored.

Your rights (ARCO+)

You may exercise the following rights at any time:

• Access: to know what data we hold about you.
• Rectification: to correct inaccurate or outdated data.
• Erasure: to request deletion of your data.
• Objection: to object to a specific processing activity.
• Portability: to request your data in a transferable format.

To exercise these rights, write to us at contacto@barrancoamarillo.com. Until we formally appoint a Data Protection Officer, these requests are channelled and responded to through that same address.

Minors

This website is not directed at persons under 18 years of age. We do not knowingly collect data from minors.

Changes to this policy

We may update this policy to reflect legal or operational changes. The date of the last update is shown at the top of this page.

Contact

If you have any questions about this policy, write to us at contacto@barrancoamarillo.com.