Copec Voltex SpA Privacy Policy
I. OUR COMMITMENT
For COPEC VOLTEX SPA, hereinafter referred to as the “Company”, the privacy of individuals, the confidentiality, and the care of Personal Data is paramount; therefore, we commit to ensuring that the personal information of our Customers and/or Users is protected and their privacy respected.
This Privacy Policy (hereinafter the “Policy”) details how the Company accesses, processes, and protects Personal Data, whether provided by our Customers and/or Users or collected by any member of the Company through various methods. This is so that our Customers and/or Users may authorize such Data to be processed, stored, and protected by us as a Company.
Personal Data, as indicated, may be provided by our Customers and/or Users or may be collected through points of sale, service stations, convenience stores, complementary businesses, and other establishments, whether operated directly by the Company or by concessionaires, consignees, franchisees, distributors, or third parties, websites, mobile applications, forms, and other channels.
Therefore, when any of our Customers and/or Users contract products and/or services from the Company and/or participate in activities organized by it, the Processing of their Personal Data shall be carried out in accordance with what is established in this Policy.
II. APPLICATION OF THE PRIVACY POLICY
For the purposes of the application of this Privacy Policy, the Company is related to the following companies:
• Copec Renovables SpA
• EMOAC SpA
• Vía Limpia SpA
• Ampere Copec SpA
• Administradora de Ventas al Detalle Ltda
• Blue Express S.A
• Comercializadora y Abastecedora Digital SpA
• Soluciones de Movilidad SpA
• Stem – Copec SpA •
• Inversiones Dhemax Ingenieros SpA
• Flux Solar energías renovables SpA
• Copec S.A.
• Compañía de Servicios Industriales Limitada
• ChileTur SpA
• Transportes de Combustibles Chile Limitada
• Copec Voltex SpA
This list will be updated according to the status of the Company. Furthermore, we clarify that this Policy does not apply to Personal Data collected by companies or businesses other than those indicated in the previous paragraph or by third parties on other websites that do not belong to them, even if these are linked or embedded in the websites or mobile applications of any member of the Company.
Therefore, and given that the Company does not have any control over said websites or mobile applications, the Company is not responsible for the content they develop. Consequently, our Customers and/or Users must be governed by the Privacy Policy of said sites or mobile applications and not by this one.
III. REGULATORY FRAMEWORK
The Data Processing carried out by the members of the Company is in accordance with Law No. 19.628 “Law on the Protection of Private Life”, Law No. 19.496 “Law on the Protection of Consumer Rights”, their modifications, updates, and other regulations related to the safeguarding, protection, reservation, and confidentiality of Personal Data.
IV. DATA PROCESSING CONTROLLER
For the purposes of processing, verifying, and safeguarding the Data of our Customers and/or Users who contract with or to which the Company has access, the Company has designated as the Data Processing Controller:
Copec Voltex SpA
Tax ID (RUT) number 77.107.835-4,
Legal Representative: Andrea Castro Mozo
Address: EL BOSQUE NORTE 0211 AND/OR AV ISIDORA GOYENECHEA 2915
Phone: 800 200 354
Contact email address: contacto@copecvoltex.cl
The above is without prejudice to the liability that each member company of the Company may bear for any breach of its obligations as a consequence of the regulations governing the protection of private life.
V. DEFINITIONS
a) Customer: is the natural person to whom the Company provides products and/or services, whether provided directly by it or by third parties.
b) Data Subject Consent: a free, express, specific, and informed manifestation of will, through which the Data Subject authorizes, in writing, the Processing of Personal Data concerning them, including signing via a simple or advanced electronic signature, where applicable.
c) Data: includes Personal Data and Sensitive Data, as applicable.
d) Personal Data: any information concerning natural persons, identified or identifiable. Included in this category, by way of example only, are details such as name, age, marital status, profession, identification card number, telephone numbers, email address, bank card numbers.
e) Sensitive Data: a type of Personal Data that refers to the physical or moral characteristics of persons or to facts or circumstances of their private life or intimacy, such as personal habits, racial origin, political ideologies and opinions, religious beliefs or convictions, physical or mental health status, and sexual life.
f) Data Processing Manager (Data Manager): corresponds to the natural or legal person that executes all or part of the Data Processing as a mandatary, on behalf of the Data Controller.
g) Data Controller: is the natural or legal person, public or private, who decides on the purposes and means of Data Processing, regardless of whether the data is processed directly by them or through a Data Processor.
h) Third Parties: any person or entity other than the Data Subject, the Data Controller, and/or the Data Processor.
i) Data Subject: is the natural person, identified or identifiable, to whom the Data concerns or refers.
j) Worker: is any person linked to the Company by an employment contract, whether it be indefinite, fixed-term, or project-based, and, for these purposes, it also includes the members of the boards of directors of each company belonging to the Company.
k) Personal Data Transmission: is the Data Processing that involves the communication thereof within or outside the national territory when its purpose is the carrying out of Processing by the Data Processor on behalf of the Data Controller.
l) Personal Data Transfer: takes place when the Data Controller and/or Data Processor, located in Chile, sends information or said Data to a recipient, who in turn is a Data Processing Controller and is located inside or outside the country.
m) Data Processing (hereinafter interchangeably “Processing”): is any operation or set of operations or technical procedures, automated or otherwise, that allows for collecting, storing, recording, organizing, elaborating, selecting, extracting, confronting, interconnecting, dissociating, communicating, assigning, transferring, transmitting, or canceling Data or using it in any other way.
n) User: a natural person interested in the products and/or services offered by the
Company and who expressly authorizes the Processing of their Data by it.
VI. LAWFULLNESS OF DATA PROCESSING
The Data Processing that we carry out as a Company is based on:
• The consent given expressly, previously, unequivocally, freely, and informedly, by our Customers and/or Users and Data Subject.
• The contracts in which Data of our Customers and/or Users and Data Subject are incorporated.
• The law in force regarding the protection of private life, when it recognizes the power to process Data.
VII. PURPOSE OF DATA PROCESSING
By consenting to this Policy, provided there are no legal restrictions to do so, our Customers and/or Users and Data Subjects authorize us, the Company, to share their Data with the rest of the companies that comprise it and with those that may comprise it in the future, solely for the purposes indicated in this section. Likewise, any additions made in the future will be duly informed to the Data Subject.
Additionally, said Data Subject, by providing their consent, authorizes us, the Company, to carry out the Processing of their Data with the following objectives:
1. General objective:
At the Company, we will process the Data for the purposes of:
• Providing an adequate provision of products and services, including the offer, promotion, and sale thereof;
• Complying with current legal obligations;
• Performing all necessary steps to confirm and update the Data Subject's information.
• For the purpose of safeguarding the security of their information and ensuring collection management.
2. Specific objectives:
a. Operational purposes: in the case of mobile applications, we at the Company may carry out the Processing of all those Data related to the technical characteristics of the mobile device on which the Customer and/or User and Data Subject downloads the Applications linked to the Company.
The foregoing includes: IP address, device ID, operating system, configured language, network provider, among other aspects, all with the aim of providing an adequate provision of the products and services offered by the Company's Mobile Applications.
b. Commercial purposes: at the Company, we will process Data for the purpose of offering our Customers and/or Users and Data Subjects products and services; benefits associated with loyalty programs; information on events and sweepstakes, discounts, promotions, satisfaction surveys, and in general, we will offer different options to improve their experience, which may be done through email, text messages (SMS), notifications in mobile applications, WhatsApp, social networks, telephone calls, among other types of communications. Notwithstanding the foregoing, Customers and/or Users and Data Subjects may always request the cancellation of offer shipments, in the manner indicated in the communication itself.
c. Operational purposes: we will process the Data of our Customers and/or Users and Data Subjects in those cases where it is necessary to withdraw defective or damaged products from the market and/or from the home.
d. Preventive purposes: we will process the Data of our Customers and/or Users and Data Subjects with the aim of maintaining the quality of our products and services as a Company and to prevent fraud and/or crimes of any nature. In this sense, we may:
• Record telephone conversations associated with Customer and/or User Service;
• Have a closed-circuit video surveillance system in our facilities and establishments, whether operated directly by us or by third parties;
• To review such recordings in cases where we, as the Company, deem it necessary and in cases of incidents or the occurrence of crimes, and to retain said recordings, which may also be used as evidence in judicial, administrative, and arbitration proceedings.
e. Historical purposes: we may use the Data for statistical, historical, and market research purposes, among others. Said Data will, to the extent possible, be used in an anonymized form, that is, making it impossible to identify the identity of the person to whom they belong.
For the purposes indicated above, as a Company, we may collect Data through different means, whether on the occasion of access to and use of the different websites of the companies related to the Company, purchase or return transactions made at their establishments, whether these are operated directly by the Company or by third parties, and in their e-commerce sites, loyalty programs, surveys, mobile applications; submission of online forms, emails, phone calls, online chats, assistance provided by customer service, publicly accessible databases, among other channels authorized by the Data Subject in accordance with current legislation.
To the extent possible and reasonable, we will perform checks regarding the legality and/or veracity of the information provided by our Clients and/or Users and Data Subjects. However, we will not be responsible for any infringement and/or damage derived from the illegality, illegitimacy, alteration, misuse, fraud, or sanction in relation to the information that has been provided to us, without prejudice to the stipulations contemplated by law. It is the responsibility of the Client and/or User to update their information whenever necessary.
VIII. DATA TRANSFER
We, the companies related to the Company, may share the Data of the Data Subjects:
1. With the following companies:
• Copec Renovables SpA
• EMOAC SpA
• Vía Limpia SpA
• Ampere Copec SpA
• Administradora de Ventas al Detalle Ltda
• Blue Express S.A
• Comercializadora y Abastecedora Digital SpA
• Soluciones de Movilidad SpA
• Stem – Copec SpA •
• Inversiones Dhemax Ingenieros SpA
• Flux Solar energías renovables SpA
• Copec S.A.
• Compañía de Servicios Industriales Limitada
• ChileTur SpA
• Transportes de Combustibles Chile Limitada
• Copec Voltex SpA
a) With all those who act as our dealers, consignees, or franchisees;
b) With suppliers who provide us with the necessary services to provide and promote the products and services offered by our members;
3. In the following situations:
a) Updating the status of contractual relationships with our Clients and/or
Users and Data Subjects;
b) Complying with the obligations agreed upon with the Client and/or User and
Data Subject;
c) Preventing the risk of the commission of crimes, including fraud, money laundering, and terrorist financing;
d) Responding to information requests from national or international police or government authorities;
e) Complying with any law, regulation, subpoena, or court order;
f) Protecting the rights and property of the Company;
g) Protecting the personal safety of the Company's Workers and its representatives, third parties, and the public in general;
h) In any circumstance in which, for strategic or other business reasons, the Company or any of its members decides to sell, buy, merge, or otherwise reorganize the businesses in Chile or other countries. In such a case, said transaction could include the disclosure of personal information regulated in this Policy to buyers, and a new consent must be obtained from the Data Subject.
In all these cases, whoever acts as the Data Processor must comply with this Privacy Policy.
IX. INTERNATIONAL TRANSMISSION AND TRANSFER
By accepting this Privacy Policy, the Clients and/or Users and Data Subject expressly authorize us, the Company, with a view to providing better service and in accordance with the best existing technologies, to transfer their Data to servers located in the cloud and/or in foreign territory.
X. VALIDITY OF DATA PROCESSING
The Data regulated in this Policy will be retained for the time necessary in relation to the purposes indicated above or until the Data Subject requests their deletion, whichever occurs first.
XI. ARCO+P RIGHTS
Every Data Subject has the right to request information regarding the data that is subject to Processing by the Company. In this sense, every Data Subject may exercise the right of access and information, rectification, cancellation, opposition, and portability (ARCO+P) of their Data.
To exercise these rights, the Data Subject must submit their request through the form available on the website https://ww2.copec.cl/personas/derechos-arco or via email at datospersonales@copec.cl
By this means, the Data Subject may exercise the ARCO+P rights they possess in relation to us, the Company, both personally and through duly authorized third parties.
In this understanding, the Company is empowered to:
• Verify the identity of the applicant or, alternatively,
• Verify whether the applicant is duly acting as a representative of another person and has their written authorization.
The Company may only carry out the appropriate actions for the exercise of ARCO+P rights to the extent that the request:
• Is made regarding Data that concerns the applicant;
• Does not affect the fulfillment of services or contractual obligations entered into with any of the companies related to the Company;
• Does not affect the rights of other Clients and/or Users of the Company.
The Company will provide a response to requests within the timeframe established by law, informing the applicant of the receipt of the form and its processing status. Likewise, if it is not possible to process the request, the applicant will be notified via the contact method registered, and the corresponding reasons will be provided.
Finally, the requested information will be sent securely to the email address that the applicant provided in the respective form.
Regarding the cancellation of Data Processing, such request will not be processed when the Company has a legal or contractual duty to keep the Data in its databases indefinitely or for a specific time, or when the deletion of the data is impossible.
XII. SECURITY
As previously stated, at the Company, we will treat Data with due confidentiality and care.
In this regard, we commit to implementing appropriate, feasible, and reasonable technical and organizational measures to prevent the loss, unauthorized access, leakage, damage, or unauthorized destruction of our Clients' and/or Users' Data, in accordance with best practices, the state of the art, and the availability of resources.
XIII. POLICY UPDATE:
The Company may introduce modifications to this Privacy Policy, which must be duly approved by the Data Owner, and will take effect from that point forward.
In any case, regarding changes to this Policy, the consent that the Data Owner has granted will remain in force and will be fully applicable with respect to the Privacy Policy they may have accepted.
XIV. EFFECTIVENESS
This Policy enters into force as of the date of its publication, that is, June 30, 2025.