Privacy Policy

Data controller

Klimber S.A.U. (“Klimber”), with its address at Martín Coronado 3256, office 110, City of Buenos Aires, Argentina, is responsible for the database in which inquiries received through the website www.klimber.com (the “Site”) are recorded, and for the processing of personal data described in this policy. For any privacy question, you can write to us at info@klimber.com or call us at xxxx.

Scope

This policy explains how we process the personal data of people who visit the Site and of people who contact us through it or by email. The Site is informational and is intended for companies and professionals. Klimber does not offer products or services to consumers through the Site.

Data we process

• Data you provide. If you fill in the contact form: your name, email address, company, the profile you select (insurer, digital platform, professional, press or other) and the content of your message. If you write to info@klimber.com: your email address and the information you include in your message.
• Technical data. When you visit the Site, data such as your IP address, device and browser type, operating system, pages visited, date and time of the visit and the site you came from is generated.

We do not request sensitive data. Please do not include health information or other sensitive data in your messages.

Purposes

• To respond to your inquiry and follow up on the conversation you start with us.
• To operate the Site, protect it against abuse and bots, and obtain aggregate visit statistics.
• To comply with legal obligations and to exercise or defend our rights.

We do not use this data to send you marketing communications you have not requested, we do not build profiles, and we do not make decisions based solely on automated processing.

Legal basis and nature of the data

We process the data you send us with your consent, which you give when you submit your inquiry. We process technical data to the extent necessary to operate and protect the Site. Where the law of your country provides for it, we also rely on our legitimate interest in responding to business inquiries and keeping the Site secure, or on taking pre-contractual steps at your request. Where Regulation (EU) 2016/679 (GDPR) applies, our legitimate interest is based on Article 6(1)(f).

Providing the data in the form is voluntary. Without the fields marked as required we will not be able to respond to your inquiry, and if the data is inaccurate we may not be able to contact you.

Who we share data with

• Other Klimber group companies (Klimber Latam Corp. and the companies it controls), when your inquiry relates to another country or area of the group.
• Providers of hosting, content delivery and security, email and workplace tools, who process the data on our behalf and under confidentiality obligations.
• Public authorities, when required by law or by a court or administrative order.

We do not sell or rent personal data.

International transfers

Some of our providers and group companies are located in the United States or in other countries whose laws may not offer a level of protection equivalent to that of the country where you live. By sending us your inquiry, you consent to those transfers. Where applicable, we put in place the contractual safeguards required by applicable law, including the Standard Contractual Clauses approved by the European Commission for data of visitors from the European Union.

Retention

We keep inquiry data for as long as necessary to respond to and follow up on it. If the conversation leads to a business relationship, we keep it while that relationship lasts and, afterwards, for the periods required by law. Technical data is kept for the periods needed for the security of the Site and those required by applicable law.

Security

We apply reasonable technical and organizational measures to protect data against loss, alteration or unauthorized access. If a security incident affecting your data occurs, we will act in accordance with applicable law.

Your rights

You may request access to your data, its rectification, update or deletion, object to its processing and withdraw your consent at any time, without retroactive effect. Depending on the law of your country, you may also have the right to data portability, to restriction of processing, to the anonymization or blocking of unnecessary data and to know who we share your data with.

To exercise your rights, write to info@klimber.com with the subject line “Privacy”, stating your request and attaching proof of your identity. Klimber’s Legal team is responsible for handling these requests.

In Argentina, we answer access requests within 10 calendar days and requests for rectification, update or deletion within 5 business days of receipt. The right of access may be exercised free of charge at intervals of no less than six months, unless a legitimate interest is shown (Law 25,326, section 14(3)). In other countries, we respond within the periods set by applicable law.

If you believe we have not properly handled your request, you may file a complaint with the data protection authority of your country: in Argentina, the Agencia de Acceso a la Información Pública; in Brazil, the Autoridade Nacional de Proteção de Dados; in Colombia, the Superintendencia de Industria y Comercio; in Uruguay, the Unidad Reguladora y de Control de Datos Personales; and, in other countries, the competent authority.

LA AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, en su carácter de Órgano de Control de la Ley N° 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales. (English translation: The Agencia de Acceso a la Información Pública, as the supervisory authority under Law No. 25,326, has the power to handle the complaints and claims filed by anyone whose rights are affected by non-compliance with the rules in force on personal data protection.)

Data protection officers (Brazil and European Union)

For the purposes of Law 13,709/2018 (LGPD), Klimber’s data protection officer (encarregado) is Daniel Moussatche, who can be contacted at info@klimber.com.

For the purposes of Regulation (EU) 2016/679 (GDPR), Klimber Latam Corp has an external Data Protection Officer (DPO), provided by Insight Assurance, who can be contacted at data-privacy@klimber.com.

Minors

The Site is intended for companies and professionals. We do not knowingly collect data from persons under 18. If we find that we have received such data, we delete it.

Cookies and similar technologies

At Klimber, we respect your privacy. Cookies are small files that a website stores on your device. The Site does not use advertising cookies or cookies that track your browsing on other sites. It only uses:

(a) Technologies necessary for security and operation: The Site is delivered through Cloudflare, Inc., which protects it against attacks and bots and checks that the form is completed by natural persons (Cloudflare Turnstile). To do so, Cloudflare processes the IP address and technical browser data, and may use short-lived technical cookies.

(b) Cookie-free visit statistics: We use Cloudflare Web Analytics, which does not use cookies or local storage and does not track users over time through their IP address or other identifiers. It only provides us with aggregate, anonymous information.

(c) Fonts and icons: Visual resources are hosted and served locally to ensure that no technical data or IP addresses are unnecessarily transmitted to external third-party networks.

You can manage or block technical cookies in your browser settings; however, blocking them may affect the functionality of the contact form.

If in the future we add cookies that are not necessary, such as analytics or advertising cookies, we will ask for your prior consent through a notice on the Site and update this policy.

Providers’ privacy policies:

Cloudflare, Inc.: https://www.cloudflare.com/privacypolicy/

Do Not Track (DNT) signal: Because the Site does not track user behavior over time or across third-party websites, the browser’s DNT signal does not require any additional settings or processing.

Changes to this policy

We may update this policy. The current version will always be published on the Site with its effective date. If the changes are significant, we will inform you on the Site.

Languages

This policy is available in Spanish, English and Portuguese. In case of any discrepancy between the versions, the Spanish version prevails.