Privacy Policy

1. Data controller

Datolixo SpA, with Tax ID (RUT) 77.891.234-5 and registered address at Av. Apoquindo 4800, Office 1201, Las Condes, Santiago, Chile, is the entity responsible for processing personal data collected through the website datolixo.com and the services associated with the real estate crowdlending platform.

You may contact us at any time at contacto@datolixo.com for any inquiries related to the processing of your personal data.

2. Data we collect

In the course of our operations, we collect the following categories of personal data:

Identification data: full name, national identity card or passport number, nationality, date of birth, and identity document photograph when the verification process requires it.

Contact data: email address, telephone number, and postal address.

Financial data: banking information necessary for channeling investments and returning profits, transaction history on the platform, and information about the investor's risk profile.

Browsing data: IP address, browser type, pages visited on our site, session duration, and data obtained through cookies and similar technologies.

3. Purpose of data processing

Personal data is processed for the following specific purposes:

Managing user registration and identity verification in accordance with Chilean regulations on money laundering and terrorism financing prevention.

Facilitating participation in real estate crowdlending projects, including investment management, project monitoring, and profit distribution.

Complying with legal and regulatory obligations before the Financial Market Commission (CMF), the Internal Revenue Service (SII), and other relevant government bodies.

Improving the user experience on the platform and developing new functionalities based on usage analysis.

Sending informational communications about investment status, new available projects, and platform updates, provided the user has given prior consent.

4. Legal basis for processing

Personal data processing is carried out in accordance with Law 21.719 on Personal Data Protection of Chile, in effect since December 2024, and is based on the following legal grounds:

Explicit consent of the data subject, granted at the time of registration on the platform.

Execution of a contract to which the data subject is party or in the pre-contractual interest thereof.

Compliance with legal obligations applicable to financial intermediation activities.

Legitimate interest of Datolixo SpA in the continuous improvement of its services, provided that it does not override the fundamental rights of the data subject.

5. Data transfers

Datolixo SpA may share personal data with the following categories of recipients, exclusively to the extent necessary to fulfill the described purposes:

Financial entities participating in the channeling of investment funds.

Regulatory bodies and tax authorities, when required by law.

Technology service providers operating under strict confidentiality and data protection agreements.

We do not carry out international transfers of personal data unless strictly necessary for platform operations, and in such cases, we ensure an adequate level of protection in accordance with current Chilean legislation.

6. Data retention

Personal data will be retained for the time necessary to fulfill the purposes for which it was collected. Specifically:

Data linked to investment operations will be retained for a minimum of five years from the completion of the operation, in accordance with legal limitation periods.

Browsing data and cookies will be retained for a maximum period of 13 months from collection.

Data from inactive accounts will be deleted after 24 months of inactivity, with prior notification to the data subject.

7. Data subject rights

In accordance with Law 21.719, you have the right to:

Access your personal data and obtain a copy thereof.

Rectify inaccurate or incomplete data.

Request the deletion of your data when it is no longer necessary for the purpose that motivated its collection.

Object to the processing of your data in certain circumstances.

Request the portability of your data to another data controller.

Revoke consent granted at any time, without affecting the lawfulness of prior processing.

To exercise these rights, you may send a request to contacto@datolixo.com indicating your full name and the right you wish to exercise. We will respond within a maximum of 15 business days.

8. Security measures

Datolixo SpA implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration. These measures include:

Data encryption in transit using TLS 1.3 protocol.

Encrypted storage of sensitive data at rest.

Role-based access control for authorized personnel.

Periodic security audits and penetration testing.

Security incident response plan in accordance with CMF guidelines.

9. Changes to this policy

Datolixo SpA reserves the right to update this Privacy Policy to adapt it to new legal, regulatory, or technological requirements. Any substantial modification will be notified to registered users via email and published on this same page with the corresponding update date.

10. Contact

For any inquiry or request related to this Privacy Policy, you may contact us at:

Email: contacto@datolixo.com Postal address: Av. Apoquindo 4800, Office 1201, Las Condes, Santiago, Chile Phone: +56 2 2345 6789