Privacy policy

1. Controller

The controller for the processing described in this policy is Matías Vukusic, a lawyer operating the website under the trade name Apta Legal, with a professional address in Santiago, Chile.

Privacy and data-rights contact: contacto@aptalegal.com.

2. Scope

This policy applies to the website, initial communications, demonstration requests, material downloads and information submitted before a contract is executed.

Professional engagements may involve additional processing relating to trademark portfolios, matter files, digital evidence, professional contact data, activity logs, provider coordination and support. Such processing will be described in the proposal, agreement, order form and, where appropriate, data processing agreement.

3. Data we may process

Contact and organization data

Name, title, company, email, telephone, country, language and information included in an email signature or message.

Inquiry data

Trademarks, products, territories, classes, URLs, domains, listings, seller or account names, images, documents and other materials the person chooses to submit.

Technical data

IP address, browser, device, operating system, access date and time, referring page, security logs and language preferences stored locally.

Third-party data

Submitted materials may contain public or professional data relating to owners, applicants, sellers, representatives, contacts, website administrators or other individuals connected to a matter.

4. Sources

Data may come directly from the user, their organization, a person reporting a matter, public sources, industrial property registries, marketplaces, social networks, websites, search engines, registrars, directories and lawfully retained providers.

The public nature of a source does not remove the need to process data lawfully, proportionately and consistently with the stated purpose.

5. Purposes

We may process data to:

• respond to inquiries and coordinate meetings;
• assess coverage, feasibility and potential conflicts of interest;
• prepare proposals, demonstrations and budgets;
• receive and organize matter materials;
• prevent fraud, abuse, security incidents and unlawful use;
• maintain communication and preference records;
• comply with legal, regulatory and professional obligations;
• defend rights and resolve disputes;
• improve the website, documentation and internal processes using aggregated or de-identified information.

6. Legal basis and applicable rules

Processing will be carried out under applicable Chilean personal data protection law, including Law No. 19,628, the reform introduced by Law No. 21,719 according to its effective application, and any other amendments, regulations or replacement rules applicable from time to time.

Depending on context, processing may rely on consent, steps requested before contracting, performance of a contract, a legal obligation, establishment or defense of rights and other grounds allowed by applicable law.

7. Sensitive and restricted information

The website is not designed to receive sensitive data, critical trade secrets, credentials, financial information, medical records or information subject to enhanced duties unless an engagement and authorized channel are in place.

If such data is submitted accidentally, the Controller may delete, isolate or request resubmission through an appropriate channel.

8. Recipients and providers

Data may be accessed by authorized personnel and by providers strictly necessary to operate the website and deliver the services, including hosting, email, storage, security, communications, support and analytics providers.

Where a matter requires it, information may also be shared with local counsel, industrial property agents, investigators, experts, notaries, translators, digital platforms, authorities or courts, in accordance with client instructions, the applicable engagement or a legal obligation.

Apta Legal does not sell personal data.

9. International transfers

Some technology providers or collaborators may process information outside Chile. Where applicable, reasonable contractual, organizational and security measures will be used according to the nature of the data and applicable law.

10. Retention

Data will be retained for as long as necessary to answer inquiries, prepare proposals, deliver services, maintain professional records, comply with legal duties, resolve disputes and protect website security.

Where a professional relationship exists, retention may depend on the engagement, the nature of the matter and applicable legal or professional obligations. Information that is no longer required will be deleted, anonymized or restricted, as appropriate.

11. Security

Reasonable access control, authentication, logging, backup, encryption where appropriate, environment separation and incident-management measures will be applied. Specific controls depend on the contracted service and risk level.

No system eliminates all risk. Users should avoid submitting unnecessary information and use agreed channels.

12. Cookies, local storage and external services

This website version uses browser local storage to remember the selected language. It does not include a proprietary behavioral advertising tool by default.

Web fonts may load from Google Fonts, and links to WhatsApp, email, LinkedIn or other services may allow those third parties to receive technical information when used. Each third party applies its own policy.

If analytics, pixels, chat, embedded forms or non-essential cookies are introduced, this policy and the consent mechanism must be updated before activation.

13. Individual rights

Data subjects may request information about their data, access, correction, updating, deletion, blocking, objection and any other rights recognized by applicable law. Consent may also be withdrawn where processing depends on it, without affecting prior lawful processing.

Requests must be sent to contacto@aptalegal.com and include enough information to verify identity and locate the data. The Controller will respond within applicable legal time limits.

14. Children

The website and services are intended for businesses and professionals, not children. The Controller does not knowingly request children's data. If unauthorized submission is detected, reasonable steps will be taken to delete it or regularize processing.

15. Automated decisions

AI tools may prioritize, cluster, extract or summarize information. They should not independently make legal decisions or measures producing material effects on an individual. Material decisions remain subject to human review and the rules applicable to the engagement.

16. Changes

This policy may be updated to reflect regulatory, technological, contractual or provider changes. The current version will be identified by date. Material changes applicable to clients or registered users will be communicated through the relevant contract or channel.

17. Contact and complaints

Questions, requests or exercise of rights: contacto@aptalegal.com.

Individuals may also pursue complaints or remedies before the competent authority as provided by applicable law.