Privacy Policy
Application. This Policy applies to the website www.marchiguewines.cl, its contact forms and other digital channels associated with Viñedos Errazuriz Ovalle and its related companies (the “Sites“).
This Policy explains how Viñedos Errazuriz Ovalle and its related companies collect, use, store, disclose and protect personal data through the Sites, as well as the rights available to individuals and the mechanisms available to exercise them.
1. Commitment and Regulatory Framework
Viñedos Errazuriz Ovalle and its related companies undertake to process personal data lawfully, fairly, transparently and securely, respecting individuals’ rights and applying measures proportionate to the risks associated with processing.
This Policy is aligned with applicable Chilean personal data protection regulations, including Law No. 19,628 and the amendments introduced by Law No. 21,719, which regulates the protection and processing of personal data and creates the Personal Data Protection Agency, whose general entry into force is scheduled for December 1, 2026.
2. Relevant Definitions
- Personal Data: Any information linked or relating to an identified or identifiable natural person.
- Controller: The party determining the purposes and means of processing.
- Processor (Agent): The party processing data on behalf of the controller under its instructions.
- Sensitive Data: Data subject to enhanced protection due to its nature.
- Data Processing: Any operation performed on personal data, including collection, storage, consultation, use, disclosure, transfer, blocking, deletion or destruction.
- Data Subject: The natural person to whom the personal data relate.
- Consent: A free, specific, informed and unambiguous expression of the data subject’s will authorizing the processing of personal data.
- Disclosure or Transfer: Making personal data available to another person or entity other than the data subject, controller or processor.
3. Who is the Controller?
3.1 Controller by Site
The controller of the personal data collected through www.marchiguewines.cl is Viñedos Errazuriz Ovalle and its related companies, the company that owns or administers this website.
3.2 Single Privacy Channel
For inquiries, requests or the exercise of rights related to personal data processed through the Sites, you may contact us at:
datospersonales@grupoerrazuriz.cl
This channel centralizes the receipt of requests and coordinates internally with the relevant responsible company to ensure traceability and a consistent response.
Requests received through this channel will be recorded internally for traceability, deadline management, identity verification (where applicable) and coordination with the corresponding responsible company.
Viñedos Errazuriz Ovalle and its related companies will seek to respond within the timeframes established by applicable regulations. Where necessary, additional information may be requested in order to verify identity or locate the requested information.
4. What Personal Data Do We Process?
Viñedos Errazuriz Ovalle and its related companies seek to collect only personal data that are adequate, relevant and limited to what is necessary for the purposes described in this Policy or in the corresponding privacy notices.
4.1 Data Provided Directly by the User
- Identification and contact information.
- Email address.
- Telephone number.
- City or region.
- Company and professional position.
- Tax identification numbers where applicable.
- Messages submitted through forms.
- Attachments such as résumés or documents.
4.2 Browsing and Technical Data
Online identifiers and technical logs including IP address, browser, operating system, device information, visited pages, timestamps and interaction events associated with cookies or similar technologies.
4.3 Sensitive Data
In general, Viñedos Errazuriz Ovalle and its related companies do not request sensitive personal data through their web forms.
5. Purposes of Processing
Personal data may be processed for the following purposes:
- Responding to inquiries and contact requests.
- Commercial management and business relationships.
- Recruitment and personnel selection.
- Support and after-sales services.
- Fraud prevention and information security.
- Analytics and service improvement.
- Marketing campaign measurement where applicable.
- Compliance with legal obligations and dispute management.
Additional privacy notices may be displayed within specific forms or functionalities where necessary.
6. Lawful Bases for Processing
Viñedos Errazuriz Ovalle and its related companies process personal data only where there is a lawful basis under applicable regulations.
Depending on the circumstances, processing may rely on one or more of the following legal bases:
- Consent of the data subject. For example, non-essential cookies, marketing communications, newsletter subscriptions or retention of information for future recruitment processes.
- Performance of a contract or pre-contractual measures. Including quotations, business requests, applications, supplier management or customer services.
- Compliance with legal obligations. Such as responding to requests from competent authorities, statutory record keeping or regulatory compliance.
- Legitimate interest. Including information security, fraud prevention, operational continuity, legal defense, website analytics and service improvements.
Where legitimate interest is relied upon, Viñedos Errazuriz Ovalle and its related companies assess that such interest does not disproportionately affect the rights and freedoms of data subjects.
7. Cookies, Pixels and Tracking Technologies
The Sites may use cookies, pixels, tags, online identifiers and similar technologies to operate correctly, improve the user experience, generate statistics and measure communication campaigns.
Depending on the Site, technologies may include:
- Google Analytics
- Meta Pixel
- LinkedIn Insight Tag
- Other equivalent analytics technologies
Strictly necessary cookies may be installed automatically. Analytics, advertising or marketing cookies will only be used according to the applicable lawful basis and, where required, after obtaining the user’s consent.
Additional information regarding providers, retention periods and purposes can be found in the corresponding Cookie Policy.
8. Automated Decisions
Currently, the Sites do not make decisions based exclusively on automated processing that produce legal effects or significantly affect individuals.
Should such processing be implemented in the future, Viñedos Errazuriz Ovalle and its related companies will provide clear information regarding:
- The logic involved.
- The purposes of processing.
- The rights available to data subjects.
9. With Whom Do We Share Personal Data?
Personal data may be shared only where necessary and under appropriate confidentiality and security obligations.
Recipients may include:
- Related companies involved in customer support, business operations, security or corporate administration.
- Service providers and processors such as hosting, cybersecurity, maintenance, cloud services, analytics, website support and email services.
- Competent authorities where disclosure is legally required.
Service providers processing personal data on behalf of Viñedos Errazuriz Ovalle and its related companies are contractually required to process information only under documented instructions, maintain confidentiality and implement appropriate security measures.
10. International Data Transfers
Certain technology providers, cloud platforms, analytics tools, CRM systems, support services or cybersecurity providers may process personal data outside Chile.
Whenever international transfers occur, Viñedos Errazuriz Ovalle and its related companies will implement appropriate contractual, organizational and technical safeguards to ensure an adequate level of protection.
These transfers may be necessary to provide technology services, data storage, backups, communications, cybersecurity, analytics and customer support.
11. Data Retention
Viñedos Errazuriz Ovalle and its related companies retain personal data only for as long as necessary to fulfill the purposes described in this Policy, respond to inquiries, comply with legal obligations or protect legitimate business interests.
Reference retention periods include:
- General inquiries: Up to 24 months after the request has been completed.
- Recruitment processes: Up to 12 months after completion of the recruitment process, unless the applicant has expressly authorized a longer retention period for future employment opportunities.
- Security logs: Between 6 and 24 months depending on operational needs and risk.
These periods may vary where legal obligations, contractual relationships, investigations or dispute resolution require longer retention.
12. Your Rights
Data subjects may exercise the rights granted under applicable data protection regulations, including:
- Right of access.
- Right to rectification.
- Right to erasure.
- Right to object to processing.
- Right to data portability.
- Right to restriction or blocking of processing where applicable.
Requests will be handled in accordance with applicable legislation and within the legal response periods.
13. How to Exercise Your Rights
Requests concerning personal data may be submitted through the following email address:
datospersonales@grupoerrazuriz.cl
To facilitate processing, requests should preferably include:
- Full name.
- Preferred contact information.
- The company or website involved.
- The right you wish to exercise.
- A description of your request.
- The email address used in the relevant form, if applicable.
To protect personal information, identity verification may be required before processing certain requests.
If you believe your rights have not been adequately addressed, you may lodge a complaint with the Chilean Personal Data Protection Agency once it becomes operational, without prejudice to any other legal remedies available.
14. Information Security
Viñedos Errazuriz Ovalle and its related companies implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure or destruction.
Security measures may include:
- Access control mechanisms.
- Monitoring and logging systems.
- Encryption in transit where applicable.
- Supplier security assessments.
- Internal confidentiality obligations.
Access to personal data is restricted to authorized personnel whose duties require such access.
15. Security Incidents
If a security incident affects or may affect personal data, Viñedos Errazuriz Ovalle and its related companies will activate appropriate procedures to:
- Detect the incident.
- Contain the impact.
- Investigate the cause.
- Mitigate risks.
- Implement corrective measures.
Where required by applicable regulations, affected individuals and competent authorities will be notified in accordance with the nature and severity of the incident.
16. Links to Third-Party Websites
The Sites may contain links to third-party websites, applications or platforms, including social media services or external providers.
This Privacy Policy applies exclusively to the Sites operated by Viñedos Errazuriz Ovalle and its related companies and does not apply to third-party websites.
Users are encouraged to review the privacy policies of any third-party websites before providing personal information.
17. Children’s Personal Data
The website www.marchiguewines.cl is not intended for children or adolescents and does not knowingly collect their personal data.
If personal data relating to minors are received without the authorization required by applicable law, Viñedos Errazuriz Ovalle and its related companies will take reasonable measures to delete, block or otherwise regularize such information where appropriate.
Where personal data of children under 16 years of age are processed, authorization from a legal representative will be required unless otherwise permitted by applicable legislation.
18. Privacy Notices in Forms
Contact forms available through the Sites include concise privacy notices informing users of:
- The purpose of the processing.
- Whether requested fields are mandatory or optional.
- The identity of the controller.
- The applicable lawful basis.
- A link to this Privacy Policy.
Where consent is required, the relevant forms may include mechanisms designed to obtain, record and allow the withdrawal of such consent in accordance with applicable regulations.
19. Updates to this Privacy Policy
Viñedos Errazuriz Ovalle and its related companies reserve the right to modify this Privacy Policy at any time in response to legal, regulatory, operational or technical developments.
The current version will always be available on www.marchiguewines.cl, indicating the date of the latest revision.
Where changes materially affect the way personal data are processed, reasonable efforts will be made to notify users through the website, electronic communications or other appropriate channels.