At Vondrux Capital S.A.S. (hereinafter, "Vondrux", "we" or "the Platform") we believe that trust in our service starts with responsible processing of your personal data. This policy explains, in plain and non-templated language, what information we collect when you visit or use vondrux.com, why we process it, with whom we share it and which rights you can exercise in 2026 under Argentina's Personal Data Protection Law 25,326 and the current guidance issued by the Public Information Access Agency.
1. Data controller
Vondrux Capital S.A.S., Tax ID (CUIT) 30-71892456-7, with registered office at Av. Reyes Católicos 1247, floor 4, A4400 Salta, Argentina, acts as the data controller. You can reach our Data Protection Officer by writing to privacidad@vondrux.com.ar.
2. Data we collect
We only collect the data required to operate the platform: full name, email address and message content when you complete the contact form; technical data such as IP address, device type, operating system, browser, preferred language and pages visited; and cookie consent data. We do not collect special categories of personal data.
3. Purposes and legal basis
We process your data to (i) respond to your commercial enquiries, based on your consent and pre-contractual measures; (ii) measure site usage and prevent fraud, based on our legitimate interest; (iii) send you communications about projects if you expressly authorize it; and (iv) comply with legal obligations before UIF, AFIP and CNV where applicable.
4. Retention period
Contact form data is kept for a maximum of twenty-four (24) months from the last interaction. Anonymised technical data is kept for up to thirteen (13) months. Records required under AML/CFT regulations are kept for ten (10) years, in line with Argentina's Law 25,246 in force in 2026.
5. Recipients and processors
We share data with technology providers acting as data processors (hosting in the European Union, transactional email, Google Ireland Ltd. for advertising and measurement through Consent Mode v2, and authorized KYC providers in Argentina). We do not sell or transfer your personal data to third parties for commercial purposes.
6. International transfers
Some providers process data outside Argentina. In those cases we apply standard contractual clauses approved by the enforcement authority and verify that the destination country offers an adequate level of protection or equivalent safeguards.
7. Your rights
You can exercise rights of access, rectification, update, deletion, objection and limitation of processing, and withdraw your consent at any time, without retroactive effect. Please write to privacidad@vondrux.com.ar attaching a copy of your ID. You may also file a claim before the Public Information Access Agency.
8. Information security
We apply technical and organizational controls aligned with ISO/IEC 27001:2022, encryption in transit (TLS 1.3) and at rest (AES-256), environment segregation, quarterly external audits and continuous internal awareness programmes.
9. Changes to this policy
We may update this policy to reflect regulatory or operational changes. We will publish the current version indicating the last update date and, where the change is material, we will notify you through the usual channels.