Law 21.719 · In force from 1 December 2026
Privacy on this site
This policy covers empresasindigenas.org, the institutional site. The platforms of the ecosystem do process personal data and each publishes its own informed text, because each collects different things for different purposes. What follows is what this site does, which is very little, and where to go for the rest.
Last updated: July 2026
What this site does not do
There are no forms, no accounts and no sign-in. This page does not ask for your name, your email, your tax ID or your people, so it never receives them and never stores them. There is no analytics either, no social media pixels and no third-party scripts: the page's code loads nothing from another domain.
If this page ever did collect data, this policy would change before that, not after.
What does get logged
Like any web server, the one serving this page records each request: IP address, date and time, path requested, response code and browser. It is used to operate the site and detect abuse, it is kept for the provider's technical retention period, and it is not cross-referenced with any other database of the Foundation.
And one cookie, which is not tracking
It remembers the language you chose, holds two letters and identifies nobody. It is listed with its exact name in the cookie policy, along with the two the hosting service used to set and which have been switched off.
Where personal data is processed
In the Directory, when a company signs up: there the processing is authorized purpose by purpose, with a versioned informed text, and authorizations are withdrawn one by one. And at the Seal, when a company applies for certification and submits documents. Each explains its own processing on its own site, which is where you authorized it.
Belonging to an Indigenous people is sensitive data under Law 21.719. That means it cannot be processed on the basis of a legitimate interest: it requires prior, freely given, informed, purpose-specific and unambiguous consent. This site does not ask for it, and where it is asked, it is asked that way.
And the enquiries people send us
When someone writes to the Foundation with an enquiry, the team records it so it can be answered and followed up: their name, the channel they wrote through, and what it was about. If the person states which people they belong to, that is stored only with their consent, together with the exact version of the text they were shown and the date they gave it.
That consent is withdrawn by writing to the privacy address, and withdrawing it deletes the data: no withdrawal marker is left with the people still stored beside it. The enquiry is kept while the relationship is active, by then without the sensitive field.
Your rights, and how to exercise them
You can request access to your data, correct it, delete it, object to the processing, request portability, and withdraw any authorization you have given. No reason has to be given.
The response deadline is 15 working days. The Foundation committed to that deadline even though its own regulation allows a longer one, and when two deadlines coexist the shorter one binds, because it is the one the person was promised.
The written route that always works is the privacy address. If your case concerns the Directory's registry, that site has its own form which leaves a dated record.
Who answers
The data controller is Fundación Empresas Indígenas, based in Temuco, La Araucanía Region. For any personal data matter the channel is the privacy address, not a form.
Fundación Empresas Indígenas · privacidad@empresasindigenas.org