⚠️ INFORMATIVE TRANSLATION — NOT BINDING. The Spanish version at
../../legal/ is the authoritative text and the only one that may be signed,
published or presented to a third party. This English rendering exists so that non-Spanish readers
can review the content; where the two differ, Spanish governs. Like its original, it is an
unreviewed working draft — nothing here is legal advice, and nothing is final until a Chilean
data-protection lawyer has signed off.
- Description of the processing (modules, flows, volumes, active event taxonomy).
- Necessity and proportionality (purpose, minimisation: is an identity document needed?, retention periods).
- Risks to data subjects (profiling and segmentation, communications, minors’ data NOT permitted by the ToS, sensitive data).
- Measures (Softcrum’s TOMs plus the controller’s own measures, preference center, suppressions).
- Residual assessment and decision.
- Controller’s signature and date; annual review or upon substantial change.