Terms and Conditions of Use
1. General provisions
This document governs access to and use of the website “https://www.nawrath.cl/” (hereinafter, the “Website”), as well as the processing of any personal data its users may provide.
The Website is owned and operated by Nawrath Auditores, Certificadores Limitada (hereinafter, “Nawrath” or “NwR”), Chilean Tax ID (RUT) No. 76.352.669–0, domiciled at Simón González 8918, La Reina, Santiago.
2. Acceptance
Accessing, browsing and using the Website constitutes express, full and unconditional acceptance of these Terms and Conditions in the version in force at the time of access.
Users who do not agree with the provisions contained herein must refrain from using the Website.
3. Nature and scope of the content
The content published on the Website is purely informational regarding the professional services provided by Nawrath, including the following services:
- Assessment, update or implementation of Crime Prevention Models under Law 20.393 (Corporate Criminal Liability).
- Outsourced Crime Prevention Officer service.
- Training for companies on Laws 20.393 and 21.595.
- Assessment and implementation of Infringement Prevention Models under Law 21.719 (Personal Data Protection).
- Assessment and implementation of Enterprise Risk Management Models.
- Audit reviews to improve procedures and controls.
The information on the Website does not constitute legal, financial, accounting or any other specific professional advice, nor does it by itself create any contractual relationship.
4. No automatic professional relationship
Sending inquiries, background information or communications through the Website’s contact form does not constitute acceptance of a professional engagement, nor does it create any obligation on Nawrath’s part to provide services.
We recommend not sending strategic, sensitive or confidential information through this channel.
Any provision of services will require the prior signing of the corresponding contract or professional engagement letter.
5. Legitimate use of the Website
The user agrees to:
- Use the Website in accordance with current Chilean law.
- Refrain from any act that could affect the security or operation of the Website.
- Not attempt unauthorized access to internal systems or databases.
- Not reproduce or commercially exploit the content without written authorization.
The published information:
- Does not constitute specific professional advice.
- Does not replace the signing of a contract or engagement letter.
- Does not create any contractual relationship through mere access to or use of the Website.
Any provision of services will require a formal written agreement between the parties.
6. Permitted use
The User agrees to:
- Use the Website in accordance with current Chilean law.
- Not carry out acts that affect its security, integrity or operation.
- Not attempt unauthorized access to internal systems.
- Not use the Website for unlawful purposes or purposes contrary to good faith.
7. Intellectual property
All content on the Website, including texts, model reports, methodologies, graphics, trademarks, logos, design and structure, is protected by current intellectual and industrial property law, in particular Law No. 17.336 and Law No. 19.039.
It may be used solely for personal and informational purposes.
Its reproduction, distribution, modification, public communication or commercial exploitation without the Firm’s prior written authorization is prohibited.
8. Personal data protection
Any personal data collected through the Website is processed in accordance with Law No. 19.628 and other applicable regulations.
Data provided voluntarily will be used exclusively to respond to inquiries or assess potential requests for professional services.
Data subjects may exercise their rights of access, rectification, cancellation and objection by sending a request to the email address indicated on the Website, together with proof of identity.
9. Limitation of liability
Nawrath makes reasonable efforts to keep the published information current and accurate. However, Nawrath:
- Does not guarantee the absence of errors or omissions.
- Does not ensure continuous, uninterrupted availability of the Website.
- Does not guarantee that the content applies to particular situations.
Nawrath shall not be liable for damages arising from use of the Website, including decisions made on the basis of the published information.
10. Amendments
Nawrath reserves the right to modify or update these Terms and Conditions at any time.
Amendments take effect upon publication on the Website.
It is the User’s responsibility to review them periodically.
11. Use of cookies
The Website may use technical and analytics cookies to improve the user experience.
Users can set their browser to reject or delete them.
12. Severability
Should any provision be declared null or unenforceable, the validity of the remaining provisions shall not be affected, and they shall remain in full force.
13. Governing law and jurisdiction
These Terms and Conditions are governed by the laws of the Republic of Chile.
Any dispute arising from use of the Website shall be submitted to the ordinary courts of justice with jurisdiction over Nawrath’s domicile.
Privacy and Data Protection Policy
1. Purpose
The purpose of this Policy is to:
- Comply with Article 19 No. 4 of the Political Constitution of the Republic of Chile;
- Comply with the provisions of Law No. 19.628 on the Protection of Private Life;
- Incorporate and anticipate the obligations introduced by Law No. 21.719 (Personal Data Protection), which enters into force in December 2026;
It also governs the internal procedures for the collection, use, processing, storage, communication, transfer and deletion of personal data processed by the organization, under an approach of regulatory compliance, proactive accountability and risk management.
Personal data will be processed in accordance with the lawful bases established by law and in strict adherence to the principles governing this matter.
2. Data controller
The Controller of the personal data collected is Nawrath Auditores, Certificadores Limitada (hereinafter, “Nawrath” or “NwR”), Chilean Tax ID (RUT) No. 76.352.669–0, domiciled at Simón González 8918, La Reina, Santiago.
Nawrath acts as Data Controller with respect to the databases it manages.
Should a Data Protection Officer (DPO) be appointed under Law No. 21.719, the officer’s identity and contact details will be disclosed in due course.
3. Applicable legal framework
The processing of personal data is governed by:
- Political Constitution of the Republic of Chile (Art. 19 No. 4).
- Law No. 19.628.
- Law No. 21.719.
- Instructions and guidelines issued by the Personal Data Protection Agency (Agencia de Protección de Datos Personales).
4. Definitions
For the purposes of this Policy, the definitions set out in Law No. 19.628, as amended, apply, including:
- Personal data: any information linked or relating to an identified or identifiable natural person. An identifiable person is anyone whose identity can be determined, directly or indirectly, in particular by means of one or more identifiers, such as name, national identity card number, or the analysis of elements specific to that person’s physical, physiological, genetic, psychological, economic, cultural or social identity. To determine whether a person is identifiable, all objective means and factors that could reasonably be used for such identification at the time of processing must be considered (Article 2(f), Law 19.628).
- Sensitive personal data: personal data referring to the physical or moral characteristics of persons, or to facts or circumstances of their private or intimate life, that reveal ethnic or racial origin, political, trade union or professional association membership, socioeconomic status, ideological or philosophical convictions, religious beliefs, data concerning health or human biological profile, biometric data, and information concerning the sex life, sexual orientation and gender identity of a natural person (Article 2(g), Law 19.628).
- Personal database: an organized set of personal data, whatever the purpose, form or method of its creation, storage, organization and access, that allows the data to be related to one another and processed (Article 2(m))
- Data subject: a natural person, identified or identifiable, to whom the personal data concerns or refers (Article 2(ñ), Law 19.628).
- Data controller: any natural or legal person, public or private, that decides on the purposes and means of processing personal data, regardless of whether the data is processed directly by it or through a third-party agent or processor (Article 2(n), Law 19.628).
- Processing of personal data: any operation or set of operations or technical procedures, automated or not, that in any way allow personal data or sets of personal data to be collected, processed, stored, communicated, transmitted or used (Article 2(o), Law 19.628).
5. Lawful bases for processing
Processing is based on the consent given by data subjects when they voluntarily submit their information. Consent is the general rule, meaning that the processing of personal data is lawful when the data subject gives consent.
Data subjects may withdraw consent at any time, without stating a reason, through mechanisms equivalent to those used to give it.
6. Processing principles
Nawrath undertakes to comply with the following principles established by law:
- Principle of lawfulness and fairness: Data will be processed lawfully, fairly and transparently.
- Principle of purpose limitation: Data will be collected for specified, explicit and legitimate purposes.
- Principle of proportionality: Only data that is adequate, relevant and not excessive in relation to its purpose will be processed.
- Principle of data quality: Data must be accurate, up to date and complete.
- Principle of accountability: Nawrath is responsible for compliance with applicable regulations and must be able to demonstrate it.
- Principle of security: Technical and organizational measures will be adopted to protect personal data.
- Principle of transparency and information: Data subjects will be informed about the processing of their data clearly and accessibly.
- Principle of confidentiality: Data will be handled confidentially, preventing unauthorized access or disclosure.
7. Processing of personal data
7.1 Data collected
Nawrath only collects the personal data that users voluntarily provide through the contact form, such as name, email address, phone number, company and message content.
7.2 Purpose of processing
Data will be processed exclusively to respond to inquiries, assess potential requests for professional services and maintain contact arising from such communications.
7.3 Exclusion and deletion of irrelevant data
Should the User provide, through the Website, personal data unrelated to the purposes set out in this Policy, or that is unnecessary, excessive or irrelevant for assessing requests for professional services, Nawrath will delete or anonymize it as soon as possible.
Users are advised to refrain from sending sensitive or confidential information, or information that is not strictly necessary for their inquiry.
8. Rights of data subjects
Data subjects may exercise the following rights under current regulations:
8.1 Data subject rights
The data subject may request:
- Access: to know the personal data concerning them.
- Rectification: to correct inaccurate or incomplete data.
- Cancellation or erasure: to request the deletion of data where applicable.
- Objection: to object to processing in the cases permitted by law.
- Right to data portability.
- Right to restriction of processing.
- Right not to be subject to automated decisions, where applicable.
8.2 Exercising rights
These rights must be exercised by sending a request to the email address indicated in the Data Controller section, together with information that allows the requester’s identity to be verified.
Nawrath will respond within the time limits set by applicable regulations.
9. Information security
The organization will implement appropriate technical and organizational measures to protect personal data against:
- Unauthorized access.
- Loss.
- Alteration.
- Improper disclosure.
- Accidental or unlawful destruction.
In the event of security breaches that pose a risk to data subjects, the notification protocols established in Law No. 21.719 and supplementary regulations will apply.
10. Data retention
Personal data will be retained:
- For as long as the contractual or professional relationship continues.
- For the applicable statutory limitation periods.
- For up to five years after the relationship ends, unless a different legal obligation applies, in line with the limitation periods for legal liability.
- For longer if necessary for the organization’s legal defense.
Once that period has elapsed, data will be securely deleted or anonymized.
11. Use of cookies
The Website may use technical and analytics cookies to improve the user experience.
Users can set their browser to reject or delete them.
12. Amendments
Nawrath may amend this Policy to adapt it to regulatory changes or internal improvements. Updates will be published in a timely manner on its Website.
13. Effective date
This Policy takes effect upon publication and will be updated automatically to fully comply with Law No. 21.719 as of December 2026.