Privacy policy

This policy explains how personal data collected through varkaen.com (the “Site”) is processed. It applies only to this Site and not to the websites of group brands, which will have their own policies once published.

This is a translation provided for convenience. In case of any discrepancy, the Spanish version prevails.

1. Data controller

• Controller: Matias Ariel Suarez
• Type of person: Natural person
• Tax ID (CUIT/CUIL): 20-44138337-2
• Address: City of Mendoza, Mendoza Province, Argentina
• Privacy contact: contact@varkaen.com
• Database registration (RNBD – AAIP): [Pending: Número de inscripción RNBD (AAIP) o constancia de trámite]

“VARKAEN Corporation” is a trade name and a business project in its formation stage; its use does not imply that an incorporated company exists.

2. Data we process

2.1. Contact form

If you send an enquiry, we process the data you enter: full name, email address, reason for the enquiry and message, together with a record that you accepted this policy. To prevent automated abuse, your IP address and technical browser signals are also processed (see 2.4 and 6).

Please do not include sensitive data (for example health, ethnic origin, political or religious opinions) or data about third parties in your message.

2.2. Direct email

If you write to contact@varkaen.com, we process the data included in your message.

2.3. Server technical logs

Like any web server, our hosting provider’s server logs technical data for each request (IP address, date and time, page requested, browser and operating system) for security and operational purposes.

2.4. Submission limits

To prevent mass submissions, the server temporarily stores an irreversible identifier (a keyed hash) derived from your IP address and the time of each submission. We do not store your IP address in clear text and this record is deleted within 24 hours at most.

2.5. Statistics (only with your consent)

If you accept statistics cookies, we use Google Analytics 4 to understand, in aggregate, how the Site is used: pages visited, device and browser type, approximate location and interactions such as clicks on brands or successful form submissions. We never send Google names, emails, phone numbers or message content. Advertising signals and Google Signals are disabled.

2.6. Preferences stored in your browser

Your theme choice (light/dark) and cookie preferences are stored only in your browser (local storage) and are not sent to our server.

3. Purposes

• Replying to your enquiries and continuing any communication you start.
• Protecting the Site and the form against abuse, spam and attacks.
• Producing aggregated usage statistics, only if you consented.

We do not use your data for advertising, we do not build commercial profiles and we do not make automated decisions affecting you.

4. Legal basis

In Argentina, processing is based on your free, express and informed consent (section 5 of Law No. 25,326), given when you submit the form or accept statistics, and on the applicable legal exceptions for the security of the service you request.

Where the EU General Data Protection Regulation or its UK equivalent applies, the legal bases are: consent (Art. 6(1)(a)) for statistics and the form; steps taken at your request prior to entering into a contract (Art. 6(1)(b)) where your enquiry involves it; and legitimate interest in the security of the Site (Art. 6(1)(f)) for anti-spam verification, submission limits and technical logs.

5. Recipients and service providers

We do not sell or share your data. Only the providers delivering necessary technical services have access:

We may disclose data to public authorities only when required by law or court order.

6. International transfers

Some providers may process data outside Argentina: Cloudflare, Inc. and Google may do so in the United States and other countries; Hostinger hosting is provided from: [Pending: País/región del centro de datos de Hostinger contratado]. These transfers are carried out in accordance with section 12 of Law No. 25,326 and AAIP rules on adequate countries and contractual clauses, or with your consent where applicable.

7. Retention

• Enquiries received: up to 24 months from the last communication; they are then deleted.
• Submission limit records: up to 24 hours.
• Server technical logs: according to the hosting provider’s retention policy.
• Google Analytics data: [Pending: Retención de datos configurada en GA4 (2 o 14 meses)].
• Preferences in your browser: until you delete or change them.

8. Security

We apply proportionate technical and organisational measures: encrypted connections (HTTPS), a content security policy, server-side data validation, anti-spam protection, credentials kept outside the public directory, restricted access to the mailbox and data minimisation. Form messages are not stored in a website database: they are sent directly to the corporate mailbox. No system is invulnerable; if we detect an incident affecting your data, we will act in accordance with applicable law.

9. Your rights

You can exercise your rights of access, rectification, update and deletion, and withdraw your consent at any time. The procedure is explained in Your data rights.

Data subjects have the right to access their personal data free of charge at intervals of no less than six months, unless a legitimate interest is proven, as set out in section 14, subsection 3 of Argentine Law No. 25,326. The Agency for Access to Public Information (AAIP), as the supervisory authority under Law No. 25,326, is empowered to handle complaints and claims filed by anyone whose rights are affected by non-compliance with personal data protection rules.

10. Minors

The Site is not directed at minors. If you are a minor, do not submit data without the involvement of your legal representatives.

11. Changes to this policy

If we change this policy, we will publish the new version with its update date. If the change affects optional cookies, we will ask for your consent again.