Latin America privacy rights

This page applies to residents of Brazil, Mexico, Argentina, Chile and Colombia. The mechanics of exercising these rights are the same everywhere; the names and deadlines differ.

Every right listed here is free to exercise and requires no explanation from you.

Under Article 18 of the LGPD you hold the following rights over your personal data:

• Confirmation that processing exists.
• Access to the data.
• Correction of incomplete, inaccurate or out-of-date data.
• Anonymisation, blocking or deletion of unnecessary or excessive data.
• Portability to another provider.
• Deletion of data processed on the basis of consent.
• Information about the public and private entities with which we have shared data.
• Information about the option to withhold consent and the consequences of doing so.
• Withdrawal of consent.

Under Article 41 of the LGPD we publish a channel for contacting the person responsible for data protection. It receives and handles requests from data subjects and from the national supervisory authority.

If you believe your rights have been infringed, you may complain to Brazil's National Data Protection Authority (ANPD) at gov.br/anpd. We would encourage you to come to us first — that usually resolves matters faster.

This page, together with the Privacy Policy, constitutes our privacy notice (Aviso de Privacidad). You hold the ARCO rights:

• Access (Acceso) — to learn what personal data of yours we process and for what purposes.
• Rectification (Rectificación) — to have inaccurate or incomplete data corrected.
• Cancellation (Cancelación) — to have your data removed from our systems.
• Opposition (Oposición) — to object to a particular processing of your data.

We answer ARCO requests within 20 working days and, where a request is granted, act on it within a further 15 days, in accordance with Article 32 of the LFPDPPP.

Argentina's Law 25.326, Chile's Law 19.628 and Colombia's Law 1581/2012 grant substantially the same rights of access, correction, deletion and objection. We handle those requests through the same process and on the same timetable.

The Article 18(VII) LGPD right to know who we have shared data with is satisfied in advance: the full list of our sub-processors, with their purposes and locations, is published on the Sub-processors page. You do not need to file a request — the information is public and is updated whenever it changes.

Data is stored in the European Union (Ireland). For data subjects in Latin America that constitutes an international transfer. The EU provides a level of protection recognised under both Brazilian and Mexican law. The details are set out on the Sub-processors page.

Submit a request from the Privacy and data screen in your account, or write to privacy@buildinghost.eu. We may need to verify your identity before acting on a request.