Data Deletion Procedure | VIPER

1. Introduction

The Data Deletion Procedure of VIPER SpA ("VIPER") establishes the guidelines and steps to be followed for the secure and complete deletion of personal data stored on our platforms, including VIPER App, VIPER MASS, VIPER ONE, VIPER GO and VIPER CREW. This procedure is applicable to data from end users, as well as data from clients who contract VIPER services. VIPER is committed to ensuring the privacy and protection of its clients' data, complying with current data protection regulations.

2. Scope

This procedure applies to all personal data stored by VIPER, including but not limited to identification data, contact information, emergency records, and any other relevant data captured by our platforms. Data deletion may only be requested by the contracting party of VIPER services, that is, the entity that has a current contractual agreement with VIPER.

3. Data Deletion Request

3.1. Request Process

The data deletion request must be made by the authorized representative of the contracting entity, through the following channels:

Email: contacto@viper.cl, using a registered and verified email account.
Ticket System: Through the VIPER support ticket system.

3.2. Information Required for the Request

The request must include:

Name of the Contracting Entity: Identification of the entity that contracted VIPER services.
Requester Contact Details: Name, position and contact details of the authorized representative.
Details of Data to be Deleted: Detailed description of the specific data to be deleted.
Legal or Contractual Justification: If the request is motivated by legal or contractual requirements, a detailed explanation must be provided.

4. Verification Process

Before proceeding with data deletion, VIPER will carry out a verification process to confirm the authenticity and authority of the requester. This process includes:

Identity Verification: Confirmation of the requester's identity through previously registered data.
Authority Verification: Confirmation that the requester has the necessary authority to request data deletion on behalf of the contracting entity.
Legal Obligations Review: Verification that the data deletion does not contravene any current legal or contractual obligation.

5. Data Deletion Execution

Once verification is complete, the requested data will be deleted according to the following steps:

5.1. Physical and Logical Deletion

Physical Deletion: Deletion of data from physical storage systems, including servers and backup devices.
Logical Deletion: Deletion of references to the data in databases and other information management systems.

5.2. Encryption and Overwriting

Encryption: Application of encryption techniques to render the data unusable before deletion.
Overwriting: Performing a multiple data overwriting process to ensure that deleted data cannot be recovered.

5.3. Deletion Confirmation

Upon completing the deletion process, VIPER will provide written confirmation to the requester, detailing the data deleted and the method used. This confirmation will include a compliance report certifying that the deletion was carried out in accordance with VIPER's security standards.

6. Exceptions and Limitations

Data deletion will be subject to the following exceptions and limitations:

Legal Obligations: VIPER reserves the right to retain data that is subject to legal retention requirements.
System Integrity: In cases where data deletion may compromise system integrity or service operability, VIPER reserves the right to adopt alternative measures, such as data anonymization.

7. Procedure Review and Update

VIPER is committed to reviewing and updating this Data Deletion Procedure periodically, to ensure its adequacy with current regulations and industry best practices. Updates will be communicated to clients through VIPER's official channels.