Privacy Policy | VIPER

1. Introduction

Welcome to VIPER, a comprehensive solution developed by VIPER SpA for emergency management and coordination. VIPER is committed to protecting the privacy of its users and ensuring that their personal information is handled securely and responsibly. This Privacy Policy details the types of data we collect, how we use and protect them, and the rights our users have regarding their data. By using our services, you accept the terms and conditions of this policy.

2. Data We Collect

VIPER collects different types of personal and non-personal data to provide and improve our services. Below are the types of data we collect through our various platforms:

VIPER App:

Identification Data: Includes the users' national ID number (RUT or equivalent), used for authentication and identity verification.
Account Data: Includes the channel and password used to join specific channels within the application. These channels may be, for example, from a fire department or another emergency response group.
Communication Data: Information generated from surveys and feedback, such as availability to attend an emergency or images attached by users.

VIPER MASS:

Contact Information: We collect first name, last name, position, mobile phone number and email address to facilitate mass communication and coordination in emergency situations.
Communication History: We store a complete record of communications sent, including content, recipients and delivery statuses.

VIPER ONE:

Emergency Data: Includes information about reported emergencies, such as the caller's name and phone number, type of emergency and location. Additionally, the exact location of the incident can be obtained through a geolocation link.
Third-Party Data: Information received from third-party GPS APIs, including the location of emergency vehicles.

VIPER GO:

Location Data: We collect GPS data to track the location of emergency vehicles.
Usage Data: Information about how users interact with the application, used to improve the user experience.

VIPER CREW:

Personal Data: Detailed information about emergency personnel and those affected by incidents, including first name, last name, national ID, address, and details of injuries or damages. Data from other responders and specific details of each emergency are also stored.
Usage Data: Information about how users interact with the application, used to improve the user experience.

3. Use of Data

The data collected by VIPER is used for a variety of purposes, including but not limited to:

Service Provision: We use the data to provide and improve our services, ensuring efficient emergency management and better coordination of response teams.
Authentication and Security: Identification data is used to verify user identity and ensure the security of our platforms.
Analysis and Improvements: We analyze usage and behavioral data to improve functionality and user experience in our applications.
Legal Compliance: In some cases, we may use the data to comply with legal or regulatory obligations, including cooperation with legal authorities in emergency-related investigations.

4. Sharing Data with Third Parties

At VIPER, our users' privacy is paramount. We do not share personal data with third parties, except in the following circumstances:

Service Providers: We use third-party services, such as AWS for data storage and NEXMO, TWILIO, AWS SES, and CELCOM for communications. These providers are subject to our privacy policies and are required to protect our users' information.
Legal Authorities: We may share information with legal authorities if necessary to comply with the law, respond to legal processes or protect the rights, property and safety of VIPER and its users.

5. Data Security

VIPER is committed to protecting its users' personal information by implementing technical and organizational security measures. These include:

SSL Encryption: All data transmitted through our platforms is protected by SSL encryption, ensuring the security of information in transit.
Key Management: We use AWS Secret Manager for secure key and credential management.
Security Best Practices: We implement security audits and ethical hacking practices to identify and mitigate potential vulnerabilities.
Third-Party Data Security: We use service providers that meet high security standards, such as Twilio for video calls, ensuring that sensitive data is protected.

6. Data Retention

Data retention at VIPER is indefinite, unless the client explicitly requests its deletion and the legislation allows it. Stored data includes contact information, communications and emergency records. We have a documented procedure for data deletion, which is activated upon request from the contracting client. This procedure ensures that deletion is carried out securely and in compliance with current regulations, guaranteeing the protection of privacy and data integrity.

7. User Rights

VIPER users have the right to:

Access their personal data and receive a copy thereof.
Rectify any inaccurate or incomplete data.
Request the deletion of their personal data, provided there are no legal obligations requiring its retention.
Object to the processing of their personal data on legitimate grounds.

Users may exercise these rights by contacting us at contacto@viper.cl. We are committed to responding to all user rights requests within a reasonable timeframe and in compliance with applicable laws.

8. Jurisdiction and Legislation

This Privacy Policy is governed by the laws of Chile. Any dispute related to this policy or the use of our services shall be resolved in the courts of Santiago de Chile. VIPER does not have a legal presence in any other country, operating exclusively through local distributors. In the event of conflicts between local laws and Chile legislation, the latter shall prevail.

9. Amendments to the Privacy Policy

VIPER reserves the right to modify this Privacy Policy at any time. Any changes will be notified to users through our usual communication channels, such as emails or notifications in our applications. Changes will take effect immediately upon publication, unless otherwise indicated.

10. Contact

If you have questions or concerns about this Privacy Policy or about how we handle your personal information, you may contact us at:

VIPER SpA
Email: contacto@viper.cl
Address: Brown Norte 100, of 303, Ñuñoa, Santiago de Chile.