AAETAV · Institutional Portal
Privacy Policy
Last updated: January 1, 2025
AAETAV complies with Personal Data Protection Law 25,326 of the Argentine Republic and its Regulatory Decree 1558/2001. Its database is registered with the National Directorate for Personal Data Protection (DNPDP).
1Data Controller
The controller of your personal data is the Asociación Argentina de Ecoturismo y Turismo Aventura (AAETAV), domiciled in the Autonomous City of Buenos Aires, Argentine Republic.
The Data Protection Officer (DPO) can be contacted at: info@aaetav.org.ar
2Data We Collect
We collect the following types of personal and/or business data:
📋 Identification data
Full name, DNI/CUIT/CUIL (national ID/tax ID), date of birth, nationality.
📬 Contact data
Postal address, phone number, email address.
🏢 Professional data
Company, position, professional licenses and registrations, membership category.
💳 Financial data
History of membership fee and enrollment payments. We do not store credit card data; payments are processed by one of the following gateways: AstroPay Latam / Mercado Pago / Getnet.
📊 Usage data
IP address, browser type, pages visited, date and time of access, activity logs on the portal.
🎓 Academic data
Course enrollments, grades, certificates issued, accredited training hours.
3Purposes of Processing
| Purpose | Legal Basis | Retention |
|---|---|---|
| Membership management | Performance of contract | 10 years after membership ends |
| Course enrollment and certificate issuance | Performance of contract | Indefinite (evidentiary value) |
| Payment processing | Performance of contract | 10 years (legal obligation) |
| Sending newsletters and communications | Consent | Until consent is withdrawn |
| Portal improvement (analytics) | Legitimate interest | 2 years |
| Compliance with legal obligations | Legal obligation | As required by applicable regulations |
4Email and Newsletter Communications
AAETAV will send electronic communications based on the type of user:
- Active members:Receive transactional notifications (receipts, renewals) and the institutional newsletter. Transactional notifications cannot be disabled.
- Students:Receive notifications about their enrollments and certificates, and the training newsletter.
- General subscribers:Receive only the newsletter they voluntarily subscribed to.
📧 Newsletter Unsubscription — Procedure
In accordance with Law 25,326, you may withdraw your consent to receive newsletters at any time, free of charge and without having to give a reason:
- 1Link in every email: All newsletters include an unsubscribe link in the email footer. One click will unsubscribe you automatically.
- 2User dashboard: Go to My Account → Communication Preferences and turn off the "Institutional Newsletter" toggle.
- 3By email: Send an email to comunicaciones@aaetav.org.ar with the subject "UNSUBSCRIBE NEWSLETTER". Your request will be processed within a maximum of 48 business hours.
Transactional communications (payment confirmations, expiration alerts, security notifications) cannot be disabled, as they are necessary to provide the service.
5Data Transfers
AAETAV does not sell, rent or transfer your personal data to third parties for commercial purposes. Data may be shared only with:
- ▸Mercado Pago S.R.L., as payment processor, under its own privacy policies.
- ▸Technology service providers (hosting, email) under confidentiality agreements and acting as data processors.
- ▸Public bodies when required by law or court order.
- ▸AAETAV affiliated entities (CAME, FAEVYT, CAT) solely for institutional purposes and with your prior consent where applicable.
6Your Rights (ARCO)
Under Law 25,326, you have the right to:
🔍 Access
Know what personal data of yours we hold.
✏️ Rectification
Correct inaccurate, incomplete or outdated data.
🚫 Erasure
Request the deletion of your data when it is no longer necessary.
⛔ Objection
Object to the processing of your data for certain purposes.
To exercise your rights, send your request to privacidad@aaetav.org.ar stating your full name, ID number (DNI) and the right you wish to exercise. AAETAV will respond within the time limits set by the DNPDP.
The DNPDP acts as the supervisory authority. If you believe your rights have not been respected, you may file a complaint at www.argentina.gob.ar/aaip/datospersonales.
7Data Security
AAETAV implements technical and organizational measures to protect your personal data against unauthorized access, loss or accidental destruction:
- 🔒Encryption in transit using TLS 1.3.
- 🔒Passwords stored with bcrypt hashing (cost factor 12).
- 🔒Digital certificates encrypted with AES-256-GCM.
- 🔒Access to production data restricted to authorized personnel.
- 🔒Encrypted backups with periodic verification.
- 🔒Access auditing and activity logging.
8Cookies
This portal uses technical cookies necessary for its operation and analytics cookies to improve the experience. We do not use advertising or third-party tracking cookies.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| next-auth.session-token | Authenticated user session | Session | Necessary |
| next-auth.csrf-token | Anti-CSRF security | Session | Necessary |
| aaetav-preferences | Language and UI preferences | 1 year | Functional |