Privacy Policy

Andes SolarHash SpA, RUT 78.272.263-8, domiciled at Manquehue Norte 151, office 1205, Las Condes, Santiago, Chile, which operates under the Andes SolarHash brand (“Andes SolarHash” or “we”), is the controller of the personal data it collects to provide its services, manage its website and maintain commercial relationships with clients, prospects and suppliers.

This policy explains which data we process, for what purposes, with whom we share it, how long we keep it and how to exercise your rights. Where the law requires consent, we will request it in a specific, informed and verifiable manner.

• Sale of ASIC cryptocurrency miners, with hosting at the facilities of an operator (BITHASH LIMITED, RAK DAO, United Arab Emirates), or with delivery in Chile without hosting.
• Hosting of the Client’s miners and coordination with the operator, the pool and the operation and consumption reports.
• Commercial service, quotes, technical support, invoicing, educational content and related communications.

We process data in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, proportionality, accuracy, security, confidentiality, accountability and limited retention. We collect only what is reasonably necessary for each purpose and endeavour to keep it accurate and up to date.

4.1 Data you provide to us

• Identification: full name, RUT or identity document, nationality and, only where necessary, other identification details.
• Contact: email address, telephone, address and country of residence.
• Contract and service: miners purchased, serial numbers, hosting conditions, operational information and support requests.
• Pool and wallet: your pool account and the public address of your wallet, when you provide them to configure or validate the service.
• Payment and invoicing: bank, account ownership, receipts, currency, amount and means of payment; company name, RUT, line of business and tax address.
• Verification and compliance: identity details, source of funds and beneficial owner, where necessary to prevent fraud and comply with the law.
• Communications: emails, forms, WhatsApp messages, support records and any information you choose to send us.
• Commercial preferences: consents, subscriptions and records of acceptance or refusal of marketing communications.

4.2 Data we collect automatically

• Technical: IP address, browser, operating system, device, language, date and time of access and security logs.
• Usage: pages visited, links used, approximate session duration, referral source and interaction with forms and with the calculator.
• Cookies and similar technologies: those necessary for the operation of the site and, where applicable and according to your preferences, those for measurement or analytics.

4.3 Data from third parties and public sources

• Banks, payment processors and verification or fraud prevention services, where applicable.
• BITHASH LIMITED, operator of the facility in RAK DAO, United Arab Emirates, and the pool, with respect to the operation and output of the miners.
• Information visible on public blockchains and other lawful public records.

We process personal data to:

• respond to enquiries and prepare quotes and pre-contractual steps;
• enter into, perform, manage and terminate sale and hosting contracts;
• coordinate with the operator the installation, activation and operation of the miners, and issue operation and consumption reports;
• process payments, guarantee deposit refunds, invoices and accounting and tax records;
• verify identity where necessary, prevent fraud, manage risks and comply with legal obligations and requests from authorities;
• respond to support requests, complaints, warranty claims and technical incidents;
• protect the site, accounts and systems, and retain security evidence;
• analyse use of the site and improve content and processes, preferably with aggregated or anonymised information;
• send educational content, news and commercial communications where there is consent or another permitted basis, with the option to request that they stop at any time;
• exercise or defend rights and retain records to evidence contractual or legal obligations.

The legal bases may be consent, the performance of pre-contractual steps or of a contract, compliance with legal obligations and, from the entry into force of Law No. 21.719, legitimate interest where applicable and where the rights of the data subject do not prevail.

Public wallet addresses and transaction identifiers may be personal data when they can reasonably be linked to a person. Confirmed transactions are recorded on public, distributed and immutable blockchains, which Andes SolarHash does not control.

• The Client chooses its pool and its wallet. Rewards are paid by the pool directly to the Client’s wallet; Andes SolarHash neither receives nor distributes them.
• The Client is responsible for providing a compatible, accurate address under its control; a transaction to a wrong address may be irreversible.
• Andes SolarHash cannot delete, modify or hide transactions already recorded on a public blockchain. Exercising rights over our internal records does not alter the blockchain, but may lead to the deletion, dissociation or restriction of the additional data we hold, where legally applicable.
• Andes SolarHash does not hold private keys in custody and does not require access to the Client’s funds.

We do not sell or rent personal data. We may disclose it, on the basis of necessity and proportionality, to the following categories of recipients:

• Operation of the miners: BITHASH LIMITED, operator of the facility in the United Arab Emirates, and providers of power, maintenance, monitoring and logistics, only with the data needed to operate the miners.
• Payments and invoicing: banks, payment processors, invoicing platforms and related technology providers.
• Technology and communications: providers of web hosting, cloud, email, messaging, analytics and cybersecurity.
• Advisers and compliance: professionals and verification or fraud prevention services, subject to confidentiality.
• Authorities and courts: where there is a legal obligation, a competent order or it is necessary to protect rights.
• Corporate transactions: potential acquirers or successors in a reorganisation or sale of assets, with confidentiality measures.

Some third parties act as processors on behalf of Andes SolarHash; others, such as banks, payment processors or pools, determine certain purposes and means themselves and apply their own policies.

Given the international nature of the service, certain data is processed or stored outside Chile, in particular in the United Arab Emirates, where BITHASH LIMITED operates the facility, and in the countries where our technology providers operate. This may include contractual, contact and operational data and the public wallet address, strictly as necessary to provide the service.

We limit the data transferred, assess the providers, require confidentiality and security, and use contractual mechanisms or other permitted safeguards. From 1 December 2026, transfers will comply with the rules of Law No. 19.628, as amended by Law No. 21.719, and with the applicable standards or model clauses.

The site uses cookies necessary for security, navigation and operation. It may also use preference or measurement cookies, depending on the tools enabled and the options you select. Where applicable, the site offers the option to accept, refuse or configure non-essential cookies. Blocking necessary cookies may affect some functions. More detail in the site’s Cookie Policy.

We keep data only for as long as necessary for the stated purpose, to provide the service and to comply with legal or contractual obligations:

• Contracts, operation and support: for the duration of the commercial relationship and for as long as obligations, guarantees, claims or liabilities may exist.
• Accounting, tax and invoicing: for the periods required by the regulations.
• Verification and fraud prevention: for the period necessary for that purpose and for the defence of rights.
• Enquiries from those who do not contract: for a reasonable period from the last interaction, unless you object or request deletion.
• Marketing: until consent is withdrawn, objection is exercised or the data is no longer necessary.
• Technical and security logs: for periods proportionate to the risk, unless there is an investigation or incident.

When data is no longer necessary, it is deleted, anonymised or blocked, unless there is a valid duty or basis to retain it.

Under Law No. 19.628 and, from 1 December 2026, under the amendments of Law No. 21.719, you may exercise the rights that apply:

• Access: to know whether we process your data, to access it and to obtain information about the processing.
• Rectification: to correct inaccurate, outdated or incomplete data.
• Erasure: to request deletion where the legal conditions are met.
• Objection: to request that a given processing not be carried out, in particular for marketing purposes.
• Portability: to request a copy in a structured electronic format and, where technically possible, its transmission to another controller, in the cases provided for by law.
• Blocking: to request that the use of certain data be temporarily restricted where applicable.
• Withdrawal of consent for future processing, without affecting processing carried out before.

To exercise them, write to soporte@andessolarhash.com stating your name, the right you wish to exercise and the details needed to identify your relationship with us. We may request reasonable information to verify your identity, without collecting excessive details. We will respond within the time limits and in accordance with the procedure set by law. You may also turn to the judicial or administrative complaint mechanisms and, where applicable, to the Personal Data Protection Agency.

Our services are intended for persons over 18 years of age. We do not knowingly collect data from minors to enter into contracts. If we detect data of a minor without valid authorisation, we will take reasonable steps to delete it or regularise its processing.

We maintain reasonable technical and organisational measures proportionate to the risk, such as access controls, authentication, secure transmission, backups, event monitoring, supplier management, confidentiality duties and incident response procedures. No system is completely invulnerable. If an incident affecting personal data occurs, we will investigate, contain and mitigate it, and make the notifications required by law. You must protect your credentials and notify us if you suspect unauthorised access.

We do not make decisions based solely on automated processing that produce legal effects or significantly affect a person. If this changes, we will inform you of its general logic, its consequences and the human review mechanisms where required.

The site may link to wallets, pools, blockchain explorers, social networks or other external services. Andes SolarHash does not control their privacy practices; we recommend reviewing their policies.

We may update this policy due to legal, technological or operational changes, publishing the current version with its date. If a change requires new consent or substantially affects the purposes, we will request the corresponding authorisation. Continued use of the site does not replace consent where the law requires it.

• Controller: Andes SolarHash SpA, RUT 78.272.263-8
• Email: soporte@andessolarhash.com
• Address: Manquehue Norte 151, office 1205, Las Condes, Santiago, Chile
• WhatsApp and telephone: +56 9 8505 6880