OSAMMVCOSAMMVC Virtual OfficeEspañol

Privacy Policy — OSAMMVC Virtual Office

This is an English translation provided for reference. In case of any discrepancy, the Spanish-language version prevails.
Version 1.0 — In force since August 1, 2026.

1. Purpose

This Privacy Policy describes how the Obra Social Asociación Mutual Metalúrgica Villa Constitución (OSAMMVC), CUIT 30-70923882-1, with registered office at calle María Perrisol 615, Villa Constitución, Province of Santa Fe (hereinafter "OSAMMVC", "we") collects, uses, retains and protects the personal data of users of the Virtual Office ("the OV", "the Application", "the Service"), both in its web version and in its mobile applications for iOS (App Store) and Android (Google Play).

Data processing is carried out in compliance with the Argentine Personal Data Protection Act No. 25,326 (Ley 25.326), its implementing Decree 1558/2001, its amendments and supplementary provisions, and under the supervision of the Access to Public Information Agency (AAIP).

2. Scope

This Policy applies to any person who accesses or uses the OV as a member, dependent family member, employer, provider or administrative staff, through any channel (web, mobile app, self-service kiosks).

By registering and/or using the Service, the user provides their free, express and informed consent to the processing of their personal data in accordance with this Policy (Section 5, Ley 25.326).

3. Data controller and data processor

The relationship between OSAMMVC and PyP Technologies is governed by a services agreement and by a confidentiality agreement. In its capacity as data processor (Section 25, Ley 25.326), PyP Technologies processes the data on behalf of and according to the instructions of OSAMMVC and is subject to the duty of confidentiality.

OSAMMVC is the party that decides on the purposes and use of the data; PyP Technologies acts as data processor and does not use the data for its own purposes.

4. Personal data we collect

Depending on how the user uses the Service, we may process:

a) Identification and contact data: first and last name, DNI, member number, CUIL/CUIT, date of birth, sex, address, locality, telephone and email.

b) Health data (sensitive category — Section 7, Ley 25.326): information derived from the management of medical appointments, orders/authorizations of services, procedures and services used, digital membership card and coverage. This data is processed with special protection and solely for the purpose of providing and managing the services of the health insurance provider (obra social).

c) Payment data: when the user pays for a service or order, the payment is processed through Mercado Pago. OSAMMVC does not store full card data; it receives from Mercado Pago identifiers of the transaction (payment/order ID, amount, status, method and refund data).

d) Technical and usage data: IP address, device identifiers, push notification token, operating system, pages/features used and diagnostic data, for the purposes of security, support and improvement of the Service.

e) Device permissions (only if the user grants them): push notifications and, when the user expressly initiates it, access to the camera or files to attach documentation. The OV does not access the location or contacts of the device.

5. Purpose of processing

We process data to:

  1. Verify the identity and member status, and enable access to the OV.
  2. Manage appointments (booking, cancellation, rescheduling) and orders/authorizations of services.
  3. Issue and display the digital membership card and coverage information.
  4. Process payments and refunds of services through Mercado Pago.
  5. Send operational notifications (appointment reminders, status of procedures, service notices).
  6. Provide support to the user and handle complaints.
  7. Ensure security, prevent fraud/abuse and make improvements to the Service.
  8. Comply with legal, regulatory and contractual obligations (e.g. Superintendency of Health Services (Superintendencia de Servicios de Salud) and other supervisory bodies).

6. Legal basis and consent

Processing is based on: (i) the consent of the data subject; (ii) the membership relationship that links the user with the health insurance provider; and (iii) the compliance with legal obligations. With respect to health data, its processing is grounded in the exceptions provided for health establishments and professionals (Section 8, Ley 25.326) and in the purpose of providing the medical coverage service.

7. Data transfer and third parties

OSAMMVC does not sell or otherwise trade personal data under any circumstances. Data may be shared only with:

8. Storage and international transfers

The health data and other personal data of members are stored in OSAMMVC's infrastructure, with which the EasyBot platform integrates to operate the OV.

The EasyBot platform and its processing components may operate on infrastructure owned by PyP Technologies or by third parties subcontracted by PyP. In all cases, such infrastructure is located in Argentine territory, corresponds to companies that operate in accordance with current legislation, and maintains adequate levels of cybersecurity and backups.

The only interactions that may involve processing outside Argentina are limited and functional: (i) Mercado Pago (payments/refunds); (ii) push notifications via Google (FCM) and Apple (APNs), limited to the device token and the notice content, without health data; and (iii) Meta's WhatsApp Cloud API channel. In all these cases, the safeguards of Ley 25.326 and the AAIP apply.

9. Data retention

Personal data is retained during the service provision period and for the time required by applicable legal, contractual and regulatory rules (including documentary obligations regarding health matters). Once those periods have expired, the data is deleted or anonymized.

10. Rights of the data subject

In accordance with Ley 25.326, the data subject may exercise their rights of access, rectification, updating and deletion of their data, as well as object to certain processing, by writing to atencionalusuario@osammvc.com.ar or through the OV Support channels.

The data subject has the right to exercise the right of access free of charge at intervals of no less than six months, unless a legitimate interest to that effect is established (Section 14, subsection 3, Ley 25.326).
The ACCESS TO PUBLIC INFORMATION AGENCY, the supervisory body of Ley 25.326, has the authority to handle the reports and complaints filed in relation to non-compliance with the rules on personal data protection.

11. Data security

OSAMMVC and its data processor apply technical and organizational measures to protect data against loss, unauthorized access or misuse (encryption in transit, access control by roles and permissions, and logging of operations). Health data resides in OSAMMVC's infrastructure and the platform's processing is carried out in Argentine territory, with access control, backups and cybersecurity measures. No system is absolutely infallible; in the event of a relevant security incident, action will be taken in accordance with the applicable regulations.

12. Notifications

With the user's consent, the OV may send push notifications (on the web through the browser's notification standard, and in the mobile app through FCM/APNs) and WhatsApp notifications (through Meta's WhatsApp Cloud API), in addition to other operational notices.

The user may disable notifications from the settings of their device/browser or account and, on the WhatsApp channel, unsubscribe (opt-out) at any time. Likewise, they may request the complete deletion of their conversations, which is carried out automatically.

13. Minors' data

The OV is intended for members and their responsible parties. The data of dependent minors is managed by their legal representative/holder member, who declares to have the authority to do so.

14. How to delete the account

Members: may delete their Virtual Office account directly from the app/OV (in-app account deletion, in the Profile section). Account deletion removes access and anonymizes the account data; it does not cancel the membership or the coverage of the health insurance provider, which constitute a separate procedure.

Other profiles (providers/suppliers, administrative and support staff): for operational reasons and legal obligations, their accounts are retained while the relationship subsists; to request cancellation they may write to atencionalusuario@osammvc.com.ar, subject to the applicable retention obligations.

In all cases, the deletion of the account does not affect the retention of data that OSAMMVC must keep by legal obligation (e.g. records of services and payments).

15. Changes to this Policy

OSAMMVC may update this Policy. Modifications are published in this same medium with their effective date. Continued use of the Service implies acceptance of the version in force.

16. Controller / contact details

OSAMMVC — Obra Social Asociación Mutual Metalúrgica Villa Constitución, María Perrisol 615, Villa Constitución, Province of Santa Fe, Argentina. User service: atencionalusuario@osammvc.com.ar — or the Support channel within the Virtual Office.

For inquiries about this Privacy Policy, the exercise of rights or any matter relating to the processing of your data, the user may contact atencionalusuario@osammvc.com.ar or through the Support channel of the Virtual Office.