Privacy Policy

1. Privacy Policy

The Servicio Nacional de Migraciones (“SERMIG”) informs all persons using its website and the websites of its shared services of the following Privacy Policy (“Policy”), which aims to:

• Guarantee the constitutional right to respect for and protection of private life, as well as the protection of personal data (pursuant to Decree No. 100, Article 19, No. 4), ensuring that data processing complies with Law No. 19,628 on the Protection of Private Life.

• Comply with the duty to adopt, maintain, and declare a privacy policy for the systems and websites of State Administration bodies.

• Inform individuals about how browsing data and personal data are collected and processed on SERMIG websites.

• Inform personal data subjects of the rights they may exercise regarding their data, the safeguards SERMIG implements to guarantee their protection, and all other relevant information in this regard.

• Promote a data culture among citizens.

This Policy is of general application to all SERMIG websites, unless explicitly stated otherwise.

2. Data Processing

Data processing is the collection and handling of any type of data to transform it, through processing, into usable information. Through technical operations or procedures, data processing allows those conducting it to use the data for various administrative management tasks, services, analytics, general user experience studies, and the generation of value or knowledge.

Personal data processing, therefore, is the application of these collection and processing operations to personal data, which Law No. 19,628 on the Protection of Private Life defines as: “any operation or complex of operations or technical procedures, automated or non-automated, that allow for the collection, storage, recording, organization, elaboration, selection, extraction, comparison, interconnection, dissociation, communication, assignment, transfer, transmission, or cancellation of personal data, or its use in any other form.”

    2.1. Why and for what purpose does SERMIG process data?

SERMIG processes data for the following purposes:

• To measure, process, analyze, and report on the use, adoption, and implementation of its websites and shared services.

• To improve the quality of information, accessibility, operational continuity, and other usability conditions of its websites and shared services.

• To provide public services through digital technologies.

• To efficiently exchange data with other State Administration bodies within their legal competencies.

• To conduct system security analyses and monitor improper use of its websites that affects the security, availability, and integrity of SERMIG’s websites and shared services, or that violates their terms and conditions.

    2.2. What is the legal basis for SERMIG’s data processing?

The legal basis for the data processing carried out by SERMIG is found in Article 20 of Law No. 19,628, according to which public agencies may process personal data regarding matters within their scope of competence without requiring the consent of the data subject.

  2.2.1. Data processing through interoperability

Interoperability is the ability of organizations to exchange data and information from various sources through information technology systems, using common standards efficiently to minimize errors and generate value in the management of participating agencies. Because interoperability may involve interconnecting, communicating, assigning, transferring, or transmitting data, it is a form of personal data processing.

In addition to being beneficial to both State Administration bodies and citizens, interoperability is a duty for State Administration bodies, as it guarantees individuals’ right to be exempt from submitting information that is already in the possession of any State Administration body—a right enshrined in Article 17, paragraph d) of Law No. 19,880, which establishes the basis for administrative procedures governing the acts of State Administration bodies.

The legal basis for data interoperability is found in Articles 16 bis, 17 paragraph d), and 24 bis of Law No. 19,880; in the principles of efficiency, efficacy, and coordination of Law No. 18,575, Constitutional Organic Law on General Bases of the State Administration; and in Articles 5 and 20 of Law No. 19,628.

  2.3. Capture or collection mechanisms for personal data

A data capture or collection mechanism is the means by which data generated when browsing or using SERMIG websites is recorded for subsequent processing.

These mechanisms are:

    2.3.1. Automatic mechanisms

These are mechanisms that record data in an automated and/or autonomous manner by a machine, software, or algorithm using predetermined IT processes and techniques. It is not possible to identify an individual through this data, as it is always collected in a form dissociated from the person who generated the browsing data.

SERMIG uses these mechanisms to collect activity patterns, visit traffic, browsing patterns, click-through indicators, geolocation, usability, and audience metrics on its websites to establish criteria that improve content and facilitate the use of SERMIG websites, shared services, and the information contained therein.

This information will be recorded and stored anonymously/dissociated from the users’ identity, for which IP addresses and any other data permitting identification will be anonymized. User geolocation will only record the country and city of connection. SERMIG will not record or store the exact physical location of users of its websites and shared services.

SERMIG reserves the right to use any automatic data collection mechanisms it deems necessary, provided they respect the security and privacy of the data for which it is responsible, for the purposes described in this section.

2.3.2. Manual mechanisms

These are mechanisms that record data through an explicit request or requirement for information addressed to a person. That is, the data subject voluntarily provides the information when requested by a website and/or shared service.

SERMIG uses these mechanisms to authenticate users and carry out processes, procedures, applications, or other management tasks through its websites and/or shared services.

The manual data collection mechanisms used by SERMIG are:

• The official authentication mechanism, ClaveÚnica.

• Form submissions for procedures and transactions offered through the shared service SIMPLE, or whichever service is designated for use by the agency.

3. Data Access and Storage

Data collected through the use of SERMIG websites will be restricted to limited access, even among its staff. SERMIG will not transmit this data to third parties, except as permitted by law, by order of the Courts of Justice, or as established in this Privacy Policy.

Currently, SERMIG utilizes self-administered databases, physical storage devices, and Cloud storage services. Information regarding the providers of these services and current active contracts is public and available on Mercado Público.

When SERMIG hosts its websites, provides shared services, or stores data through third-party service providers that have their own privacy policies, SERMIG will publish a link to said privacy policies.

     3.1. Collaboration with other public entities

Where applicable, SERMIG may:

• Provide public or governmental entities with statistical information derived from activity patterns, navigation, audience metrics, and general characterizations of SERMIG’s shared services.

• Communicate personal data to other State bodies when strictly necessary for the performance of their legal duties, pursuant to Article 20 of Law No. 19,628.

• Share statistical information derived from personal data with third parties when individual data subjects cannot be identified from such data (dissociated data), in accordance with the Law.

4. Data Subject Rights

Data subjects who visit or use SERMIG websites and shared services shall have the right to:

• Request information regarding data related to their person, its origin and recipient, the purpose of its storage, and the specific individuals or entities to which their data is regularly transmitted.

• Request the rectification or modification of their personal data if it is incorrect or out of date, where applicable.

• Request the deletion or cancellation of the provided data whenever desired, provided it is legally applicable.

• Request information regarding the databases managed by the agency, the legal basis for their existence, their purpose, types of data stored, and a description of the universe of individuals included.

Individuals may exercise these rights through the personal data settings and/or update forms available on SERMIG websites, or through the contact mechanisms described in the following section.

Data subjects wishing to exercise these rights must duly verify their identity in the manner requested by SERMIG to ensure proper protection of their right to privacy.

5. Contact Mechanisms

For any additional or complementary information, or to exercise the rights guaranteed under Law No. 19,628 (or any legislation replacing it), users of SERMIG websites and shared services may submit a Transparency Request (Solicitud de Transparencia), as appropriate.

6. Changes to the Privacy Policy

SERMIG shall update or modify this Privacy Policy whenever necessary to reflect any changes in its data processing practices clearly and in a timely manner. When significant changes occur, users will be notified prominently on SERMIG websites. We recommend periodically reviewing SERMIG websites and shared services to stay informed about how we manage and protect your personal information.

Last updated: October 2026. Continued use of the portal implies automatic acceptance of any future modifications to these terms.