1. Data controller
The data controller is Estudio Contable Zurbriggen (trading as Estudio Zurbriggen), Uruguayan tax ID (RUT) 130060430018, the firm of public accountants Fernando Zurbriggen (CCEAU registration 61148) and Matías Zurbriggen (CCEAU registration 225636) (see profiles). CCEAU is Uruguay's professional body for accountants.
- Registered legal address (head office): 25 de Mayo 3183, Fray Bentos, Río Negro, Uruguay.
- Branch office: Av. Eduardo Víctor Haedo 26 esq. Alborada, La Barra, Maldonado, by appointment (see location).
- Contact: consultas@estudiozurbriggen.com · +598 98 213 879.
The Firm's databases are being registered with Uruguay's data protection authority, the Unidad Reguladora y de Control de Datos Personales (URCDP): the client database was filed on 6 August 2026 and the filing for this site's enquiries database is in progress. Registration numbers are published on this page once the URCDP issues them.
2. What data we receive and why
We only receive the data you give us when you contact us through a form on this site, by email or by WhatsApp: your name, your contact details, what you tell us about your enquiry and, in the diagnostic pre-check, the answers you choose. Each submission also records the language, the page you came from and, if you arrived through a campaign, its parameters.
The calculator runs in your browser and only sends data if you ask us to contact you. Unless marked as optional, the details each form asks for are needed to reply.
We use this data to answer your enquiry, prepare a proposal when you ask for one, provide the service you engage us for and meet the legal obligations that come with it. If you asked for material by email, we also use it to send it to you. We do not use it for advertising or combine it with other sources.
The pre-check gives each enquiry an internal, indicative classification. It decides nothing on its own: an accountant reads your case before replying, and you can ask us to explain the criteria.
Browsing: this site does not use cookies. Your browser stores the language you chose and, for the session only, how you reached the site, so it can be attached to the form. The server keeps a technical log of each visit for seven days, with the IP address truncated, for security.
3. Legal basis and consent
We process your data with your consent, which you give by ticking the box on each form. The box is never pre-ticked and the form cannot be sent without it. That consent also covers the transfer to the provider named in the box (articles 9 and 23 of Law 18.331).
When you engage us for a service, the basis is the professional relationship and the legal obligations that come with it, for example towards Uruguay's tax authority (DGI) and social security agency (BPS).
4. How long we keep it
- Enquiries that do not lead to an engagement: up to 12 months from the last contact.
- Proposals not accepted: up to 24 months from when they were sent.
- Submissions stored by the form provider: deleted after 30 days.
- Subscription to materials: until you unsubscribe, or after 24 months without opening any email.
- Clients: for the duration of the relationship and the periods required by tax and commercial rules.
- Server technical logs: 7 days.
When each period ends, the data is deleted or anonymised.
5. Recipients and providers
We do not sell or pass on your data. We only disclose it when a law requires it (DGI, BPS, a court) or when the service you engaged us for needs it, for example a filing on your behalf or coordination with the notary.
These providers process data on the Firm's behalf, only for the task stated:
- Formward (Sweden, European Union): receives the forms and forwards them to the Firm's mailbox.
- GoatCounter (European open-source service): counts visits without cookies, without storing IP addresses and without personal profiles.
- Brevo (France, European Union): sends the Firm's emails and the materials you request.
- Google (Gmail, United States): the Firm's mailbox.
- Namecheap (United States): domain and email forwarding, without storing the email.
- Contabo (United States): website hosting.
- OpenStreetMap Foundation (United Kingdom): the map on the location page.
- WhatsApp (Meta, United States): only if you choose to write to us on that channel.
Uruguay recognises an adequate level of protection in the European Union and the United Kingdom (URCDP Resolution 23/021) and in US companies certified under the Data Privacy Framework, such as Google and Meta (URCDP Resolution 63/023). In other cases, the transfer relies on your consent or is necessary to handle what you asked for (article 23 of Law 18.331).
6. Your rights
You can ask for access to your data and for its correction, update, inclusion or deletion, and challenge an assessment based solely on automated processing (articles 13 to 16 of Law 18.331). Exercising them is free of charge; for access, the law provides for this at six-month intervals, unless there is a legitimate interest (article 14). You can unsubscribe from materials through the link in each email.
Write to consultas@estudiozurbriggen.com with the subject "Personal data", stating the right you want to exercise and the email or phone number you used to contact us. We reply within five business days. If the law requires us to keep a piece of data, we tell you and block it from any other use.
You can also lodge a complaint with the URCDP, the supervisory authority under Law 18.331.
7. Security
The site runs on HTTPS and forms are sent encrypted. Besides its own files, the pages load a single external script: GoatCounter's visit counter. Access to the Firm's email and to client records is limited to the partners, and providers work under contract.
If a security incident occurs, the Firm contains it, reports it to the URCDP when required and notifies you if your data is affected (Decree 64/020). We never ask for passwords, bank credentials or verification codes by form, email or WhatsApp; if a procedure requires acting on your behalf, we tell you the appropriate authorisation mechanism.
8. Professional secrecy
Everything you tell us, by form, email or WhatsApp, is kept in strict confidence and covered by professional secrecy from the first enquiry, even if you never engage us. We use it solely to handle your case. Confidentiality gives way only when a law requires us to report.
9. Changes and contact
If we change this policy, we publish the new version here with its date. The enquiry forms record the version in force together with your consent. For any question about your data, write to consultas@estudiozurbriggen.com or call +598 98 213 879.
Version 3.0, in force since 7 October 2026. Earlier versions are available on request.