Privacy Policy

This Privacy Policy explains how the Central Bank of the Argentine Republic (BCRA) processes the personal data that is collected and processed for the purpose of accessing and using its institutional website and the online services offered through it. Its objective is to provide clear and transparent information on the purposes of the processing, the applicable legal bases, the rights of the data subjects and the channels available to exercise them.

1. Scope of application

This Privacy Policy describes the processing of personal data by the Central Bank of the Argentine Republic (BCRA) for the purpose of accessing and using its institutional website and the forms, online services and other digital resources offered through said site.

This policy applies exclusively to the BCRA website and the services that are integrated into it. The specific data processing conditions corresponding to other digital environments (e.g. mobile applications or official profiles on social networks) will be informed in each case on the corresponding channels.

2. Data controller

The person responsible for the processing of personal data is the Central Bank of the Argentine Republic (BCRA).

The BCRA will process the personal data in accordance with Law No. 25,326 on the Protection of Personal Data, its regulatory decree and the applicable complementary regulations.

3. Data that may be collected

Depending on the type of service used, the BCRA may process the following categories of data:

Identification and contact data: name and surname, type and number of document, email address, telephone number, address, organization to which you belong, position or function.

Site usage data: information about the interaction with the site (pages visited, date and time of access, browser and operating system used, IP address, among others), which is used for statistical purposes and to improve the service.

Data associated with specific queries or procedures: additional information that the user decides to provide when filling out contact forms, subscription forms, registration for activities, sending comments or other online procedures.

When the entry of personal data is required, the form itself will be informed of the mandatory data in order to be able to manage the request or the corresponding service.

4. Purposes of processing

Personal data are processed for the following purposes, as appropriate in each case:

Management of queries and requests: attend to and respond to queries, complaints, suggestions, requests for information or procedures submitted through the site.

Management of subscriptions and sending of information: to administer subscriptions to newsletters, reports or other informative materials made available by the BCRA.

Organization of activities and participation in events: manage registrations, accreditations, communications and logistics related to conferences, training, seminars or other activities organized by the BCRA.

Improvement of the site and digital services: compiling aggregate statistics on the use of the site, detecting needs for improvement and monitoring the correct functioning of the services offered.

Compliance with legal and regulatory obligations: meet requirements from control bodies, competent authorities and other obligations arising from current regulations.

In each form or service, this information may be complemented with specific details of purpose, where appropriate.

5. Legal bases for processing

The processing of personal data carried out by the BCRA is based on the legal bases provided for by Law No. 25,326 and its complementary regulations, including:

The consent of the data subject, when required.

Compliance with legal obligations or institutional commitments of the BCRA.

The exercise of the Bank’s own powers in its capacity as central bank of the Argentine Republic.

Other cases enabled by the personal data protection regulations in which consent is not required for processing.

6. Data retention

Personal data will be kept for as long as necessary to fulfil the purposes for which they were collected and, where appropriate, for the additional periods required or authorised by the applicable regulations (for example, in terms of archives, document management or prescription of actions).

Once these periods have elapsed, the BCRA will adopt the pertinent measures for its deletion, anonymization or archiving under the conditions established by the regulations in force.

7. Communication and transfer of data

The BCRA does not transfer or communicate personal data to third parties, except in the following cases:

Existence of a legal, regulatory or contractual obligation that requires it.

Duly substantiated requirements from competent judicial or administrative authorities.

Service providers acting in the name and on behalf of the BCRA within the framework of contracts that contemplate confidentiality and personal data protection obligations, in accordance with current regulations.

Under no circumstances will personal data be commercialized.

8. Security measures

The BCRA implements reasonable technical and organizational measures aimed at protecting the integrity, confidentiality and availability of the information published on the site and of the personal data that may be processed as a result of its use.

However, like any system that operates on information and communication technologies, the operation of the site may be affected by risks or vulnerabilities beyond the control of the organization. In this regard, the BCRA maintains permanent processes of review and improvement of its security mechanisms to mitigate these risks.

9. Rights of data subjects

The persons whose data are processed by the BCRA may exercise, under the terms provided by Law No. 25,326, the following rights:

Access your personal data.

Request the rectification, updating or, where appropriate, deletion of inaccurate, incomplete or outdated data.

Request, where appropriate, accreditation of the legitimacy of the processing.

The exercise of these rights is free of charge for the owner of the data, under the terms of the applicable regulations.

10. Exercise of rights and contact channels

To exercise their rights or make inquiries related to this Privacy Policy and the processing of personal data, users may communicate through the channels enabled by the BCRA, including:

The contact form available on the institutional website.

Other channels that the BCRA specifically indicates in certain forms or services.

The request must indicate, at least, name and surname, means of contact, a clear description of the order and, where applicable, the documentation that supports the request.

11. Supervisory Authority

The Agency for Access to Public Information (AAIP) is the enforcement authority of Law No. 25,326 in the Argentine Republic and is in charge of dealing with claims and complaints related to the processing of personal data.

Notwithstanding the foregoing, users are recommended to first contact the BCRA through the channels indicated in the previous section so that the Bank can address their requests or concerns.

12. Updates to this Policy

The BCRA may modify or update this Privacy Policy when it deems it necessary, for regulatory, technical, service improvement or other relevant reasons.

Modifications will be published in this same section and will be effective from the moment of their publication. It is recommended to periodically review its contents.

Last updated: December 2025