Personal Data Protection Policy General Objectives
Perú Infinite Travel S.A.C. (hereinafter, PIT) is committed to the protection and privacy of its Users’ Personal Data. We strictly comply with the Personal Data Protection Law – Law No. 29733 and its Regulations approved by Supreme Decree No. 003–2013–JUS (the Personal Data Protection Regulations). In alignment with this, the objectives of this Policy are: To establish general guidelines for the Processing and Transfer of Personal Data of our stakeholders. This includes employees, users, clients, and suppliers of PIT. To ensure that PIT strictly complies with the current Personal Data Protection Regulations in Peru.
Definitions
APDP: National Authority for Personal Data Protection.
Information Asset: Any physical document (PD), digital document (DD), and IT applications (APP) that hold value for PIT and/or support or form part of the organization’s activity, process, or business line.
IT application outside the custody of the Systems Unit (AppnoIT): Any information asset oriented towards data processing and administration that is managed by a Unit, and is also hosted within the same Unit or the Systems Unit. This definition includes digital files with programming logic in their content, such as Access databases, SharePoint workflows, among others.
Personal Data Bank: An organized set of Personal Data, automated or non-automated, regardless of the support, whether physical, magnetic, digital, or others to be created, whatever the form or modality of its creation, formation, storage, organization, and access.
Consent: Authorization from the Personal Data Subject for the Data Bank Controller to carry out the Processing and/or Transfer thereof.
Personal Data: Any numerical, alphabetical, graphic, photographic, acoustic information regarding personal habits, or of any other type relating to a natural person, which identifies them or makes them directly or indirectly identifiable through means that can be reasonably used. E.g., names and surnames, DNI/RUC, passport, gender, profession, age, nationality, date of birth, address, telephone number, email address, photograph, signature, voice, etc.
Sensitive Data: Personal Data that refers to physical, moral, or emotional characteristics, facts or circumstances of their emotional or family life, personal habits within the most intimate sphere, information relating to physical or mental health, biometric data that by itself can identify the subject, data concerning racial or ethnic origin, financial income, political, religious, philosophical, or moral opinions or convictions, union affiliation, information related to health or sex life, or others that affect the intimacy of the natural person.
Digital Document (DD): Any information asset containing data in electronic format that requires a computing device for its access and consultation. Any digital file containing programming logic in its content, such as Excel macros, is excluded from this definition.
Physical Document (PD): Any information asset containing data recorded in a tangible format, such as cash receipts, operational control documents, active documents, inactive documents, documents for physical archives, among others.
Data Processor: Any natural or legal person under private law or public entity that, individually or jointly with others, processes Personal Data on behalf of the Personal Data Bank Controller.
Data Subject: The natural person to whom the Personal Data refers.
Data Bank Controller: The natural or legal person under private law or public entity that determines the purpose and content of the Personal Data Bank, its Processing, and security measures.
Transfer: Any transmission, supply, or disclosure of Personal Data, of a national or international nature, to a legal person under private law, a public entity, or a natural person distinct from the Data Subject. Transmission by dissemination or any other form of processing that facilitates access, correlation, or interconnection of Personal Data is not considered a transfer.
Processing: Any operation or technical procedure, automated or non-automated, that allows the collection, recording, organization, storage, conservation, elaboration, modification, extraction, consultation, utilization, blocking, erasure, communication by transfer or dissemination, or any other form of processing that facilitates access, correlation, or interconnection of Personal Data.
Users: Natural persons who can use or use the services offered by PIT.
Scope
Our websites strictly comply with international Internet practices. All personal information collected through our digital channels is for the exclusive use of PIT (Data Bank Controller) and strictly for purposes that serve the proper functioning of this website and the tourist services it provides. This information will not be sold, assigned, or rented to third parties without the express consent of the persons who entered their data. We guarantee the confidentiality of the information provided by our visitors.
The user can access the website’s information without providing any personal data. However, in the event that the user makes an inquiry via email, web form, a reservation, or purchase of our services, the personal information provided by you will be incorporated and processed in a Personal Data Bank whose recipient and Data Bank Controller is PIT, and whose purpose is to provide the information requested by you, as well as to enjoy the advantages associated with its fulfillment.
Our servers save generic information about visitors, such as domain names, time spent on the website, pages viewed, downloads made, and other related data solely for statistical purposes, and use this data to measure how the website is being used and to improve its content. Nevertheless, no other type of browsing data is collected, nor are cookies installed on the users’ equipment without prior notice and consent.
In general, you can visit our websites without telling us who you are or revealing any information about yourself.
+51 984 813 399
info@peruinfinitetravel.com
