Protection Of Personal Data | Marfes Tours Peru

Protection of Personal Data

PERSONAL DATA TREATMENT AND PROTECTION POLICY NAME OF THE COMPANY:

PERSONAL DATA TREATMENT AND PROTECTION POLICY

Company: Marfes Tours Peru E.I.R.L.
RUC: 20608521560
Address: Av. Velasco Astete – San Camilo A-3 – Cusco
Mobile: (+51) 958 317 252
Phone: (+51) 974 762 955

Article One: Definitions

AUTHORIZATION: Prior, express, and informed consent of the holder to carry out the processing of personal data.
DATABASE: An organized set of personal data that is subject to processing, regardless of the medium contained.
PERSONAL DATA: Any information related to or that can be associated with one or more determined natural persons.
HOLDER: The natural person whose personal data is subject to processing.
PROCESSING: Any operation on personal data, such as collection, storage, use, circulation, or deletion.
PRIVACY NOTICE: Verbal or written communication regarding the processing of personal data and its purposes.
PUBLIC DATA: Data that is not semi-private or sensitive (e.g., civil status, profession, official gazettes).
SENSITIVE DATA: Data affecting privacy or leading to discrimination (ethnic origin, health, beliefs, biometrics).
TRANSFER: Sending personal data to a external recipient (inside or outside Peru) who is also a data controller.
TRANSMISSION: Communication of data within or outside Peru for processing on behalf of a single controller.

Guiding Principles

In the development, interpretation, and application of Law 1581 of 2012, the following guiding principles will be applied harmoniously:

Purpose: Processing must comply with a legitimate purpose informed to the holder.
Freedom: Processing can only occur with prior, express, and informed consent.
Truthfulness / Quality: Information must be truthful, complete, accurate, up-to-date, and verifiable.
Transparency: Guaranteeing the holder’s right to obtain information about their data at any time.
Restricted Access & Circulation: Processing is subject to limits derived from the law and constitution.
Security: Handled with necessary technical and administrative measures to prevent loss or fraud.
Confidentiality: Guaranteeing information secrecy even after processing activities conclude.

Rights of the Data Holder

The holder of personal data has the following rights:

  • Know, update, and rectify personal data before Marfes Tours Peru.
  • Request proof of the authorization granted to the company.
  • Be informed upon request regarding the specific use made of their data.
  • File complaints with the Superintendency of Industry and Commerce.
  • Revoke authorization or request deletion when principles are not respected.
  • Access their personal data subject to processing free of charge.

Article Two: Duties of Marfes Tours Peru

  • Guarantee full and effective exercise of the right to habeas data.
  • Request and retain a copy of the authorization granted.
  • Inform the holder about the purpose of data collection.
  • Retain information under security conditions preventing unauthorized access.
  • Rectify incorrect information promptly.
  • Process consultations and complaints submitted by holders.
  • Inform authorities about security breaches or risks.
  • Ensure data remains truthful, complete, accurate, and up-to-date.

Article Three: Exceptions

Authorization is not required when:

  • Requested by public/administrative entities by court order.
  • Public data is involved.
  • There is a medical or sanitary emergency.
  • Authorized by law for historical/scientific purposes.
  • Related to the Civil Registry.

Article Four: Exercise of Rights

Rights can be exercised by:

  • The holder (proving sufficient identity).
  • The holder’s heirs (in case of death or incapacity).
  • Authorized representative or attorney.
  • Stipulation for or by third parties.

Article Five: Processing Purpose & Scope

Collected information is used to process, confirm, and fulfill acquired travel services, directly or via third-party suppliers, as well as for marketing, auditing, accounting, and compliance purposes.

By accepting this policy, clients authorize Marfes Tours Peru to collect, store, record, circulate, and process data necessary for execution of services.

Article Six: Protection of Minors

Processing data of children/adolescents is prohibited unless public, respecting their best interests, fundamental rights, and possessing explicit authorization from a parent or legal guardian.

Article Seven: Data Sharing

Information may only be provided to: Holders/heirs, public/administrative entities in legal functions, and authorized third parties.

Articles 8 – 10: Authorization & Storage Procedures

Mechanisms: Authorization is documented via physical/digital collection channels prior to processing.

Storage & Security: Adequate technical/administrative measures are adopted to prevent loss or fraudulent access.

Circulation: Third-party validation requires prior, express authorization from the holder.