Protection of Personal Data
PERSONAL DATA TREATMENT AND PROTECTION POLICY NAME OF THE COMPANY:
PERSONAL DATA TREATMENT AND PROTECTION POLICY
Article One: Definitions
Guiding Principles
In the development, interpretation, and application of Law 1581 of 2012, the following guiding principles will be applied harmoniously:
Rights of the Data Holder
The holder of personal data has the following rights:
- Know, update, and rectify personal data before Marfes Tours Peru.
- Request proof of the authorization granted to the company.
- Be informed upon request regarding the specific use made of their data.
- File complaints with the Superintendency of Industry and Commerce.
- Revoke authorization or request deletion when principles are not respected.
- Access their personal data subject to processing free of charge.
Article Two: Duties of Marfes Tours Peru
- Guarantee full and effective exercise of the right to habeas data.
- Request and retain a copy of the authorization granted.
- Inform the holder about the purpose of data collection.
- Retain information under security conditions preventing unauthorized access.
- Rectify incorrect information promptly.
- Process consultations and complaints submitted by holders.
- Inform authorities about security breaches or risks.
- Ensure data remains truthful, complete, accurate, and up-to-date.
Article Three: Exceptions
Authorization is not required when:
- Requested by public/administrative entities by court order.
- Public data is involved.
- There is a medical or sanitary emergency.
- Authorized by law for historical/scientific purposes.
- Related to the Civil Registry.
Article Four: Exercise of Rights
Rights can be exercised by:
- The holder (proving sufficient identity).
- The holder’s heirs (in case of death or incapacity).
- Authorized representative or attorney.
- Stipulation for or by third parties.
Article Five: Processing Purpose & Scope
Collected information is used to process, confirm, and fulfill acquired travel services, directly or via third-party suppliers, as well as for marketing, auditing, accounting, and compliance purposes.
By accepting this policy, clients authorize Marfes Tours Peru to collect, store, record, circulate, and process data necessary for execution of services.
Article Six: Protection of Minors
Processing data of children/adolescents is prohibited unless public, respecting their best interests, fundamental rights, and possessing explicit authorization from a parent or legal guardian.
Article Seven: Data Sharing
Information may only be provided to: Holders/heirs, public/administrative entities in legal functions, and authorized third parties.
Articles 8 – 10: Authorization & Storage Procedures
Mechanisms: Authorization is documented via physical/digital collection channels prior to processing.
Storage & Security: Adequate technical/administrative measures are adopted to prevent loss or fraudulent access.
Circulation: Third-party validation requires prior, express authorization from the holder.
Data Retention (Art. 12)
Personal data will be stored for up to 15 years from the last processing date to comply with legal obligations.
Exercise Rights & Queries (Art. 11 & 14)
To request deletion, correction, or updates, email us at:
gerencia@marfestoursperu.com