PERSONAL DATA PROTECTION POLICY – Hiking and Adventures.com

HIKING AND ADVENTURES

1. Purpose

Hiking and Adventures, committed to protecting the privacy of its customers, employees, and suppliers, hereby establishes this Personal Data Protection Policy to ensure the proper processing of personal information collected during the provision of its tourism services.

The company is committed to complying with the provisions established in Peruvian Law No. 29733 – Personal Data Protection Law, its Regulations approved by Supreme Decree No. 003-2013-JUS, and all other applicable complementary regulations.

2. Scope

This Policy applies to all personal information collected through:

Website.
Social media platforms.
WhatsApp.
Email.
Physical or digital forms.
Reservations made through travel agencies or direct customers.
Digital booking and sales platforms.

3. Personal Data That May Be Collected

The company may collect, among others:

Full name.
National Identity Document (DNI) or Passport.
Nationality.
Date of birth.
Telephone number.
Email address.
Residential address.
Information required to process service reservations.
Medical information only when strictly necessary to ensure the participant’s safety during tourism activities.

4. Purpose of Data Processing

Personal data will be processed solely for the following purposes:

Managing reservations.
Coordinating the provision of tourism services.
Issuing invoices and payment receipts.
Providing information requested by customers.
Handling inquiries and complaints.
Complying with legal obligations before the competent authorities.
Improving the quality of services.
Sending promotional communications only with the express consent of the data subject.

5. Confidentiality

All personal information shall be treated as confidential and accessed only by duly authorized personnel.

The company shall not sell, transfer, or disclose personal information to third parties except where required by law or expressly authorized by the data subject.

6. Information Security

Hiking and Adventures shall implement appropriate administrative, technical, and organizational measures to prevent:

Unauthorized access.
Unauthorized alteration of information.
Loss of personal data.
Misuse of personal information.

7. Rights of the Data Subject

Data subjects may exercise, free of charge, the following rights:

Access.
Rectification.
Cancellation.
Objection (ARCO Rights).

They may also request information regarding the processing of their personal data through the company’s official customer service channels.

8. Data Retention

Personal data shall be retained only for as long as necessary to fulfill the purposes for which it was collected or for the period required by applicable law.