Personal Data Protection Policy Okidoki Travel Peru

1. General Objectives:

OKIDOKI TRAVEL PERU is committed to the protection and privacy of the Personal Data of Users in compliance with the Personal Data Protection Law – Law No. 29733 and its Regulations approved by Supreme Decree No. 003 – 2013 – JUS (*the Personal Data Protection Standards in Peru*).

In line with this, this Policy has the following objectives:

To establish the general guidelines for the Processing and Transfer of Personal Data of interest groups such as collaborators, users, clients and suppliers of OKIDOKI TRAVEL PERU.

To ensure that OKIDOKI TRAVEL PERU complies with the Personal Data Protection Standards.

2. Definitions:

APDP: National Authority for the Protection of Personal Data.

Information Asset: Any physical document (DF), digital document (DD) and computer applications (APP) that have a value for OKIDOKIPERUTRAVEL and/or support or are part of the activity, process or business line of the organization.

Computer application outside the custody of the Systems Unit (AppnoIT): Any information asset oriented to the processing and administration of data that is managed by a Unit, and is also hosted in the same Unit or in the Systems Unit.

This definition includes digital files with programming logic in their content, such as, for example: Access databases, SharePoint workflows, among others.

Personal Data Bank: An organized set of automated or non-automated Personal Data, regardless of the support, whether physical, magnetic, digital or others that are created, whatever the form or modality of its creation, formation, storage, organization and access.

Consent: Authorization of the Holder of the Personal Data for the Holder of the Personal Data Bank to process and/or transfer the same.

Personal Data: Numeric, alphabetical, graphic, photographic, acoustic, personal habits information, or any other type of information concerning a natural person, which identifies him or makes him identifiable directly or indirectly through means that can be reasonably used.

For example: names and surnames, ID/RUC, passport, sex, profession, age, nationality, date of birth, address, telephone number, email, photograph, signature, voice, etc.

Sensitive data: Personal data relating to physical, moral or emotional characteristics, facts or circumstances of emotional or family life, personal habits in the most intimate sphere, information relating to physical or mental health, biometric data that can identify the holder, data relating to racial or ethnic origin, economic income, political, religious, philosophical or moral opinions or convictions, union membership, information related to health or sexual life or other information that affects the privacy of the natural person.

Digital Document (DD): Any information asset that contains data in electronic format, and that requires a computer device for access and consultation. This definition excludes any digital file that contains programming logic in its content, such as Excel macros.

Physical Document (PD): Any information asset that contains data recorded in a tangible format such as cash receipts, operational control documents, active documents, passive documents, documents for physical archives, among others.

Person in charge of the Personal Data Bank: Any natural person, legal person under private law or public entity that, alone or acting jointly with another, carries out the Processing of Personal Data on behalf of the Owner of the Personal Data Bank.

Owner of Personal Data: Natural person to whom the Personal Data corresponds.

Owner of the Personal Data Bank: Natural person, legal person under private law or public entity that determines the purpose and content of the Personal Data Bank, Processing of these and the security measures.

Transfer: Any transmission, supply or manifestation of Personal Data, of a national or international nature, to a legal person under private law, to a public entity or to a natural person other than the Owner of Personal Data. It is not considered transfer or dissemination or any other form of processing that facilitates access, correlation or interconnection of Personal Data.

Processing: Any technical operation or procedure, automated or not, that allows the collection, registration, organization, storage, conservation, elaboration, modification, extraction, consultation, use, blocking, deletion, communication by transfer or dissemination or any other form of processing that facilitates access, correlation or interconnection of Personal Data.

Users: Natural persons who can or do use the services offered by OKIDOKITRAVELPERU.

3. Scope:

Our websites strictly comply with international Internet practices. All personal information collected through our websites is for the exclusive use of OKIDOKI TRAVEL PERU (Owner of the Personal Data Bank) and strictly for the purposes that comply with the proper functioning of this site and the services it provides.

This information will not be sold, transferred or rented to third parties without the express consent of the persons who have entered their information.

We guarantee the confidentiality of the information provided by our visitors.

The user can access the information on the website without having to provide any personal data.

However, in the event that the user makes an enquiry by email, a reservation or purchase of our services, the personal information provided by you in this will be incorporated and processed in a Personal Data Bank whose recipient and Owner of Personal Data is OKIDOKI TRAVEL PERU and whose purpose is to provide you with the information requested by you, as well as to benefit from the advantages associated with compliance with it.

Our servers store generic information about visitors, such as domain names, time spent on the website, pages viewed, downloads made and other related data for statistical purposes only and use this data to measure how the website is being used and to improve its content. However, no other type of data is collected about navigation, nor are ‘cookies’ installed on users’ devices.

In general, you can visit our websites without telling us who you are or revealing any information about yourself.