Privacy Policy

Peru Viajes y Aventuras – Processing and protection of personal data

1. Our Commitment

At Peru Viajes y Aventuras we respect your privacy and protect the personal data you entrust to us. This Privacy Policy explains what data we collect, why we use it, who we share it with, how long we keep it and how you can exercise your rights.

This policy has been prepared in accordance with Peru's Law No. 29733, the Personal Data Protection Law, and its Regulation, approved by Supreme Decree No. 016-2024-JUS (in force since March 2025), as well as other applicable laws of the Republic of Peru.

2. Data Controller

Trade name: Peru Viajes y Aventuras

Email for privacy matters: peruviajesyaventuras@gmail.com

Phone / WhatsApp: +51 974 534 742

3. Personal Data We Collect

Depending on the service you request, we may process the following categories of data:

• Identification data: first and last names, passport or ID number, nationality, date of birth and sex. This data is essential to issue Machu Picchu, train, bus and other tickets in your name.
• Contact data: email address, phone or WhatsApp number, country of residence.
• Travel data: dates, services booked, hotel, flight details for transfers, preferences and itinerary.
• Student or age data: a copy of your ISIC card or a document proving the age of travelers under 17, used solely to apply discounts.
• Health data (sensitive data): information about medical conditions, allergies, dietary requirements or special needs that you choose to share with us to ensure your safety and well-being during the service. We process it only with your express written consent and solely for that purpose.
• Payment data: information required to process payments, receipts and refunds. Full card details are processed directly by banks or payment gateways; we do not store them.
• Browsing data: IP address, browser type, pages visited and data obtained through cookies or similar technologies.

4. Purposes of Processing

Purposes necessary for the contractual relationship

Managing quotes, bookings, confirmations and payments.

Issuing entrance, train, bus and other tickets in your name and coordinating with suppliers (transport, accommodation, meals, guides).

Providing the services you have booked and communicating with you before, during and after your trip.

Handling your inquiries, requests, claims and complaints, including through the Complaints Book.

Issuing payment receipts and complying with legal, tax and administrative obligations.

Looking after your safety during activities and acting in an emergency.

Additional purposes (require your consent)

Sending you information about promotions, news, offers and travel content.

Conducting satisfaction surveys and studies to improve our services.

Publishing testimonials, reviews or photographs in which you appear, only with your express authorization.

You may accept or decline these additional purposes without affecting the service you have booked, and you may withdraw your consent at any time.

5. Legal Basis

We process your data on the basis of: (i) your free, prior, express, unequivocal and informed consent; (ii) the performance of the contractual relationship you request; and (iii) compliance with legal obligations. Sensitive data is processed only with express written consent, except for the exceptions provided by law.

6. Recipients and Data Transfers

To provide our services, we may share your data, strictly as necessary, with:

• Tourism suppliers: entities that manage ticket sales for Machu Picchu and other sites, rail companies, transport companies, hotels, restaurants, guides and local operators.
• Banks and payment gateways that process your payments.
• Technology providers: web hosting, email, messaging (for example, WhatsApp) and cloud storage services, some of which may be located outside Peru.
• Public authorities, where there is a legal obligation or a valid request.
• Where providing the service involves a cross-border data flow (for example, the use of cloud or messaging services with servers abroad), we will seek to ensure that the recipient offers adequate levels of protection, in accordance with Law No. 29733 and its Regulation. We do not sell or rent your personal data to third parties.

7. Retention Period

We will keep your data for as long as necessary to fulfill the purposes described and, thereafter, for the periods required by tax, accounting, consumer protection or other applicable regulations. Data processed for marketing purposes will be kept until you withdraw your consent.

8. Security Measures

We adopt reasonable technical, organizational and legal measures to protect your data against loss, misuse, unauthorized access, alteration or disclosure, in accordance with current regulations. Access to your data is limited to staff and suppliers who need it to provide the service, all of whom are bound by confidentiality. If a security incident affecting your data occurs, we will act and notify the National Personal Data Protection Authority and the affected data subjects in the cases and within the time limits established by the Regulation.

9. Your Rights

As a data subject, you may exercise the following rights at any time, free of charge:

• Information: to know the purpose, recipients, retention period and other conditions of the processing.
• Access: to obtain information about the data we hold about you, how it was obtained and to whom it has been transferred.
• Rectification (updating and inclusion): to correct inaccurate, incomplete or outdated data.
• Cancellation (erasure): to request the deletion of your data when it is no longer necessary or you have withdrawn your consent, unless we must keep it by law.
• Objection: to object to the processing of your data on legitimate and well-founded grounds, or to its use for marketing purposes.
• Withdrawal of consent given for additional purposes.
• Portability and objective processing, under the terms set out in the Regulation.

How to exercise your rights

Send your request to peruviajesyaventuras@gmail.com including:

• Your full name and a copy of your ID document (or your representative's, with a document proving representation).
• The right you wish to exercise and a clear description of your request.
• An email address or postal address to receive the response.
• Any supporting documents, where applicable.

We will respond within the maximum time limits set by the Regulation of Law No. 29733: 8 days for the right to information, 20 days for the right of access and 10 days for the rights of rectification, cancellation and objection, counted from the day after the request is submitted (business days). These periods may be extended once, for an equal period, when circumstances justify it and we notify you within the original period.

If you believe we have not properly handled your request, you may file a complaint with Peru's National Personal Data Protection Authority (ANPD) of the Ministry of Justice and Human Rights (www.gob.pe/anpd).

10. Data of Minors

Our services are aimed at adults. The data of minors traveling with their families is provided by their parents, guardians or legal representatives, who give the corresponding consent in accordance with current regulations. We process this data solely to manage the trip and with special care.

11. Cookies

Our website may use its own and third-party cookies for its operation, browsing analysis and, where applicable, advertising purposes. You can set your browser to accept or reject cookies; disabling them may affect some website features.

12. Third-Party Links

Our website may include links to third-party sites (for example, social networks, payment platforms or review sites). Each has its own privacy policy, for which we are not responsible.

13. Changes to This Policy

We may update this Privacy Policy to reflect regulatory changes or changes in our services. We will publish the current version on this page, indicating the date of its last update.

14. Contact

Email: peruviajesyaventuras@gmail.com

Phone / WhatsApp: +51 974 534 742

Last updated: November 2026.