PERSONAL DATA PROTECTION POLICY

The purpose of this policy is to communicate the requirements of Law No. 29733 – Personal Data Protection Law, its Regulations, and Security Directive to all employees, clients, and suppliers of the company, ensuring their compliance.

Regarding Guiding Principles

INTURSA is committed to adhering to the guiding principles established by the Personal Data Protection Law during the processing of personal data.

Concerning the Collection, Processing, and Transfer of Personal Data

The collection of personal data from various sources of interest (employees, clients, and suppliers) is carried out through written means, electronic records, public access sources, among others. These data are part of our databases of which we are owners and responsible.

Any processing of personal data must have the prior free, express, and informed consent of the data subjects.

Policies and procedures have been defined to ensure the security of personal data, aiming to prevent any alteration, loss, and/or unauthorized processing or access, safeguarding their confidentiality, integrity, and availability.

INTURSA may share personal data, with the consent of the data subject, with companies whose processing complies with the requirements of the Personal Data Protection Law, its Regulations, and Security Directive.

Personal data collected without the consent of the data subject may only be shared with public administration companies, judicial authorities, and/or law enforcement agencies, as established by law.

Regarding ARCO Rights

The data subject may exercise their rights to information, access, rectification, cancellation, and opposition at any time. To do so, they must download the ARCO rights request form from our website and send it through email to derechosarco@libertador.com.pe.

Regarding Sanctions

INTURSA reserves the right to initiate legal or disciplinary actions, as appropriate, against individuals or companies whose actions do not adhere to this policy.