Why this Privacy Policy exists

The objective of this policy is to explain how Machu Picchu Trip Guide protects and processes the personal data of customers, passengers, suppliers, tour operators, travel agencies and collaborators from the moment such data is collected through physical or digital channels.

This personal information is processed only for duly communicated purposes related to tourism services, customer assistance, operational coordination and legal or administrative obligations.

Tourism services and personal information

Machu Picchu Trip Guide provides services related to individual and group travel, organization of trips and excursions, accommodation and other activities directly related to tourism.

To provide these services, Machu Picchu Trip Guide may collect, use, manage, transfer, store and process information associated with natural persons, such as name, identity document, passport, telephone number, email address and country of residence.

Machu Picchu Trip Guide follows Peruvian Law No. 29733, the Personal Data Protection Law, its Regulation No. 003-2013-JUS, and also takes into account international data protection standards such as the General Data Protection Regulation GDPR.

Key terms used in this policy

User data rights

When we process user data

Machu Picchu Trip Guide processes user data when users expressly consent to the processing of their personal information for the purposes described in this policy.

Data may also be processed when necessary for the execution of a contract for the provision of services and products in which the user is a party.

• When the user provides express consent.
• When data processing is necessary to provide contracted tourism services.
• When required to comply with legal, administrative or fiscal obligations.

Scope of application

This policy applies to personal data relating to customers, passengers, suppliers, tour operators, travel agencies and employees, provided voluntarily and consciously through the company’s physical or digital channels.

The information collected and stored may include data entered in registration forms, contact forms or similar channels.

The user is solely responsible for the veracity and accuracy of the data provided. Only persons over 18 years of age or those with sufficient legal capacity may use the services requiring personal data.

How personal data is used

Passengers and customers

• Comply with the objective of providing contracted tourism services and products.
• Contact the client during the provision of contracted services.
• Facilitate coordination with suppliers, travel agencies, cruise lines and hotels.
• Provide information about the nature of the service, contractual terms and company policies.
• Respond to doubts, questions and requests.
• Comply with tax or migration-related requirements when applicable.
• Analyze customer expectations and preferences regarding tickets and services.

Workers and collaborators

• Comply with applicable labor regulations.
• Manage human resources processes, payroll, attendance, selection and commissions.
• Maintain security in facilities through video surveillance.
• Comply with internal policies related to prevention of money laundering and terrorist financing.

Tour operators and suppliers

• Manage payment of requested services and products.
• Contact suppliers in relation to contracted services and products.
• Maintain security in facilities through video surveillance.

Your rights regarding your personal data

The owner of personal data may exercise the rights of information, access, rectification, cancellation, opposition and objective treatment of personal data. The exercise of one right does not prevent the exercise of others.

• Know, update and rectify personal data held by Machu Picchu Trip Guide.
• Request information about the use of personal data.
• Revoke authorization and/or request cancellation of data when legally applicable.
• Access processed personal data free of charge under the conditions defined in this policy.

Authorization, information and revocation

Authorization of the owner

For Machu Picchu Trip Guide to process personal data, prior and informed authorization of the owner is required, which may be obtained by written, oral or technical means that allow later consultation.

Cases in which authorization is not required

• Information required by a public or administrative authority in the exercise of legal functions.
• Information required by judicial decision.
• Public data.
• Medical or health emergencies.
• Processing allowed by law for historical, statistical or scientific purposes.
• Data from civil registry records.

People to whom information may be provided

• Data owners, their heirs or legal representatives.
• Public or administrative bodies acting under legal authority or court order.
• Third parties authorized by the owner or by law.

How to submit inquiries or claims

The owner of personal data or their assignees may submit inquiries and/or claims to Machu Picchu Trip Guide after verifying their identity. Requests may be sent with the reference “PERSONAL DATA”.

Inquiries: Access and information

Users may consult their personal data free of charge. Requests will be processed through the same means in which they were submitted.

Claims: Rectification, cancellation or opposition

If the owner considers that information in a database must be rectified, canceled or opposed, or notices a possible violation of legal duties, they may submit a request to Machu Picchu Trip Guide.

These response periods may be extended only once, for a maximum equal period, when justified by the circumstances. The reason for the extension will be communicated to the personal data owner.

Functions and obligations in data processing

Machu Picchu Trip Guide adopts internal policies and procedures to guarantee compliance with applicable personal data protection rules and to manage user inquiries and claims properly.

• Guarantee the effective exercise of habeas data rights.
• Request and keep authorization granted by the data owner when required.
• Inform users about the purpose of data collection and their rights.
• Keep information secure to prevent tampering, loss or unauthorized access.
• Update, rectify or delete data in a timely manner when legally required.
• Respect confidentiality in the processing of personal data.
• Comply with instructions issued by the National Authority for Personal Data Protection.

How long personal data is kept

Machu Picchu Trip Guide keeps users’ personal data for different periods depending on the purpose of processing. Data may be retained while a contractual relationship for the provision of products and services remains in force.

Data may also be kept while users do not request cancellation of their personal data, or when legal provisions require the company to retain certain information for the period established by law.

Updates to this Privacy Policy

Machu Picchu Trip Guide may modify and update this policy based on legislative, jurisprudential or company requirements.

Users are encouraged to consult this policy regularly and each time they access the company’s website to remain informed about how their personal data is protected.