At Suri Travel Cusco, we are committed to protecting the privacy and security of our clients’ personal data.This Personal Data Protection Policy explains how we collect, use, store and protect personal information in accordance with Law No. 29733 – Peru’s Personal Data Protection Law, as well as other applicable regulations.

1. Personal Data We Collect

We may collect the following personal data from our clients:

• Full name

• Email address

• Telephone number

• Postal address

• Payment information (credit or debit card)

• Passport and/or identity document information

• Nationality

• Travel preferences and special requirements

2. Purpose of Data Processing

The personal data collected is used for the following purposes:

• • Processing reservations, issuing tickets and confirming tourism services

• • Coordinating itineraries, transport, accommodation and activities

• • Sending confirmations, updates and reminders related to contracted services

• • Providing customer service and assistance

• • Complying with legal, tax or regulatory obligations

• • Sending informational or promotional communications (only with the data subject’s prior consent)

3. Legal Basis for Data Processing

Personal data is processed based on:

• The free, explicit and informed consent of the data subject

• The performance of a contract or tourism services requested by the client

• Compliance with legal or regulatory obligations

4. Data Storage and Security

Personal data is stored in secure systems with appropriate technical, organisational and administrative measures to protect information against unauthorised access, loss, alteration or improper disclosure. We use encryption technologies and internal confidentiality policies to ensure data security.

5. Data Retention

Personal data will be retained only for as long as necessary to fulfil the purposes described above, or while a contractual or legal relationship exists. Once this period has ended, the data will be securely deleted.

6. Transfer of Data to Third Parties

We may share certain personal data with third parties only when necessary for the proper delivery of contracted services, such as:

• Hotels, local operators and transport providers

• Payment platforms and banks

• Competent authorities, when required by law

In all cases, Suri Travel Cusco ensures that such third parties comply with the security and confidentiality standards required by current regulations.

7. Data Subject Rights (ARCO Rights)

Data subjects have the right to:

• • Access their personal data

• • Rectify inaccurate or incomplete data

• • Cancel their data when it is no longer necessary

• • Object to the processing of their data for specific purposes

8. Commercial Communications

Promotional messages, newsletters or tourism-related information will be sent only if the data subject has given explicit consent.

Users may withdraw this consent at any time through the mechanisms provided in each communication or by writing to our contact email.

9. Amendments to This Policy

Suri Travel Cusco reserves the right to modify or update this Personal Data Protection Policy at any time.

Any changes will take effect upon publication through the company’s official channels.

10. Contact

If you have any questions or wish to exercise your data protection rights, please contact our Data Protection Officer:

📧 info@suritravelcusco.com

📍 Cusco, Peru