ESTUDIO SACO-VERTIZ & LANDERER S.A.C. (hereinafter, “THE COMPANY”), identified with Tax ID (RUC) No. 20548052506, with domicile in Av. Jorge Basadre No. 347 (Office 905), district of San Isidro, province and department of Lima, respects the privacy of its website users and protects the personal data collected through its forms, digital channels, and other means associated with the site. This Privacy Policy explains how such data is collected, used, stored, and protected, in accordance with the provisions of Law No. 29733, Personal Data Protection Law, and its Regulations, approved by Supreme Decree No. 016-2024-JUS.

1. Data Controller

THE COMPANY is the data controller responsible for processing personal data collected through the website and for the personal databases under its ownership where such data will be stored, in accordance with Peruvian personal data protection regulations. The personal data you voluntarily provide will be stored in the following personal data banks owned by THE COMPANY: “Website Users” and “Job Applicants”.

2. Scope

This Privacy Policy applies to individuals who visit the website, make inquiries, request information, register to receive communications, participate in activities organized by THE COMPANY, or submit their resumes/CVs through the enabled channels.

3. Personal Data That May Be Collected

• Identification and contact data, such as first and last names, identity document, email address, telephone number, job title, company, or organization.
• Information included in inquiries, requests, messages, or communications sent to THE COMPANY (Website Users).
• Professional and academic information contained in resumes/CVs and application documents (Job Applicants).
• Technical and browsing data, such as IP address, device type, browser, operating system, pages visited, date, time, and approximate duration of the visit.
• Other data voluntarily provided by the user or strictly necessary to process their request.

THE COMPANY does not request sensitive data through the website unless strictly necessary for a specific purpose and supported by the corresponding legal authorization or consent.

4. Purposes of Processing

• Responding to inquiries, requests for information, and communications addressed to THE COMPANY (Website Users).
• Managing contact with clients, potential clients, suppliers, partners, media, and other stakeholders through the website (Website Users).
• Managing registrations, invitations, and participation in events, activities, or publications (Website Users).
• Sending newsletters, updates, legal alerts, or other informative communications, provided the user has granted authorization or another applicable legal basis exists (Website Users).
• Evaluating applications and conducting recruitment and selection processes for employment or internships (Job Applicants).
• Administering, protecting, and improving the website, analyzing its usage, and preventing security incidents.
• Complying with legal, regulatory, or contractual obligations, or requirements from competent authorities.

5. Consent and Optional Nature of Providing Data

The user declares that the data provided is true, accurate, complete, and up to date. Where processing requires consent, it will be requested beforehand in an informed, express, and unequivocal manner through the corresponding mechanism.

Providing personal data is optional, except when indispensable to address a request or deliver a specific functionality. If the user does not provide the required data, THE COMPANY may not be in a position to properly address the request.

6. Informative Communications

THE COMPANY may send informative communications, invitations, or updates only when it has the corresponding express authorization from the data subject for such purpose. The user may request to unsubscribe from these communications at any time via the opt-out mechanism included in the message or by writing to the email address indicated in this Policy.

7. Data Transfers and Data Processors

THE COMPANY does not sell or commercialize personal data. It may share data with service providers that deliver web hosting, technical support, analytics, communications, storage, recruitment, or other services necessary for the stated purposes. Such providers must process the data solely in accordance with the instructions of THE COMPANY and under confidentiality and security obligations.

The third parties with whom THE COMPANY may share the provided personal data are detailed below: Yachay Telecomunicaciones S.A.C. and Google LLC.

Data may also be disclosed when required by law, upon request from a competent authority, or when necessary to establish, exercise, or defend the legal rights of THE COMPANY.

8. Data Retention

Personal data will be retained for the time necessary to fulfill the purposes for which it was collected, meet legal or contractual obligations, and manage potential liabilities. Once the purpose is fulfilled, the data will be deleted, anonymized, or blocked, as appropriate.

9. Security and Confidentiality

THE COMPANY implements reasonable technical, organizational, and legal measures to protect personal data against loss, unauthorized access, alteration, disclosure, or destruction. However, no electronic transmission or storage system can guarantee absolute security.

The user must avoid sending confidential or sensitive information that is not necessary for their inquiry through general forms or unsecured email channels.

10. Rights of the Data Subject

The data subject may exercise the rights of information, access, rectification, erasure (cancellation), and objection, as well as revoke consent or exercise any other rights recognized by applicable regulations.

To do so, a request must be sent by email to rcastaneda@sacovertiz.com, specifying the right to be exercised, identification details, a clear description of the request, and, where applicable, documentation verifying identity or legal representation. THE COMPANY will address the request within the deadlines established by applicable law.

If the data subject considers that their request has not been addressed in accordance with the law, they may turn to the National Personal Data Protection Authority.

11. Minors’ Data

The website is not specifically directed at minors. THE COMPANY does not intentionally collect data from minors without the involvement of their parents, guardians, or legal representatives, unless an applicable legal authorization exists.

12. Cookies and Similar Technologies

The website may use cookies and similar technologies. Information regarding their purpose, categories, and settings is set forth in THE COMPANY’s Cookie Policy, which is brought to the user’s attention upon accessing this website and is readily available.

13. Links to Third-Party Sites

The website may contain links to third-party sites. THE COMPANY does not control their privacy practices and is not responsible for their content or policies. Users are encouraged to review the terms and policies of each external site before providing personal information.

14. Amendments to this Policy

THE COMPANY may update this Privacy Policy to reflect regulatory, technological, or data processing changes. The current version will be published on the website and will indicate the date of its last update.

15. Legal Framework

This Policy is governed by Law No. 29733, Personal Data Protection Law; its Regulations, approved by Supreme Decree No. 016-2024-JUS; and all other applicable Peruvian provisions regarding personal data protection.