This notice aims to inform Users and other visitors of this website, hereinafter referred to as the "Holders of Personal Data", about the processing of Personal Data by the FUNDACIÓN PEDRO Y ANGÉLICA DE OSMA GILDEMEISTER, identified with RUC N° 20106730467 and located at Jr. Montero Rosas 119, Barranco, Lima, hereinafter referred to as "THE FOUNDATION", and the compliance with the provisions established by the Personal Data Protection Law – Law N° 29733, its Regulations, and complementary regulations, hereinafter referred to as "the Law".

PURPOSE FOR WHICH PERSONAL DATA IS REQUIRED

THE FOUNDATION may require Holders of Personal Data to provide relevant information regarding their Personal Data for the following purposes:

• To promote the services and products it offers.

• To coordinate the sale, delivery, and management of the products it offers.

• To verify and consult information of clients, suppliers, workers, and the Complaints Book, for purposes related to the relationship it seeks to establish or has established.

• For security and video surveillance reasons.

• To share information with contractors or suppliers when it is strictly necessary for the correct provision of the agreed services.

• To obtain essential contact data for commercial, contractual, and labor relations.

• To address inquiries, complaints, and track operations corresponding to each type.

It is expressly established that THE FOUNDATION recognizes the right of Holders of Personal Data to oppose the use and processing of their Personal Data when they believe that the information provided does not fit any of the purposes mentioned above, or if the data provided are not essential to establish a contractual relationship.

The Personal Data handled by THE FOUNDATION will be accessible and managed by THE FOUNDATION's collaborators who need this information to carry out necessary operations and respond to requests from Holders of Personal Data. Such data will be processed fairly and lawfully, and will not be used for purposes incompatible with those described herein. THE FOUNDATION commits to safeguard the information provided by the Holder of Personal Data with confidentiality, adopting relevant control and security measures to prevent alteration, misuse, unauthorized processing, loss, and/or access by unauthorized third parties.

The Holder of Personal Data expressly declares that all information provided to THE FOUNDATION is accurate, truthful, and given in good faith, releasing THE FOUNDATION from any responsibility related to the veracity of such information, which includes, but is not limited to, Personal Data, work-related data, asset data, and personal references that the Holder of Personal Data has provided to THE FOUNDATION.

OBTAINING AND PROCESSING PERSONAL DATA

THE FOUNDATION may obtain information about the Holder of Personal Data by any means permitted by the Law, including but not limited to obtaining data in person or through electronic platforms and/or websites. By entering their data on the website or providing it in person, the Holder of Personal Data gives their explicit consent to THE FOUNDATION and/or its authorized administrative staff to process the information provided in accordance with the provisions of the Law.

THE FOUNDATION commits to processing and safeguarding the data of the Holder of Personal Data using digital, technical, and/or administrative means to ensure an optimal level of security.

DATABASES

The Holder of Personal Data is responsible for the accuracy and truthfulness of the information they provide. In this sense, the Personal Data collected by THE FOUNDATION will be diligently stored, incorporated, or reorganized in accordance with the corresponding purposes in the databases owned by Fundación Pedro y Angélica de Osma Gildemeister, which are referred to as "clients," "workers," and "suppliers." These databases are in the process of registration with the National Registry of Personal Data of the Ministry of Justice of Peru.

RIGHTS OF HOLDERS OF PERSONAL DATA – ARCO RIGHTS

It is established that Holders of Personal Data have the right to ACCESS the information that has been collected by any legal means, RECTIFY and correct the data if they are inaccurate or incomplete, request their CANCELLATION when they believe they are no longer necessary for the purposes indicated in the corresponding Privacy Policy, and OPPOSE the processing of their data in accordance with the Law and relevant regulations. THE FOUNDATION guarantees the exercise of these rights at all times.

Additionally, the Holder of Personal Data has the right to REVOKE the consent they have previously granted. In this case, THE FOUNDATION will cease the processing of such data, except in those scenarios specified in Article 14 of the Personal Data Protection Law, which establishes the circumstances under which it is not necessary to obtain the consent of the Holder for the processing of their information. It is important to note that the revocation of consent will have no retroactive effects in any case.

PROCEDURE FOR EXERCISING THE RIGHTS ESTABLISHED IN THE PERSONAL DATA PROTECTION LAW

The Holder of Personal Data can exercise their rights of ACCESS, RECTIFICATION, CANCELLATION, OPPOSITION, and/or REVOCATION OF CONSENT directly or through a legal representative by sending the form with the requirements established by the Law and other relevant regulations to the following email address: datos@fundacionosma.org, or delivering it in person at Jr. Montero Rosas 119, Barranco, Lima.

In the request, a copy of the DNI of the Holder of Personal Data and, if applicable, also of the representative should be attached as a file. Likewise, the following information must be included:

• Full name of the holder of the right, along with a copy of their identity document (DNI or Foreigner ID).

• If necessary, identification data of the representative of the Holder of Personal Data, a copy of their identity document (DNI or Foreigner ID), and a power of attorney (with notarized signatures) granted by the Holder.

• Email and/or phone number for pertinent notifications.

• Date and signature of the applicant.

Once the request is received, THE FOUNDATION will have a period of five (5) business days to make observations for non-compliance that cannot be remedied ex officio, providing the applicant with a maximum period of five (5) business days to make the necessary corrections; if not done, the request will be considered as not presented. From the date of receipt of the request, a period of ten (10) business days will be counted to provide a response to the Holder of Personal Data in accordance with current legal provisions.
Furthermore, the Holder of Personal Data or their representative agrees that all responses from THE FOUNDATION to their request will be attended to through the email provided for such purposes.

TRANSFER OF PERSONAL DATA BY THE FOUNDATION

The Holder of Personal Data grants their authorization and express consent to THE FOUNDATION to share and delegate the processing of their personal information to our service providers, whether national or international, exclusively for the treatments mentioned above.

In cases where the identification of the Holders of Personal Data involved in the transfer is not required, THE FOUNDATION will ensure that the information goes through a dissociation or anonymization process, in order to protect the corresponding rights; and in all situations of transfer, THE FOUNDATION will ensure that the recipients act in accordance with the Law, using Personal Data only for allowed and corresponding purposes. This provision includes, but is not limited to, companies engaged in e-commerce development, transportation of our products, governmental authorities, and other persons providing services or collaborating with the purposes for which THE FOUNDATION was contracted.

STORAGE TIME

The Personal Data that make up our Databases will be stored indefinitely, unless the data holder requests the CANCELLATION of the same as part of their ARCO rights, following the established procedures for it.

SOCIAL NETWORKS

Social networks are communication and connection platforms between Users and are external to THE FOUNDATION, so they are not under its responsibility. The information and data provided by the holder of Personal Data on social networks where THE FOUNDATION is a user are not considered part of the personal or sensitive information protected by this Privacy Policy. This responsibility lies with the company providing the platform and the User who publishes the information.

COMMUNICATIONS

In order to continuously improve our processes, THE FOUNDATION may make modifications and corrections to this Privacy Policy, to which you give your consent. We suggest you check these terms regularly to become aware of any changes that may occur.

Any total or partial modification to the provisions of this Privacy Policy will be communicated through one of the following means: a written statement published in THE FOUNDATION's facilities, a message sent to your email or mobile phone, a message through any electronic means used for operations with THE FOUNDATION, or through the websites of THE FOUNDATION (https://www.fundacionosma.org) and the Museo Pedro de Osma (https://museopedrodeosma.org).