The purpose of this notice is to inform Users and other visitors of this website, hereinafter referred to as the "Holders of Personal Data", about the processing of Personal Data by the PEDRO AND ANGÉLICA DE OSMA GILDEMEISTER FOUNDATION, identified with RUC No. 20106730467 and located at Jr. Montero Rosas 119, Barranco, Lima, hereinafter referred to as "THE FOUNDATION", and the compliance with the provisions established by the Personal Data Protection Law – Law No. 29733, its Regulations, and complementary regulations, hereinafter referred to as "the Law".

PURPOSE FOR WHICH PERSONAL DATA IS REQUIRED

THE FOUNDATION may request Holders of Personal Data for pertinent information regarding their Personal Data for the following purposes:

• To promote the services and products it offers.

• To coordinate the sale, delivery, and management of the products it offers.

• To verify and consult information of clients, suppliers, workers, and the Complaints Book, for purposes related to the relationship it seeks to establish or has already established.

• For security and video surveillance purposes.

• To share information with contractors or suppliers when strictly necessary for the proper provision of the agreed services.

• To obtain essential contact data for commercial, contractual, and labor relationships.

• To address inquiries, complaints and follow up on operations corresponding to each type.

It is expressly stated that THE FOUNDATION acknowledges the right of Holders of Personal Data to oppose the use and processing of their Personal Data when they consider that the information provided does not conform to any of the purposes mentioned above, or if the offered data is not essential to establish a contractual relationship.

The Personal Data handled by THE FOUNDATION will be accessible and managed by the Foundation's collaborators who need this information to carry out the necessary operations and attend to requests from the Holders of Personal Data. Such data will be processed fairly and lawfully, and will not be used for purposes incompatible with those described herein. THE FOUNDATION commits to safeguard the information provided by the Holder of Personal Data with confidentiality, adopting relevant control and security measures to prevent alteration, misuse, unauthorized processing, loss, and/or access by unauthorized third parties.

The Holder of Personal Data expressly declares that all information provided to THE FOUNDATION is accurate, truthful, and given in good faith, releasing THE FOUNDATION from any liability related to the veracity of such information, which includes, but is not limited to, Personal Data, employment, patrimonial, and personal references that the Holder of Personal Data has provided to THE FOUNDATION.

OBTAINING AND PROCESSING PERSONAL DATA

THE FOUNDATION may obtain information about the Holder of Personal Data by any means allowed by the Law, including, but not limited to, obtaining data in person or through electronic platforms and/or websites. By entering their data on the website or providing it in person, the Holder of Personal Data gives their explicit consent to THE FOUNDATION and/or its authorized administrative staff to process the supplied information according to what is stipulated in the Law.

THE FOUNDATION is committed to processing and safeguarding the data of the Holder of Personal Data using digital, technical, and/or administrative means to ensure an optimal level of security.

DATABASES

The Holder of Personal Data is responsible for the accuracy and truthfulness of the information provided. In this sense, the Personal Data collected by THE FOUNDATION will be stored, incorporated, or diligently reorganized according to the corresponding purposes in the databases owned by the Pedro and Angélica de Osma Gildemeister Foundation, which are designated as "clients", "workers", and "suppliers". These databases are in the process of registration with the National Personal Data Registry of the Ministry of Justice of Peru.

RIGHTS OF THE HOLDERS OF PERSONAL DATA – ARCO RIGHTS

It is established that Holders of Personal Data have the right to ACCESS the information that has been collected by any legal means, RECTIFY and correct data in case they are inaccurate or incomplete, request their CANCELLATION when they consider that they are no longer necessary for the purposes indicated in the corresponding Privacy Policy, and OPPOSE the processing of their data according to the Law and relevant regulations. THE FOUNDATION guarantees the exercise of these rights at all times.

Additionally, the Holder of Personal Data has the right to REVOKE the consent previously granted. In this case, THE FOUNDATION will cease the processing of such data, except in those scenarios specified in Article 14 of the Personal Data Protection Law, which establishes the circumstances in which the obtaining of consent from the Holder for the processing of their information is not necessary. It is important to note that the revocation of consent will have no retroactive effects in any case.

PROCEDURE FOR EXERCISING THE RIGHTS ESTABLISHED IN THE PERSONAL DATA PROTECTION LAW:

The Holder of Personal Data can exercise their rights of ACCESS, RECTIFICATION, CANCELLATION, OPPOSITION, and/or REVOCATION OF CONSENT directly or through a legal representative by sending the form with the requirements established by the Law and other relevant regulations to the following email address: datos@fundacionosma.org, or delivering it in person at Jr. Montero Rosas 119, Barranco, Lima.

In the request, a copy of the Holder of Personal Data's DNI should be attached as a file, and, if applicable, also of the representative. Likewise, the following information should be included:

• Full names of the holder of the right, along with a copy of their identity document (DNI or Foreigners' Card).

• If necessary, identification data of the representative of the Holder of Personal Data, a copy of their identity document (DNI or Foreigners' Card), and a power of attorney (with legalized signatures) granted by the Holder.

• Email and/or phone for relevant notifications.

• Date and signature of the applicant.

Once the request is received, THE FOUNDATION will have a period of five (5) business days to formulate observations for non-compliance that cannot be corrected ex officio, providing the applicant a maximum period of five (5) business days to make the necessary corrections; otherwise, the request will be considered as not submitted. From the date of receipt of the request, a period of ten (10) business days will be computed to provide a response to the Holder of Personal Data in accordance with the applicable legal provisions.

Furthermore, the Holder of Personal Data or their representative agrees that all responses from THE FOUNDATION to their request will be addressed through the email provided for such purposes.

TRANSFER OF PERSONAL DATA BY THE FOUNDATION

The Holder of Personal Data grants their authorization and express consent to THE FOUNDATION to share and delegate the processing of their personal information to our service providers, whether national or international, solely for the aforementioned treatments.

In cases where the identification of the Holders of Personal Data involved in the transfer is not required, THE FOUNDATION will ensure that the information undergoes a process of de-identification or anonymization, in order to protect the corresponding rights; and in all transfer situations, THE FOUNDATION will ensure that recipients act in accordance with the provisions of the Law, using Personal Data only for the permitted and corresponding purposes.

This provision includes, but is not limited to, companies engaged in e-commerce development, transportation of our products, governmental authorities, and other persons providing services or collaborating with the purposes for which THE FOUNDATION was hired.

STORAGE TIME

The Personal Data that make up our Databases will be stored indefinitely, unless the data holder requests their CANCELLATION as part of their ARCO rights, following the established procedures for it.

SOCIAL NETWORKS

Social networks are communication and connection platforms between Users and are unrelated to THE FOUNDATION, and therefore are not under their responsibility. The information and data provided by the Holder of Personal Data on social networks where THE FOUNDATION is a user are not considered part of the personal or sensitive information protected by this Privacy Policy. Such responsibility lies with the platform provider company and the User who publishes the information.

COMMUNICATIONS

In order to continuously improve our processes, THE FOUNDATION may make modifications and corrections to this Privacy Policy, to which you give your consent. We suggest you check these terms regularly to be aware of any changes that may occur.

Any total or partial modification of the provisions of this Privacy Policy will be communicated through one of the following means: a written notice posted in THE FOUNDATION's facilities, a message sent to your email or mobile phone, a message via any electronic means used for transactions with THE FOUNDATION, or through THE FOUNDATION's websites (https://www.fundacionosma.org) and the Pedro de Osma Museum (https://museopedrodeosma.org).