PRIVACY AND PERSONAL DATA PROTECTION POLICY ANDEAN MOMENTS PERU E.I.R.L.
1. INTRODUCTION AND PURPOSE
ANDEAN MOMENTS PERU E.I.R.L. (hereinafter referred to as “THE AGENCY,” “WE,” or “US”) recognizes the vital importance of protecting the privacy and personal data of our users, clients, suppliers, and partners. In line with our commitment to transparency, information security, and compliance with current regulations, THE AGENCY hereby provides this Privacy Policy (the “Policy”). Its purpose is to clearly and comprehensively detail how we handle personal data collected through our various contact and communication channels.
This Policy describes the conditions under which THE AGENCY collects, uses, stores, protects, and potentially shares personal data provided by users who utilize our travel services or interact with us via digital or in-person channels.
Personal data collection may occur through our digital platforms, including our website, contact forms, social media, email, mobile applications, WhatsApp, and messaging platforms, as well as through in-person or telephone interactions when users request information, make reservations, or book travel services.
This document has been drafted in strict compliance with the current Peruvian legal framework regarding personal data protection, specifically:
The Political Constitution of Peru (Article 2, Section 6), which recognizes the fundamental right to personal data protection.
Law No. 29733, the Personal Data Protection Law.
Supreme Decree No. 003-2013-JUS, the Regulations of the Personal Data Protection Law.
The Information Security Directive approved by Directorial Resolution No. 019-2013-JUS/DGPDP.
Through this Policy, THE AGENCY reaffirms its commitment to the responsible, secure, and transparent processing of the personal data of all our users and clients.
2. IDENTIFICATION OF THE DATA CONTROLLER
The entity responsible for the processing of personal data collected through our services and platforms is:
Trade Name: ANDEAN MOMENTS PERU E.I.R.L.
Tax ID (RUC): 20615685926
Registered Address: PROLONGACION TUPAC AMARU S/N SAN JERONIMO, CUSCO, CUSCO.
Contact Phone/WhatsApp: 952160463
Contact Email: andeanmoments@gmail.com
Website: https://andeanmoments.com/
In accordance with current regulations, all collected personal data will be stored and processed within the Personal Database titled “CLIENTS AND USERS,” managed by THE AGENCY. This database is used exclusively for commercial management, the provision of travel services, and responding to user inquiries.
3. GUIDING PRINCIPLES
The processing of personal data by THE AGENCY is governed by the principles established in Law No. 29733 and its Regulations, ensuring that all personal information is handled responsibly and securely:
Principle of Legality: Data processing is conducted in accordance with the law; collection via fraudulent, deceptive, or illicit means is strictly prohibited.
Principle of Consent: Data processing only occurs when the data subject has provided prior, free, express, unequivocal, and informed consent.
Principle of Purpose: Personal data is collected solely for determined, explicit, and lawful purposes related to the travel services offered by THE AGENCY.
Principle of Proportionality: Processing is limited to data that is strictly necessary, relevant, and adequate for the purposes disclosed to the user.
Principle of Security: THE AGENCY implements technical, organizational, and legal measures to guarantee the security and confidentiality of personal data, preventing loss, misuse, alteration, or unauthorized access.
4. PERSONAL DATA WE COLLECT
To provide our travel services effectively and interact properly with our users, we may collect various categories of personal data:
4.1 Identification and Contact Data This includes information necessary to identify the user or client, such as full names, National ID (DNI) number, valid passport number, foreign residency card, nationality, country of residence, date of birth, landline or mobile phone number, WhatsApp number, personal or corporate email address, and handwritten or digital signatures when required for contractual documents.
4.2 Transactional and Financial Data Information required to manage payments and bookings, such as purchase history, details of booked services, travel dates, number of travelers, payment receipts, bank transaction numbers, and wire transfer confirmations. For payments made via digital platforms or credit/debit cards, financial information is processed through secure payment gateways that comply with international security standards; THE AGENCY does not directly store full sensitive card data.
4.3 Sensitive Data ANDEAN MOMENTS PERU E.I.R.L. will only collect sensitive data when strictly necessary and in compliance with the principles of purpose and proportionality, or when required by legal obligation. In such cases, the data subject will be informed prior to collection.
4.4 Browsing Data and Cookies When users visit our website or interact with our digital platforms, technical data may be collected, such as IP address, browser type, operating system, pages visited, time spent on the site, approximate geographic location, browser language, and on-site navigation behavior. This information is collected via cookies and web analytics tools to improve user experience and site functionality.
5. PURPOSE OF DATA PROCESSING
ANDEAN MOMENTS PERU E.I.R.L. collects personal data for determined, explicit, and lawful purposes. Personal data will not be used for purposes other than those for which it was obtained unless the data subject provides additional consent.
In this regard, ANDEAN MOMENTS PERU E.I.R.L. will implement measures to ensure:
Data collection and storage comply with proportionality and purpose principles.
Data is protected by adequate technical and legal security measures. We will not disclose personal data unless ordered by a reasoned court mandate or with the subject’s authorization as provided by law.
We will not refuse to provide information containing personal data to a public entity when legally required.
6. CONSEQUENCES OF REFUSAL TO PROVIDE DATA
Providing the personal data requested is essential for the proper execution of the travel services offered by THE AGENCY. If a user refuses to provide essential information (such as ID or passport numbers required for bookings or ticketing), THE AGENCY will be unable to manage the requested services or fulfill the corresponding travel contract. Refusal to provide data for optional purposes will not affect the core service provision.
7. CONSENT
Data processing is based on the free, prior, informed, express, and unequivocal consent of the data subject. On digital platforms, consent is given by expressly accepting this Privacy Policy via “opt-in” checkboxes. For in-person, phone, or WhatsApp interactions, consent is understood as granted when the user voluntarily provides their information after being informed of this Policy.
8. TRANSFER TO THIRD PARTIES AND DATA PROCESSORS
THE AGENCY does not sell or rent user personal data. However, to execute contracted travel services, it may be necessary to share information with partners such as hotels, transport companies, local operators, authorized tour guides, and rail companies. Data may also be shared with government entities (such as the Ministry of Culture, SERNANP, GERCETUR, SUNAT, or Immigration) for the purchase of named tickets or official registries. Technology providers (payment gateways, hosting services, cloud storage) may also act as data processors.
9. CROSS-BORDER DATA FLOWS
Some technological services used by THE AGENCY may involve storing or processing data on servers located outside of Peru. By accepting this Privacy Policy, the user expressly authorizes this international transfer of data, recognizing it as necessary for the operation of THE AGENCY’s digital services.
10. RETENTION PERIOD
Personal data must be accurate, relevant, and kept up to date. It will be stored only for the time necessary to fulfill the purposes of processing, while respecting legal statutes of limitations and document retention requirements under Peruvian law.
11. SECURITY MEASURES
THE AGENCY has implemented technical, organizational, and legal measures to protect personal data against unauthorized access, loss, or alteration. These include SSL security certificates on the website, information access controls, secure storage for digital and physical files, and confidentiality agreements with authorized personnel.
12. EXERCISING ARCO RIGHTS
Data subjects have the right to Access, Rectify, Cancel, and Oppose (ARCO Rights) the processing of their personal information. To exercise these rights, the subject must send a request to andeanmoments@gmail.com with the subject line “ARCO REQUEST – [Full Name].” The request must include the subject’s full name, a copy of their ID, and a clear description of the request. Access requests will be addressed within 20 business days; rectification, cancellation, or opposition requests will be addressed within 10 business days.
13. COOKIE POLICY AND EXTERNAL LINKS
Our website may use cookies to improve navigation and analyze site usage. Users can configure their browsers to accept or reject cookies. Our site may also contain links to external websites; THE AGENCY is not responsible for the privacy policies or content of such third-party sites.
14. MODIFICATIONS AND VALIDITY
THE AGENCY reserves the right to modify or update this Privacy Policy at any time due to regulatory changes or internal improvements. Updates will be published on our official website. Continued use of our services following an update constitutes acceptance of the new Policy.
Last updated: April 10, 2026.
