PRIVACY AND PERSONAL DATA PROCESSING POLICY - TURIBUS

At TURIBUS (hereinafter, "The Company"), we deeply value the trust of our Users and are committed to protecting their personal data. In compliance with Law No. 29733 (Peruvian Personal Data Protection Law) and its corresponding Regulations, this Privacy Policy outlines how we collect, use, store, and protect your personal data in a transparent and secure manner.

If you have any legal, technical, or operational questions regarding the processing of your personal data, you may contact us directly via our official channel: turibus@turibus.pe.

1. Data Controller

The entity responsible for the personal data databases and the processing of information collected through the website https://www.turibus.pe/en (hereinafter, the "Website") is:

Corporate Name: PERUVISION GROUP S.A.C. (owner and operator of the TURIBUS brand)

Tax Identification Number (RUC): 20609488566

Registered Legal Address: Pedro Heraud 460, Barranco, Lima, Peru

Contact Phone: +51 908 821 289

Contact Email: turibus@turibus.pe

2. Categories of Data Collected and Processing Purposes

The Company collects and processes personal data for the following specific and lawful purposes:

1. Customer Inquiries and Support: When Users contact us through web forms, emails, or messaging channels, contact and identification details are processed to manage, respond to, and resolve inquiries.

Legal basis: The User’s explicit consent and our legitimate interest in providing comprehensive customer service.

2. Booking and Service Execution: When purchasing tour tickets or booking excursions, personal data is processed to manage reservations, issue tax-compliant invoices/receipts, send boarding information, and conduct post-tour quality surveys.

Legal basis: Performance of a contractual agreement.

3. Digital Subscriptions: When Users voluntarily subscribe to newsletters or downloadable materials, their email address is processed to deliver the requested content.

Legal basis: Explicit consent of the User.

4. On-Board Wi-Fi Access: Connecting to wireless networks on our tourist fleet may require basic details (such as name and email) to authenticate the session and, subject to prior approval, provide tourist-related information and feedback surveys.

Legal basis: User consent and legitimate interest in service optimization.

5. Marketing and Commercial Communications: Subject to prior, free, and informed consent, The Company may use your contact details to send promotions, special offers, and news about Turibus circuits. Users may opt out at any time at no cost.

Legal basis: User consent.

6. Cookies and Web Analytics: We collect pseudonymized or anonymous browsing metrics via cookies to improve Website loading speed, optimize user experience (UX), and measure platform conversion rates.

Legal basis: Consent granted via the Website’s Cookie Policy.

3. Data Retention Period

Personal data will be stored only for the duration strictly necessary to fulfill the purposes for which it was gathered, or for the duration of the commercial relationship. Thereafter, data will be retained securely in a restricted status solely to comply with statutory legal, tax, and accounting retention obligations under Peruvian law, after which it will be permanently erased.

4. Data Sharing and Third-Party Disclosures

The Company does not sell or commercially exploit personal data. Data is shared exclusively with:

Technology Service Providers (Data Processors): Payment gateway providers, cloud hosting services, ticketing platforms, and automated email services operating under strict data processing agreements and security requirements.

Legal and Regulatory Authorities: Public administrative bodies, judicial authorities, or law enforcement agencies when strictly mandated by applicable Peruvian law.

Cross-Border Data Transfers: Where cloud infrastructure or software providers operate servers outside of Peru, The Company ensures that international transfers comply with security levels consistent with Peruvian data protection standards.

5. User Rights (ARCO Rights)

Pursuant to Law No. 29733, Users hold rights to Information, Access, Rectification, Cancellation, and Opposition (ARCO Rights). These rights may be exercised free of charge by submitting a written request to turibus@turibus.pe, attaching a copy of valid identification and specifying the requested action.

If a User considers that their request has not been satisfactorily addressed, they may file a formal complaint with the National Personal Data Protection Authority (ANPD) under the Ministry of Justice and Human Rights of Peru.

6. Information Security Measures

The Company maintains robust technical, organizational, and legal safeguards designed to protect personal data against accidental loss, unauthorized access, illicit disclosure, or alteration, in compliance with the Regulations of Law No. 29733.

7. Amendments to this Policy

The Company reserves the right to modify or update this Privacy Policy to reflect legislative updates or changes in operational practices. Any material changes will be published directly on the Website or communicated through registered contact details.