Personal Data Protection Policy

Introduction

DALYGOIN is a travel and tourism agency dedicated to providing tourism services in Peru through the intermediation and commercialization of travel-related services, including tour packages, transportation services, private transfers, ticket reservations, trekking experiences, and full-day tours. DALYGOIN is located at Cal. Jirón Libertad Nro. S/N, Urb. Asociación Señor de Huanca, Wanchaq, Cusco, Peru. DALYGOIN is committed to complying with applicable data protection and privacy regulations regarding the collection, processing, and protection of personal data. Therefore, DALYGOIN is committed to:

• Protecting the quality and security of personal information.
• Respecting the rights of individuals regarding their personal data.
• Ensuring responsible collection and use of personal information.

DALYGOIN is committed to the proper protection, management, and processing of personal data accessed during the regular operation of its business activities. This commitment includes the continuous improvement of internal processes to guarantee appropriate protection of personal data and compliance with applicable legal standards. This Policy may be complemented by additional procedures, regulations, or internal guidelines aligned with the principles established herein.

Objective

The purpose of this document is to establish principles, practices, and responsibilities related to the processing and protection of personal data handled by DALYGOIN.

Scope

This Policy applies to all DALYGOIN processes involving the collection, storage, use, and processing of customer personal data contained in the company’s databases. This Policy shall be observed and complied with by all employees, contractors, suppliers, and third parties who may have access to personal data through their relationship with DALYGOIN.

Definitions

Personal Data: Any information that identifies or may reasonably identify a natural person, such as name, passport number, address, email address, or phone number.

Sensitive Data: Personal information related to health conditions, biometric information, ethnic origin, religious beliefs, or other sensitive categories protected under applicable law.

Processing of Personal Data: Any operation or technical procedure, automated or non-automated, involving collection, storage, organization, modification, consultation, use, transfer, deletion, or any other form of handling of personal data.

Consent: Prior, free, explicit, informed, and unequivocal authorization granted by the data subject for the processing of personal data.

Compliance Responsibilities

DALYGOIN shall assign and communicate the corresponding responsibilities to its personnel and service providers for compliance with this Policy. Management shall be responsible for periodically reviewing and updating this Policy, as well as addressing any questions related to its application and scope. All employees, providers, contractors, and third parties associated with DALYGOIN who access or process personal data are subject to compliance with this Policy.

Confidentiality

This Policy is intended for internal and operational purposes within DALYGOIN and shall be treated as confidential. Personal data accessed by employees, contractors, or third parties shall not be disclosed, processed, or used without prior authorization from the data subject, except where permitted or required by law. All individuals involved in the processing of personal data are obligated to maintain professional secrecy and confidentiality, even after termination of their relationship with DALYGOIN.

Principles

All DALYGOIN personnel involved in the processing of personal data shall comply with the following principles:

• Legality: Personal data shall be processed in accordance with applicable laws and regulations.
• Consent: Personal data shall only be processed with the prior consent of the data subject unless otherwise permitted by law.
• Purpose: Personal data shall be collected for specific, explicit, and legitimate purposes.
• Proportionality: The processing of personal data shall be adequate, relevant, and limited to what is necessary.
• Quality: Personal data must be accurate, updated, and relevant to the purposes for which it was collected.
• Security: DALYGOIN shall implement technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.

Rights of Data Subjects

Users and customers have the right to:

• Access their personal data
• Request correction or updating of inaccurate information
• Request deletion of personal data when applicable
• Object to the processing of their personal data
• Withdraw consent at any time

Requests regarding personal data may be submitted through the following email address: dalygoin@gmail.com

Transfer of Personal Data

Personal data processed by DALYGOIN may only be transferred to third parties when necessary for the provision of tourism services or when legally required. Such third parties may include:

• Hotels and accommodation providers
• Transportation companies
• Tour operators and guides
• Payment service providers
• Government authorities when required by law

DALYGOIN does not sell personal data to third parties.

Collection of Sensitive Data

DALYGOIN shall collect sensitive personal data only when strictly necessary for the provision of tourism services and in compliance with applicable legal principles.

Disclosure of Personal Data

DALYGOIN may disclose personal data only when:

• Necessary for the provision of tourism services
• Required by law or competent authorities
• The user has provided prior consent
• Necessary for fraud prevention or security purposes

Deletion of Personal Data

Once the purpose for which personal data was collected has been fulfilled, and unless legal obligations require otherwise, DALYGOIN shall proceed with the deletion or anonymization of such data.

Sanctions

Any employee or contractor who violates the provisions established in this Policy may be subject to disciplinary actions or applicable legal consequences.

Publication and Compliance

DALYGOIN shall promote awareness and compliance with this Policy among its employees, providers, contractors, and third parties involved in the processing of personal data. This Policy may be updated periodically to reflect legal, operational, or technological changes.