Privacy Policy

1. Scope

This “Personal Data Processing Policy” applies to all personal data processing activities carried out by FITO PERU EXPORT IMPORT S.A.C. (hereinafter “FITO PERU”). It shall also apply to those persons or companies that Ibero Librerías requires to process personal data for which it is responsible.

2. General information

FITO PERU is an autonomous association dedicated to providing loans to its members. As part of our activity, FITO PERU treats personal data in compliance with the provisions of “Law 29733”, Personal Data Protection Law, its Regulations, approved by Supreme Decree 003-2013-JUS, and its complementary and amending rules (all these hereinafter defined as the “Personal Data Protection Regulations”). The personal data processed by us are stored in personal data banks owned by FITO PERU.

3. Target

The purpose of this Policy is to inform the public of our commitment to the protection of personal data, as well as the guidelines under which we process such data in the exercise of our commercial activities, the purpose for which we do so, as well as the procedures for the holders of such data to exercise their rights of access, rectification, cancellation and opposition provided for in the Personal Data Protection Regulations.

4. Purpose of personal data processing

FITO PERU processes personal data of collaborators, customers and potential customers, suppliers and all those who visit our facilities and/or have any legal or commercial relationship with our company, in order to comply with current legislation, execute the legal relationship that the holders of personal data maintain with our entity, as well as any other lawful purpose duly informed to the said holders of personal data.

5. Guiding Principles

FITO PERU undertakes to respect the guiding principles set forth in the Personal Data Protection Regulations. These are:

Principle of legality: The processing of personal data is done in accordance with the provisions of the Law, being prohibited the collection of personal data by fraudulent, unfair or unlawful means.

Principle of consent: For the processing of personal data, the consent of the owner must be obtained.

Principle of purpose: Personal data must be collected for a specific, explicit and lawful purpose, and its processing must not be extended to a purpose other than that for which it was collected.

Principle of proportionality: The processing of personal data must be adequate, relevant and not excessive to the purpose for which they were collected.

Quality principle: The personal data to be processed must be truthful, accurate and, as far as possible, up to date, necessary, relevant and adequate with respect to the purpose for which they were collected.

Security principle: The owner of the personal data bank and the person in charge of its processing must adopt the necessary technical, organizational and legal measures to guarantee the security of the personal data.

Principle of availability of recourse: The holder of personal data must have the necessary administrative or jurisdictional means to claim and enforce their rights, when these are violated by the processing of their personal data.

Principle of adequate level of protection: For the transborder flow of personal data, a sufficient level of protection must be guaranteed for the personal data to be processed or, at least, comparable to that provided by the Personal Data Protection Law or by international standards on the matter.

6. Consent

FITO PERU requires the free, prior, express, unequivocal and informed consent of the owner of the personal data for the processing of the same, except in the cases of exception expressly established by Law. FITO PERU does not require consent to process your personal data obtained from publicly available sources, free or not; likewise, it may process your personal data or from non-public sources, provided that such sources have your consent to process and transfer such personal data.

7. Transfer of personal data

FITO PERU may transfer personal data locally and internationally to companies of the group, for any of the purposes indicated in point IV of this Policy in those cases in which it is legitimized to do so. Ibero Librerías may transfer personal data to public entities legally empowered within the scope of their competencies in compliance with current or future regulations or at their request.

8. Treatment on demand

FITO PERU cannot entrust part of the processing of personal data for which it is responsible for the processing or which are part of the personal data banks of which it is the owner, to legitimate suppliers.

9. Rights of owners

According to the Law, the holders of personal data have the following rights:

• Right of access and information:

The holder of personal data has the right to obtain information about himself/herself that is subject to processing in data banks owned by FITO PERU.

• Right of rectification, updating and inclusion:

The holder of personal data has the right to update, include and rectify his personal data processed by FITO PERU when they are partially or totally inaccurate, incomplete or when an omission, error or falsehood has been detected.

• Right of Cancellation or Deletion:

The holder of personal data may request the cancellation or suppression of his/her personal data not related or necessary for the execution of FITO PERU’s obligations under the contracts entered into or those provided for by the regulations in force.

• Right of Opposition:

The holder of personal data may object to the processing of his personal data at any time. The opposition will proceed to the extent that the processing has no contractual or legal justification.

10. Procedure for the exercise of the rights of the holder of personal data

Holders may revoke their consent or exercise their legal rights by presenting their ID card or other official identity document and sending their request and/or inquiries to:

E-mail: info@fitoperu.com

Headquarters: Av. Separadora Industrial 864, Ate.

In case the owner of the personal data requires to exercise his/her rights through a representative, he/she must present a power of attorney legalized by a notary public empowering him/her as such and his/her identity document.

11. Time limit for the processing of personal data

In compliance with current regulations, FITO PERU adopts the appropriate legal, organizational and technical measures to ensure the security of personal data, avoiding its alteration, loss, improper processing or
unauthorized access.

For this purpose, it makes available all the necessary human and technological resources, applying them in proportion to the nature of the data stored and the risks to which they are exposed. FITO PERU will only process personal data that are stored in repositories that meet the security conditions required by current legislation on personal data protection.

12. Modifications

This Policy has been updated as of September 01, 2019 and may be modified by FITO PERU. In the event of any change or modification to this Policy, the current text of the Policy will be published on our website: www.hananperu.com.