Privacy Policy

Andean Pathways assumes the legal commitment to protect the personal data of all its clients, prospects, and users, in strict compliance with Law N° 29733, Personal Data Protection Law of the Republic of Peru, and its Regulation. The objective of this Policy is to inform clearly, previously, and expressly about the existence, use, purpose, security, and rights that assist the data subjects. The personal information collected is essential for the correct provision of our tourist services in Peru, and its processing is guaranteed with the highest standards of security and confidentiality.

1. Data Collection, Database, and Guiding Principles

  • Personal Data Collected: We collect the necessary information for the reservation process and operation of services, which includes: full name, nationality, date of birth, identity document or passport number, contact information (email, telephone), and payment details. For high-altitude trekkings or special routes, we may request sensitive data such as relevant medical information or blood type, always under explicit consent.
  • Existence of the Database: The personal data of our clients and prospects are stored in a Database owned and managed by Andean Pathways, duly registered with the National Personal Data Protection Authority (ANPDP) of the Ministry of Justice and Human Rights of Peru, as required by Law N° 29733.
  • Guiding Principles of the Law: Data processing is governed by the principles of Legality (in accordance with the law), Consent (prior, free, and express), Purpose (for the specific purposes of the trip), Proportionality (only necessary data), and Security (protection against unauthorized access).

2. Purpose of Information Processing (Authority)

  • Essential Service Purpose: The primary purpose is the integral management of the reservation and the provision of the contracted tourist services. This obligatorily includes: the issuance of train and bus tickets, the purchase of entry tickets to archaeological sites (e.g., Machu Picchu, Inca Trail), the procurement of travel insurance, accommodation booking, and logistical coordination with suppliers. Without this data, the agency cannot legally formalize the reservation and operation.
  • Additional Purposes: With your explicit consent, data may be used for: sending promotions, quality surveys, relevant information about your trip, and agency news (marketing). The Traveler has the right to revoke this additional consent at any time, without affecting the provision of services already contracted.
  • Sensitive Data: Medical information (sensitive data) is collected solely and exclusively to guarantee the safety of The Traveler on high-demand routes, allowing our guides to respond to medical emergencies. Its processing is carried out under rigorous security and confidentiality measures.

3. Data Recipients and Cross-Border Flow (Reliability)

  • National Transfer: Andean Pathways may transfer personal data to collaborating third parties within Peru, provided it is strictly necessary to fulfill the purpose of the service. Recipients include: DDC Cusco (for Inca Trail permits), SERNANP (for national parks), train and bus operators, hotels, and other logistical suppliers.
  • Cross-Border Flow: When operating services that use international technological platforms (e.g., reservation software, cloud servers), your data may be transferred and stored outside Peruvian territory. Andean Pathways guarantees that measures are implemented to ensure that these third-party countries or platforms maintain an adequate level of protection comparable to that of Law N° 29733.
  • Legal Obligation: The agency may disclose your personal data when required by law, by court order, or upon request by competent Peruvian governmental authorities (e.g., SUNAT, National Police, Prosecutor’s Office), in the exercise of their functions.

4. ARCO Rights and Data Security (Experience)

  • ARCO Rights: As the data subject, you can exercise your rights of Access (to know what data we have), Rectification (to correct inaccurate or incomplete data), Cancellation (to request the deletion of unnecessary data), and Opposition (to oppose processing, except by legal mandate) at any time.
  • Exercising Rights: To exercise your ARCO rights, you must submit a formal written request addressed to Andean Pathways, including a copy of your identity document or passport, to the following email address: [Insert Legal Contact Email]. The agency will respond to your request within the deadlines established by Law N° 29733.
  • Security Measures: Andean Pathways has implemented adequate technical, organizational, and legal security measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration, and destruction, including the encryption of sensitive information and the restriction of access only to authorized personnel.