PERSONAL DATA PROTECCION POLICY
OF PARIWANA HOSTELS

I. PRIVACY POLICY

The purpose of this policy is to inform you about how Grupo Pariwana, comprised of Inversiones Feralco S.A.C., Investur Perú S.A.C., and Investur Chile SpA (hereinafter "Pariwana Hostels"), protects and processes the personal data of clients, guests, suppliers, tour operators, travel agencies, and collaborators (all referred to as Users), which have been obtained through various channels, whether physical or digital, for the purposes duly informed by Pariwana Hostels. Users are only those over 18 years of age and/or those with sufficient legal capacity. Furthermore, Users shall be solely responsible for the data provided by third parties, as well as for ensuring that they have been informed of this Privacy Policy and have obtained their express consent.

This policy is directed to the personal data of Users, provided by them, freely and voluntarily. The information collected and stored includes basic data entered through registration, contact, or other similar forms; such as, for example, name, ID, passport, gender, age, telephone number, email address, country of residence, among others, data collected through various channels necessary for the provision of Pariwana Hostels services. In any case, users will be able to see which data is essential for the proper provision of the service and which is incidental before submitting their personal data.

The User will be solely responsible for the truthfulness and accuracy of the data provided.

II. APPLICABLE LEGISLATION

This policy is governed by the laws of the Republic of Peru, in particular by Law No. 29733 (hereinafter the Law) and Supreme Decree No. 016-2024-JUS (hereinafter the Regulations).

Consequently, anything not provided for in these policies will be subject to the supplementary provisions of the Law and the Regulations. Therefore, these policies have been developed based on the Principles described in the Law and Regulations. Consequently, our Users' personal data will be collected for a specific, explicit, and lawful purpose and will not be extended to any purpose other than that established at the time of collection, excluding cases of activities of historical, statistical, or scientific value when a dissociation or anonymization procedure is used, in accordance with the provisions of the Law.

III. GENERAL INFORMATION

Pariwana Hostels' purpose is to provide accommodation services for young independent travelers, as well as to provide some complementary services. For this purpose, information is collected, used, managed, transferred, stored, and processed, which may be associated with information belonging to Users in the development and interaction of its activities.

Pariwana Hostels, in accordance with the Law and Regulations, undertakes to guarantee and adopt measures for information security, taking into account the confidentiality, integrity, and availability of the personal data provided. Personal data processed under this policy must be truthful, accurate, up-to-date to the extent possible, necessary, relevant, and adequate for the purpose for which it was collected. It will be retained in a manner that guarantees its security and only for the time necessary to fulfill the purpose of the processing.

Pariwana Hostels and, where applicable, the data processors, adopt the necessary technical, organizational, and legal measures to guarantee the security and confidentiality of personal data. Pariwana Hostels has appropriate security measures in place, consistent with the processing to be carried out and the category of personal data in question.

Pariwana Hostels informs its Users that they may exercise their right to personal data protection, as contained in Article 2, paragraph 6, of the 1993 Constitution, before the National Data Protection Authority and before the Judiciary for the purpose of initiating the corresponding habeas data process.

IV. PERSONAL DATA PROTECTION PRINCIPLES

This policy is governed by the following principles:

• Legality: We process data in accordance with current regulations.

• Purpose: Data is collected only for legitimate purposes related to the hosting service.

• Consent: Prior authorization is obtained from the data subject, except for legal exceptions.

• Proportionality: The processing of personal data must be adequate, relevant, and not excessive for the purpose for which it was collected.

• Quality: The personal data to be processed must be truthful, accurate, and, to the extent possible, up-to-date, necessary, relevant, and appropriate for the purpose for which it was collected.

• Availability of Resources: Data subjects must have the necessary administrative and judicial means to claim and assert their rights.

• Security: Security measures are implemented to prevent unauthorized access.

• Transparency: Data subjects are informed about the use of their data.

• Proactive Accountability: Legal, technical, and organizational measures must always be applied to ensure effective compliance with this policy, the Law, and the Regulations.

• Retention Period: Data is stored only for the time necessary to fulfill its purpose or as required by law.

V. PURPOSES OF DATA PROCESSING

Personal data is collected and processed for the following purposes:

Pariwana Hostels Guests:

• Registration and management of accommodation reservations.
• Issuance of payment receipts.
• Compliance with legal and tax obligations.
• Handling complaints and claims.
• Sending promotional information (with prior consent).
• Creation of digital advertising content for Pariwana Hostels (with prior consent).
• Analyzing and identifying customer expectations and preferences (applicable only if the user has given their consent).

Employees and Collaborators:

• Pariwana Hostels will request personal information from its employees and collaborators to comply with current labor regulatory requirements and/or the development of projects related to Human Resources and Talent Management, such as payroll registration, staff attendance, personnel selection, commission payments, among others.
• Comply with the policy and procedures of the Anti-Money Laundering and Counter-Terrorism Financing Policy.

Tourism Operators and Suppliers:

• Provide payment for requested tourism services and products.
• To contact us regarding the provision of contracted services and products.

Other purposes:

• Security of Users and Pariwana Hostels throughout the Accommodation facilities, through video surveillance in various areas and public spaces within the accommodations.

VI. DATA RETENTION PERIOD

Personal data will be retained for a maximum period of five (5) years after the purpose for which it was collected has been fulfilled, unless a specific regulation requires a different period.

VII. RIGHTS OF DATA SUBJECTS

Subjects of personal data may exercise the following rights:

• Information and Access: To be informed by the data controller and to know what personal data Pariwana Hostels holds and how it is being used. To this end, the data subject must submit a request by email to the data controller.
• Rectification: To correct incorrect or outdated data, using the procedure set forth in section IX of this policy.
• Cancellation: Request the deletion of your data when it is no longer necessary. Requests can be submitted by email to Pariwana Hostels and will be processed within a maximum of 10 business days.
• Objection: Refuse the processing of your data in certain cases.
• Processing Objective: That personal information be used only for authorized purposes.
• Revoke authorization and/or request the deletion of data when the processing does not respect constitutional and legal principles, rights, and guarantees. Revocation and/or deletion will be required when the National Personal Data Protection Authority has determined that Pariwana Hostels or the designated data processor has engaged in conduct contrary to Law 29733, the Regulations, and the Constitution.
• Access your personal data that has been processed free of charge, under the conditions defined in this document.

The rights to information, access, rectification, erasure, objection, and objective processing of personal data may only be exercised by the data subject, without prejudice to the rules governing representation.

The exercise of one or more of these rights does not preclude the possibility of exercising one or more of the others, nor can it be construed as a prerequisite for exercising any of them.

VIII. INFORMATION SECURITY

Pariwana Hostels has adopted the legally required personal data protection measures and has made its best efforts and implemented the measures reasonably required in accordance with current technical knowledge and good practices for the custody and management of information to prevent the loss, misuse, alteration, illegitimate intrusion, and theft of personal data provided by users.

IX. PROCESSING APPLICATIONS

The data subject or their heirs have the right to submit queries, corrections, and/or complaints to Pariwana Hostels, after verifying their identity, by writing to the following address at any time. They may withdraw their consent for the processing of their personal data and/or exercise their rights of access, information, rectification, objection, deletion, restriction, erasure, portability, and the right not to be subject to individualized decisions by writing to Pariwana Hostels with the reference "PERSONAL DATA PROCESSING" at the following addresses:

Legal Address: Av. José Larco 189, Miraflores, Lima, Peru

Email: info@pariwanahostel.com

Pariwana Hostels will respond to the query and/or complaint by the same means it was submitted.

X. DATA TRANSFER

Personal data will not be shared with third parties without the data subject's consent, except under legal obligation.

XI. DATA CONTROLLER AND ITS OBLIGATIONS

The data controller is responsible for supervising compliance with this policy. Without prejudice to other provisions set forth in the Law and the Regulations, their obligations are as follows:

• To guarantee the User, at all times, the full and effective exercise of the right to habeas data.
• To take the necessary measures to preserve the information under the necessary security conditions to prevent its alteration, loss, unauthorized or fraudulent access, use, or consultation.
• To promptly update, rectify, or delete data in accordance with the terms of this law.
• To update the information reported by the Data Controllers within ten (10) business days of receipt.
• To process inquiries and complaints made by Users in accordance with the terms established by law.
• To refrain from sharing personal information, except by legal or judicial order.
• To allow access to the information only to those who may have access to it.
• Inform the National Authority for Personal Data Protection when security policy violations occur and risks arise in the management of Data Subject information.
• Comply with the instructions and requirements issued by the National Authority for Personal Data Protection.
• Safeguard the security of databases containing personal data.

XII. MODIFICATIONS

This policy may be updated in accordance with regulatory changes. The updated version will be published on [include website].

XIII. DISCLAIMER

If the User does not provide the information required by Pariwana Hostels, this may result in the following consequences:

a) Inability to provide the contracted services: Some data is essential for scheduling and managing reservations. The absence of this information could prevent us from fulfilling our contractual obligations.

b) Limitations in service: Without the necessary data, we would be unable to effectively respond to the User's inquiries, specific requests, or adjustments to their itineraries.

XIV. OUR COOKIE POLICY

At Pariwana Hostels, we value your privacy and want to be completely transparent about the use of tracking technologies on our website.

Currently, our website does not use its own or third-party cookies. This means we do not store information in your browser or track your online activity through cookies.

We are committed to maintaining this policy until cookie technology is implemented. If this changes, you will be duly informed and your consent will be requested in accordance with current legislation.

If you have any questions about this policy, please contact us at: info@pariwanahostels.com