PERSONAL DATA PROTECCION POLICY
OF PARIWANA HOSTELS

I. ABOUT THIS PERSONAL DATA PROTECTION POLICY

The purpose of this policy is to explain how Grupo Pariwana, comprised of Inversiones Feralco S.A.C. and Investur Perú S.A.C. (hereinafter, “Pariwana Hostels”), protects and processes the personal data of clients, guests, suppliers, tour operators, travel agencies, and collaborators (all of them jointly referred to as the “Users”), collected through different channels, whether physical or digital, for the purposes duly informed by Pariwana Hostels.

Only persons over 18 years of age and/or those with sufficient legal capacity may be considered Users. Likewise, the User shall be solely responsible for any third-party data provided, as well as for ensuring that such third parties have been informed of this Personal Data Protection Policy and, where necessary, that the corresponding authorizations have been obtained in accordance with applicable regulations.

This policy applies to the personal data of Users, provided by them freely, voluntarily, and knowingly. The information collected and stored includes basic data entered through registration, contact, or similar forms, such as, for example, name, national ID, passport, gender, age, telephone number, email address, country of residence, among others; as well as data collected through the various channels necessary for the provision of Pariwana Hostels’ services. In any case, Users will be able to identify which data are essential for the proper provision of the service and which are optional before submitting their personal data.

Likewise, in the case of guests and potential guests, Pariwana Hostels may request, capture, and retain a physical or digital copy of the passport, identity card, or other valid identification document, as well as extract certain data from such document through technological tools for character recognition and reading (OCR/MRZ), for the purpose of managing pre-check-in and/or check-in, registering the guest in Pariwana Hostels’ operational systems, and complying with applicable legal, immigration, security, and tax obligations.

The User shall be solely responsible for the truthfulness and accuracy of the data provided.

II. APPLICABLE LEGISLATION

This policy is governed by the laws of the Republic of Peru, in particular by Law No. 29733, Personal Data Protection Law (hereinafter, the “Law”), and Supreme Decree No. 016-2024-JUS, which approves its Regulations (hereinafter, the “Regulations”).

Accordingly, any matter not expressly provided for in this policy shall be governed, on a supplementary basis, by the Law and the Regulations. This policy has been developed based on the principles and provisions established therein. Therefore, the personal data of our Users will be collected for a specific, explicit, and lawful purpose and will not be used for a different or incompatible purpose from the one informed at the time of collection, except where permitted by the Law and the Regulations.

III. GENERAL INFORMATION

Pariwana Hostels is engaged in providing accommodation services for young independent travelers, as well as certain complementary services. For this purpose, it collects, uses, manages, transfers, stores, and processes information that may be associated with Users in the course of its activities and interactions.

In accordance with the Law and the Regulations, Pariwana Hostels undertakes to guarantee and implement measures for the security of information, taking into account the confidentiality, integrity, and availability of the personal data provided.

The personal data processed under this policy must be truthful, accurate, updated whenever possible, necessary, relevant, and adequate in relation to the purpose for which they were collected. They shall be retained in a manner that guarantees their security and only for the time necessary to fulfill the purpose of the processing, as well as for any additional period required by applicable law or while legal, contractual, tax, immigration, or administrative liabilities may arise.

Pariwana Hostels and, where applicable, data processors, adopt the technical, organizational, and legal measures necessary to guarantee the security and confidentiality of personal data. Pariwana Hostels has appropriate security measures in place, consistent with the type of processing to be carried out and the category of personal data involved.

Pariwana Hostels informs its Users that they may exercise their right to personal data protection contained in Article 2, subsection 6, of the Political Constitution of Peru before the National Personal Data Protection Authority and, in judicial proceedings, before the Judiciary, for the initiation of the corresponding habeas data action.

IV. PRINCIPLES OF PERSONAL DATA PROTECTION

This policy is governed by the following principles:

• Lawfulness: We process data in accordance with current regulations.
• Purpose Limitation: Data are collected only for legitimate, specific, explicit purposes related to the activities and services of Pariwana Hostels.
• Consent: Prior authorization from the data subject is obtained when required, except in the cases provided by applicable law.
• Proportionality: The processing of personal data must be adequate, relevant, and not excessive in relation to the purpose for which they were collected.
• Quality: Personal data to be processed must be truthful, accurate and, whenever possible, up to date, necessary, relevant, and adequate for the purpose for which they were collected.
• Availability of Remedies: Data subjects must have access to the administrative and judicial mechanisms necessary to assert and protect their rights.
• Security: Security measures are implemented to prevent unauthorized access, loss, alteration, improper processing, or unauthorized disclosure of personal data.
• Transparency: Data subjects are informed about the processing of their personal data in a clear, simple, and accessible manner.
• Proactive Accountability: Legal, technical, and organizational measures are applied to ensure effective compliance with this policy, the Law, and the Regulations.
• Storage Limitation: Data are stored only for as long as necessary to fulfill their purpose or for the period required by law.

V. PURPOSES OF PERSONAL DATA PROCESSING

Personal data are collected and processed for the following purposes:

Guests of Pariwana Hostels

• Registration and management of accommodation bookings.
• Management of digital or in-person pre-check-in and/or check-in.
• Capture, retention, and verification of the image of the identity document presented by the guest.
• Automated extraction of data contained in identity documents through technological character recognition and reading tools (OCR/MRZ).
• Registration of the guest in Pariwana Hostels’ operational and administrative systems.
• Issuance of payment receipts or invoices.
• Compliance with legal, immigration, security, and tax obligations.
• Documentary support for the application of tax or fiscal benefits when applicable, including VAT exemption for non-domiciled guests, in accordance with applicable regulations.
• Management of complaints, claims, requests, and inquiries related to the stay.
• Sending promotional information, only when applicable and when prior authorization from the data subject has been obtained, if required.
• Creation and dissemination of advertising or promotional digital content for Pariwana Hostels, only with the prior authorization of the data subject when applicable.
• Analysis and identification of customer expectations and preferences, only when compatible with applicable regulations or when the corresponding authorization has been obtained, if required.
• Collection and use of photographs and videos taken in common areas, events, activities, and experiences organized by Pariwana Hostels for promotional, advertising, or institutional communication purposes, when applicable and in accordance with the corresponding authorizations.

Employees and Collaborators

Pariwana Hostels will request personal information from its employees and collaborators in order to comply with current labor law requirements and/or for the development of projects related to Human Resources and Talent Management, such as payroll records, attendance control, staff recruitment, commission payments, among others.

Likewise, it may process personal data to comply with policies and procedures related to the prevention of money laundering and terrorism financing, when applicable.

Tour Operators and Suppliers

• To manage payment for the tourism services and products requested.
• To contact them regarding the provision of contracted services and products.
• To manage the corresponding commercial, contractual, operational, accounting, and administrative relationship.

Other Purposes

• To ensure the security of Users and Pariwana Hostels in all hostel facilities, through video surveillance systems in various areas and public zones.
• To respond to requests from administrative, immigration, tax, police, or judicial authorities, when applicable.
• To comply with legal and regulatory obligations applicable to Pariwana Hostels.

VI. DATA RETENTION PERIOD

Personal data shall be retained for as long as necessary to fulfill the purpose for which they were collected, as well as for the periods required by applicable law or while legal, contractual, tax, immigration, or administrative liabilities may arise.

In the case of images of identity documents and guest registration data, retention may be extended for the time necessary to support compliance with applicable legal, immigration, security, and tax obligations.

VII. RIGHTS OF DATA SUBJECTS

Data subjects may exercise the following rights:

• Information and Access: To be informed by the data controller and to know what personal data Pariwana Hostels holds and how such data are being used. For this purpose, the data subject must submit a request by email to the person responsible for personal data processing.
• Rectification: To correct inaccurate, incomplete, or outdated data, through the procedure set out in Section IX of this policy.
• Erasure: To request the deletion of their data when they are no longer necessary or when applicable under the relevant regulations.
• Objection: To object to the processing of their data in the cases provided by applicable regulations.
• Objective Processing: To request that personal information be used only for authorized or legally permitted purposes.
• Revocation: To revoke the authorization granted, when such authorization was the legal basis for the processing and provided that such revocation is legally applicable.
• Free Access: To access, free of charge and in accordance with applicable law, their personal data that have been processed.

The rights of information, access, rectification, erasure, objection, and objective processing of personal data may only be exercised by the data subject, without prejudice to the rules governing representation.

The exercise of one or more rights does not exclude the possibility of exercising any of the others, nor may it be understood as a prior requirement for the exercise of any of them.

VIII. INFORMATION SECURITY

Pariwana Hostels has adopted the legally required personal data protection measures and has made its best efforts, implementing measures that are reasonably required according to current technical knowledge and good practices for the custody and management of information, in order to prevent the loss, misuse, alteration, unauthorized access, unlawful intrusion, improper processing, or theft of the personal data provided by Users.

IX. REQUEST HANDLING PROCEDURE

The data subject or their duly accredited representative may submit inquiries, requests, or claims related to the processing of their personal data to Pariwana Hostels, subject to prior identity verification, through a written communication addressed to Pariwana Hostels with the reference “PERSONAL DATA PROCESSING”, to the following addresses:

Legal address: Av. José Larco 189, Miraflores, Lima, Peru
Email:info@pariwanahostel.com

Through these channels, the data subject may exercise their rights of access, information, rectification, erasure, objection, and objective processing, as well as revoke their consent when legally applicable.

Pariwana Hostels shall respond to the inquiry, request, or claim through the same channel by which it was submitted or through any other channel that is reasonably suitable for its proper handling, within the time periods established by applicable law.

X. DATA TRANSFER AND DATA PROCESSING BY THIRD PARTIES

Personal data may be processed by third parties that provide services to Pariwana Hostels and act on its behalf, such as technology providers, cloud hosting services, hotel management systems, document processing tools, support, storage, and other services necessary for the operation of Pariwana Hostels. Such third parties shall process the data in accordance with Pariwana Hostels’ instructions and applicable law.

Likewise, personal data may be disclosed to administrative, immigration, tax, police, or judicial authorities when there is a legal obligation, a valid request, or when such disclosure is necessary to comply with applicable regulations.

If the providers, servers, or technological infrastructures used are located outside Peru, the processing may involve international transfers of personal data, which shall be carried out in accordance with applicable law and with the corresponding protection measures.

XI. DATA CONTROLLER AND ITS OBLIGATIONS

The data controller is responsible for supervising compliance with this policy. Without prejudice to the other provisions set forth in the Law and the Regulations, its obligations include the following:

• To guarantee the User, at all times, the full and effective exercise of their rights related to personal data protection.
• To take the measures necessary to preserve the information under the security conditions required to prevent its alteration, loss, consultation, use, or unauthorized or fraudulent access.
• To timely update, rectify, erase, or suppress the data in accordance with applicable regulations.
• To process inquiries, requests, and claims submitted by Users in accordance with the terms established by the Law and the Regulations.
• To allow access to information only to those persons duly authorized to access it.
• To inform the National Personal Data Protection Authority when security incidents or situations that must be reported under applicable regulations occur.
• To comply with the instructions and requirements issued by the National Personal Data Protection Authority.
• To safeguard the security of the databases containing personal data.

XII. AMENDMENTS

This policy may be updated in accordance with regulatory, operational, or changes in the way Pariwana Hostels processes personal data. The updated version will be published on the official Pariwana Hostels website: https://www.pariwana-hostel.com/

XIII. DISCLAIMER OF LIABILITY

If the User does not provide the information required by Pariwana Hostels, this may result in the following consequences:

a) Inability to provide the contracted services: Some data are essential for booking scheduling and management, guest registration, and compliance with applicable legal obligations. The absence of such information may prevent us from fulfilling our contractual and legal obligations.

b) Inability to use digital pre-check-in: Failure to provide the image of the identity document or the necessary data may prevent the use of digital registration tools and require the guest to complete the process in person at reception.

c) Inability to apply tax benefits: In cases where regulations require documentary support, failure to provide or validate the identity document may prevent the application of the corresponding tax or fiscal benefits.

d) Limitations in service: Without the necessary data, Pariwana Hostels may be unable to respond effectively to inquiries, specific requests, or adjustments related to the User’s stay.

XIV. OUR COOKIE POLICY

At Pariwana Hostels, we value your privacy and want to be fully transparent about the use of tracking technologies on our website.

Currently, our website does not use first-party or third-party cookies. This means that we do not store information in your browser nor carry out any type of tracking of your online activity through cookies.

We are committed to maintaining this policy as long as cookie technology is not implemented and, if that changes, you will be duly informed and your consent will be requested in accordance with applicable law.

If you have any questions about this policy, you may contact us at: info@pariwanahostel.com