PRIVACY POLICY

PAYET, REY, CAUVI, PÉREZ S. CIVIL DE R.L. (“PRCP”), holder of RUC No. 20299704913, with registered address at Av. Víctor Andrés Belaunde Nro. 147 Int. 1201 (Torre Real Tres, 12th Floor), province and department of Lima, district of San Isidro, hereby makes available to the users (the “Users”) of the website https://prcp.com.pe (the “Website”) its Privacy Policy (the “Policy”), in accordance with Law No. 29733, Personal Data Protection Law (the “LPDP”) and its Regulations, approved by Supreme Decree No. 016-2024-JUS (the “Regulations”).

1. Where do we process Personal Data?

PRCP processes the data collected through the Website in the following Personal Data Databases registered before the National Authority for the Protection of Personal Data (“ANPDP”):

By providing their data, the User declares and certifies that such data belongs to them. Furthermore, the User declares that all information provided is true, complete, and accurate, and assumes liability for its truthfulness, accuracy, completeness, and validity.

The personal data requested by PRCP is necessary, unless otherwise indicated, as it is used to fulfill the purposes described in the following section. Consequently, if such data is not provided, or is provided in an inaccurate or incomplete manner, the purposes for which it was collected cannot be fulfilled.

2. For what purposes do we use your personal data?

The personal data provided by Users will be used for:

Where applicable, and in the event that Users provide their consent, their personal data may be processed for additional purposes, such as advertising. It is hereby stated that the User's acceptance or refusal regarding any additional purpose does not condition the execution of the primary purposes detailed above.

3. What is the retention period for personal data?

Personal data will be stored for the duration of the legal, commercial, contractual, or any other relationship maintained with the User, and for up to a period of 10 years following its termination, in accordance with the statute of limitations for liability established in the Civil Code.

Additionally, in cases where consent has been granted for additional purposes, personal data will be retained for a period of 10 years from the date such consent was granted (in accordance with the statute of limitations for liability established in the Civil Code) or until such consent is revoked, whichever occurs first.

4. Who can access your Personal Data?

To fulfill the aforementioned purposes, PRCP may transfer and outsource the processing of Users' personal data to third parties located within and/or outside the national territory. In such cases, PRCP guarantees that the processing of such Personal Data will be limited to the previously authorized purposes, kept confidential, and that appropriate security measures established under the LPDP and its Regulations will be implemented.

The third-party recipients or processors who may carry out the processing of Personal Data are identified in Annex I – Data Processors, which forms an integral part of this Policy.

Users' personal data may only be used for limited purposes, as set forth above. Consequently, this data will not be shared with third parties for purposes other than data processing services, unless express consent is provided and/or a legal obligation exists.

5. How can you exercise the rights granted to you by the LPDP over your personal data?

PRCP recognizes and guarantees the exercise of the right to information and the rights of access, rectification, cancellation, and opposition (“ARCO” rights) held by Users as the owners of their Personal Data. To this end, the owner of the Personal Data must submit their request to PRCP at the following email address: publicaciones@prcp.com.pe .

If the User considers that their request to exercise these rights has not been properly addressed, they may file a complaint with the National Authority for the Protection of Personal Data by writing to the filing office (mesa de partes) of the Ministry of Justice and Human Rights at: Calle Scipion Llona 350, Miraflores, Lima, Peru; or by filling out the form published at the following link.

6. Can this Privacy Policy be modified or updated?

PRCP may modify and/or update this Privacy Policy to adapt it to future regulatory changes, implement best practices, provide a higher quality of service, or communicate new alternatives related to this document. In such cases, the changes will be promptly communicated to Users so that they may grant or deny their consent again, as applicable.

Annex I

Data Processors