Personal Data Policy
At Austral Group S.A.A. (hereinafter Austral) we care about the protection and privacy of the personal data of our internal and external customers; therefore, we are committed to ensuring absolute confidentiality of the information we keep, for which we use various security standards in accordance with the provisions of the Law on Protection of Personal Data - Law No. 29733 and its Regulations approved by Supreme Decree No. 003-2013-JUS and the Directive on the Processing of Personal Data through Video Surveillance Systems No. 01-2020-JUS/DGTAIPD.
In accordance with the law, Austral is committed to its internal and external customers to:
- Process personal data only with the prior informed, express, and unequivocal consent of the owner of the personal data
- Not to collect personal data by fraudulent, unfair, or unlawful means.
- Collect personal data that are updated, necessary, relevant, and adequate, concerning specific, explicit, and lawful purposes for which they have been obtained.
- Not to use the personal data being processed for purposes other than those for which they were collected, unless there is a procedure to protect anonymity or disassociation.
- Store personal data in a manner that enables the exercise of the rights of the owner.
- Delete and replace or, where appropriate, complete the personal data being processed when it becomes aware of its inaccuracy or incompleteness, without prejudice to the rights of the owner in this regard.
- Delete the personal data being processed when they are no longer necessary or relevant to the purpose for which they were collected or when the term for their processing has expired unless there is a procedure to protect their anonymity or dissociation.
Austral's objective is that the owner of the personal data is duly informed about the processing of their information, as well as the rights they can exercise concerning them.
The user or owner of the personal data has the right to information, access, rectification, cancellation, opposition, and objective treatment of their personal data. These rights may be exercised by the owner of the personal data or through a third party duly accredited for the exercise of such right. The user or owner must submit a request in writing to Austral's main address located at Av. Victor Andres Belaunde 147 Via Principal 123, Torre Uno, Piso 3 - San Isidro, Lima, Peru, or to the address of the nearest Austral's headquarters, or the e-mail: datospersonales@websiteaustralinstitucional2-g7cvh3cxbjhddxhw.eastus2-01.azurewebsites.net, datospersonales@websiteaustralinstitucional2-g7cvh3cxbjhddxhw.eastus2-01.azurewebsites.net with the reference "Personal Data Protection". This request shall contain the following information:
- First and last name of the holder of the right; and accreditation of the third party in case of representation, for which he/she must prove his/her authority through a legalized signature of the holder of the personal data.
- Specific request that brought about the inquiry (Exercise of the right to information, access, rectification, cancellation, opposition, and/or processing of your personal data or specific consultation).
- Domicile, or address, which may be electronic, for the purpose of sending the corresponding notifications.
- Date and signature of the applicant.
- Documents supporting the request, if applicable.
Austral's response time for resolving requests is as follows:
- Right to information: 8 working days
- Right of access: 20 working days
- Right of rectification, updating, cancellation, suppression, and/or opposition: 10 working days.
The personal data processed by us are stored in personal data banks owned by Austral, duly registered with the National Authority for the Protection of Personal Data:
Austral is subject to providing the National Authority for the Protection of Personal Data in charge of the Ministry of Justice and Human Rights, the information related to the processing of personal data that the latter may require and to allow it access to the personal data banks it manages; likewise, to comply with the legal information requirements, if applicable.
The authorization given by the user or owner of the personal data will remain in the corresponding database according to the guidelines established in the current regulations.
Minors
Austral recognizes the importance of protecting the privacy of minors; therefore, in case the personal data of minors is used, Austral will obtain the consent of their parents, guardians, or legal representatives.
Security
Austral protects the personal data collected from its internal and external customers, so electronic and operational security measures are taken to ensure the confidentiality of the data processed in order to protect the information from modifications, losses, and the treatment or access of unauthorized users, which may threaten the integrity and privacy of the information.
Access to the data is limited only to authorized employees who need such information to carry out the monitoring and analysis thereof. Furthermore, the management of personal data will not be communicated or transferred to any third party, except to those with whom a service contract has been established and who will make exclusive use of the information in line with the purpose for which it was collected.
Video surveillance
Austral has a video surveillance system in all its headquarters and production plants in order to ensure the security, control, and supervision of its facilities. The administration of the video surveillance system complies with personal data protection regulations and is governed by the provisions of this Policy, as applicable.
Austral has adopted the legally required security and personal data protection levels and has installed all the technical means and measures within its reach. All the information captured through the video surveillance system is managed in the "Video Surveillance" database registered before the Personal Data Protection Authority under the registration number RNPDP-PJP No. 19777.
In case the holder of the personal data has questions about the content of the current Policy and/or how the organization is carrying out the treatment of data in its custody, he/she may approach our offices and/or send an e-mail to datospersonales@websiteaustralinstitucional2-g7cvh3cxbjhddxhw.eastus2-01.azurewebsites.net who will answer all queries on the subject. datospersonales@websiteaustralinstitucional2-g7cvh3cxbjhddxhw.eastus2-01.azurewebsites.net quienes absolverán todas las consultas sobre el tema.
Austral hereby declares to use the personal data collected for the exclusive use of the contractual relationships it maintains with its internal and/or external customers; in this regard, it may not assign or transfer them to any third party for other purposes, unless expressly authorized by the owner.
The completion and signing of the forms represent the express consent of the holder to the collection of their personal data and its processing for the specific purposes for which it was collected.
Austral reserves the right to update or modify this Policy from time to time based on improvements to our services. Changes to this privacy policy will be published on Austral's Web Portal.
This policy was updated on May 15, 2023.
Approved by the Austral Group S.A.A. Management Committee.
VERSION: 03, effective date: 05/15/2023