AAP Privacy Policy

1. Introduction

At Aeropuertos Andinos del Perú we are committed to maintaining the privacy and protect the information of our customers, visitors, suppliers and employees in accordance with the provisions of Law No. 29733, Law on the Protection of Personal Data, its Regulations and complementary standards, adopting the necessary technical and organizational measures to prevent the loss, misuse, alteration, unauthorized access and theft of personal data provided by its owners. Likewise, AAP guarantees the continuous improvement of these measures.

In this context, we declare the following guidelines which we must inform to our prospective customers, visitors, suppliers and employees, clearly and unequivocally, when their personal data is collected through any of our channels:

  • The existence of the processing of personal data, the purpose of the collection and recipients of the information.
  • The mandatory or optional nature of the answer to the questions that may be posed to them, as well as the consequences of obtaining personal data or refusing to provide them.
  • The possibility of exercising your rights of access, rectification, cancellation and opposition.
  • The identity and address of the personal data controller.

 

2. The identification and address of the owner of the Data Banks

AAP, identified with R.U.C. No.20538593053 and with address at Av. Mariscal José de la Mar No. 1263 Int. 305, Urb. Santa Cruz, Miraflores – Lima, is a private company that holds the status of Concessionaire of the Second Group of Provincial Airports of the Republic of Peru

3.Definitions

  • Personal Data: Any information about a natural person that identifies them or makes them identifiable through means that can be reasonably used. For example, names, identity documents, telephone numbers, among others, that identify or can identify an individual.

 

  • Processing of personal data: Any operation or technical procedure, automated or not, that allows the collection, registration, organization, storage, conservation, processing, modification, extraction, consultation, use, blocking, deletion, communication by transfer or dissemination or any other form of processing that facilitates access, correlation or interconnection of personal data.

4. Purposes

The personal data of which the processing is carried out have the following purposes:

Regarding the Data Bank called "Passengers":

Record and store the personal data of likely users, persons interested in using the airports, for the sending of communications, promotions and/or advertising about the operation and services at the airport.

Regarding the Data Bank called "Passengers":

Have a record of all passengers' information. This database is used to send information on airport operations, offers, promotions and/or advertising, as well as to define commercial strategies, define trends, consumption behaviors.

Regarding the Data Bank called "Suppliers" 

Maintain control of the information of our suppliers, we create files of information of each one. These files are updated periodically and are part of our evaluation criteria when deciding on the purchase of goods or acquisition of services.

Regarding the Data Bank called "Tenants" 

Maintain control of the information of our tenants, we create files of information of each one. These files are updated periodically and are part of our database for sending information, communications from AAP, etc. 

Regarding the Data Bank called "Employees":

Maintain a record of the data of all employees and interns of the company in order to carry out the Human Management processes. This information will be kept in the company's files according to the deadlines established by Law.

Regarding the Data Bank called "Access Control":

Collect the data of people who enter public and non-public areas of AAP to carry out access control by security measures.

Regarding the Data Bank called "Video Surveillance – Internal Facilities":

Have an image record for the control of security measures of the internal facilities of AAP.

Regarding the Data Bank called "Video Surveillance – Commercial Spaces":

Have an image record for the control of security measures of the AAP commercial facilities.

5. Mandatory personal data

To carry out the purposes described in this privacy policy, it is mandatory to provide us, at least, with the following personal data: name and surname, number and type of identity document, fingerprint (where applicable) credit and/or debit card details (where applicable), image (where applicable, address (where applicable), email address (where applicable), and telephone number (where applicable).

6. Consequences of providing personal data and of the refusal to do so

Unfortunately, if you do not allow us to access, at least, the data described in the previous paragraph, it will be impossible to generate a business relationship with you, so we will be prevented from fulfilling the offers that we could provide through our business executives.

7. Transfer of personal data to third parties

AAP may not transfer your personal data nationally or internationally, except with the prior authorization of the holder of personal data or by legal mandate, with the following types of companies, and for the purposes detailed below:

  • Business Partners

Purpose: To define commercial strategies, define trends, consumption behaviors, develop tariff plans, define offers and promotions that are attractive to customers.

  • Data processors

Purpose: Support services such as: data processing, marketing of our services, hosting providers, collection procedures, among others.

It should be noted that these companies are not authorized to use the personal data we share with them for any purpose other than that indicated in the terms of this Privacy Policy. When AAP proceeds in this way, it will take the precautions that, according to current legislation, are necessary to protect the confidentiality and security of your personal data.

  • Financial and banking institutions

Purpose: Processing payments for the provision of our services.

  • Public Administration

Purpose: Compliance with the provisions of current regulations.

Where appropriate, before disclosing personal data to a third party, AAP will contractually require the third party to take the necessary precautions to protect the data against unauthorized use or disclosure.

If you do not wish AAP to share your personal data with its business partners, please make your request by visiting:

 

ARCO Rights Request

8. Identification of Personal Data Banks

The personal data you provide us will be stored in the following Data Banks:

  • Passenger Personal Data Banks (RNPDP Code No. 6530),
  • Passenger Personal Data Banks (RNPDP Code Record No. 887)
  • Access Control Personal Data Banks (RNPDP Code No. 17682)
  • Video Surveillance Personal Data Banks – Internal Facilities (RNPDP Code No. 16824)
  • Video Surveillance Personal Data Banks – Commercial Offices (RNPDP Code No.17201)
  • Supplier Personal Data Banks (RNPDP Code No. 886)
  • Employee Personal Data Banks (RNPDP Code No. 885)

9. Personal Data conservation time

Customer information will be stored for up to five (5) years after the fulfillment of the purposes described in this Policy.

The stored images from the videocameras will be stored for a period of 30 days and up to a maximum period of 60 days, as indicated in Directive No. 01-2020-JUS-DGTAIPD.

The personal data of employees, which includes those related to health, will be stored for five (5) years after the termination of the employment relationship, as provided for in Article 3 of Legislative Decree No. 1310, Legislative Decree Approving Additional Administrative Simplification Measures; or until the expiration of the limitation period for the worker to claim their labor benefits, AFP contributions or disciplinary sanctions imposed.

The personal data of suppliers will be stored for the duration of the contractual relationship.

10. Safety and Confidentiality

AAP has all the necessary technical, legal and organisational measures in place to ensure the security and confidentiality of your personal data. Your personal data will be processed considering the principles of legality, consent, proportionality, quality, security and others present in the current regulations regarding the Protection of Personal Data, preventing them from being filtered, disseminated or any action that endangers your personal information.

11. Exercise of your Rights 

AAP, concerned about the best treatment of your personal data, informs you that you have the right to exercise your rights of access, rectification, cancellation and opposition in person at our AAP Customer Service offices located at Av. Mariscal Jose de La Mar No. 1263, Office 305, Miraflores, Lima, as well as by visiting: 

 

ARCO Rights Request.

12. Changes to the Privacy Policy

AAP reserves the right to modify and/or update this Privacy Policy as part of its continuous improvement, either to adapt it to future regulatory changes, provide a better quality of service or communicate new alternatives related to this Policy.

You will be notified of any changes to this Privacy Policy by posting the updated or modified version of this Privacy Policy on this Site. When you use this Site, the AAP Application, or other means where you become aware of this Privacy Policy after such changes, you are consenting that personal data obtained from or about you after the revised Privacy Policy is posted, will be subject to the revised Privacy Policy.

You can access this Privacy Policy at any time by clicking on the button marked “Privacy Policy” at the bottom of the AAP website.

Privacy Policy updated as of June 28, 2023.