Privacy and Personal Data Protection Policy

Last updated: Jun 18, 2026

1. Data controller

The controller responsible for processing personal data is the Municipalidad Provincial de Huaylas, domiciled at Jr. San Martín N° 1121 – Plaza de Armas, Caraz, provincia de Huaylas, Áncash, Perú. For data protection matters you may write to [email protected].

2. Legal framework

This policy is governed by Law No. 29733, the Personal Data Protection Act, its Regulations approved by Supreme Decree No. 003-2013-JUS and the new Regulations approved by Supreme Decree No. 016-2024-JUS, as well as by the directives of the National Authority for the Protection of Personal Data of the Ministry of Justice and Human Rights.

3. Data we collect

• Browsing data: technical data such as IP address, device and browser type and pages visited, together with your language preference. Strictly necessary cookies are used (see the Cookie Policy).
• Data you provide voluntarily: if you contact us by email or other channels, we process the data you choose to provide (for example, name and email) solely to handle your request.
• Authorized staff accounts: the portal has an internal administration panel; only authorized Municipality staff hold credentials (name, email and an encrypted password).

This portal does not sell online and does not request sensitive data from visitors.

4. Purposes of processing

• operate, maintain and improve the site and safeguard its security;
• handle inquiries, suggestions or complaints;
• produce aggregated, anonymous usage statistics;
• manage authorized staff access to the administration panel.

5. Legal basis and consent

Processing is based on your consent —given freely, in advance, expressly and on an informed basis when using the site or contacting us—, on the exercise of the entity’s own functions, and on the use of strictly necessary cookies, which are exempt from consent as they are essential to provide the requested service.

6. Personal data bank

Data is stored in data banks under the Municipality’s responsibility, which takes the measures for their registration and declaration before the National Registry for the Protection of Personal Data where applicable.

7. Data retention

We keep data only for as long as necessary for the stated purposes and to comply with applicable legal obligations; thereafter it is deleted or anonymized.

8. Processors and transfers

To operate the site we use hosting and storage providers acting as data processors, subject to confidentiality and security obligations. Should an international data transfer be necessary, it will be carried out in accordance with Law No. 29733 and its regulations. We do not sell or assign personal data to third parties for commercial purposes.

9. Security measures

We apply reasonable technical and organizational measures —such as password encryption, secure connections (HTTPS) and access controls— to protect data against unauthorized access, loss or alteration.

10. Your rights: access, rectification, cancellation and objection

You may exercise your rights of access, rectification, cancellation and objection (ARCO rights), as well as the other rights recognized by law, by writing to [email protected] or to our address (Jr. San Martín N° 1121 – Plaza de Armas, Caraz, provincia de Huaylas, Áncash, Perú). We will handle your request within the time frames set by the regulations. If you believe your rights have not been addressed, you may file a complaint with the National Authority for the Protection of Personal Data of the Ministry of Justice and Human Rights.

11. Minors

The site is not intended to collect data from minors. If a minor provides us with data, their parent or guardian may request its deletion through the channels indicated.

12. Cookies

Cookie use is detailed in the Cookie Policy.

13. Changes to this policy

We may update this policy to reflect legal or service changes. The date of the latest update is shown at the top of the document.