Skip to main content

Ley 29733 y D.S. 016-2024-JUS

Privacy policy and processing of personal data

How Estudio Tolentino & Asociados collects, uses, retains and protects the personal data submitted through this website.

Courtesy version

This translation is provided for convenience only. The Spanish version of this document is the sole binding version; in case of any discrepancy, the Spanish text prevails.

Read the Spanish version

This policy explains in plain language what personal data the Firm collects through this website, what it uses them for, who it shares them with, how long it keeps them, and how you can exercise your rights over them.

1.Owner of the personal data bank

ESTUDIO TOLENTINO & ASOCIADOS S.A.C., RUC 20610995668, with address at Calle 2 de Mayo N.° 516, Oficina 201, Miraflores, Lima 15074 (hereinafter, the Firm), is the owner and controller of the personal data collected through this website.

For any question related to this policy or to the processing of your personal data, you may write to informes@tolentinoyasociados.pe or call us at (+51) 944 500 769.

2.Applicable legal framework

The processing of personal data carried out by the Firm is governed by Ley 29733, the Personal Data Protection Law, and by its Regulations approved by Decreto Supremo 016-2024-JUS, in force since March 30, 2025, as well as by the directives issued by the National Authority for the Protection of Personal Data, under the Ministry of Justice and Human Rights.

This policy applies exclusively to the data collected through this website. The information that clients provide in the context of a professional engagement is also governed by the duty of professional secrecy and by the terms of the corresponding services agreement.

3.Personal data collected

The Firm collects only the data that the user provides voluntarily through the forms on the site. Specifically:

  • Contact form: full name, company, RUC (optional), email address, phone number, subject of the inquiry, and the content of the message.
  • Virtual Complaints Book (Libro de Reclamaciones): full name, type and number of ID document, address, email address, telephone, details of the parent or representative when the consumer is a minor, service contracted, amount claimed, and the details of the incident and of the request.
  • Technical browsing data generated automatically, such as the IP address and browser type, when analytics tools are active.

The site does not request sensitive data. Users are advised not to include sensitive information or confidential documentation in the message field: the advisory meeting exists for that purpose, through an appropriate channel.

4.Purposes of the processing

Personal data is processed for the following purposes:

  • To handle, respond to and follow up on the inquiries submitted through the contact form or WhatsApp.
  • To prepare and send professional service proposals when the user requests them.
  • To record, handle, and respond to the claims and complaints submitted through the virtual Complaints Book (Libro de Reclamaciones), within the legal deadline, and to keep the record in accordance with consumer protection regulations.
  • To comply with the legal, accounting, tax, and regulatory obligations applicable to the Firm.
  • To measure use of the website and improve its content, where the user has accepted analytics cookies.

The data is not used for purposes other than those stated, nor is it subject to automated decisions with legal effects on the user.

5.Consent and its withdrawal

Submitting any of the forms requires the user to expressly check the authorization box. That box is not checked by default: consent is given through an affirmative action by the user, freely, in advance, expressly, and on an informed basis.

Consent may be withdrawn at any time, without retroactive effect, by writing to informes@tolentinoyasociados.pe. Revocation does not affect the lawfulness of the processing carried out before it, nor does it prevent the data from being retained where such retention is necessary to comply with a legal obligation or to defend against possible claims.

6.Retention period

Data is kept for as long as necessary to fulfill the purpose that prompted its collection and, afterward, for the applicable legal limitation periods.

Inquiries that do not lead to a professional relationship are retained for a reasonable commercial follow up period and are then deleted. Complaints Book (Libro de Reclamaciones) records are retained as required by consumer protection regulations. Documentation linked to professional engagements is retained in accordance with the legal periods applicable to the activity and to the duty of professional confidentiality.

7.Data processors and cross border data flows

To operate the website, the Firm relies on technology providers that act as data processors and that may store information on servers located outside the country. Specifically, the site's hosting provider and the form processing service.

These providers process the data following the Firm's instructions and under confidentiality and security obligations. The Firm does not sell, transfer, or share personal data with third parties for commercial purposes.

The data may be disclosed to administrative or judicial authorities where there is a legal obligation to do so.

8.Rights of the data subject

As the owner of your personal data, Ley 29733 grants you the rights of information, access, update, inclusion, rectification, deletion or cancellation, and objection, as well as the right to prevent your data from being supplied and the right to objective processing. The regulation in force also includes the right to data portability.

To exercise them, simply send a request to informes@tolentinoyasociados.pe, attaching a copy of your identity document and clearly indicating the right you wish to exercise and the data it refers to. You may also submit it in writing at our offices.

The Firm will handle the request within the time periods established by applicable regulations. If you consider that your request was not adequately handled, you may turn to the National Authority for the Protection of Personal Data of the Ministry of Justice and Human Rights.

9.Security measures

The Firm applies technical, organizational, and legal measures designed to guarantee the confidentiality, integrity, and availability of personal data, and to prevent its alteration, loss, or unauthorized processing. These include: encryption of site traffic via the HTTPS protocol, restricted access to information according to each staff member's role, and confidentiality duties binding on all personnel.

No security measure offers an absolute guarantee. For that reason, we recommend not sending sensitive information or confidential documentation through the forms on this site.

10.Cookies

The site uses only the cookies necessary for its operation. If analytics or advertising measurement tools are installed in the future, a prior notice will be displayed allowing them to be accepted or rejected, and this policy will be updated accordingly.

The user may configure their browser to block or delete cookies. Doing so may affect the operation of some sections of the site.

11.Data of minors

The site is not directed at minors and their personal data is not intentionally collected, except in the Complaints Book (Libro de Reclamaciones), where the entry must be submitted by the minor's father, mother, or legal guardian, who must provide identification.

12.Changes to this policy

The Firm may amend this policy to adapt it to regulatory changes or to new processing activities. The version in force is always the one published on this page, with the date of last update indicated at the top.

Where the change is substantial and affects processing already consented to, the user's consent will be requested again.