Privacy Policy

eDisclaimer – Email

This message and all attachments are sent for the sole use of the recipient and may contain confidential and/or legally privileged information. If you are not the intended recipient, you are hereby informed that the dissemination, distribution, copying or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete it from your computer. Unauthorised use or dissemination of this message is prohibited. We remind you that Internet communications are not secure and can be intercepted by third parties.

Please note that all e-mails are systematically scanned by our systems and by a third-party provider to remove viruses and unsolicited promotional mail (“spam”). This practice could result in the deletion of legitimate e-mail messages before they can be read by their recipient. Please contact us if you have any questions or issues related to this automatic filtering.

Privacy Policy       

1. Identidad del responsable de los datos

Pérez-Llorca Perú, S. Civil de R. Ltda, with registered office at Avenida José Larco 1301, 20th Floor, Miraflores, Lima, Peru, and with Tax Identification Number (RUC) 20419020606, (hereinafter “Pérez‑Llorca Peru” or the “Firm”), acts as the data controller for the processing of personal data within the scope of its activities in Peru.

To contact Pérez-Llorca Peru, please write to us at: info@perezllorca.com.

We also inform you that Pérez-Llorca Peru has a Data Protection Officer who can be contacted for any matter relating to the protection of personal data at the following email address: dpo@perezllorca.com

2. Definitions

The following definitions apply to this Policy:

• Clients: natural persons to whom the Firm provides services.
• Personnel: comprises all persons who maintain or have maintained an employment relationship with the Firm. This includes workers on open-ended contracts, fixed-term contracts, or contracts subject to a modality, as well as former employees of the Firm.
• Cookie: a file that is downloaded to users’ devices when they access certain web pages and/or applications. Cookies enable, amongst other things, the storage and retrieval of information on the number of visits, browsing habits or the device used to browse the web page.
• Personal data: refers to all information about a natural person that identifies or makes them identifiable through means that may reasonably be used. For example, names, identity documents, telephone numbers and so on, which identify or may identify an individual.
• Sensitive data: refers to any information relating to a natural person’s genetic or biometric data, neural data, moral or emotional data, facts or circumstances relating to their personal or family life, personal habits pertaining to the most intimate sphere of their life, trade union membership, physical or mental health, or other similar information that affects their privacy.
• Third-party Personnel: refers to persons who provide services to the Firm through outsourcing companies. They do not have a direct contract with the Firm; their employment relationship is with the intermediary company.
• Applicants: refers to all persons who have expressed an interest in joining the Firm through a training or direct employment relationship, by submitting their CV, job application or other documents relating to selection and recruitment processes.
• Service Provider Applicants: refers to all natural persons who have expressed an interest in providing services to the Firm, without entering into an employment relationship.
• Interns: comprises all persons undertaking pre-professional or professional internships at the Firm, under an internship agreement entered into in accordance with current legislation.
• Service Provider: refers to all natural persons who provide services to the Firm, without entering into an employment relationship.
• Commercial Prospecting: the processing of personal data carried out by the Firm for the purpose of identifying, contacting, and evaluating third parties with a view to offering them legal services, sending promotional communications, participating in commercial processes, or establishing professional relationships.
• Suppliers: a natural person with a business who supplies goods or services to the Firm.
• Data controller: the natural or legal person that decides on the processing of personal data, even where such data is not held in a personal data bank.
• Website: the website owned by Pérez‑Llorca, accessible through the Firm’s official domain (perezllorca.com).
• Personal data bank owner: a natural person, private-law legal entity, or public body that determines the purpose and content of the personal data bank, the processing thereof, and the security measures. For the purposes of this Policy, the Firm acts as the owner of the respective personal data banks.
• Processing of personal data: any type of operation or technical procedure, whether automated or not, that enables the collection, recording, organisation, storage, retention, adaptation, modification, retrieval, consultation, use, blocking, erasure, communication by transfer or dissemination, or any other form of processing that facilitates access to, correlation of, or interconnection of personal data.
• External Users: comprises all persons who physically enter the Firm as visitors, without having an employment or service provision relationship with the Firm.
• Web Users: natural persons who access and interact with the Website.
• Video surveillance: monitoring and capture of images and video footage of places, persons, or objects.

3. Purposes of processing

Pérez-Llorca Peru will process personal data for the following purposes:

Applicants

Pérez-Llorca Peru will use the personal data it has collected for the following purposes:

• Management of the job application
• Management of applications for pre-professional and professional internships

Likewise, in the event that the Applicant gives their express and independent consent, the said personal data will also be used for the following purposes:

• Participation in other selection processes

Interns

Pérez-Llorca Peru will use the personal data it has collected for the following purposes:

• Preparation, conclusion, and performance of the internship agreement
• Management of information or image of our Interns internally and/or externally, as necessary for the internship

Likewise, in the event that the Intern gives their express and independent consent, the said personal data will also be used for the following purposes:

• Participation in future selection processes

Personnel

Pérez-Llorca Peru will use the personal data it has collected for the following purposes:

• Preparation, conclusion, and performance of the employment contract
• Management of information or image of our Personnel internally and/or externally, as necessary for the employment relationship

Service Provider Applicants

Pérez-Llorca Peru will use the personal data it has collected for the following purposes:

• Application to become a Service Provider

Likewise, in the event that the Service Provider Applicant gives their express and independent consent, the said personal data will also be used for the following purposes:

• Participation in future selection processes

Service Provider

Pérez-Llorca Peru will use the personal data it has collected for the following purposes:

• Preparation, conclusion, and performance of the service contract
• Management of information or image of the Service Provider internally and/or externally, as necessary for the contractual relationship

Likewise, in the event that the Service Provider gives their express and independent consent, the said personal data will also be used for the following purposes:

• Management of image on social media for advertising purposes

Third-party Personnel

Pérez-Llorca Peru will use the personal data it has collected for the following purposes:

• Control and management of access by Third-party Personnel to Pérez-Llorca Peru’s premises
• Coordination and supervision of the performance of the tasks or services carried out for Pérez-Llorca Peru through the intermediary or outsourcing company
• Compliance with internal security, confidentiality, and risk prevention regulations within Pérez-Llorca Peru’s premises

Suppliers

Pérez-Llorca Peru will use the personal data it has collected for the following purposes:

• Preparation, conclusion, and performance of the contract

Likewise, in the event that the Supplier gives their express and independent consent, the said personal data will also be used for the following purposes:

• Sharing of their data when required in our Clients’ tendering processes

Clients

Pérez-Llorca Peru will use the personal data it has collected for the following purposes:

• Response to requests for quotations for the provision of services
• Provision of the services contracted by the Client
• Maintenance, development, control and performance of the professional relationship that the Client maintains with the Firm in the context of the provision of services
• Creation, uploading and maintenance of an up-to-date profile in the Firm’s database for the performance of the services
• Collection of payments, invoicing, administrative activities, and other activities inherent to the relationship with the Firm
• Creation of databases to improve Client service
• Generation of statistics, preparation of reports, and other activities necessary for internal operations
• Management, control, administration, and updating of communications between the Firm and the Client
• Compliance with legal and professional conduct obligations arising from the activities of the Firm and the Client, including those arising from requirements of competent authorities, anti-money laundering and counter-terrorist financing legislation, identity verification, background checks against national and international sanctions lists, and regulatory compliance and due diligence activities
• Collection, structuring, retention, consultation, cross-referencing, modification, retrieval, interconnection, restriction, destruction, and/or communication of personal data
• Conduct of surveys to measure Client satisfaction and/or the quality of the services

Likewise, in the event that the Client gives their express and independent consent, the said personal data will also be used for the following purposes:

• Sharing of their data when required in other clients’ tendering processes

Video surveillance

Pérez-Llorca Peru will use the personal data it has collected to control and monitor security within its premises.

Web Users

Pérez-Llorca Peru will use the personal data it has collected for the following purposes:

• Management of access to website services and handling of queries from the website

External Users

Pérez-Llorca Peru will use the personal data it has collected for the following purposes:

• Control and management of physical access to Pérez-Llorca Peru’s premises
• Verification of identity and recording of visits for security purposes
• Tracking of visitor entries and exits in accordance with the Firm’s internal protocols
• Participation in events, activities, or meetings organised by Pérez-Llorca Peru

Likewise, in the event that the External User gives their express and independent consent, the said personal data will also be used for the following purposes:

• Subsequent communication for institutional or professional networking purposes

Commercial Prospecting

Pérez-Llorca Peru will use the personal data it has collected for the following purposes:

• Offering of additional services provided by the Firm and its group
• Sending of newsletters, legal briefings, event information, news, or current affairs content, directly or through third parties
• Communications for advertising purposes, Pérez-Llorca brand promotion activities, and Commercial Prospecting activities
• Academic purposes or dissemination of legal knowledge

4. Types of data

Pérez-Llorca Peru may collect the following personal data, organised into the following categories:

Applicants

For the purposes described in the preceding section, it is mandatory that at least the following personal data be provided to us:

• Identity document number
• Full names and surnames
• Date of birth
• Email address
• Mobile number
• Legal home address
• CV

The omission of any of the above personal data will mean that the application cannot be processed.

Additionally, and on a voluntary basis, Applicants may also provide the following personal data:

• Place of birth
• Civil status
• Gender

In this case, failure to provide this personal data will not prevent the Applicant from applying to the Firm.

Interns

For the purposes described in the following section, it is mandatory that at least the following personal data be provided to us:

• Identity document number
• Full names and surnames
• Date of birth
• Nationality
• Email address
• Mobile number
• Legal home address
• Occupational health data
• CV
• Banking details (account number and/or Interbank Account Code)

The omission of any of the above personal data will mean that the internship agreement with the Firm cannot be formalised.

Additionally, and on a voluntary basis, Interns may also provide the following personal data:

• Place of birth
• Gender

In this case, failure to provide this personal data will not prevent the internship agreement with the Firm from being formalised.

Personnel

For the purposes described in the following section, it is mandatory that at least the following personal data be provided to us:

• Identity document number
• Full names and surnames
• Date of birth
• Nationality
• Email address
• Mobile number
• Legal home address
• CV
• Occupational health data
• Beneficiary information
• Civil status

The omission of any of the above personal data will mean that the relationship with the Firm cannot be formalised.

Additionally, and on a voluntary basis, Personnel may also provide the following personal data:

• Place of birth
• Gender
• Vehicle registration number

In this case, failure to provide this personal data will not prevent the relationship with the Firm from being formalised.

Service Provider Applicants

For the purposes described in the following section, it is mandatory that at least the following personal data be provided to us:

• Identity document number
• Full names and surnames
• Date of birth
• Email address
• Mobile number
• Legal home address
• CV

The omission of any of the above personal data will mean that the application cannot be processed.

Additionally, and on a voluntary basis, Service Provider Applicants may also provide the following personal data:

• Place of birth
• Civil status
• Gender

In this case, failure to provide this personal data will not prevent the relationship with the Firm from being formalised.

Service Provider

For the purposes described in the following section, it is mandatory that at least the following personal data be provided to us:

• Identity document number
• Full names and surnames
• Date of birth
• Nationality
• Email address
• Mobile number
• Legal home address
• Professional association membership number, where applicable
• CV
• Civil status

The omission of any of the above personal data will mean that the relationship with the Firm cannot be formalised.

Additionally, and on a voluntary basis, the Service Provider may also provide the following personal data:

• Place of birth
• Gender
• Vehicle registration number

In this case, failure to provide this personal data will not prevent the relationship with the Firm from being formalised.

Third-party Personnel

For the purposes described in the following section, it is mandatory that at least the following personal data be provided to us:

• Identity document number
• Full names and surnames
• Date of birth
• Email address
• Mobile number
• CV

The omission of any of the above personal data will mean that the relationship with the Firm cannot be formalised.

Additionally, and on a voluntary basis, Third-party Personnel may also provide the following personal data:

• Place of birth
• Gender

In this case, failure to provide this personal data will not prevent the relationship with the Firm from being formalised.

Suppliers

For the purposes described in the following section, it is mandatory that at least the following personal data be provided to us:

• Tax Identification Number (RUC)
• Full name
• Email address
• Phone
• Registered address
• Banking details (account number and/or Interbank Account Code)

The omission of any of the above personal data will mean that the contractual relationship with the Firm cannot be formalised.

Clients

For the purposes described in the following section, it is mandatory that at least the following personal data be provided to us:

• Tax Identification Number (RUC) or National Identity Document number (DNI)
• Full name
• Nationality
• Email address
• Phone
• Registered address
• Banking details (account number and/or Interbank Account Code)

The omission of any of the above personal data will mean that the contractual relationship with the Firm cannot be formalised.

Video surveillance

For the purposes described in the following section, the Firm will collect the following personal data through its video surveillance systems:

• Image

Web Users

For the purposes described in the following section, it is mandatory that at least the following personal data be provided to us:

• Full names and surnames
• Email address
• Phone

The omission of any of the above personal data will mean that the relationship established through the Website cannot be formalised.

In addition, the Website uses cookies, the operation of which is described in the Cookie Policy of this website.

External Users

For the purposes described in the following section, it is mandatory that at least the following personal data be provided to us:

• Full names and surnames
• Identity document number
• Reason for the visit
• Date and time of entry

The omission of any of the above personal data will mean that physical entry to the Firm’s premises cannot be authorised.

Additionally, and on a voluntary basis, External Users may also provide the following personal data:

• Email address
• Phone
• Vehicle registration number

In this case, failure to provide this personal data will not prevent entry to the Firm’s premises.

Commercial Prospecting

For the purposes described in the following section, it is mandatory that at least the following personal data be provided to us:

• Identity document number
• Full names and surnames
• Date of birth
• Email address
• Mobile number

The omission of any of this data or refusal to consent to the processing of the above personal data will mean that Commercial Prospecting cannot be authorised.

5. Retention periods

Pérez-Llorca Peru will collect and process the user’s data in accordance with the applicable purpose:

• In relation to recruitment processes, we will process the data of Applicants and Service Provider Applicants for the time necessary for the management of the selection process. In the event that no contractual relationship is formalised and the data subject has not given their consent to participate in future processes, their data will be deleted. If the data subject has given their consent to be considered in future processes, the data will be retained until such consent is withdrawn.
• In the case of Interns, Personnel, Service Providers, and Third-party Personnel, personal data will be retained for the period that the relevant relationship is in force and, once ended, for a maximum period of five (5) years, or for the additional period that may be required under applicable employment or other legislation.
• When we process data relating to Clients and Suppliers, such data will be retained for the duration of the contractual relationship and, once ended, for a maximum period of ten (10) years, unless a different period applies in accordance with applicable legislation.
• Personal data obtained through video surveillance systems will be retained for a maximum period of forty-five (45) days.
• In relation to Web Users, personal data will be retained for a maximum period of two (2) years from the last interaction or visit to the website.
• The data of External Users (visitors) will be retained for a maximum period of two (2) years from their last visit to the premises.
• Data processed for Commercial Prospecting purposes will be retained until the data subject withdraws the consent given for that purpose.
• Once the above periods have elapsed, personal data may be kept duly blocked for the time necessary to meet legal responsibilities or requirements of the competent authorities.

6. Communication of data

Pérez-Llorca Peru may share or transfer the personal data of data subjects, within or outside Peru, only where necessary to fulfil the purposes set out in this Policy and in accordance with Law No. 29733, the Personal Data Protection Law, and its Implementing Regulations (approved by Supreme Decree No. 016-2024-JUS).

Personal data may be communicated to Suppliers, data processors, third-party service providers, public bodies, competent authorities, as well as related, affiliated or subsidiary companies of Pérez-Llorca, to the extent that such disclosure is necessary for the management, performance, development, or fulfilment of the relationship that the data subject maintains with Pérez-Llorca Peru, for compliance with applicable legal or regulatory obligations, or where the data subject has given their free, prior, informed, express, and unambiguous consent.

In the event that personal data is transferred to related, affiliated or subsidiary companies of Pérez-Llorca, within or outside Peru, Pérez-Llorca Peru will inform the data subject of such transfer and will adopt the necessary measures to ensure that processing is carried out in accordance with Peruvian personal data protection regulations.

To view the updated list of recipients with whom Pérez-Llorca Peru shares personal data, the data subject may consult the following link: List of recipients

7. Personal data banks

The personal data collected by the Firm will be stored in the following personal data banks:

8. Automated decisions

Pérez-Llorca Peru will not make any automated decision, including profiling, based on the personal data shared with it.

9. Security

In relation to the personal data collected, the necessary technical and organisational measures have been adopted and will be adopted to guarantee its protection and to prevent its alteration, loss, unauthorised processing and/or unauthorised access, having regard to the state of the art, the nature of the data stored and the risks to which they are exposed, at all times in compliance with applicable regulations.

10. Users’ rights

Users have the right to exercise at any time, under the terms provided by the applicable legislation in force, the rights of access, rectification, cancelation, and objection, as well as to revoke their consent where applicable, under the terms of the Personal Data Protection Law and its Implementing Regulations. Users may exercise these rights by sending an email to: dpo@perezllorca.com.

Should the user consider that their rights have not been adequately addressed, the user may lodge a complaint with the National Personal Data Protection Authority.

11. Applicable law

The processing of personal data is carried out in accordance with the provisions of Law No. 29733, the Personal Data Protection Law, and its Implementing Regulations approved by Supreme Decree No. 016-2024-JUS.

The relationship between Pérez-Llorca Peru and the data subject will be governed by Peruvian law.