Conventions K

I. Introduction

This privacy policy applies to the use of the mobile application “Conventions K” operated by KONECTA PERU, which encompasses its three legal entities: Konecta BTO S.L. Branch in Peru, Allus Spain S.L. Branch in Peru, and Stratton Peru S.A.C. (hereinafter referred to as "KONECTA PERU"), available for Android and iOS devices.

KONECTA PERU is committed to complying with all applicable legal and regulatory provisions. We understand that personal data is a key component of individual privacy and essential to our operations. We treat personal data not only to comply with legal requirements but also to foster a trusted and secure environment regarding data processing.

II. Objective

This Policy aims to inform the public about our commitment to protecting their personal data, the guidelines for processing it in our activities, the purposes for which it is used, and the procedures for exercising rights under the Personal Data Protection Regulations.

III. Scope

This Policy applies to all personal data processing activities conducted by KONECTA PERU through the Conventions K application. It also applies to individuals or companies engaged by KONECTA PERU to process personal data for which it is responsible.

IV. Definitions

Terms used in this policy with uppercase letters are defined in Annex No. 1.

V. Guiding Principles

KONECTA PERU is committed to upholding the guiding principles outlined in the Personal Data Protection Regulations:

• Principle of Legality: Personal data processing is conducted lawfully, prohibiting collection through fraudulent, unfair, or illegal means.
• Principle of Consent: Personal data processing requires the owner's consent, except in cases exempted by law. Consent must be free, prior, express, unequivocal, and informed.
• Principle of Purpose: Personal data is collected for a specific, explicit, and lawful purpose, and processing should not extend beyond this purpose.
• Principle of Proportionality: Personal data processing should be adequate, relevant, and not excessive for the intended purpose.
• Principle of Quality: Personal data must be accurate, up-to-date, necessary, relevant, and adequate for the purpose of collection.
• Principle of Security: The data controller and processor must implement technical, organizational, and legal measures to ensure personal data security.
• Principle of Recourse: Data owners must have administrative or judicial channels to assert their rights when violated through personal data processing.
• Principle of Adequate Protection Level: For cross-border data transfers, sufficient protection levels must be guaranteed, meeting or exceeding Personal Data Protection Law or international standards.

VI. Purpose of Personal Data Processing

KONECTA PERU processes personal data of employees, customers, potential customers, suppliers, and other stakeholders under the purposes authorized by each one in their consents provided to KONECTA PERU, with exceptions as stipulated by Personal Data Protection Regulations. Personal data will be processed for general purposes such as:

• To fulfill obligations generated by contractual and non-contractual relationships with data owners.
• To share business information on KONECTA PERU's activities, goods, and services, based on the owner's consent.
• To comply with legal obligations as an employer.
• To monitor and manage security risks using video surveillance, biometric records, and other authorized means.
• To conduct due diligence and manage business risks.
• To share Personal Data with third parties in Peru or abroad with whom KONECTA PERU has a contractual relationship for service delivery.

Data processing for these and other lawful purposes will be duly informed to the data owners, requiring specific authorization per stakeholder group, in compliance with the consent principle.

VII. Outsourced Processing

KONECTA PERU will comply with the requirements for data processors as mandated by the Personal Data Protection Regulations.

VIII. Consent

KONECTA PERU will obtain free, prior, express, unequivocal, and informed consent from data owners, except for cases explicitly exempted by law. Consent will not be required for processing personal data obtained from publicly accessible sources for their intended purposes, or non-public sources with the data owner's consent for processing and transfer.

IX. Personal Data Transfer

When authorized by the data owner, KONECTA PERU may transfer personal data locally and internationally to affiliated companies listed in Annex 2, which is constantly updated. KONECTA PERU may also transfer personal data to legally authorized public entities within their competencies, in compliance with current or future regulations.

X. Data Owners' Rights

According to Personal Data Protection Regulations, data owners have the following rights:

1. Right of Access and Information: Data owners have the right to obtain information about the processing of their data, the reasons for collection, and any intended transfers.
2. Right of Rectification, Update, and Inclusion: Data owners have the right to update, include, or correct their data when it is inaccurate, incomplete, or incorrect.
3. Right of Cancellation or Deletion: Data owners can request the deletion of data not related or necessary for KONECTA PERU's contractual or legal obligations.
4. Right to Object: Data owners can object to data processing when it lacks contractual or legal justification.

XI. Procedure for Exercising Data Owners' Rights

Data owners may revoke their consent or exercise their rights by contacting transformacion.konecta.peru@konecta-group.com, providing their full name, ID, and a copy of their identification. If a representative exercises these rights on behalf of the data owner, a notarized power of attorney must be provided, along with the representative's ID.

Additionally, they can request account deletion through the following link: Request Account Deletion.

XII. Duration of Personal Data Processing

Personal data processed by KONECTA PERU will be retained for as long as necessary to fulfill the authorized purposes, notwithstanding the data owner's right to exercise their rights as described in Section X.

XIII. Security of Personal Data

In compliance with applicable regulations, KONECTA PERU adopts appropriate legal, organizational, and technical measures to guarantee personal data security, preventing alteration, loss, unauthorized processing, or access. Resources are deployed proportionate to the nature of the stored data and the associated risks.

XIV. Cookies

KONECTA PERU uses cookies and similar technologies to personalize and improve the customer experience and show relevant online advertising. Cookies are small text files with a unique identifier stored on the device through which you access the Site, allowing recognition each time you use it. You can disable cookies via your browser settings. Please note that disabling certain technical cookies may impact site functionality.

XV. Modifications

Any changes to this Policy will be reflected in an updated version.

XVI. General Information

As part of our activity, we process personal data in compliance with Personal Data Protection Regulations. Personal data under our responsibility is collected legally and securely. For questions about this Policy, please contact transformacion.konecta.peru@konecta-group.com.

1. Aceptación de los Términos

Al utilizar esta aplicación, aceptas estos términos y condiciones. Si no estás de acuerdo con ellos, debes dejar de usar la aplicación de inmediato.

2. Política de Cero Tolerancia para Contenidos Inapropiados

No permitimos ningún tipo de contenido inapropiado ni conducta abusiva en nuestra aplicación. Esto incluye, entre otros, mensajes ofensivos, intimidación o cualquier comportamiento que falte al respeto a otros usuarios. Si violas esta política, tu cuenta podría ser suspendida o eliminada.

3. Filtrado de Contenidos

Nuestra aplicación cuenta con sistemas para filtrar contenido inapropiado de forma automática y manual. Si se detecta contenido que infrinja nuestras políticas, será removido de inmediato.

4. Reporte de Contenidos Inapropiados

Si encuentras contenido que consideres inapropiado, puedes reportarlo a través de la función de "Reportar" disponible en la aplicación. Todos los reportes serán revisados por nuestro equipo de moderación.

5. Bloqueo de Usuarios Abusivos

Los usuarios tienen la opción de bloquear a otros usuarios que consideren abusivos. Esto evitará cualquier tipo de interacción entre ambos.

6. Respuesta del Desarrollador

Nos comprometemos a revisar y actuar sobre los reportes de contenido inapropiado dentro de un plazo de 24 horas. Si se verifica que el contenido reportado viola nuestras políticas, será eliminado, y el usuario responsable podrá ser expulsado de la plataforma.

7. Modificaciones a los Términos

Nos reservamos el derecho de actualizar este acuerdo según sea necesario. Cualquier cambio importante será comunicado dentro de la aplicación. El uso continuado de la aplicación implica la aceptación de los términos modificados.

8. Contacto

Para cualquier duda o consulta relacionada con este acuerdo, puedes ponerte en contacto con nosotros a través de transformacion.konecta.peru@konecta-group.com.