1. Introduction

Inca Roca Travel (“the Company”, “we”, “our”, or “us”) is committed to protecting the privacy and personal data of our clients, visitors, business partners, and website users.

This Personal Data Protection Policy explains how we collect, use, store, process, and protect personal information in accordance with applicable data protection laws, including the Personal Data Protection Law of Peru (Law No. 29733) and other applicable international privacy regulations.

By using our services, website, or submitting personal information to us, you agree to the practices described in this Policy.

2. Data Controller

The data controller responsible for the processing of personal data is:

Inca Roca Travel
Cusco, Peru

Email: info@incarocatravel.com

Website: www.incarocatravel.com

3. Personal Data We Collect

We may collect and process the following categories of personal data:

Identification Information

• Full name
• Nationality
• Date of birth
• Gender
• Passport number
• National identification number

Contact Information

• Email address
• Telephone number
• Residential address
• Emergency contact information

Travel Information

• Travel dates
• Flight details
• Accommodation preferences
• Tour preferences
• Dietary requirements

Payment Information

• Billing information
• Payment confirmations
• Transaction records

Credit card information is processed through secure third-party payment providers and is not stored on our systems unless required by law.

Health Information

Where necessary for the safe provision of travel services, we may collect limited health-related information voluntarily provided by clients, such as:

• Allergies
• Medical conditions
• Mobility requirements
• Emergency medical information

Such information will only be processed for travel safety purposes.

4. Purpose of Data Processing

We process personal data for the following purposes:

Service Provision

• Managing reservations and bookings
• Coordinating transportation and accommodation
• Securing permits and entrance tickets
• Organizing tours and travel packages

Customer Service

• Responding to inquiries
• Providing travel assistance
• Managing complaints and claims

Legal Compliance

• Compliance with government regulations
• Immigration and tourism requirements
• Tax and accounting obligations

Marketing Communications

With your consent, we may send:

• Promotional offers
• Newsletters
• Travel updates
• Special discounts

You may opt out of marketing communications at any time.

5. Legal Basis for Processing

Personal data may be processed based on:

• Contractual necessity
• Legal obligations
• Legitimate business interests
• Client consent

Where consent is required, it may be withdrawn at any time without affecting previous lawful processing.

6. Sharing of Personal Data

We may share personal information with trusted third parties necessary for delivering travel services, including:

• Hotels
• Transportation providers
• Airlines
• Train operators
• Local tour operators
• Government authorities
• National parks and tourism authorities
• Payment processors
• Insurance providers (when requested)

We do not sell, rent, or trade personal data to third parties for commercial purposes.

7. International Data Transfers

Due to the nature of international travel services, personal data may be transferred to service providers located outside Peru.

Inca Roca Travel will take reasonable measures to ensure that personal data receives an adequate level of protection during such transfers.

8. Data Retention

Personal data will be retained only for as long as necessary to:

• Fulfill contractual obligations
• Comply with legal requirements
• Resolve disputes
• Enforce agreements

When retention is no longer necessary, data will be securely deleted or anonymized.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against:

• Unauthorized access
• Loss
• Alteration
• Disclosure
• Misuse

Security measures may include:

• Secure servers
• Password protection
• Access controls
• Encrypted communications where appropriate

Despite our efforts, no system can guarantee absolute security.

10. Rights of Data Subjects

Clients may exercise the following rights regarding their personal data:

Right of Access

Request information about the personal data we hold.

Right of Rectification

Request correction of inaccurate or incomplete information.

Right of Erasure

Request deletion of personal data when legally permissible.

Right to Object

Object to certain types of processing.

Right to Withdraw Consent

Withdraw consent previously granted.

Right to Data Portability

Where applicable, request transfer of personal data in a structured format.

Requests may be submitted by email to: info@incarocatravel.com  

11. Cookies and Website Technologies

Our website may use cookies and similar technologies to:

• Improve website functionality
• Analyze website traffic
• Enhance user experience
• Personalize content

Users may configure their browser settings to reject cookies, although some website features may not function properly.

12. Children’s Privacy

Our services are not directed toward children under the age of 18 without parental or legal guardian supervision.

Where personal data of minors is required for travel services, consent must be provided by a parent or legal guardian.

13. Third-Party Websites

Our website may contain links to external websites operated by third parties.

Inca Roca Travel is not responsible for the privacy practices or content of external websites.

Users are encouraged to review the privacy policies of those websites.

14. Updates to this Policy

Inca Roca Travel reserves the right to update or modify this Personal Data Protection Policy at any time.

Any changes will be published on our website and become effective upon publication.