At Caja Arequipa, we protect your personal information. This policy outlines how we handle your personal data in accordance with Law N.º 29733 – Personal Data Protection Law and its Regulations, approved by Supreme Decree N.º 016-2024-JUS.

1. Identity and address of the data bank holder

Holder: Caja Municipal de Ahorro y Crédito de Arequipa S.A.

RUC: 20100209641

Address: Calle La Merced N.º 106, Cercado – Arequipa.

2. Purposes and personal data banks

Caja Arequipa manages personal data banks registered in the National Registry, organized by data subject category. In each case, necessary and optional purposes are distinguished. The corresponding data bank, required data, and consequences of not providing them are also disclosed.

3. Transfer and recipients of personal data

Personal data may be transferred to national and international third parties, as applicable, to comply with regulatory, contractual, and operational obligations. Recipients may include public entities, financial system companies, technology service providers, and data processors. To view the list of recipients, click here.

4. Data retention period

• Clients, suppliers, employees: Throughout the contractual relationship and as required by law (Law 26702, art. 183).
• Complaints: According to Law 26702, art. 183.
• Prospects and programs: Until consent is revoked.
• Unselected applicants: Until the end of the process or revocation.
• Video surveillance: 60 days.

5. Rights of access, rectification, erasure, objection, data portability, and withdrawal of consent

You have the right to:

Access: Know what personal data we hold, how we obtain it, and what we use it for.

Rectification: Request the update, inclusion, or correction of inaccurate or incomplete data.

Erasure (Cancellation): Request deletion of your personal data when no longer necessary or relevant to the purpose for which it was collected.

Objection: Refuse processing of your data for additional or different purposes not strictly necessary for service delivery.

Portability: Request your personal data in a structured format to transmit to another service provider.

Revocation of consent: Withdraw your authorization for data processing at any time

How to exercise your rights:

• You may submit your request at any Caja Arequipa branch nationwide or by writing to: proteccion.datos@cajaarequipa.pe.
• If you believe your rights have not been respected, you may file a complaint with the National Authority for Personal Data Protection through the Ministry of Justice and Human Rights Filing Office, located at Calle Scipión Llona N.º 350, Miraflores, Lima – Peru.

6. Contact of the data protection officer

Name: Anyela Cruz Egoavil

Email: mcruce@cajaarequipa.pe

7. Additional terms (Profiles and automated decisions)

In some processes, such as credit evaluation, automated reports obtained from credit bureaus are used. These evaluations may influence the approval or denial of a product or service. You have the right to request information about the consequences of these decisions and to request an objective review that does not rely solely on automated processing.