Data protection policy



At Corporación Coril S.A.C. and its subsidiaries (hereinafter referred to as "Coril Group"), identified with RUC No. 20507907386, domiciled at Calle Monterosa No. 256, 12th Floor, Urb. Chacarilla del Estanque, Santiago de Surco, Lima, we are committed to the protection and privacy of your personal data. That is why we have adopted this Privacy and Personal Data Protection Policy, which outlines our practices for collecting and processing your personal data, as well as the actions you can take in relation to them.


LEGAL FRAMEWORK


  • Law No. 29733, Personal Data Protection Law and its amendments.

  • Supreme Decree No. 003-2013-JUS, approving the Regulations of Law No. 29733.

  • Information Security Directive, approved by Resolution No. 019-2013-JUS/DGPDP.

  • Directive for the Processing of Personal Data through Video Surveillance Systems, approved by Directorial Resolution No. 02-2020-JUS/DGTAIPD.


PURPOSE


Your personal data will be used to fulfill the following purposes:


 NECESSARY PURPOSE: Contractual or pre-contractual relationship (*)


  1. Preparation, conclusion, and execution of the contractual relationship resulting from the request and/or contracting of our products or services.

  2. Verify, confirm, and validate your identity.

  3. Compliance with national legal or regulatory requirements regarding the services or products you have contracted with Coril Group.

  4. National and international data transfers for the purposes of Anti-Money Laundering and Combating the Financing of Terrorism, anti-corruption, as well as regulatory compliance.

  5. Customer profiling.


(*) As part of the pre-contractual purpose, Coril Group will process the data of potential customers in the event that the process does not result in them becoming customers.



PERSONAL DATA NECESSARY FOR THE PURPOSE


The data we will use to fulfill the purposes of our contractual relationship are:


  • Identifying data: Names, surnames, ID / Passport / RUC, home address, telephone, email, voice, signature, electronic signature, or others.

  • Personal characteristics data: Marital status, date of birth, nationality, gender, age, profession, or others.

  • Economic - financial data: Banking data, credit history, tax information, insurance, assets, debts, or others.

  • Sensitive data: Economic income and biometric data. It should be noted that the processing of this sensitive data is necessary for the preparation, conclusion, and execution of the contractual relationship, as it aims to: (i) assess the customer``s credit risk (economic income); (ii) validate identity and document the expression of will (biometric data) or others.


By providing the data, you declare and certify that they correspond to you and are true, accurate, authentic, complete, and correct.


TRANSFERS AND RECIPIENTS


Your personal data may be processed nationally and internationally: by Coril Group companies (for the purposes of Anti-Corruption, Anti-Money Laundering and Combating the Financing of Terrorism, and other applicable regulations) and suppliers for the specific purposes of the contractual relationship, as detailed below:


  • Coril Group companies and their affiliates and/or subsidiaries:

  • Coril Group Sociedad Agente de Bolsa S.A.

  • Coril Group Sociedad Administradora de Fondos S.A.

  • Coril Group Sociedad Titulizadora S.A.

  • CORFID Corporación Fiduciaria S.A.

  • Alfin Banco S.A.

  • Empresa de Crédito Vívela S.A. (formerly EDPYME Mi Casita S.A.)


  • Suppliers:

- Credit bureau suppliers.

- Notary service providers.

- Document custody service providers.

- Courier service providers.

- Consulting service providers.

- Security and cybersecurity providers.

- Server hosting providers.


DATA RETENTION PERIOD
 

As provided by Law No. 26702, General Law of the Financial System and the Insurance System and Organic Law of the Superintendence of Banking and Insurance, as well as the regulations applicable to the securities market, as well as any other applicable regulations to the companies that are part of Coril Group, the data will be kept for a period of ten (10) years after the termination of the contractual relationship, as long as the user and/or customer does not revoke their consent for optional processing.
 

EXERCISE OF ARCO RIGHTS1


At any time, you can request access, rectification, cancellation, and opposition rights to the use of your personal data by Coril Group and its subsidiaries, in accordance with the following:


  1. You must appear in person at our offices located at Calle Monterosa N° 256, Floor 12, presenting your Identity Document (DNI/CE/Passport), to validate that you are the owner or customer. If you use a legal representative, they must present the power of attorney or title that grants the representation faculties for the customer and/or potential customer to exercise any of these rights.

  2. The personal data owner or their representative must fill out a request for attention and must submit the supporting documents for their request, if applicable.

The request will be processed by Coril Group at no cost within the following periods counted from the date the request is submitted:

  • Right of access: Request information about oneself that is subject to processing. Response time: 20 business days.

  • Right of rectification: Modify inaccurate, erroneous, or false personal data. Response time: 10 business days, however, when circumstances justify it, this period may be extended by an additional 10 business days.

  • Right of cancellation: Delete certain information from a database. Response time: 10 business days, however, when circumstances justify it, this period may be extended by an additional 10 business days.

  • Right of opposition: Refuse to use the data when consent has been given. Response time: 10 business days, however, when circumstances justify it, this period may be extended by an additional 10 business days.


IMPORTANT INFORMATION


Coril Group reserves the right to modify or update this Policy at any time and without prior notice. Any modification will come into effect and have effect from its publication on this website.


It should be noted that our website may offer links or access to other websites that are not part of Coril Group and its subsidiaries, so we recommend carefully reviewing the privacy policies on such websites as they may differ from our privacy policies.
 
 For any questions related to these terms and conditions, you can contact us at: Calle Monterosa N° 256, Floor 12, Urbanization Chacarilla del Estanque, district of Santiago de Surco, Lima, or by phone at (01) 611-8000.


USE OF COOKIES


This website uses cookies, which are small files stored on computers that allow us to remember features or preferences of the browsing experience of our users on our website. Thanks to this, we can personalize access to the website on future visits, make navigation more secure, and learn about user preferences to offer information of interest to our users. Users can configure their browser to accept or reject the installation of cookies or delete them once their navigation on our website has ended. Coril Group is not responsible for the deactivation of cookies that may prevent the proper functioning of our website.