1. Data controller
WEMPO is the controller of personal data collected through the Site. Contact: info@wempoperu.org.
2. Personal data we collect
- Contact data: name, email, phone, organization, role (if provided).
- Message content: information you include when contacting or registering.
- Technical data: IP address, device/browser type, pages visited, basic logs.
3. Purposes
- Respond to inquiries and requests.
- Manage registrations for events, programs, or services.
- Improve the Site, security, and user experience.
- Send informational communications about WEMPO (you may opt out).
4. Legal bases (high level)
- Consent: when you submit forms or opt into communications (as applicable).
- Performance of a relationship: to handle requests and coordination.
- Legitimate interests: security, fraud prevention, and basic measurement (as applicable).
5. Peru (Law No. 29733)
In Peru, personal data protection is primarily regulated by Law No. 29733 and its regulations. As applicable:
- We may request consent for certain purposes.
- We respect ARCO rights (Access, Rectification, Cancellation, Opposition).
- You may exercise rights by emailing info@wempoperu.org.
6. United States (CCPA/CPRA and other state laws)
U.S. privacy obligations vary by state. Where applicable (e.g., California under CCPA/CPRA), you may have rights to know/access, delete, correct, and opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising (if such processing occurs).
The Site is currently intended for institutional information and contact. If we add advertising cookies or “sharing” for targeted advertising, we will update this Policy and provide required opt-out mechanisms where applicable.
7. Cookies
We may use essential cookies and basic analytics to operate the Site. If we implement non-essential cookies (advanced analytics, marketing), we will update this section and, where applicable, show a consent banner and preference controls.
8. Sharing of personal data
- Service providers: hosting, email, forms, analytics, operational tools (as used).
- Legal requirements: if required by law or competent authority.
- Protection: to prevent fraud, security incidents, or harm.
9. International transfers
Depending on providers and Peru/U.S. activities, data may be processed or stored outside your country. We seek reasonable safeguards and vendor agreements to protect information.
10. Retention
We retain data only as long as necessary for the purposes described, legal obligations, and dispute resolution, then delete or anonymize it in a reasonable manner.
11. Security
We implement reasonable technical and organizational measures (e.g., access controls, minimization practices, and basic monitoring). No system is completely secure.
12. Children
The Site is not directed to children without supervision. If you believe a child provided personal data without authorization, contact us to request deletion.
13. Your rights
To exercise privacy rights (depending on your jurisdiction), email info@wempoperu.org. We may request reasonable information to verify identity and protect your data.
14. Updates
We may update this Policy from time to time. We will post the current version with its updated date.