Privacy policy

Legal name: Asociación Interdisciplinaria de Estudiantes-Egresados sobre Discapacidad e Inclusión – AIEDI.

Registry entry: Registry Record No. 13716161 before the National Superintendence of Public Registries – SUNARP.

Institutional name: AIEDI – Disability and Inclusion.

Tax ID (R.U.C.): 20601942101, registered with the National Superintendence of Customs and Tax Administration – SUNAT.

Address: Calle Francia 168, Urb. San Elías. Los Olivos, Lima - Perú.
Privacy email: info@aiedi.org
Telephone: +34 603406892

Personal-data processing carried out by AIEDI is governed by Article 2(6) of the Political Constitution of Peru, Law No. 29733, the Personal Data Protection Law, and its Regulation approved by Supreme Decree No. 016-2024-JUS, effective since 31 March 2025, as well as provisions and criteria issued by the National Authority for Personal Data Protection (ANPD).

This policy applies to data processed through this website, its forms, the Complaints Book, information requests, quotations, activities, communications and other digital channels managed by AIEDI.

Depending on the channel used, AIEDI may process:

• Identification and contact data: first and last names, email address, telephone number and, where applicable, address.
• Enquiry and service data: subject, message, project needs, quotation request and related communications.
• Complaints Book: document type and number, date, type and reason for the complaint, description of the facts and any documents or evidence you choose to attach.
• Technical data: information necessary for website security, operation and traceability, such as date and time of access, referring page, language, technical server logs and similar technologies where applicable.
• Sensitive data: only when strictly necessary and validly provided for a specified purpose.

Personal data is used only for specified, explicit and lawful purposes, including:

• Responding to enquiries, information requests and messages.
• Preparing and managing requested quotations, services, projects or collaborations.
• Managing the Complaints Book and handling claims, complaints or suggestions.
• Managing registrations, activities, volunteering, events or research where the relevant form so indicates.
• Sending informational or promotional communications only where there is valid consent or an applicable legal basis.
• Protecting the website, preventing fraud or abuse and maintaining system security.
• Complying with legal, regulatory or contractual obligations or requests from a competent authority.

Required fields are identified in each form. Refusal to provide required data may prevent us from handling the specific request, but services or benefits will not be made conditional on data that is unnecessary for their purpose.

Where processing requires consent, AIEDI will request it in a freely given, prior, express, unequivocal and informed manner. Consent will be tied to specific purposes and will not be presumed for different uses.

Where Law No. 29733 permits processing without consent under an exception, AIEDI will process data only within the limits of that legal authorisation. Acceptance of this policy does not, by itself, constitute authorisation to receive advertising or for additional purposes.

Consent may be withdrawn at any time through simple, accessible and free mechanisms, without retroactive effect.

Information concerning health, disability or other categories that may constitute sensitive data receives enhanced protection. Where consent for sensitive data is required, it will be obtained in writing or by an equivalent method that expressly demonstrates the data subject's wishes.

For digital services directed at children under fourteen, consent from the person exercising parental authority or guardianship will be required. Persons over fourteen and under eighteen may consent in the circumstances permitted by law, based on information expressed in understandable language and with particular attention to their best interests and safety.

Data collected through AIEDI forms is stored in private records managed by the organisation and, where legally required, in personal-data banks subject to registration in the National Registry for Personal Data Protection. The specific identification of the data bank and its recipients will be provided in the applicable form or privacy notice where required.

AIEDI may use web-hosting, email, security, backup, technology-support or other service providers acting as processors, which may process data only in accordance with AIEDI's instructions, authorised purposes and applicable confidentiality and security obligations. AIEDI does not sell personal data.

Where personal data is transferred to a third party, AIEDI will disclose that circumstance and request consent when required by law, limiting the transfer to the purpose that justifies it.

If a technology provider or recipient is located outside Peru, the cross-border flow will be made to countries with an adequate level of protection or under appropriate safeguards that ensure processing in accordance with Law No. 29733 and its Regulation, except for legally established exceptions.

AIEDI retains data only for as long as necessary to fulfil the stated purpose and the corresponding legal obligations. Indefinite retention is not the default.

• Closed contact records or records identified as spam are deleted according to the configured technical policy, currently up to 365 days.
• Closed Complaints Book records or records identified as spam are cleared according to the configured technical policy, currently up to 730 days, without prejudice to periods that must be maintained by law or for the defence of rights.
• Where a cancellation or erasure request is appropriate, data may be blocked while the request is assessed or handled and then deleted, anonymised or retained only when a legal basis justifies doing so.

AIEDI applies technical and organisational measures designed to preserve the confidentiality, integrity and availability of personal data. The website implementation uses private records and safeguards for data received through forms, including access controls and protection of sensitive information and attachments.

When a security incident falls within the cases covered by the Regulation, AIEDI will comply with the applicable documentation and notification obligations, including notice to the ANPD and, where appropriate, to affected individuals, no later than 48 hours after becoming aware of or confirming the incident, subject to the specific cases and rules established by law.

Data subjects may exercise the rights recognised by Peruvian law free of charge, including:

• Information: to know the essential conditions of processing.
• Access: to know what data we process, its source, purposes and transfers made or planned.
• Rectification: to correct inaccurate, erroneous, incomplete or outdated data.
• Cancellation or erasure: to request deletion where legally appropriate.
• Objection: to request that processing cease in the cases provided by the Law and Regulation; online, where applicable, this may include de-indexing.
• Portability: as an expression of the right of access, to request data provided in a structured, commonly used and machine-readable format where the conditions of the Regulation are met.
• Withdrawal of consent: to withdraw a previously granted authorisation.
• Objective processing: not to be subject to decisions that produce legal effects, discrimination or significant impact in cases protected by law.

You may submit your request by writing to info@aiedi.org. State the right you wish to exercise and provide the information reasonably necessary to verify your identity and locate the data. If you act through a representative, representation must be evidenced where applicable.

Under the Regulation, the maximum response period is 8 business days for the right to information, 20 business days for access and 10 business days for rectification, cancellation or objection. Except for the information period, these periods may be extended once for an equal period where justified by the circumstances and the extension is communicated in due time.

If the response is wholly or partly negative or you consider that your rights have not been addressed, you may apply to the Directorate for Personal Data Protection of the National Authority for Personal Data Protection or seek judicial protection through a habeas data action, in accordance with applicable law.

As a general rule, AIEDI does not use solely automated decisions that produce legal effects or significantly affect website users. If such a feature is introduced, users will be informed in advance of its existence and consequences.

The website may use cookies or equivalent technologies necessary for operation, security, preferences or measurement. Where these technologies involve personal-data processing subject to consent, the corresponding authorisation will be requested and mechanisms will be provided to manage preferences.

AIEDI may update this policy when legislation, its data-processing activities or website services change. Material changes will be published accessibly and, where appropriate, new consent will be requested for purposes that require it.