1. Data controller
Corporación CISA S.A.C. is responsible for processing personal data collected through the website and the company’s institutional channels.
2. Personal data collected
We collect personal information such as names, identity-document details, email address, telephone number, company, position, address, and any other information that users voluntarily provide through contact, quotation, employment, or Complaints Book forms.
3. Purpose of processing
Personal data will be used to respond to inquiries, prepare proposals and quotations, manage projects and contracts, process complaints and claims, maintain corporate communications, and comply with CISA’s legal, contractual, and certified management-system obligations.
4. Confidentiality and information security
Corporación CISA S.A.C. adopts the technical, organizational, and legal measures required to ensure the security and confidentiality of personal data and prevent its alteration, loss, unauthorized processing, or access, in line with the principles of its Integrated Management System certified under ISO 9001 (Quality Management) and ISO 37001 (Anti-bribery Management), which promote control, traceability, and integrity in the handling of organizational information.
5. Data communication and transfer
Personal data will not be shared with third parties, except when necessary to perform contracted services, operate our digital channels, or comply with a legal obligation or a request from a competent authority.
6. Data subject rights (ARCO)
Data subjects may exercise their rights of access, rectification, cancellation, and opposition (ARCO rights), as well as data portability, at any time by sending a request to CISA’s contact email together with a copy of their identity document.
7. Use of cookies
The CISA website may use first-party and third-party cookies for statistical, operational, and user-experience purposes. Users may configure their browsers to restrict or block cookies.
8. Retention period
Personal data will be retained for as long as necessary to fulfill the purpose for which it was collected and thereafter for the periods required by applicable legal, accounting, labor, or tax regulations.
9. Changes
Corporación CISA S.A.C. reserves the right to amend this Privacy Policy at any time to reflect regulatory or operational changes. Amendments will be published on the institutional website.
10. Legal basis
This Privacy Policy is based on Law No. 29733, the Personal Data Protection Law, its Regulations approved by Supreme Decree No. 003-2013-JUS, and the directives issued by Peru’s National Authority for Personal Data Protection.