Privacy Policy

Privacy Policy

Your privacy matters. Here's how we handle your personal data.

Last updated: 28/01/2025

In accordance with Law No. 29733 – Personal Data Protection Law of Peru

1. Data Controller

The data controller for personal information collected on this website is INVERSIONES TURÍSTICAS RAYMONDI S.A.C., the operating company of Bora Hotel Iquitos (referred to hereafter as "the Hotel" or "the Company").

2. Personal Data We Collect

The Hotel may collect, through its website and online forms, the following categories of personal data:

Identity and contact details

Full name, email address, phone number and, where applicable, a postal address (for example, when issuing receipts or processing deliveries).

Preference data

Accommodation preferences, requested services and any additional information you voluntarily provide in comments or special requests.

Browsing data

IP address, browser type, operating system, language settings, access times and pages visited — collected via cookies or similar analytics tools.

Note: We do not collect sensitive personal data (health information, ethnic origin, political opinions, biometric data, etc.) through this website.

3. How We Use Your Data

Your personal data will be used by the Hotel only for the following legitimate purposes:

  1. Reservation and service management: Processing room reservations and other hotel service requests, managing the guest relationship — including payments, receipt issuance and coordination of special requests.
  2. Responding to inquiries: Responding to messages or requests submitted via the contact form, email or other channels provided on the site.
  3. Website management: Monitoring site performance, analyzing navigation patterns and resolving technical issues in order to improve the user experience.
  4. Promotional communications: Sending promotions, special offers and hotel news by electronic means — only if you have given your prior consent.
  5. Legal compliance: Meeting legal obligations applicable to the hospitality sector, including tax regulations, accounting requirements and guest registration records.
  6. Protection of rights: Using personal data in administrative or legal proceedings, and ensuring the security of our premises, guests and website.

The Hotel will not use your personal data for any purpose beyond those listed above without first obtaining your explicit consent.

4. Legal Basis for Processing

In accordance with Law No. 29733 and its Regulations, the Hotel ensures a valid legal basis for every data processing activity:

  1. For reservation management and handling inquiries, the legal basis is the performance of a contractual or pre-contractual relationship with the user.
  2. For website improvement, we rely on the Hotel's legitimate interest in optimizing its digital services.
  3. For sending promotional communications, the legal basis is the explicit consent of the data subject.

5. Your Rights (ARCO Rights)

Under Peruvian data protection law, you have the rights of Access, Rectification, Cancellation and Opposition regarding your personal data:

Access

You may request confirmation of whether we hold personal data about you and obtain a copy of it.

Rectification

You may request the correction or update of any inaccurate or incomplete data we hold.

Cancellation

You may request deletion of your data once it is no longer needed for the purpose it was collected.

Opposition

You have the right to object to the processing of your data in certain circumstances.

How to exercise your rights

To exercise your ARCO rights, contact us clearly stating your request and including a copy of your ID. We will respond within 20 business days.

[email protected]

6. Sharing Data with Third Parties

The Hotel does not sell or rent your personal information. In limited circumstances, however, data may be shared with:

  1. Service providers: Third-party companies that support our operations (hosting, booking platform, payment processing, etc.), all contractually bound to maintain confidentiality.
  2. Legal disclosures: Where required by law or a competent authority, we will comply with any lawful request to disclose personal data.
  3. International transfers: Where data is transferred internationally, we ensure a level of protection equivalent to that provided under Peruvian law.

7. Cookies

This website uses cookies — small text files stored in your browser — to collect data about how you use the site.

You can configure your browser to block or delete cookies at any time. Please note that some site features may not work properly if you do so.

8. Security Measures

We have put in place technical, organizational and contractual safeguards to protect your personal data, including:

  • Encrypted transmission: Our site uses SSL/TLS encryption — all data you submit travels securely.
  • Secure storage: Data is stored in protected environments with encryption in place.
  • Access controls: Only authorized personnel with confidentiality obligations can access your data.
  • Threat prevention: We maintain up-to-date security software including firewalls, antivirus and intrusion detection systems.

9. Children's Data

This website is not directed at anyone under 18 years of age. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has submitted data to us without your consent, please contact us immediately and we will delete it.

10. Policy Updates

The Hotel reserves the right to update this Privacy Policy as needed. Any changes will be published on this page. Where changes are material, we will notify users by email.

11. Questions & Contact

If you have any questions or requests about this Privacy Policy, please reach us at:

Address:
Calle Raimondi 363, Iquitos, Loreto, Peru

You can also contact the National Personal Data Protection Authority (ANPDP) of Peru's Ministry of Justice and Human Rights for further guidance on your rights.

Additional Rights for EU/EEA Visitors (GDPR)

If you are located in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) grants you additional rights, which we fully respect.

Legal Basis for Processing

We process your personal data on the following grounds: legitimate interest for managing reservations and hotel services; explicit consent for marketing communications; and legal obligation for billing and immigration record-keeping.

Your Rights Under the GDPR

  • Right to access your personal data
  • Right to rectify inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to data portability
  • Right to object to processing

International Data Transfers

Your data is processed in Peru, which does not currently hold an EU adequacy decision. We apply Standard Contractual Clauses and appropriate technical safeguards to protect your data during any international transfer.

Exercising Your Rights

To exercise any of your GDPR rights, email us at [email protected] with "GDPR Request" in the subject line.

Ask via WhatsApp