Visit-Peru.info is an information website: there are no accounts, no payments and no comments. The site processes the technical data needed to deliver and protect the pages, anonymised statistics about visits, and the messages you choose to send. With your consent only, it can also show advertising from Google. This policy explains who is responsible, what is processed, which third parties are involved when you use maps, tours, partner links or ads, how long data is kept and how to exercise your rights.
1. Who is responsible
The controller of your personal data is ZF s.r.l., VAT number (partita IVA) 02117220505, Italy, which publishes visit-peru.info.
You can write to the controller at [email protected]. Use this address for any question about this policy or to exercise your rights.
2. What data is processed
Technical data. When a page is requested, the web server records your IP address, the date and time, the address of the page, the response, the type of browser and device, and the page you came from. These records are needed to deliver the site, find faults and defend it against abuse.
Messages. If you write to us, we process your email address, your name if you give it, and the content of your message, only to answer you and to keep a record of the exchange.
Tailor-made trip requests. If you use the request form, we process your name, email address, phone number (if you give it), number of travellers, dates and the text of your message, only to answer you and to plan the support you asked for. The request reaches our mailbox and our consultant who answers you.
Statistics. Visits are counted with Matomo in a way that does not identify you; see section 5.
What we do not collect. The site does not ask you to register, does not take payments and does not host comments; the only form is the request for a tailor-made trip, described above. The site itself builds no advertising profiles: advertising from Google appears only if you accept it, and Google then acts on its own account (section 6).
3. Why data is processed and on what legal basis
Technical data is processed to operate and secure the site, which is our legitimate interest (Article 6(1)(f) of the GDPR). Messages are processed to answer your request, which is either a step you asked for or our legitimate interest in replying (Article 6(1)(b) or (f)). Some records may have to be kept to comply with a legal obligation (Article 6(1)(c)). Statistics are processed for our legitimate interest in knowing which pages are useful and improving the site (Article 6(1)(f)); you can object at any time. Advertising and the cookies it needs are based on your consent (Article 6(1)(a) of the GDPR and the national rules implementing the ePrivacy Directive), which you can refuse without losing any feature of the site and can withdraw at any time. Where we ever ask for consent, for example for an optional service, consent is the basis and you can withdraw it at any time.
4. Third parties you may meet on the site
Some parts of the site load content from other companies, and your browser then sends them your IP address and technical data. They are independent controllers of that data and have their own policies.
Maps. Pages with a map load the map library from our own server, and the map tiles and style from OpenFreeMap, which serves map data based on OpenStreetMap.
Tours and photos. Tour cards show information and pictures supplied by GetYourGuide; the pictures are loaded from its servers. The tour data itself is stored on our server, so the page does not query GetYourGuide for each visit.
Hotel map. The Hotels page can show a map with prices supplied by Booking.com. Its script and the map are loaded from Booking's servers only when the map is about to be seen, and Booking then receives your IP address and technical data and acts as an independent controller under its own policy.
Partner links. Links to Booking.com and GetYourGuide are affiliate links, marked as such in the page code. When you click one you leave our site, and the partner may place its own cookies and process your data under its own policy. We receive commission reports from the partners; we do not receive your booking details from them.
Fonts and scripts. Fonts and the scripts of the site are served from our own server.
5. Statistics with Matomo
We count visits with Matomo, open-source analytics software, to learn which pages are read and which are not. It is set up to respect your privacy: it works without cookies, it shortens IP addresses before storing them, it honours the Do Not Track setting of your browser, and its data is not combined with other sources or passed to advertising networks. The figures are used in aggregate form only.
The Matomo installation is run on behalf of the controller, which keeps the data. Statistics are kept in aggregate form for as long as they are useful to the site and raw visit records for a limited time (see section 8). You can object to this processing at any time by writing to the address in section 1, or by switching on Do Not Track in your browser.
6. Advertising with Google AdSense
The site may show advertising served by Google AdSense. Ads are loaded only after you accept them in the notice that appears on your first visit; if you refuse, or do not answer, no advertising code is loaded from Google and no advertising cookie is set.
If you accept, Google receives your IP address and technical data and may use cookies and similar technologies to serve, measure and, where you allow it, personalise ads. For this, Google (Google Ireland Limited for visitors in the European Economic Area and the United Kingdom) acts as an independent controller under its own policy, available at policies.google.com/technologies/ads. You can change or withdraw your choice at any time with the cookie settings link at the bottom of every page.
7. Cookies
The site itself sets no cookies for tracking or statistics: Matomo runs without them. The only choices stored on your device are the answer you give in the advertising notice, kept in your browser so that you are not asked again, and the technical items needed for a function you use. If you accept advertising, Google may set its own cookies, as explained in section 6. Third-party sites you reach through a link, including our partners, apply their own cookie rules.
8. How long data is kept
Server records are kept only for as long as needed to run and protect the site, and are then deleted or anonymised. Messages are kept for as long as needed to answer you and, afterwards, for the period required to document the exchange or to meet legal obligations, unless you ask for their deletion and no legal reason prevents it.
9. Who receives the data and where it goes
Data is handled by the controller and by the service providers it uses to run the site, such as the hosting company and the email provider, who act on the controller's instructions. Data may be disclosed to authorities where the law requires it. If a provider processes data outside the European Economic Area, this is done only with the safeguards the GDPR requires, such as the European Commission's standard contractual clauses.
10. Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you gave. To use these rights, write to the address in section 1; we answer within one month.
You also have the right to complain to a supervisory authority. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it); you may instead contact the authority of the country where you live or work.
11. Children, security and changes
The site is addressed to adults planning a trip and is not designed for children. We protect the site and the data we hold with technical and organisational measures suited to the risk, including encrypted connections. When this policy changes, the new text is published on this page and the date of the last substantial update is shown at the bottom of the page.