In compliance with Law No. 29733 – Personal Data Protection Law and its Regulations approved by Supreme Decree No. 003-2013-JUS

INVERSIONES LUCIANA S.A., operator of Hotel San Blas, establishes this Privacy Policy to inform its guests, clients, and users about how personal data is collected, stored, used, and protected when providing hotel services, managing reservations, commercial communication, and browsing on digital media.

1. Identification of the Data Controller

The processing of your personal data is the responsibility of:

• • Corporate Name: INVERSIONES LUCIANA S.A.

• • RUC: 20335065621

• • Trade Name: Hotel San Blas

• • Address: Av. Arequipa 3940, Miraflores, Lima, Peru

• • Contact Email for Privacy Matters: reservas@sanblashotel.com

The controller guarantees compliance with legal obligations related to data protection and ensures the exercise of the rights of data subjects.

2. Channels and Means of Data Collection

Personal data is collected through various channels enabled for user interaction. These include:

• • Reservation web forms (booking engine) and contact form on sanblashotel.com

• • Direct phone communication

• • Messaging via WhatsApp or email

• • Private messages or forms on corporate social media

• • In-person check-in at the hotel reception

In all cases, your prior, express, or unequivocal consent will be requested, according to the stated purposes.

3. Types of Personal Data Collected

The type of data collected may vary depending on the requested service. Generally, the following data may be collected:

• • Identification Data: full name, document type and number (DNI or passport)

• • Contact Data: email address, phone number

• • Nationality and Date of Birth

• • Payment Information: card number, payment method, currency, issuing bank

• • Travel and Accommodation Preferences

• • Information required by tax and immigration laws in Peru

• • Additional Information voluntarily provided by the user: such as allergies, dietary requirements, reduced mobility, among others

4. Purposes of Data Processing

Personal data collected will be processed for the following purposes, grouped into three main categories:

a. Essential purposes for the provision of service:

• • Process, confirm, modify, or cancel room reservations

• • Manage check-in and check-out processes, billing, and respond to service-related requests

• • Comply with tax, immigration, and administrative obligations established by Peruvian authorities

• • Attend to requests for additional services such as laundry, meals, currency exchange, and event organization

b. Commercial and promotional purposes (require user consent):

• • Send promotional offers, discounts, and newsletters via email

• • Invite users to participate in satisfaction surveys or loyalty programs

• • Personalize the guest experience based on stay history or preferences

c. Analytical and service improvement purposes:

• • Evaluate user experiences to improve service quality

• • Analyze browsing trends and behavior on the website using tools such as cookies

5. Data Sharing with Third Parties

Hotel San Blas may share certain personal data with third parties strictly necessary for fulfilling contracted services. These third parties are bound by confidentiality agreements and legal compliance obligations:

• • Reservation platforms: to confirm and manage your stay

• • Electronic payment gateways: in case of online payments with credit or debit cards

• • Travel agencies or corporations: when the reservation is coordinated by an authorized third party

• • Competent authorities: in response to duly substantiated legal or tax requirements

Under no circumstances will personal data be sold, rented, or transferred for purposes other than those outlined herein.

6. Security Measures

Hotel San Blas has implemented technical and organizational mechanisms to ensure the security of collected personal data. These measures include:

• • SSL Certificate (Secure Socket Layer) on the website to encrypt information

• • Restricted access control to databases containing personal data

• • Internal policies for secure data handling by authorized personnel

• • Continuous monitoring to prevent unauthorized access, alteration, loss, or destruction of data

Despite these efforts, users should be aware that no system is entirely invulnerable to cyberattacks or technological failures.

7. Data Subject Rights

In accordance with Peruvian law, you have the right to exercise the following rights regarding your personal data:

• • Access: know what personal data we have stored about you

• • Rectification: update inaccurate, incomplete, or outdated information

• • Cancellation: request the deletion of your data when it is no longer needed or you withdraw your consent

• • Objection: refuse the processing of your data for promotional or non-consented purposes

To exercise these rights, you must send a request to reservas@sanblashotel.com, attaching a copy of a valid identification document. Your request will be evaluated and answered within the legal timeframe of 15 business days.

8. Data Retention

The personal data provided will be retained only as long as necessary to fulfill the purposes of the processing, respecting the timeframes set by tax, immigration, and civil regulations, or while a contractual relationship with the data subject exists.

Once these periods have expired, the data will be securely deleted, unless there is a legal obligation to retain it.

9. Use of Cookies

Our website uses cookies and similar technologies to improve navigation, optimize performance, and provide personalized content. These tools allow us to:

• • Analyze user interaction with the website

• • Remember previous settings (such as language and region)

• • Display ads or content tailored to the visitor’s interests

You can configure your browser to reject some cookies. However, doing so may affect the website’s functionality.

10. Modifications to the Privacy Policy

Hotel San Blas reserves the right to modify or update this policy at any time, due to legal changes, technical improvements, or adjustments in the services offered. In the event of substantial modifications, users will be notified at least 7 calendar days in advance through our website or other appropriate means.

We recommend reviewing this policy periodically to stay informed about how we protect your personal data.

Last updated: June 2025
Privacy Contact Email: reservas@sanblashotel.com
Official Website: www.sanblashotel.com