This policy explains what information we collect, how we use it and how you may exercise your rights over your personal data.
Corporación Minera American Perú S.A.C. (CMAP), Peruvian taxpayer registration number (RUC) 20602751342, is responsible for processing personal data received through this website.
This policy is governed by Peru's Personal Data Protection Law No. 29733, the regulations approved by Supreme Decree No. 016-2024-JUS and any other applicable provisions. CMAP determines the purposes and means of processing information collected through its contact form and the optional WhatsApp channel available on this website.
We may collect your full name, phone or WhatsApp number, email address, company when voluntarily provided, reason for contacting us and message content. To protect the form, we also temporarily process the IP address and technical session data associated with the mathematical CAPTCHA and attempt controls. We request only the information required to handle the communication.
The information will be added to CMAP's personal data bank for website users and contacts. The bank's final name, the data controller's registered address and its status or registration code in Peru's National Personal Data Protection Registry must be completed once formally confirmed by the company.
We use personal data to receive, assess, forward and respond to enquiries through the channel chosen by the user; maintain communications related to the requirement; and, when requested, provide information, commercial proposals or quotations for our services. We will not use the data for advertising or unrelated purposes without additional consent or another lawful basis.
Submitting the form or proceeding to WhatsApp requires the user to actively select the corresponding acceptance box. This action confirms that the user has read this policy and grants prior, free, express, unequivocal and informed consent for the purposes described. Required fields are necessary to process the enquiry; the company field is optional. The form cannot be submitted and the selected channel will not open without this authorisation.
Data associated with an enquiry may be retained for up to two years from the last communication, unless the user requests earlier deletion or a legal, contractual, administrative or judicial obligation justifies a different retention period. Technical data used to limit attempts is retained only temporarily.
To operate the website, email and optional WhatsApp channel, information may be processed by web hosting, technology infrastructure, email and messaging providers. By continuing to WhatsApp, the user accesses an external service also governed by its provider's terms and privacy practices. CMAP does not sell personal data. Where a provider stores information outside Peru, CMAP will apply the measures and notices required for cross-border data transfers. Information may also be provided to authorities when required by law.
CMAP applies reasonable technical and organisational measures to prevent loss, alteration, unauthorised access, use or disclosure. The form uses a secure connection, server-side validation, a mathematical CAPTCHA, attempt controls and mechanisms against automated submissions. Access to personal data must be limited to staff and providers who need it for the purposes disclosed.
Data subjects may request information, access, updating, rectification, inclusion, cancellation or deletion of their data; object to processing; request portability where applicable; and withdraw their consent. Send requests to contactanos@cmap.pe with the subject “ARCO rights request”, including your name, the right you wish to exercise, a clear description of your request and the information required to verify your identity. Requests will be handled free of charge within the statutory time limits.
If you believe that your request has not been addressed, has been addressed only in part or has been denied, you may contact Peru's National Authority for Personal Data Protection and use the official protection and complaint channels available at gob.pe/anpd.
The form does not request sensitive data and is not intended for minors. Users must not include sensitive information, third-party data or unnecessary information in their message. If additional information becomes essential, CMAP will request the corresponding authorisation and apply the enhanced measures required by law.
CMAP may update this policy in response to legal, operational or technological changes. The current version and its update date will be available on this page. Changes requiring renewed consent will be communicated and implemented in accordance with applicable law.