Privacy Policies
This Privacy Policy describes how Damma Legal Advisors Sociedad Civil de Responsabilidad Limitada, identified with RUC No. 20509143561 domiciled at Calle Amador Merino Reyna No. 223, Oficina 803, San Isidro (hereinafter, “Damma”) collects, uses, shares, and processes Personal Data obtained through its website.
This Privacy Policy applies to the personal data of clients and prospective clients of Damma (hereinafter, “Personal Data Holders”).
Our Privacy Policy explains:
- The purpose for which the personal data will be processed.
- The identity and address of the Personal Data Holders or the persons in charge of the processing of their personal data.
- Transfers of personal data, international and national level.
- The period of time for which the personal data is kept.
- Exercise of the rights granted by law and the means provided for this purpose.
- Data protection and minors.
- Information collected.
- Data protection
1. The purpose for which the personal data will be processed.
At Damma, we process data in an adequate and pertinent manner and within the framework of the clearly defined purposes for which they were collected. We hereby proceed to point out the purposes of personal data processing:
- Keeping a record of customers and potential customers who contact Damma through the contact form on our website (https://www.damma.com.pe/).
- In order for Damma to comply with current legal regulations.
- For statistical, historical and scientific purposes.
- In order for information about services, activities, events, news and regulatory developments to reach clients and potential clients in Damma.
- To provide legal services to Damma’s clients
- To prevent any breach of data security, by performing computer controls of Damma’s website.
- To send information requested by clients and potential clients, as well as to answer queries, through the contact section of Damma’s website.
2. The identity and address of the holders of data banks or those responsible for the processing of personal data.
Unless explicitly stated otherwise, Damma has ownership of the data banks that house the personal data we process. Consequently, it assumes responsibility for ensuring that the systems and processes we employ comply with the provisions of the Personal Data Protection Law (Law No. 29733) and its Regulations (Supreme Decree No. 016-2024-JUS).
The Personal Data Holder may contact Damma to revoke their consent or exercise their rights through the email info@damma.com.pe or the telephone number (01) 680-3400.
Personal data may be disclosed to the following recipients: (i) the competent administrative, judicial or police authorities, where so required by law or a judicial order; and (ii) the providers that act as Damma’s data processors for the provision of storage, email and accounting support services, the updated list of which is set out below:
| Country | Provider and RUC / Tax ID | Address | Category of recipient | Service provided | Category of data |
|---|---|---|---|---|---|
| United States | Microsoft Corporation, EIN 91-1144442 |
One Microsoft Way, Redmond, Washington, 98052-6399, United States | Data processor (storage and email service provider) |
|
|
| Peru | BUREAU CONSULTIN S.A.C., RUC No. 20267968650 | Calle Boulevard No. 140, dpto 302, Santiago de Surco | Data processor | Accounting |
|
3. Transfers of personal data, international and domestic level.
Damma does not transfer personal data at the national level. However, it does transfer data internationally for the purpose of storing emails and data handled by Damma, which are hosted on Microsoft servers. 1
This cross-border data flow is carried out under articles 11 and 15 of Law No. 29733 and articles 18 to 21 of its Regulations. Damma adopts appropriate safeguards to ensure that the recipient affords the personal data a level of protection consistent with Peruvian law, and complies with reporting the cross-border data flow to the National Authority for the Protection of Personal Data for its registration in the National Registry for the Protection of Personal Data.
1 Microsoft Corporation, One Microsoft Way located in Redmond, WA 98052-6399 United States / EIN 91-1144442.
4. Time for which the personal data is kept.
The personal data collected to establish a contractual relationship will be kept for the period deemed necessary to fulfill the purpose for which they were obtained and/or for the time indicated by any specific rule in this regard. Subsequently, Damma will keep the personal data securely in order to make them available to the competent authorities, judges and courts, for the period of limitation of actions arising from the relationship with the Personal Data Holder, as well as the legally established retention periods. The physical deletion of the data will be carried out once these periods have elapsed. Notwithstanding the above, once the data is no longer relevant for the purposes for which it was collected, Damma will delete it.
It should be emphasized that the data of Personal Data Holders will be kept considering the current legislation on labor, civil, commercial, consumer protection and tax matters. In this line, the Personal Data Holders may, at any time, exercise their ARCO rights, according to the following paragraph.
5. Rights granted by law and the means provided for this purpose.
ARCO rights are a set of rights related to the protection of personal data. The acronym ARCO stands for Access, Rectification, Cancellation and Opposition.
Access (A): This right allows individuals to request and obtain information on whether their personal data is being processed, as well as to obtain details on how it is being used.
Rectification (R): Individuals have the right to correct inaccuracies in their personal data. If they find that the information stored is incorrect or incomplete, they can request its correction.
Cancellation (C): This right allows individuals to request the deletion of their personal data when it is no longer necessary for the purposes for which it was collected, when consent is withdrawn or when they object to the processing.
Opposition (O): Individuals may object to the processing of their personal data in certain circumstances, such as when it is used for direct marketing purposes or when the processing is carried out for statistical or research purposes, unless there are legitimate and prevailing reasons to continue the processing.
The Personal Data Holders may exercise their ARCO rights with respect to their personal information by requesting the corresponding form via email at info@damma.com.pe. For further details, the Personal Data Holders may contact us by email at info@damma.com.pe or by telephone at (01) 680-3400.
In addition to the ARCO rights, the Personal Data Holder has the right to the objective processing of their data, and to revoke at any time the consent granted, without retroactive effect. To exercise their rights, the Personal Data Holder must attach a simple copy of their identity document and, if acting through a representative, the power of attorney evidencing such representation.
6. Protection of data and minors.
Our website and the services we provide are not designed for children, nor may they be used by children under the age of 18. Consequently, Damma does not intentionally collect, use, share or process Personal Information from minors. Should Damma become aware that it has collected the personal data of a minor without the consent of the person exercising parental authority or guardianship, in accordance with articles 22 and 25 of the Regulations, it will take the necessary measures to delete such data as soon as possible.
If Damma detects that a minor accesses our website, uses or attempts to use our services, Damma reserves the right not to provide its services to such minor.
7. Gathered information.
Damma treats the following personal data of Personal Data Holders who enter their information on the website: first and last names, email address, subject, message, and IP address.
In addition, for the provision of legal services, we collect: identity document type and number, nationality, marital status, home address, handwritten and electronic signature, telephone number, profession, tax information, bank details, income and other pertinent data.
It is important to note that, by accepting this Privacy Policy and providing personal data, the Personal Data Holder assures that the data provided are true, accurate, complete, and updated. The Personal Data Holder assumes responsibility for any damage or harm, whether direct or indirect, that may arise as a result of non-compliance with this obligation.
8. Data protection.
Damma will implement appropriate security measures to safeguard the personal information of Personal Data Holders against unauthorized access, alteration, disclosure, loss or destruction, in accordance with the provisions set forth in the relevant regulations on the protection of personal data. These precautions include, but are not limited to, internal assessments of:
- The data collection system.
- The storage and processing practices.
- The electronic safeguards of the web site.
- The security measures designed to prevent unauthorized access to our physical and virtual storage spaces for personal information.
In relation to the confidentiality of processing, Damma will make its best efforts to ensure that any person authorized to process the data, including Damma personnel, collaborators, and suppliers, is subject to the appropriate obligation of confidentiality, whether by duty of contractual or legal origin.
In case of any security incident, Damma will notify immediately. Finally, although Damma cannot guarantee the total invulnerability of the Internet, Damma undertakes to report any data breach resulting from unauthorized access by third parties.
9. Data Banks
Personal data will be stored in the following databases:
| Registered Data Bank | Registration Code |
|---|---|
| Clients | RNPDP-PJP N°30461 |
| Suppliers | RNPDP-PJP N° 30462 |
| Workers | RNPDP-PJP N° 30463 |
| Users of the website | RNPDP-PJP N° 30464 |
These databases are owned by Damma Legal Advisors and have been declared to the National Authority for the Protection of Personal Data, to be registered in the National Registry for the Protection of Personal Data.
Final Considerations.
The present Privacy Policy may present changes, therefore, Damma reserves the right to update or modify this Privacy Policy at any time.
In this regard, Damma undertakes to inform you of any changes and to request your consent in the event that the forms of treatment that you have authorized by accepting this Privacy Policy are modified.
Notwithstanding the foregoing, it is recommended that you periodically review this Privacy Policy, especially before providing additional personal information.
The date of the last update of this Privacy Policy is indicated at the end of the document.
You are not obliged, as a Personal Data Subject, to provide your personal data. However, if you wish to contact Damma or access information about services, activities, events, news and regulatory developments, it is necessary that you provide the information requested in the appropriate forms. Otherwise, it will be impossible for us to respond to your request.
By checking the box indicating “I have read and accept the Privacy Policy”, the user acknowledges having been duly informed about the processing of their personal data in accordance with the applicable regulation.
July , 2026