Privacy policy

We, RIMAC SEGUROS Y REASEGUROS, a company identified with Taxpayer ID (RUC) 20100041953; and RIMAC S.A. ENTIDAD PRESTADORA DE SALUD (EPS), a company identified with Taxpayer ID (RUC) 20414955020, both headquartered at Calle El Parque 149, Piso 2, San Isidro, Lima, Peru (hereinafter jointly referred to as “RIMAC”) value our users and take the protection and privacy of their personal data seriously. Accordingly, this Privacy Policy establishes the ways in which we will handle your personal data, pursuant to Law 29733 – the Personal Data Protection Act (the “Law”) and Executive Order (Decreto Supremo) 16-2024-JUS – the Regulations on the Law (the “Regulations”), as supplemented or amended.

1.- In order to prepare and/or conduct the business relationship between us, we will handle the following necessary personal data that you provide to us through the corresponding channels and mechanisms, and/or that to which we legitimately have access in order to update and complete it. To the contrary, we will not be able to prepare and/or conduct our business relationship:

a. Personally identifiable information: First and last names, Peruvian National Identity Document (DNI) number, copies of your Peruvian National Identity Document (DNI), Taxpayer ID (RUC) number, passport number, home address, phone number, email address, image, voice, signature, driver’s license, insurance card number, Private Pension System Identification Code (CUSSP), license plate number, alien registration card (CE) number, Personal Identification Card (CIP) number.

b. Personal data: Marital status, date of birth, nationality, sex, occupation, age, job information, employment history, relatives’ information, rightful claimants’ information, contact person’s information and relationship, academic information.

c. Economic/financial and insurance data: Credits, loans, guarantees, banking information, insurance policies and insurance card number, Private Pension System insurance policies and Private Pension System Identification Code (CUSSP), assets, pension/retirement plans, insured assets, tax information, credit cards, credit rating, mortgages, debts.

d. Social data: Personal interests and habits, housing characteristics, digital and physical activity and consumption preferences.

e. Sensitive data: Physical characteristics, weight and height, physical or mental health information, income, causes of death, digital footprint, romantic or family life, facial patterns, and location.

2.- You are responsible for keeping up to date the information you have provided to us. Without prejudice to the foregoing, in compliance with the Quality Principle, we may update, validate, verify, and/or supplement it through legitimate public or private sources. This includes the possibility that our third parties and/or agents may provide us with any information they have in their possession and/or which gather from legitimate public or private sources necessary to suitably prepare and/or conduct our business relationship.

3.- As part of our business relationship, we may communicate with you through different channels, whether directly or via our agents, to provide you with information regarding the use of customer service or self-service channels, contractual changes, preparation and maintenance of the business relationship, satisfaction surveys, assessment of the quality of the services we provide to you, collections, benefits we have for you as part of our business relationship, educational and social campaigns, and other information potentially relevant to our business relationship. Where applicable, we will communicate with your beneficiaries. Likewise, we may request and handle your location or geolocation data (including exact location, approximate location, and, where necessary for the application’s correct functioning, background location) for the provision and activation of services associated with your policy and operational functionalities of the mobile application, such as assistance, location-based recommendations, incident reports, or other services pertaining to your business relationship with RIMAC. Please keep in mind that the deactivation of this setting on your electronic devices may limit certain functionalities.

We may also handle your data to provide you with support, address your questions and complaints, or take any action related to our business relationship with you.

4.- For your security and the protection of your interests, we will use the biometric data you provide to us to authenticate your identity in order to prepare and/or conduct our business relationship.

5.- To prepare and/or conduct our business relationship in a way that meets your particular conditions, characteristics, and preferences, we may use your information to create statistical, analytical, profile, and segmentation information, whether using automated or other mechanisms.

6.- To prepare and/or conduct our business relationship, we may make decisions based on the handling of your data through automated and/or non-automated means intended to determine your financial and/or personal situation and health habits. RIMAC subjects these decisions and the means used to periodic reviews to ensure that everything is up to date and accurate. Without prejudice to the foregoing, you may provide additional information for a reevaluation of our decisions.

7.- We will handle your information through various agents located in Peru and/or abroad (via cross-border data flows), whose identity and location you agree that you have had at your disposal at the time you enter into this contract, and which are available at the links provided above.

8.- To comply with any obligations and/or requirements that may arise pursuant to the applicable norms, we may handle and potentially transfer your information to authorities and legally authorized third parties.

9.- We will keep and handle your information during the course of our business relationship and for up to ten (10) years following its termination. Your personal data will be stored, depending on your business relationship with RIMAC, in the following databases registered with the National Personal Data Protection Registry:

RIMAC SEGUROS

• “Customers,” with RNPDP-PJP Code 1637

• “Potential Customers,” with RNPDP-PJP Code 1635

• “Third Parties,” with RNPDP-PJP Code 1639

• “Suppliers,” with RNPDP-PJP Code 1634

• “‘Estar Bien’ Wellness Program,” with RNPDP-PJP Code 28776

RIMAC EPS

• “Customers,” with RNPDP-PJP Code 1806

• “Potential Customers,” with RNPDP-PJP Code 1808

• “Third Parties,” with RNPDP-PJP Code 1810

• “Suppliers,” with RNPDP-PJP Code 1809

10.- We reserve the right to amend any provision contained in this informational section, for which purpose we shall notify you of the scope of said amendment no less than forty-five (45) calendar days in advance, after which the amendment shall take effect.

11.- You have the right to request access to your personal data and to be informed of its handling (right to information), and to request the updating, inclusion, correction, cancellation, portability, and suppression thereof, as well as to challenge its use or disclosure or withdraw your consent, by sending a request by email to atencionalcliente@rimac.com.pe or through any of the RIMAC Service Platforms (by phone or in person) using the ARCO forms available at the following link: https://www.rimac.com/derechos-arco. Without prejudice to the foregoing, you may exercise your right to legal protection with the National Personal Data Protection Authority via a claim or the Peruvian Judiciary via a habeas data action.

12.- Our Personal Data Protection Officer, Karen Mora Gutiérrez, can be reached at the following email address: pdpcumplimiento@rimac.com.pe.