Privacy Policy
In compliance with the Personal Data Protection Law - Law No. 29733, regarding the duty of information, ASOCIACIÓN MUSEO DE ARTE DE LIMA , (hereinafter, the " COMPANY "), identified with RUC No. 20168496690 , with address at Av. 9 de Diciembre 125, Lima - Lima, Peru , within the website www.tienda.mali.pe (hereinafter the " Website " or "Site") and any other channel (such as: social networks), used for the sale of products and for the provision of services by the Company.
“User(s)” is considered to be any person who browses the Website, registers as a customer, purchases products, as well as any person who has provided personal data to the Company through the Website or through social networks.
The Company encourages the provision of free and informed consent. The Company may modify the provisions of this Privacy Policy. It is the User's responsibility to be aware of the current policy when providing information.
1. Personal data and purposes of processing:
This information allows us to know and identify the User and can be used to identify, contact, or locate them. The User must provide true, current, accurate, and complete information, and must inform the Company of any changes.
The personal data collected on the website are processed for the following purposes:
- For the purchase of the Company's products and for subscription as a customer on the Website: first and last name, ID number, home address, telephone number, email address.
- To provide customer service and product delivery (contact and inquiries, shipping/delivery of purchased products): first and last name, ID, telephone number, email address, home address.
- For use of the Contact form: first and last name, telephone number and email address.
- For information on the Complaints Book, please provide: full name, ID number and type, home address, telephone number, and email address.
The data mentioned in paragraphs i) through iv) are necessary to fulfill the purposes of the corresponding paragraphs. If they are not provided, the Company will not be able to fulfill these purposes, nor will we be able to provide optimal customer service.
Personal data may optionally be processed for additional purposes. These purposes will only be applicable if the User has given their free, prior, unequivocal, and informed consent, such as in the case of sending advertising and discounts.
2. Data Bank:
The personal data provided by Users are stored in one or more of the Company 's databases, depending on their relationship with the Company, as detailed below:
- “Clients” Database: The personal data of Users who purchase a product from the Company are stored.
- “Potential Clients” Database: This database stores the personal data of Users who request that the Company send them advertising material or those who require information about the Company's products.
- “Complaints Book” Database.
The Company declares that it has appropriate security measures in place, consistent with the processing to be carried out, as well as the necessary technical, organizational, and legal measures to guarantee the confidentiality of personal data.
The personal data collected on the website will be shared with the following recipients:
| Addressee | Country | Purpose | Cross-border flow |
|---|---|---|---|
| SHOPIFY | Canada | E-commerce platform for online sales | Yeah |
| Mailchimp | USA | CRM (Customer Database Management) | Yeah |
| Mercado Pago | Peru | Payment gateway | Yeah |
The cross-border flow complies with the requirements regulated by the Personal Data Protection Law and its Regulations.
3. Conservation of personal data:
Personal data will be retained for a period of 10 years or until you revoke your consent.
4. Cookies:
The website uses cookies, which may be applied and/or installed on users' computers. Cookies are text files stored in the user's browser to collect information about their behavior regarding website usage. By identifying user activity within the website, this is an important element for the website's operation and improvement. Additionally, they define the advertisements shared with users, personalizing the website's content.
On this website, we use cookies that help us improve its quality, based on the browsing habits and styles of users.
Cookies cannot harm your device and are also very useful, as they help us identify and resolve errors. They serve a variety of purposes. For example, recognizing users, obtaining information about their browsing habits, or personalizing the way content is displayed. Some cookies are strictly necessary for the website to function properly, while others are used to improve website performance, such as offering various products and services in the most efficient manner.
The Company has implemented cookies on the website, which are classified as follows:
- Necessary Category: These cookies help make a website usable by enabling basic functions such as navigation and access to secure areas of the website. The website cannot function properly without these cookies.
- Statistics Category: These help website owners understand how visitors interact by collecting and reporting information anonymously.
- Marketing Category: Used to track visitors across websites. The purpose of this interaction is to display ads that are relevant and engaging for the individual user and, therefore, more valuable to third-party advertisers.
- Preferences Category : In order to remember information about the User that allows them to access the website with certain features that improve their user experience, such as, for example, the language.
It is important to keep in mind that cookies allow us to track a user's searches or browsing habits over a specific period of time. We provide users with a cookie configurator (link) where they can choose to accept or reject the installation of cookies that are not strictly necessary for the operation of the website. If they are rejected, you can continue browsing our website. In practice, most browsers allow users to be notified of the presence of cookies or automatically reject them.
The User freely, expressly, and unequivocally grants their consent by checking the box: "I consent to and/or accept cookies." By giving their consent, the User authorizes the website to process them for the aforementioned purposes. If the User does not agree with any of these purposes, they can customize them in the cookie management bar located on our website.
Below is a list of the cookies used on the website, their type, functionality, and retention period.
| Denomination | Type of cookie | functionality | Storage period |
|---|---|---|---|
| CONSENT | Necessary | Used to detect whether the visitor has accepted the marketing category in the cookie banner. This cookie is required for GDPR-compliance of the website (provided by YouTube). | years |
| PHPSESSID | Necessary | Preserves user states across page requests. | Session |
| _ga | Statistics | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | 2 years |
| _gat | Statistics | Used by Google Analytics to control the request rate. | 1 day |
| _gid | Statistics | Registers a unique ID that is used to generate statistical data on how the visitor uses the website (provided by YouTube). | 1 day |
| VISITOR_INFO1_LIVE | Marketing | Attempts to estimate user bandwidth on pages with embedded YouTube videos (provided by YouTube). | 179 days |
| YSC | Marketing | Registers a unique ID to keep statistics of what videos from YouTube the user has seen (provided by YouTube). | Session |
| yt.innertube::nextId | Marketing | Registers a unique ID to keep statistics of what videos from YouTube the user has seen (provided by YouTube). | Permanent |
| yt.innertube::requests | Marketing | Registers a unique ID to keep statistics of what videos from YouTube the user has seen (provided by YouTube). | Permanent |
| yt-remote-cast-available | Marketing | Records the user's video player preferences when watching embedded YouTube videos (provided by YouTube). | Session |
| yt-remote-cast-installed | Marketing | Records the user's video player preferences when watching embedded YouTube videos (provided by YouTube). | Session |
| yt-remote-connected-devices | Marketing | Records the user's video player preferences when watching embedded YouTube videos (provided by YouTube). | Permanent |
| yt-remote-device-id | Marketing | Records the user's video player preferences when watching embedded YouTube videos (provided by YouTube). | Permanent |
| yt-remote-session-app | Marketing | Records the user's video player preferences when watching embedded YouTube videos (provided by YouTube). | Session |
| yt-remote-session-name | Marketing | Records the user's video player preferences when watching embedded YouTube videos (provided by YouTube). | Session |
| yt-remote-fast-check-period | Marketing | Records the user's video player preferences when watching embedded YouTube videos (provided by YouTube). | Session |
5. Compliance with Obligations:
The Company collects your personal data in compliance with the provisions of the Personal Data Protection Act (Law No. 29733) and its Regulations (approved by Supreme Decree No. 016-2024-JUS). Thus, it is obligated to:
- Do not apply or use the personal data obtained for purposes other than or unrelated to the purpose set forth in this policy.
- Not to disclose to other individuals or legal entities the personal data provided to you.
- Maintain secrecy and confidentiality regarding these, even after ending your relationship with the User.
- Adopt the technical and organizational measures required by law to ensure the security of personal data and prevent its alteration, loss, unauthorized processing, or access, taking into account the state of technology, the nature of the data stored, and the risks to which it is exposed, whether arising from human action or the physical or natural environment.
- Transfer and communicate the obligations mentioned in the previous paragraphs to the personnel dedicated to fulfilling the services of the website .
- Destroy all personal data processed once the specified period has ended, as well as any media or documents containing any personal data being processed.
We will only process the personal data of minors under the age of 18 when such Personal Information is provided by parents, guardians, representatives, or any third party with the authority to do so, and in cases where such Personal Information is provided for the provision of services offered on the Website or any other service we offer.
The Website may contain links to other services and websites not operated or controlled by us (the "Third Party Services"). The policies and procedures we describe here do not apply to Third Party Services. Links on our Website do not imply that we approve or have reviewed the Third Party Services. We encourage you to contact these sites directly for information about their privacy policies.
6. ARCO Rights of the User:
The User may exercise the following rights over their personal data:
- Access to information: The User may obtain information about himself or herself that is stored in the Company's databases.
- Rectification: The User may request the updating, rectification, or addition of new data to their personal data when there is an error, inaccuracy, or incompleteness.
- Cancellation: The User may request the deletion of his or her personal data that is not required for the fulfillment of the Company's obligations.
- Opposition: The user may object to the processing of their personal data, provided that such processing is not required by contract or law.
To do so, you must send a written communication (or letter) to Av. 9 de Diciembre 125, Lima, Peru , or to the email address tienda@mali.pe . The User must explain under what circumstances they provided the personal data in question to the Company.
7. Jurisdiction and Applicable Law:
For any matter not expressly provided for in this policy, the rules contained in Peruvian law shall apply. Furthermore, any dispute arising from the acceptance and/or interpretation of this policy shall be subject to the jurisdiction of the judges of Cercado de Lima, Lima, Peru, the National Institute for the Defense of Competition and Intellectual Property (INDECOPI), or the National Authority for the Protection of Personal Data.
Notwithstanding the foregoing, Users and the Company may agree on other alternative dispute resolution mechanisms.
Last Update: 15.04.2025