This Privacy Policy aims to provide clear and precise information regarding the processing of personal data carried out by PESQUERA HAYDUK S.A.
This Privacy Policy aims to provide clear and precise information regarding the processing of personal data carried out by PESQUERA HAYDUK S.A.
This Privacy Policy (hereinafter, the “Policy”) aims to provide clear and precise information regarding the processing of personal data carried out by PESQUERA HAYDUK SA (hereinafter, “HAYDUK”).
HAYDUK is a company engaged in fishing, industrial, and commercial activities. In the course of these activities, HAYDUK processes the personal data of various natural persons, including collaborators, applicants or candidates, suppliers, clients, and other third parties with whom it maintains a direct or indirect relationship (hereinafter, the “User” or the “Users”).
This Policy applies to the processing of personal data carried out by HAYDUK through its physical and digital channels, institutional website, mobile applications, physical or electronic forms, internal platforms, and any other means enabled for the collection, storage, or processing of personal data.
Furthermore, this Policy applies both to the services that HAYDUK makes available to its clients and to those it offers to Users through its website (hereinafter, the “Website”).
Within the framework of its operations, HAYDUK may act, as applicable, as Holder of the Personal Data Bank, Data Controller, or Data Processor, in accordance with the provisions of Law No. 29733 – Personal Data Protection Law, its Regulations approved by Supreme Decree No. 016-2024-JUS, and other complementary provisions (hereinafter, the “Personal Data Regulations”).
HAYDUK shall act as Holder of the Personal Data Bank or Data Controller when it directly collects and processes personal data of employees, applicants, suppliers, clients, users of its website, or any other natural person linked to its operations, through physical or digital channels, for its own purposes related to business management, operations, contractual, legal, commercial, and labor matters. In such cases, the processing is carried out for its own purposes, and the corresponding personal data banks shall be registered before the National Register for the Protection of Personal Data in accordance with applicable regulations.
Furthermore, HAYDUK may act as Data Processor when, by virtue of a contractual relationship, it processes personal data on behalf of a third party, acting solely under the documented instructions from the Holder of the Personal Data Bank or Data Controller. In this case, the processing shall be carried out exclusively for the purposes established in the respective contract and in compliance with the security measures required by the Personal Data Regulations.
The User, as the data subject, freely, priorly, informedly, expressly, and unequivocally consent to the processing of their personal data by HAYDUK in its capacity as Holder or Processor, as applicable, in accordance with the purposes described in this Privacy Policy and in strict compliance with the Personal Data Regulations. Such consent shall be evidenced by clicking the consent checkbox.
HAYDUK processes only the personal data that is strictly necessary to fulfill the purposes authorized by the data subjects, as well as for the development of its business, contractual, labor, and institutional communication activities, in accordance with the provisions of the Personal Data Regulations.
The categories of personal data that HAYDUK may process, depending on the relationship or link with the data holder, are as follows:
The personal data processed may have been provided directly by the data holder (for example, by completing physical or digital forms, sending emails, participating in recruitment processes, or registering on platforms) or may have been obtained from public or private sources, in accordance with applicable regulations. If the User provides us with personal data of third parties, the User declares that he/she has obtained the consent of such third parties for HAYDUK to process his/her personal data in accordance with the information set forth in this Privacy Policy. In this regard, the User shall hold HAYDUK harmless against any claim filed by a third party or any damage that such third party may suffer.
Under no circumstances does HAYDUK process personal data of minors, except where such data is strictly necessary and the express consent of their parents, guardians, or legal representatives has been obtained, in accordance with the provisions of the Personal Data Regulations.
The processing of personal data carried out by HAYDUK is based on specific, explicit, legitimate, and proportionate purposes, in compliance with the Personal Data Regulations. In each case, the processing is supported by one or more legal bases provided by such regulations, such as the free, prior, informed, express, and unequivocal consent of the data holder; the performance of a contractual relationship; compliance with legal obligations; HAYDUK’s duly balanced legitimate interest; or public interest, as applicable.
Below are detailed the main purposes for which HAYDUK processes personal data, grouped according to the type of relationship with the User, as the data holder:
Purposes: Recruitment, evaluation, and hiring processes; formalization and administration of employment or contractual relationship; payment of salaries and benefits; compliance with labor, social security, tax, and occupational health legal obligations; management of leave, absences, and medical examinations; maintenance of employment records.
Types of data processed: Identification data, employment data, academic data, contact data, identity documents, biometric data, and health data (occupational).
Legal basis: Performance of a pre-contractual or contractual relationship; compliance with legal obligations; consent for the processing of sensitive data, where applicable.
Purposes: Access control to facilities; video surveillance (including in areas or spaces within HAYDUK’s premises); system authentication; access traceability; prevention of security incidents.
Types of data processed: Biometric data, images, access records, activity logs, and user identifiers.
Tipos de datos tratados: Datos biométricos, imágenes, registros de acceso, logs de actividad, identificadores de usuario.
Legal basis: HAYDUK’s legitimate interest in ensuring security and compliance with its legal obligations; consent, where required.
Purposes: Respond to requests from competent authorities; to address audits; to support legal or contractual actions.
Types of data processed: All personal data held by HAYDUK that is required by the authority in accordance with the principle of legality.
Legal basis: Compliance with a legal obligation.
Purposes: Evaluation, contracting, and execution of services; monitoring contractual compliance; handling requests; access control; payment for services.
Types of data processed: Identification and contact data, as well as data contained in communications or forms.
Legal basis: Execution of contractual relationship; consent for direct communications; legitimate interest.
Purposes: Registration, management, and handling of inquiries, complaints, or requests from clients or users; compliance with warranties; delivery of requested information.
Types of data processed: Identification and contact data, as well as data contained in communications or forms.
Legal basis: Execution of contractual relationship; consent for direct communications; legitimate interest.
Purposes: Sending institutional information or information related to corporate benefits, internal activities, health or integration campaigns, news, or related content.
Types of data processed: Email address, name, job title, workplace, telephone number, and photographs.
Legal basis: HAYDUK’s legitimate interest; consent, where required.
Purposes: To maintain documentation as part of the institutional archive for the period required by applicable regulations or in accordance with the principle of data minimization.
Types of data processed: All data collected throughout the lifecycle of the employment or contractual relationship.
Legal basis: Legal obligation or legitimate interest.
The personal data processed by HAYDUK shall not be disclosed or transferred to third parties for purposes other than those that have been informed and authorized by the User, as the data holder, unless there is a legal obligation or a mandate issued by a competent authority.
However, HAYDUK’s employees, officers, advisors, suppliers, service providers, and any other third-party rendering services on its behalf may have access to personal data, provided that such access is necessary for the management of contractual, pre-contractual, employment, or commercial relationships with the data holders. In such cases, access shall be granted in the capacity of data processor or sub-processor and shall be duly governed by a data processing agreement, in accordance with the provisions of the Personal Data Regulations.
Likewise, HAYDUK may transfer personal data for the purpose of a data processing engagement or the subcontracting of such engagement in connection with the provision of its services, in accordance with the provisions of Section 3.7 of this Privacy Policy.
In cases where HAYDUK transfers Users’ personal data, it shall inform the recipient of the personal data that must be processed in compliance with the information previously provided by HAYDUK to the User and in accordance with the scope of the consent granted by the User, which shall be duly communicated to the recipient.
With respect to cross-border data transfers, such transfers shall be carried out only when the recipient or importer of the personal data is located in a country that provides an adequate level of data protection in accordance with the provisions of the Personal Data Regulations.
If the country does not provide an adequate level of data protection, HAYDUK shall implement appropriate warranties to ensure the proper processing of personal data outside the national territory, as applicable. For this purpose, HAYDUK shall rely on contractual clauses or other legal instruments establishing, at a minimum, the same obligations to which it is subject, as well as the conditions under which the User consented to the processing of their personal data.
HAYDUK may also disclose the personal data collected in specific cases where such disclosure is established and required by applicable regulations, or when requested by competent authorities.
HAYDUK stores Users’ personal data for as long as necessary to use the data in accordance with the purpose for which it was collected, based on the legal grounds that legitimize its processing and in compliance with the principles of necessity and proportionality established in the Personal Data Regulations.
Once the purpose for which the data was collected has been fulfilled, HAYDUK shall retain Users’ personal data for up to two (02) years in order to comply with its legal obligations, unless otherwise provided by law and/or unless a valid objection, revocation, erasure request, or any other applicable right has been duly exercised by the User.
In compliance with its legal obligations, when HAYDUK acts as a data processor, it shall retain the holder’s data for the maximum period permitted under the Personal Data Regulations, that is, two (2) years.
After the termination of the corresponding relationship, and as applicable, HAYDUK shall retain the data duly disassociated, without making any use of it, for as long as it may be necessary for the exercise or defense of claims, or where any judicial, legal, contractual, or administrative liability may arise from its processing and requires attention and potential retrieval.
Likewise, where minimum retention periods are established by law or required by a public authority in the exercise of its functions, the data shall be retained in accordance with such periods.
In all cases, appropriate technical and organizational security measures shall be applied to ensure the confidentiality and integrity of the data during its retention, as well as secure procedures for its definitive deletion when applicable.
Los datos personales recogidos por HAYDUK pueden ser procesados por empleados autorizados de HAYDUK para la prestación de los servicios, o por terceras empresas que prestan servicios como encargados de HAYDUK. Las empresas que prestan servicios como encargados o sub-encargados se detallan en el Anexo 01 de esta Política. El Anexo 1 podrá ser actualizado por HAYDUK.
Los encargos o sub-encargos para el tratamiento de datos personales, se realizarán de acuerdo a las Normas de Datos Personales.
At any time, and/or whenever deemed appropriate, Users may exercise their ARCO rights (access, rectification, cancellation, and objection) by writing to the following contact email address: datospersonales@hayduk.com.pe
Users are entitled to the rights set forth in the Personal Data Regulations, including the right to be informed; to access and obtain knowledge of their personal data; to update, rectify, cancel, or object to its processing; the right to inclusion; the right to objective processing; the right to request the deletion of the personal data provided; to know the purposes and uses applied to their personal data; to revoke the consent granted; and to access their personal data free of charge, as well as any other rights currently or subsequently recognized under the Personal Data Regulations.
The User may revoke their consent for the processing of their personal data at any time, without prior justification and without retroactive effect. The revocation of consent shall be subject to the same requirements observed at the time it was granted. The User may refuse or revoke consent for the processing of their personal data for purposes additional to those that give rise to the authorized processing, without affecting the relationship underlying the consent that has been granted and not revoked. In the event of revocation, any new processing activities shall be adjusted in accordance with such revocation, and any processing activities already underway shall be adapted within a period not exceeding ten (10) working days.
The exercise of ARCO rights (access, rectification, cancellation, and objection) by Users shall be carried out as follows:
Likewise, the exercise of ARCO rights shall be carried out by submitting a request addressed to HAYDUK when it acts as Holder of the Personal Data Bank or as Data Processor (where it is required to handle such requests). The request must contain the following information:
All requests shall be received with acknowledgment of receipt, where applicable. If the request does not meet the requirements described above, HAYDUK, when acting as Holder of the Personal Data Bank, shall, within five (5) working days counted from the day following receipt of the request, raise any observations that cannot be remedied ex officio and invite the User to correct them within a maximum period of five (5) working days. If the deficiencies are not remedied within the indicated period, the request shall be deemed not submitted. When a request to exercise rights is submitted to HAYDUK in its capacity as Data Processor, it must forward the request within a maximum period of three (3) working days to Holder of the Personal Data Bank or Data Controller in order for the corresponding request to be addressed. Where the request to exercise rights is submitted to HAYDUK as Data Processor and HAYDUK is the entity carrying out the processing on behalf of the Holder of the Personal Data Bank or Data Controller, HAYDUK shall receive the request and immediately forward it to the respective Holder of the Personal Data Bank so that the User’s right may be duly addressed, and shall also inform the User of such forwarding.
If the information provided in the request is insufficient or erroneous in such a way that it prevents it from being processed, HAYDUK, when acting as Holder of the Personal Data Bank, may request additional information or documentation from the User within seven (7) working days following receipt of the request. Within ten (10) working days from the day following receipt of such request for additional information, the User must provide the documentation they deem pertinent to substantiate their application. Otherwise, the request shall be deemed not submitted. The applicable period for issuing a response shall be suspended until the User complies with the request for additional information or documentation.
A request for updating, rectification, or inclusion must specify the personal data to which it refers, as well as the modification to be made, and must be accompanied by documentation supporting the appropriateness of the requested action.
Likewise, in accordance with the Personal Data Regulations, HAYDUK, when acting as Holder of the Personal Data Bank or as Data Processor, as applicable, shall observe the following response periods for handling requests:
Except for the period established for the exercise of the right to information, the applicable time limits for responding to or addressing the other rights may be extended once, for an additional period of up to the same duration, provided that the circumstances justify such extension. The justification for the extension must be communicated to the User within the original period intended to be extended. Likewise, the response to the User must be provided in a clear, legible, understandable, and easily accessible manner.
The User has the right to be informed, in a clear, express, and unequivocal manner and in plain language, of the following:
Under the right of access, the User may not obtain information or documentation that, although related to the User, does not strictly fall within the circumstances set forth in the preceding paragraph.
As a manifestation of the right of access, the User may request the personal data concerning them that they have provided to HAYDUK as Holder of the Personal Data Bank, in a structured, commonly used, and machine-readable format, and may request its transmission to another controller or Holder of the Personal Data Bank. When exercising the right to data portability, the User has the right to have their data transmitted directly from one controller or Holder of the Personal Data Bank to another, where technically feasible, provided that such exercise does not impose an excessive financial burden, excessive or unreasonable technique to HAYDUK as appropriate. Derived, inferred, or constructed data based on personal data may be subject to portability, provided that HAYDUK, as the Holder of the Personal Data Bank, so determines.
The information corresponding to the right of access may, at the User’s option, be provided in writing, by electronic means, by telephone, by image, or through any other suitable means for such purpose. The User may choose one of the following methods: (i) on-site viewing; (ii) written format, copy, photocopy, or similar; (iii) electronic transmission of the response, provided that the identity of the data subject, as well as the security and receipt of the information, are guaranteed; and (iv) any other form or means appropriate to the configuration or material implementation of the personal data bank or to the nature of the established processing. Regardless of the method used, access must be provided in a clear, legible, and intelligible format, without the use of codes or keys requiring mechanical devices for proper understanding and, where applicable, accompanied by an explanation. Access must be provided in language understandable to the average knowledge level of the population with respect to the terms used.
The information made available to the User in connection with the exercise of the right of access must be comprehensive and include what is stated in the Personal Data Regulations, even if the request covers only one specific aspect of such information.
The User may request the deletion or cancellation of their personal data when such data is no longer necessary or relevant for the purpose for which it was collected, when the period established for its processing has expired, or when the User has revoked their consent for its processing. The request for deletion or cancellation may refer to all the User’s personal data contained in a personal data bank or only to a portion thereof. The submission of a request for deletion to HAYDUK, as Data Controller, shall entail the cessation of the processing of the personal data through its blocking while its subsequent deletion is evaluated. When HAYDUK acts as the Holder of the Personal Data Bank, it shall document for the User that the request has been fulfilled and shall indicate any transfers of the deleted data, identifying to whom such data was transferred, as well as the communication of the corresponding deletion. Deletion shall not proceed when personal data must be retained for historical, statistical, or scientific reasons in accordance with applicable legislation, or, as the case may be, within the framework of contractual relationships between HAYDUK, as Data Controller, and the User, which justify the continued processing of such data. Likewise, whenever possible, depending on the nature of the reasons supporting the denial, dissociation or anonymization measures shall be applied to allow continued processing.
In the same way, the User has the right to object at any time to the processing of their personal data, provided that they demonstrate the existence of well-founded and legitimate grounds relating to a specific personal situation that justify the exercise of this right. If the objection is justified, HAYDUK, when acting as the Holder of the Personal Data Bank, must cease the processing that gave rise to the objection, including de-indexing where applicable. Unless there is a prior contractual relationship supporting such processing, when personal data is processed for advertising and commercial prospecting purposes, including profiling, the User may exercise their right to object at any time.
HAYDUK uses cookies and similar technologies to enhance users’ browsing experience, as well as to collect statistical and operational information. The use of these technologies is carried out in compliance with the provisions of Law No. 29733, the Personal Data Protection Law, and its Regulations approved by Supreme Decree No. 016-2024-JUS.
What Are Cookies?
Cookies are small text files that are stored in the browser of the user’s device when visiting websites. They allow information about the visit and use of the site to be remembered, facilitating future interactions and optimizing the browsing experience. Some cookies are essential for the proper functioning of the website, while others allow data to be collected for statistical, functional, or advertising purposes.
Types of Cookies That the Website May Use
There are different types of cookies. Below, we describe the types of cookies available in the market and then explain which ones are used by our website.
According to who manages them:
According to Their Duration:
According to the purpose:
Cookies used by HAYDUK
HAYDUK uses both first-party and third-party cookies for the following purposes:
Information collected through Cookies
Through the use of cookies, HAYDUK may collect information such as:
Main Purposes of the Use of Cookies
HAYDUK uses first-party and third-party cookies for the following main purposes:
Additional Purposes of the Use of Cookies
In addition to the purposes indicated above, the information collected through cookies may be used to:
The User may configure their browser to reject some or all cookies, as well as use the “I do not accept” button to refuse the use of non-essential cookies. Likewise, the User may revoke their consent at any time by writing to datospersonales@hayduk.com.pe.
Consent
Upon first accessing the HAYDUK Website, the User shall be informed of the use of cookies through a banner or notice. The User may accept, reject, or configure the use of non-essential cookies. Consent may be revoked at any time through the browser settings or by writing to datospersonales@hayduk.com.pe.
If the User does not authorize the use of non-essential cookies, only the technical cookies that are strictly necessary to ensure the basic functionality of the Website shall be used.
Retention of Data Obtained through Cookies
Personal data collected through cookies will be retained for a maximum period of twelve (12) months, without prejudice to different retention periods that may apply due to legal obligations or the nature of the cookie.
Browser Settings
The User may configure their browser to restrict or block the use of cookies. Each browser has different procedures for managing these settings. However, disabling certain cookies may affect the proper functioning of the Website.
HAYDUK processes personal data under strict confidentiality and has implemented technical, organizational, and legal measures aimed at ensuring its integrity, availability, and confidentiality, in accordance with the provisions of Law No. 29733, Personal Data Protection Law, and its Regulation. The measures adopted are aligned with the type of data processed, the context and purposes of the processing, the state of the art, and the identified risks.
Below are the main measures and controls implemented by HAYDUK:
Additionally, if a security incident is identified that results in the exposure of large volumes of personal data, whether due to the quantity or type of data involved, or that may affect a large number of individuals, involve sensitive data, or cause evident harm to other rights or freedoms of the User, and where HAYDUK acts as the Holder of the Personal Data Bank, HAYDUK will notify the National Authority for Personal Data Protection within a maximum period of forty-eight (48) hours after becoming aware of the incident. It will also notify the National Digital Security Center, as applicable. Furthermore, the affected User will be informed within forty-eight (48) hours, using clear and simple language, including the measures adopted to mitigate the effects of the incident.
On the other hand, when HAYDUK acts as a Data Processor, it will immediately inform the Holder of the Personal Data Bank or Data Controller of the corresponding security incident.
For any inquiries related to this Policy or the security of personal data, you may contact us via email at: datospersonales@hayduk.com.pe.
When HAYDUK acts as the Holder of Personal Data Bank or Data Controller, and the Website User or other data subject has provided their free, prior, informed, express and unequivocal consent, HAYDUK may process their personal data in order to contact them for the purpose of managing the contracting of its services, as well as to send information, updates, promotions, and commercial offers related to its products or services, tailored to their profile and interests. These communications will primarily be made through electronic means, such as email, instant messaging (WhatsApp or other similar platforms), SMS, social media, and notifications on the Website.
Additionally, the User also freely, priorly, informedly, expressly, and unequivocally consents to the conducting of satisfaction surveys and to the processing of their data for statistical purposes, with the objective of improving service quality and customer experience.
HAYDUK informs that the data holder may revoke their consent at any time or exercise their right to object to the processing for promotional purposes by sending a communication to the email address datospersonales@hayduk.com.pe, without prejudice to the processing carried out prior to the revocation.
HAYDUK reserves the right to modify this Privacy Policy whenever necessary to adapt it to regulatory or technological changes, or to improvements in its internal practices. Any modification will be published on the Website and, if the changes are substantial, users will be notified by email or by another appropriate means.
Likewise, HAYDUK guarantees access to previous versions of this Policy upon request by the personal data holder.
ANNEX 01
COMPANIES ACTING AS PROCESSORS OR SUB-PROCESSORS
