Peru DPL 18: Right of information (privacy notice)

Before collection the data subject is informed, in detailed, simple, express and unequivocal terms, of the purpose of processing; who the recipients are or may be; the existence of the data bank where the data will be stored and the identity and address of its owner and, where applicable, of the processors; whether answers to a questionnaire are mandatory or optional, especially for sensitive data; the transfer of the data; the consequences of providing the data and of refusing; the retention period; and the possibility of exercising the rights the Law grants and the means to do so. For data collected online the obligations may be met by an easily accessible and identifiable privacy policy. If a processor is engaged after consent was given, the owner remains responsible and establishes a personalised mechanism to inform the data subject of the new processor; if data are transferred after consent through a merger, portfolio acquisition or similar, the new owner establishes an effective mechanism to inform the data subject.