LEGAL

Privacy Policy

How we collect, use and protect your personal data at eBombo International.

Last updated: May 20, 2026

1. Data Controller

The data controller for your personal data is eBombo International, operated by BOMBO PERU SAC, Tax ID (RUC) 20602801200, located at Av. General Cordova 1145, 15074 Miraflores, Lima, Peru. For any inquiries related to the processing of your personal data, you may write to [email protected].

2. Data We Collect

We collect the following types of personal data: - Identification data: full name, email address, phone number. - Company data: company name, position, industry. - Browsing data: IP address, browser type, pages visited, time spent. - Communication data: messages sent through contact forms or email. - Cookie data: browsing preferences and site usage (see our Cookie Policy).

3. Purposes of Processing

We process your personal data for the following purposes: - Managing and responding to your information or event quotation requests. - Providing the contracted services. - Sending commercial communications and newsletters (with your prior consent). - Improving our services and user experience. - Complying with legal and tax obligations. - Preparing anonymous site usage statistics.

4. Legal Basis

The processing of your data is based on: - Contract performance: when data is necessary for providing the requested service. - Consent: for sending commercial communications and using non-essential cookies. - Legitimate interest: for improving our services and preventing fraud. - Legal obligation: for compliance with tax and regulatory obligations.

5. Data Recipients

Your personal data may be shared with: - Technology service providers (hosting, email marketing, analytics) acting as data processors. - Event providers and contracted services for the execution of the requested service. - Public authorities when there is a legal obligation. We do not sell or share your personal data with third parties for their own commercial purposes.

6. International Transfers

Since eBombo operates in Peru, Mexico, Spain and the United States, your data may be transferred internationally between our offices and service providers. For transfers from the European Union, we ensure adequate safeguards are in place in accordance with the GDPR, such as standard contractual clauses or adequacy decisions from the European Commission. For transfers from Peru or Mexico, we comply with the authorization and guarantee requirements demanded by local regulations.

7. Data Retention Period

We retain your personal data for the time necessary to fulfill the purposes for which it was collected: - Client data: during the contractual relationship and subsequent legal retention periods (generally between 4 and 10 years depending on jurisdiction). - Commercial contact data: until you revoke your consent or request deletion. - Browsing data: maximum 24 months from collection. After these periods, your data will be deleted or anonymized.

8. User Rights

You have the right to: - Access: know what personal data we hold about you. - Rectification: request correction of inaccurate or incomplete data. - Erasure: request deletion of your data when it is no longer necessary. - Objection: object to the processing of your data in certain circumstances. - Portability: receive your data in a structured, commonly used format. - Restriction: request limitation of processing in certain cases. - Withdraw consent: withdraw your consent at any time. To exercise these rights, write to [email protected] indicating your name and the right you wish to exercise. We will respond within a maximum of 30 days.

9. Applicable Regulations

This Privacy Policy is governed by the data protection regulations applicable in each jurisdiction: - Peru: Law No. 29733, Personal Data Protection Law, and its regulations (S.D. No. 003-2013-JUS). Authority: National Authority for Personal Data Protection. - Mexico: Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP). Authority: National Transparency Institute (INAI). - Spain/European Union: General Data Protection Regulation (GDPR) - Regulation (EU) 2016/679 and Organic Law 3/2018 (LOPDGDD). Authority: Spanish Data Protection Agency (AEPD). - United States: California Consumer Privacy Act (CCPA) and applicable state regulations.

10. Contact

For any inquiries about this Privacy Policy or the processing of your personal data: - Email: [email protected] - Website: ebombo.com - Offices: Peru, Mexico, Spain and the United States