Politique de confidentialité

---

Privacy Policy — Compania de Conservacion Amazonica S.A.C. (CCA)

Effective date: December 2, 2025
Website: www.conservation.pe
Data controller: Compania de Conservacion Amazonica S.A.C. (CCA) — a joint venture between RESTORE and FRONTERA. 

Contact e-mail: info@fronterra.eco
Hosting provider: GoDaddy (website hosting and basic infrastructure services)

1. Introduction

Compania de Conservacion Amazonica S.A.C. (“CCA,” “we,” “our,” or “us”) respects the privacy of visitors to our website. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how we protect it, and the rights you have under applicable Peruvian law (for example, Law No. 29733 and its regulations), as well as best international practices.

2. Scope

This Policy applies to personal data collected through:

• www.conservation.pe;
• contact and subscription forms available on the site;
• emails and other direct communications related to our activities;
• events, surveys or activities organized or co-organized by CCA in connection with our projects.

3. Information We Collect

We may collect and process the following categories of personal data:

Contact and identification data: name, surname, email address, telephone number, postal address, organization and job title.

Communications data: content of messages submitted through the website, contact forms, or email.
Technical and usage data: IP address, browser type and version, operating system, pages visited, time on the site, referrer/exit pages and cookie data.
Participation data: information voluntarily provided when registering for events, surveys, FPIC processes, community consultations or other project activities.
Sensitive data: generally we do not request sensitive data. If strictly necessary (for example, ethnic or community identity data as part of FPIC processes), we will obtain explicit consent and apply additional safeguards.

4. Purposes of Processing

We process personal data for the following purposes:

1. Responding to inquiries and communications.
2. Managing relationships and participation (e.g., event registrations, FPIC and      engagement with communities and partners).
3. Operating and improving the website (including analytics and cookies).
4. Legal and contractual compliance related to the project and partner      obligations.
5. Project communications and reporting, where we will send newsletters, reports      or updates only with prior consent.
6. Operational sharing with service providers who support the      website and project activities.

5. Legal Basis and Consent

Where required by law, we will obtain your consent for specific processing activities (for example, newsletters and non-essential cookies). We also process personal data where necessary for contractual performance, legitimate interests (for example, site security and protection from abuse), or to comply with legal obligations.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies for:

• essential site functionality;
• analytics and performance monitoring;
• remembering user preferences.

On your first visit we display information about cookies and, where applicable, request consent for non-essential cookies. You can manage or reject cookies through your browser settings.

7. Sharing and Third Parties

We may share personal data with:

• Service providers (e.g., hosting and infrastructure      services provided by GoDaddy, email platforms, analytics providers);
• Project partners (Fronterra, RESTORE, ECOM, reputable investors and environmental commodities buyers) when necessary for joint project operations or community activities, under confidentiality and data protection arrangements;
• Authorities, when required by law.

Where personal data is transferred internationally, we will adopt appropriate contractual and technical safeguards to ensure an adequate level of protection.

8. Security

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration or improper disclosure. While we strive to protect data, no security system is entirely infallible. In the event of a significant data breach, we will take appropriate legal and operational steps, including notifying affected individuals and authorities when required by law.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, consistent with legal and contractual obligations. When data is no longer necessary, it will be securely deleted or anonymized, unless law requires otherwise.

10. Data Subject Rights

Under applicable Peruvian law, you have rights including:

• Access to your personal data;
• Rectification of inaccurate or incomplete data;
• Erasure (deletion) where applicable;
• Opposition to certain processing;
• Restriction of processing;
• Portability, where applicable.

To exercise these rights, contact us at info@fronterra.eco with identification and details of your request. We will respond in accordance with legal timeframes.

11. Children’s Data

We do not knowingly collect personal data from minors for commercial purposes. If we discover personal data of minors collected without appropriate consent, we will take steps to remove such data.

12. Links to Third-Party Sites

Our website may contain links to third-party websites. This Policy does not apply to those sites. We recommend reviewing third parties’ privacy policies before providing personal information.

13. Changes to this Policy

We may update this Policy to reflect changes in our practices or legal requirements. Updated versions will be posted at www.conservation.pe with an updated effective date. Where changes are significant, we will highlight them or provide additional notice.

14. Contact and Supervisory Authority

Contact: info@fronterra.eco
Controller: Compania de Conservacion Amazonica S.A.C.
Supervisory authority (Peru): Autoridad Nacional de Protección de Datos Personales - https://www.gob.pe/anpd (or the competent authority in force).

If you believe your rights have not been respected, you may lodge a complaint with the competent data protection authority.