EN
Privacy policy
1. Purpose of the policy
This privacy policy explains how AGROFOREST MONITORING AGENCY S.A.C. collects, uses, retains and protects personal data processed when the website www.agroforest.agency is used.
It covers, in particular, information provided through the Contact and Evaluate an operation forms and any technical data needed for the website’s operation and security.
It also aims to inform data subjects of their rights and how to exercise them.
2. Data controller
The controller of personal data collected through the website is:
AGROFOREST MONITORING AGENCY S.A.C.
A closed joint-stock company incorporated under Peruvian law — Sociedad Anónima Cerrada
RUC: 20613019970
Tax domicile:
Jr. Tacna n.º 1265, Res. Oyague
Magdalena del Mar, Lima, Peru
Email address: contact@agroforest.agency
3. Personal data collected
When you use the Contact and Evaluate an operation forms, AGROFOREST MONITORING AGENCY S.A.C. may collect the following categories of data:
For an assessment enquiry, the data also includes the information entered about the operation, importer, exporter, timber origin, products, quantities, intended shipping date and selected options. No files are accepted at launch. Enquiries are recorded in Gravity Forms on the website’s hosting; an internal notification containing the reference is sent to contact@agroforest.agency. No automatic acknowledgement is emailed to the enquirer.
– your company name;
– your name;
– your business email address;
– your telephone number, if you choose to provide it;
– your professional profile or job title;
– the country where your company is established;
– the subject of your enquiry;
– information contained in your message.
The website may also process certain technical data needed for its operation and security, such as IP address, connection date and time, browser type, operating system and information on any technical errors.
Users are asked not to submit sensitive data or personal information unnecessary for handling their enquiry through the free-text message field.
4. Processing purposes and legal bases
Data submitted through the Contact and Evaluate an operation forms is processed for the following purposes:
– receiving, analysing and responding to enquiries addressed to AGROFOREST MONITORING AGENCY S.A.C.;
– identifying the company and person making the enquiry;
– understanding the need expressed and directing the enquiry to the appropriate department or person;
– preparing, at the user’s request, contact, an assessment, commercial proposal, quotation or possible contractual relationship;
– following up professional exchanges;
– ensuring the website’s security, integrity and proper operation.
Depending on the nature of the enquiry, this processing is based on:
– taking pre-contractual steps at the data subject’s request when they request information on a service, assessment, commercial proposal or quotation;
– the legitimate interest of AGROFOREST MONITORING AGENCY S.A.C. in receiving, managing and responding to other professional enquiries addressed to it;
– the publisher’s legitimate interest in ensuring the website’s security and technical operation.
Data submitted through the form is not used to make a decision producing legal effects for the data subject based solely on automated processing.
5. Mandatory and optional data
Fields marked as mandatory must be completed so that AGROFOREST MONITORING AGENCY S.A.C. can identify the enquiry, understand its subject and respond.
Without this information, the enquiry may not be submitted or processed correctly.
The telephone number is optional. If provided, it may be used to contact the user about their enquiry.
Users are asked to provide only information strictly necessary for handling their enquiry.
6. Data recipients
Data collected is intended for authorised personnel within AGROFOREST MONITORING AGENCY S.A.C. who need access to it to handle the enquiry.
It may also be made accessible, strictly within the limits of their tasks, to technical providers involved in website operation, hosting, maintenance, security and email delivery.
These providers do not use the data for their own commercial purposes and must process it in accordance with the instructions applicable to them.
Data is not sold, rented or transferred to third parties for commercial purposes.
It may, however, be disclosed to an administrative, judicial or regulatory authority where required by a legal obligation or legally valid request.
7. Hosting and technical providers
Website operation requires technical providers, particularly for hosting, maintenance, security, backups and email delivery.
The website is hosted by:
HOSTINGER INTERNATIONAL LIMITED
61 Lordou Vironos Street
6023 Larnaca
Cyprus
These providers may access certain personal data only as necessary to perform their services and in accordance with applicable contractual and legal obligations.
AGROFOREST MONITORING AGENCY S.A.C. seeks to limit such access to data necessary for the website’s operation, security and administration.
8. Access to data from Peru
As AGROFOREST MONITORING AGENCY S.A.C. is established in Peru, data provided through the Contact and Evaluate an operation forms may be accessed and processed from Peru by authorised personnel responsible for responding to enquiries.
Peru is not currently covered by a European Commission adequacy decision on personal data protection.
Where a data flow constitutes an international transfer subject to Chapter V of the General Data Protection Regulation, AGROFOREST MONITORING AGENCY S.A.C. ensures that it is governed by a mechanism recognised by applicable regulations, including appropriate contractual safeguards where necessary.
Data subjects may request further information on the conditions under which their data is processed or made accessible from a country outside the European Economic Area by emailing contact@agroforest.agency.
9. Retention periods
Data provided through the Contact and Evaluate an operation forms is retained for the time necessary to analyse, handle and follow up the enquiry.
Enquiries with no further follow-up are retained for 12 months after the last exchange, or after receipt if no exchange takes place. Prospects receiving commercial follow-up are retained for up to three years after the last contact initiated by the prospect. Client and contractual records are subject to separate retention rules.
These rules also apply to pre-contractual assessment enquiries and prospects originating from the Evaluate an operation form. Retention deadlines are monitored according to the record’s category; deletion or anonymisation is subject to review, without claiming an automatic purge.
Where a contractual relationship begins, data needed to manage it is retained for its duration and may then be archived for the periods necessary to meet legal, accounting and tax obligations or to establish, exercise or defend legal claims.
Technical data and security logs are retained for a limited period proportionate to their purpose, particularly to detect errors, prevent unauthorised access and ensure website security.
At the end of the applicable periods, data is deleted, anonymised or archived with restricted access where retention remains necessary to meet a legal obligation.
10. Data subjects' rights
Subject to the conditions set by applicable regulations, data subjects may exercise the following rights:
– access to personal data concerning them and a copy of it;
– rectification of inaccurate or incomplete data;
– erasure where the legal conditions are met;
– restriction of processing;
– objection, on grounds relating to their particular situation, to processing based on the legitimate interest of AGROFOREST MONITORING AGENCY S.A.C.;
– data portability where applicable;
– instructions concerning their data after death where provided for by applicable national law.
These rights may be limited where retaining or processing the data remains necessary to comply with a legal obligation, perform a contract or establish, exercise or defend legal claims.
11. Exercising rights
To exercise their rights or ask a question about personal data processing, data subjects may send a request to:
The request must sufficiently identify its author and specify the right to be exercised and the data or processing concerned.
Where there is reasonable doubt about the requester’s identity, additional information strictly necessary to verify it may be requested.
AGROFOREST MONITORING AGENCY S.A.C. responds without undue delay and, in principle, within one month of receipt. This period may be extended by two months where justified by the complexity or number of requests. The data subject is then informed of the extension and reasons within the initial one-month period.
12. Data security and confidentiality
AGROFOREST MONITORING AGENCY S.A.C. implements technical and organisational measures suited to the nature of the data processed and the risks that may affect data subjects’ rights and freedoms.
These measures aim, in particular, to prevent unauthorised access, disclosure, alteration, loss or accidental or unlawful destruction of personal data.
Access is limited to personnel and providers who need the data to perform their tasks. Access to the website, email and administration tools is protected by authentication mechanisms and appropriate security measures.
Despite the precautions taken, no transmission or storage of data over the internet can be guaranteed entirely free of risk.
13. Cookies and other trackers
The website may use cookies or other trackers needed for its operation, security, user preference management or visitor statistics.
Trackers strictly necessary for website operation or for a service expressly requested by the user may be placed without prior consent.
Non-essential cookies and trackers are placed only after the user’s consent has been obtained, where such consent is required.
Users must be able to accept or refuse these trackers with equal ease and change or withdraw consent at any time.
Detailed information on cookies actually used, their purposes, providers and retention periods will be accessible through the website’s cookie management mechanism.
14. Complaint to a supervisory authority
If data subjects consider that their personal data is processed in breach of applicable regulations, they may lodge a complaint with the competent supervisory authority.
In the European Union, a complaint may in particular be lodged with the supervisory authority of the Member State of the data subject’s habitual residence or place of work, or where the alleged infringement occurred.
For people living or working in France, the competent authority is, in particular:
Commission nationale de l’informatique et des libertés — CNIL
3 place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France
A complaint may be lodged on the CNIL’s official website.
Lodging a complaint does not prevent data subjects from pursuing other administrative or judicial remedies.
15. Changes to the privacy policy
AGROFOREST MONITORING AGENCY S.A.C. may amend this privacy policy to reflect changes in the website, its services, data processing, technical providers or applicable regulations.
The version published on the website is the version applicable on the date it is consulted.
Where a significant change affects how personal data is used, appropriate information may be provided to data subjects.
16. Updates
Last updated: July 2026