Please carefully read the following Privacy Policy and Personal Data Processing Policies of the Costa Rican Tourism Board.

The use of our Website implies that you acknowledge having read and accepted our Privacy Policy and Personal Data Processing Policies presented here, as well as our Terms and Conditions.

Legal basis:

The Law on the Protection of Individuals regarding the Processing of their Personal Data (Law No. 8968) of Costa Rica and its Regulations (Executive Decree No. 37554-JP) establish the rights of personal data subjects regarding the processing of their data.

The Costa Rican Tourism Board fully complies with all the aforementioned regulations.

In compliance with the European Union privacy policies (GDPR) and those of other regions of the world, currently in force and in the future, the Costa Rican Tourism Board is committed to ensuring the highest level of compliance. However, the terms of use and privacy policies of this website are subject to the legislation of Costa Rica, and any legal dispute or disagreement may only be addressed within the territory of Costa Rica through judicial authorities and in accordance with national legislation.

Definitions:

Database: Any file, archive, record, or other structured set of private personal data subject to processing, whether automated or manual, on-site or in the cloud, under the control or direction of a data controller, regardless of the method of its creation, organization, or access.

Communication: Any information exchanged or transmitted between two or more users through a telecommunications service.

Consent of the personal data subject: Any expression of will, explicit, free, unequivocal, informed, and specific, granted in writing for a specific purpose, through which the data subject or their representative consents to the processing of their personal information.

Location data: Any data transmitted through a telecommunications network indicating the geographic position of a user’s terminal equipment.

Traffic data: Any data related to the carrying out of a communication through a telecommunications network or for billing purposes.

Processing of personal data: Operations, sets of operations, or technical procedures, whether automated or not, carried out using hardware, software, networks, services, applications, on-site or in the cloud, or any other information technology, that allow the selection, collection, recording, storage, processing, modification, extraction, transmission, blocking, destruction, and deletion of personal data and information related to communications made through telecommunications networks, as well as access and/or transfers of data resulting from communications, queries, interconnections, and transfers.

Collection and use of information:

The Privacy Policy and Personal Data Processing Policy of the Costa Rican Tourism Board applies to the collection and use of information you provide through our Website. This information will be used solely by the Costa Rican Tourism Board in fulfillment of its purposes.

The information will be used for the purpose for which it was requested. The Costa Rican Tourism Board respects your right to privacy and will not provide users’ personal information to third parties without their consent, unless required by applicable law.

Data subject to storage and processing:

The Costa Rican Tourism Board collects, among others, the following personal data when users fill out a contact form on the website or participate in newsletters, contests, or activities conducted on behalf of the Costa Rican Tourism Board on social media or through other providers, solely for the purpose of providing a service the user wishes to access: Name, phone number, email address, gender, country of residence, age, and data related to the requested information.

The personal data subject to storage, detailed above, will be used by the Costa Rican Tourism Board for all purposes relevant to its legally assigned functions and competencies.

The Costa Rican Tourism Board will collect personal data along with the informed consent of the data subject for its respective databases, solely for the purpose indicated in each request.

You may exercise your rights of access, rectification, cancellation, and objection regarding the processing of your personal data by contacting the Costa Rican Tourism Board through the details indicated in the Notifications section of this Privacy Policy and Personal Data Processing Policy.

Cookies:

We use tracking technology with "cookies." You may use your browser settings to disable cookies; if you do so, you may continue browsing our Website, but with some restrictions.

Authorized personnel:

In accordance with current legislation, only personnel authorized by the Costa Rican Tourism Board may access the data described above. In some cases, third-party service providers of the Costa Rican Tourism Board may use users’ personal data to provide certain services. In such cases, providers will adopt all necessary technical and administrative measures to prevent the use of confidential information for purposes other than service provision, its accidental or unlawful destruction, and/or accidental loss, and will be required to comply with this Privacy Policy and Personal Data Processing Policy, as well as with the security measures established by the Costa Rican Tourism Board to safeguard personal data stored in its databases.

Technical and administrative measures:

The Costa Rican Tourism Board has clearly defined physical and logical measures to ensure the security of the information contained in its databases, as well as the availability, confidentiality, and integrity of the information, and to ensure that it is not accessed by unauthorized third parties.

Since no system can guarantee complete security, efforts are made to keep the information provided or accessed by the user as secure as possible, including its physical security at the location of the server where the information is stored.

The Costa Rican Tourism Board states that it has information management plans in place in case systems are compromised or subject to breaches, in accordance with internal security measures.

Miscellaneous:

The validity of the Privacy Policy and Personal Data Processing Policy of the website visitcostarica.com, represented by the Costa Rican Tourism Board, ends when the user accesses links contained on this website that lead to external sites or services belonging to companies, events, or published news.

The validity of the information is verified at the time of publication, but its accuracy over time is not guaranteed, especially for data related to contacts and services offered by third parties. Therefore, users of visitcostarica.com are encouraged to verify all information through other means before accepting it as true.

Modifications:

The Costa Rican Tourism Board may modify this Privacy Policy and Personal Data Processing Policy at any time, without prior notice, becoming effective immediately and notifying personal data subjects through this means. If the data subject does not agree with the new conditions, they may revoke the informed consent granted.

Notifications:

The Costa Rican Tourism Board is committed to protecting the data you provide. If you have any questions, comments, or concerns about our Privacy Policy and Personal Data Processing Policy, please contact us by sending an email to: cst@ict.go.cr