Cookie Policy

Cookie Policy

Trip Around Costa Rica makes use of Tracking Tools. To learn more, Users may consult the Cookie Policy.

The Owner processes Personal Data related to the User if one of the following conditions exists:

  • The User has given consent for one or more specific purposes.
  • processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures;
  • processing is necessary to fulfill a legal obligation to which the Controller is subject;
  • the processing is necessary for the performance of a task of public interest or the exercise of public authority vested in the Controller;
  • processing is necessary for the pursuit of the legitimate interest of the Controller or third parties.

However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on law, required by a contract or necessary to conclude a contract.

Unless otherwise stated in this document, Personal Data are processed and kept for the time required by the purpose for which they were collected and may be kept for a longer period due to any legal obligations or based on the consent of Users.

Therefore:

  • Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the performance of that contract is completed.
  • Personal Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until that interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.

When processing is based on the User’s consent, the Data Controller may keep the Personal Data longer until that consent is revoked. In addition, the Data Controller may be required to retain Personal Data for a longer period to fulfill a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, upon the expiration of this period, the right of access, deletion, rectification and the right to Data portability can no longer be exercised.

Rights of the User based on the General Data Protection Regulation (GDPR)

Users may exercise certain rights with respect to the Data processed by the Data Controller.

In particular, to the extent provided by law, the User has the right to:

  • Revoke consent at any time. The User may revoke the previously expressed consent to the processing of his or her Personal Data.
  • Object to the processing of their Data. Users may object to the processing of their Data when it is done under a legal basis other than consent.
  • access their Data. The User has the right to obtain information about the Data processed by the Data Controller, certain aspects of the processing, and to receive a copy of the processed Data.
  • Verify and request rectification. The User can check the accuracy of their Data and request that it be updated or corrected.
  • Obtain restriction of processing. The User may request the restriction of the processing of his or her Data. In this case, the Data Controller will not process the Data for any purpose other than its preservation.
  • Obtain the deletion or removal of their Personal Data. The User may request the deletion of his or her Data by the Data Controller.
  • Receive their Data or have it transferred to another owner. You have the right to receive your Data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transferred unimpeded to another data controller.
  • Propose complaint. The User may file a complaint with the relevant data protection supervisory authority or take legal action.

Users have the right to obtain information regarding the legal basis for the transfer of Data abroad including to any international organization governed by international law or formed by two or more countries, such as the UN, as well as regarding the security measures taken by the Data Controller to protect their Data.

When Personal Data are processed in the public interest, in the exercise of public powers vested in the Data Controller or in pursuit of a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.

Users are reminded that, should their Data be processed for direct marketing purposes, they may object to the processing at any time, free of charge and without providing any reasons. If Users object to processing for direct marketing purposes, Personal Data are no longer processed for such purposes. To find out whether the Data Controller processes Data for direct marketing purposes, Users may refer to the respective sections of this document.

In order to exercise their rights, Users may address a request to the contact details of the Holder indicated in this document. The request is free of charge and the Holder will respond as soon as possible, in any case within one month, providing the User with all the information required by law. Any rectification, deletion or restriction of processing will be communicated by the Controller to each of the recipients, if any, to whom the Personal Data has been transmitted, unless this proves impossible or involves disproportionate effort. The Owner notifies the User of these recipients if he or she so requests.

More information for users in Switzerland

This section applies to Users in Switzerland and, for such Users, supersedes any other possibly divergent or conflicting information contained in the Privacy Policy.

Further details regarding the categories of Data processed, the purposes of processing, the categories of recipients of Personal Data, if any, the retention period, and other information about Personal Data can be found in the section entitled “Detailed Information on the Processing of Personal Data” within this document.

Users’ rights under the Federal Data Protection Act

Users may exercise certain rights regarding their data within the limits of the law, including the following:

  • Right of access to Personal Data;
  • The right to object to the processing of their Personal Data (which also allows Users to request the restriction of the processing of Personal Data, the deletion or destruction of Personal Data, the prohibition of disclosure of Personal Data to third parties);
  • Right to receive their Personal Data and transfer it to another data controller (data portability);
  • Right to request rectification of erroneous Personal Data.

How to exercise these rights

Any requests to exercise the User’s rights can be addressed to the Owner through the contact details provided in this document. Such requests are free of charge and the Holder will respond as quickly as possible, providing Users with the information required by law.

More information for Users in Brazil

This section of the document supplements and complements the information contained in the rest of the privacy policy and is provided by the entity that operates Trip Around Costa Rica and, where applicable, its parent company and its subsidiaries and affiliates (for the purposes of this section referred to collectively as “we,” “our,” or “us”).
This section applies to all Users in Brazil (such Users are referred to hereafter simply as “you,” “your,” “you,” or “your”), pursuant to the Lei Geral de Proteção de Dados and, for such Users, prevails over any other possibly divergent or conflicting information contained in this privacy policy.
The term “personal information” as defined by the LGPD is used in this part of the document.

Legal basis under which we process your personal information

We process your personal information only where there is a legal basis for such processing. The legal bases are as follows:

  • Your consent to the processing activities in question;
  • The fulfillment of legal obligations that we are required to meet;
  • The execution of rules dictated by laws or regulations or by contracts, agreements or other similar legal instruments;
  • studies conducted by research organizations, preferably conducted on anonymized personal information;
  • The performance of a contract and related pre-contractual obligations, if you are a party to that contract;
  • The exercise of our rights in court, administrative proceedings or arbitration;
  • The defense or physical safety of yourself or a third party;
  • health protection-in the context of procedures implemented by health care entities or professionals;
  • Our legitimate interest, provided that your fundamental rights and freedoms do not override such interests; and
  • credit protection.

 

To learn more about the legal basis, you can contact us at any time using the contact information provided in this document.

Categories of personal information processed

To find out what categories of personal information are processed, you can refer to the “Details of Personal Data Processing” section in this document.

Why we process your personal information

To learn why we process your personal information, please refer to the “Details of the Processing of Personal Data” and “Purposes of the Processing of Data Collected” sections found in this document.

Your privacy rights in Brazil, how to submit a request and how it will be handled by us

Your rights related to privacy in Brazil

You have the right to:

  • Obtain confirmation of the existence of processing activities regarding your personal information;
  • Access your personal information;
  • Obtain rectification of your incomplete, inaccurate, or outdated personal information;
  • obtain anonymization, blocking or deletion of unnecessary or excessive personal information, or information that is processed contrary to the provisions of the LGPD;
  • Obtain information regarding the possibility of giving or withholding your consent and its consequences;
  • Get information about the third parties with whom we share your personal information;
  • Obtain, upon your explicit request, portability of your personal information (except anonymized information) to other product or service providers, provided that our trade and industry secrets are safeguarded;
  • Obtain the deletion of personal information processed where the processing was carried out on the basis of your consent, unless one or more of the exceptions in Article 16 LGPD apply;
  • Revoke your consent at any time;
  • File a complaint regarding your personal information with the NPA (National Data Protection Authority) or a consumer protection agency;
  • Object to processing activities in cases where such processing is not carried out in accordance with the provisions of the law;
  • Require clear and adequate information regarding the criteria and procedures used in automated decision making; and
  • Request review of decisions that harm your interests, made solely on the basis of automated decision-making processes of your personal information. These include decisions to outline your personal, professional, consumer or creditor profile, or other facets of your personality.

 

You will never be discriminated against, or suffer in any way any treatment that is unfavorable to you, as a result of exercising your rights.

How to submit a request

You can submit an explicit request to exercise your rights free of charge, at any time, using the contact information in this document or through your legal representative.

How and how quickly we will handle your request

We will make every effort to respond to your request as soon as possible.
In any case, if it is impossible for us to do so, we will be sure to inform you of the factual or legal reasons why we cannot immediately comply or follow up on your request. In the event that your personal information is not processed by us, if we are able to do so, we will direct you to the natural or legal person to whom your requests should be addressed.

Should you decide to submit a request for access or a request for confirmation of the existence of the processing of personal information, please be sure to specify whether you prefer to receive your personal information in electronic or paper format.
You will also need to let us know if you would like an immediate response, in which case you will receive a simplified response, or if you require a full disclosure.
In the latter case, we will respond within 15 days from the time of your request, providing you with all information regarding the origin of your personal information, confirmation or non-confirmation of the existence of personal information about you, all criteria used for processing and the purposes of such processing, while safeguarding our trade and industry secrets.

In the event that you decide to submit a request for rectification, deletion, anonymization or blocking of personal information, we will ensure that we immediately inform the other parties with whom we have shared your personal information of your request so that they can in turn comply with your request – except in cases where such a communication is impossible or unduly burdensome for us.

Transfer of personal information outside Brazil in cases permitted by law

We may transfer your personal information outside the Brazilian territory in the following cases:

  • when the transfer is necessary for international legal cooperation between intelligence services, investigative and criminal procedure bodies, as provided by the instruments made available by international law;
  • when the transfer is necessary to defend your life or physical safety or that of a third party;
  • When the transfer is authorized by the ANPD;
  • when the transfer results from an obligation undertaken in the context of an international cooperation agreement;
  • when the transfer is necessary for the exercise of public policy or the performance of a public service;
  • when the transfer is necessary for the fulfillment of a legal obligation, the performance of a contract and related pre-contractual fulfillments, or the normal exercise of rights in guidiatorial, administrative, or arbitration proceedings.

 

Further information for Users in the United States

This part of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the business running Trip Around Costa Rica and, if the case may be, its parents, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).

The information contained in this section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are residents in the following states: California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana.

For such Users, this information supersedes any other possibly divergent or conflicting provisions contained in the privacy policy.

This part of the document uses the term Personal Information.

Notice at collection

The following Notice at collection provides you with timely notice about the categories of Personal Information collected or disclosed in the past 12 months so that you can exercise meaningful control over our use of that Information.

While such categorization of Personal Information is mainly based on California privacy laws, it can also be helpful for anyone who is not a California resident to get a general idea of what types of Personal Information are collected.

  • Identifiers

    Personal Information collected or disclosed: First name, Last name, Contact information, Email, Phone number, Device information, Data disclosed while using the service, Zip code, City, Country, Date of birth, Geographic location, Language, Tracking tools, Billing address, Order id, Shipping address

    Purposes:

    • Creation and management of Trip Around Costa Rica
    • Contact User
    • Managing contacts and sending messages
    • Payment management

    Retention period: for the time necessary to fulfill the purpose

    Sold or Shared ℹ️: Yes

    Targeted Advertising: ℹ️: Yes

    Third-parties: Trip Around Costa Rica, Intuit Inc., Paypal

    Service providers or contractors: Trip Around Costa Rica

  • Internet or other electronic network activity information

    Personal Information collected or disclosed: First name, Last name, Contact information, Email, Phone number, Device information, Data disclosed while using the service, Zip code, City, Country, Date of birth, Geographic location, Language, Tracking tools, Usage data, Number of users, Session statistics, Billing address, Order id, Shipping address

    Purposes:

    • Creation and management of Trip Around Costa Rica
    • Statistics
    • Advertisement
    • Commercial affiliation
    • Viewing content from external platforms
    • Payment management

    Retention period: for the time necessary to fulfill the purpose

    Sold or Shared ℹ️: Yes

    Targeted Advertising: ℹ️: Yes

    Third-parties: Trip Around Costa Rica, Google Ireland Limited, Booking.com B.V., TripAdvisor LLC, Paypal

  • Geolocation data

    Personal Information collected or disclosed: First name, Last name, Contact information, Email, Phone number, Device information, Data disclosed while using the service, Zip code, City, Country, Date of birth, Geographic location, Language

    Purposes:

    • Creation and management of Trip Around Costa Rica

    Retention period: for the time necessary to fulfill the purpose

    Sold or Shared ℹ️: Yes

    Targeted Advertising: ℹ️: Yes

    Third-parties: Trip Around Costa Rica

  • Inferences drawn from other personal information

    Personal Information collected or disclosed: First name, Last name, Contact information, Email, Phone number, Device information, Data disclosed while using the service, Zip code, City, Country, Date of birth, Geographic location, Language

    Purposes:

    • Creation and management of Trip Around Costa Rica

    Retention period: for the time necessary to fulfill the purpose

    Sold or Shared ℹ️: Yes

    Targeted Advertising: ℹ️: Yes

    Third-parties: Trip Around Costa Rica

ℹ️ You can read the definitions of these concepts inside the “Definitions and legal references section” of the privacy policy.

To know more about your rights in particular to opt out of certain processing activities you can refer to the “Your privacy rights under US state laws” section of our privacy policy.

For more details on the collection of Personal Information, please read the section “Detailed information on the processing of Personal Data” of our privacy policy.

We won’t process your Information for unexpected purposes, or for purposes that are not reasonably necessary to and compatible with the purposes originally disclosed, without your consent.

What are the sources of the Personal Information we collect?

We collect the above-mentioned categories of Personal Information, either directly or indirectly, from you when you use Trip Around Costa Rica.

For example, you directly provide your Personal Information when you submit requests via any forms on Trip Around Costa Rica. You also provide Personal Information indirectly when you navigate Trip Around Costa Rica, as Personal Information about you is automatically observed and collected.

Finally, we may collect your Personal Information from third parties that work with us in connection with the Service or with the functioning of Trip Around Costa Rica and features thereof.

Your privacy rights under U.S. state laws

You may exercise certain rights regarding your Personal Information. In particular, to the extent permitted by applicable law, you have:

  • The right to access Personal Information: the right to know. You have the right to request that we confirm whether or not we are processing your Personal Information. You also have the right to access such Personal Information;
  • the right to correct inaccurate Personal Information. You have the right to request that we correct any inaccurate Personal Information we maintain about you;
  • the right to request the deletion of your Personal Information. You have the right to request that we delete any of your Personal Information;
  • the right to obtain a copy of your Personal Information. We will provide your Personal Information in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible;
  • the right to opt out from the Sale of your Personal Information; We will not discriminate against you for exercising your privacy rights.
  • the right to non-discrimination.

Additional rights for Users residing in California

In addition to the rights listed above common to all Users in the United States, as a User residing in California, you have

  • The right to opt out of the Sharing of your Personal Information for cross-context behavioral advertising;
  • The right to request to limit our use or disclosure of your Sensitive Personal Information to only that which is necessary to perform the services or provide the goods, as is reasonably expected by an average consumer. Please note that certain exceptions outlined in the law may apply, such as, when the collection and processing of Sensitive Personal Information is necessary to verify or maintain the quality or safety of our service.

Additional rights for Users residing in Virginia, Colorado, Connecticut, Texas, Oregon and Montana

In addition to the rights listed above common to all Users in the United States, as a User residing in Virginia, Colorado, Connecticut, Texas and Oregon, you have

  • The right to opt out of the processing of your personal information for Targeted Advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
  • The right to freely give, deny or withdraw your consent for the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer.

Additional rights for users residing in Utah

In addition to the rights listed above common to all Users in the United States, as a User residing in Utah, you have

  • The right to opt out of the processing of your Personal Information for Targeted Advertising;
  • The right to opt out of the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer.

How to exercise your privacy rights under US state laws

To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.

For us to respond to your request, we must know who you are. We will not respond to any request if we are unable to verify your identity and therefore confirm the Personal Information in our possession relates to you. You are not required to create an account with us to submit your request. We will use any Personal Information collected from you in connection with the verification of your request solely for verification and shall not further disclose the Personal Information, retain it longer than necessary for purposes of verification, or use it for unrelated purposes.

If you are an adult, you can make a request on behalf of a child under your parental authority.

How to exercise your rights to opt out

In addition to what is stated above, to exercise your right to opt-out of Sale or Sharing and Targeted Advertising you can also use the privacy choices link provided on Trip Around Costa Rica.

If you want to submit requests to opt out of Sale or Sharing and Targeted Advertising activities via a user-enabled global privacy control, such as for example the Global Privacy Control (“GPC“), you are free to do so and we will abide by such request in a frictionless manner.

How and when we are expected to handle your request

We will respond to your request without undue delay, but in all cases within the timeframe required by applicable law. Should we need more time, we will explain to you the reasons why, and how much more time we need.

Should we deny your request, we will explain to you the reasons behind our denial (where envisaged by applicable law you may then contact the relevant authority to submit a complaint).

We do not charge a fee to process or respond to your request unless such request is manifestly unfounded or excessive and in all other cases where it is permitted by the applicable law. In such cases, we may charge a reasonable fee or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind them.

More information about the treatment

The User’s Personal Data may be used by the Owner in legal proceedings or in the preparatory stages to its possible establishment for the defense against abuse in the use of Trip Around Costa Rica or related Services by the User.
The User declares that he/she is aware that the Data Controller may be obliged to disclose the Data by order of public authorities.

Upon the User’s request, in addition to the information contained in this privacy policy, Trip Around Costa Rica may provide the User with additional and contextual disclosures regarding specific Services, or the collection and processing of Personal Data.

For operation and maintenance purposes, Trip Around Costa Rica and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User IP address.

Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on Trip Around Costa Rica as well as, when technically and legally feasible, by sending a notification to Users through one of the contact details it has. Therefore, please consult this page frequently, referring to the date of last modification indicated at the bottom.

If the changes affect processing whose legal basis is consent, the Owner will re-collect the User’s consent, if necessary.

Personal Data (or Data) / Personal Information (or Information)

Personal data is any information that, directly or indirectly, including in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Sensitive Personal Information

Sensitive Personal Information is defined as all Personal Information that is not publicly available and that discloses information considered sensitive under applicable privacy laws.

Usage Data

This is the information automatically collected through Trip Around Costa Rica (including by third party applications integrated into Trip Around Costa Rica), including: the IP addresses or domain names of the computers used by the User who connects with Trip Around Costa Rica, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (e.g. the length of time spent on each page) and the details of the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the User’s operating system and computer environment.

User

The individual using Trip Around Costa Rica who, except where otherwise specified, coincides with the Data Subject.

Interested

The natural person to whom the Personal Data refers.

Data Processor (or Manager)

The natural person, legal entity, public administration and any other entity that processes personal data on behalf of the Controller, as set forth in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, service or other body that, individually or jointly with others, determines the purposes and means of the processing of personal data and the means adopted, including the security measures relating to the operation and use of Trip Around Costa Rica. The Data Controller, unless otherwise specified, is the owner of Trip Around Costa Rica.

Trip Around Costa Rica (or this Application)

The hardware or software tool by which Users’ Personal Data are collected and processed.

Service

The Service provided by Trip Around Costa Rica as defined in the relevant terms (if any) on this site/application.

Sale

Sale means any exchange of Personal Information by the Owner to a third party in exchange for money or otherwise for consideration, as defined by applicable U.S. state privacy law. Please note that the exchange of Personal Information with a service provider pursuant to a written contract that meets the requirements established by applicable law does not constitute a Sale of your Personal Information.

Sharing

Sharing means any sharing, rental, release, disclosure, dissemination, making available, transfer, or other communication verbally, in writing, or by electronic or other means, of a consumer’s Personal Information by a business to a third party for cross-context behavioral advertising, whether in exchange for money or otherwise for consideration, including transactions between a business and a third party related to cross-context behavioral advertising in favor of a business where no money is exchanged, as defined by California privacy laws. Please note that the exchange of Personal Information with a service provider pursuant to a written contract that meets the requirements set forth in California privacy laws does not constitute sharing of your Personal Information.

Targeted advertising

Targeted Advertising means the display of advertisements to a consumer for which the advertisement is selected based on Personal Information obtained from that consumer’s activities over time and on unaffiliated websites or online applications to predict that consumer’s preferences or interests, as defined by applicable U.S. state privacy law.

European Union (or EU)

Unless otherwise specified, any reference to the European Union in this document is understood to extend to all current member states of the European Union and the European Economic Area.

Cookie

Cookies are Tracking Tools that consist of small portions of data stored within the User’s browser.

Tracking Tool

Tracking Tool means any technology – e.g., cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting – that allows tracking Users, for example, by collecting or storing information on the User’s device.


Legal references

This privacy policy is written on the basis of multiple legislative orders.

Unless otherwise specified, this privacy policy covers Trip Around Costa Rica only.