Privacy Statement

This is the privacy statement of Private Company with Ordinary Structure The Coco Beach Resort. The Coco Beach Resort is located at Manaca in Puerto Armuelles. This document explains how The Coco Beach Resort handles the processing of your personal data. In processing your personal data, The Coco Beach Resort takes the utmost care.

Acquisition of personal data:

If you use the services of The Coco Beach Resort, you yourself provide some personal data to The Coco Beach Resort, or personal data is obtained from you as part of the agreement. Personal data means any information relating to an identified or identifiable natural person.

Categories of personal data

The Coco Beach Resort processes the following categories of personal data:

• Contact and name and address details, including location details, phone number, email address;
• Company data, including VAT number and Chamber of Commerce number;
• Different delivery address;
• Financial data;
• Account data, which also includes your password and username;
• Other personal data provided by you yourself.

Purpose of Processing

The purpose of the personal data processed by The Coco Beach Resort is to:

• contacting you in order to inform you about the services you have purchased and their implementation;
• carry out its services;
• improve its services;
• making payments;
• comply with legal obligations;
• make marketing and communication statements, including improving the website by analyzing visitor behavior on the website;
• send newsletters;
• exchange data with third parties for the purpose of providing services, to the extent necessary.

Basis for processing

The processing of personal data is only possible on the basis of the following bases: (i) legal obligation, (ii) execution of the agreement, (iii) (explicit) consent obtained from data subjects, and (iv) legitimate interest. Personal data is processed in the provision of The Coco Beach Resort services. The Coco Beach Resort only processes data which The Coco Beach Resort considers necessary for (the improvement of) the service and treats carefully the (personal) data which it has collected about you and your use of the services. The basis for processing this information is the agreement you have entered into with The Coco Beach Resort. Personal data about you may also be processed by visiting The Coco Beach Resort website if you have given your consent.

Necessity of processing

The processing of your personal data is necessary to perform the services. The services provided by The Coco Beach Resort cannot be fully performed without the processing of your personal data. If specific purposes relating to personal data require your explicit consent, you must give your consent separately.

Automated decision-making

If there is any automated decision-making, this decision-making is performed by computer systems and/or computer programs without the intervention of human action. The data subject is himself or herself responsible for the data he or she provides and which are used at the time of automated decision-making. If the data prove to be incorrect or incomplete, the damage resulting from this will be at the expense and risk of the person concerned. This also includes the non-, untimely or incorrect execution of the agreement.

Retention period

The personal data processed by The Coco Beach Resort will be kept in accordance with the relevant laws and regulations. If a longer retention period is required by laws or regulations, the personal data will be kept longer in accordance with these requirements. All personal data (obtained) will not be kept longer than strictly necessary.

Third party processing

The Coco Beach Resort only shares personal data with third parties if strictly necessary for the execution of an agreement and to comply with relevant laws and regulations. No personal data is sold. The Coco Beach Resort may be under a legal obligation to share personal data with third parties. If personal data is shared with third parties, processing agreements are concluded for this purpose. The third parties with whom personal data is shared are:

• The engaged delivery service(s), for the purpose of executing the agreement. The categories of personal data processed are contact and name and address details.
• The Payment Provider, for the purpose of execution of an agreement. The categories of personal data processed are financial data.
• The Bookkeeper, for the purpose of executing an agreement. The categories of personal data processed are contact and NAW data and financial data.
• Software suppliers, for the purpose of execution of agreement. The categories of personal data processed are contact and NAW data.
• Website administrator, for the purpose of execution of the agreement. The categories of personal data processed are contact and name and address data.
• Engaged third parties, for the purpose of executing the agreement. The categories of personal data processed are contact and name and address data.

Security of Personal Data

The Coco Beach Resort takes the protection of your personal data seriously and in this regard, taking into account the state of the art, implementation costs, as well as the nature, scope, context and purposes of processing and the risks to the rights and freedoms of individuals, varying in terms of probability and severity, takes appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

Younger than 16?

If you are a minor, i.e. under 16 years of age, you may only consent to the processing of your personal data with the consent of one of your parents or legal guardian. It is then important that your parent(s) or guardian reads this statement. They can also exercise the rights you have in relation to the personal data you leave with us, such as the right to oppose the (further) processing of your personal data or the right to access and correct your data.

Rights of data subjects

As a data subject, you have the following rights:

• Right of inspection;
  As a data subject, you have the right to obtain clarification as to whether or not your personal data are being processed and, if so, to obtain access in relation to the processing thereof.
• Right to rectification;
  You have the right to obtain rectification and completion of inaccurate data.
• Right to data erasure;
  Without unreasonable delay, a data subject must obtain erasure of personal data concerning him.
• Right to restriction of processing;
  As a data subject, you have the right to restrict the processing of your personal data. To do so, please contact The Coco Beach Resort.
• Right to data portability;
  A data subject has the right to obtain the personal data relating to him that he has provided to The Coco Beach Resort, in a structured, common and machine-readable form in order to transfer this personal data to a third party if necessary. A data subject may also instruct The Coco Beach Resort to transfer such data directly to a third party.
• Right to object;
  The data subject shall have the right to object, at any time, on grounds relating to their particular situation, to the processing of personal data concerning them, including profiling on the basis of those provisions. The Coco Beach Resort shall cease processing the personal data unless there are compelling legitimate grounds for the processing which override the interests, freedoms and rights of the data subject related to the exercise, institution or support of a legal claim.

Complaint

If you have a complaint about The Coco Beach Resort handling of your personal data, or wish to exercise any of the above rights, please contact us via the website or by email at . To ensure that you wish to exercise a right, The Coco Beach Resort requests that you send a copy of your proof of identity. Please black out your passport photo and MRZ (strip of numbers at the bottom) to protect your privacy. The Coco Beach Resort will respond to your request as soon as possible but no later than 4 weeks. You can also file a complaint with the Personal Data Authority. This is the competent enforcement body. You can contact them via this link: https://autoriteitpersoonsgegevens.nl/en/contact-met-de-autoriteit-persoonsgegevens/tip-ons.

Changes to Privacy Statement

The Coco Beach Resort may amend the privacy statement at any time. The most recent version is published on the website. Therefore always keep an eye on the website for the most recent version. If the new privacy statement affects the way The Coco Beach Resort processes data already collected about you, The Coco Beach Resort will notify you by email.

This version was last adopted on March 14, 2023.