Who processes personal information? (who is the ‘Data controller’)
Personal information is processed by us, an entity incorporated in accordance with the laws of Costa Rica and with following contact details:
Virtual Works Costa Rica S.A.315m. West from Court Law – Alajuela (Costa Rica)Contact email: firstname.lastname@example.orgContact details for our Data Protection Officer: email@example.com.
What are we processing your data for and why are we processing it? (‘Purposes of data processing’, ‘legal basis of the data processing’ and ‘storage periods’)
We will process your data when we have to perform a contract,
and we will be processing your data as long as the contractual relationship with you is in force and during the five years following the end of said relationship. This results in us having to process your data for purposes of providing you with both the Services, as well as to perform our obligations under the Services Terms and Conditions.
Subject to obtaining your consent
, and as long as you do not withdraw any such consent, we may also process your data for the following purposes:a)
To send you electronic commercial communications (if you subscribe to a newsletter) or to answer the requests you may address us when contacting us;b)
If you opt to sign in by means of a third party social media platform, we may obtain ID confirmation and other information from that third party, as mentioned in each case;d)
We may enrich the data we have about you by obtaining information from a select third party for data enrichment purposes, provided that you have given us prior permission. Enriching data allows us to analyze a deeper subset of data from which we may present personalized content.
When we have to comply with a legal obligation
applicable to us from time to time, such as those set forth in tax and anti-money laundering laws and regulations. In any such cases, the data will be processed only during the periods set forth by said laws, being deleted thereafter.
Finally, we may also process your data to protect our legitimate interests
, as long as said data is strictly necessary to fulfil the goals set forth below, namely:a)
To review, monitor, investigate, and analyze how to improve the Services and/or the Site, as well as to keep our Services and the Site secure and operational and prevent abusive activity (e.g. fraud, spam, phishing activities, etc.). This may include sending you quick reply buttons to assess any problems in the service or know how to improve your user experience. The interests at stake are ensuring a correct and safe environment for both other users and us, taking those interests prevalence over your legitimate interests (we need to create and maintain an environment which is in accordance with the law, the legitimate interests of other parties, what other users may expect from our end, and to protect other users’ security when accessing the Site and using the Services);b)
Besides any commercial electronic and non-electronic commercial communication sent when we have obtained your consent as mentioned above, we may also send you those kind of communications when you are our client. In this last case, we will only send you information belonging to us and concerning services and/or products identical or similar to the ones you have contracted with us. In these cases, we have a legitimate interest in processing your contact information to keep you informed about any of our products and services, prevailing this interest over your right to personal data given the non-sensitive nature of the data in question and the fact that the contractual relationship built with our clients results in those clients expecting these kinds of communications; andc)
Upon dissociating the data we have so as to be impossible to be associated to you or any other person, to perform statistical and other analysis on information we collect (technical and metadata) to analyze and measure user behavior and trends, to understand how people use our services, in order to improve and optimize our performance of such services.3.3.
To which extent do we require to have access to your personal data?
We need to process your personal data to perform the legal and contractual obligations mentioned in section 3.2 above. Otherwise, we are not able to provide you with the Services and/or access to the Site. On the other hand, for data processing which depends on your consent or on our legitimate interests, the data processing is not legally required.3.4.
Which companies will have access to your personal information?
We may also share your information with competent courts and authorities, when we are legally required to do so (for instance, to allow such bodies to investigate, prevent, or take action against illegal activities), or we have to take action to protect our rights or any third party rights.3.5
. In which territories may your personal information be processed?
You have the right to withdraw your consent at any time. You also have the right to request access to, and rectification of, or erasure of your personal data, or restriction of processing, or to object to processing, as well as the right to data portability. Please note that if you choose to cancel your data, your account will be deleted and all data in your account will be permanently deleted from our systems.
We allow you to exercise the above-mentioned rights at any time by opening a support ticket via the Help Center
, or by contacting our Help Center (firstname.lastname@example.org).3.7.
Updating your information. Emails and commercial communications.
You can update any information we may have from you by means of the account settings area or by sending us a written communication as described in section 3.6 above. Please remember that it is your duty to keep information updated so we can correctly provide you with the Services, and you undertake to verify the information you have handed us from time to time to make sure that it is accurate.
As explained in section 3.6 above, you are entitled to ask us, now or at any moment, not to send you any kind of emails or commercial communications. To that extent, you can contact us as described in section 3.6 above. Note that this will not prevent the sending of emails or other communications related to the Services, as those communications are necessary to perform the relationship we have with you.