PRIVACY
Privacy Policy
Information about the processing of personal data by Maratopia.
1. Controller
2. Legal basis and principles
Personal data is processed under Costa Rica Law No. 8968 on the Protection of Persons with regard to the Processing of Personal Data and its regulations. Where additionally applicable, mandatory data protection rules of other jurisdictions are observed.
Data is processed for specified purposes, proportionately, transparently and only for as long as required.
3. Hosting and server logs
When the website is accessed, technical data such as IP address, time, requested file, browser, operating system and referrer may be processed in server logs for operation, security, troubleshooting and abuse prevention.
4. Contact form and email
For contact requests we process, in particular, subject, name, email, phone number, preferred language, message, inquiry number, consent and status information. Data is stored in the WordPress backend and sent to info@maratopia.com. It may remain stored even if email delivery fails.
Nonce, honeypot, rate limits, submission keys, audit logs and hashed technical identifiers may be used for security. File uploads are not provided.
5. Booking assistant
The booking assistant processes data needed for tour selection, availability checks, reservations and operation, including contact details, date, participant numbers, language, travel type, ship information where applicable, meeting details and special notes.
6. WhatsApp
WhatsApp is used only for inquiry- and tour-related communication where actively selected or expressly approved. Consent to WhatsApp is not marketing consent.
WhatsApp or Meta also processes data under its own responsibility. Email remains available as an alternative.
7. Google Maps and external links
Google Maps is directly embedded on certain pages of this website. When a page containing an embedded map is opened, the map is loaded automatically. This establishes a connection to Google and may transmit, in particular, the IP address, browser and device information, time of access, referrer and other technically required information to Google.
Google processes this data under its own responsibility, and processing may also take place in other countries. Location and route links may additionally lead to Google Maps. Clicking such a link opens Google’s external website, where the privacy terms of the respective provider apply.
8. Cookies
Necessary cookies may be used for operation, security and essential functions. Non-essential analytics, marketing or convenience services are activated only after prior consent where legally required.
9. Recipients and partners
Data is shared only where required for inquiries, tours, technical provision or legal duties. Recipients may include authorized staff, guides, transport and tour partners, hosting and IT providers, booking platforms and authorities.
10. International processing
Maratopia is based in Costa Rica. International services such as WhatsApp, Google, hosting, email, social media or booking providers may process data in other countries.
11. Retention
Data is retained only as long as needed for processing, reservations, tour operation, documentation, security and legal obligations. Data no longer required is deleted or anonymized.
12. Data subject rights
Subject to applicable law, individuals may request access, correction, updating, deletion or restriction and may withdraw consent for the future. Requests may be sent to info@maratopia.com.
13. Children’s data
Data relating to minors is processed only where necessary for an inquiry, reservation or tour and is provided by a responsible adult.
14. Data security
Maratopia uses appropriate technical and organizational measures against loss, misuse, unauthorized access, alteration and disclosure. Internet and messenger transmission can never be completely risk-free.
15. Updates
This Privacy Policy is updated when the website, booking processes, services or legal requirements change. The version published on the website applies.