Privacy and cookie notice
Privacy and cookie notice
Version 2026-09 · Costa Rica Law 8968 and its regulations · Text proposed by the committee, pending validation by legal counsel.
Who is responsible
Santa Eulalia Casa is an initiative of the Rodríguez Venegas family, represented by its family committee, which acts as the controller of the personal data you send through santaeulalia.casa. For any question about your data, write to info@santaeulalia.casa or WhatsApp +506 6000 8448.
What data we collect
Only what you type in the forms: your name, one contact channel (phone or email), the channel you prefer, the language you used on the site, your message and, if you request a visit, the day and time that suit you. Budget, timeframe and who shared the listing with you are optional. If you leave your email to hear about rentals, we keep only that email and the language.
We never ask for identity documents, financial data or sensitive data, and the site is not aimed at minors. With each submission we also record the date, the version of this notice and the page you wrote from, so we can prove your consent.
What we use it for
To answer your enquiry, arrange and confirm visits to the house, let you know when rentals are published if you asked, and review a listing or an event if you proposed one. We use your email or phone only for those purposes and through the channel you chose.
We send commercial updates only if you ticked that option, which is always separate and unticked. You can stop them at any time by writing to info@santaeulalia.casa.
Your consent
We process your data on the basis of your express, informed consent, given by ticking the box on each form after reading this notice. Every submission stores the version of the notice, the date and the purpose you accepted.
You can withdraw your consent at any time by writing to info@santaeulalia.casa from the channel you registered; we will stop contacting you, except as needed to close a request you started.
Who we share it with and where it is stored
Your data is seen only by the family team that handles enquiries, with personal, role-based access. To run the site we rely on providers that process data on our behalf under their data processing terms: Vercel Inc. (site and file hosting), Neon Inc. (database) and Resend Inc. (email delivery). Their servers are in the United States, so your data is transferred to that country under each provider’s contractual safeguards.
The map on the listing is an embedded Google map that loads only when you reach that part of the page; when it loads, Google receives your IP address under its own privacy policy. We never sell or hand your data to third parties for advertising.
How long we keep it
If there was no purchase or rental, we keep your data for 24 months from your last activity; afterwards we anonymise name, phone, email and messages and keep only aggregate figures. Completed visits and closed transactions are kept for as long as the relationship lasts and for the applicable legal period.
Sent emails are deleted after 90 days, rental interest sign-ups are deleted when you unsubscribe or after 24 months, and system audit records are kept for five years without unnecessary personal data. An automatic task applies these periods every day.
How we protect it
The site works only over encrypted connections (HTTPS). Team access to the admin panel is personal, role-based and through single-use links; every relevant action is written to an audit log. We make daily encrypted backups, kept for 30 days.
Your rights
You can request at any time access to your data, its rectification or update, its deletion and the withdrawal of your consent, by writing to info@santaeulalia.casa from the channel you registered. We reply within five working days of receiving your request, free of charge.
If you believe we did not handle your request properly, you can turn to the Costa Rican data protection agency, PRODHAB (Agencia de Protección de Datos de los Habitantes, Ministry of Justice and Peace), at prodhab.go.cr.
Changes to this notice
This notice carries a version and a date. If we change anything substantial, we will publish a new version and the forms will record that version in later consents; the data you already gave us stays under the terms you accepted. Version 2026-09, updated 18 September 2026.