Privacy policy.
What we collect, why, who we share it with and how to exercise your rights. Effective October 31, 2026. Reference wording subject to review by Eccekenoo's legal counsel.
Data controller
The controller is the entity that operates eccekenoo.org (legal name and registration number pending confirmation by Eccekenoo), domiciled in San José, Costa Rica, the contact form, phone +506 8877 7000. For any question about your data write to the contact form with the subject "Personal data".
Legal framework
We process data under Costa Rica's Law 8968 on the Protection of the Person regarding the Processing of Personal Data (La Gaceta 170, September 5, 2011), its Regulation (Executive Decree 37554-JP as amended) and the criteria of the Agencia de Protección de Datos de los Habitantes (PRODHAB), under the Ministry of Justice and Peace. We apply the principles of informational self-determination (article 4), informed consent (article 5), data quality (article 6) and security (article 10). For residents of the European Economic Area we also apply Regulation (EU) 2016/679 (GDPR); for California residents, the CCPA/CPRA.
What we collect and why
Contact, volunteer and sponsor forms: name, email, optional phone, area of interest and message, to reply and manage your participation (basis: your consent and performance of what you request). Donations: the data that accompanies a transfer or card payment, to issue the receipt and account for funds (basis: legal obligation and the donor relationship). Usage statistics: aggregated browsing data according to your choice in the cookie notice; in the European Economic Area, the United Kingdom and Switzerland only if you accept them, elsewhere until you decline (basis: consent and a legitimate interest in anonymous statistics). We do not collect sensitive data in the sense of article 3 of Law 8968 and ask that you do not include it in forms.
Who we share data with
Processors acting on Eccekenoo's behalf: Netlify (site hosting and form intake, United States), Google Analytics 4 via Google Tag Manager (statistics, according to your choice in the cookie notice) and the payment gateway Eccekenoo chooses (Stripe or PayPal) for card donations; the site never stores card data. We do not sell or share personal data with third parties for commercial purposes. We may disclose data to authorities when a law or court order requires it.
International transfers
Some processors handle data outside Costa Rica. Under article 14 of Law 8968 we transfer data only to parties that guarantee an equivalent level of protection, through processing agreements and, for EU residents, standard contractual clauses.
Retention
Contact messages are kept up to twelve months after the last exchange. Donation records are kept for the period required by Costa Rican tax law. Statistics are kept in aggregate form up to fourteen months.
Your rights
You may access, rectify, delete and object to the processing of your data and withdraw consent at any time (article 7 of Law 8968) by writing to the contact form; we reply within the legal period. EU residents also hold the rights to portability and restriction; California residents hold the CCPA rights, including the right to opt out of sale (see Do Not Sell My Information). If you believe your rights were not honored you may file a complaint with PRODHAB (www.prodhab.go.cr) or your local authority.
Security and minors
We use HTTPS encryption, security headers, restricted access and processors with recognized certifications. The site is not directed at people under 18 and we do not knowingly collect their data; if a parent or guardian becomes aware of a case, please write to us so we can delete it.
Changes
Any change will be published on this page with its new effective date.