- INFORMATION AND PERSONAL DATA WE COLLECT

The personal data we collect includes, among others:
a) First and last name
b) National ID card
c) Email address
d) Date of birth
e) Identification number (Costa Rican ID, residency card, or passport)
f) Gender
g) Contact phone number
h) Credit card information (number, bank, expiration date, security code)
i) Cardholder’s personal details (name, type, and ID number)
j) Information necessary to facilitate the trip or other services, including username of the electronic platform, emergency contacts, or any other contingency, seat preferences
k) Information required by sales and/or customer service representatives to handle requests or claims. The provision of our services is not conditioned on the supply of this sensitive information. According to Law 8968 “Protection of the Person Regarding the Processing of their Personal Data,” specifically in the section on SENSITIVE DATA.

All databases of LA TERMINAL S.A. are stored on a Windows Server 2012, only for purposes of storage, security, and control. LA TERMINAL S.A. uses customer information exclusively to transmit it to providers of contracted services and not to transfer or sell it to unrelated third parties.
The information provided will remain stored for the maximum time necessary to allow us to fulfill our legal and/or contractual obligations, especially in accounting, contractual, fiscal, and tax matters, or to comply with applicable provisions for administrative, legal, and historical purposes. We presume the accuracy of the information provided and do not verify, nor are we obligated to verify, the truthfulness, validity, sufficiency, or authenticity of the data. Therefore, we assume no responsibility for damages of any kind that may arise from lack of truthfulness, validity, sufficiency, or authenticity of the information, including those caused by identity theft or errors. If you provide us with personal information about someone other than yourself (such as your spouse or a colleague), we assume you are authorized to do so. By registering and/or browsing our website, clients, USERS, and/or visitors expressly acknowledge and accept these policies and give their consent for their information to be processed.

- PURPOSE OF PROCESSING PERSONAL DATA

If you provide us with personal data, you authorize us to use this information for the purposes outlined in this Privacy Policy, and we will not transfer or disclose it outside of our databases unless:
(i) You authorize us to do so
(ii) It is necessary to enable our contractors, providers, or agents to provide the services we have assigned
(iii) It is used by us or third parties to provide you with our products or services
(iv) It is shared with entities that provide marketing services on our behalf or with whom we have joint marketing agreements
(v) It relates to a merger, consolidation, acquisition, divestiture, or restructuring process
(vi) It is required or permitted by law or for the purposes described in this Privacy Policy.

By accepting this Privacy Policy, data subjects authorize us to process their data, either partially or fully, including collection, storage, recording, use, circulation, processing, deletion, transmission, and/or transfer to third parties (bus companies) for activities related to the services and products purchased. These include processing, confirmation, compliance, and provision of services and/or products acquired directly and/or with third-party suppliers, as well as promoting and advertising our activities, products, and services; handling transactions; reporting to administrative, police, or judicial authorities; interactions with banks and/or insurance companies; and for internal administrative and/or commercial purposes such as market research, audits, accounting reports, statistical analysis, reservations, modifications, cancellations, itinerary changes, refunds, handling queries, complaints, claims, invoicing, compensation payments, accounting records, correspondence, payment method verification, fraud prevention, and compliance with anti-money laundering regulations, among others.

Due to our activities, we are required to provide certain passenger information to the public transportation authorities before bus departures, upon arrival at destinations, or at any time after the transportation contract is executed. Generally, this information refers to the identity of passengers and their travel documents (national ID, residency card, or passport).

Adicionalmente, nuestros viajeros, clientes y USUARIOS, en su calidad de titulares de los datos recolectados, al aceptar esta política de privacidad, nos autorizan para:

Additionally, by accepting this Privacy Policy, our clients, travelers, and USERS authorize us to:
• Use their information for marketing our products/services and those of third parties with whom we maintain business relationships.
• Provide personal data to supervisory, police, or judicial authorities upon legal request.
• Allow access to personal data by auditors or third parties contracted for auditing processes.
• Consult and update personal data at any time to ensure its accuracy.
• Contract third parties for storage and/or processing of information under confidentiality and security standards.
• Receive promotional electronic communications from WWW.LATERMINALCOSTARICA.COM. and related services.

- SECURITY AND CONFIDENTIALITY AT LA TERMINAL

The transmission and submission of data made by the USER through WWW.LATERMINALCOSTARICA.COM , or the information collected and processed by LA TERMINAL S.A., is protected by electronic security techniques on the network. Likewise, the data provided and stored in our databases is equally protected by security systems that prevent unauthorized third-party access. LA TERMINAL S.A. makes its best efforts to implement the most up-to-date procedures to ensure the effectiveness of its security systems. In this regard, we rely on technological security tools and implement industry-recognized security practices, which include: the secure transmission and storage of sensitive information through secure mechanisms such as encryption and the use of secure protocols; safeguarding technological components; restricting information access only to authorized personnel; backing up information; and secure software development practices, among others.

We have established information security policies, procedures, and standards aimed at protecting and preserving the integrity, confidentiality, and availability of information, regardless of the medium or format in which it is stored, its temporary or permanent location, or the way it is transmitted.

- DERECHOS DE LOS USUARIOS Y PROCEDIMIENTOS

By accepting the Terms and Conditions, of which this Privacy Policy is an integral part, you expressly, freely, and previously acknowledge that you have been informed about the rights granted to you by law as the owner of your personal data, which are outlined below:
(i) To know, update, and rectify your personal data with the entity responsible for or in charge of processing your personal data.
(ii) To request proof of the authorization granted to the data controller, except when expressly exempted as a requirement for processing.
(iii) To be informed by the data controller or processor, upon request, regarding the use given to your personal data.
(iv) To submit complaints to the Commission for the Promotion of Effective Consumer Protection for violations of the personal data protection regime.
(v) To revoke authorization and/or request the deletion of personal data in accordance with the Law on the Protection of Individuals with Respect to the Processing of their Personal Data.
The procedures to exercise your rights are as follows:
(i) Inquiries Data subjects, authorized persons, or heirs may inquire about their personal information stored in our databases, in which case we will provide the requested information after verifying the legitimacy of the request. Inquiries will be addressed within a maximum period of ten (10) business days from the date of receipt. If it is not possible to respond within this period, the reasons for the delay will be communicated, indicating the date when the inquiry will be addressed, which in no case may exceed five (5) business days after the end of the initial period.
(ii) Cancellation To cancel, change, or request a refund for your ticket, you must contact La Terminal Customer Service directly at the Call Center +506 7024-1301, via WhatsApp +506 7024-1301, or by email at contacto@laterminalcostarica.com . Approval of a cancellation, change, or refund request will be subject to the internal policies of each transport operator.
(iii) Claims If data subjects, authorized persons, or heirs believe that the information contained in a database should be corrected, updated, or deleted, or if they notice an alleged violation of any obligations under the Regulation, they may submit a claim to us, which will be processed under the following rules:
Claims must be submitted in a request addressed to LA TERMINAL S.A, including your identification, a description of the facts giving rise to the claim, your address, and any supporting documents. If the claim is incomplete, we will request the missing information within five (5) days of receipt. If one (1) month passes without providing the required information, it will be understood that the claim has been withdrawn. If we are not competent to resolve the claim, it will be forwarded to the appropriate authority within a maximum of two (2) business days, and you will be informed accordingly.
If the claim is valid and complete, a note stating "claim in process" along with the reason will be added to the database within no more than two (2) business days. This note must remain until the claim is resolved.
The maximum period to resolve the claim will be thirty (30) days, counted from the day after the receipt date. If it is not possible to resolve the claim within this period, the reasons for the delay and the date of resolution will be communicated, which in no case may exceed eight (8) business days after the initial period.
Data subjects may exercise their rights to know, update, rectify, and delete their personal data by sending a request to the email contacto@laterminalcostarica.com in accordance with this Privacy Policy.
The area responsible for handling requests, inquiries, or claims through which the data subject may exercise their rights is:
Area: Administration. Phone: +506 7024-1301. Contact Email: contacto@laterminalcostarica.com

- MODIFICATIONS AND EFFECTIVENESS OF THE PRIVACY POLICY

We may modify the terms and conditions of these privacy and confidentiality policies and/or our email practices at any time. If we decide to introduce any material changes to our privacy policies, they will be announced on the website by publishing an updated version of the privacy policies. The databases will remain in effect indefinitely, in accordance with the purposes and uses of the information.