Our Commitment to Privacy
At Arenal Airport, we are committed to protecting your personal data and respecting your privacy. This page explains how we collect, use, and protect your information in compliance with Costa Rican data protection laws and international best practices.
Information We Collect
We collect different types of personal information depending on your interaction with Arenal Airport:
Passenger Information
- Name and contact details
- Passport or ID information
- Flight details
- Special assistance requirements
Customer Services
- Parking reservations
- Lounge access details
- Retail and dining preferences
- Feedback information
Security & Operations
- CCTV footage
- Security screening data
- Vehicle registration
- Access control information
Digital Interactions
- Website usage information
- App data and preferences
- Wi-Fi connection details
- Newsletter subscriptions
Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
Contractual Necessity
Processing necessary for the performance of our contract with you (such as providing airport services you've requested)
Legal Obligation
Processing necessary to comply with our legal obligations (such as security requirements, border control, or customs regulations)
Legitimate Interests
Processing necessary for our legitimate interests (such as improving our services, ensuring security, or preventing fraud)
Consent
Processing based on your explicit consent (such as marketing communications or using your data for specific promotional purposes)
How We Use Your Information
Providing Airport Services
To facilitate your journey through Arenal Airport, including check-in, security screening, and boarding processes
Security and Safety
To maintain a safe and secure airport environment through security procedures, access control, and surveillance
Customer Service
To provide customer assistance, respond to inquiries, and manage feedback or complaints
Commercial Services
To provide and improve commercial services such as retail, dining, parking, and lounge facilities
Operational Management
To ensure efficient airport operations, including resource planning, capacity management, and performance monitoring
Communications
To send service-related communications and, with your consent, marketing information about airport services and promotions
Information Sharing
We may share your personal data with:
International Transfers
If we transfer your data outside of Costa Rica, we ensure appropriate safeguards are in place in compliance with data protection laws, including standard contractual clauses and adequacy decisions.
How We Protect Your Data
Technical Measures
We implement robust security technologies including encryption, firewalls, intrusion detection systems, and secure access controls to protect your data from unauthorized access or breaches.
Organizational Measures
Our staff undergo regular data protection training, and we maintain strict access controls limiting data access to only those employees who need it to perform their duties.
Compliance & Auditing
We regularly audit our data protection practices and systems to ensure compliance with relevant laws and industry standards, and promptly address any identified vulnerabilities.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.
Different types of data are subject to different retention periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Passenger travel records | 90 days after travel | Operational needs and customer service |
| CCTV footage | 30 days | Security and incident investigation |
| Customer accounts | Duration of account plus 2 years | Service provision and improvement |
| Financial transactions | 7 years | Accounting and tax regulations |
| Security incident records | 5 years | Security analysis and legal requirements |
Your Privacy Rights
Under Costa Rican data protection law, you have several rights regarding your personal data:
Right to Access
You can request copies of your personal data that we process
Right to Rectification
You can request correction of inaccurate or incomplete data
Right to Erasure
You can request deletion of your data under certain circumstances
Right to Restrict Processing
You can request limited use of your data in specific situations
Right to Data Portability
You can request transfer of your data in a structured, commonly used format
Right to Object
You can object to certain types of processing, particularly marketing
How to Exercise Your Rights
To exercise any of these rights, please contact our Data Protection Office using the contact information provided below. We will respond to your request within 30 days.
Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected data from a child, please contact us immediately.
Changes to This Policy
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes through our website or other appropriate channels.
Last updated: March 15, 2025
Contact Our Data Protection Office
If you have questions, concerns, or requests regarding your personal data or this privacy policy, please contact:
Arenal Airport
La Fortuna, Alajuela Province, Costa Rica
Email: privacy@arenal-airport.com
Phone: +506 2479 9040
Right to Complain
If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the Costa Rican Data Protection Agency (PRODHAB):