Privacy policy

Who is responsible for your data

The data controller is OPRA Sociedad Anónima, corporate ID 3-101-248847, domiciled at San Isidro de Heredia, Bodegas El Trapiche #1, Heredia, Costa Rica.

Hivestrix is a brand operated by OPRA Sociedad Anónima, the company answerable to you while the brand has no company of its own.

For any question about this policy or about the processing of your data, write to [email protected].

What data we collect

We only collect the data you give us voluntarily through the contact form or by email, plus the minimum generated by running the site.

• Contact details you write: name, company, email address and phone when you include it.
• The content of the message you send us and the topics of interest you tick.
• Server technical records needed to operate and protect the site, such as the IP address a form is sent from.
• Preferences stored in your own browser, such as the chosen language. They never leave your device.

What we use the data for

We use your data only to answer and follow up on what you raised with us.

• Answer your enquiry and arrange a conversation where appropriate.
• Prepare service proposals when you request them.
• Keep a record of the exchange while a commercial relationship or an open matter exists.
• Protect the site against automated submissions and abuse of the form.

On what basis we process the data

The basis is your informed consent, given when you submit the form or write to us. Law 8968 requires that consent to be express, informed and revocable, and that is how we treat it.

We do not use your data for purposes other than those described here, nor do we subject it to automated decisions producing legal effects for you.

How long we keep it

We keep enquiry data while a matter is open and, once closed, for a reasonable period to handle follow ups or later questions.

If a commercial relationship arises from the enquiry, the associated data is kept while that relationship is in force and afterwards for the periods required by applicable Costa Rican tax and commercial rules.

When there is no longer a legitimate purpose or a legal obligation justifying it, we delete the data.

Who it is shared with

We do not sell or transfer personal data to third parties for commercial purposes.

Data may be handled by the technical providers that make the site and the email service work, and only for that. Those providers act as processors and are bound by the same confidentiality obligations.

• The infrastructure provider hosting the site.
• The email service through which your message is transmitted and stored.

Transfers outside Costa Rica

If a technical provider operates outside the country, the transfer is limited to what is needed to deliver the service and is carried out with the safeguards Law 8968 requires.

We do not transfer your data to third parties for those third parties own purposes.

How we protect it

We apply technical and organizational measures proportionate to the risk: encrypted transmission, per person access control, information backups and periodic review of standing access.

No system is infallible. Should a security breach affect your data, we will report it as the rules require.

Your rights and how to exercise them

Law 8968 grants you rights over your personal data and you may exercise them at any time, free of charge.

• Access: know what data of yours we handle and for what purpose.
• Rectification: correct inaccurate or incomplete data.
• Deletion: ask for your data to be erased when it is no longer necessary.
• Withdrawal of consent: take back the authorization you gave, without retroactive effect on processing already carried out.
• Complaint before the Costa Rican data protection authority, if you believe we did not handle your request properly.

Channel to exercise your rights

Write to [email protected] from the address you contacted us with, stating which right you wish to exercise. We may ask for additional information solely to verify your identity and avoid handing data to the wrong person.

We confirm receipt of the request and reply within the following five business days. The data deletion view describes that procedure in detail.

Cookies and tracking

This site uses no advertising cookies, no profiling and no third party analytics.

We store only your language preference in your browser, so the site opens the way you left it. That information never travels to any server and you can clear it from your browser.

Minors

The site is aimed at companies and at adults. We do not knowingly collect data from minors. If you notice that a minor sent us data, write to us and we delete it.

Changes to this policy

If we change this policy, we update the date shown at the top of the view. Changes apply from the moment they are published.