Privacy Policy
Residencia Vista de Oro Senior Living
Effective date: October 13, 2026 Version: 1.0
This English version is provided for convenience. In case of any discrepancy, the Spanish version prevails.
1. Identification of the data controller
The database generated through this website is managed by:
- Legal name: Corporación VO de ABH Sociedad de Responsabilidad Limitada
- Corporate ID (cédula jurídica): 3-102-719820
- Trade name: Vista de Oro Senior Living
- Registered address: Province of San José, canton of San José, Mata Redonda district, Sabana Oeste, from the Compañía Nacional de Fuerza y Luz, 50 meters west and 25 meters south, offices of the ERP Lawyers law firm, Costa Rica
- Email: info@vistadeorocr.com
- Website: www.vistadeorocr.com
Hereinafter, “Vista de Oro”.
2. Applicable law
This Policy is governed by Costa Rican Law No. 8968, Law on the Protection of Individuals with Regard to the Processing of their Personal Data, and its Regulations, Executive Decree No. 37554-JP, as well as any other provisions in force in the Republic of Costa Rica on the protection of personal data.
3. Scope
This Policy applies to the personal data collected through the Vista de Oro website and the contact channels available on it. It does not apply to information people provide through other channels or to third-party websites the site may link to.
4. Personal data collected
4.1 Data provided voluntarily
The following data is requested through the website forms:
Required - Full name - Email address - Phone number - Relationship to the older adult - Country of residence - Preferred language, on forms that include it
Optional - Additional comments or questions, on forms that include them
If the required data is not provided, the request for information cannot be processed, since it is needed to contact the interested person and respond. Declining to provide optional data has no consequence.
4.2 Data received through other channels
When a person contacts us by WhatsApp, email or phone, Vista de Oro receives and keeps the data that person chooses to share during the conversation.
4.3 Browsing data
The site uses cookies and similar technologies that collect information about how the site is used, with the user’s prior consent. Details are available in the Cookie Policy.
5. Information about third parties
The website forms are mainly intended for family members or close contacts inquiring on behalf of an older adult.
Anyone who provides information about another person declares that they have that person’s authorization, or the legal representation or standing that allows them to do so, and is responsible for having informed that person of the contents of this Policy.
Vista de Oro processes that information only to respond to the inquiry made.
6. Sensitive data
Under article 9 of Law No. 8968, information about a person’s health is restricted-access data, and its processing requires express consent.
Vista de Oro does not request clinical or health information through the website forms. When a form includes a comments field, it is free text and its content is entirely at the discretion of the person completing it.
We expressly recommend not including detailed clinical information, diagnoses, treatments or medical history in the website forms. Where appropriate, that information is collected during the admission assessment process, through the specific instruments and consents designed for it.
If a person voluntarily includes health information in the comments field, it will be handled with the enhanced level of protection required by Law No. 8968, with access restricted to the staff strictly necessary to respond to the inquiry.
7. Purposes of processing
The personal data collected is used to:
- Respond to inquiries and requests for information about the residence, its services, accommodation options and admission process.
- Manage the pre-opening interest list and send information about the opening date, availability, services, rates and visit scheduling.
- Schedule project presentations and, once operations begin, visits to the facilities.
- Follow up on the admission process when the interested person requests it.
- Produce internal, aggregated statistics on the origin and language of the inquiries received, in order to improve our service.
- Comply with applicable legal obligations.
The data is not used for purposes other than those listed here, and it is not sold, rented or transferred to third parties for commercial purposes.
8. Consent
The processing of personal data is based on the express, free, specific and informed consent of the data subject, under article 5 of Law No. 8968.
Consent is given by checking an acceptance box, which is not pre-checked, located on each website form next to the link to this Policy.
Consent may be withdrawn at any time, without retroactive effect, by sending a request to info@vistadeorocr.com.
9. Recipients and data processors
The data is processed by authorized Vista de Oro staff, particularly the Administrative Office, and by the following categories of providers acting as data processors:
- Web hosting and email provider: GoDaddy, provided by GoDaddy Operating Company, LLC.
- Web analytics service: Google Analytics 4, provided by Google LLC, only if the user accepts analytics cookies.
- Messaging service: WhatsApp Business, provided by Meta Platforms, Inc., when the user chooses to communicate through that channel.
These providers process the data only according to Vista de Oro’s instructions and their own privacy policies.
10. International data transfers
The providers listed above may store or process data on servers located outside Costa Rica, mainly in the United States of America.
By accepting this Policy, the data subject gives their express and informed consent to that international transfer, under article 14 of Law No. 8968.
11. Retention period
Data is kept for as long as necessary to fulfill the purposes described and, in any case, for a maximum of 24 months from the interested person’s last interaction, unless:
- The person requests earlier deletion.
- There is an active contractual relationship, in which case the retention periods of that relationship apply.
- A legal provision requires a longer period.
Once the period ends, the data is deleted or anonymized.
12. Security measures
Vista de Oro adopts reasonable technical, organizational and security measures to protect personal data against loss, unauthorized access, alteration or improper disclosure, including:
- Encrypted transmission of information through the HTTPS protocol.
- Restricted access to email accounts and inquiry records, limited to authorized staff.
- A duty of confidentiality for staff, which continues even after their relationship with the organization ends, under article 11 of Law No. 8968.
No security measure is infallible. Vista de Oro cannot guarantee the absolute security of information transmitted over the internet.
13. Rights of the data subject
Every data subject has the right to:
- Access: know what data about them is in the database, its purpose and its origin.
- Rectification: request the correction of inaccurate or incomplete data.
- Update: request that their data be kept current.
- Deletion: request the deletion of their data when it is no longer necessary or relevant, or when they withdraw their consent.
How to exercise them: by sending a written request to info@vistadeorocr.com, stating your full name, a means of receiving notifications and the specific request. Vista de Oro may require proof of the requester’s identity.
Response time: five business days from receipt of the request, under article 7 of Law No. 8968.
Exercising these rights is free of charge.
14. Supervisory authority
Anyone who considers that their rights have not been properly addressed may contact Costa Rica’s Agency for the Protection of Personal Data (PRODHAB), part of the Ministry of Justice and Peace of the Republic of Costa Rica.
15. Cookies
The use of cookies and similar technologies is governed by this site’s Cookie Policy, which forms an integral part of this Policy.
16. Minors
The website is not intended for minors and does not knowingly collect their personal data. If it is detected that information from a minor has been collected without the authorization of their legal representative, that information will be deleted.
17. Links to third-party sites
The website may contain links to third-party websites. Vista de Oro is not responsible for the content or privacy practices of those sites, which are governed by their own policies.
18. Changes
Vista de Oro may modify this Policy to adapt it to regulatory, technical or operational changes. The current version is the one published on the website, with its effective date. When changes are substantial and affect the purposes of processing, consent will be requested again from data subjects.
19. Contact
Questions about this Policy or the processing of personal data:
Email: info@vistadeorocr.com Location: San Antonio de Escazú, San José, Costa Rica