PRIVACY POLICY

Processing of personal data on tactcr.com.

TACT COSTA RICA / ECEMU DE ESTE S.A., located in Cartago Central, Cartago, Costa Rica, is responsible for the processing of personal data collected through tactcr.com and its associated digital channels.

Privacy and personal data inquiries may be sent to:

privacidad@tactcr.com

This Privacy Policy explains what information we may collect when a person visits our website, completes a form, requests information regarding capabilities, training programs or other services, or communicates with TACT Costa Rica through the channels available on the website.

We may collect information voluntarily provided by the user, including name, organization, position or role, email address, telephone or WhatsApp number, country, city, program or capability of interest, general information about the request, expected timeframe, preferred contact method and additional comments.

Where the functionality is available, users may also voluntarily provide documents related to their request.

The website may process technical information required for operation, security and abuse prevention, as well as information associated with the origin of a request, including source page, section, language and campaign or referral parameters.

Information may be used to receive and manage requests, respond to inquiries, identify the appropriate area or team for follow-up, prepare communications related to a request, maintain administrative records, prevent abuse or misuse of the website, protect our systems and comply with applicable legal or administrative obligations.

Information submitted through the form will not automatically be used for mass advertising or marketing communications without an additional appropriate legal basis or authorization.

Where processing depends on the user's consent, consent will be requested expressly before the information is submitted.

Voluntarily submitting a form and accepting this Privacy Policy authorizes the processing of the information provided for the purposes described above.

TACT Costa Rica's public forms are not intended to receive sensitive, classified or unnecessary information.

Please do not submit passwords, credentials, medical or financial information, sensitive information concerning third parties, detailed security vulnerabilities, floor plans, protective routes, internal procedures, tactical information, access systems or other information whose disclosure could create a security risk.

If a project requires the exchange of sensitive information, TACT will coordinate an appropriate channel separately.

Information may be accessed only by authorized TACT personnel and technology providers required to operate the website, host information, manage communications, provide email infrastructure, security or related services.

Such providers should process information only to the extent necessary to provide their services.

TACT Costa Rica does not sell personal databases to third parties.

Certain technology providers used to operate the website may process information using infrastructure located outside Costa Rica.

Where this occurs, TACT will seek to use appropriate contractual, organizational and technical safeguards and to process information in accordance with applicable law.

Information will be retained for the period reasonably necessary to manage the request, maintain administrative records, manage a potential professional or contractual relationship and comply with applicable legal obligations.

When the information is no longer required for these purposes, it may be deleted, anonymized or retained only where a legitimate obligation requires continued retention.

TACT uses reasonable technical and organizational measures intended to protect information against loss, unauthorized access, alteration, disclosure or improper processing.

No Internet-connected system can guarantee absolute security. Users should therefore avoid transmitting unnecessary sensitive or operational information through public forms.

Under applicable Costa Rican law, individuals may request access to their personal information and, where appropriate, its correction, updating or deletion. They may also request withdrawal of consent where legally applicable.

Requests may be sent to:

privacidad@tactcr.com

TACT may request reasonable information to verify the identity of the requester before processing a personal data request.

If a user provides personal information concerning another person, the user represents that they have appropriate authority or another legitimate basis to do so and that the information is relevant to the corresponding purpose.

Personal information concerning third parties that is not necessary to manage the request should not be provided.

The website's contact channels are primarily intended for adults, organizations and institutions.

Where a request concerns a minor, information should be provided by a parent, legal representative or duly authorized person and should be limited to what is strictly necessary.

Our use of cookies and similar technologies is described in our Cookie Policy.

Our website may contain links to third-party websites. TACT Costa Rica does not control the privacy practices of those websites and recommends reviewing their policies before providing personal information.

This Policy may be updated when our operations, technology, functionality or legal requirements change.

The date of the latest update will appear at the beginning of this document.

Privacy and personal data inquiries:

privacidad@tactcr.com

TACT COSTA RICA / ECEMU DE ESTE S.A.

Cartago Central, Cartago, Costa Rica