This English-language version is provided for informational convenience. In the event of any discrepancy in interpretation, the Spanish-language version shall prevail.
Last updated: September 2026
1. Data Controller
The person responsible for the processing of personal data collected through this website is:
Rosa C. Chacón Vásquez
Attorney-at-Law · Costa Rican Civil-Law Notary
Nicoya · Guanacaste · Costa Rica
info@rosaccv.com
RCCV is the identity of her professional practice and is not a separate legal entity.
2. Purpose of this Policy
This Policy explains what information may be collected through rosaccv.com, the purposes for which it is used, and the measures adopted to protect it.
Personal data is processed in accordance with applicable Costa Rican law, including Law No. 8968, Ley de Protección de la Persona frente al Tratamiento de sus Datos Personales, and its regulations.
3. Information Provided Through the Contact Form
When a person uses the contact form, the following information may be provided: name; email address; telephone or WhatsApp number; a general reference to the nature of the matter; and a brief description of the situation.
Fields identified as mandatory are necessary in order to process the inquiry. If they are not completed, the form cannot be submitted.
This information is used exclusively to receive, assess, and respond to the inquiry and, when appropriate, to coordinate the appropriate way to address it.
Submission of the form does not constitute acceptance of the matter, does not by itself establish a professional relationship, and does not automatically confirm an appointment.
4. Sensitive Information
The contact form is intended only for an initial inquiry.
Documents, case files, photographs, medical data, financial information, passwords, credit or debit card numbers, identity documents, or other particularly sensitive information that is not necessary to briefly explain the reason for contact should not be submitted through this form.
If additional documentation or information is later required, the appropriate method for providing it will be indicated.
5. Consent
By voluntarily completing the form and selecting the corresponding checkbox, the person authorizes the processing of the information provided for the specific purpose of responding to the inquiry.
The information is not used for advertising, profiling, commercial communications, or purposes other than those described in this Policy.
A person may subsequently request rectification, updating, or deletion of personal data when legally applicable.
6. Technical Service Providers
ChatGPT Sites / OpenAI
This website is hosted through ChatGPT Sites. OpenAI may process data and technical records necessary to host, maintain, secure, and operate the website on behalf of its owner.
OpenAI provides that when a ChatGPT Site collects personal data from visitors, the Site owner acts as the controller and OpenAI processes it for hosting and related support.
Resend
Messages submitted through the contact form are processed by Resend for delivery by email to info@rosaccv.com. The information provided through the form, together with technical information necessary for message delivery, is transmitted to this provider.
Open and link tracking features are not used. Resend may temporarily retain messages and delivery-related records in accordance with its applicable terms and policies.
Cloudflare Turnstile
The contact form uses Cloudflare Turnstile to reduce automated and abusive submissions.
Turnstile may process technical signals from the browser and connection, including IP address, User-Agent, TLS fingerprint, sitekey, and origin, to distinguish human traffic from automated activity. Cloudflare states that Turnstile does not access, store, or transmit the content entered into the form fields.
7. Storage
The website does not use an independent web database intended to store inquiries.
Information submitted through the form is technically processed for delivery and received at the professional email address. Technology providers may retain certain data or technical records in accordance with their functions and policies.
Messages may remain in the professional email account for the period reasonably necessary to respond, determine whether the matter can be accepted, and comply with applicable obligations.
If a professional relationship is established, required information will be managed within the corresponding file and subject to the duties and retention periods applicable to that relationship.
Costa Rican law requires that retention remain connected to the purpose of processing; PRODHab also recognizes limitations on retention once that purpose has ended.
8. Cookies and Similar Technologies
rosaccv.com currently does not use analytics, advertising, profiling, or commercial tracking tools.
The website uses only technical mechanisms necessary for its operation and security.
After a successful form submission, a technical HttpOnly cookie containing only a functional indicator is used. It does not contain personal data and expires approximately five minutes after issuance. Its sole purpose is to permit proper access to the form confirmation page.
Cloudflare Turnstile may use technical mechanisms strictly necessary for security verification. Because no advertising or analytics cookies are used, no consent banner for non-essential cookies is displayed.
9. Security and Confidentiality
Reasonable technical and organizational measures are used to protect information against loss, unauthorized access, alteration, or improper disclosure.
Among other measures, the form uses client-side and server-side validation, size and format restrictions, Cloudflare Turnstile protection, a honeypot mechanism, and transmission through authenticated services.
Costa Rican law imposes duties of security and confidentiality. Nevertheless, no electronic transmission or storage system can guarantee absolute security.
10. International Processing and Technology Providers
Some technology providers used to operate this website may process information outside Costa Rica. In particular, hosting, automated security, and email delivery services may involve international infrastructure.
These providers act as technology service providers for the purposes described in this Policy and are not authorized to use information submitted through the contact form for their own commercial purposes.
11. Data Subject Rights
The person to whom the data relates may, when applicable under Costa Rican law, request access, correction, updating or deletion of information, and withdrawal of consent where legally permitted.
Law No. 8968 recognizes the fundamental right of informational self-determination in connection with the processing of personal data.
Requests may be sent to info@rosaccv.com. Reasonable information may be requested to verify identity.
12. Minors
This website and its contact form are not specifically directed to minors.
If it becomes necessary to process information relating to a minor in connection with a legal inquiry, the appropriate method for receiving and handling that information will be assessed subsequently.
13. Changes
This Policy may be updated when website functionality, technology providers, or applicable legal obligations change. The date of the most recent update will appear at the beginning of this page.