Privacy Policy - MBA Management Solutions

Here’s everything you need to know about our privacy policies. If you’re looking for a summary of our rental policies, including our cancellation policy, view our full rental agreement.

Last Updated: November 22nd, 2023.

This Privacy Policy describes the privacy practices of MBA Management Solutions SRL and its related entities (referred to as “MBA,” “we,” “our,” or “us”), and in particular how we collect, use, and disclose certain information.

1. What does this Policy cover?

This Privacy Policy applies to our interactions with our customers and visitors, including but not limited to property rentals, rental management, marketing of rental listings, provision of guest services, your use of MBA website, social media, and advertisements or communications relating to any services we offer (“Services”), but excluding any MBA services that state that they are offered under a different privacy policy.

This Privacy Policy does not apply to any third-party websites that may be accessible through an MBA website, or to third-party websites on which MBA advertises.

2. Information collected or received

We collect certain personal information about you as necessary to provide services that you request, to fulfill the terms of a contract between you and us, or to comply with our legal obligations. If you refuse to provide this type of personal information, we may not be able to provide services to you.

When you reserve, pay for, or stay in a property through MBA.

Contact information. When you reserve or stay in a property through MBA, we may collect information such as your first and last name, contact phone number, email address, and other digital contact information. We may also collect names and contact information that you provide about other guests.
Payment information. When you make a purchase, we collect your payment information, such as information from your credit card, debit card, or check, and your billing address, to allow us to process payments.
Identity information. To prevent fraud, to comply with the requirements of applicable law, or to meet the requirements of a hotel, resort or community association, we may collect proof of identity or proof of age, such as a government-issued driver’s license, passport, or other identity information in connection with your stay.
Other information. We may collect information about your age and the ages of other guests in connection with your stay at a property that imposes a minimum renter age or requires this information for check-in. We may collect additional personal information in connection with your stay to comply with the requirements of applicable law, or to meet the requirements of the community association.

When you choose to provide us with additional information.

Information provided during communications with MBA. When you communicate with MBA in person, or by phone, email, text message, application, or other electronic means of communication, we may collect any information that you choose to provide during the communication.
Other information you choose to provide. We may collect other information you choose to provide to MBA, for example when you submit a review, comment or request, interact with a MBA social media account, attend an MBA event, refer a potential guest or owner, conduct a search, enter a contest, sweepstakes, or promotion, designate a preferred language or currency, or use other aspects of our Services.
We may collect certain information about you from third parties. Each third party that collects or processes your information does so subject to its own privacy policies. We encourage you to review the privacy policies of websites that you visit. MBA does not control or oversee the manner in which third parties collect, use, or disclose your information.
Information provided in connection with a booking or stay. If you use a third party to book a stay in a property for which MBA provides rental management or marketing services, the third party may send us personal information relating to your stay that you provided to the third party, such as your name, contact information, payment method, the names of other renters or guests, reservation dates, and identity information. We may collect information about you from your friends or family members, for example if a friend or family member includes you as part of their reservation. Third parties who provide services to you in connection with your stay, such as a utility, contractor, service provider, tour operator, concierge, resort or community association, or government official, may send us information about the services you used if permitted or required to do so by applicable law. The type of information we receive varies depending on the type of service that was provided. To the extent allowed by applicable law, we may obtain police or background check information or potential fraud alerts from third-party providers of identity verification, criminal background check, or money laundering prevention services.
Other information we obtain from third parties. We may obtain information from business partners about your use of the Services or services provided by third parties. Such information may include your travel preferences and history, products or services you like, or reviews you submit. We may obtain your name and mailing address or other contact information from third parties such as government agencies, direct mailing service providers, or vendors who compile information from public records. Other than described in this Privacy Policy, we do not intentionally collect sensitive personal information, such as information about your medical history, political views, union membership, religious or philosophical beliefs, racial or ethnic origin, or genetic data.

We automatically collect certain information about you when you visit an MBA website or communicate with MBA.

Information about your site visits. When you visit the MBA website, we collect information about your activity on the site. We may track the date and time you accessed the site, the pages you visit and how long you viewed them, your searches for properties, your booking activity (including started, attempted, and abandoned bookings), whether you have followed links to other websites, and your other interactions with the site. Your internet browser may automatically transmit information to us, such as what website you came from.
Device and browser information. We may automatically collect information about the hardware, operating system, browser, and extensions or add-ons you are using, IP address, proxy server, ISP or mobile carrier, device identifier, and any crash data associated with your visit.
Location information. If you use our mobile websites or applications, we may automatically collect location data obtained from your mobile device’s GPS. Most mobile devices allow you to control whether an application can use the device’s location services. If you use our websites, we may collect information about your location derived from your IP address.
Cookies, web beacons, and similar technologies. We may use tracking tools like browser cookies, flash cookies, and web beacons. We may also engage certain business partners to use these tracking tools on MBA website or to track your online behavior on other sites on our behalf.
Communication. When you communicate with MBA using electronic means, we automatically collect the contents of the communication. In some cases, where permitted by law, we may automatically record phone calls for quality assurance and training purposes.

3. How we use your information?

We use your information in different ways, depending on which Services you use and how you use those Services.

We use information about you to provide Services that you request or to fulfill the terms of a contract between you and us. We use information about you to respond to your inquiries or requests; to communicate with you about reservations and stays; to fulfill contractual or legal requirements relating to your request or the Services you are using (for example, to permit you to stay in a property you have reserved); to provide customer service; to provide rental management or similar services; to detect and prevent fraud or illegal activity; and to make or receive payments to or from you.

To optimize, customize and improve our services and your user experience.
We use information about you and your use of the Services to optimize, customize, and improve our Services, our systems, and your user experience. We may use your information to respond to comments, suggestions, and reviews; to personalize your user experience, including changing displayed properties based on your preferences and search and booking history; and to improve and optimize the performance of our websites or applications. We may use your information to send notifications and offers relating to a stay you have booked. We may use location data to find locations nearest to you and provide driving directions to a property you have booked.

To conduct, measure, and improve our advertising and marketing.
We use information about you to communicate with you about MBA and MBA Services as permitted by law, including sending advertisements and marketing communications. We may use information about you and your search, browsing, and booking history to send promotional messages and offers that may be of interest to you; to analyze and improve the effectiveness of our advertising and marketing efforts; or to conduct marketing campaigns on third-party websites or social media platforms.

We also use your data to produce aggregated information that does not identify you, such as information about ad impressions served or clicked on.

To comply with our legal and contractual obligations and for security and investigation purposes.
We may use information about you to comply with our legal obligations, such as requirements in some jurisdictions to collect and store certain identity and contact information in connection with a booking or information about your tax identification information in connection with making payments to you. We may also use your personal information to comply with our contractual obligations to you or to certain third parties. We may also use your personal information to enforce the terms of an agreement between us and you or a third party; to enforce the terms of our Terms of Service or other policies; or to resolve disputes with you or another MBA customer. We may use your information to conduct security investigations or to conduct or cooperate with investigations related to potential criminal activity. We may use your information to detect and prevent fraud, security incidents, and criminal or harmful activity.

4. How we share or disclose your information

With third parties in order to fulfill our contractual obligations and/or provide Services.

We share information about you to provide Services that you request or to fulfill the terms of a contract between you and us. We need to share this information to adequately perform the terms of the contract between us and you.
We may share information with our local service providers, such as maintenance technicians, contractors, and housekeepers, to allow us to provide services you request and that we are contractually obligated to provide. We might also authorize our local service providers to collect information on our behalf. If you are staying in a property reserved through MBA, this information may include your full name, the names of other guests, and your telephone number or email address.
We might also share your contact information with property owners and service providers to allow them to respond directly to your reviews and questions. We may share your information with third parties who provide services to us in connection with a booking.These third parties may provide services related to payment processing; access to property; fraud prevention, identity verification, and risk assessment; and anti-money laundering compliance. These providers’ access to your information is limited to the information they reasonably require to perform specific tasks on our behalf, and they are contractually bound to use it only for purposes for which it is disclosed.
Some community associations, government entities, or other third parties may require us to provide guest information in connection with a specific reservation for a property under their control or jurisdiction. We share information with these third parties to the extent it is legally required or that those parties require us to do so as a condition of the rental. This information may include your full name and age, the names and ages of other guests, your telephone number, your address and your government-issued identification (such as a driver’s license or passport number). In some jurisdictions we are required to disclose guests’ full names, contact information, and transaction information related to a rental stay to the owner of the property.
We provide your information to third parties at your direction or request. For example, we will provide your information to a third party if you ask us to do so to facilitate the resolution of a dispute.

With third parties in order to offer additional services.

We may share information about you with local third-party business partners who may offer additional services in connection with a property you have booked. For example, since we offer concierge services, we may provide your name and email address to book the tours and experiences that you want to have.

In connection with a sale, merger, or change of control.

We may share information in connection with the sale or all or part of our business, a merger, a change of control, or a reorganization, or in contemplation of any of these events (for example, as part of the due diligence process). Any entity that buys us or any part of our business, or any successor entity following a merger, change of control, or reorganization, will have the right to use your personal information, but only as permitted in this Privacy Policy unless you agree otherwise.

To comply with the law, respond to legal requests, resolve disputes, prevent harm to persons or property, and protect our rights.

We may disclose your information, including your personal information, to a court, law enforcement agency, government agency, or other authorized third party in response to a court order, subpoena, warrant, or other legal process or legal requirement, or if we have a good faith belief that disclosure is reasonably necessary to (1) investigate, prevent, or take action regarding alleged, suspected, or known illegal activities or any activity that may expose us, you, or any third party on whose behalf we act to liability; (2) comply with our legal obligations; (3) comply with legal process and to investigate, respond to, or defend ourselves against any claims or allegations asserted against us; (4) comply with or respond to an audit conducted by a government agency; (5) enforce our Terms of Service or the terms of any agreement between us and you; (6) prevent or mitigate harm to persons or property; or (7) exercise or protect our rights, the rights of our employees, the rights of third parties on whose behalf we act (such as the owners of properties we manage or market), or the rights of the public.
We may attempt to notify you about a legal request or demand for your personal data, where we reasonably believe that notification is appropriate, except where (a) disclosure is prohibited by applicable law or by the terms of the legal process or court order we receive, (b) where the request is an emergency, or (c) we believe providing notice would be futile, would create or increase a risk of harm to persons or property, or would create or increase a risk, or prevent the detection of fraud. We may dispute legal demands in instances where we believe a request is overbroad or lacks proper authority. However, we do not undertake to provide notice of every request or challenge any legal demand.

With vendors that perform services on our behalf.

We may share your information with vendors or other third parties that provide us with services or software. For example, we may provide your contact information to operators of communication or marketing platforms so that we may use their platform software to communicate with you. We might share information with a business partner who is running a joint promotion with us or who provides a product or service in partnership with us. We may disclose information to our outside auditors in connection with their auditing services.

With social media platforms and advertising publishers.

Where permitted by applicable law, we may use certain personal information about you, such as your email address, to hash and share it with advertising publishers such as Facebook or Google to generate leads or otherwise promote our Services. We carry out these activities based on our legitimate interest in conducting marketing activities to offer you services that may be of interest to you. You may ask us to cease using your email address for these marketing activities by submitting a request via info@mbaservicescr.com

We may aggregate your information.

We may aggregate data about individuals who use the Services, meaning we combine and anonymize this information. We may share this aggregated information with third parties to help describe our business, analyze our marketing efforts, comply with regulations, obtain insights about our business practices, and refine the services we offer, and for other business purposes. When we share aggregated information, we do not share personally identifiable data about individuals.

5. Your Rights & Preferences

Communications from MBA or Third Parties.

Transaction-related communications from MBA.
You may receive business-related communications from MBA relating to a booking you have made or an inquiry about a property. Because these communications are necessary for us to provide you with requested services, you cannot opt out of such communications.

Marketing communications from MBA.
You may receive marketing communications from MBA as permitted by law. You can register or change your preferences to receive or not receive marketing communications from us by clicking the “unsubscribe” link in the communication you have received or by submitting a request via info@mbaservicescr.com. Please allow sufficient time for your preferences to be processed. Even if you opt out of receiving marketing messages, we may still contact you for transactional purposes like confirming or following up on a reservation or home inquiry or asking you to review your stay. If you later opt back into receiving marketing communications from us, we will remove your information from our opt-out databases.

Your rights to access and control your personal information.
In addition to the choices described elsewhere in this document, you may have additional rights concerning the collection, use, and sharing of your data. To the extent that we are legally or otherwise obligated to fulfill one or more of the following requests on the basis of your legal right(s) to cause us to do so, you may exercise any of the rights described in this section by submitting a request through info@mbaservicescr.com.

Update your personal information. You may ask us to correct inaccurate or incomplete personal information about you.
Right to access your personal information. In some jurisdictions, you may have the right to obtain a copy of your personal information in our possession. You may also have the rights to request a copy of personal information that you provided to us in machine-readable form, and to request that we transfer this information to another service provider if technically feasible to do so.
Right to request deletion of your data. In some jurisdictions, you may have the right to ask us to erase or delete some or all of your personal information. Requests to delete your data are subject to the “data retention and deletion” provisions of this Privacy Policy.
Right to object to, withdraw consent to, or limit use of your information. In some jurisdictions, you may have the right to ask us to stop using some or all of your personal information for certain purposes if our processing of your information is based on legitimate interests. In such cases, we will no longer use your personal information for such purposes unless: (i) our use is required to establish, exercise, or defend legal claims or (ii) we demonstrate compelling legitimate grounds for our use of the information. If our use of your personal information is based on your consent, you may withdraw your consent at any time by sending a request stating what consent you are withdrawing. Any withdrawal of consent is prospective only (meaning it does not apply to our use of your data before we receive the withdrawal).
In some jurisdictions, you may also have the right to limit the ways we use your personal information, especially if the information is inaccurate or our use of the data is unlawful.

Data retention and deletion
We retain your personal information for as long as necessary to perform the contract between us and you and to comply with legal requirements. The length of time we retain your information depends on type of information we have collected, the purpose for which we have collected it and the laws of the applicable jurisdiction(s) (usually the jurisdiction of your residence, the jurisdiction of the property where you have booked a stay or that we are managing, or both).

In general, we retain your personal data as necessary to comply with our legal obligations, such as obligations to retain and report information for tax, auditing, and regulatory compliance purposes. We may also retain some of your personal information as necessary to meet our legitimate business interests, such as to enhance our ability to detect fraud or to assert or defend against an actual or potential legal claim by you or a third party.

If you share information with others in connection with your use of the Services, such as by writing a review or engaging directly with a third party, your information may continue to be visible to the public or to the third party even after we delete it.

Even after we delete your information, portions of your data may remain in aggregated, anonymized, or tokenized form, but are not associated with personal identifiers. In addition, because we regularly back up our systems, portions of your personal information may continue to reside in backup copies for a period of time after it is deleted from our main systems. We will retain certain account-related reservation and transaction information as needed to comply with any applicable legal requirements, or to meet our legitimate business interests (including to assist or defend against an actual or potential legal claim by you or a third party).

Lawful bases to collect, use, and share your personal information
We will only collect, use, and share your personal information where we have a lawful basis to do so. Lawful bases include (i) contract (if processing is necessary for the performance of a contract with you), (ii) consent (where you have given consent), (iii) legitimate interests or (iv) as otherwise may be allowed by applicable law and consistent with this Privacy Policy.

6. Links to third-party sites

Our websites may contain links to third-party websites. If you click on one of those links, you will be taken to websites we do not control and for which we are not responsible. This Privacy Policy does not apply to the information practices of those websites. You should read the privacy policies of other websites carefully.

Some portions of the Services implement Google Maps/Earth mapping services, including Google Maps API(s). Your use of Google Maps/Earth is subject to Google’s terms of use, which incorporates Google’s Privacy Policy.

7. Our sites and children

Our websites and mobile applications are not created for children. To our knowledge we do not collect information online from children under 18. If you are a parent or guardian and think we have information about your child, please contact your data controller at the address listed in the next section.

8. Contacting us

If you have any questions regarding this Privacy Policy, you may contact us using the information below.

MBA Management Solutions SRL
Bahía Ballena, Puntarenas
Calle La Colonia
Zip code: 60504
By email: info@mbaservicescr.com

9. Changes to this Notice

We reserve the right to amend this notice at our discretion and at any time. When we make changes to this notice, we will post the updated notice on this page and update the notice’s effective date.