Privacy Policy
Last updated: August 27, 2026
1. Data Controller
The data controller responsible for the processing of personal data collected through this website is:
LAS DUNAS SURF RESORT SA
RUC: J0310000271496-7
Address: Santa MarĂa del Mar 11, Aposentillo, Nicaragua
Telephone: +505 84765211
Email: info@lasdunassurfresort.com
Website: https://lasdunassurfresort.com/
Hereinafter referred to as “LAS DUNAS SURF RESORT”, “we”, “us” or the “Controller”.
LAS DUNAS SURF RESORT processes personal data in accordance with applicable data protection legislation, including Nicaragua Law No. 787 on the Protection of Personal Data, and, where applicable, the General Data Protection Regulation (EU) 2016/679 (GDPR).
2. Personal Data We May Collect
Depending on how you use our website and services, we may collect different categories of personal data, including:
- First and last name.
- Email address.
- Telephone number.
- Information included in inquiries or requests.
- Information necessary to manage accommodation or service bookings.
- Information voluntarily provided through contact or booking forms.
- Technical information relating to browsing, such as IP address, device type and browser.
- Information collected through cookies and similar technologies, where the user has provided the required consent.
We do not intentionally request personal data that is unnecessary for the purpose for which it is collected.
3. Purposes of Processing
We may process personal data for the following purposes:
Handling inquiries
To respond to inquiries submitted through contact forms, email, telephone or other communication channels.
Managing bookings and services
To manage accommodation bookings, surf camps, activities, services and other requests made by users.
Customer service
To respond to questions, incidents, requests and communications relating to our services.
Administrative and contractual purposes
To manage payments, invoices, bookings, cancellations and other actions necessary to provide our services or fulfill a contractual or commercial relationship.
Marketing communications
Where permitted by applicable law and where the user has provided the required consent, we may send information about our services, promotions, news and activities.
Users may withdraw their consent to receive marketing communications at any time.
Website security and operation
We may process certain technical information to maintain the security, functionality and proper operation of the website.
Analytics
We use Google Analytics 4 (GA4) through the Google tag (gtag.js) to obtain statistical information about how visitors use our website, subject to the consent settings implemented on the website.
4. Legal Basis for Processing
Depending on the specific processing activity, the legal basis may include:
- The user's consent.
- Performance of a contract or taking steps prior to entering into a contract.
- Compliance with legal obligations.
- Our legitimate interests, where applicable and where these interests do not override the rights and freedoms of the user.
- Any other legal basis recognized by applicable legislation.
Where consent is required, it will be requested in a free, specific, informed and unambiguous manner.
Users may withdraw their consent at any time.
5. Google Analytics 4
This website uses Google Analytics 4 (GA4), a web analytics service provided by Google, to understand how visitors use our website.
GA4 may collect information relating to:
- Interactions with the website.
- Pages visited.
- Device and browser information.
- Approximate location information.
- The source from which visitors reached the website.
- Events and interactions occurring during browsing.
Analytics cookies will be used in accordance with the consent mechanism implemented on the website.
Google may process certain information on its own systems in accordance with its applicable terms and privacy policies.
6. Cookies
This website uses cookies and similar technologies.
Some cookies may be necessary for the operation of the website, while others, such as those used by Google Analytics 4, may be used for statistical and analytical purposes.
Non-essential cookies will be activated according to the preferences expressed by the user through the website's cookie consent mechanism.
For detailed information about the cookies used on this website, please consult our Cookie Policy.
7. Recipients of Personal Data
Personal data may be processed by:
- LAS DUNAS SURF RESORT and authorized personnel.
- Technology providers required to provide our services.
- Hosting, maintenance and security providers.
- Booking and payment service providers, where applicable.
- Analytics providers such as Google Analytics, where the user has provided the required consent.
- Public authorities, courts or other entities where disclosure is required by law.
Where third parties process personal data on our behalf, they will be required to process such data in accordance with applicable law and our instructions.
8. International Data Transfers
Some technology providers used by this website may be located outside Nicaragua and/or the European Economic Area.
Where the GDPR applies, international transfers of personal data will be carried out using an appropriate legal mechanism and applicable safeguards recognized under data protection legislation.
9. Data Retention
Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected.
Where a contractual or commercial relationship exists, data may be retained for the period necessary to manage that relationship and subsequently for the periods required by applicable legal obligations.
Data used exclusively for marketing communications will be retained while consent remains valid or until the user requests its removal.
Data processed through analytics services will also be subject to the retention periods configured within those services.
10. User Rights
Where applicable, users may exercise the rights granted by applicable data protection legislation, including:
- Right of access.
- Right to rectification.
- Right to update personal data.
- Right to deletion or cancellation.
- Right to object to processing.
- Right to withdraw consent.
- Right to request restriction of processing, where applicable.
- Right to obtain information about the processing of their personal data.
Requests may be submitted to:
info@lasdunassurfresort.com
Users may also exercise any other rights provided by applicable data protection legislation.
11. Security
LAS DUNAS SURF RESORT implements reasonable technical and organizational measures designed to protect personal data against loss, unauthorized access, alteration, disclosure or improper processing.
However, no electronic transmission or storage system can guarantee absolute security.
12. Children
This website is not specifically intended to collect personal data from children.
Where personal data relating to a minor is required for the provision of a service, the applicable legal requirements and necessary authorizations will apply.
13. Third-Party Links
This website may contain links to websites, platforms or services operated by third parties.
LAS DUNAS SURF RESORT is not responsible for the privacy practices of such third parties. Users are encouraged to review their respective privacy policies before providing personal data.
14. Changes to This Privacy Policy
LAS DUNAS SURF RESORT may update this Privacy Policy when necessary due to legal, technical, operational or service-related changes.
The current version published on this website will be the applicable version.
15. Contact
For any questions regarding this Privacy Policy or the processing of personal data, please contact:
LAS DUNAS SURF RESORT SA
Santa MarĂa del Mar 11, Aposentillo, Nicaragua
RUC: J0310000271496-7
Telephone: +505 84765211
Email: info@lasdunassurfresort.com
Website: https://lasdunassurfresort.com/
