BENEFICIOS DE SALUD ACCESS SOCIEDAD ANÓNIMA

PRIVACY POLICY

Thank you for visiting the Beneficios de Salud Access Sociedad Anónima’s (“Sana Sana”) website. Your privacy is important to us. To better protect your privacy, this web Privacy Policy (“Privacy Policy”) explains how we collect and use your personal information. This Privacy Policy applies to information collected through any website, mobile applications, and/or online or mobile technology, and/or digital tools that display or link to this Privacy Policy (collectively, our “Website”). This Privacy Policy also applies to information shared with us by our partners and by third parties. This Privacy Policy does not apply to: (i) information collected from you offline or through websites and other online services that are not displayed on or linked to this privacy statement, including third-party websites to which our online services may link; or (ii) information that would be considered protected information under applicable laws and regulations. Sana Sana’s use and disclosure of such protected personal information is set forth in our Privacy Policy Notice.

Collection and Use of Personal Information
Sana Sana understands that security and privacy are important issues for those who visit our Website and recognizes that it has an obligation to keep information secure and confidential. Our Website provides you with the opportunity to voluntarily submit forms to request additional information about Sana Sana. In the course of those transactions, you may provide us with personal demographic information or possibly detailed medical information. We use the information you provide for the sole purpose of helping to respond to your request. We do not collect information that personally identifies you, except for information that you voluntarily provide to us.

In order to investigate or fulfill your request, your information may be shared with other Sana Sana employees. All Sana Sana employees rigorously follow our Privacy Policy and comply with the rules and regulations provided by law to ensure that the private information they encounter in the course of their work is treated with the utmost respect.

Sana Sana will never sell, rent, loan, trade, or lease information collected on our Website. However, we may use this information within the Sana Sana group or with affiliated companies or a third-party vendor to perform administrative, technical, or other activities that help us provide services to you. We seek to ensure that third-party providers comply with the same privacy practices as Sana Sana. Except as noted above, Sana Sana will not disclose individualized information to third parties unless required to do so by request of government authorities, legal process, or other legal requirements.

Personally identifiable information collected through the Website is not stored on the Website; it goes into administrative systems in the same manner as information from paper forms is currently handled. To help to better serve you, we collect general statistical information about the content watched. You have the right and ability to exit the Sana Sana Website at any time and not to remain in an active session. If you choose to remain logged in to our Website, you are implicitly consenting to our privacy and security policies.

Sana Sana encourages legal guardians to be aware of and participate in their children’s online activities. We strictly adhere to applicable laws and regulations and will not record or collect personally identifiable information from any child under the age of 13 without the prior and verifiable consent of that person’s legal guardian.

Acceptance of the Terms and Conditions of the Privacy Policy
This Privacy Policy supplements our general agreement to the Terms of Use; we encourage you to read that agreement. By using www.sanasana.com (the “website” or “site”), you agree to be bound by the terms of this Privacy Policy and the Terms of Use agreement. If you do not agree to the terms and conditions, do not use the site. In order to make our site more accessible to end users, Sana Sana will be able to add expandedfeatures and functionality. As additional features and functions are added, this Privacy Policy will be updated to adequately indicate how the information and features are being used. Please periodically review this Privacy Policy, as it may change at any time. Your continued use of this site following the posting of any modifications to these terms means that you have accepted such modifications.

Links to Third-Party Websites
This website may contain links to other sites operated by our business affiliates or unaffiliated third parties. Once you leave our website, you may or may not see a new web address in your web browser bar. Please review the privacy policies of the linked site, and if you do not agree to be bound by the terms of that site’s policies, we recommend that you end your visit to that site. We are not responsible for the privacy and other policies and practices of third-party websites.

Collection and Use of Other Information: Cookies
What are Cookies?
A cookie is a small file that a website transfers to your computer to remember specific information about your session while you are logged in. Your computer will only share the cookie information with the website that provided it, and no other website will be able to request it. There are two types of cookies: session and permanent. Session cookies only last for as long as the web browser is open. Once you close your browser, the cookie disappears. Persistent cookies store information on your computer for longer periods. Sana Sana websites may use session cookies for technical purposes, such as allowing better navigation around the site or allowing you to customize your preferences for interacting with the site.
The information is not collected for commercial purposes and Sana Sana does not sell or otherwise distribute the information collected from the website for commercial purposes. Sana Sana may also use persistent cookies to remember you between visits, for example, so that you have to enter your username each time you visit the site. If you wish, you can block or delete cookies from your hard drive; however, when blocking or deleting cookies you will need to re-enter the information.

There are 3 types of cookies that we use on our website:

Websites use essential cookies to perform their basic functions, such as allowing access to secure areas ofthe website.
Functionality cookies provide visitors with a more personalized experience, such as remembering a user’s name, selected language, email preferences, etc.
Analytical cookies monitor traffic on the website to see, for example, which pages people are viewing, for how long, and which pages they visit before and after a particular page.
Browser Cookies
Your browser may offer you the option to refuse some or all browser cookies. You can also delete cookies from your browser. For more information on how to manage browser cookies, please follow the instructions provided by your browser.

Change your Settings

You can also block certain cookies by adjusting the settings on our sites. To disable these cookies, you will need to change your browser’s cookie preferences settings. If you choose to block these cookies, our website may not work as it should and any preferences you have may be lost.

Mobile Device Identifiers
Your mobile operating system may allow you to opt out of the use of certain device identifiers for interest-based advertising. You should refer to the instructions provided by your mobile device manufacturer; This information is usually available under the “Settings” feature on your mobile device.

Third-Party Cookies

hs-messages-is-open
This cookie is used to determine and save whether the chat widget is open for future visits. It restarts to close the widget again after 30 minutes of inactivity.
Expiration: 30 minutes

hs-messages-hide-welcome-message
This cookie is used to prevent the welcome message from reappearing for one day after it is discarded.
Expiration: 1 day

_hstc
The main cookie for the accompaniment of visitors. It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).
Expiration: 13 days

hubspotutk
This cookie is used to track a visitor’s identity. This cookie is passed to HubSpot in the form submission and is used when deduplicating contacts.
Maturity: 13 months

_hssc
This cookie tracks sessions. This is used to determine whether HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and the timestamp at the start of the session.
Expiration: 30 minutes

_hssrc
Each time HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session.
Deadline: At the end of the session

messagesUtk
This cookie is used to recognize visitors who communicate with you through the messaging tool. If the visitor leaves your site before adding you as a contact, you will have this cookie associated with your browser. If you communicate with a visitor who then returns to your site in the same Cookie browser previously used, the messaging tool will load their conversation history.
Maturity: 13 months

Google Analytics will create the following cookies:
_ga
used to distinguish users
Maturity: 2 years

_gid
used to distinguish users
Expiration: 24 hours

_gat
It is used to speed up the application fee. If the implementation of Google Analytics is through Google Tag Manager, this cookie will be called _dc_gtm_
Expiration: 1 minute

HubSpot will create the following cookies:
_hs_opt_out
This cookie is used by the opt-in privacy policy to remember not to ask the visitor to accept cookies again.
This cookie is set when you give visitors the option to opt out of receiving them.
Maturity: 13 months

_hs_do_not_track
This cookie can be set to prevent the tracking code from sending information to HubSpot. Setting this cookie is different from disabling cookies as it still allows anonymous information to be sent to HubSpot.
Maturity: 13 months

hs_ab_test
This cookie is used to provide visitors with the same version of an A/B test page that they have previously viewed.
Deadline: At the end of the session

_key
When you visit a password-protected page, this cookie is set so that future visits to the page from the same browser do not require you to start a new session. The cookie name is unique for each password protected page.

Security
Unauthorized use of this site may result in criminal and/or civil prosecution. We have implemented policies and procedures that protect the privacy and confidentiality of the information we collect and maintain about you. All of your personal information is stored on our secure servers behind a firewall and access to the data is strictly controlled. Sana Sana uses physical, electronic, and procedural safeguards to safeguard any personally identifiable data stored on our computers. Only authorized employees have access to the information you provide to Sana Sana.

Visiting Our Website from Outside Costa Rica
We are located in Costa Rica. The services described on our website are intended only for customers in Costa Rica. If you visit our website, or any part of it, from outside of Costa Rica, please be aware that your information may be transferred to, stored, or processed and maintained on computers or servers located outside of your state, province, country, or other governmental jurisdiction where privacy laws may not be as protective as those in your jurisdiction. If you are located in the European Economic Area, you may have additional rights, including the right to access, correct, delete, restrict processing, and object to processing and profiling your information, and to complain to a supervisory authority within your jurisdiction. By using any part of our website, you understand and consent to the transfer of your information to Costa Rica and the third parties with whom we share it, as described in this Privacy Policy.

Changes to the Privacy Policy
Although most of the changes are likely to be minor, there is a possibility that Sana Sana will change its Privacy Policy. We encourage visitors to frequently visit this page for changes to its Privacy Policy. If we make changes, we will notify you by reviewing the changelog below, and in some cases, we may provide additional notice (such as adding a statement to our homepage or sending you an email notification). Your subsequent use of the Website following a change to our Privacy Policy will be subject to the updated policy.

How to Contact Us
If you have questions and concerns about Sana Sana’s privacy procedures or would like to access or modify your personal information collected on this website, please email us at legal@sanasana.com.
Communications should be as complete and descriptive as possible; We will try to answer your concerns as soon as possible.

Email
Please note that individualized information transmitted through email correspondence between you and Sana Sana, other than transmission by Sana Sana’s site, is not encrypted. As a result, other internet users may be able to access and view such email correspondence without your knowledge or authorization while the information is in transit. For that reason, to protect your privacy, if you have concerns related to your treatment or questions that would involve the disclosure of confidential information, please call a customer service representative at:

Sana Sana – Contact Center
+506 2103-0450

Once the problem is resolved, electronic copies of the email are saved in the system. However, hard copies may be kept in the Sana Sana archives. Information in emails may be transcribed to other Sana Sana systems or databases.