Last updated: 12 September 2026

1. Who is responsible for your data

The controller of the personal data collected through this site is [PENDING: registered company name], referred to here as AST Surf Hotel, with its address at Malecón Turístico, Hotel AST, Puerto de La Libertad, La Libertad, El Salvador.

You can reach us by phone at +503 7210-5503 or by email at contact@adventuresportstours.com.

2. What data we process

This site has a contact form. What you write in it is not stored in any database: it is sent straight to our email and nothing is kept on the site. There is no user registration, no newsletter signup and no other collection mechanism.

From the form we process your name, your email address, your phone number, what you are interested in, the room you would like, the dates of your stay, the number of guests, your surfing level and the message you choose to send us, for the single purpose of answering your enquiry.

When you browse, we also process:

• Technical browsing data. Our server records the date and time of the visit, the pages requested and the browser type. This is automatic and serves to keep the site secure and working.

We do not process sensitive data through this site. If you write to us by email, whatever you choose to include in that message is treated with the same confidentiality.

3. Purpose and legal basis

Technical browsing data is processed on the basis of our legitimate interest in the security and correct operation of the site. The contact form is processed on the basis of your own request, since you send it to us in order to be answered.

4. Cookies and third-party services

This site uses no analytics and no advertising cookies. We do not measure your browsing, we do not build profiles and we do not share your activity with advertising platforms. That is why we do not ask you to accept cookies: there is nothing to accept.

The only cookies we use are technical and necessary for the site to work securely (the session and the protection of the form). They do not require your consent and cannot be switched off.

The site does load some external services in order to work, and those services receive your IP address simply by being loaded:

• Google reCAPTCHA, to tell a person from an automated program and protect the form from bulk submissions. This is a security measure.
• Google Maps, to show our location on a map.
• Public content delivery networks, which serve the libraries the page is drawn with.

Google is a company based in the United States and acts as an independent controller for the data it receives through these services. You can read its policy at policies.google.com/privacy.

5. Who else can access your data

Technical maintenance of this site is carried out by SOLID S.A. de C.V., acting as data processor on behalf of AST Surf Hotel and only on our instructions. You can contact the processor at contact@solid.com.sv. Form messages are delivered through an email delivery service contracted by the processor.

We do not sell, rent or transfer personal data to third parties.

6. Where the site is hosted, and for how long data is kept

The site is hosted on servers located outside El Salvador. This international transfer is carried out ensuring that the processing complies with the principles of El Salvador's Personal Data Protection Law.

Server technical logs are kept for a maximum of 30 days. Visitors' IP addresses are not stored in full: they are truncated before being written, so they cannot identify a person.

Because the contact form is not stored, anything you send through it exists only in our email and is kept for as long as it is needed to deal with your enquiry.

7. Your rights

The law gives you the rights of access, rectification, cancellation, objection, portability, erasure and restriction over your personal data. In practice you can ask us to:

• Tell you what data of yours we process and for what purpose.
• Correct anything incomplete or out of date.
• Delete it.
• Object to a particular processing, or ask that it be restricted.
• Send you your data in a format you can reuse.

To exercise any of these rights, write to us at contact@adventuresportstours.com. There is no charge, and we will answer within twenty working days of your request. That period can be extended by a further twenty working days where the complexity of the case justifies it, and we will tell you if that happens.

If you believe we did not handle your request properly, you can take it to El Salvador's Agencia de Ciberseguridad del Estado.

8. Changes to this policy

If we change this policy we will publish the updated version on this same page and change the last updated date shown at the top. Where the change is significant we will announce it visibly on the site.