Leos Wolny, a sole trader operating as IONAKA Travel from Vázquez de Coronado, San José, Costa Rica, is the controller of the personal data described here. Contact for privacy questions: info@ionaka.com, phone +506 8806 8816.
We plan to move the business to a company in the future. If this happens, we will tell you, and the data will be handled under the same rules.
| When | What |
|---|---|
| You send a request or contact form | name, email, phone / WhatsApp, country, travel dates, number of travellers, interests, budget (if you give it), and your message |
| You book | the above plus names of travellers, dates of birth or ages where needed for rates, passport details when required for permits or tickets, special needs, dietary or mobility information you give us |
| You pay | amount, date and payment method. Card payments are processed by our payment provider; we do not store your full card number |
| You visit our website | technical data (IP address, browser, device, pages visited, time spent) through cookies and similar tools |
| You subscribe to our newsletter | your email address and name |
| You write to us or chat | the content of your messages |
Health information (for example mobility limits, allergies) is sensitive. We ask for it only when needed to arrange your trip safely, and you give it voluntarily.
| Purpose | Legal basis (GDPR) |
|---|---|
| Answer your request and prepare a proposal | steps requested by you before a contract (Art. 6(1)(b)) |
| Arrange and manage your booking, payment, vouchers and support | performance of the contract (Art. 6(1)(b)) |
| Comply with tax, accounting and legal duties | legal obligation (Art. 6(1)(c)) |
| Send newsletters and offers | your consent (Art. 6(1)(a)); you can withdraw it at any time |
| Website analytics and non-essential cookies | your consent (Art. 6(1)(a)) |
| Security, anti-spam and fraud prevention, defending legal claims | legitimate interests (Art. 6(1)(f)) |
| Health information given to arrange your trip | your explicit consent (Art. 9(2)(a)) |
We share only the data needed with:
We do not sell your data. Our main tools include WordPress with web hosting by A2 Hosting, WPForms and Contact Form 7, Cloudflare (spam protection and DNS), Google Analytics, Jetpack, a cookie-consent tool, a live-chat widget and social media feeds (Instagram, Facebook, YouTube, TikTok, X).
We operate in Costa Rica and work with suppliers in Costa Rica and other countries, so your data is transferred outside the EU/EEA. Where the destination country has no EU adequacy decision, we rely on the contract between you and us (Art. 49(1)(b) GDPR), on standard contractual clauses with our IT providers, or on your consent.
We use necessary cookies and, with your consent, analytics and marketing cookies. You can change your choice at any time through the cookie banner or your browser. Blocking some cookies may affect parts of the site.
If GDPR applies to you, you have the right to access, correct, delete, restrict or object to the use of your data, to receive it in a portable format, and to withdraw consent at any time. Write to info@ionaka.com; we answer within one month. You can also complain to your national data protection authority or, in Costa Rica, to PRODHAB.
We use reasonable technical and organisational measures: encrypted connections (SSL), access controls, spam and malware protection, and a secure payment link. No system is completely secure.
Our website is not directed at children under 16. We process data about children (names and ages) only as provided by a parent or guardian to arrange a trip.
Our site links to and embeds content from third parties (maps, videos, social media). They have their own privacy policies and may set their own cookies.
We may update this policy. The date below shows the latest version.
Last updated: October 2026