Your provision of your personal information to us is completely voluntary. “Personal information” is information that can specifically identify you. We do not collect personal information unless you submit that information to us. Categories of personal information we may collect include:
We obtain information about you when you use our website, request one of our visitor guides, take an interactive quiz, or subscribe to email newsletters. You can also provide us personal information via phone, chatting via our live chat service on the website, personal emails, or US Post.
You can choose not to provide certain information. We use the information that you provide for such purposes as responding to your requests, improving our services, and communicating with you.
We also sometimes receive updated delivery and address information from our shippers or other sources so that we can update our records and communicate more easily.
The personal information we collect when you browse our website, submit a visitor guide request, subscribe to email, or take an interactive quiz might include your:
This list is not exhaustive and, in specific instances, we may need to collect additional data for the purposes set out in this Policy. Some of the above personal data is collected directly, for example when you request a visitor guide, or send an email to our service team. Other personal data is collected indirectly, for example your browsing activity.Our websites are not intended for children and we do not knowingly collect data relating to children.
We use several marketing platforms that utilize cookies to help analyze user behavior and better target our marketing to you.
In addition to Google Analytics, this website may collect information (already held in the public domain) attributed to the IP address of the computer or device that is being used to access it.
We use a third-party provider, Sharpspring, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see Sharpspring’s privacy notice.
You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing firstname.lastname@example.org
As another layer of security, we utilize a double-opt in process for each subscription request. If you sign up for email, you’ll be required to verify your email exists by clicking a link.
While your email address remains within our Sharpspring database, you will receive periodic (approximately one per month) newsletter-style emails from us.
If you’ve provided your trip start and end date, and opted in to receive emails from the CACVB, you may receive emails leading up to your trip date, and a survey after your trip date.
We use a number of third parties to process personal or aggregated (anonymous) data on our behalf. These third parties have been carefully chosen and all of them comply with the appropriate legislation. All of these third parties are based in the USA and are EU-U.S Privacy Shield compliant.
In order to make certain services available to you, we may need to share your personal data with some of our service partners. These include our IT, local marketing partners, and marketing service providers.
Aside from our service providers, the CACVB will not disclose your personal data to any third party, except as set out below. We will never sell or rent our customer data to other organizations for marketing purposes without your explicit consent.
If you choose to share your data, we may share your name, email address, and phone number. We may share your data with:
We use information held about you to perform our services and for other purposes outlined below. Specifically, we use your information for a variety of purposes:
We will only retain your information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for your information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of your information, the purposes for which we process your information and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances you can ask us to delete your data: see Request erasure below for further information.
In some circumstances we may anonymize information about you (so that it can no longer be associated with you) for research or statistical purposes in which case we may use and retain this information indefinitely without further notice to you.
We may analyze your personal information and interests to create a profile of your interests and preferences so that we can contact you or serve you advertising with information relevant to you.
In addition, if you linked to our website from a third party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.
Our web site may also use the HotJar web site recording service. HotJar may record mouse clicks, mouse movements, page scrolling and any text keyed into website forms. The information collected does not include any sensitive personal data. Data collected by HotJar is for the CACVB’s internal use only. The information collected is used to improve our website usability and is stored and used for aggregated and statistical reporting.
We have put in place appropriate security measures to prevent information about you from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed; however, due to the inherent open nature of the Internet, we cannot ensure or warrant the security of any information provided online. We have put in place procedures to deal with any suspected data breach that will affect you and will notify you and any applicable regulator of a breach where we are legally required to do so.
To exercise any of your rights as described below, please contact us in writing, via email or postal mail as indicated above, so that we may consider your request under applicable law. Please be aware that your request will not be accepted for review unless you provide the following:
For your protection, we may only implement requests with respect to the personal data associated with the particular email address that you use to send us your request.
In addition, please note that, depending on the nature of your inquiry, request or complaint, we may need to verify your identity before implementing your request and may require proof of identity, such as in the form of a government issued ID and proof of geographical address.
We will try to comply with your request as soon as reasonably practicable. However, we reserve the right to refuse to act on a request that is manifestly unfounded or excessive (for example because it is repetitive) and/or, in some cases, to charge a fee that takes into account the administrative costs for providing the information or the communication or taking the action requested.
The EU General Data Protection Regulation (GDPR) grants individuals who are in the European Union and European Economic Area (EU/EEA) the following rights, with some limitations. Users may contact us, at the address provided in the “How to Contact us” section below, to exercise any of those rights and we will respond with the requested action or information, or will let you know why that right does not apply to you.
We may seek to rely on your consent in order to process certain personal data. Where we do so, you have the right not to provide your consent, and the right to withdraw your consent at any time. If you withdraw your consent, this will not affect the lawfulness of the processing conducted based on consent before its withdraw.
You have the right to obtain confirmation as to whether or not we collect or process personal data concerning you and, if this is the case, you have the right to request a copy of such personal data in digital format.
You have the right to require that we correct any inaccurate personal data concerning you, and that we complete incomplete personal data.
In certain circumstances, you have the right to request that we erase personal data concerning you; for example, if it is no longer necessary for the purposes for which it was originally collected.
In certain circumstances, you have the right to request that we restrict the processing of the personal data that we have collected about you; for example, where you believe that the personal data that hold about you is not accurate or lawfully held.
In certain circumstances, you have the right to receive the personal data concerning you that you have provided us in a structured, commonly used, machine readable format, and the right to obtain that we transmit the data to another entity where technically feasible.
In certain circumstances, you have the right to request that we stop processing your personal data.
You have the right to request that we stop sending you marketing communications.
In certain circumstances, you have the right no to be subject to a decision based solely on automated processing – including profiling – that produces legal effects or similarly affects you.
You have the right to lodge complaint with a supervisory authority if you believe that our processing of personal data relating to you infringes the GDPR.
To exercise your rights, please contact us at email@example.com.