Privacy Statement

Privacy STATEMENT

Never Let the Feeling Go.
Subscribe Now.

Hotel Viking > Privacy Statement

Hotel Viking is committed to protecting the privacy of visitors to our website.

Effective Date: January 1, 2024

Viking RE Holdings, LLC d/b/a Hotel Viking and its subsidiaries and affiliated companies are committed to protecting the privacy of certain data that is collected about you. This Privacy Statement describes our policies and practices regarding the collection, use, and disclosure of personal data or personal information, as defined by applicable law (“personal data”), that we collect about you, including personal data you submit or we obtain when you access or use this website or websites, apps, or other online media under our operation and control, or through HTML-formatted email messages that we send to you that link to this Privacy Statement (collectively, the “Site”), as well as certain other personal data relating to you that we collect when you make a reservation, stay as a guest at our property, attend events at our property or events hosted by our property, use on-property services at our property, such as concierge and meeting services, or visit on-property outlets at our property, such as restaurants and spas (collectively, the “Services”) or apply for or accept a position as a Team Member at our property. This Privacy Statement applies to information collected by the Company and its subsidiaries and affiliated companies, and our third-party hotel management company Davidson Hotel Company LLC and its subsidiaries and affiliated companies (collectively referred to in this Privacy Statement as the “Company”, “we”, “us” or “our”).

Our Privacy Statement explains: (1) what information we collect; (2) why we collect it; (3) how we use that information; (4) how we may share it; and (5) the choices we offer, including how to access and update information. Specifically, our Privacy Statement covers the following topics:

When This Privacy Statement Applies
Terms of Use
Information We Collect
How We Use Information We Collect
Information We Share
Your Failure to Provide Personal Data
Our Retention of Your Personal Data
Your Choices and Accessing, Updating or Deleting Your Personal Data
Third Party Links
International Transfer
How We Protect Personal Data
Children
Job Applicants and Team Members
“Do Not Track” Signals
Changes to this Privacy Statement
Applicable Law
California Consumer Privacy Statement
Other Specific States’ Privacy Rights
European Users’ Privacy Rights
How to Contact Us

Please familiarize yourself with our privacy practices and let us know if you have any questions. By using the Sites and the Services, you signify your acceptance of this Privacy Statement. If you do not agree to this Privacy Statement, please do not use the Sites or Services.

Irrespective of which country you live in, you authorize us to transfer, store, and use your information in the United States, and any other country where we operate. In some of these countries, the privacy and data protection laws and rules regarding when government authorities may access data may vary from those in the country where you live. Learn more about our data transfer operations in the “International Transfer” section below. If you do not agree to the transfer, storage and use of your information in the United States, and any other country where we operate, please do not use the Sites or Services.

If you provide personal data about other people (for example, you make a reservation for another individual), you represent that you have the authority to do so and you permit us to use the data in accordance with this Privacy Statement.

If you have any questions or comments about this Privacy Statement, please submit a request to [email protected].

WHEN THIS PRIVACY STATEMENT APPLIES

Our Privacy Statement applies to the Sites under the Company’s operation and control and to the Services offered by the Company, but excludes websites, apps, other online media and services that have separate privacy policies that do not incorporate this Privacy Statement.

We are not responsible for data collection, data use practices, privacy policies or the use of cookies or tracking technologies on hotel brand websites or other non-Company websites that you may access from this Site or that have directed or connected you to this Site.

If you are a California consumer, as defined by the California Consumer Privacy Act, as amended (CCPA), please also see the section below regarding your California Privacy Rights. If you are a consumer from other U.S. states that have enacted legislation affecting your privacy rights, please see the section below on Other Specific States’ Privacy Rights. If you are located in the EU, please see the section below on EU specific rights.

TERMS OF USE

By accessing or using the Sites in any manner, you also agree to be bound by the Company’s Terms of Use (the “Agreement”). Please read the Agreement carefully. If you do not accept all of the terms and conditions contained in or incorporated by reference into the Agreement, please do not use the Sites.

INFORMATION WE COLLECT

We collect information, including personal data, to provide better Services to all our users. We use the term “personal data” to refer to any information that identifies or can be used to identify you. Common examples of personal data include: full name, home address, email address, date of birth, digital identity, such as a login name or handle, information about your device, payment data, and certain metadata.

The Company may collect and use sensitive personal data relating to special accommodation requests, such as a request for an ADA accessible guest room. Otherwise, the Company does not intentionally collect or use sensitive personal data and asks that you do not provide sensitive personal data to us.

TYPES OF PERSONAL INFORMATION WE MAY COLLECT

We may collect or you may provide the following personal data in connection with your use of the Sites or Services:

personal or work contact information, including your name, your employer’s name, billing address, email address, and phone number
personal characteristics, such as gender, date of birth, title, and nationality
passport number and date and place of issue
travel history, booking, stay or purchase history
payment information, such as your payment card number, authentication information, expiration date, and card verification value (“CVV”) and other billing and account details associated with your payment card
guest preferences
marketing and communication preferences
sensitive personal data relating to special accommodation requests
reviews and opinions
frequent flyer or similar membership program number and related information
information provided on membership and account applications
user name and/or password when you create or use a user account
information about your use of the Sites and Services
Statistical Data. To monitor utilization of the Site and continuously improve its quality, we may compile statistical information concerning the usage of the Site using analytics services, such as those provide by Google Analytics. Examples of this information would include: the number of visitors to the Site, or to sections or pages within the Site, patterns of traffic flowing through the Site, length of time spent on the Site, or in sections or pages of the Site, the other sites that refer visitors to the Site, the pages of the Site that visitors frequently use as entry and exit points, utilization of the browser and operating systems and versions used by visitors to the Site. The analytics services may transfer this information to third parties in case of a legal obligation or if a third party processes data on behalf of that service. To compile this information, we may collect and store:

Your city and/or country which you are located
Your operating system version
Your browser version
The pages you visit within the Site
The length of time you spend on pages within the Site
The site from which you linked to ours
Search terms you used in search engines which resulted in you linking to the Site, etc.

While all of this information can be associated with the IP address your computer had while you visited the Site, it will not be associated with you as an individual, or associated with any other information you may submit through the Site, or that we may store about you for any other purposes. You may choose to provide us with Personal Data about yourself, including your name, billing address, email address, phone number, zip or postal code, user name and password, location information and birthdate, and other information such as booking, stay and purchase history, by completing forms on our website. In order to complete a reservation, an online credit card transaction may be required. During this process, you may provide us with the first and last name of the payment card owner, credit card billing address, payment card number, payment card expiration date, card verification value (“CVV”), shipping address, phone number and email.

HOW WE MAY COLLECT PERSONAL INFORMATION

We may collect and you may provide personal data in the following ways. We may collect and you may provide your personal data online via the Sites, and offline through channels other than the Sites, including via your use of the Services.

IMPORTANT: By using the Site, you consent to the processing of any personal data for the analytics purposes and functions described above.

When using our Services, you may elect to provide us with location and address information. You may also provide us with Personal Data about yourself when you report a problem or have a question about our Services, or when you use site-specific mobile applications or internet-connected devices available in properties managed by us, such as a smart home assistant.

Information Obtained from You
- When you submit or provide non-electronic registration information or documents, speak with us by phone, or send an email.
- When you make online reservations, participate in membership or loyalty programs, contests, sweepstakes, or marketing programs, subscribe to our newsletters, emails, special offers, request proposals or sign up for events.
- When you contact us with a question or concern, or to report a problem.
- When you use site-specific mobile applications or internet-connected devices available in our properties, such as a smart home assistant.
- When you participate in unique offerings at any of our properties and complete a waiver or consent form in connection with your participation.

Information You Give to Our Business Partners
- We may also collect your personal data from associated hotel brands, resorts and hospitality companies. For example, a hotel company may share with us your personal data and other data used for making a reservation at a hotel property owned or managed by us to fulfill and complete your reservation and/or provide Services.
- We may collect your personal data from companies with which we partner to provide you with goods, services or offers related to your stays at properties owned or managed by us or that we believe might interest you (“Strategic Business Partners”). Examples of Strategic Business Partners include on-property outlets, travel booking platforms and tour companies.

Information Obtained from Your Use of the Sites
- When you utilize Site interactive and social features to submit content and communicate with other users, you may provide personal data to us. Please note that your postings in these areas of the Sites may be publicly accessible or accessible to other users.
- When you upload documents or complete forms on the Site, we may collect the information contained in those documents/forms.

Information Obtained from Cookies and Similar Technologies

We and our partners use various technologies to collect and store information when you visit or use one of our Sites or Services, and this may include using cookies or similar technologies to identify your browser or device. We also use these technologies to collect and store information when you interact with services from our partners, such as advertising services. Our third party advertising and analytics partners include Google and similar partners. You can learn about Google’s practices and opt out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

The technologies we use for this automatic data collection may include:

A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Sites or Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Sites. If you do not want information collected through the use of cookies, you may wish to refer to http://www.allaboutcookies.org/manage-cookies/index.html. If, however, you do not accept our cookies, you may experience some inconvenience in your use of the Sites and Services. Please read our Cookie Policy linked at the bottom of our website.

Web Beacons. Pages of our Sites or our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an e-mail and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Clickstream Data. Clickstream data is information collected by our computers when you request Web pages from the Sites. Clickstream data may include information such as the page served, the time spent viewing the page, source of the request, type of browser making the request, the preceding page viewed and similar information. Clickstream data permits us to analyze how visitors arrive at the Sites, what type of content is popular, what type of visitors in the aggregate are interested in particular kinds of content on the Sites.

Embedded Content and Social Media Widgets. The Site contains embedded content (e.g., videos) and Social Media Widgets (e.g., Instagram, Twitter). Embedded content may place third party cookies on your device that track your online activity to enhance your experience or assess the success of their application. Social Media Widgets allow us to integrate social media functions into the Site. These widgets may place third party cookies on your device for tracking and advertising purposes. We have no direct control over the information these cookies collect and you should refer to their website Privacy Statement for additional information.

IMPORTANT: By using the Sites, you consent to the processing of any personal data for the analytics purposes and functions described above.

HOW WE USE INFORMATION WE COLLECT

We use your personal data in ways that are compatible with the purposes for which it was collected or authorized by you, including for the following business or commercial purposes:

To inform you about Services you request, including:
- To facilitate reservations, payment, send administrative information, confirmations or pre-arrival messages
- To complete your reservation and stay; for example, to process your payment, ensure that your room is available and provide you with related customer service
- To respond to your inquiries and to fulfill your requests
- To support our electronic receipt program
- To manage our contractual relationship with you
- To contact you with respect to any billing inquires
- To personalize your experience on the Sites and with the Services by presenting products and offers tailored to you
- To facilitate social sharing functionality
To authorize access to our Sites and Services;
To provide you with Services and products, including to customize your experience according to your personal preferences and to present offers tailored to your personal preferences;
To offer and administer customer loyalty and other programs;
To administer content, promotions, sweepstakes, surveys, voting polls or other Site features;
To communicate about, and administer your participation in, special programs and offers, as well as periodic customer satisfaction, market research and quality assurance surveys, and to deliver pertinent emails;
For our business purposes such as payment processing and financial account management; product/service development; contract management; IT and website administration and security; fulfillment; analytics; fraud prevention; corporate governance; reporting and legal compliance; data analysis; audits; identifying usage trends; determining the effectiveness of our promotional campaigns; and operating and expanding our business activities;
To improve our customer service;
To respond to and support users regarding their use of the Sites and Services;
To comply with all applicable legal requirements;
To investigate possible fraud or other violations of our Terms of Use or this Privacy Statement and/or attempts to harm our users;
For our research and development efforts. We may use data, including public feedback, to conduct research and for the development of the Site and the Services and products we provide to you;
To provide you, or permit selected third parties to provide you, with information about events, products and services we offer. We may use automated decision making whereby we use personal information you have provided to us, with your consent, to make automated decisions based on certain behavior or demographics of yours in order to provide you with tailored offers that may appeal to you; and
For advertising. We may show you ads on the Site using data from advertising technologies on the Site such as web beacons, pixels, ad tags, cookies, device identifiers; or information from advertising partners.

INFORMATION WE SHARE

We do not share Personal Data with companies, organizations and individuals outside of our organization unless one of the following circumstances applies:

Hotel, Resort and Hospitality Companies. We disclose personal data and other data to hotel, resort and hospitality companies for the purposes described in this Privacy Statement, including to facilitate your stay at properties owned or managed by us, to administer loyalty programs, and to accomplish our business purposes.

Strategic Business Partners. We disclose personal data and other data with select Strategic Business Partners who provide goods, services and offers that enhance your experience at properties owned or managed by us or that we believe will be of interest to you. By sharing data with these Strategic Business Partners, we are able to make personalized services and unique travel experiences available to you. For example, this sharing enables spa, restaurant, health club, concierge and other outlets at properties owned or managed by us to provide you with services. This sharing also enables us to provide you with a single source for purchasing packages that include travel-related services, such as airline tickets, rental cars and vacation packages.

For external processing. We provide personal information to our affiliates, trusted businesses or partners, or vendors to process it for us based on our instructions and in compliance with our Privacy Statement and any other appropriate confidentiality and security measures. For example, we may use or disclose this information with these third parties for external processing as follows:

With your consent or as you direct;
To manage the Site;
To process payments and requests for products and services;
To provide you with products, services, or offers;
To coordinate your participation in our loyalty reward or similar programs;
To engage in marketing activities, such as sharing personal information with our partners to deliver advertisements to our shared customers;
To enhance our services by, among other methods, obtaining assistance with providing more personalized services to you through analytics and other technologies;
To protect our interests and legal rights, such as through responding to subpoenas and defending litigation; and
To protect against and prevent fraud, illegal activity (such as identifying and responding to incidents of hacking or misuse of our websites and mobile applications), and claims and other liabilities.

We do not share personal data with third parties for their own marketing purposes.

For Legal Reasons. We will share personal data with companies, organizations or individuals outside of the Company if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:

demonstrate our relationship with you.
meet any applicable law, regulation, legal process or enforceable governmental request.
enforce applicable Terms of Use, including investigation of potential violations.
detect, prevent, or otherwise address fraud, security or technical issues.
protect against harm to the rights, property or safety of the Company, our users or the public as required or permitted by law.

We attempt to notify users about legal demands for their personal data when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague or lack proper authority, but we do not promise to challenge every demand.

Business Transfers. If we establish a new related entity, are acquired by or merged with another organization, or if substantially all of our assets are transferred to another organization, personal data about our users is often a transferred business asset. In the event that the Company itself or substantially all of our assets are acquired, personal data about our users may be one of the transferred assets.

Aggregate Site Use Information. We may share aggregate or anonymized/pseudonymized personal data with third parties in order to promote or describe use of the Sites, for research, marketing, advertising, or other business purposes.

YOUR FAILURE TO PROVIDE PERSONAL DATA

Your provision of personal data is required in order to use certain parts of our Services, Sites and our programs. If you fail to provide such personal data, you may not be able to access and use our Services, Sites and/or our programs, or parts of our Services, Sites and/or our programs.

OUR RETENTION OF YOUR PERSONAL DATA

We may retain your personal data for a period of time consistent with the original purpose for collection. For example, we keep your personal data for no longer than reasonably necessary for your use of our programs and Services and for a reasonable period of time afterward. We also may retain your personal data during the period of time needed for us to pursue our legitimate business interests, conduct audits, comply with our legal obligations, resolve disputes and enforce our agreements.

If you choose to close your account, we generally delete closed account information within 30 days of account closure, except as noted below. We retain your personal data even after you have closed your account if reasonably necessary to comply with our legal obligations (including law enforcement requests), for other legitimate business purposes, meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our Terms of Use, or fulfill your request to “unsubscribe” from further messages from us. We will retain de-identified information after your account has been closed.

YOUR CHOICES AND ACCESSING, UPDATING OR DELETING YOUR PERSONAL DATA

Whenever you use our Sites and Services, we aim to provide you with choices about how we use your personal data. We also aim to provide you with access to your personal data. If that information is wrong, we strive to give you ways to update it quickly or to delete it – unless we have to keep that information for legitimate business or legal purposes. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to the information. In addition, if you believe that personal data we maintain about you is inaccurate, subject to applicable law, you may have the right to request that we correct or amend the information by contacting us as indicated in the “How to Contact Us” section below.

Our Unsubscribe Policy

By providing an email address on the Sites or in connection with the Services, you agree that we may contact you in the event of a change in this Privacy Statement, to provide you with any service related notices, or to provide you with information about events, invitations, or related information from the Company, our subsidiaries and affiliated companies, hotel, resort and hospitality companies with whom we do business, and our Strategic Business Partners. For purposes of this Privacy Statement, “opt-in” is generally defined as any affirmative action by a user to submit or receive information, as the case may be.

We currently provide the following unsubscribe opportunities:

At any time, you can follow a link provided in offers, newsletters or other email messages (except for e-commerce confirmation or service notice emails) received from us to unsubscribe from the service.
At any time, you can contact us in accordance with the “How To Contact Us” section provided below to unsubscribe from the service and opt-out of our right per your consent under the terms of this Privacy Statement to share your personal data.

Notwithstanding anything else in this Privacy Statement, please note that we always reserve the right to contact you in the event of a change in this Privacy Statement, or to provide you with any service-related notices.

THIRD PARTY LINKS

The Sites may contain links to websites operated by parties other than the Company, including websites operated by hotel, resort and hospitality companies and our Strategic Business Partners.

These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control such websites and are not responsible for their contents, privacy policies or other practices. Our inclusion of links to such websites does not imply any endorsement of the material on such websites or any association with their operators. Further, it is up to you to take precautions to ensure that whatever links you select or software you download (whether from this Site or other websites) is free of such items as viruses, worms, trojan horses, defects and other items of a destructive nature. These websites and services may have their own privacy policies, which you will be subject to upon linking to the third party’s website. The Company strongly recommends that you review the third party’s terms and policies.

Links to Third Party Integrations. We may provide links to third party integrations. Third party integrations are websites or platforms that synchronize with our Sites or Services to provide you with additional functionality, tools, or services such as directions, collecting resumes, sharing documents or videos, or sending announcements.

You acknowledge and agree we are not responsible for the availability of such sites or resources and do not endorse and are not responsible or liable for any content, advertising, goods, services or other materials on, available through, or provided by such sites or resources.

We are not responsible for the privacy or other practices of such sites and cannot guarantee the security of any of your personal information that you provide or is collected by such sites. We encourage you to review the privacy policies and terms and conditions on those linked sites.

INTERNATIONAL TRANSFER

We are committed to complying with applicable laws, regulations and mandatory government standards regarding the protection of personal data.

Personal data and any additional information submitted may be used globally in connection with employment, business processes within the Company, or communicating with our clients. Therefore, personal data may be transferred to other Company entities worldwide, where it will be processed in accordance with this Privacy Statement and laws that are applicable in each country. Countries where we process data may have laws which are different, and potentially not as protective, as the laws of your own country.

HOW WE PROTECT PERSONAL DATA

The Company maintains reasonable administrative, technical and physical safeguards designed to protect the user’s personal data and information against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. We implement appropriate technical and organizational measures that seek to ensure a level of security appropriate to the risk, taking into account technological reality, cost, scope, context and purposes of processing weighted against the severity and likelihood that the processing could threaten individual rights and freedoms. For example, we use commercially reasonable security measures such as encryption, firewalls, and Secure Socket Layer software (SSL) or hypertext transfer protocol secure (HTTPS) to protect personal data.

If the Company collects account information for payment or credit, the Company will use the information only to complete the task for which the account information was offered.

Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that the security of your account has been compromised, please notify us immediately in accordance with the “How to Contact Us” section, below.

CHILDREN

The Sites are not intended for use by children. We do not intentionally gather personal data about visitors who are under the age of 18. If a child has provided us with personal data, a parent or guardian of that child may contact us to have the information deleted from our records. If you believe that we might have any information from a child under age 18, please contact us in accordance with the “How to Contact Us” section. If we learn that we have inadvertently collected the personal data of a child under 18, or equivalent minimum age depending on jurisdiction, we will take steps to delete the information as soon as possible.

JOB APPLICANTS AND TEAM MEMBERS

When you apply for a job at the Company, or in the course of your employment with the Company, we may request and process personal data from you. This may include information about you as well as your dependents, beneficiaries, or others whose personal data you provide to us. In addition to the applicable portions of our Privacy Statement above, the following applies specifically to applicants and team members at the Company.

Types of Personal Data We May Collect. The types of personal data we collect about you may include:

Identification information – such as your name, gender, photograph or date of birth.
Contact information – such as your address, telephone number, email address or emergency contact(s).
Background information – such as your education, employment background (position/experience/responsibilities), professional qualifications, resumé, references or criminal records data (for vetting purposes, where permissible and in accordance with applicable law).
Information on your spouse/partners/dependents – such as your marital status and/or identification and contact information for each person listed.
Financial information – such as bank details, tax information, salary, benefits, expenses, allowances, stock and equity grants.
IT information – such as technical information from you about your visit to our website (including “cookies” and other similar technologies) or information required to provide access to our Company systems and networks.
Additional information that we have not specifically requested but that you share with us in your application or resumé, such as hobbies or interests.

If this information is not provided, our ability to consider you as a candidate may be limited.

On occasion, we may also process sensitive personal data relating to you (and your spouse/partner and/or dependents). Sensitive personal data includes any information that reveals your racial or ethnic origin, religious, political or philosophical beliefs, sexual orientation, trade union membership, criminal convictions, genetic data, biometric data for the purposes of unique identification and information about your health. In the United States, sensitive personal data also includes government identifiers (including social security number, driver’s license, state identification card, or passport number), citizenship or immigration status, and precise geolocation data. As a general rule, we try not to collect or process any sensitive personal data about you, unless authorized by law or where necessary to comply with applicable laws or to provide benefits. We do not sell sensitive personal data collected under this Notice. However, in some circumstances, we may need to collect, or request on a voluntary disclosure basis, some sensitive personal data for legitimate employment/work-related purposes: For example, we may ask for optional information about your racial/ethnic origin, gender and disabilities for the purposes of equal opportunities (on the basis that it is in the public interest and in accordance with applicable law), monitoring, to comply with anti-discrimination laws and for government reporting obligations; or information about your physical or mental condition to provide work-related accommodations, health and insurance benefits to you and your dependents, or to manage absences from work.

Usually the personal data we hold about you has been provided by you. However, from time to time, we may obtain information about you from public sources or third parties. For example, we may conduct background screenings through a third-party service provider and verify information that you have in your application that relates to your past education, employment, credit and/or criminal history, as allowed by applicable law. You may also choose to provide us with access to certain personal information stored by third parties such as job-related social media sites (e.g., LinkedIn). You understand and acknowledge that the Company may collect, store and use this information in accordance with this Privacy Statement.

How We Use Your Personal Data. The Company will use your personal information for the following purposes:

Recruitment purposes. Recruitment, selection, evaluation and hiring of job candidates.
Employment/work purposes. General human resources administration (if you become a Company team member).
Communication purposes. Communicate with you and to inform you of current status of your application and future opportunities (unless you have told us that you do not want us to keep your information for such purposes).
Other legitimate business purposes.

1. to foster diversity, inclusion, and a welcoming work culture.
2. to help us conduct our business more effectively and efficiently – for example, for general HR resourcing, reporting or analytics, IT security/management, business continuity purposes, accounting purposes, or financial planning.
3. to help secure our networks and systems from unauthorized access, scams, and malicious code. For instance, we may monitor and review electronic mail communications sent or received using Company-issued devices or accounts, or stored on or using such a device or account.
4. in accordance with any policies pertaining to the use of personal devices for work purposes (if you become a Company team member).

With Whom We Share Your Personal Data. We take care to allow access to personal data only to those who require such access to perform their tasks and duties, and to third parties who have a legitimate business purpose or other lawful ground for accessing it. We do not sell personal data we collect from and about you. We may disclose your personal information to the following:

Other related companies. Your personal data may be shared for the purposes described above with other companies within the Company portfolio, including affiliate companies under common control with the Company, and with Davidson Hotel Company LLC (“Davidson”), our third-party hotel manager and other properties managed by Davidson or its affiliates or subsidiaries. In the case of owners of other properties managed by Davidson, the information shared would be limited in scope to the extent required for general employment/work purposes.
Third party service providers. We may also share your personal data with third parties who provide services to us such as recruitment agencies, consultants, background services providers, benefits providers and attorneys. We do so on a “need to know basis” and in accordance with applicable data privacy laws.
Other third parties. We may also disclose your personal data to other third parties (a) to comply with our legal obligations, including in order to respond to a lawful government request, court order, administrative or judicial process (such as a subpoena or search warrant); (b) as necessary to establish, exercise or defend against potential, threatened or actual legal claims; (c) where necessary to protect your vital interests or those of another person; or (d) where you have provided your consent.

European Job Applicants/Team Members and International Data Transfers (for Europe only). If you are a job applicant or staff member in the United Kingdom, European Economic Area, or Switzerland (collectively, “Europe”), our legal basis for collecting and using the personal data described above will depend on the type(s) of personal data involved and the context in which such personal data was collected.

Generally, we will only collect personal data from you when:

we need the personal data to perform a contract with you (e.g., for employment);
we need to comply with applicable laws and regulations (e.g., employment or immigration laws);
it is in our legitimate interests (without affecting your rights and taking into account safeguards we put in place);
we have your consent to do so (which you may withdraw at any time); and/or
we need to protect the rights and interests of the Company, our team members, applicants and others, as required and as permitted by applicable law.

Generally, and less often, we may collect sensitive personal data from you. We only do so when:

you have given your explicit consent by voluntarily providing it;
we need to comply with applicable laws and regulations;
we need to make employment/work decisions about you;
we need to establish, exercise or defend legal claims; and/or
doing so is essential for reasons of substantial public interest in accordance with relevant law.

At all times, you have the option whether to provide personal data (sensitive or otherwise) to us. However, when we are requesting such information, we are doing in order to facilitate your employment/work relationship or to comply with our legal obligations. If you choose not to provide personal data we request, it may prevent us from processing your application or continuing your employment/work and/or employment benefits (if applicable).

We process your personal data in the country in which it is collected. As we operate internationally, we may need to transfer personal data to countries other than the ones in which the information was originally collected. Our recruitment is currently hosted in the United States; in the future, we may host recruitment for European applicants (only) in the United Kingdom. When we export your personal data to a different country, we will take steps to ensure that such data export complies with applicable laws. In order to provide adequate protection of your personal information, we have in place contractual arrangements and/or policies (where appropriate) with other companies within the Company portfolio which cover these transfers, and we will take all reasonable measures to safeguard your information whenever it is transferred. For example, if we transfer personal data from Europe to a country outside of Europe, such as the United States, we will implement an appropriate data export solution such as entering into standard contractual clauses with the data importer, or taking other measures to provide an adequate level of data protection under European law. In each instance, however, we will maintain appropriate safeguards to require that your personal data will remain protected in accordance with this Privacy Statement.

How Long We Keep Your Personal Data. Personal data will be stored in accordance with applicable laws and kept as long as the Company has an ongoing legitimate business need to carry out the purposes described in this Privacy Statement or as otherwise required by applicable law. Generally, we will retain your personal data until the end of your application process, employment, or work relationship and then for a reasonable period of time thereafter to comply with regulatory obligations, legal or matters, benefits obligations or to respond to employment-related inquiries.

“DO NOT TRACK” SIGNALS

The Company Sites do not respond to Do Not Track (DNT) signals. The Company does track its users in order to provide targeted advertising to users about our Services.

CHANGES TO THIS PRIVACY STATEMENT

By using the Sites and the Services, you signify your acceptance of the terms of this Privacy Statement. If you do not agree to this Privacy Statement, please do not use the Sites or Services. We reserve the right to change this Privacy Statement at any time. Changes will be effective immediately upon posting to the Site and will apply to your use of the Site and the Services and the Company’s practices concerning personal information after the “Effective Date” listed above. Your use of the Services or Sites following these changes means that you accept the revised Privacy Statement.

APPLICABLE LAW

Our Privacy Statement is governed by the internal substantive laws of the State of Georgia USA without regard to its conflict of laws principles. Jurisdiction for any claims arising under or out of this Privacy Statement will lie exclusively with the state and federal courts within DeKalb County, Georgia USA. If any provision of this Privacy Statement is found to be invalid by a court having competent jurisdiction, the invalidity of such provision will not affect the validity of the remaining provisions of this Privacy Statement, which will remain in full force and effect.

California Consumer Privacy Statement

This California Consumer Privacy Statement section (“California Privacy Statement”) applies solely to individuals, visitors, users, and others who are residents of the State of California (“consumers” or “you”) and describes our policies and practices regarding the collection, use, and disclosure of personal information we collect about you, including personal information you submit or we obtain when you access or use the Site or the Services or through other channels. This section does not apply to personal information we collect about you as a job applicant to, an employee of, owner of, director of, officer of, or contractor of the Company. This section also does not apply to personal information we collect about you as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietorship, non-profit, or government agency when your communications or transactions with the Company occur solely within the context of the Company conducting due diligence regarding, or providing or receiving a product or service to or from, such company, partnership, sole proprietorship, non-profit, or government agency.

This California Privacy Statement is adopted to comply with the California Consumer Privacy Act, as amended (“CCPA”). Any terms defined within the CCPA have the same meaning when utilizing within this California Privacy Statement. Please read this carefully.

Changes to this California Privacy Statement. By using the Sites and the Services, you signify your acceptance of the terms of this California Privacy Statement. If you do not agree to this California Privacy Statement, please do not use the Sites or Services. We reserve the right to change this California Privacy Statement at any time. Changes will be effective immediately upon posting to the Site and will apply to your use of the Site and the Services and the Company’s practices concerning personal information after the “Effective Date” listed above. Your use of the Services or Sites following these changes means that you accept the revised California Privacy Statement.

Personal Information That We Collect. This notice describes the categories of personal information (“PI”) we collect, have collected, or will collect through the Sites or in the course of our business, including providing Services, in the preceding 12 months and the purposes for which such PI may be used. Note that the categories listed below are defined by California state law. Inclusion of a category in the list below indicates only that, depending on the services and products we provided to you, we may collect some information within that category. It does not necessarily mean that we collect all information listed in a particular category for all of our customers.

Categories of Personal Information Collected	Examples	Purposes Personal Information is Used
Identifiers and Contact information.	A real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, driver’s license number, passport number, or other similar identifiers.	· To inform you about Services you request · To authorize access to our Sites and Services · To provide you with Services and products · To offer and administer loyalty programs · To administer content, promotions, sweepstakes, surveys, voting polls or other Site features · To communicate about and administer your participation in special programs and offers, surveys, and to deliver pertinent emails · For our business purposes · To improve our customer service · To respond to and support users regarding use of the Sites and Services · To comply with applicable legal requirements · To investigate fraud or other violations · For our research and development efforts · To provide you or permit select third parties to provide you with information about events, products and offers · For advertising
Other elements.	Examples include name, signature, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, employment, bank account number, credit card number, debit card number, or any other financial information.	· To inform you about Services you request · To authorize access to our Sites and Services · To provide you with Services and products · To offer and administer loyalty programs · To administer content, promotions, sweepstakes, surveys, voting polls or other Site features · To communicate about and administer your participation in special programs and offers, surveys, and to deliver pertinent emails · For our business purposes · To improve our customer service · To respond to and support users regarding use of the Sites and Services · To comply with applicable legal requirements · To investigate fraud or other violations · For our research and development efforts · To provide you or permit select third parties to provide you with information about events, products and offers · For advertising
Characteristics of protected classifications under California or federal law.	Age (40 years or older), color, citizenship, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions, veteran or military status	· To inform you about Services you request · To provide you with Services and products · To respond to and support users regarding use of the Sites and Services · To comply with applicable legal requirements
Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies	· To inform you about Services you request · To authorize access to our Sites and Services · To provide you with Services and products · To offer and administer loyalty programs · To administer content, promotions, sweepstakes, surveys, voting polls or other Site features · To communicate about and administer your participation in special programs and offers, surveys, and to deliver pertinent emails · For our business purposes · To improve our customer service · To respond to and support users regarding use of the Sites and Services · To comply with applicable legal requirements · To investigate fraud or other violations · For our research and development efforts · To provide you or permit select third parties to provide you with information about events, products and offers · For advertising
Internet or other electronic network activity.	Examples include browsing history, search history, a consumer’s interaction with an internet website, application, or advertisement.	· To inform you about Services you request · To authorize access to our Sites and Services · To provide you with Services and products · To offer and administer loyalty programs · To administer content, promotions, sweepstakes, surveys, voting polls or other Site features · To communicate about and administer your participation in special programs and offers, surveys, and to deliver pertinent emails · For our business purposes · To improve our customer service · To respond to and support users regarding use of the Sites and Services · To comply with applicable legal requirements · To investigate fraud or other violations · For our research and development efforts · To provide you or permit select third parties to provide you with information about events, products and offers · For advertising
Geolocation data	Physical location or movements (geo-fencing)	· To inform you about Services you request · To authorize access to our Sites and Services · To provide you with Services and products · To offer and administer loyalty programs · To administer content, promotions, sweepstakes, surveys, voting polls or other Site features · To communicate about and administer your participation in special programs and offers, surveys, and to deliver pertinent emails · For our business purposes · To improve our customer service · To respond to and support users regarding use of the Sites and Services · To comply with applicable legal requirements · To investigate fraud or other violations · For our research and development efforts · To provide you or permit select third parties to provide you with information about events, products and offers · For advertising
Audio, electronic, visual, thermal, olfactory, or similar information	Video surveillance	· To authorize access to our Sites and Services · For our business purposes · To improve our customer service · To respond to and support users regarding use of the Sites and Services · To comply with applicable legal requirements · To investigate fraud or other violations
Consumer profile or inferences drawn from other personal information.	Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes	· To administer content, promotions, sweepstakes, surveys, voting polls or other Site features · To communicate about and administer your participation in special programs and offers, surveys, and to deliver pertinent emails · For our business purposes · To improve our customer service · For our research and development efforts · To provide you or permit select third parties to provide you with information about events, products and offers · For advertising
Sensitive Personal Data.	An individual’s Social Security, driver’s license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, citizenship, immigration status, or union membership; the contents of mail, email, and text messages unless Company is the intended recipient of the communication; genetic data; biometric information for the purpose of uniquely identifying an individual; Personal Data collected and analyzed concerning an individual’s health; Personal Data collected and analyzed concerning an individual’s sex life or sexual orientation; information collected from or about a known child.	· To inform you about Services you request · To authorize access to our Sites and Services · To provide you with Services and products · To offer and administer loyalty programs · To administer content, promotions, sweepstakes, surveys, voting polls or other Site features · To communicate about and administer your participation in special programs and offers, surveys, and to deliver pertinent emails · For our business purposes · To improve our customer service · To respond to and support users regarding use of the Sites and Services · To comply with applicable legal requirements · To investigate fraud or other violations · For our research and development efforts · To provide you or permit select third parties to provide you with information about events, products and offers · For advertising · For special accommodations (e.g., ADA accessibility)

The Company may add to the categories of PI it collects and the purposes it uses PI. In that case, the Company will inform you by posting an updated version of this California Privacy Statement on the Site.

Exclusions from Personal Information. PI does not include:

Publicly available information from government records.
Deidentified or aggregated consumer information.
Information excluded from the CCPA’s scope, like certain additional health or medical information and other categories of information protected by different laws.

How We Collect Personal Information. The above categories of PI are or were collected from the following categories of sources. We may collect and you may provide PI online via the Sites, and offline through channels other than the Sites, including via your use of the Services.

Information Obtained from You
- When you submit or provide non-electronic registration information or documents, speak with us by phone, or send an email.
- When you make online reservations, participate in membership or loyalty programs, contests, sweepstakes, or marketing programs, subscribe to our newsletters, emails, special offers, request proposals or sign up for events.
- When you contact us with a question or concern, or to report a problem.
- When you use site-specific mobile applications or internet-connected devices available in our properties, such as a smart home assistant.

Information You Give to Our Business Partners
- We may also collect your PI from associated hotel brands, resorts and hospitality companies. For example, a hotel company may share with us your personal data and other data used for making a reservation at a hotel property owned or managed by us to fulfill and complete your reservation and/or provide Services.
- We may collect your PI from companies with whom we partner to provide you with goods, services or offers related to your stays at properties owned or managed by us or that we believe might interest you (“Strategic Business Partners”). Examples of Strategic Business Partners include on-property outlets, travel booking platforms and tour companies.

Information Obtained from Your Use of the Sites
- When you utilize Site interactive and social features to submit content and communicate with other users, you may provide PI to us. Please note that your postings in these areas of the Sites may be publicly accessible or accessible to other users.
- When you upload documents or complete forms on the Site, we may collect the information contained in those documents/forms.

Information Obtained from Cookies and Similar Technologies

The technologies we use for this automatic data collection may include:

A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Sites or Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Sites. If you do not want information collected through the use of cookies, you may wish to refer to https://allaboutcookies.org/how-to-manage-cookies. If, however, you do not accept our cookies, you may experience some inconvenience in your use of the Sites and Services. Please read our Cookie Policy linked at the bottom of our website.

Web Beacons. Pages of our Sites or our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an e-mail and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Clickstream Data. Clickstream data is information collected by our computers when you request Web pages from the Sites. Clickstream data may include information such as the page served, the time spent viewing the page, source of the request, type of browser making the request, the preceding page viewed and similar information. Clickstream data permits us to analyze how visitors arrive at the Sites, what type of content is popular, what type of visitors in the aggregate are interested in particular kinds of content on the Sites.

Embedded Content and Social Media Widgets. The Site contains embedded content (e.g., videos) and Social Media Widgets (e.g., Instagram, Twitter). Embedded content may place third party cookies on your device that track your online activity to enhance your experience or assess the success of their application. Social Media Widgets allow us to integrate social media functions into the Site. These widgets may place third party cookies on your device for tracking and advertising purposes. We have no direct control over the information these cookies collect and you should refer to their website Privacy Statement for additional information.

IMPORTANT: By using the Site, you consent to the processing of any PI for the analytics purposes and functions described above.

How We Share the Personal Information that We Collect.

Please see the above chart for the categories of PI collected and the business or commercial purposes for which they were collected.

The above categories of PI are shared with the following categories of third parties:

Hotel, Resort and Hospitality Companies. We disclose PI and other data to hotel, resort and hospitality companies for the purposes described in this Privacy Statement, including to facilitate your stay at properties owned or managed by us, to administer loyalty programs, and to accomplish our business purposes.

Strategic Business Partners. We disclose PI and other data with select Strategic Business Partners who provide goods, services and offers that enhance your experience at properties owned or managed by us or that we believe will be of interest to you. By sharing data with these Strategic Business Partners, we are able to make personalized services and unique travel experiences available to you. For example, this sharing enables spa, restaurant, health club, concierge and other outlets at properties owned or managed by us to provide you with services. This sharing also enables us to provide you with a single source for purchasing packages that include travel-related services, such as airline tickets, rental cars and vacation packages.

For external processing. We provide PI to our affiliates, trusted businesses or partners, or vendors to process it for us based on our instructions and in compliance with our Privacy Statement and any other appropriate confidentiality and security measures. For example, we may use or disclose this information with these third parties for external processing as follows:

With your consent or as you direct;
To manage the Site;
To process payments and requests for products and services;
To provide you with products, services, or offers;
To coordinate your participation in our loyalty reward or similar programs;
To engage in marketing activities, such as sharing personal information with our partners to deliver advertisements to our shared customers;
To enhance our services by, among other methods, obtaining assistance with providing more personalized services to you through analytics and other technologies;
To protect our interests and legal rights, such as through responding to subpoenas and defending litigation; and
To protect against and prevent fraud, illegal activity (such as identifying and responding to incidents of hacking or misuse of our websites and mobile applications), and claims and other liabilities.

We do not share PI with third parties for their own marketing purposes.

For Legal Reasons. We will share PI with companies, organizations or individuals outside of the Company if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:

demonstrate our relationship with you.
meet any applicable law, regulation, legal process or enforceable governmental request.
enforce applicable Terms of Use, including investigation of potential violations.
detect, prevent, or otherwise address fraud, security or technical issues.
protect against harm to the rights, property or safety of the Company, our users or the public as required or permitted by law.

We attempt to notify users about legal demands for their PI when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague or lack proper authority, but we do not promise to challenge every demand.

Business Transfers. If we establish a new related entity, are acquired by or merged with another organization, or if substantially all of our assets are transferred to another organization, PI about our users is often a transferred business asset. In the event that the Company itself or substantially all of our assets are acquired, PI about our users may be one of the transferred assets.

Aggregate Site Use Information. We may share aggregate or anonymized/pseudonymized information with third parties in order to promote or describe use of the Sites, for research, marketing, advertising, or similar purposes.

We do not sell your PI as defined in the CCPA.

The Company has disclosed for a business purpose the following categories of PI in the preceding 12 months:

1. Identifiers
2. Other Elements
3. Characteristics of protected classifications under California or federal law
4. Commercial information
5. Internet or other electronic network activity
6. Geolocation data
7. Audio, electronic, visual, thermal, olfactory, or similar information
8. Consumer profile or inferences drawn from other personal information

California Consumer Rights. Pursuant to the CCPA, and as detailed below, consumers have various rights with respect to their PI.

Right to Request Deletion. You have the right to request that the Company delete your PI from the Company’s records and direct any service providers to delete your PI from their records, subject to certain exceptions.

Upon receipt of a verifiable consumer request, the Company will delete and direct any service providers to delete your PI from its records.

The Company is not required to comply with your request to delete your PI if it is necessary for the Company (or its service provider) to maintain your PI in order to:

Complete the transaction for which the PI was collected, provide a good or service requested by you, or reasonably anticipated within the context of the Company’s ongoing business relationship with you, or otherwise perform a contract between the Company and you.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
Debug to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
To enable solely internal uses that are reasonably aligned with your expectations based on your relationship with the Company.
Comply with a legal obligation.
Otherwise use your PI, internally, in a lawful manner that is compatible with the context in which you provided the information.

Right to Request Information. You have the right to request the Company disclose the following to you as it relates to the 12-month period preceding the Company’s receipt of your verifiable consumer request:

The categories of PI the Company has collected about you.
The categories of sources from which the PI is collected.
The business or commercial purpose for collecting or selling PI.
The categories of third parties with whom the Company shares PI.
The specific pieces of PI the Company has collected about you.

Upon receipt of a verifiable consumer request, the Company will provide a response to your request for information.

Right to Correct. You have the right to request that the Company corrects, updates or modifies any inaccuracies in your PI.

Right to Opt-Out of Sale, Targeted Advertising and/or Sharing. You have the right to request to opt-out of the sale of your PI, which includes, but is not limited to, the sharing of your PI for targeted advertising purposes. To exercise this right please email [email protected] stating in the email that you are a resident of California and that you would like to opt-out of the sale or sharing of you personal information.

Right to Opt-Out of Automated Decision-Making, Including Profiling. You have the right to request to opt-out of the use of your personal information in automated decision-making. To exercise this right please email [email protected] stating in the email that you are a resident of California and that you would like to opt-out of the use of your personal information in automated decision-making.

Right to Request Information as to Sale or Disclosure for Business Purpose. We do not sell your PI as defined in the CCPA. If in the future, we anticipate selling your PI as defined in the CCPA, we will provide you with the opt-out and opt-in rights as required by the CCPA. You have the right to request that the Company disclose the following to you as it relates to the 12-month period preceding the Company’s receipt of your verifiable consumer request:

The categories of PI that the Company collected about you.
The categories of PI that the Company sold about you and the categories of third parties to whom the PI was sold, by category or categories of PI for each category of third party parties to whom the PI was sold. Please note that we do not sell your PI.
The categories of PI that the Company disclosed about you for a business purpose.
Upon receipt of a verifiable consumer request, the Company will provide a response to your request for information as to sale or disclosure for business purpose.

We will not discriminate against you in violation of the CCPA for exercising any of your CCPA rights. For example, we generally will not provide you a different level or quality of goods or services if you exercise your rights under the CCPA. However, in certain instances we may be unable to provide the service requested (e.g., if you decline to provide your hotel rewards number, we will be unable to credit your stay to your rewards account.)

Submitting California Consumer Rights Requests. To submit any of the California Consumer Rights requests as outlined in this California Privacy Statement, please contact us at (844) 823-2381 or davidsonhotelsdsr.ethicspoint.com. We reserve the right to only respond to verifiable consumer requests. A verifiable consumer request is one made by any individual who is:

the consumer who is the subject of the request,
a consumer on behalf of the consumer’s minor child, or
by a natural person or person registered with the Secretary of State authorized to act on behalf of a consumer.

If the Company requests, you must provide us with sufficient information to verify your identity and/or authority to act on behalf of a Consumer. Additionally, you will need to describe your request with sufficient detail to allow us to review, understand, assess, and respond. PI collected from an individual to determine whether a request is a verifiable consumer request may not be used for any other purpose. We reserve the right to charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly unfounded. If we determine that a request warrants a fee, we will attempt to notify you as to why we made that decision and provide a cost estimate before completing your request. We will attempt to respond to a verifiable consumer request within forty-five (45) days of receipt, but we may require up to ninety (90) days to respond, under which circumstances we will notify you of the need for an extension.

Other California Privacy Rights (California’s “Shine the Light” Law).

California residents are entitled to contact us to request information about whether we have disclosed personal information to third parties for the third parties’ direct marketing purposes. We do not disclose personal information to third parties for the third parties’ direct marketing purposes. California users may request further information about our compliance with this law by contacting us in accordance with the “Submitting California Consumer Rights Requests” section of this California Privacy Statement.

California residents under the age of 18. If you are a California resident under the age of 18 and a registered user of any Site where this policy is posted, California law permits you to request and obtain removal of certain content or information you have publicly posted. You may submit your request using the contact information in the “How to Contact Us” section below. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

OTHER SPECIFIC STATES’ PRIVACY RIGHTS

Colorado, Connecticut, Virginia, and Utah each provide their state residents with rights to:

Confirm whether we process their personal information.
Access and delete certain personal information.
Data portability.
Opt-out of personal data processing for targeted advertising and sales.

Colorado, Connecticut, and Virginia also provide their state residents with rights to:

Correct inaccuracies in their personal information, taking into account the information’s nature processing purpose.
Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

Nevada also provides its state residents with rights to:

Opt-out of the sale of covered information.

To exercise any of these rights please email [email protected] stating in the email both your state of residency and your specific opt-out request in accordance with your applicable state law.

EUROPEAN USERS’ PRIVACY RIGHTS

Some data protection laws, including the European Union’s General Data Protection Regulation (“GDPR”), provide you with certain rights in connection with personal data we have collected or you have shared with us. We attempt to process your personal data in accordance with applicable law. In addition to the information provided above, residents of the European Economic Area should be aware of the following.

Legal basis for processing your personal data. Whenever we collect personal data from you, we may do so on the following legal bases:

We may collect and process your personal data where you have given us consent to do so. In addition, we will request your explicit consent before we process any special category personal data about you. You may withdraw your consent at any time by contacting us in accordance with the “How to Contact Us” section below;
We may collect and process your personal data where it is necessary to perform a contract with you including supplying/providing products or services; and
We may collect and process your personal data where it is necessary for us to pursue our legitimate interests as a business, or those of a third party, for the following purposes:
- Intra-organization transfers of client data for administrative purposes;
- Product development and enhancement, where the processing enables the Company to enhance, modify, personalize, or otherwise improve our Services and communications for the benefit of our users, and to better understand how people interact with our Sites;
- Communications and marketing, including processing data for direct marketing purposes, and subject to your opt-in for these purposes, and to determine the effectiveness of our promotional campaigns and advertising;
- Fraud detection and prevention;
- Enhancement of our cybersecurity, including improving the security of our network and information systems; and
- General business operations and diligence.

Provided that, in each circumstance, we will weigh the necessity of our processing for the purpose against your privacy and confidentiality interests, including taking into account your reasonable expectations, the impact of processing, and any safeguards which are or could be put in place. In all circumstances, we will limit such processing for our legitimate business interest to what is necessary for its purposes.

Additional Rights. If you are resident in the European Economic Area, you may have the following additional rights relating to your personal data, subject to certain limitations:

The right to be informed. You are entitled to be informed of the use of your personal data. This Privacy Statement provides that information to you.
The right of access. You have the right to request a copy of your personal data which we hold about you.
The right of correction: You have the right to request correction or changes of your personal data if it is found to be inaccurate or out of date.
The right to restrict processing. You have the right to restrict processing of your personal data where you believe it is unlawful for us to process it, you require us to keep it in connection with legal proceedings, or pending an investigation where you have objected to the processing of your personal data.
The right to be forgotten: You have the right to request us, at any time, to delete your personal data from our servers and to erase your personal data when it is no longer necessary for us to retain such data. Note, however, that deletion of your personal data will likely impact your ability to use our Services.
The right to object (opt-out): You have the right to opt-out of certain uses of your personal data, such as direct marketing, at any time.
The right to data portability: You have the right to a “portable” copy of your personal data that you have submitted to us. Generally, this means your right to request that we move, copy or transmit your personal data stored on our servers / IT environment to another service provider’s servers / IT environment.
The right to refuse to be subjected to automated decision making, including profiling: You have the right not to be subject to a decision and insist on human intervention if the decision is based on automated processing and produces a legal effect or a similarly significant effect on you.
The right to lodge a complaint with a supervisory authority.

Please note that these rights may not apply to individuals residing outside the EEA. To make a request related to your rights, you may contact us using the contact information below.

The Transfer or Storage of Your Personal Data.

The personal data that we collect from you may be transferred to countries outside the European Economic Area (“EEA”). This may include where any of our servers or those of our third party service providers are located in a country outside of the EEA or it is processed by our staff or the staff of our third party service provider operating outside the EEA. These countries may not have similar data protection laws to the country in which you reside. If we transfer your personal data outside of the EEA we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected in accordance with this Policy. These steps may include imposing appropriate contractual obligations on the recipient of your personal data. If you are located in the EEA, you understand and consent to having your personal data processed outside of the EEA, including in the United States.

HOW TO CONTACT US

If you have any specific questions about this Privacy Statement, you can contact us via our third-party hotel management company, Davidson Hotel Company LLC as follows:

Send e-mail to: [email protected]

Send mail to:

Davidson Hotel Company LLC, Management Agent

One Ravinia Drive

Suite 1600

Atlanta, GA 30346 USA

ATTN: General Counsel, Privacy Statement Inquiry