Documento informativo ai sensi e per gli effetti di cui agli articoli 13/14 Regolamento (UE) 2016/679 (GDPR) e California Consumer Privacy Act 2018
La presente informativa si applica al sito web www.usaandgo.com il “Sito” ed ai suoi utenti, sia visitatori, sia viaggiatori che acquistano uno o più viaggi (“Utenti”).
Titolare del trattamento
USA & go LLC
3500 South Dupont Highway
Dover, DE, 19901, USA
Indirizzo e-mail: usaandgo@gmail.com
Categorie di dati trattati
I dati personali trattati dal Titolare rientrano nella categoria dei dati comuni.
Potremo trattare i seguenti dati personali:
In alcuni casi potremo trattare anche alcuni dati particolari:
Finalità e base giuridica del trattamento
Navigazione nel sito: I Dati Personali possono essere trattati il controllo del funzionamento del Sito. La base giuridica è il legittimo interesse del Titolare del trattamento a far funzionare e a controllare il Sito e ad ottenere i dati sul suo utilizzo o il tuo consenso (Art. 6, par. 1, lett. f) GDPR).
Rispondere alle richieste di contatto: è possibile contattare il Titolare, tramite email all’indirizzo usaandgo@gmail.com, tramite telefono o tramite telefono o WhatsApp, tramite i profili Facebook o Instagram @usa_and_go, per chiedere informazioni o chiarimenti relativi ai viaggi organizzati e alla possibilità di creare partnership.; per rispondere, alle varie richieste degli Utenti. La base giuridica è l'esecuzione di obblighi pre-contrattuali di cui l'Interessato è parte (art. 6, par. 1, lett. b) GDPR). Il conferimento è necessario per dar seguito alla richiesta. In caso di mancato conferimento dei Dati Personali, il Titolare non potrà rispondere alla richiesta. Il Titolare cancellerà i dati personali trattati per rispondere alle richieste entro 1 anno dalla data di chiusura della gestione della richiesta.
Prenotazione di un viaggio: finalizzazione della prenotazione di un viaggio e gestione della prenotazione effettuata. La base giuridica è l’esecuzione di obblighi pre-contrattuali e contrattuali di cui l'Interessato è parte (art. 6, par. 1, lett. b) GDPR). Con riferimento agli eventuali dati particolari conferiti (ad esempio lo stato di salute, eventuali allergie), è il consenso espresso dell'Interessato (art. 9, par. 2, lett. a) GDPR). Il conferimento è necessario per dar seguito alla richiesta di prenotazione. In caso di mancato conferimento dei Dati, il Titolare non potrà dare seguito alla richiesta e finalizzare l'acquisto e, con riferimento ai dati particolari, non potrà dare seguito alle specifiche esigenze richieste. I Dati sono conservati sino all’esecuzione del contratto di acquisto e, comunque, non oltre i termini di prescrizione previsti dalla legge e salvo i casi di difesa in giudizio. I dati particolari saranno conservati sino all'esecuzione del contratto e per ulteriori 6 mesi, salvo che un termine ulteriore non sia necessario per esercitare o difendere un diritto.
Essere inserito nel gruppo whatsapp del viaggio a cui si partecipa: gli Utenti che hanno acquistato un viaggio sono inseriti in un gruppo WhatsApp formato dagli altri partecipanti e dal coordinatore. Il gruppo serve per scambiare comunicazioni organizzative relative al viaggio e viene attivato prima della partenza. La base giuridica del trattamento è il legittimo interesse del Titolare del trattamento (art. 6, par. 1, lett. f) GDPR) per permettere una migliore organizzazione del viaggio e delle comunicazioni tra i partecipanti al viaggio ed il coordinatore. L'interesse del Titolare è stato bilanciato con quello dell'Interessato che potrà tenersi aggiornato tramite le comunicazioni all’interno del gruppo. L’interessato può opporsi in qualsiasi momento al trattamento, sia uscendo dal gruppo WhatsApp sia inviando la propria richiesta al Titolare. Non ci sarà alcuna ripercussione negativa sull'utente in caso di opposizione al trattamento. I dati verranno conservati per il tempo necessario al perseguimento della finalità sopra descritta.
Cancellare una prenotazione: nel caso in cui un utente chieda una cancellazione di una prenotazione. La base giuridica è l’esecuzione di obblighi pre-contrattuali e contrattuali di cui l'Interessato è parte (art. 6, par. 1, lett. b) GDPR) e dei dati contenuti nel certificato medico, il consenso (art. 9, par. 2, lett. a) GDPR). Il conferimento è necessario per dare seguito alla richiesta di cancellazione. Il titolare conserverà i dati entro e, non oltre i termini di prescrizione previsti dalla legge e salvo i casi di difesa in giudizio.
Comunicazioni in casi di emergenza: al fine di gestire comunicazioni per casi straordinari di emergenza. L'Interessato è invitato a sottoporre la presente informativa anche ai propri familiari di cui siano forniti i dati di contatto.Il trattamento di dati è effettuato nel legittimo interesse del Titolare per permettere la migliore gestione delle emergenze, ai sensi dell’art.6, par. 1, lett. f) GDPR. Il Titolare cancellerà i dati una volta terminato il viaggio.
Invio di comunicazioni di natura commerciale/promozionale: per scopi di marketing diretto, come l'invio di newsletter, informazioni e comunicazioni commerciali, aggiornamenti sugli ultimi lanci, offerte e promozioni, tramite newsletter, via email o telefono, anche con mezzi automatizzati (SMS, social media). La base giuridica è il consenso dell’interessato (art. 6, par. 1, lett. a) GDPR). Il conferimento è facoltativo. In caso di mancato conferimento dei Dati, il Titolare non potrà regolarmente aggiornare l'interessato sulle proprie offerte e promozioni. L'interessato può revocare in qualsiasi momento il consenso prestato, inviando un'e-mail a usaandgo@gmail.com. I Dati trattati per la presente finalità saranno conservati e trattati per 5 anni, fatta salva la revoca del consenso da parte dell'Interessato.
Pubblicazione delle immagini degli interessati sul sito o canali social: le immagini/video raccolti durante il viaggio fatto con USA&go potranno essere pubblicate dal Titolare sul Sito o sui canali social. La base del trattamento è il legittimo interesse del Titolare a promuovere la propria attività (art. 6, par. 1, lett. f) GDPR). Il partecipante al viaggio è informato della realizzazione delle fotografie/video sia in sede contrattuale, che durante il viaggio ed ha la possibilità di astenersi e richiedere di non farsi fotografare durante il viaggio. L’interessato può opporsi in qualsiasi momento sia chiedendo di non partecipare agli scatti/riprese, sia chiedendo la rimozione dei contenuti pubblicati scrivendo a usaandgo@gmail.com. L'interesse del Titolare è stato bilanciato con quello dell'utente a essere parte di riprese di gruppo. Il conferimento è facoltativo. Non ci sarà alcuna ripercussione negativa sull'utente in caso di opposizione al trattamento. I dati saranno conservati per 5 anni dalla pubblicazione delle immagini salvo eventuale richiesta di opposizione e rimozione delle immagini.
Segnalazioni relative a fatti/incidenti e/o comportamenti non conformi: il Titolare potrà raccogliere e trattare dati relativi a fatti, incidenti, comportamenti riferibili all’Utente viaggiatore, non conformi alla normativa. La base giuridica è il legittimo interesse del Titolare (art. 6, par. 1, lett. f) GDPR) a verificare che l’esperienza di viaggio sia conforme allo standard della società e monitorare/segnalare fatti e/o comportamenti non in linea con la legge. La segnalazione potrà essere effettuata per il tramite del coordinatore del viaggio, dei compagni di viaggio e dei partner locali.
Gestione di eventuali claim e difesa in giudizio: la base giuridica è l’esecuzione di obblighi pre-contrattuali e contrattuali di cui l'Interessato è parte (art. 6, par. 1, lett. b) GDPR) oltre che l legittimo interesse del Titolare (art. 6, par. 1, lett. f). Il conferimento è necessario sia per permettere al Titolare di dare risposta alle richieste avanzate dagli Interessati che per difendere i propri diritti nei confronti dell'interessato o di terzi davanti alle autorità competenti. I Dati sono conservati per la durata del claim e in ogni caso entro i termini di prescrizione indicati dalla normativa (di regola 3 anni fatto salvo un eventuale periodo più lungo, se correlato ad un danno alla persona).
Inoltre, e fatto salvo quanto sopra, il Titolare del trattamento si impegna a basare il trattamento dei Dati Personali sui principi di minimizzazione, verificando su base annuale la necessità della loro conservazione per un periodo di tempo non superiore a quanto richiesto dalle finalità per le quali i dati sono stati raccolti e trattati. Il Titolare del trattamento può conservare i Dati Personali per conformarsi alla legge o per esercitare o difendere qualsiasi diritto o pretesa in procedimenti giudiziari. Una volta raggiunti gli scopi per i quali i Dati Personali sono stati raccolti e trattati, il Titolare del trattamento implementerà misure adeguate, per renderli anonimi, in modo che l'interessato non possa essere identificato.
TRASFERIMENTO DATI VERSO UN PAESE EXTRA UE
I dati personali potranno essere trasferiti in paesi extra UE, ad esempio nel caso in cui la destinazione del viaggio sia un paese extra UE.
Il Titolare del trattamento si impegna a trasferire dati personali verso paesi terzi qualora fosse necessario:
Destinatari dei dati
I Dati saranno trattati da dipendenti e collaboratori del Titolare del trattamento espressamente autorizzati al trattamento dei Dati sulla base delle istruzioni e previa adozione di misure idonee a proteggere i Dati in relazione a tutte le finalità sopra indicate.
I soggetti suindicati potranno venire a conoscenza dei Dati in relazione alle finalità di trattamento previste dalla presente informativa sulla privacy e potranno trattare i Dati sia in qualità di autonomi titolari del trattamento che di responsabili del trattamento debitamente nominati dal Titolare del trattamento (l'elenco di tali responsabili e autonomi titolari del trattamento è disponibile previa richiesta via e-mail da inoltrare a usaandgo@gmail.com)
Trasferimento dati verso un paese extra ue
I dati personali potranno essere trasferiti in paesi extra UE, ad esempio nel caso in cui la destinazione del viaggio sia un paese extra UE.
Il Titolare del trattamento si impegna a trasferire dati personali verso paesi terzi qualora fosse necessario:
Modalità di trattamento dei dati
I Dati saranno trattati nel rispetto dei principi di correttezza, liceità e trasparenza, attraverso metodi manuali e automatizzati e mediante l'impiego di mezzi cartacei ed elettronici, in ogni caso entro i limiti delle finalità del/i trattamento/i dei dati stabiliti dalla presente informativa e, in ogni caso, sempre garantendo la sicurezza e la riservatezza dei Dati.
Diritti degli interessati
L'interessato potrà in ogni momento esercitare i seguenti diritti alle condizioni e nei limiti previsti dagli Articoli 12-22 del GDPR inviando una mail a usaandgo@gmail.com:
Ove la base giuridica del trattamento sia il consenso espresso, l’interessato ha il diritto di revocare il consenso in qualsiasi momento. La revoca del consenso non pregiudica la liceità del trattamento basata sul consenso prima della revoca.
Data di aggiornamento: 8 ottobre 2024
Further information for California consumers
This section of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the business running this Application and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
This section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the state of California, United States of America, according to the "California Consumer Privacy Act of 2018" (the "CCPA"), as updated by the "California Privacy Rights Act" (the "CPRA") and subsequent regulations. For such consumers, this section supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal information“ as defined in the California Consumer Privacy Act (CCPA/CPRA).
Notice at collection
Categories of personal information collected, used, sold, or shared
In this section we summarize the categories of personal information that we've collected, used, sold, or shared and the purposes thereof. You can read about these activities in detail in the section titled “Detailed information on the processing of Personal Data” within this document.
Information we collect: the categories of personal information we collect
We have collected the following categories of personal information about you: .
We do not collect sensitive personal information.
We will not collect additional categories of personal information without notifying you.
What are the purposes for which we use your personal information?
We may use your personal information to allow the operational functioning of this Application and features thereof (“business purposes”). In such cases, your personal information will be processed in a fashion necessary and proportionate to the business purpose for which it was collected, and strictly within the limits of compatible operational purposes.
We may also use your personal information for other reasons such as for commercial purposes (as indicated within the section “Detailed information on the processing of Personal Data” within this document), as well as for complying with the law and defending our rights before the competent authorities where our rights and interests are threatened or we suffer an actual damage.
We won’t process your information for unexpected purposes, or for purposes incompatible with the purposes originally disclosed, without your consent.
How long do we keep your personal information?
Unless stated otherwise inside the “Detailed information on the processing of Personal Data” section, we will not retain your personal information for longer than is reasonably necessary for the purpose(s) they have been collected for.
How we collect information: what are the sources of the personal information we collect?
We collect the above-mentioned categories of personal information, either directly or indirectly, from you when you use this Application.
For example, you directly provide your personal information when you submit requests via any forms on this Application. You also provide personal information indirectly when you navigate this Application, as personal information about you is automatically observed and collected.
How we use the information we collect: disclosing of your personal information with third parties for a business purpose
We do not disclose your personal information to third parties. For our purposes, the word “third party” means “a person who is not any of the following: a service provider or a contractor, as defined by the CCPA.
No sale of your personal information
We do not sell or share your personal information. In case we should decide to, we will inform you beforehand and will grant your right to opt out of such sale.
Your privacy rights under the California Consumer Privacy Act and how to exercise them
The right to access personal information: the right to know and to portability
You have the right to request that we disclose to you:
- the categories of personal information that we collect about you;
- the sources from which the personal information is collected;
- the purposes for which we use your information;
- to whom we disclose such information;
- the specific pieces of personal information we have collected about you.
You also have the right to know what personal information is sold or shared and to whom. In particular, you have the right to request two separate lists from us where we disclose:
· the categories of personal information that we sold or shared about you and the categories of third parties to whom the personal information was sold or shared;
· the categories of personal information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.
The disclosure described above will be limited to the personal information collected or used over the past 12 months.
If we deliver our response electronically, the information enclosed will be "portable", i.e. delivered in an easily usable format to enable you to transmit the information to another entity without hindrance — provided that this is technically feasible.
The right to request the deletion of your personal information
You have the right to request that we delete any of your personal information, subject to exceptions set forth by the law (such as, including but not limited to, where the information is used to identify and repair errors on this Application, to detect security incidents and protect against fraudulent or illegal activities, to exercise certain rights etc.).
If no legal exception applies, as a result of exercising your right, we will delete your personal information and notify any of our service providers and all third parties to whom we have sold or shared the personal information to do so — provided that this is technically feasible and doesn’t involve disproportionate effort.
The right to correct inaccurate personal information
You have the right to request that we correct any inaccurate personal information we maintain about you, taking into account the nature of the personal information and the purposes of the processing of the personal information.
The right to opt out of sale or sharing of personal information and to limit the use of your sensitive personal information
You have the right to opt out of the sale or sharing of your personal information. You also have the right to request that we limit our use or disclosure of your sensitive personal information.
The right of no retaliation following opt-out or exercise of other rights (the right to non-discrimination)
We will not discriminate against you for exercising your rights under the CCPA. This means that we will not discriminate against you, including, but not limited to, by denying goods or services, charging you a different price, or providing a different level or quality of goods or services just because you exercised your consumer privacy rights.
However, if you refuse to provide your personal information to us or ask us to delete or stop selling your personal information, and that personal information or sale is necessary for us to provide you with goods or services, we may not be able to complete that transaction.
To the extent permitted by the law, we may offer you promotions, discounts, and other deals in exchange for collecting, keeping, or selling your personal information, provided that the financial incentive offered is reasonably related to the value of your personal information.
How to exercise your rights
To exercise the rights described above, you need to submit your verifiable request to us by contacting us via the details provided in this document.
For us to respond to your request, it’s necessary that we know who you are. Therefore, you can only exercise the above rights by making a verifiable request which must:
- provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative;
- describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We will not respond to any request if we are unable to verify your identity and therefore confirm the personal information in our possession actually relates to you.
Making a verifiable consumer request does not require you to create an account with us. We will use any personal information collected from you in connection with the verification of your request solely for the purposes of verification and shall not further disclose the personal information, retain it longer than necessary for purposes of verification, or use it for unrelated purposes.
If you cannot personally submit a verifiable request, you can authorize a person registered with the California Secretary of State to act on your behalf.
If you are an adult, you can make a verifiable request on behalf of a child under your parental authority.
You can submit a maximum number of 2 requests over a period of 12 months.
How and when we are expected to handle your request
We will confirm receipt of your verifiable request within 10 days and provide information about how we will process your request.
We will respond to your request within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.
Our disclosure(s) will cover the preceding 12-month period. Only with regard to personal information collected on or after January 1, 2022, you have the right to request that we disclose information beyond the 12-month period, and we will provide them to you unless doing so proves impossible or would involve a disproportionate effort.
Should we deny your request, we will explain you the reasons behind our denial.
We do not charge a fee to process or respond to your verifiable request unless such request is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee, or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind it.
Further information for Virginia consumers
This section of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the controller running this Application and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
This section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the Commonwealth of Virginia, according to the “Virginia Consumer Data Protection Act"(the "VCDPA"), and, for such consumers, it supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal data” as defined in the VCDPA.
Categories of personal data processed
In this section, we summarize the categories of personal data that we've processed and the purposes thereof. You can read about these activities in detail in the section titled “Detailed information on the processing of Persona Data” within this document.
Categories of personal data we collect
We have collected the following categories of personal data:
We do not collect sensitive data.
We will not collect additional categories of personal data without notifying you.
Why we process your personal data
To find out why we process your personal data, you can read the sections titled “Detailed information on the processing of Personal Data” and “The purposes of processing” within this document.
We won’t process your information for unexpected purposes, or for purposes incompatible with the purposes originally disclosed, without your consent. You can freely give, deny, or withdraw such consent at any time using the contact details provided in this document.
How we use the data we collect: sharing of your personal data with third parties
We do not share nor disclose your personal data with third parties.
Sale of your personal data
We do not sell your personal data. In case we should decide to, we will inform you beforehand and will grant your right to opt out of such sale.
Processing of your personal data for targeted advertising
We do not process your personal data for targeted advertising. If we decide to do so, we will inform you beforehand and will grant your right to opt out of the processing of your personal data for targeted advertising.
Your privacy rights under the Virginia Consumer Data Protection Act and how to exercise them
You may exercise certain rights regarding your data processed by us. In particular, you have the right to do the following:
- access personal data: the right to know. You have the right to request that we confirm whether or not we are processing your personal data. You also have the right to access such personal data.
- correct inaccurate personal data. You have the right to request that we correct any inaccurate personal data we maintain about you, taking into account the nature of the personal data and the purposes of the processing of the personal data.
- request the deletion of your personal data. You have the right to request that we delete any of your personal data.
- obtain a copy of your personal data. We will provide your personal data in a portable and usable format that allows you to transfer data easily to another entity — provided that this is technically feasible.
- opt out of the processing of your personal data for the purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
- non-discrimination. We will not discriminate against you for exercising your rights under the VCDPA. This means that we will not, among other things, deny goods or services, charge you a different price, or provide a different level or quality of goods or services just because you exercised your consumer privacy rights. However, if you refuse to provide your personal data to us or ask us to delete or stop selling your personal data, and that personal data or sale is necessary for us to provide you with goods or services, we may not be able to complete that transaction. To the extent permitted by the law, we may offer a different price, rate, level, quality, or selection of goods or services to you, including offering goods or services for no fee, if you have exercised your right to opt out, or our offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.
How to exercise your rights
To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.
For us to respond to your request, we need to know who you are.
We will not respond to any request if we are unable to verify your identity using commercially reasonable efforts and therefore confirm that the personal data in our possession actually relate to you. In such cases, we may request that you provide additional information which is reasonably necessary to authenticate you and your request.
Making a consumer request does not require you to create an account with us. However, we may require you to use your existing account. We will use any personal data collected from you in connection with your request solely for the purposes of authentication, without further disclosing the personal data, retaining it longer than necessary for purposes of authentication, or using it for unrelated purposes.
If you are an adult, you can make a request on behalf of a child under your parental authority.
How and when we are expected to handle your request
We will respond to your request without undue delay, but in all cases and at the latest within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.
Should we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within 45 days of receipt of the request. It is your right to appeal such decision by submitting a request to us via the details provided in this document. Within 60 days of receipt of the appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied you may contact the Attorney General to submit a complaint.
We do not charge a fee to respond to your request, for up to two requests per year. If your request is manifestly unfounded, excessive or repetitive, we may charge a reasonable fee or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind them.
Further information for Colorado consumers
This section of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the controller running this Application and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
This section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the State of Colorado, according to the “Colorado Privacy Act" (the "CPA"), and, for such consumers, it supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal data” as defined in the CPA.
Categories of personal data processed
In this section, we summarize the categories of personal data that we've processed and the purposes thereof. You can read about these activities in detail in the section titled “Detailed information on the processing of Persona Data” within this document.
Categories of personal data we collect
We have collected the following categories of personal data:
We do not collect sensitive data.
We will not collect additional categories of personal data without notifying you.
Why we process your personal data
To find out why we process your personal data, you can read the sections titled “Detailed information on the processing of Personal Data” and “The purposes of processing” within this document.
We won’t process your information for unexpected purposes, or for purposes incompatible with the purposes originally disclosed, without your consent. You can freely give, deny, or withdraw such consent at any time using the contact details provided in this document.
How we use the data we collect: sharing of your personal data with third parties
We do not share nor disclose your personal data with third parties. For our purposes, the word "third party" means "a natural or legal person, public authority, agency, or body other than the consumer, controller, processor, or an affiliate of the processor or the controller" as defined by the VCDPA.
For our purposes, the word "third party" means "a person, public authority, agency, or body other than a consumer, controller, processor, or affiliate of the processor or the controller." as defined by the CPA.
Sale of your personal data
We do not sell your personal data. In case we should decide to, we will inform you beforehand and will grant your right to opt out of such sale.
For our purposes, the word "sale", "sell", or "sold" means "the exchange of personal data for monetary or other valuable consideration by a controller to a third party" as defined by the CPA.
Please note that according to the CPA, the disclosure of personal data to a processor that processes personal data on behalf of a controller does not constitute a sale. In addition, other specific exceptions set forth in the CPA may apply, such as, but not limited to, the disclosure of personal data to a third party for the provision of a product or service requested by you.
Processing of your personal data for targeted advertising
We do not process your personal data for targeted advertising. If we decide to do so, we will inform you beforehand and will grant your right to opt out of the processing of your personal data for targeted advertising.
For our purposes, the word "targeted advertising" means "displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer's activities across nonaffiliated websites, applications, or online services to predict consumer preferences or interests" as defined by CPA.
Please note that according to the CPA, targeted advertising does not include: “advertisements directed to a consumer in response to the consumer's request for information or feedback; advertisements based on activities within a controller's own websites or online applications or any affiliated website or online application; advertisements based on the context of a consumer's current search query, visit to an internet web site or online application; or processing personal data solely to measure or report advertising frequency, performance or reach”.
Your privacy rights under the Colorado Privacy Act and how to exercise them
You may exercise certain rights regarding your data processed by us. In particular, you have the right to do the following:
· opt out of the processing of your personal data for the purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
· access personal data. You have the right to request that we confirm whether or not we are processing your personal data. You also have the right to access such personal data.
· correct inaccurate personal data. You have the right to request that we correct any inaccurate personal data we maintain about you, taking into account the nature of the personal data and the purposes of the processing of the personal data.
· request the deletion of your personal data. You have the right to request that we delete any of your personal data.
· obtain a copy of your personal data. We will provide your personal data in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible.
In any case, we will not increase the cost of, or decrease the availability of, a product or service, based solely on the exercise of any of your rights and unrelated to the feasibility or the value of a service. However, to the extent permitted by the law, we may offer a different price, rate, level, quality, or selection of goods or services to you, including offering goods or services for no fee, if our offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.
How to exercise your rights
To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.
For us to respond to your request, we need to know who you are and which right you wish to exercise.
We will not respond to any request if we are unable to verify your identity using commercially reasonable efforts and therefore confirm that the personal data in our possession actually relate to you. In such cases, we may request that you provide additional information which is reasonably necessary to authenticate you and your request.
Making a consumer request does not require you to create an account with us. However, we may require you to use your existing account. We will use any personal data collected from you in connection with your request solely for the purposes of authentication, without further disclosing the personal data, retaining it longer than necessary for purposes of authentication, or using it for unrelated purposes.
If you are an adult, you can make a request on behalf of a child under your parental authority.
How and when we are expected to handle your request
We will respond to your request without undue delay, but in all cases and at the latest within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.
Should we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within 45 days of receipt of the request. It is your right to appeal such decision by submitting a request to us via the details provided in this document. Within 45 days of receipt of the appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied you may contact the Attorney General to submit a complaint.
We do not charge a fee to respond to your request, for up to two requests per year:
Further information for Connecticut consumers
This section of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the controller running this Application and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
This section applies o all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the State of Connecticut, according to “An Act Concerning Personal Data Privacy and Online Monitoring " (also known as "The Connecticut Data Privacy Act" or the “CTDPA"), and, for such consumers, it supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal data” as defined in the CTDPA.
Categories of personal data processed
In this section, we summarize the categories of personal data that we've processed and the purposes thereof. You can read about these activities in detail in the section titled “Detailed information on the processing of Persona Data” within this document.
Categories of personal data we collect
We have collected the following categories of personal data:
We do not collect sensitive data.
We will not collect additional categories of personal data without notifying you.
Why we process your personal data
To find out why we process your personal data, you can read the sections titled “Detailed information on the processing of Personal Data” and “The purposes of processing” within this document.
We won’t process your information for unexpected purposes, or for purposes incompatible with the purposes originally disclosed, without your consent.
You can freely give, deny, or withdraw such consent at any time using the contact details provided in this document.
How we use the data we collect: sharing of your personal data with third parties
We do not share nor disclose your personal data with third parties.
For our purposes, the word "third party" means "a person, public authority, agency, or body other than a consumer, controller, processor, or affiliate of the processor or the controller." as defined by the CTDPA.
Sale of your personal data
We do not sell your personal data. In case we should decide to, we will inform you beforehand and will grant your right to opt out of such sale.
For our purposes, the word "sale", "sell", or "sold" means "the exchange of personal data for monetary or other valuable consideration by a controller to a third party" as defined by the CTDPA.
Please note that according to the CTDPA, the disclosure of personal data to a processor that processes personal data on behalf of a controller does not constitute a sale. In addition, other specific exceptions set forth in the CTDPA may apply, such as, but not limited to, the disclosure of personal data to a third party for the provision of a product or service requested by you.
Processing of your personal data for targeted advertising
We do not process your personal data for targeted advertising. If we decide to do so, we will inform you beforehand and will grant your right to opt out of the processing of your personal data for targeted advertising.
For our purposes, the word "targeted advertising" means "displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer's activities across non affiliated websites, applications, or online services to predict consumer preferences or interests" as defined by CTDPA.
Please note that according to the CTDPA, targeted advertising does not include: “advertisements based on activities within a controller's own web sites or online applications; advertisements based on the context of a consumer's current search query, visit to an internet web site or online application; advertisements directed to a consumer in response to the consumer's request for information or feedback; or processing personal data solely to measure or report advertising frequency, performance or reach”.
Your privacy rights under the Connecticut Data Privacy Act and how to exercise them
You may exercise certain rights regarding your data processed by us. In particular, you have the right to do the following:
· access personal data. You have the right to request that we confirm whether or not we are processing your personal data. You also have the right to access such personal data.
· correct inaccurate personal data. You have the right to request that we correct any inaccurate personal data we maintain about you, taking into account the nature of the personal data and the purposes of the processing of the personal data.
· request the deletion of your personal data. You have the right to request that we delete any of your personal data.
· obtain a copy of your personal data. We will provide your personal data in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible.
· opt out of the processing of your personal data for the purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
In any case, we will not increase the cost of, or decrease the availability of, a product or service, based solely on the exercise of any of your rights and unrelated to the feasibility or the value of a service. However, to the extent permitted by the law, we may offer a different price, rate, level, quality, or selection of goods or services to you, including offering goods or services for no fee, if our offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.
How to exercise your rights
To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.
For us to respond to your request, we need to know who you are and which right you wish to exercise.
We will not respond to any request if we are unable to verify your identity using commercially reasonable efforts and therefore confirm that the personal data in our possession actually relate to you. In such cases, we may request that you provide additional information which is reasonably necessary to authenticate you and your request.
Making a consumer request does not require you to create an account with us. However, we may require you to use your existing account. We will use any personal data collected from you in connection with your request solely for the purposes of authentication, without further disclosing the personal data, retaining it longer than necessary for purposes of authentication, or using it for unrelated purposes.
If you are an adult, you can make a request on behalf of a child under your parental authority.
How and when we are expected to handle your request
We will respond to your request without undue delay, but in all cases and at the latest within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.
Should we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within 45 days of receipt of the request. It is your right to appeal such decision by submitting a request to us via the details provided in this document. Within 45 days of receipt of the appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may contact the Attorney General to submit a complaint.
We do not charge a fee to respond to your request, for up to one request per year.
Further information for Utah consumers
This section of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the controller running this Application and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
This section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the State of Utah, according to the “Consumer Privacy Act" (the “UCPA"), and, for such consumers, it supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal data” as defined in the UCPA.
Categories of personal data processed
In this section, we summarize the categories of personal data that we've processed and the purposes thereof. You can read about these activities in detail in the section titled “Detailed information on the processing of Persona Data” within this document.
Categories of personal data we collect
We have collected the following categories of personal data:
We do not collect sensitive data.
We will not collect additional categories of personal data without notifying you.
Why we process your personal data
To find out why we process your personal data, you can read the sections titled “Detailed information on the processing of Personal Data” and “The purposes of processing” within this document.
How we use the data we collect: sharing of your personal data with third parties
We do not share nor disclose your personal data with third parties.
For our purposes, the word "third party" means "a person other than: the consumer, controller, or processor; or an affiliate or contractor of the controller or the processor" as defined by the UCPA.
Sale of your personal data
We do not sell your personal data. In case we should decide to, we will inform you beforehand and will grant your right to opt out of such sale.
For our purposes, the word "sale", "sell", or "sold" means "the exchange of personal data for monetary or other valuable consideration by a controller to a third party" as defined by the UCPA.
Please note that according to the UCPA, the disclosure of personal data to a processor that processes personal data on behalf of a controller does not constitute a sale. In addition, other specific exceptions set forth in the UCPA may apply, such as, but not limited to, the disclosure of personal data to a third party for the provision of a product or service requested by you.
Processing of your personal data for targeted advertising
We do not process your personal data for targeted advertising. If we decide to do so, we will inform you beforehand and will grant your right to opt out of the processing of your personal data for targeted advertising.
For our purposes, the word "targeted advertising" means "displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer's activities across nonaffiliated websites, applications, or online services to predict consumer preferences or interests" as defined by UCPA.
Please note that according to the UCPA, targeted advertising does not include: “advertisements based on activities within a controller's own websites or online applications or any affiliated website or online application; advertisements based on the context of a consumer's current search query, visit to an web site or online application; advertisements directed to a consumer in response to the consumer's request for information, product, a service or feedback; or processing personal data solely to measure or report advertising performance, reach or frequency.”
Your privacy rights under the Utah Consumer Privacy Act and how to exercise them
You may exercise certain rights regarding your data processed by us. In particular, you have the right to do the following:
· access personal data. You have the right to request that we confirm whether or not we are processing your personal data. You also have the right to access such personal data.
· request the deletion of your personal data. You have the right to request that we delete any of your personal data.
· obtain a copy of your personal data. We will provide your personal data in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible.
· opt out of the processing of your personal data for the purposes of targeted advertising or the sale of personal data.
In any case, we will not increase the cost of, or decrease the availability of, a product or service, based solely on the exercise of any of your rights and unrelated to the feasibility or the value of a service. However, to the extent permitted by the law, we may offer a different price, rate, level, quality, or selection of goods or services to you, including offering goods or services for no fee, if our offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.
How to exercise your rights
To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.
For us to respond to your request, we need to know who you are and which right you wish to exercise.
We will not respond to any request if we are unable to verify your identity using commercially reasonable efforts and therefore confirm that the personal data in our possession actually relate to you. In such cases, we may request that you provide additional information which is reasonably necessary to authenticate you and your request. We may retain your email address to respond to your request.
If you are an adult, you can make a request on behalf of a child under your parental authority.
How and when we are expected to handle your request
We will respond to your request without undue delay, but in all cases and at the latest within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.
Should we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within 45 days of receipt of the request.
We do not charge a fee to respond to your request, for up to one request per year.
Last change: October 8, 2024