These US State Privacy Disclosures (“US Disclosures”) supplement the information contained in our Privacy Policy and generally describes those rights and provides the methods for residents of California, Colorado, Maryland, Nebraska, Texas, and Virginia to submit requests. The terms “you” and “your” refer to a resident of the foregoing states and “we” or “our” refer to City Pass, Inc. (“City Pass”).
For the purposes of these US Disclosures, personal information does not include publicly available information or deidentified, aggregated or anonymized information that is maintained in a form that is not capable of being associated with or linked to you.
Personal Information We Collect
Below is a list of the categories of personal information we have collected about you in the past 12 months:
- Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, telephone number, or other similar online identifiers.
- Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
- Internet or other electronic network activity information, including, but not limited to, information regarding a consumer’s interaction with our website, application or advertisement.
- Geolocation data.
For more information about our collection of personal information, the sources of personal information, and how we use this information, please see “Our Purposes for Collecting and Processing Personal Information and its Uses” section of our Privacy Policy.
Personal Information We Disclose for a Business Purpose
In order to operate our business we disclose your personal information to service providers that process information and perform services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, redeeming tickets and vouchers, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on our behalf.
You have the right to request that we disclose the categories of personal information we have disclosed about you. Below is a list of the categories of personal information that we have disclosed to service providers in the preceding 12 months:
- Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, telephone number, or other similar online identifiers.
- Payment-related information, including credit card number or debit card number.
- Characteristics of protected classifications under California or federal law.
- Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
- Internet or other electronic network activity information, including, but not limited to, information regarding a consumer’s interaction with our website, application or advertisement.
- Geolocation data.
Sales of Personal Information and Sharing for Targeted Advertising
As further described in the How We Disclose Personal Information section of the Privacy Policy, we may “sell” your personal data (as defined by the applicable privacy laws) to or share your data with third parties, subject to your right to opt out (see Your Privacy Choices below).
We have sold or shared the following categories of personal data for the purposes described in our Privacy Policy, subject to your settings and preferences and your right to opt out: such as your name and email address, commercial information, such as records of services purchased, obtained or considered, and network information, such as your IP address and sites you visit.
The categories of third parties to whom we may sell or share personal information include: business and marketing partners, online advertising networks and analytics providers, and social networks.
We may also disclose personal data for the purposes described in the How We Disclose Personal Information section of the Privacy Policy. In addition, please see our Cookie Disclosures to learn more about how third-party advertising networks, social media companies and other third-party businesses collect and disclose your personal information directly from your browser or device through cookies or tracking technologies when you visit or interact with our Services or otherwise engage with us.
Universal Opt-Out Mechanism
Where available, you may choose to enable an online tool that automatically communicates your universal opt-out preferences, such as Global Privacy Control (“GPC”). You may need to use a specific browser or an extension that supports these tools and universal signals. When such signal is detected, we will process as a request to opt out of tracking personal information and as a request to opt out of “sale” or “sharing” your personal information as explained in “Your Privacy Choices” section below.
Your Privacy Choices
In accordance with applicable privacy law, and depending upon the jurisdiction in which you reside, you may have some or all of the following rights in respect of your personal information:
- Right of access. You may have the right to obtain:
- confirmation of whether, and where, we are processing your personal information;
- information about the categories of personal information we are processing, the purposes for which we process your personal information and information as to how we determine applicable retention periods;
- information about the categories of recipients with whom we may share your personal information; and
- a copy of the personal information we hold about you.
- Right of portability. You may have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal information to another person.
- Right to rectification or correction. You may have the right to obtain rectification or correction of any inaccurate or incomplete personal information we hold about you.
- Right to deletion or erasure. You may have the right, in some circumstances, to require us to delete erase your personal information.
- Right to restriction. You may have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.
- Right to opt out of data sales or targeted advertising. You may have the right to opt-out of the use of your personal information for targeted advertising purposes, or to “sell” or “share” your personal information with third parties in certain contexts.
- Right to request list of third parties. If you are a resident of Delaware, Minnesota, or Oregon, you may also have the right to request a list of specific third parties to which we have disclosed personal information.
- Right to appeal. In the event that we decline to take action on a request exercising one of your rights set forth above, you have the right to appeal our decision.
Depending on your state of residency, you may also have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. However, the exercise of the rights described above may result in a different price, rate or quality level of product or service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law.
Method for Submitting Requests
You may submit a data request by calling (888) 330-5008 or by filling out a form at http://www.citypass.com/us-state-privacy-request.
To exercise your privacy rights concerning a City Pass attraction partner, you need to contact the partner directly.
Before processing your request, City Pass may need to verify your identity and confirm you are a resident of a state that offers the requested right(s). In order to verify your identity, we will generally either require the successful authentication of your account, or the matching of sufficient information you provide us to the information we maintain about you in our systems. This process may require us to request additional personal information from you, including, but not limited to, your name, email address, and order number. City Pass will not respond to requests that cannot be verified and appear to be fraudulent. In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.
To Exercise Your Opt Out Right
Unless you have exercised your right to opt out, we may disclose or “sell” your personal information to third parties for monetary or other valuable consideration in relation to online tracking technologies, or “share” your personal information to third parties for cross-context behavioral advertising purposes (targeted advertising). The third parties to whom we sell or share personal information may use such information for their own purposes, in accordance with their own privacy statements, which may include reselling or sharing this information to additional third parties.
- For Cookie-Based Sales & Targeted Advertising Opt-Outs: To exercise your right to opt-out as it relates to the use of cookies and other tracking technologies for analytics and targeted ads, update your cookie settings using the “Your Privacy Choices” link in our footer.
- For Non-Cookie-Based Opt-Outs: You may submit a request by calling (888) 330-5008 or by filling out our online form at http://www.citypass.com/us-state-privacy-request.
Submitting Authorized Agent Requests
In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf. In order to verify the authorized agent’s authority, we generally require evidence of either (i) a valid power of attorney or (ii) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided and your state of residency, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.
Minors
City Pass does not knowingly collect personal information from children under the age of 16. Other than requesting name(s) for any City Pass child products purchased, City Pass does not knowingly solicit personal information from children under the age of 16. Should we learn or be notified that we have collected information from users under the age of 16, we will promptly take reasonable steps to delete such personal information.
Financial Incentives
In some cases, we may offer you financial incentives as permitted by law in exchange for the collection, retention, or use of certain personal information about you. Each financial incentive related to the collection and use of personal information is based upon our reasonable, good-faith determination of the estimated value of such information to us. When applicable, we will provide information about the specific terms of the financial incentive and your rights on the webpage or form where the financial incentive is made available.