Last Updated January 1, 2020
Grand Colonial Bed and Breakfast, which is owned and operated by E2W, LLC , values you as our guest and recognizes privacy is important to you. In this Privacy Statement, the words “you” and “your” refer to each guest, customer, website visitor or user. The words “we,” “our” and “us” refer to E2W, LLC.
This Privacy Statement covers our treatment of the Personally Identifiable Information we collect and use when you use our website and social media pages, stay as our guest at Grand Colonial Bed and Breakfast, or communicate with us through any other means. Personally Identifiable Information is information that identifies you as an individual or relates to an identifiable individual. The terms Personally Identifiable Information and Personal Information have the same meaning for the purposes of this Privacy Statement. By providing your Personally Identifiable Information, you agree to the terms and conditions of this Privacy Statement.
Personally Identifiable Information includes, but is not limited to the following: (a) “Contact Data” (such as your name, name of children, address, phone number, email address, social media account name, business title, employer or other relevant details if you are an employee of a corporate customer, vendor, or business partner). (b) “Financial Data” (such as credit and debit card number, expiration date, verification code, and bank account information). (c) “Demographic Data” (such as your gender, age, date of birth, age of children, nationality, and zip code). (d) “Legal Data” (such as passport, visa or other government-issued identification information). (e) “Service Data” (such as date of arrival and departure, goods and services purchased, special requests, service preferences, aspects of service used, and information we receive from third parties).
We may collect Personally Identifiable Information from you when you make a reservation online or over the phone, purchase goods and services from us, participate in any promotion we sponsor, offer solicited or unsolicited feedback or suggestions, communicate with us via our website, social media pages, over the phone, or in person, or through any other aspect of service we offer. We may also receive Personally Identifiable Information from other sources such as customer referrals, public databases and other third parties.
If you submit Personally Identifiable Information to us on behalf of someone else (such as making a reservation for someone else), you represent you have their permission do so and to permit us to use the information in accordance with our Privacy Statement.
We may use your Personally Identifiable Information in a variety of ways, including: (a) to complete reservation requests, (b) process payments, (c) administer the services you request (d) respond to your inquires, (e) send you information about our bed and breakfast and the Central New York area, (f) send you administrative and marketing information, communications, promotions, and guest satisfaction surveys, and (g) for our own business purposes (such as developing, enhancing, and improving our service).
Our website includes social media features. These features may collect your IP address, which page you are visiting on our website, and may set a cookie to enable the feature to function properly. Social media features, widgets, and the use of tracking technologies by our service providers and third-party assets (such as social media links) on our website are not covered by this Privacy Statement. We do not have control over third party assets. Your interactions with these features are governed by the third-party company providing it.
We strive to implement the latest encryption and security technologies. Credit card and Personally Identifiable Information is transmitted by secure servers (SSL). Despite our efforts, we cannot make an absolute guarantee of secure data transmission. The information you transmit to or from our website, social media pages, or any other means, is at your own risk. We are not liable for the theft, loss, or interception of, or unauthorized access or damage to, your data or communications. By using our website, social media pages, or by communicating with us through any other means, you acknowledge you understand and assume these risks.
We utilize various valid data transfer mechanisms for Personally Identifiable Information at our sole discretion in accordance with applicable data protection and privacy laws. We will continue to monitor and assess the appropriateness of other valid data transfer mechanisms as they become available.
We operate a general audience business not directed at children under the age of 18. By using our website and social media pages, or communicating with us through any other means, you represent that you are at least 18 years old and understand that you must be at least 18 years old in order to make a reservation to stay at Grand Colonial Bed and Breakfast.
You may choose not to provide E2W, LLC with Personally Identifiable Information. If you chose not to provide E2W, LLC with Personally Identifiable Information, you may continue to use our website. However, we cannot process reservations or certain other inquires and requests without Personally Identifiable Information.
We may update this Privacy Statement from time to time to reflect changes to our information practices. The “Last Updated” statement at the top of this page indicates when this Privacy Statement was last revised. Any changes we make to our Privacy Statement are effective as of the time we post them to this page. Your use of our services any time after a change means you accept the revised Privacy Statement.
If you believe your privacy has been breached through your use of our website, social media pages, or as a result of any other communication with us, please call us at 315-982-5004 immediately.
NOTICE TO RESIDENTS OUTSIDE THE UNITED STATES
If you live outside the United States, you agree and consent to our collection, transfer, and processing of your personal information in accordance with this Privacy Statement. You are solely responsible for compliance with any data protection or privacy obligations in your jurisdiction when you provide us with Personally Identifiable Information. Regardless of where we transfer your information, we still protect your information in the manner described in this Privacy Statement.
NOTICE TO NEVADA RESIDENTS
If you are a Nevada resident, E2W, LLC does not “sell” personal information as defined in the Nevada Privacy of Information Collected on the Internet from Consumers Act as amended by Nevada Senate Bill 220. Nonetheless, you may submit a request to prohibit such sales by contacting us at firstname.lastname@example.org. If you would like to tell us not to sell your information in the future, please email us at email@example.com with your name, postal address, telephone number and email address with “Nevada do not sell” in the subject line.
CALIFORNIA CONSUMER PRIVACY ACT NOTICE
If you are a California resident, you may have rights different from and/or in addition to those set forth in this Privacy Statement with respect to your data and personal information. If you are a California resident, please read our California Consumer Privacy Act Statement section below.
SHINE THE LIGHT – YOUR CALIFORNIA PRIVACY RIGHTS
Pursuant to California’s “Shine the Light Act” (California Civil Code Section 1798.80 et seq.), we hereby inform you that we do not knowingly, and do not in the future intend to, share the personal information of any California resident with any third party for that third party’s direct promotional or other marketing purposes.
CALIFORNIA DO NOT TRACK
California Business & Professions Code Section 22575(b) (as amended effective January 1, 2014) provides that California residents are entitled to know how we respond to “Do Not Track” browser settings. However, we do not currently take actions to respond to Do Not Track signals because a uniform technological standard has not yet been developed.
If you have questions or concerns about this Privacy Statement, please send an email to firstname.lastname@example.org.
INFORMATION FOR CALIFORNIA RESIDENTS: CALIFORNIA CONSUMER PRIVACY ACT (CCPA) STATEMENT
- CALIFORNIA CONSUMER PRIVACY ACT
The California Consumer Privacy Act of 2018 (the “CCPA” for short) takes effect on January 1, 2020 and provides California residents new rights to request disclosure of, delete (with exceptions), and control certain transfers of the personal information a business has collected about the them.
Grand Colonial Bed and Breakfast, which is owned and operated by E2W, LLC, provides products, services, and other features (our “Services”) to California residents through grand-colonial.com (our website), social media properties, other websites and blogs, and/or other software (our “Sites”). Here, we refer to California residents that use our Sites as “you” and “your”. If you are a California resident, or will become one in the future, please read this statement, as well as our full Privacy Statement, before using our Sites as they collectively govern our treatment of any information, including ”personal information”. The CCPA defines “personal information” as information that “identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household”. It does not include publicly available, anonymized, aggregated or other information otherwise incapable of being associated with a person or household. The CCPA substantially limits the rights of our company and those companies with whom we transact business with respect to information we collect in those contexts.
- WHAT ARE MY RIGHTS UNDER THE CCPA?
If you are a California resident, you have the right to request to know certain information about E2W, LLC’s data practices in the 12-months prior to your request. You can request the following:
Our information collection practices, including the categories of personal information we have collected, the categories of sources of such information, our business purposes for collecting or sharing such information, and the categories of third parties with whom we shared such information.
Our information sharing practices, including the categories of personal information that we disclosed for a business purpose and the categories of personal information “sold” (as defined broadly under the CCPA), and the associated categories of third-parties to whom the information was sold.
The specific pieces of personal information that we collected about you.
E2W, LLC will acknowledge receipt of your request, verify your identity and respond to your request by email. You may request this information once in a 12-month period.
You can request a report of your personal information in our possession or control by emailing us at email@example.com.
If you are a California resident, you have the right to request that E2W, LLC delete your personal information that we have collected from you. You may make this request at any time. E2W, LLC will acknowledge receipt of your request, verify your identity and respond to your request. Deletion may include erasing, de-identifying or aggregating personal information so that it is no longer reasonably capable of identifying you or your household.
Please note, however, that the CCPA allows us to retain certain personal information that may be subject to a valid deletion request, including for the following reasons:
To complete a transaction you requested
To detect security incidents
To protect against deceptive, fraudulent, or illegal activity
To promote free speech
For scientific, historical or statistical research in the public interest
For internal uses of a company where such uses are reasonable and expected by you
To comply with a legal obligation
You can request that all or a portion of your personal information in our possession or control be deleted by emailing us at firstname.lastname@example.org. We will ask you to verify your request after it is submitted. Upon verifying your request, we will notify our service providers to also delete the information subject to your request.
Right to Opt-Out from Transfers to Third Parties
If you are a California resident, you have the right to opt-out of the “sale” of your personal information to third parties. We do not sell your information for monetary consideration, but we may transfer your information to a third party that provides us with services, such as helping us with marketing, advertising, data analysis, and security, which may technically fall under the definition of “for other valuable consideration,” which may be considered a “sale” under the broad terms of the CCPA.
We will act on your request within 15 days of receipt, notify third parties receiving your information in the prior 90 days not to further sell your information, and notify you after we have instructed all such third parties. You may make this request at any time.
You can request that all or a portion of your personal information in our possession or control not be “sold” by emailing us at email@example.com.
Opt-In Following Prior Opt-Out
If you have previously elected to opt-out of the sale (as defined in the CCPA) of your personal information, you may elect to opt back in. The opt-in process will require a two-step verification to confirm your election, and will be governed by the disclosures, policies and procedures described here, in our Privacy Statement, and our Terms. You can opt-in by emailing us at firstname.lastname@example.org with “Opt-In to the Sale of My Personal Information” in the subject line and your first and last name, email address and postal mailing address in the body of the email.
Right of Non-Discrimination
You have the right not to receive discriminatory treatment by us as a result of the exercise of your rights under the CCPA, including opting out of the sale of personal information. Please note, however, that there could be a difference in the way our Sites or our Services function related to deleting certain personal information (like verifying eligibility for return guest discounts) or the inability to share personal information with certain partners or service providers. These and similar differences are permitted under the CCPA.
- ADDITIONAL INFORMATION ON EXERCISING YOUR RIGHTS
California residents may exercise their rights by submitting a request through our online contact form, which is available on our website. We will use the information you provide, and may request additional information, to confirm your identity and verify your relationship to our business before we process your request. Verification may require multi-step authentication procedures. We do have the right to deny requests under certain circumstances. In such cases, we will notify you of the reasons. We will not provide you with specific pieces of personal information if the disclosure creates a substantial, articulable, and unreasonable risk.
You may submit a request through someone holding a valid Power of Attorney or an authorized agent acting on your behalf. Authorized agents must have, and provide us with, written permission to make a request on your behalf and must provide necessary information to verify your own identity directly with us. We will require any purported authorized agent to submit proof of authorization to make requests on your behalf.
If you are not a California resident, we may fulfill a request made on this page, but are not obligated to do so. E2W, LLC reserves the right to refuse to fulfill CCPA requests or elections in the event your California residency cannot be reasonably confirmed.
- NOTICE OF COLLECTION
E2W, LLC does not knowingly engage in the collection or disclosure for consideration of the personal information of minor children under the age of eighteen. Our Sites and the features and services therein are not intended for use by those under eighteen years of age, generally.
E2W, LLC may have disclosed and/or transferred for consideration certain personal information to third parties for certain business or commercial purposes, in the preceding 12 months. Such personal information included certain identifiers, commercial information, internet or other electronic network activity information, aspects of geolocation information, audio and visual information, and inferences from the foregoing categories of personal information.