DECLARACIÓN DE PRIVACIDAD Y COOKIES

PRIVACY AND COOKIES STATEMENT

• Contact information, such as name, phone number, mailing address, and email address (both encrypted and unencrypted)
• Billing information and other payment information (such as your bank account information, credit card number, cardholder name, expiration date, authentication code, and billing address)
• Documentation to support travel and planning
• Username and password
• Data related to your Tripadvisor membership
• Photos, opinions, posts on forums and social networks and videos that you have provided to us
• Geolocation information
• Device Information, such as when you accessed our Services and information about the Device used (for example, IP address, software  or Internet browser used, preferred languages, unique Device identifiers and advertising identifiers)
• Online activity, including pages you visited, content you watched, and apps you explored
• Other information about you that you have voluntarily provided to us
• Purchase and reservation history
• Information about your travel plans and preferences, experiences and meals
• Communications when you contact our customer support team, including inbound and outbound calls
• Information you provided to other third-party companies for the purpose of logging into social media. This includes publicly available information such as name, age range, and email addresses.

• Register and manage your account, including to allow you to access and use our Services
• Facilitate your reservations
• Process payments or credits
• Offer you promotional programs that may include contests, gift cards, rewards, cash back, and discounts

• Use your information for analytical purposes and to allow us to improve our Services
• Offer you a personalized/optimized experience by grouping users based on, for example, their usage, interests, and demographics
• Send you invitations to surveys, market research or panel interviews for analytical purposes

• Send you notifications about special offers, products or services that are available from us, our affiliates or our partners, and that may be of interest to you
• Tailor your experience, including making inferences about your interests and preferences based on your activity, and personalize the ads shown to you, both on and off our website

• Communicate with you or facilitate communication between you and our partners and/or affiliates
• Make, monitor and record your calls or interactions with us; for example, your communications with our customer service or sales teams, or through our use of pixels and similar technologies to monitor how you interact with our emails, such as whether you open or click on the content from our emails
• Contain your opinions, forum posts, photos, videos and other content
• Answer your questions and comments

• Resolve disputes or solve problems
• Prevent fraud and other potentially prohibited or illegal activities
• Comply with relevant laws, respond to legal requests, prevent harm and protect our rights
• Provide payment services, including to detect and prevent money laundering, fraud and security incidents, in order to comply with legal obligations and to enforce relevant terms of service

• Our group of companies . We may share information with certain companies in our corporate family to provide you with information about products and services, both travel-related and others that may be of interest to you, and to provide you with payment services. This sharing also allows us to better understand how you interact with the websites, applications and services of our group companies. These companies will comply with this Statement and all applicable laws governing the transmission of promotional communications. 
• Suppliers . We may share information with certain vendors we use to facilitate our Services, for example where it is relevant to assist with transactions.
• Business partners . We may share information about you, your Devices, and your use of our Services with our trusted business partners. For example, we may share information to facilitate payment for products or services you may purchase on our partners' websites. This sharing is generally done pursuant to written agreements that include confidentiality, privacy, and security obligations; Please note, however, that we do not control the privacy practices of these third-party business partners.
• Social media websites . When you use our Services and choose to share information with third-party social media websites, the information you share will be governed by the privacy policies of those social media websites and the privacy settings you have established with those social media websites. social media.
• Advertising networks . We sometimes collect and share information about your interests with advertising networks and data aggregators. Some of these companies are members of the Network Advertising Initiative or the Digital Advertising Alliance , which offer a single location to opt out of receiving advertising from member companies. To learn more about the Digital Advertising Alliance, click here .
• Fraud detection companies . Third parties can help us by offering us their fraud detection technologies. 
• Trusted third parties. Third parties may also help us collect information, for example through operational functions of our website or by providing online advertising tailored to your interests. We may share audience segments and other information, such as encrypted email addresses, with third parties who use that information to serve you personalized advertisements. Other third parties may also provide us with their content and contract generation, management and hosting tools. Third parties may only collect or access information as necessary to perform their permitted functions. If and to the extent that these third parties only assist us in fulfilling our processing operations, they are contractually obliged to act only on our behalf as data processors. 

• To comply with subpoenas, court orders or other legitimate and enforceable legal processes; to establish or exercise our legal rights; to defend ourselves against legal claims; or as required by law. In such cases, we reserve the right to raise or waive any legal objection or right available to us.
• To investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, property or safety of Tripadvisor, our customers or others; and in connection with our Terms of Use and other agreements.
• In connection with a corporate transaction, such as a divestiture, merger, consolidation or sale of assets, or in the unlikely event of bankruptcy.

• Choose the way we communicate with you.
• Choose not to provide us with certain information, although it may be necessary to take advantage of certain features offered on our websites.
• Prevent the collection of certain geolocation information (for example, by turning off location services for our app in your phone settings); but please note that turning off location sharing may affect certain features of our Services.
• Close your account directly from your member profile. Please note that if you close your account, we will deactivate it and remove your profile information from active view. We may retain certain information associated with your account (including past transactions) for internal purposes, such as backups, fraud prevention, dispute resolution, investigations, our own legitimate business interests, and legal compliance for the period necessary to comply with the objectives described in this Declaration.
• As a registered member, you can modify your marketing subscriptions , including email subscription options, at any time within your member settings.
• Unsubscribe from promotional messages, including emails about travel-related opportunities, in any email we send.

12. Europe and the United Kingdom

• The right to request access to your personal information. This allows you to receive a copy of the personal information we hold about you.
• The right to request correction of your personal information if it is incorrect. It may also supplement any incomplete personal information we hold, taking into account the purposes of its processing.
• The right to request deletion of your personal information if:

• your personal information is no longer necessary for the purposes for which we collect or process it; either
• withdraw your consent if the processing of your personal information is based on consent and there is no other legal basis; either
• you object to the processing of your personal information and we have no overriding legitimate ground for its processing; either
• your personal information was processed unlawfully; either
• Your personal information must be deleted for compliance with a legal obligation.

• The right to object to the processing of your personal information. We will comply with your request, unless we have an overriding legitimate interest in processing your information or we need to continue processing your personal information to establish, exercise or defend a legal claim.
• The right to restrict the processing of your personal information, if:

• you dispute the accuracy of your personal information, during the period in which we need to verify the accuracy of the personal information; either
• the processing is unlawful and you object to the deletion of your personal information and request its restriction; either
• We no longer need your personal information for the purposes of processing, but you need your personal information for legal reasons; either
• you objected to processing during the period in which we have to verify compelling legitimate grounds.

• The right to data portability. You may request that we send this personal information to a third party, where feasible. You only have this right if it relates to personal information that you have provided to us where the processing is based on consent or necessity for the performance of a contract between you and us, and the processing is carried out by automated means.
• You also have the right to lodge a complaint with the national data protection authority.

• to a country recognized by the European Commission as providing an adequate level of protection; either
• to a country that does not offer adequate protection but whose transfer is regulated by the European Commission's standard contractual clauses or by implementing other appropriate cross-border transfer solutions to provide adequate protection.

13. United States

13.1. Your US State Privacy Rights

• Right to know . You may have the right to request that we disclose to you the categories and specific pieces of personal information we collect about you, the categories of sources from which we collect your personal information, our business or commercial purpose for collecting, selling or sharing your personal information, the categories of personal information that we disclose for business purposes, any categories of personal information about you that we have sold, and the categories of third parties with whom we have disclosed your personal information, if applicable. You may have the right to request your personal information in a portable format. 

• Elimination. You may request that we delete the personal information we hold about you, subject to certain exceptions. As described in more detail in our Statement, there are some reasons why we would not be able to fully respond to your deletion request, for example, if we need to complete a transaction for you, to detect and protect ourselves from fraudulent and illegal activity, to exercise our rights, or to comply with a legal obligation. You may also access, update and delete your information by visiting the Member Profile page on our website.

• Correction. You can request that we correct incorrect personal information we hold about you.

• Choose not to have my data sold or shared and not receive targeted ads . Depending on the local laws of the state in which you reside, you may choose not to have your personal information sold or shared with third parties, or to not have your personal information used or disclosed for targeted advertising. To opt-out, click the “Do Not Sell or Share My Personal Information” link on our home page/app. You can also use a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as an opt-out request.

13.2 Notice of financial incentives

14. Korea

14.1 Korean Privacy Law Statement 

• The right to consent to the collection of your personal data. When we ask you for your personal data, the data that is mandatory for the services being provided to you will be marked. You may choose not to provide us with the requested data, but this may prevent your use or access to the relevant services.
• The right to consent to the sharing of your personal data, the delegation of processing of your personal data or the international transfer of your personal data.
• The right to request access, correction, deletion and suspension of processing of your personal data to the extent permitted by Article 35, Section 5 and Article 37, Section 2 of the Personal Information Protection Law.
• To exercise your rights, please submit a request here . You may also appoint an agent to exercise your rights by submitting a power of attorney in the form of Schedule 11 under the regulations of the Personal Information Protection Act. We reserve the right to request specific information from you to confirm your identity or verify the identity and relationship of your agent to ensure your right to access your personal data (or exercise any of your other rights).

• Administrative security procedures: Only a limited number of authorized workers can access personal data, in accordance with internal access controls. Access is granted based on role permissions, and only for permitted business roles.
• Technical security procedures: personal data is encrypted when transmitted. We use firewalls  and intrusion detection systems to prevent unauthorized persons from accessing personal data. Certain user data may be encrypted, depending on its sensitivity.
• Physical security procedures: Data is protected in restricted and locked cages. This data is stored in restricted data centers. Hard drives are physically destroyed when replaced and we have internal procedures to ensure access to server rooms and restricted physical assets.

• Procedure: Personal information is discarded, destroyed or deleted for information protection, in accordance with our internal company policy and other applicable laws, after the purpose of its collection has been fulfilled.
• Method: Personal information in paper format will be destroyed using a paper shredder, and personal information stored in electronic format will be destroyed using technical methods that make records unrecoverable.

15. Brazil

• Fulfill the purpose given at the time of collection, including to enable the performance of the contract we enter into with you.
• Comply with legal or regulatory obligations, regulations of government agencies, tax authorities, judicial authorities and/or other competent authorities.
• Allow the regular exercise of our rights guaranteed by law, including as evidence in judicial, administrative or arbitration proceedings.
• Allow activities necessary for our operations that imply the continuity of our operations, while balancing them with your interests and expectations so as not to cause harm to your interests, rights and fundamental freedoms.
• Comply with the purpose for which the information was provided or for other purposes compatible with them and informed at the time of collection of your data. For example, we may process your data when we communicate with our service channels, including to obtain information about our products or to receive your feedback.
• Based on our legitimate interests, we may also process your personal information, for example, to enable our communications and marketing activities and improve our products, services and relationships with our customers and partners, while balancing your interests and expectations to not cause a violation of their rights or fundamental freedoms.
• Prevent fraud and ensure its security to detect, avoid and investigate fraudulent activities.

• Know whether we process your personal information, including the types of personal information. 
• Correct incomplete, inaccurate or outdated personal information.
• Request anonymization, blocking or deletion of unnecessary, excessive or perhaps illegal information.
• Request the portability of your information to another service or product provider.
• Request the deletion of the data processed with your consent.
• Where the processing activity requires your consent, you may refuse to give your consent, and we will inform you of the consequences of your refusal.
• Where the processing activity requires your consent, you may withdraw your consent at any time.

• Administrative security procedures: A limited number of authorized workers can access personal data, in accordance with internal access controls. Access is granted based on role permissions, and only for permitted business roles.
• Technical Security Procedures: Personal information is encrypted when transmitted. We use  firewalls  and intrusion detection systems to prevent unauthorized persons from accessing personal data. Certain user data may be scrambled or encrypted depending on its sensitivity or processing activity.
• Important security procedures: Data is protected and stored in restricted data centers. Hard drives are physically destroyed when replaced and we have built-in procedures to ensure access to server rooms and restricted physical assets.

• Procedure: Personal information is deleted or destroyed in accordance with our company's internal policy and other applicable laws.
• Method: Personal information in paper format is securely destroyed; for example, using paper shredders. Personal information stored in electronic format is destroyed using technical methods that render the records irretrievable.