California Travel and Tourism Commission dba Visit California
Address: 555 Capitol Mall, Suite 1100, Sacramento, CA 95814
Phone Number: +1 (916) 444-4429
Toll Free: +1 877-822-8687
Email address: privacy@visitcalifornia.com
VeraSafe
Address: 100 M Street S.E., Suite 600, Washington, D.C. 20003 USA
Phone Number: +1 (617) 398-7067
Email address: experts@verasafe.com
Web: https://www.verasafe.com/about-verasafe/contact-us/
Identity and contact details of the Representative in the EU: click here.
Identity and contact details of the Representative in the UK: click here.
YES. Some categories include contact information (e.g., full name, postal address, phone number, email address, etc.) and online identifiers (e.g., IP address, cookie identifiers, etc.).
Click here to know which categories of Personal Data we collect and how we obtain them.
NO. Like many companies, however, we use service providers that help deliver interest-based ads to you or analyze our Sites traffic and may transfer Personal Data to business partners for their use. Making Personal Data (such as online identifiers or browsing activity) available to these companies may be considered a “sale” under some privacy laws.
Click here to opt out of the sale of your Personal Data.
YES. Please read our Cookie Notice.
YES. Please read our Cookie Notice.
YES. Click here to learn how to receive a copy.
YES. Click here to learn how to withdraw consent.
YES. Click here to learn how to request that your data is deleted.
YES. Click here to learn how to opt out of the sale of your Personal Data.
NO. Click here to learn more about your right not to be discriminated.
NO
YES. Click here to learn more about how we protect your Personal Data.
The California Travel and Tourism Commission dba Visit California (“Visit California”, “we”, “us”, “our”) is a non-profit organization with a mission to develop and maintain marketing programs that inspire travel to, and within, California. Visit California takes the protection of personal data (“Personal Data”) very seriously. Please read this privacy notice (the “Notice”) to learn what we are doing with your Personal Data, how we protect it, and what privacy rights you may have under applicable data protection and privacy laws, such as the EU General Data Protection Regulation, the UK GDPR (GDPR) and applicable U.S. State Privacy Laws.
This Notice addresses data subjects, such as visitors, users and others (which includes both individuals and households) whose Personal Data we:
This Notice does not apply to the Personal Data of employees, job applicants, contractors, business owners, directors, and officers of Visit California.
If we do not maintain information in a manner that identifies, relates to, describes, is reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular individual or household, such information is not considered Personal Data and this Notice will not apply to our processing of that information.
This Notice tells you, among other things:
Within the scope of this Notice, Visit California acts as a data controller or “business” for the Personal Data we process. This means that we decide how and why Personal Data is collected and further processed.
We must have a valid reason to use your Personal Data. This is called the "lawful basis for processing". We may process your Personal Data on the basis of:
Where we process your Personal Data based on your consent, you may withdraw it at any time. However, this will not affect the lawfulness of our processing before you withdrew your consent. It will also not affect the validity of our processing of Personal Data performed on other lawful grounds.
Where we receive your Personal Data as part of our Services to fulfill a contract, we require such Personal Data to be able to carry out the contract. Without that necessary Personal Data, we will not be able to provide our Services.
We may process your Personal Data based on the following legitimate interests:
When we rely on legitimate interests as a lawful basis of processing, you have the right to ask us more about how we decided to choose this legal basis. To do so, please use the contact details provided below.
The table below describes the categories of Personal Data we have collected about you in the last twelve months.
We will not collect additional categories of Personal Data without informing you.
We may process your Personal Data for the following purposes:
We will retain your Personal Data for as long as is necessary to fulfill the purpose for which we collected your Personal Data and any other permitted linked purpose and in compliance with our data retention policies. For example, we will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
Generally, we retain usage data for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Sites, or we are legally obligated to retain this data for longer time periods.
If your Personal Data is used for more than one purpose, we will retain it until the purpose with the longest retention period expires; but we will stop using it for the purpose with a shorter retention period once that period expires. Our retention periods are also based on our business needs and good practice.
Your Personal Data may need to be retained in our backup systems and will only be deleted or overwritten at a later time. This may be the case even when you or a Supervisory Authority has validly asked us to delete your Personal Data or when we do not no longer have a legal basis for processing such Personal Data.
This is called the right of access. This right allows you to ask for full details of the Personal Data we hold on you. You have the right to obtain from us confirmation of whether or not we process Personal Data concerning you, and, where that is the case, a copy or access to the Personal Data and certain related information.
Once we receive and confirm that the request came from you or your authorized agent, we will disclose to you:
This is called the right to rectification. It gives you the right to ask us to correct without undue delay anything that you think is wrong with the Personal Data we have on file about you.
This is called the right to erasure, right to deletion, or the right to be forgotten. This right means you can ask for your Personal Data to be deleted.
This is called the right to restrict processing. It is the right to ask us to only use or store your Personal Data for certain purposes.
This is called the right to object. This is your right to tell us to stop using your Personal Data where we rely on a legitimate interest.
This is called the right to data portability. It is the right to obtain your data in a structured, commonly used format.
We will not discriminate against you for exercising any of your privacy rights.
To exercise any of the rights described above, please submit a request by either:
In order to correctly respond to your privacy rights requests, we need to confirm that YOU made the request. Consequently, we may require additional information to confirm your identity.
If you are submitting a request on behalf of somebody else, we will need to verify your authority to act on behalf of that individual by providing proof of signed permission, a valid power of attorney, or parental responsibility.
We will confirm the receipt of your request within ten (10) business days. Please allow us up to a month to reply to your requests. If we need more time (up to 90 days in total), we will inform you of the reason why in writing.
Our Sites are not directed at, or intended for use by, children under the age of 13.
We are strongly committed to keeping your Personal Data safe. We have implemented and will maintain technical, administrative, and physical measures that are reasonably designed to help protect your Personal Data from unauthorized processing.
If the GDPR applies to our processing of your Personal Data, you have the right to lodge a complaint with a supervisory authority if you are not satisfied with how we process your Personal Data.
If we make any material change to this Notice, we will post the revised Notice to this web page. We will also update the last updated date. By continuing to use our Sites after we post any of these changes, you accept the modified Notice.
If you have any questions about this Notice or our processing of your Personal Data, or want to submit a verifiable consumer request, please contact our privacy team by email at privacy@visitcalifornia.com or by postal mail at:
California Travel and Tourism Commission dba Visit California
Attn: Visit California Privacy Team
555 Capitol Mall, Suite 1100,
Sacramento, CA 95814
United States
Please allow up to four weeks for us to reply.
We have appointed VeraSafe as our representative in the EU for data protection matters. While you may also contact us, VeraSafe can be contacted on matters related to the processing of Personal Data. To contact VeraSafe, please use this contact form: https://www.verasafe.com/privacy-services/contact-article-27-representative/ or via telephone at: +420 228 881 031.
VeraSafe Netherlands BV
Keizersgracht 555
Amsterdam 1017 DR
The Netherlands
We have appointed VeraSafe as our representative in the EU for data protection matters. While you may also contact us, VeraSafe can be contacted on matters related to the processing of Personal Data. To contact VeraSafe, please use this contact form: https://www.verasafe.com/privacy-services/contact-article-27-representative/ or via telephone at: +44 (20) 4532 2003.
VeraSafe United Kingdom Ltd.
37 Albert Embankment
London
SE1 7TL
United Kingdom
