This document lets you know: -
- When we collect information from you when you use the Site;
- Who exactly collects that information;
- How that information is used and by whom;
- What security measures are in place to protect this information;
- Your rights in relation to this information;
- How this policy may change and how we will notify you of any changes; and
- How to contact us if you have any queries about this policy.
WHEN AND HOW DO WE COLLECT DATA FROM YOU?
We collect data from you:-
i. when you purchase services and/or goods from the Site (directly or through the VisitWales contact centre ( 'VisitWales' );
ii. when you order brochures from the Site (directly or through VisitWales);
iii. when you register on the Site that you are happy for us to send information to you in the future.
iv. when you register your details on the Site or with VisitWales..
v. via data capture devices using cookies and studying which pages you have visited most frequently.
WHAT DATA IS COLLECTED?
The data we collect may be personal data and may include your name, e-mail address, credit or debit card number and expiry date (see 'Financial Information' below). We may also ask for your telephone number to enable us to contact you in the event that a problem arises.
We are required by HM Customs and Excise to store and collect information about the country you live in.
If you wish to make an on-line purchase from a third party or wish to make a purchase from a third party through VisitWales, we will require your credit or debit card number and expiry date in order to take a deposit payment on behalf of the business from whom you are purchasing goods or services.
Your financial information is used solely for this purpose.
As part of payment processing, your financial information will be passed to a credit card processing company. No record of your financial information will be held on the Site or otherwise by us following the processing of your payment. The credit card processing company does not use, share, retain or store this information for any purpose, other than to process your payment for the above purpose.
Cookies and System Logging
A cookie is a file that is placed on your computer by another computer on the internet to enable that computer to know when you are using a particular web site. For example, if you had a cookie on your home PC, you may be greeted by your name when you log on to a particular web site.
We do, however, record certain information regarding use of the Site on our own internal systems. This information is, however, used solely to enable us to administer the Site, to rectify errors and to hold details of a user who has added to or amended information in a particular archive.
WHO COLLECTS THE INFORMATION?
The information is collected by us, the Welsh Government, Cardiff Bay, Cardiff, CF99 1NA.
We hold valid notifications under the Data Protection Act 1998.
The personally identifiable information that is required to use the Site is owned solely by us. We do not share, sell or rent your information to any other person, company or organisation in any way other than as disclosed in this document or as stated at the point where the information is collected. You should, however, note that if you request a brochure through the Site or VisitWales, in some instances your details may be forwarded to a regional tourism marketing organisation so that they can despatch the brochure to you. [Your details will only be used by that organisation for the purposes of sending the brochure to you.]
By disclosing personal information to us you consent to the collection, storage and processing of information in the manner described in this Policy.
HOW IS THE INFORMATION USED AND BY WHOM?
The above information will be used by us for the following purposes only: -
To contact you in the event of an emergency; and
- To contact you if we experience problems in processing a payment.
From time to time, we may also forward a newsletter to your email address. This would contain information on new features and services in relation to the Site. The information may also be made available to companies of tourism related specialist supplies, products and services who are interested in advertising on the Site and who may, from time to time, email you details of specialist services which may be of interest to you.
We are not in favour of our users being inundated with inappropriate and unsolicited email. We will therefore carefully select the organisations to whom we would provide such data. Further, we will not, in any event, provide such companies with any of your financial information.
You also have the right to 'opt-out' of your information being used for purposes not directly related to the Site. For further details of this right, please see 'Your Rights in Relation to this Information' below.
WHAT SECURITY MEASURES DO WE HAVE IN PLACE TO PROTECT THIS INFORMATION?
To protect your privacy, your financial information is sent to us through a secure server which encrypts it before it is sent to us. We also use our best efforts to protect your information off-line: it is only given to those of our employees who genuinely need to have access to it in order to perform their job. Furthermore, our security procedures for storing and disclosing customer details conform with the Data Protection Act 1998 so as to prevent unauthorised access to it.
The Site may, from time to time, contain links to other web sites. We are not responsible for the privacy practices of the owners and operators of these sites. We therefore encourage you to read the privacy statements and policies on each site to which you are asked to submit personal information.
YOUR RIGHTS IN RELATION TO THIS INFORMATION
If you wish to change any of your personal information, please use the facilities available on the Site to correct and update it.
You also have the opportunity to 'opt-out' of having your information used for purposes not directly related to the Site at the point where we ask you for that information. For example, if you wish to register to create or use an archive (e.g. a discussion thread) but do not want to receive future newsletters, promotional emails or marketing material, simply put a cross in the relevant box that appears in our registration form.
If, after a certain period of time, you decide that you no longer wish to receive newsletters, promotional and marketing emails, you can change your personal profile accordingly. Alternatively, you may decide that you would like to begin to receive newsletters, promotional and marketing emails.
In order to change your personal profile, please follow the process set out under 'my details' in the top navigation bar. Please note, however, that we cannot backdate any changes that you make. This means that you could continue to receive information from a particular third party where we have already provided your details to that third party. You will therefore have to contact each such third party if you no longer wish to receive newsletters, promotional and marketing emails directly from them.
Please note that we reserve the right to change this policy at any time in the future, with or without notice. Should we decide to change the policy, we will post notification of the changes on 'about this Site' section on the left navigation bar.
If you have any questions about this document or our procedures please contact us at firstname.lastname@example.org