What rights can I exercise?

• Right to Know/Access. You have a right to request that we disclose, up to two times per year: (1) the categories of personal information we have collected, sold, or shared about you; (2) the categories of sources from which your personal information was collected, sold, or shared; (3) the business or commercial purpose for collecting, selling, or sharing your personal information; (4) the categories of third parties to whom we’ve sold, shared, or disclosed for a business purpose your personal information; and (5) the specific pieces of personal information we have collected about you. You have a right to access your personal information subject to certain exceptions, and obtain a copy of the personal information in a portable format.

• Right to Delete. You have a right to request that we delete the personal information we hold about you, subject to certain exceptions available under applicable law.

• Rights to Correct: You have a right to ask that we correct inaccurate or incorrect personal information we have collected about you, subject to certain exceptions available under applicable law. 

• Right to Opt-Out. You have a right to opt-out of the sale or sharing of your personal information or the use of your personal information for targeted advertising.

• Right to Non-Discrimination. You have a right to exercise the above rights without being discriminated against.  

How do I exercise my rights?

You can exercise your rights at any time as follows:

• To submit a request for Right to Delete, please contact us at dpo@myunidays.com;
• To submit a request for Right to Know/Access, please contact us at dpo@myunidays.com;
• To submit a request for Right to Correct, please contact us at dpo@myunidays.com. 
• To submit a request to opt-out of the sale of your personal information, please contact us at dpo@myunidays.com.
• To submit a request to opt-out of the sharing of your personal information, please contact us at dpo@myunidays.com.
• To submit a request to opt-out of the use of your personal information for targeted advertising, please click the ‘Do Not Sell or Share My Personal Information’ button on the footer of this website. Alternatively, you can contact us at dpo@myunidays.com

Notice for California Residents - California Consumer Privacy Act

Definitions

• Personal information. Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you or your household.
• Sensitive personal information. Social security number, driver’s license number, state identification card, passport number, account log-in and password, financial account and password, debit or credit card number and access code, precise geolocation information, race, ethnic origin, religious or philosophical beliefs, union membership, the content of your mail, email or texts other than those communications with us, genetic data, biometric information, health information, and information that concerns your sex life or sexual orientation.
• Sell, sale, or sold. Selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or other means, your personal information to a third party for money or other valuable consideration.
• Share, shared, or sharing. Shearing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or other means, your personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.

Your Rights

You may designate an authorized agent to submit a request for any of the rights below on your behalf. When you use an authorized agent, you must provide the authorized agent with a signed written permission to do so. We may also ask you to verify your own identity directly with us. The process for exercising the below rights is set out above under the heading ‘How do I exercise my rights’. 

• Right to Know: You have a right to request that we disclose, up to two times per year: (1) the categories of personal information we have collected, sold, or shared about you; (2) the categories of sources from which your personal information was collected, sold, or shared; (3) the business or commercial purpose for collecting, selling, or sharing your personal information; (4) the categories of third parties to whom we’ve sold, shared, or disclosed for a business purpose your personal information; and (5) the specific pieces of personal information we have collected about you. 

• Right to Delete. You have a right to request that we delete the personal information we hold about you, subject to certain exceptions available under applicable law.
• Right to Correct. You have a right to ask that we correct inaccurate or incorrect personal information we have collected about you, subject to certain exceptions available under applicable law. Also you can login to your account and make any correction to your personal information, as may be necessary.
• Right to Opt-Out of the Sale or Sharing of Your Personal Information. You have a right to opt-out of the sale or sharing of your personal information.
• Right to Non-Discrimination. You have a right to exercise the above rights without being discriminated against.  

Notice of Collection

Below we identify the categories of personal information we have collected about California residents in the 12 months preceding the date this US State Privacy Notice was last updated. This list includes information about: (1) whether this information includes sensitive personal information; (2) the categories of sources from which the personal information was collected; (3) the business or commercial purpose for collecting, selling, or sharing the personal information; and (4) the categories of third parties with whom we disclose such information. 

• Identifiers: Information such as your name, online identifier, IP address, country of residence, work email address, company name, industry, job title and phone number. 

• Sensitive Personal Information: Information used to secure your account (account login email address and password)

• Internet or other Electronic Network Activity Information: Includes information about your interaction with our websites, advertisements, and browsing history on our Site.
• Geolocation Information: Such as your country or city-level location or time zone.
• Inferences: derived from the above information to create a profile reflecting an individual’s preferences and characteristics.

 

Disclosure	Categories	Description
How do we collect this information?	Identifiers	We collect this category of information from you directly.
	Sensitive Personal Information*	We collect this information from you directly when you log in to the website.
	Internet or other electronic activity information	We collect this category of information from you or your device(s) when you provide it to us or interact with us online (such as through our websites). We also collect this information from third parties such as online data aggregators.
	Geolocation information	We collect this category of information from you or your device(s) when you provide it to us or interact with us online.
	Inferences	We draw inferences about you from the information we collect from you or your device(s) when you provide it to us or interact with us online . We also draw inferences about you from the information we collect from third parties such asservice providers.
Does this include sensitive personal information?	Yes. * Denotes which categories may include sensitive personal information.
Is the information “sold” or “shared”?	No
What is our business purpose for collecting your information?	See “What Information does UNiDAYS Corporate collect and why”.
Who do we disclose this information to?	See “How does UNiDAYS Corporate share personal data”?
How long do we keep this information?	We keep the information identified above for so long as is reasonably necessary and proportionate to the original purpose for which we collected the information. We base our criteria in determining appropriate retention periods on regulatory and legal requirements, contractual requirements, business needs, and the expectations of you.

 

Notice of Disclosure for a Business Purpose

In the last 12 months preceding the date this Privacy Notice was last updated, we have shared with third parties, for a business or commercial purpose, the types of personal information described in the “Notice of Collection” section above. 

Notice of Sale and Sharing

In the last 12 months preceding the date this Privacy Notice was last updated, we have not shared or sold your personal information, as defined under California law.

Notice of Processing Sensitive Personal Information

We do not use California residents' sensitive personal information to infer characteristics about California residents. 

US-wide Metrics on Consumer Rights Requests for 2023

The following chart shows details about the consumer rights requests we received in the United States from January 1, 2023 to December 31, 2023:

 

Request Type	Received	Complied with in whole	Complied with in part	Denied
Requests to Know	0
Requests to Delete	0
Requests to Opt-Out of Personal Information Sales and Sharing	0

California’s “Shine in the Light” law

If you are a California resident and a UNiDAYS Corporate customer, you have the right to request information from us once per calendar year regarding the customer information we share with third parties for the third parties’ direct marketing purposes. To request this information, please send an email to DPO@myunidays.com with ‘Request for California Privacy Information’ in the subject line and in the body of your message. We will provide the requested information to you via an email response.

California’s “Eraser Button” law

If you are a California resident under 18 years old and a registered user of the Site (as defined above), you can request that we remove content or information that you have posted to our website or other online services. Fulfilment of the request may not ensure complete or comprehensive removal (e.g., if the content or information has been reposted by another user). To request removal of content or information, please contact us at DPO@myunidays.com 

Notice For Virginia, Colorado, Utah, and Connecticut Residents

Definitions

• Personal information. Information that is linked or reasonably linkable to an identified or identifiable individual. 
• Sensitive personal information. Information that includes data revealing racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis, sex life, sexual orientation or citizenship or immigration status, the processing of genetic or biometric data for the purpose of uniquely identifying an individual, personal data collected from a known child, or precise geolocation data. 
• Sell, sale, or sold. The exchange of personal data for monetary or other valuable consideration.
• Targeted advertising. Displaying advertisements to a consumer where the advertisement is selected based on personal data obtained or inferred from that individual’s activities over time and across nonaffiliated Internet web sites or online applications to predict such individual’s preferences.

Notice of Collection

To learn more about the categories of personal information we collect about you and how we use it, please see ‘What information does UNiDAYS Corporate collect and why’. To learn more about the categories of third parties with whom we may share your personal information, please see ‘How does UNiDAYS Corporate share personal data’.

Your Rights

• Right to Know and Access: You have a right to know whether UNiDAYS Corporate is processing your personal information, access such personal information subject to certain exceptions, and obtain a copy of the personal information in a portable format. The process for exercising this right is described above. 
• Right to Delete. You have a right to request that we delete your personal information. The process for exercising this right is described above.

• Right to Correct. You have a right to ask that UNiDAYS Corporate correct the personal information it has about you, subject to certain exceptions. The process for exercising this right is described above.
• Right to Opt-Out. You have a right to opt-out of the sale or use of your personal information for targeted advertising. The process for exercising this right is described above.
• Right to Non-Discrimination. You have a right not to be discriminated against for the exercise of your rights described herein. 

Notice for Nevada Residents

If you are a Nevada resident, you have the right to submit a request directing us not to make any sale of your personal information. UNiDAYS Corporate does not sell your personal information under Nevada law. However, to request email confirmation that we do not sell your personal information, please send an email to Dpo@myunidays.com with “Request for Nevada Privacy Information” in the subject line and in the body of your message. We will provide the requested information to you via an email response.