Data Transfers and Processing - Auberge Resorts Collection

DATA TRANSFERS AND PROCESSING

Auberge Resorts is headquartered in the United States, and Auberge Resorts Collection is a collection of properties in locations throughout the United States and internationally. To provide services, you acknowledge that your personal data may be shared with other ARC Properties or with third parties in locations around the world for the purposes described in this Privacy Notice.  AR and ARC Properties store and process data both inside and outside of the United States. Countries, where data is processed, may have data protection laws that differ from those in your own country.

AR and ARC Properties use the approved Standard Contractual Clauses (“SCC”) for the international transfer of personal information collected in the EEA and Switzerland or require that any third-party located in the US receiving your personal information is certified under the EU-US and/or the Swiss-US Privacy Shield Frameworks (“Privacy Shield Framework”) and require that the third party agree to at least the same level of privacy safeguards as required under applicable data protection laws.

In a limited number of situations where the personal information collected in the EEA and Switzerland cannot be transferred under SCC or the Privacy Shield Framework, then AR and ARC Properties rely on derogations for specific situations as set forth in Article 49 of the GDPR. Particularly, AR and ARC Properties collect and transfer the personal information out of the EEA and Switzerland only: with your consent; to perform a contract with you, or to fulfill a compelling legitimate interest of AR or ARC Properties in a manner that does not outweigh your rights and freedoms. AR and ARC Properties endeavor to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with AR and ARC Properties and the practices described in this Privacy Notice.

AR and ARC Properties have also entered into data processing agreements and SCCs with their vendors whenever feasible and appropriate.