VisitHaywood.com is the official travel website for Haywood County, NC and is published by HCTDA. This Privacy Statement applies to all HCTDA websites, including all subdomains.

No personal information is required to access the Websites. However, to request a Visitors Guide, sign up for a newsletter, and make a purchase through our online store, certain information may be required. It is entirely voluntary for those visiting the Websites to provide personal information in connection with services to receive this information.

We will use information about you for any of the following purposes:

• To make it easy for you to find destinations, events and other information about Haywood County as a tourist destination.
• To send out Visitor Guides and other physical materials via mail, through our Websites, and other channels.
• To provide information about news, events and HCTDA promotions.
• For statistics, aggregation and management of sites and services.

We obtain information to get further information about website users, including how users come to the Websites, as well as tracking general usage patterns of users on our Websites. We use this information to manage and enhance the Websites.

We process both personally identifiable information (“PII”) and non-personally identifiable information about you. PII is information that identifies you as an individual. Non-PII is information and any other details that do not reveal your personal identity.

Personally identifiable information

We may collect and process the following information:

You can affirmatively subscribe to newsletters so that you receive emails from us. For us to send email to you, you must register an email address, and your first and last names where required.

If you direct a request to us via the web, such as sending us an email, your information could be stored, including name and email address.

If you sign up to receive our Visitors Guide and/or our e-mail newsletter and later change your mind, simply click the unsubscribe link in any of our e-mail updates.

You can order Visitors Guides and other information and materials by providing your name, business (if applicable), email and postal address. PII we receive for processing orders of such material will not be used for any purpose other than to effectuate the order, unless you have explicitly indicated that you want to receive e-mail from us.

When you visit our Websites, like most websites, your IP address is recorded. We do not link this information directly to you as a user. The information is used to manage and maintain the Websites. Examples of information that this data provides: How many people visit different sites, how long the visit lasts, what websites users are coming from and which browser is used. This enables us to develop better and more user-friendly services. See more about web analytics and cookies below.

We may keep track of the websites and pages our users visit within our website to determine what services are the most popular. This data is used to deliver customized content and advertising to users whose behavior indicates that they are interested in a particular subject area.

Surveys

We may use survey providers such as Survey Monkey and/or Google Forms user surveys. It is voluntary to participate in user surveys, and we collect only with your explicit consent.

Geo-Location Data

If you are accessing a page or service from a computer or a mobile device, you may be asked to share your precise (GPS level) geo-location information with us so we can customize your experience on our services or on other services when we work with a marketing partner such as a third party service provider, advertiser, advertising network and platform, advertising agency, or data broker or aggregator. If you agree to the collection of location data, in most cases, you will be able to turn off such data collection by accessing the privacy settings of your mobile device.

Usage Data, Web Analysis, and Cookies

The Websites collect Usage Data as you use them, including your interactions with emails we send, and via social media platforms, third-party platforms, third-party websites, applications, integrations, and services of our marketing partners. This data may be passively or automatically collected (that is, gathered without your actively providing the information) using various analytics and reporting technologies, such as cookies, web beacons, locally stored objects, mobile device identifiers and SDKs, and other similar methodologies as well as technologies developed in the future. We use common Internet technologies, including Google Analytics and "cookies" to collect information about users so that at any time we can provide the best possible functionality and develop our information services. This information is taken from the computer's web browser and may include your IP address, operating system, browser, screen resolution and previous website.

"Cookies" are small information capsules (text files) that the website asks your browser to store on your computer or mobile device. This allows the website to remember actions or preferences over time. Most browsers automatically accept cookies. You can always choose not to accept a cookie by changing your browser settings to reject cookies automatically, or so that each cookie must be approved individually, but this may limit the functions available. Consent is considered given if the browser is set to accept the use of cookies, including browsers pre-set for acceptance.

To read more about cookies, including how to opt out of accepting cookies on your computer, see for example: allaboutcookies.org/manage-cookies/ and Google Analytics.

When you visit the Websites, we and third parties may use cookies, web beacons, or similar technologies to collect or receive non-PII (such as general location data based on the internet protocol (IP) address of your device or interactions with this site’s advertisements) and use that information to provide measurement services and to target advertisements to inspire a site visitor to visit Haywood County. You may choose to opt-out of the collection and use of information for ad targeting. For details visit www.aboutads.info/choices www.aboutads.info/choices or www.networkadvertising.org/choices. EU visitors can see details at www.youronlinechoices.eu. If a site visitor wishes to opt out of cookies allowing this site to serve advertisements while the site visitor is in Haywood County, and collect aggregate information upon that site visitor’s arrival, click here.

Your consent applies to the Websites.

Removal of data

In the event you want us to delete your personal information we may have stored, you may contact us at privacy@visithaywood.com. We will make reasonable efforts to comply with such requests within 30-60 days depending on the complexity of the actions necessary to complete it. We are not, of course, able to delete all data entirely, as retention of certain data is required by law, useful for reasons of public interest, or otherwise necessary and reasonable in view of the law and our potential legal positions.

Our website does not gather information about your age and does not purposely process information about children under 15 years of age.

A Note for Parents: The Websites, services provided, and any other affiliated forums, are not directed to children under eighteen (18) years of age. We do not knowingly solicit or collect personal information from children under eighteen (18) years of age. If you are a parent or guardian and have become aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we will make commercially reasonable steps to remove that information from our servers.

We may make full, unrestricted use of Usage Data for any purpose in our sole discretion, including without limitation, to customize or personalize ads, offers and content made available to you based on your visits to and/or usage of this site or its services, and to analyze the performance of those ads, offers and content, as well as your interaction with them.

We may combine and use the PI and Usage Data we collect from all services and products offered by us and our affiliated entities over various websites to provide, protect, and improve them, and to develop and offer new services and products. We will treat you as a single user of these combined services and products. We may also use this information to provide you with personalized ads.

To ensure that the processing of information is carried out in a safe manner, only specifically authorized persons at HCTDA, and our subcontractors and system suppliers (see below) will have access to the information you provide us. The number of employees and contractors with such approval is limited. Access to information is secured by access mechanisms.

We will not disclose, sell, distribute, rent, license, share, or pass details or personal information to any third parties other than those who deliver and are contracted to deliver services to us, unless we have your express consent to do so.

HCTDA has signed an agreement with various distribution partners who distribute our newsletters, brochures and other materials, so-called "routing." Distribution partners are:

• Mail Chimp for email communications
• USPS to distribute Visitor Guides

We will not share personal information with our distribution partners to a greater extent than is necessary to complete the purpose, such as sending out visitor guides and newsletters. By contract, our suppliers may not use or disclose your personal information for other purposes, without your permission.

It is voluntary to subscribe to newsletters, which distribute current information about Haywood County but may also contain commercial information about products and services from local businesses. The newsletters are typically sent out 1-2 times a month. You can unsubscribe at any time via a link in the newsletter.

The Websites use data collected from website visitors for remarketing and retargeting purposes. However, we do not allow any third party to use your personal data for marketing or communication purposes, other than those that are related to HCTDA business, marketing, or communications.

HCTDA has signed agreements with the following data handlers:

• Sanity (sanity.io)
• SnapSea (snapsea.io)
• MMGY (mmgy.com)
• DCI (aboutdci.com)
• Datafy (datafy.io)
• Visit NC (visitnc.com)
• Distribution partners mentioned in section 5, above.

Our sites are currently located on servers in the USA, but our data processors have reserved the right to transmit information to servers or subcontractors in other countries.

You have the right to know how your personal information is processed by our organization. HCTDA has given this information in this statement.

If HCTDA handles personal information about you, you are entitled to access your own information. If personal information is inaccurate, incomplete, or inaccessible, you can ask us to correct the information or to remove it. See contact information above.

We may use the information that we collect about you when we have reason to believe it is necessary to identify, contact, or bring legal action against persons or entities that may harm you, us, or others. We may also disclose your information when we believe it is required by law.

By using our Websites, you accept that your personal data may be processed in accordance with this privacy policy, which includes transferring data to agents and third parties as described in this statement. Certain external tools may be available to you to opt out of our automatic collection of your data, in addition to the tools provided through our website.

HCTDA operates from the USA and is subject to US law. By accessing our Website(s), you agree that all matters relating to this Agreement shall be interpreted in accordance with the laws applicable in North Carolina, without reference to its conflict of law provisions, and the parties agree to the exclusive jurisdiction of the Courts of Haywood County, North Carolina, unless prohibited by applicable law. This Agreement shall inure to the benefit of and be binding upon the successors, heirs, legal representatives and assigns of each of the HCTDA and you, as applicable.

California Online Privacy Protection Act Compliance

Because we value your privacy, we have taken the necessary precautions to comply with the California Online Privacy Protection Act. We therefore will not distribute your personal information to outside parties without your consent.

E.U. General Data Protection Regulation (GDPR)

If you are located in the European Union (EU), the European Economic Area (EEA) or Switzerland, this additional information may be relevant and applicable to you.

We collect personal data from individual users of our Websites, thereby acting as a data controller (“Controller”) in relation to your personal data. Certain use of this data may constitute protected “personal data” as that term is defined in the E.U. General Data Protection Regulation (“GDPR”).
The following disclosures concerning Controller’s compliance with GDPR are presented for informational and compliance purposes only. Nothing in these disclosures constitutes a representation that any particular data or service is governed or subject to GDPR, nor do these disclosures represent or constitute any contract or undertaking with any individual.

Effective Date of GDPR

GDPR took effect on May 25, 2018. On and after that date, Controller aligns it privacy practices with the GDPR and, subject to the above understandings, will comply with GDPR to the extent required.

Utilization of Data

Controller utilizes personal data including the information provided by you during usage of the website and submission of forms. This data may be used, for example, to send information electronically or physically that you request. Controller processes this data for many legal purposes (without limitation):

• Legitimate Interest. We may process your personal data as required to pursue our legitimate business interests (provided this is not overridden by interests or rights of relevant individuals); in particular, to manage, develop improve, market and promote our purposes, interests and services; support our customers and sales/marketing operations; protect our staff and assets; communicate information that supplements our purposes, interests and services and ensure compliance with laws and regulations.
• Performance of an agreement. We may process your personal data to enter into or fulfill agreements with you or your organizations, including to deliver and manage our purposes, interests and services and allow our customers to use our services and supporting tools.
• Legal obligation. We may process your personal data to comply with applicable laws and regulations, or to establish or exercise our legal rights. For example, in connection with legal claims, compliance, regulatory and investigative purposes.
• Consent. We may process your personal data where you have provided your consent; in particular, where we cannot rely on an alternative legal basis or we are required by law to ask for your consent in the context of some of our sales and marketing activities, online data collection tools, or surveys. You have the right, at any time, to withdraw your consent by changing your communication choices, unsubscribing from our website or communications or contacting our offices as noted herein.

The above legal bases are not intended to limit the legitimate use of information by Controller as described in other sections of this Privacy Statement.

Basis for the Processing of Data

Controller may seek your consent to send communications (marketing communications). Controller will seek a separate consent to send these communications in certain cases which may be revoked by you at any time via email to the above email address or by clicking unsubscribe on the pertinent email communication.

Recipients of Personal Data

Recipients of personal data may include fulfillment providers for physical mailing, email deployers, technical providers of data storage, and back-end service providers. All employees of Controller who receive or review personal data have received training concerning maintaining the confidentiality of such data and committed themselves to confidentiality. Where appropriate, Controller will enter into written agreements governing the processing and confidentiality of personal data by third parties.

Storage of Data

Controller will retain data only so long as is necessary.

Your Rights Under GDPR

If the GDPR applies to retention of your personal data, you have several rights including (i) the right to request access, rectification or erasure of your data, (ii) the right to lodge a complaint with the appropriate European Union supervisory authority, and (iii) to the extent processing of data is based on consent, you have the right to withdraw your consent at any time.
A copy of the GDPR is available at https://gdpr-info.eu/

HCTDA reserves the right to modify, change, update, or replace this privacy statement, without notice to you. It is your responsibility to review it from time to time to be aware of any such change. Your continued use of this service will indicate your agreement to any such change. All changes are valid from the time of posting, and will include information gathered from that date, as well as existing information held by HCTDA. You can find out when these guidelines were last revised by referring to the date given by "last updated" on this page.

By continuing to access or use our services after any changes to the policies in the Privacy Statement become effective, you agree to be bound by the revised terms. If you do not agree to any new policy within this Privacy Statement, please stop using the services. We strongly encourage you to read our Privacy Statement, and for regular or repeat users of our Websites, to keep yourself informed of any changes by regularly reviewing both this Privacy Statement.

All content including copy, images, and other materials is copyrighted. The Websites are designed and maintained by the staff and contractors of HCTDA. The images on this site are owned by HCTDA (unless otherwise stated) and may not be used without our permission.

We appreciate the time you have spent reviewing our Websites and this policy. We hope that we can build a long-term relationship with you and encourage you to contact us with your questions or comments. Thank you.