Privacy Policy

Last updated: July 1st, 2026

Evaneos attaches great importance to respecting Your privacy and is committed to building strong and lasting relationships with You.

This data protection policy (the "Policy") aims to inform You as clearly as possible of our commitments and of the measures implemented to ensure compliance with the protection of Your personal data (the "Personal Data") under the applicable European and French regulations.

This Policy applies to all the services offered on the Website as well as on the Evaneos Mobile App.

This Policy is issued in accordance with French Act No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, as amended, as well as with the European Regulation on the protection of personal data of 27 April 2016 (hereinafter the "GDPR"). It may evolve depending on the legal and regulatory context and on the CNIL's guidance. We invite You to read it carefully and to refer to it regularly.

Terms used with a capital letter in this Policy shall have either the meaning given to them in the GDPR, or the meaning given to them in this Policy or in Evaneos's Terms of Use.

CONTENTS

1. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

2. HOW TO CONTACT EVANEOS' DATA PROTECTION OFFICER (DPO)?

3. WHEN AND HOW DO WE COLLECT YOUR DATA?

4. WHAT DATA DO WE COLLECT, FOR WHAT USES, AND HOW LONG DO WE KEEP IT?

5. WHAT ARE YOUR RIGHTS OVER YOUR DATA AND HOW TO EXERCISE THEM?

6. WHO DO WE SHARE YOUR DATA WITH?

7. IS YOUR DATA SENT OUTSIDE THE EUROPEAN UNION?

8. HOW DO WE PROTECT YOUR DATA?

9. DOES EVANEOS USE COOKIES OR OTHER TRACKERS, AND FOR WHAT PURPOSES?

10. UPDATING AND MODIFICATION OF EVANEOS'S DATA PROTECTION POLICY

11.  CHILDREN'S PRIVACY

12.  INTERNATIONAL USERS

13.  SUPPLEMENTAL INFORMATION FOR U.S STATE PRIVACY RIGHTS

1. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

Evaneos SA: Controller

The Controller that collects the Personal Data and carries out the Processing described in this Policy is Evaneos SA, a société anonyme registered with the Paris Trade and Companies Register under RCS number 513 191 122, with its registered office at 27 Rue de Mogador, Paris (75009) (hereinafter "Evaneos" or "Us").

The other Controllers

When You request a quote from one of our Local Agencies, the latter collects the Personal Data it needs to prepare Your quote. It then acts as an independent Controller, defining alone the terms of Processing of Your Personal Data in order to respond to Your request.

In addition, when You visit our Website or our Mobile App, other companies may collect Personal Data about You through the placement of cookies or other trackers, provided that You have given Your Consent. This Processing allows them, for example, to better tailor the product and content offers proposed to You according to Your preferences.

2. HOW TO CONTACT EVANEOS'S DATA PROTECTION OFFICER (DPO)?

Evaneos has appointed a Data Protection Officer whose mission is to ensure compliance with the regulations and with the rules described in this Policy.

You may send Your questions or complaints regarding the protection of Your Personal Data to Evaneos's Data Protection Officer (DPO) at data-privacy@evaneos.com.

Your requests will be processed as soon as possible and within a maximum of thirty (30) days, except in special circumstances, in accordance with the regulations.

3. WHEN AND HOW DO WE COLLECT YOUR DATA?

We collect Personal Data about You when You complete the various forms posted on the Website and the Mobile App, in particular when:

•       You create Your customer Account on the Website or the Mobile App

•       You make a quote request

•       You communicate with Your Local Agency

•       You take part in a prize draw

•       You contact our Customer Service

•       You subscribe to our newsletter

•       You browse the Website or the Mobile App

•       You visit our Evaneos pages on social media.

The data necessary for the requested services is marked with an asterisk to indicate that it is mandatory.

4. WHAT DATA DO WE COLLECT, FOR WHAT USES, AND HOW LONG DO WE KEEP IT?

We use Your Personal Data in order to provide the services You expect from Evaneos.

4.1 Certain operations require You to provide Us with information, such as:

The creation and provision of Your personal space on our Website or Mobile App, in which You can save all the information useful for managing Your vacation projects, such as Your preferences, Your quotes and Your exchanges with the Local Agency.

• Data categories: identification data (last name, first name, email address, telephone, postal address), data relating to Your personal life (travel preferences, family situation), authentication data (login, encrypted password)
• Reasons justifying the use of this data (or legal basis): Contract – You accept Evaneos's Terms of Use when You create Your User Account
• Retention period: Your Account is kept for 4 years from Your last trip or Your last contact with Us (for example, a documentation request, a click on a hyperlink contained in an email, etc.). At the end of this period, a message will be sent to You to warn You that, without further action on Your part, Your account will be anonymized.

Connection with a Local Agency and the creation of a quote by the Local Agency on the basis of the information You provided via the online form on the Website or the Mobile App.

• Data categories: Your identification data as well as that of the persons associated with the trip (last name, first name, email address, telephone, postal address), economic information (such as Your travel budget), and data relating to Your personal life such as Your family situation or Your lifestyle habits in order to design the most suitable trip.
• Reasons justifying the use of this data (or legal basis): the Contract – this data is required in accordance with the Terms of Use and is necessary to carry out pre-contractual measures.
• Retention period: quotes are kept in Your personal space for the entire lifetime of Your account, as defined above.

The collection of Your payments. It is important to note that when You pay on Our Website or Mobile App, Your payments are secure. Banking data is transferred to Our service providers, which act for Us as Processors, and which provide You with PCI-DSS-certified payment solutions (banking security standard) to ensure the security of Your online payments.

• Data categories: Your identification data, the amounts and Your payments, Your bank details (bank card number, IBAN in the event of a refund request).
• Reasons justifying the use of this data (or legal basis): performance of the Contract.
• Retention period: when You make a payment by bank card on Our Website or Mobile App, Your bank card data is not stored in clear text on Evaneos servers: it is encrypted by Our payment provider and thus transits directly to that provider. It is not kept on Evaneos servers. The data relating to Your payment remains accessible to Us for 2 years, in a partially encrypted form, on the secure platform of our payment service provider.

The detection of bank card fraudsters. To ensure the security of Your electronic payments, We implement a system, with the help of our financial partner, to prevent any fraud or misuse of Your bank card. This system may lead to automated individual decision-making, materialized by the rejection of a payment, where the calculated risk of fraud is high. If a payment is rejected on suspicion of fraud, You will be invited to make another attempt using a different means of payment. If the payment is again rejected, You will be invited to contact our Customer Service in order to benefit from human intervention able to carry out a manual review of the situation and remedy the block.

• Data categories: Your identification data and Your bank card data, the data relating to Your transaction, Your IP address.
• Reasons justifying the use of this data (or legal basis): Evaneos and its financial partner pursue a legitimate interest in this control operation, namely combating payment fraud. This interest is lawful, legitimate and necessary to achieve the objective pursued. In addition, You benefit, where applicable, from human intervention ensuring the right balance between the pursuit of this legitimate interest and the protection of Your rights and freedoms.
• Retention period: the data is not kept on Evaneos servers but remains accessible to Us for 2 years, in a partially encrypted form, on the secure platform of our payment service provider.

The recording and monitoring of Your exchanges with the Evaneos Local Agencies. In order to allow You to communicate with our Local Agencies as part of organizing Your trip, We have set up a communication tool dedicated to these exchanges. To ensure the quality and speed of the service offered to You as well as Your satisfaction, We may analyze the exchanges You have with our Local Agency in order, where appropriate, to make recommendations to it.

• Data categories: Your identification data (including data relating to Your identification documents and travel documents such as passports), certain data relating to Your personal life as well as data relating to Your financial situation if such data appears in Your messages, the content of Your messages; and the data from telephone conversations made from our tools.
• Reasons justifying the use of this data (or legal basis): For the provision of a dedicated tool for exchanges with our Local Agencies: the legal basis is the performance of our Contract to connect You with our Local Agencies; For the qualitative monitoring of Your exchanges: the legal basis is our legitimate interest in monitoring the quality of the service provided by our Local Agency.
• Retention period: Your exchanges with the Local Agencies are kept in Your User Account for the entire lifetime of Your account, as defined above.

The handling of Your claims and disputes. To raise Your requests with Us, You can contact us directly by email, telephone or via Facebook Messenger. You can also do so with the Local Agency You are in contact with.

• Data categories: Your identification data, the content of Your messages (which may include data relating to Your personal life), Your location data, as well as the connection data of Your message.
• Reasons justifying the use of this data (or legal basis): the legal basis is our legitimate interest in being able to handle Your claims and monitor disputes.
• Retention period: Your messages are kept for a period of 6 years.

The recording of Your calls. Some calls made with our Customer Service may be recorded. A message at the beginning of the call notifies You of this recording and You can, of course, object to this processing.

• Data categories: Your identification data, our call number, the date and duration of the call, the message.
• Reasons justifying the use of this data (or legal basis): Evaneos pursues a legitimate interest in being able to train its teams, monitor the quality of the service provided, and keep evidence of certain exchanges in the event of a dispute.
• Retention period: the call recording remains accessible for a period of 6 months, then archived with restricted access for 5 years for evidentiary purposes in the event of a dispute.

The management of Your rights when You request to access Your Personal Data, to erase it, to make corrections, or to object to certain processing.

• Data categories: Your identification data, the dates of the request and of its processing.
• Reasons justifying the use of this data (or legal basis): the legal obligation provided for in Article 12 of the GDPR.
• Retention period: 6 years from the processing of Your request.

The promotion of Evaneos trips through the sending of newsletters, news and personalized offers by email, SMS, postal mail or notification on the Mobile App, the making of commercial follow-up phone calls, and the setting up of referral operations

• Data categories: identification data (email address); data relating to personal and family life (travel habits); connection data (tracking of browsing on our Website or Mobile App, IP address); random recording of part of the commercial follow-up phone calls.
• Reasons justifying the use of this data (or legal basis): For sending newsletters, Evaneos news emails, or SMS, as well as for follow-up phone calls, two situations may arise: Either You have taken the voluntary step of registering to receive this type of communication by sharing Your email address or phone number with Us via the form posted on the Website and the Mobile App. In this case, the legal basis is Your consent. Or You are an Evaneos Customer, and We send You communications relating to services similar to those You have already benefited from. In this case, the legal basis is Evaneos's legitimate interest in keeping You informed of our commercial news and promoting its services.
• Retention period: 4 years from Your last trip or Your last contact with Us; the phone call recordings are kept for a period of 15 days.

The conducting of marketing surveys to collect the opinions of persons who have used our Website or Mobile App, to publish them, to measure our brand awareness, or to measure the satisfaction of our travelers.

• Data categories: Your identification data (username or email address; last name and first name during a telephone questionnaire), Your answers to the questionnaires (which may include elements relating to Your personal and family life, Your professional life, or economic and financial information, if You choose to share this information).
• Reasons justifying the use of this data (or legal basis): the collection of this data is based either on Your consent (for example, for the publication of Your reviews) or on our legitimate interest in measuring the satisfaction of our travelers and our brand awareness.
• Retention period: individual responses to marketing surveys are kept for a period of 2 years; Your comments and reviews are published for 5 years on our Website.

The statistical analysis of the profiles of our customers and prospects in order to refine our customer knowledge.

• Data categories: identification data, data on the use of our services, data relating to personal life (travel habits, traveler profile, etc.), economic and financial information.
• Reasons justifying the use of this data (or legal basis): Evaneos pursues a legitimate interest in analyzing this data, namely to adjust its offer and services to better meet the expectations of its customers and prospects.
• Retention period: 4 years from Your last trip or Your last contact with Us.

Taking into account Your choices regarding cookies. Some cookies require the collection of Your consent in order to be placed on Your computer or Your mobile phone. We need to record Your choices in order to respect Your preferences. We also pass this information on to our partners who also wish to be able to place a cookie on Your device.

• Data categories: IP address, logs, login identifiers
• Reasons justifying the use of this data (or legal basis): legal obligation to obtain consent prior to placing any cookie.
• Retention period: 6 months.

4.2 Other operations are carried out on the basis of Your browsing data on our Website and our Mobile App.

Your browsing data helps Us better understand how You use our services and serves the following purposes:

Improving the quality and performance of the Website and the Mobile App and of the services offered. For example, We measure the number of visits to the Website, visitors' activity on the Website and the Mobile App, and their frequency of return. This collection is based on trackers, such as cookies.

• Data categories concerned: IP address of the connected device, browsing data
• Reasons justifying the use of this data (or legal basis): We collect this data only for persons who have given their consent via the cookie usage screen.
• Retention period: see in the Cookie Management Platform

Optimizing the visibility of our Website with Google through the creation of log files that simulate the behavior of Google's indexing robots.

• Data categories concerned: IP address
• Reasons justifying the use of this data (or legal basis): Evaneos's legitimate interest in optimizing its organic search ranking on search engines.
• Retention period: see in the Cookie Management Platform

Running targeted digital advertising campaigns. These campaigns, operated via advertising banners or ads on social media, rely on the use of targeting in order to expose You only to ads relating to Your interests.

• Data categories concerned: browsing data, IP address.
• Reasons justifying the use of this data (or legal basis): consent.
• Retention period: see in the Cookie Management Platform

We collect this information about Your browsing journey on the Website and the Mobile App through the placement of cookies on Your device. In our Cookie Management Platform, We explain in more detail the usefulness of cookies and the different categories of cookies. Cookies that are not strictly necessary for the proper functioning of the Website or the Mobile App require Your consent before being placed.

4.3 In addition, We process, jointly with the social media platforms, the behavioral data resulting from Your activity on the Evaneos pages/account that We publish in these spaces.

This data makes it possible to better understand Your use of these information spaces that We make available to You and thus to better identify Your interests and the relevance of our publications.

• Data categories concerned: traffic and behavior on the Evaneos pages/account
• Reasons justifying the use of this data (or legal basis): Consent – by logging in to the social media platforms, You accept their terms of use, which provide for such sharing of Your data.
• Retention period: that provided by each social media platform.

5. WHAT ARE YOUR RIGHTS OVER YOUR DATA AND HOW TO EXERCISE THEM?

5.1 Your rights over Your data and the processing of Your data:

You have a right of access, erasure and rectification of Your Personal Data.

You may also exercise Your right to object as well as the right to restriction of processing of Your data.

It is also possible to request not to be subject to an automated individual decision.

To exercise Your rights, You can send Us Your request:

•       by writing to data-privacy@evaneos.com

•       or to the address: Evaneos - DPO – 27 rue de Mogador – 75009 Paris

In order to verify Your identity and thus ensure the security of Your data, We invite You to send Us Your request via the email address used to create Your Account and to mention, if possible, Your Customer number for simplified processing of Your request.

If We are unable to identify You with certainty, for security reasons, We may ask You for a copy of an identity document.

We process Your request upon receipt and We endeavor to provide You with a response within 1 month of receipt of the request. This period may be extended to 2 months if the complexity of Your request justifies it. We will keep You informed of the action taken on Your message throughout its processing and may also come back to You if We need to clarify certain aspects.

Finally, We remind You that these rights are not absolute. There are indeed sometimes reasons (legal obligations, compliance with our contractual commitments, retention of evidence of a contract, etc.) that do not allow Us to respond favorably to Your request. If this is the case, We will communicate to You the reason(s) for this refusal.

In the event of dissatisfaction with the handling of Your request, You have the option of lodging a complaint with the CNIL by sending a letter to: CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.

5.2 Your rights regarding unsubscribing:

Regarding subscriptions to the Evaneos newsletters, You may unsubscribe at any time:

•       by clicking on the unsubscribe link present in each of the emails received

•       or by sending Us Your request at data-privacy@evaneos.com.

5.3 Your rights concerning the disposition of Your Personal Data

Finally, You may send Us Your directives relating to the retention, erasure or communication of Your Personal Data after Your death. We will come back to You to request the supporting documents necessary for the secure management of Your directives.

6. WHO DO WE SHARE YOUR DATA WITH?

Your Personal Data may be processed by different types of departments and actors, namely:

Evaneos's departments that must be involved in providing the service to You (customer service, sales department, after-sales service, etc.).

Our Processors: the Personal Data We collect may be transmitted to Evaneos's service providers (Processors) that our company uses to carry out its services within the framework of the purposes mentioned above, for example:

• for the payment of Your travel services;
• for marketing operations (sending information emails and newsletters, satisfaction questionnaires, etc.);
• for technical services.

These Processors are not authorized to process Your Personal Data for their own account.

Our Local Agencies, with which We have concluded a contract governing the transmission of Personal Data and guaranteeing the Local Agencies' compliance with the GDPR. When the Local Agency is located in a country outside the EEA, this contract incorporates the European Commission's Standard Contractual Clauses. The list of Evaneos's partner Local Agencies is available on request.

Third parties that may use it for their own needs (and in particular agents for the purposes of managing a dispute, such as lawyers, bailiffs, etc.), as well as certain social media platforms when You use our Website or Mobile App in connection with these social media platforms. Likewise, in the event that Evaneos, or one of the companies in its group, or all or part of its assets, were acquired by a third party, Your Personal Data may be made accessible to any person involved in the preparation and completion of the transaction and included in the transferred assets.

7. IS YOUR DATA SENT OUTSIDE THE EUROPEAN UNION?

We attach great importance to the choice of our partners and to the location of their operations. For an equivalent service scope, our company favors actors located within the European Union.

This is not always possible, and Your Personal Data may therefore be made accessible to some of our Processors within the meaning of the regulations, some of which may be located outside the European Union, in countries recognized by the European authorities as ensuring an adequate level of protection of Personal Data, but also in countries that do not benefit from such recognition. In order to ensure an adequate level of protection of the privacy of the Data Subjects, Appropriate Safeguards have been taken to govern the Transfers. The countries concerned by these Transfers and the Appropriate Safeguards taken are summarized in the table below:

Your Personal Data is also made accessible to the Local Agencies located outside the European Union with which You enter into a relationship for the preparation and execution of Your trip. These Local Agencies may be located in countries recognized by the European authorities as ensuring an adequate level of protection of Personal Data, but also in countries that do not benefit from such recognition (the complete list of countries in which Evaneos has Local Agency partners is accessible on our Website at https://www.evaneos.com/destinations/). Carrying out some of the purposes described above, such as in particular connecting You with the Local Agency and creating a quote, therefore requires Transfers of Personal Data outside Europe and makes them lawful. However, in order to ensure the protection of Your privacy, each Local Agency located outside the European Union in a country that does not benefit from the aforementioned recognition has concluded with Evaneos the standard contractual clauses issued by the European Commission, in order to govern their relations and ensure a high level of protection of Personal Data. To obtain more information on the Appropriate Safeguards governing these Transfers, You can contact the data protection officer of Evaneos at the following address: data-privacy@evaneos.com.

8. HOW DO WE PROTECT YOUR DATA?

We take various technical and organizational measures to ensure the security of Your data against accidental loss, misuse, unauthorized access, disclosure, alteration or destruction.

As Personal Data is confidential, We limit access to it to only those employees or providers who need it as part of carrying out the Processing.

All persons with access to Personal Data are bound by a duty of confidentiality and are subject to disciplinary measures and/or other penalties if they do not comply with these obligations. In addition, We raise our teams' awareness on data protection and carry out tests to spread good practices in terms of IT security.

When We use Processors or providers, or when We transmit Personal Data to partners, this communication is subject to a contract that systematically incorporates clauses relating to data protection in order to ensure the protection of this information.

In addition, We have set up a robust security system in order to ensure the greatest security of the data collected and to detect personal data breaches. This includes the physical security of the buildings housing our systems, the security of the IT system to prevent external access to Your data, and having secure copies of Your data.

9. DOES EVANEOS USE COOKIES OR OTHER TRACKERS, AND FOR WHAT PURPOSES?

When You visit our Website or our Mobile App and use the various services We make available online, user information may be saved in “Cookie” files placed on Your computer. For more information on this subject, You can consult our Cookie Management Platform accessible at the bottom of the Website page (“Use of cookies”) and the “consent preferences” accessible from the Mobile App.

10. UPDATING AND MODIFICATION OF EVANEOS'S DATA PROTECTION POLICY

We reserve the right to update and modify this Policy at any time.

We therefore encourage You to consult it regularly in order to be aware of how Your Personal Data is protected.

11.  CHILDREN'S PRIVACY

Our services are not directed to children under the age of 13. If we become aware that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete such information.

12.  INTERNATIONAL USERS

If you are accessing our services from the United States or other regions outside the UK or EEA, please note that your information may be transferred to, stored, and processed in countries where data protection laws may differ from those in your jurisdiction as further described herein.

13.  SUPPLEMENTAL INFORMATION FOR U.S STATE PRIVACY RIGHTS

State consumer privacy laws may provide their residents with additional rights regarding our use of their Personal Information.

CALIFORNIA RESIDENTS

If you are a California resident, the following additional information and rights apply to you subject to the California Consumer Privacy Act (CCPA) with respect to Evaneos’s collection, use, and disclosure of personal information about you.  For purposes of this section, “personal information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer or household.  “Personal information” does not include publicly available information or information that is deidentified or in the aggregate.

Collection, Use, and Disclosure of Personal Information

Categories of Personal Information Collected

Evaneos has collected the following categories of personal information about California consumers in the preceding 12 months:

• Identifiers, such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, telephone number, account name, driver’s license number or state identification card number, passport number, or other similar identifiers.
• Other identifiers or consumer information, such as physical characteristics or description, insurance policy number, bank account number, credit card number, debit card number, or any other financial information, health insurance information.
• Characteristics of protected classifications under California or federal law, such as sex, age (40 and older), citizenship status, marital status.
• Commercial information, including products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.
• Audio, electronic, visual, or similar information.
• Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes.

Evaneos uses these categories of personal information for the purposes described under How We Use Your Information above.

Categories of Personal Information Disclosed for Business Purposes

Evaneos has disclosed for a business purpose the following categories of personal information about California consumers in the preceding 12 months:

• Identifiers, such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, telephone number, account name, driver’s license number or state identification card number, passport number, or other similar identifiers.
• Other identifiers or consumer information, such as physical characteristics or description, insurance policy number, bank account number, credit card number, debit card number, or any other financial information, health insurance information.
• Characteristics of protected classifications under California or federal law, such as sex, age (40 and older), citizenship status, marital status.
• Commercial information, including products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.
• Audio, electronic, visual, or similar information.
• Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes. 

“Business purposes” include the use of personal information as reasonably necessary and proportionate for operational purposes, such as performing services on our behalf (e.g., maintaining or servicing accounts, providing customer service, processing orders, verifying member information, processing payments, or providing marketing or analytic services), auditing related to a current interaction with you and concurrent transactions, detecting and protecting against security incidents, debugging to identify and repair errors, conducting research, and undertaking activities to verify or maintain the quality or safety of our products and services.

Categories of Personal Information Sold

Evaneos has not sold personal information about California consumers in the preceding 12 months.

Your Privacy Rights Under California Law

In addition to the Personal Information rights described above, California residents also have the rights described below.

Right to Notice and Access

You have the right to request that Evaneos disclose additional information regarding our collection and use of your personal information, including the following:

• The categories of personal information we have collected about you.
• The categories of sources from which personal information is collected.
• The purpose for collecting or selling personal information.
• The categories of third parties with whom we share personal information.

In addition, you have the right to request access to the specific pieces of personal information we have collected about you.  To request this additional information or to access your personal information, please submit a request to Evaneos using one of the methods described below under How to Exercise Your California Privacy Rights.

Right to Deletion of Personal Information

You have the right to request that Evaneos delete any personal information about you which we have collected from you.  To request deletion of your personal information, please submit your request to Evaneos using one of the methods described below under How to Exercise Your California Privacy Rights.  Please be aware that such a request does not ensure complete or comprehensive deletion of your personal information and that there may be circumstances in which the law does not require or allow deletion even if requested.

Right to Transparency Regarding Disclosure or Sale of Personal Information

You have the right to request that Evaneos disclose additional information regarding the disclosure or sale of your personal information, including the following:

• The categories of personal information that Evaneos disclosed about you for a business purpose.
• The categories of personal information that Evaneos sold about you and the categories of third parties to whom the personal information was sold (by category or categories of personal information for each third-party to whom the personal information was sold).

In addition, you have the right to request information regarding the disclosure of your personal information by Evaneos to third parties for the third parties’ direct marketing purposes.

To request additional information regarding the disclosure and sale of your personal information (as applicable), or to opt-out of the disclosure of your personal information to third parties for their direct marketing purposes, please submit your request to Evaneos by using one of the methods described below under How to Exercise Your California Privacy Rights.

Right to Opt-Out of the Sale or Sharing of Personal Information

Evaneos generally does not sell your personal information and only shares your personal information with necessary suppliers and vendors in connection with the travel products and services being provided to you. If Evaneos sells your personal information to third parties, you can opt-out of the sale of your personal information at any time by submitting a request to Evaneos using one of the methods described below under Do Not Sell or Share My Personal Information.

Do Not Sell or Share My Personal Information

You have the right to opt-out of the sale or sharing of your personal information. Once we receive and confirm a verifiable consumer request from you, we will stop selling or sharing your personal information. To exercise your right to opt-out, please contact us via phone or email provided above.

Rights of Children

Notwithstanding anything else contained in this Privacy Policy, Evaneos will not sell the personal information of individuals if Evaneos has actual knowledge that the individual is less than 16 years of age, unless the individual, in the case of individuals between 13 and 16 years of age, or the individual’s parent or guardian, in the case of individuals who are less than 13 years of age, has affirmatively authorized the sale of the individual’s personal information (the “right to opt-in”).

Right to Removal of Content Posted Publicly by Minors

If you are a California resident under the age of 18, and a registered user of any connected services where this Privacy Policy is posted, you may request and obtain removal of content or information you have publicly posted.  To make such a request, please use one of the methods described under How to Exercise Your California Privacy Rights below and include a detailed description of the specific content or information to be removed.  Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

Right Not to Be Subject to Discrimination

Evaneos will not and cannot discriminate against you for exercising any of your rights described above, such as by denying you goods or services or by providing you with a different level of goods or services.  However, we can charge a different price or rate, or provide a different level or quality of goods or services, if that difference is reasonably related to the value provided to you by your personal information.  In addition, we may offer financial incentives, including payments to you as compensation, for the collection, sale, or non-deletion of your personal information.  If we offer you any such financial incentives, we will first notify you of the applicable incentives and will only include you into a financial incentive program with your prior opt-in consent (which may be revoked by you at any time).

How to Exercise Your California Privacy Rights

California Civil Code Section 1798.83 permits users who are California residents to request and obtain from us information about certain personal information we disclose to third parties for their direct marketing purposes in the preceding calendar year. To exercise any of your California privacy rights described above—including to request additional information regarding our collection and use of your personal information, to request access to your personal information, to request that we delete your personal information, to request additional information regarding the disclosure and sale of your personal information, or to opt-out of the disclosure of your personal information to third parties for their direct marketing purposes—please submit your request to Evaneos using one of the methods provided under How To Contact Us above.

If any complaint with us is not satisfactorily resolved, you can contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs at 1625 North Market Blvd., Suite N 112, Sacramento, California 95834 or by telephone at (800) 952-5210 or (916) 445-1254.

COLORADO, CONNECTICUT, VIRGINIA and UTAH RESIDENTS

Colorado, Connecticut, Virginia, and Utah each provide their state residents with rights to: (i) confirm whether we process their personal information; (ii) access and delete certain personal information; (iii) data portability; and (iv) opt-out of personal data processing for targeted advertising and sales. In addition, Colorado, Connecticut, and Virginia also provide their state residents with rights to: (i) correct inaccuracies in their personal information, taking into account the information's nature processing purpose; and (ii) opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.  For more information regarding Colorado, Connecticut, Virginia and Utah privacy rights, please submit your request to Evaneos using one of the methods provided under How To Contact Us above.

NEW YORK RESIDENTS

Evaneos is compliant with the Stop Hacks and Improve Electronic Data Security Act (NY SHIELD Act) which requires any business holding personal data on New York residents to take active steps to implement reasonable cybersecurity protections and safeguards in order to prevent hackers from accessing concerning consumer data.

For more information regarding U.S. State privacy rights, please submit your request to Evaneos using one of the methods provided under How To Contact Us herein.