At Booking El Salvador, a brand operated by Volcano S.A. de C.V., we know that protecting the privacy and confidentiality of your personal information is important. This Privacy Policy applies to all pages and websites (collectively the “Site”) of Volcano S.A. de C.V. (“Volcano”, “we” or “us”), that can be found on our server. It does not apply to linked sites or third-party content via our Site. This Privacy Policy is incorporated into, and is subject to, our Site Terms.

This Privacy Policy will let you know, what personal information we may collect, how we collect it and why, how we use it to better your experience, how it will be stored and secure, [if any/which] third parties have access to it, how we use cookies, and how you are in control of your personal information under applicable laws. By browsing, visiting or using the Site, you accept the terms and conditions of this Privacy Policy.

• 01

What Personal Information does Volcano S.A. de C.V. Collect?

Contact Information: If you contact Volcano S.A. de C.V., we will collect your first name, last name, e-mail address, and/or phone number. If you register with us, we will also store an encrypted version of your password in the form of a hash.

Cookies: Volcano S.A. de C.V. uses a standard Internet technology called “cookies” to store and track visitor information/sessions. A cookie is a small text file that a server can automatically store on your computer and retrieve later. We instruct your browser to place a “cookie” into a file on your hard drive when you visit our Site. Each time you return to the Site, the cookie is re-sent to us so that we may track which of our services you use and what content you view (including advertisements). We use cookies to determine if you are logged on to our Site, to maintain your session, and to automatically log you out if your computer remains idle for a specified amount of time when using our service. We also use cookies to measure the traffic on our Site, track which of our services you use, which content you view (including advertisements) and how long you view it. If you do not want to use cookies, you have the option to block them by changing your browser settings for storing of cookies or removing cookies already stored. The following link has useful information about cookies: http://allaboutcookies.org. However, please be aware that by disabling cookies, you may not be able to use all portions of our Site.

IP Address + Geolocation data: We collect the Internet Protocol addresses for administrative purposes (such as to help diagnose problems with our server) and to gather aggregate demographic information about our visitors. In addition, we collect the IP address of each visitor to our Site, which is a number that can be used to identify your internet service provider, among other things. We may collect geolocation data to better target our services.

Newsletter: Subject to applicable laws, we offer a regular newsletter through our Site. To receive the newsletter, a one-off provision of personal information is required, in particular, title, name or a pseudonym, and a valid email address. Newsletters will not be sent to you without your expressed consent. Following registration for the Site's newsletter, you will receive a confirmation link via email, which must be confirmed for final registration. Only after this final confirmation will you receive the newsletter. You can unsubscribe from our newsletter service at any time, either by email (contact details below or available in the Site's legal details) or by pressing the unsubscribe link contained in the newsletter.

Email newsletters related cookies This site offers newsletter or email subscription services and cookies may be used to remember if you are already registered and whether to show certain notifications which might only be valid to subscribed/unsubscribed users.

We offer a regular newsletter through our website. To receive the newsletter, a one-off provision of personal data is required, in particular, title, name or a pseudonym, and a valid email address. Newsletters will not be sent to you without your expressed consent. Following registration for the website’s newsletter, you will receive a confirmation link via email, which must be confirmed for final registration. Only after this final confirmation will you receive the newsletter. You can unsubscribe from our newsletter service at any time, either by email (contact details below or available in the website’s legal details) or by pressing the unsubscribe link contained in the newsletter.

You agree to allow us to contact you via mail, email and telephone for the purpose of activation, service or billing, even if you are on the Federal Do Not Call List. You agree not to report our email communications to you as SPAM to anyone to any governing body, ISP or service provider since you are able to opt in or opt out of any mailings you request and agree to receive.

Contact Form: If you wish to make contact with us, you can use the contact or inquiry form provided on our Site. By making use of this form, your personal information is collected only for as long as necessary, only to the extent freely provided to you. It is, however, necessary that you provide your first and last name (or a pseudonym for both), and a valid email address for the processing of your request. Data provided for contact/inquiry purposes are not subject to processing or use. In processing your request, we will forward your data to your chosen service provider when necessary. No other disclosure to third parties will occur without our consent unless we are legally required to do so by a court order, administrative decision or by law.

Other: We may also collect data related to your commercial information, employment information, usage of our services, education information and make inferences based on our data about you.

• 02

Social Sign In

1.  Visitors to this website may benefit from additional offers through registering with our website and creating a user account. Please follow the respective instructions of Volcano S.A. de C.V. in the course of the registration.
2.  A user account can be set up with the personal profile of a social network (e.g. Facebook, Google).
3.  If you create your account using a personal profile from a 3rd party service (e.g. Facebook, Google) you give us permission to access and use your information from that service as permitted by that service, and to store your log-in token for that service. You find further information about connecting via 3rd party services below.
4.  Changes to User information can be made in the User Profile. Users may also register via “Facebook Connect”. The data required for successful registration will be transferred from the User’s Facebook account
5.  The user account can be accessed from any device. The user is given a personal login link via email or can use the personal profile of a social network (eg Facebook, Google) used for the registration to login.
6.  Volcano S.A. de C.V. reserves the right to temporarily block user accounts, to irrevocably delete them, or to take other necessary measures if the user violates applicable laws, these terms of use or other applicable terms of contract.
7.  The deletion of a user account can be executed by an email to

privacy@bookingelsalvador.com

• 03

How does Volcano S.A. de C.V. Use and/or Disclose your Personal Information?

We take steps designed to ensure that only those employees who need access to your personal information to fulfill their employment duties will have access to it. We use the information that we collect in a variety of ways in providing the Site and operating our business, including:

• • to operate, maintain, enhance and provide all features of the Site, to provide the services and information that you request, to respond to comments and questions and to provide support to users of the Site;
  • to understand and analyze the usage trends and preferences of our users, to improve the Site, and to develop new products, services, features, and functionality;
  • to send you communications subject to applicable laws; or
  • to comply with legal and regulatory requirements, where applicable.

In certain circumstances, in order to perform the Site, we may disclose certain information that we collect from you:

• • within our family of companies, including parents, corporate, affiliates, subsidiaries, business units and other companies that share common ownership;
  • with third party service providers who provide website, application development, hosting, maintenance, and other services for us. These third parties may have access to, or process personal information as part of providing those services for us. We limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions, and our contracts with them require them to maintain the confidentiality of such information;
  • with law enforcement and governmental entities when required by law. For greater clarity, we may disclose personal information or other information if required to do so by law or in the good-faith belief that such action is necessary to comply with applicable laws, in response to a facially valid court order, judicial or other government subpoena or warrant, or to otherwise cooperate with law enforcement or other governmental agencies; and
  • to an acquirer, successor or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets and only if the recipient of your personal information commits to a privacy policy that has terms substantially consistent with this Privacy Policy.

When we disclose your personal information to third parties, we take reasonable measures to ensure that the rules set forth in this Privacy Policy are complied with and these third parties provide sufficient guarantees to implement appropriate technical and organisational measures.

• 04

How does Volcano S.A. de C.V. Secure and Keep your Personal Information?

We follow generally accepted industry standards to protect the information submitted to us, both during transmission and once we receive it. We maintain appropriate physical, technical and administrative safeguards to protect personal information against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the personal information in our possession. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot ensure or warrant the security of any information you transmit to us or store on the Site, and you do so at your own risk. We also cannot guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or administrative safeguards. If you believe your personal information has been compromised, please contact us as set forth in the FAQ section. We will only keep your personal information for as long as reasonably necessary to fulfill the relevant purposes set out in this Privacy Policy and in order to comply with our legal and regulatory obligations. If you would like further information regarding the periods for which your personal information will be kept, please contact us as set forth in the FAQ section.

• 05

Rights to Access and Correct

On written request and subject to proof of identity, you may access the personal information that we hold, used or communicated and ask that any necessary corrections be made, where applicable, as authorized or required by law. However, to make sure that the personal information we maintain about you is accurate and up to date, please inform us immediately of any change in your personal information by emailing us as set forth in the FAQ section.

• 06

Additional Information for Individuals Subject to the GDPR

This part of this Privacy Policy provides additional information for individuals who reside in a jurisdiction governed by the European Union’s General Data Protection Regulation (“ GDPR ”). Under the GDPR, personal data is defined as: “any information relating to an identified or identifiable natural person”.

The term “personal information”, used in this Privacy Policy is approximately equivalent to the term “personal data” under the GDPR. The legal bases for our processing of personal data are primarily that the processing is necessary for providing the services and that the processing is carried out in our legitimate interests. We may also process personal data upon your consent, asking for it as appropriate.

Under the GDPR, you may be entitled to additional rights, including: (a) the right to withdraw consent to processing at any time, where consent is the basis of processing; (b) the right to request from the data controller access to and rectification or erasure of personal data, under certain conditions; (c) the right to request from the data controller restriction of the processing of personal data or to object to data processing, under certain conditions; (d) the right to request from the data controller, data portability concerning personal data that you provided to the data controller, under certain conditions; (e) the right to object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you, under certain conditions; and (f) the right to lodge a complaint with data protection authorities. Additional information about your rights under the GDPR is available at the European Commission’s page on Data Protection.

Your personal data may be stored and processed in any country where we have facilities or in which we engage third party service providers. By using our Site, you consent to the transfer of information to countries outside your country of residence, which may have different data protection rules than in your country. While such information is outside of Canada, it is subject to the laws of the country in which it is held, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of such other country, pursuant to the laws of such country. However, our practices regarding your personal data will at all times continue to be governed by this Privacy Policy and, if applicable, we will comply with the GDPR requirements providing adequate protection for the transfer of personal data from the EU/EEA to third country.

If you live in a country in the EU/EEA, you must be at least 16 years old to use our Site or such greater age required in your country to register for or use our Site. In addition to being of the minimum required age to use our Site, under applicable law, if you are not old enough to have authority to agree to this Privacy Policy in your country, your parent or guardian must agree to this Privacy Policy on your behalf.

• 07

Google Analytics

To tailor our website to suit your interests better, we use “Google Analytics”, a web analytics service provided by Google Inc. (16 Amphitheatre Parkway, Mountain View, CA, 9443, USA (henceforth “Google”). Cookies are used as part of Google Analytics (see Section 8). The information generated by cookies concerning your use of this website is transmitted to and stored in a Google server in the USA. Google will use this information to compile website activity reports for site operators and for the provision of other website-related services. Google may also pass this information on to third parties if required to do so by law or when third parties process the data on Google's behalf. Google will not associate your IP address with any other data held by Google.

You may refuse the storing of cookies by selecting the appropriate settings in your browser. We would like to point out, however, that if you do this, it may not be possible to use all the functions of this website to their full extent.

If you do not want Google to receive information from your browser when you visit the site, you can find an opt-out solution for Google Analytics at http://tools.google.com/dlpage/gaoptout?hl=de. This plugin prevents the browser from requesting the analytics code so that Google does not receive data when you access the page. The plugin is available for different browser types. According to Google, once installed, the browser will block the Google Analytics script.

Nonetheless, this website always uses Google Analytics with the extension “_anonymizeIp(),” so IP addresses are processed only in truncated versions to exclude the possibility of direct identification of a person, ensuring that no detailed IP address information is being transmitted by you when you visit the site.

• 08

The Remarketing or Similar Target Groups Feature of Google Inc.

This site utilizes the remarketing, or similar target groups function provided by Google Inc. (16 Amphitheatre Parkway Mountain View, CA 9443, USA. Google). This feature makes it possible to provide site visitors with personalized, targeted advertising. Interest-based advertising is displayed to the visitor when visiting other websites in the Google Display Network.

Google uses cookies to perform an analysis of page use, which forms the basis for the creation of interest-based advertisements. Storage of personal data does not occur. Upon subsequent visits to other websites in the Google Display Network, advertisements displayed are based on product and information types that the site visitor viewed on previous Internet sites.

You can permanently disable the use of cookies by Google by visiting the following link and changing the appropriate settings for management of cookies:

Deactivate Google Analytics
http://www.google.com/policies/technologies/managing/
http://www.google.com/policies/technologies/ads/.

Changes to the advertising settings can be made under
https://www.google.com/settings/ads.

Alternatively, you can disable the use of cookies by third parties by visiting the deactivation website of the Network Advertising Initiative at http://www.networkadvertising.org/choices/and opting out there.

Further information about Google remarketing and the Google privacy policy can be viewed at
http://www.google.com/privacy/ads/

• 09

Use of Google Adwords Conversion-Tracking

We use the online advertising program, Google AdWords, provided by Google Inc. (16 Amphitheatre Parkway, Mountain View, CA 9443, USA; Google) and in the context of the conversion-tracking analytical service.

When you click an ad delivered by Google, a cookie for conversion tracking is stored.

The cookies used as part of conversion-tracking lose their validity after 3 days, do not contain any personal data and are not used for personal identification. If our website is accessed before the expiry deadline, the cookie can be used to show how visitors have been directed to our website (especially when this occurs through an advertisement). Each Google AdWords advertiser has a different cookie.

Using the information that the conversion cookie captures, conversion statistics are created for AdWords customers who have opted for conversion tracking. This allows advertisers to know the total number of users who have viewed their ads and have been forwarded to a website tagged with a conversion tracking tag. Advertisers do not, however, obtain any information that can be used to identify users personally.

If you do not wish to participate in the tracking process, you can disable the automatic setting of cookies in your browser settings. You can also choose to block only specific cookies for conversion tracking by modifying your browser settings so that cookies from the domain “googleadservices.com” are not allowed.

For further information and to view the Google privacy policy, see http://www.google.com/policies/technologies/ads/ and http://www.google.de/policies/privacy/

• 10

Further Google Analytics functions for displaying advertising

We use the following Google Analytics functions for displaying advertising:

• • Google Display Network Impression Reporting
  • Google Analytics demographics and interests reporting.

These reporting capabilities allow us to use and evaluate data obtained from Google as part of interest-based advertising as well as visitor data from third parties on Google Analytics. The data include information such as age, gender, and interests.

You can deactivate Google Analytics for advertising at any time and adjust Google Display Network advertising. Advertising settings can be accessed under https://www.google.com/settings/ads.

• 11

Google AdSense

On our website, we use Google AdSense, a service of Google Inc. (16 Amphitheatre Parkway, Mountain View, CA 9443, USA; “Google”) for including advertisements. Google AdSense uses cookies (see section 8).

Google AdSense also uses Web beacons (also called counting or tracking pixels). These are invisible graphics that allow, for example, analysis of clicks and visitor traffic on our website. The information generated via cookies and Web beacons (including IP address and delivery of advertising formats) is transmitted to Google's servers in the USA and then stored there. This information may be shared with third parties by Google if required to do so by law, or when third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.

You may refuse the saving of cookies by selecting the appropriate settings on your browser; however, we would like to point out that if you do this, not all functions of this website may be able to be used to their full extent.

If you do not agree to the use of pixel tags, you have the option, among others, to use the appropriate browser extensions (add-ons) to make pixel tags visible or to selectively block pixel tags.

• 12

Integration of Social Network Plugins

Plugins from different social networks are included on our site. These are provided by the following services:

• • Facebook Inc. (161 S. California Ave, Palo Alto, CA, 9434, USA; “Facebook”);
  • Twitter Inc. (795 Folsom St., Suite 6, San Francisco, CA, 9417, USA; “Twitter”);
  • Google Inc. (see 1 et seq.).

If you would like to prevent such data transfers, you must log out of the respective social network account before visiting our website. For more information on data collection, analysis, and processing carried out by the above-listed providers, as well as confirmation of your related rights, please see the privacy policy of the respective vendors:

Facebook (https://www.facebook.com/privacy/explanation), Twitter: (http://twitter.com/privacy), and Google+: (https://www.google.com/policies/privacy/partners/?hl=en)

• 13

Information of Individuals subject to the California Consumer Privacy Act (“CCPA”)

This section of this Privacy Policy applies only to those in which the CCPA is applicable (e.g. residents of the State of California, USA). The CCPA provides individuals with new or additional rights:

Access and Requests. Upon your request to Volcano, but no more than twice in a 12-month period, we will take steps to disclose and deliver, free of charge, your “personal information” (see below) in our possession or control, which may be delivered by mail or electronically. You may request the correction of your personal information, if applicable.

Knowledge Rights. You have the right to request that Volcano discloses to you the following: (1) the categories/types of personal information collected; (2) the specific personal information we collected about the consumer; (3) the sources where we collected such information; (4) our purpose for collecting or selling such information; and (5) the types of third parties that we shares your information with

Opt Out. You may opt out of the sale of your personal information by us, if any. You may do so using any of the contacts methods listed below.

Notice of Financial Incentive. Volcano will notify you if we choose to offer our users and customers financial incentives for the collection or sale of personal information.

Right Not to Be Discriminated Against. We will not discriminate against you for exercising any of your consumer or privacy rights, subject to the CCPA.

Pursuant to the CCPA “personal information” means data that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

For more information please see California Legislative information

• 14

Updating of this Privacy Policy

Please revisit this page periodically to stay aware of any changes to this Privacy Policy, which we may update from time to time. If we modify this Privacy Policy, we will make it available through the Site, and indicate the date of the latest revision, and will comply with applicable law. Your continued use of the Site after the revised Privacy Policy has become effective indicates that you have read, understood and agreed to the current version of this Privacy Policy.

• 15

How to Contact Us?

If you have any questions or comments about this Privacy Policy or your personal information, to make an access or correction request, to exercise any applicable rights, to make a complaint, or to obtain information about our policies and practices with respect to any service providers outside El Salvador, our Privacy Officer can be reached by email or mail using the following contact information:

privacy@bookingelsalvador.com
Volcano S.A. de C.V. Privacy & Data Protection,
27 avenida Norte 1132, Colonia Buenos Aires II, San Salvador, El Salvador

[Last Update: September 2021]