Effective Date: February 1, 2025
Grand Colonial Bed and Breakfast (“we,” “us,” or “our”) is committed to protecting the privacy of our guests and website visitors. This Privacy Policy explains how we collect, use, and share your personal information. Grand Colonial Bed and Breakfast is a property of E2W, LLC.
For important supplemental information regarding our privacy practices, please refer to the following sections of this Privacy Policy, which apply based on your location:
Guests Outside the United States: If you reside outside the United States (including Colombia and Türkiye), please review our “Outside the United States Supplement.”
Guests in the United States (excluding Brazil and China): If you reside in the United States (excluding Brazil and China), please review our “United States Privacy Supplement.”
Guests in Brazil: If you reside in Brazil, please review our “Brazil Privacy Supplement.”
Guests in China: If you reside in the People’s Republic of China (excluding Hong Kong, Macau, and Taiwan), please review our “Privacy Supplement for China Users.”
Guests in Colombia: If you reside in Colombia, please review our “Colombia Privacy Supplement.”
Guests in Türkiye: If you reside in Türkiye, please review our “Privacy Notice Addendum for Türkiye.”
Information We Collect:
We collect the following types of information:
- Information you provide directly: When you make a reservation, contact us, or interact with our website, we may collect information such as your name, email address, phone number, mailing address, payment information, dates of stay, and any special requests.
- Automatically collected information: When you visit our website, we may automatically collect certain information about your device, including your IP address, browser type, operating system, referring website, pages viewed, and the dates and times of your visit. We may use cookies, web beacons, and similar technologies to collect this information.
- Information from third parties: We may receive information about you from third-party booking platforms (such as Airbnb, Booking.com, etc.) if you make a reservation through those platforms. This may include your contact information and reservation details.
How We Use Your Information:
We use your information for the following purposes:
- Providing services: To process your reservations, communicate with you about your stay, fulfill your requests, and provide you with the services you expect from a bed and breakfast.
- Improving our services: To analyze website usage, understand guest preferences, and improve our website, services, and marketing efforts.
- Communication: To send you confirmations, updates, special offers, and other marketing materials (you can opt out of receiving marketing emails at any time).
- Legal compliance: To comply with applicable laws and regulations.
- Customer support: To respond to your inquiries and provide customer support.
How We Share Your Information:
We may share your information with the following third parties:
- Service providers: We may share your information with third-party service providers who assist us with website hosting, payment processing, marketing, and other services. We require these service providers to protect your information and only use it for the purposes we specify.
- Legal authorities: We may disclose your information to legal authorities if required by law or legal process, or if we believe that disclosure is necessary to protect our rights or the rights of others.
- Business transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
- Third-party booking platforms: If you make a booking through a third-party platform, we may share information with that platform as necessary to fulfill your reservation.
Data Security:
We take reasonable measures to protect your information from unauthorized access, use, or disclosure. However, no method of transmission over the Internet or electronic storage is 100% secure.
Your Choices:
You can opt out of receiving marketing emails from us by clicking the “unsubscribe” link in any marketing email or by contacting us directly.
Children’s Privacy:
Our website and services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.
Changes to this Privacy Policy:
We may update this Privacy Policy from time to time. Any changes will be posted on our website.
Contact Us:
If you have any questions about this Privacy Policy, please contact us at:
Grand Colonial Bed and Breakfast, 112 W German Street, Herkimer, NY 13350. 315-982-5004. [email protected].
Grand Colonial Bed and Breakfast United States Privacy Supplement
- APPLICATION.
If you reside in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Vermont, Virginia, or Washington, or are otherwise protected by privacy or consumer health data laws in those jurisdictions, this page applies to you and supplements the Grand Colonial Bed and Breakfast Privacy Policy.
- CONTACT INFORMATION.
Consistent with applicable law, you can exercise any of the rights described in this Supplement by contacting us by email at [email protected]. If you have any questions, you may also contact us at [email protected] with the subject “Privacy Contact.
2.1 Verification.
Please note that you may need to verify your identity and request before further action is taken. As a part of this process, you may be required to provide personal information, such as your name, state of residence, phone number, and email address associated with your reservation, and/or government identification.
2.2 Authorized Agent.
Consistent with applicable law, you may designate an authorized agent to make a request on your behalf. In order to designate an authorized agent, we may require that (i) you or your authorized agent provide a valid power of attorney; (ii) the agent provide proof that you gave the agent signed, written permission to submit the request; (iii) you verify your identity with us; and/or (iv) directly confirm with us that you provided the authorized agent permission to submit the request.
- YOUR RIGHTS.
3.1 Right to Access.
Consistent with applicable law, you may submit a verifiable consumer request to access, in a portable and (if technically feasible) readily-usable form, the personal information that we have collected about you as well as more information about our data practices. For more information about how we collect, use, and disclose personal information for business purposes, please review our Privacy Policy.
3.2 Right to Delete.
Consistent with applicable law, you may submit a verifiable consumer request to delete your personal information.
3.3 Right to Correct.
Consistent with applicable law, you may submit a verifiable consumer request to correct inaccuracies in your personal information held by Grand Colonial Bed and Breakfast.
3.4 Right of Non-Discrimination.
We will not discriminate against you for exercising your rights and choices, although some of the functionality and features available on our services may change or no longer be available to you. Any differences in the services are related to the information provided.
3.5 Appeal of Consumer Rights Request.
To appeal a refusal to take action on your request, please see the instructions in our response to your request or submit your appeal in writing by contacting [email protected] with the subject “Appeal of Consumer Rights Request.”
- OPT-OUTS.
4.1 Personalized Advertising Opt-Out.
We do not sell personal information. However, we do process personal information for purposes of displaying advertisements that are selected based on users’ online activities over time and across different sites, services, and devices. We also engage in automated processing that could affect you. Consistent with applicable law, you may opt out of such processing by contacting [email protected] with the subject “Opt-out Personalized Advertising.”
4.2 Opt-out Signals.
We strive to honor opt-out preference signals where required by applicable law. When we detect an opt-out preference signal, we will make reasonable efforts to honor such opt-outs for jurisdictions that require them. Please note that your opt-out preference signal might only apply to the particular browser, device, or technology that you use to opt-out. The opt-out preference signals are offered by a third party that we do not control. Please see the opt-out preference signal settings and policies for more information.
4.3 Right to Opt-Out for the Purposes of Profiling for Decisions That Produce Legal or Similarly Significant Effects.
Consistent with applicable law, you may have the right to opt-out of processing of personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects.
4.4 Opt-Out of Processing or Limit Use and/or Disclosure of Sensitive Personal Information.
Certain categories of personal information that we collect and use might be “sensitive” under data privacy laws. Consistent with applicable law, you may have the right to limit certain uses or disclosures of your sensitive personal information or opt-out of processing of your sensitive personal information.
- OTHER INFORMATION.
5.1 Withdrawing Consent.
If we are processing your personal information based on your consent, you can withdraw your consent at any time by changing your account settings or, consistent with applicable law, by emailing [email protected] and specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal.
5.2 Sensitive Data Inferences.
We may process inferences from your sensitive data for the purposes discussed in our Privacy Policy. In the event that we do, we will retain the inferences until we have fulfilled the purpose for which we collected them. We will delete such inferences in accordance with our Privacy Policy.
5.3 De-Identification.
Consistent with applicable law, we commit to maintain and use information in de-identified form and not to attempt to re-identify the information. We may use such information in de-identified form or otherwise as consistent with applicable law.
5.4 Third-Party List.
Consistent with applicable laws, you may request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those third parties.
- CALIFORNIA RESIDENTS.
If you live in California, or are otherwise protected by privacy or consumer data laws in California, this section applies to you and supplements the Grand Colonial Bed and Breakfast Privacy Policy.
6.1 Sale and Sharing of Data.
We do not sell personal information to third parties; we are not data brokers and do not put personal information on the open market. We do not knowingly sell or share the personal information of individuals who are younger than 16. We do allow third parties to collect personal information through our website and share personal information with third parties for the business purposes described in the Privacy Policy including, without limitation, advertising and marketing on our website and elsewhere based on users’ online activities over time and across our website, services, and devices. Consistent with applicable law, you may opt out of such processing by emailing [email protected] and specifying you wish to opt out.
6.2 Information Pertaining to California Consumer Requests.
Information about consumer requests we received and processed under the California Consumer Privacy Act during the previous calendar year will be made available upon request.
- NEVADA AND WASHINGTON RESIDENTS.
If you live in Nevada or Washington, or are otherwise protected by privacy or consumer data laws in Nevada or Washington, this section applies to you and supplements the Grand Colonial Bed and Breakfast Privacy Policy.
7.1 Consumer Health Data Privacy Policy.
Some of the categories of information you choose to provide to us may be considered “consumer health data.” We may collect, use, and share this information pursuant to our Privacy Policy. Please review our Privacy Policy for information about these categories of personal information, the sources from which we collect personal information, the categories of third parties and affiliates with which we share personal information, and other important information.
7.2 Right to Cease Collection and Sharing of Consumer Health Data.
Some of the categories of information you choose to provide to us may be considered “consumer health data.” You may have the right to appeal the denial of any of these rights in a manner that will be provided to you if we deny a data request.
- VERMONT RESIDENTS.
If you live in Vermont, or are otherwise protected by privacy or consumer data laws in Vermont, only this section eight applies to you and supplements the Grand Colonial Bed and Breakfast Privacy Policy. E2W, LLC, the parent company of Grand Colonial Bed and Breakfast, will not share information it collects about you with its affiliates or third parties (both financial and non-financial), except as required or permitted by Vermont law.
Grand Colonial Bed and Breakfast – Supplement for Guests Outside the United States
This Supplement applies to you if you reside outside the United States and supplements our main Privacy Policy. Please read this Supplement carefully, and if you have any questions, you can contact us by sending an email to [email protected].
- International Data Transfers
To facilitate our operations, Grand Colonial Bed and Breakfast and E2W, LLC may transfer, store, and process your information within our family of companies or with service providers located in the United States. Laws in the United States may differ from the laws applicable to your country of residence. We take measures to ensure that your personal information is protected in accordance with applicable data protection laws, such as through the use of standard contractual clauses.
- Your Rights
Depending on your country of residence, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict the processing of your information. You may also have the right to object to the processing of your information or to withdraw your consent. To exercise any of these rights, please contact us at [your email address].
- Legal Bases for Processing
We process your personal information for the purposes described in our Privacy Policy, based on one or more of the following legal bases:
- Contract: To perform our contract with you (e.g., to process your reservation).
- Legitimate interests: To pursue our legitimate business interests (e.g., to improve our services).
- Legal obligation: To comply with applicable laws and regulations.
- Consent: Where you have given your consent.
- Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Contact Us
If you have any questions about this Supplement or our privacy practices, please contact us at:
Grand Colonial Bed and Breakfast, 112 W German Street, Herkimer, NY 13350. 315-982-5004. [email protected].
Grand Colonial Bed and Breakfast – Brazil Privacy Supplement
This Brazil Privacy Supplement applies to you if you reside in Brazil and supplements our main Privacy Policy. All information regarding the processing of your personal data is detailed in the Privacy Policy, and any differences arising from the application of Law No. 13,709/18 (“Brazil General Data Protection Law” or “LGPD”) will be addressed in this Supplement. In case of conflict between the Privacy Policy and this Supplement, this Supplement shall prevail for residents of Brazil.
- Identification of the Controller
Grand Colonial Bed and Breakfast is a property of E2W, LLC, located at 112 W German Street, Herkimer, NY 13350. For Brazilian residents, E2W, LLC acts as the data controller.
- Your Rights
You have the following rights under the LGPD, which are not absolute and may be subject to limitations:
2.1. Confirmation of Processing: You have the right to confirm whether we are processing your personal data.
2.2. Access: You have the right to request copies of your personal information held by us in a structured, commonly used, and machine-readable format.
2.3. Correction: You have the right to ask us to correct inaccurate, incomplete, or outdated personal information about you.
2.4. Anonymization, Blocking, or Erasure: You have the right to request the anonymization, blocking, or erasure of unnecessary, excessive, or non-compliant data, subject to limitations.
2.5. Deletion of Data Processed with Consent: You have the right to request the deletion of data processed based on your consent, except when retention is required by the LGPD.
2.6. Data Portability: If technically feasible, you have the right to request data portability to a third party, without infringing on our trade secrets.
2.7. Information on Data Sharing: You have the right to request information on the sharing of your personal data.
2.8. Information on Refusal of Consent: You have the right to be informed about the possibility of refusing consent and the consequences, such as limited access to certain features.
2.9. Withdrawal of Consent: You can withdraw your consent at any time by contacting us at [email protected]. This will be free of charge and will not affect prior processing based on your consent.
2.10. Review of Automated Decisions: You have the right to request a review of decisions based solely on automated processing of your personal data.
- Fulfilling Your Rights
We may ask you to verify your identity before responding to your request. To exercise your rights, please contact us at [email protected]. We will respond to your requests in accordance with applicable law.
- International Data Transfers
E2W, LLC may transfer, use, process, and store your personal data in other countries, including the United States, which may have different data privacy laws than Brazil. We will provide information about these international data transfers as required by applicable legislation. We will implement appropriate safeguards, such as standard contractual clauses, to protect your data during international transfers.
- Data Protection Officer
You can contact our Data Protection Officer by emailing us at [email protected].
Grand Colonial Bed and Breakfast – Privacy Supplement for China Users
This Privacy Supplement for China Users (“Supplement”) applies to you in addition to the Grand Colonial Bed and Breakfast Privacy Policy if you reside in the People’s Republic of China (excluding Hong Kong, Macau, and Taiwan). Please read this Supplement carefully. If you have any questions, you may contact us at [email protected].
- Controller
The controller of your personal information is E2W, LLC, located at 112 W German Street, Herkimer, NY 13350, United States.
- Sensitive Personal Information
We may collect and process the following sensitive personal information, with your explicit consent where required:
- Government-issued ID information (e.g., ID number, photo) for identity verification purposes.
- Payment information (e.g., bank account, credit card details) for processing payments.
- Booking and check-in/out information (including listing address, dates and times) to provide our services.
- Communications with us and other guests.
Unless required by law or necessary to provide our services, you have the discretion to provide this information.
- Legal Bases for Processing
We collect and use your personal information based on your consent or where necessary to:
- Fulfill our contract with you (e.g., to process your reservation).
- Comply with legal obligations.
- Protect public security, health, or interest.
- Protect life, health, or property in urgent situations.
- Storage and Protection of Information
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including legal or regulatory requirements. We use security measures to protect your information, including encryption and access controls.
- Minors
Our services are not intended for individuals under 18 years old.
- Your Rights
You have the following rights, subject to applicable law:
- Access and correction of your personal information.
- Deletion of your information (account deletion).
- Withdrawal of consent.
- Restriction of processing.
- Objection to processing.
- Lodging complaints with our Data Protection Officer or relevant authorities.
- International Transfers
We may transfer your information to other countries, including the United States, which may have different data protection laws. We will implement appropriate safeguards, such as standard contractual clauses, to protect your data during international transfers.
Grand Colonial Bed and Breakfast – Colombia Privacy Supplement
This Colombia Privacy Supplement applies to you if you reside in Colombia, and supplements the Grand Colonial Bed and Breakfast Privacy Policy and the Outside the United States Supplement.
You acknowledge that the legal bases for processing personal data are those described in the Grand Colonial Bed and Breakfast Privacy Policy and the Outside the United States Supplement.
- Identification of the Controller
E2W, LLC, 112 W German Street, Herkimer, NY 13350, United States, acts as the data controller for Grand Colonial Bed and Breakfast. You can contact us at [email protected] or 1-315-982-5004.
- Sensitive Data Processing
We may access and process sensitive data in accordance with applicable law and will obtain your explicit and informed consent prior to such access and processing where required. By accepting the Grand Colonial Bed and Breakfast Privacy Policy, the Outside the United States Supplement, and this Colombia Privacy Supplement, you acknowledge that we are informing you of the discretionary nature of providing sensitive data to us, unless required or allowed by applicable law. Sensitive data includes, but is not limited to, data related to your racial or ethnic origin, political opinions, religious or philosophical beliefs, membership in trade unions or social organizations, sexual life, health, or biometric data.
- Minors’ Data Processing
Our services are not intended for individuals under the age of 18.
- Your Rights
You have the rights set forth in the Grand Colonial Bed and Breakfast Privacy Policy, the Outside the United States Supplement, and the following rights under applicable Colombian law:
- Free access to the personal data processed by the Controller.
- Request proof of consent provided to the Controller, unless such consent is expressly exempted as a requirement for the processing.
- Procedure to Exercise Your Rights
To exercise your rights or send inquiries, please contact us at [email protected].
Grand Colonial Bed and Breakfast – Privacy Notice Addendum for Türkiye
This privacy notice addendum informs data subjects located in Türkiye whose personal data is collected and processed by E2W, LLC, acting as data controller, in accordance with Turkish Law No. 6698 on the Protection of Personal Data (the “Law”). This addendum fulfills E2W, LLC’s information obligation under Article 10 of the Law and the Communiqué on the Procedures and Principles for Fulfillment of the Information Obligation. In the event of any conflicting terms between this addendum, the Privacy Policy, and the Outside the US section, this addendum shall take precedence.
- Identity of the Data Controller
The data controller is E2W, LLC, 112 W German Street, Herkimer, NY 13350, United States.
- Method and Legal Basis of Processing
Please refer to the main Privacy Policy and the “Outside the United States Supplement.”
- Processed Data and Processing Purposes
Please refer to the main Privacy Policy and the “Outside the United States Supplement.”
- To Whom and For What Purpose Your Data Can Be Transferred
Please refer to the Grand Colonial Bed and Breakfast Privacy Policy.
- Rights of Data Subjects
Except for the exceptions in Article 28 of the Law, as a data subject, you have the following rights under Article 11 of the Law:
- To learn whether your personal data is being processed.
- To request information as to the processing.
- To learn the purposes for which your data is processed and whether the data is used in accordance with these purposes.
- To be informed of the third parties, in Türkiye or abroad, to whom your data is transferred.
- To request that your personal data be rectified if it is incomplete or inaccurate.
- To request that your personal data be deleted or destroyed when there is no longer any ground for its processing.
- To request that the rectification, deletion, and destruction operations mentioned above be notified to any third party to whom your data has been transferred.
- To object to any result to your detriment reached by the analysis of your personal data exclusively through automated means.
- To request compensation for any damages incurred due to the unlawful processing of your personal data.
To exercise these rights, please apply to the Data Controller by emailing us at [email protected]. We will answer your request as promptly as possible and within no more than 30 days.