Privacy Notice for Californians

Category (* may constitute "sensitive personal information" under the CCPA)	Examples of Identifiers We Collect	Sold or Shared	Criteria used to determine retention periods	Disclosed To
Personal identifiers	First and last name, address, unique personal identifier, online identifier, IP address, email address, DISCOVERY Loyalty Program membership number	Sold and Shared, in relation to cookies and similar technologies	Duration of our relationship with you; the length of time necessary to complete a transaction; whether your personal information is a sensitive type; whether you specifically consented to retain the data; and our legal, contractual or similar obligations to retain or delete the data.	Service providers, affiliates, licensees, business partners, marketing and analytics providers
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))*	A name, address, telephone number, credit or debit card number and other financial information, health information	Not sold or shared	Same as above.	Service providers, affiliates, licensees, business partners
Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies	Not sold or shared	Same as above.	Service providers, affiliates, licensees, business partners
Financial information	Credit or debit card number and other financial information	Not sold or shared	Same as above.	Service providers, affiliates, licensees, business partners
Professional or employment-related information	Business name, business address or business telephone number	Not sold or shared	Same as above.	Service providers, affiliates, licensees, business partners
Audio and visual information	Information collected through use of close circuit systems	Not sold or shared	Same as above.	Service providers, affiliates
Health information*	Information relating to disability accommodation	Not sold or shared	Same as above.	Service providers, affiliates, licensees, business partners
Geolocation information	Location information based on an IP address	Not sold or shared	Same as above.	Service providers, affiliates, licensees, business partners
Internet or other similar network activity	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement	Sold and Shared, in relation to cookies and similar technologies	Same as above.	Service providers, affiliates, licensees, business partners, marketing and analytics providers
Professional or employment-related information	Job title, company name, address, and phone number	Not sold or shared	Same as above.	Service providers, affiliates, licensees, business partners
Inferences drawn from other personal information	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes	Not sold or shared	Same as above.	Service providers, affiliates, licensees, business partners

California Job Applicants

When you apply for a job with Viceroy Hotel Group, information may be collected about you in multiple ways: you may provide it to us in connection with your application; we may make observations in the application process or collect information from public information sources; or you may authorize us to collect information from other sources, such as a former employer or reference.

The following table describes our practices with regard to information submitted in the job application process. If you use our website in the job application process, additional information may be automatically collected, as described above.

Category (* may constitute "sensitive personal information" under the CCPA)	Examples	Sold or shared	Criteria used to determine retention periods	Disclosed to
Personal identifiers	Name, email address, phone number, and contact address, username, social media handle	Not sold or shared	The duration of our relationship with you; the length of time necessary to complete a transaction; whether your Personal Information is a sensitive type; whether you specifically consented to retain the data; and our legal, contractual or similar obligations to retain or delete the data.	Service providers
Protected classifications*	Gender, race and ethnicity, date of birth	Not sold or shared	Same as above.	Service providers
Geolocation information*	Coarse information (e.g., ZIP code, IP address)	Not sold or shared	Same as above.	Service providers
Professional or employment-related information	Employer’s name, employer's address	Not sold or shared	Same as above.	Service providers
Education information	Institutions attended, degrees and certifications attained	Not sold or shared.	Same as above.	Service providers

In certain circumstances, you may submit your application for employment through a third-party service that displays our job posting. We do not control the privacy practices of these third-party services. Please review their privacy policies carefully prior to submitting your application materials.

Privacy Rights for California Residents and How to Exercise Them

If you are a California resident, you have the following rights: to request additional information about our data collection, use, disclosure, and sales practices in connection with your Personal Information; to request the specific Personal Information collected about you during the previous 12 months; to request the deletion of the Personal Information we have about you; to request a restriction on certain processing of Personal Information; and to request correction of inaccurate information. In addition, a consumer may opt-out of the "selling" or "sharing" of personal information using the "Do Not Sell or Share My Personal Information" link on our website homepage. You may not be discriminated against for exercising your California privacy rights. These CCPA rights may only apply in certain circumstances and are subject to certain exemptions.

You may submit a request to exercise your rights under the CCPA through one of two means:

1. Submit a request via the online form or
2. Call +1-855-553-2323

Upon receiving your request, we will confirm receipt of your request by sending you an e-mail confirming receipt. To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to the information. In some instances, such as a request to delete personal information, we may first separately confirm that you would like for us to in fact delete your personal information before acting on your request.

We will aim respond to your request as soon as reasonably practicable and consistent with any applicable laws. If we require more time, we will inform you of the reason and extension period in writing.  If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. We may have a reason under the law as to why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

Authorized Agents

You can exercise your CCPA rights yourself or you can designate an authorized agent to make a request on your behalf through the means listed above. Your authorized agent must be able to demonstrate authority to act on your behalf when submitting a request and we will also require the authorized agent to verify the agent’s own identity.

Direct Marketing of Third Parties

California residents are entitled to contact us to request information about whether we have disclosed Personal Information to third parties for the third parties’ direct marketing purposes. Under the California “Shine the Light” law, California residents may opt-out of our disclosure of Personal Information to third parties for their direct marketing purposes. You may choose to opt-out of the sharing of your Personal Information with third parties for marketing purposes. To make such a request you should send (a) an email to privacy@viceroyhotelgroup.com with the subject heading “California Privacy Rights,” or (b) a letter addressed to Viceroy Hotel Group, Attention: Digital & Privacy, 750 North San Vicente Blvd., Suite 1000, Los Angeles California 90069.  In your request, please attest to the fact that you are a California resident and provide a current California address for our response. Please be aware that not all information sharing is covered by the California privacy rights requirements and only information on covered sharing will be included in our response.  We reserve our right not to respond to requests submitted to addresses other than the addresses specified in this paragraph.

How to Contact Us

For more information on our privacy practices, please review our Privacy Policy. If you have any specific questions regarding this Privacy Notice, you can contact us via email or by writing to us at the address below:

Via e-mail:

privacy@viceroyhotelgroup.com

By writing to us:

Viceroy Hotel Group
Attention: Privacy Policy Inquiry
750 North San Vicente Boulevard East, Suite 1000
Los Angeles, California 90069