This Website collects some Personal Data from its Users. Creekside Hospitality, LLC (“Owner”) is committed to providing User (you) with a pleasant Internet experience. This Privacy Policy contains the information Owner collects through this Website, how Owner uses that information, and how Owner protects that information.
By submitting User’s Personal Data to us, User agrees to the transfer to and processing of User’s Personal Data in accordance with the terms of this Policy.
OWNER AND DATA CONTROLLER
Creekstone Inn and Suites
328 Depot St.
St. Marys, PA 15857
Owner contact email: gm2020@staycreekstone.com
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Website.
Unless specified otherwise, all Data requested by this Website is mandatory and failure to provide this Data may make it impossible for this Website to provide its services. In cases where this Website specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service.
Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.
Any use of Cookies – or of other tracking tools – by this Website or by the owners of third-party services used by this Website serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy, if available.
Users are responsible for any third-party Personal Data obtained, published or shared through this Website and confirm that they have the third party's consent to provide the Data to the Owner.
The Website is not directed to children under the age of 13. Users declare themselves to be adults according to their applicable legislation. Minors may use this Website only with the assistance of a parent or guardian. Under no circumstance persons under the age of 13 may use this Website.
Owner's reservation system and other databases are maintained in the United States. User’s Personal Data will be collected (or transferred) and maintained in the United States. Once User’s information is received by Owner, it is treated as confidential and protected through a variety of generally accepted industry standards, such as encryption.
The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. Owner does not sell, trade, rent, or release User’s Personal Data to anyone outside of Owner’s company, contractors, or affiliates, other than in compliance with this privacy and security policy. Owner and its affiliates use the Personal Data in the ordinary course of business, administer customer service, assist with User’s online experience, contact User regarding their booking, and make other rewards, products and services available. Owner does share User information to credit card issuers, and other companies where necessary to complete a transaction. Owner may also use Personal Data to send User promotional communications by mail or e-mail and share Personal Data with third-parties Owner has contracted with for the purpose of communications and the provision of products and services.
The Personal Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Personal Data may be accessible to certain types of persons in charge, involved with the operation of this Website (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as data processors by the Owner. The updated list of these parties may be requested from the Owner at any time by contacting gm2020@staycreekstone.com or sending notification to Creekstone Inn and Suites, 328 Depot St. St. Marys, PA 15857
Owner maintains a centralized reservations system that will retain User’s personally identifiable information when a reservation is made by way of Owner’s Website, mobile applications, call center, and third-party travel agents or travel Websites that connect to Owner’s reservation system. User’s Personal Data is needed to process the transaction made and will be processed primarily in the United States to complete User’s transaction and assist with future transactions for User’s convenience. Only Personal Data that is reasonably required to conclude User’s transaction and assist with the convenience of future transactions is collected and shared, as such sharing is described in this Policy.
Owner may use User’s Personal Data to contact User regarding User’s transaction. Owner may also use User’s Personal Data to send travel-related messages, transaction information, helpful information about the area that User is staying, notifications about special offers and promotions, and customer service or market research surveys, in which participation is optional.
To the extent required or permitted by law, Owner may collect, use and disclose Personal Data in connection with security-related or law enforcement investigations or in the course of cooperating with authorities or complying with legal requirements. Owner may also use Personal Data as permitted by law to perform credit checks, report or collect debts owed, or protect the rights or property of Owner, its employees, other customers, this Website, or its Users.
The Owner may process Personal Data relating to Users if one of the following applies:
In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing of Personal Data and, in particular, whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.
Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data.
Users are also entitled to learn about the legal basis of Data transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.
If any such transfer takes place, Users can find out more by checking the relevant sections of this document or inquire with the Owner using the information provided in the contact section.
Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.
Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.
Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.
The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.
Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
The Data concerning the User is collected to allow the Owner to provide its Services, as well as for the following purposes: Contacting the User, Data transfer outside the EU, Displaying content from external platforms, remarketing and behavioral targeting and Analytics.
Users can find further detailed information about such purposes of processing and about the specific Personal Data used for each purpose in the respective sections of this document.
Personal Data is collected for the following purposes and using the following services:
The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.
Google Analytics with Anonymized IP (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network. This integration of Google Analytics anonymizes User’s IP address. It works by shortening Users' IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be sent to a Google server and shortened within the US.
Google Analytics uses “Cookies”, which are text files placed on User’s computer, to identify User as a unique user and help analyze how Users use this site. The information generated by the cookie about User’s use of the Website (including User’s IP address) will be transmitted to and stored by Google on servers in the United States. This information is used for the purpose of evaluating User’s use of Owner’s Website, compiling reports on Website activity and providing other services relating to Usage Data. The ad formats utilized through Google may include remarketing on Google’s display and search network.
User may refuse the use of Cookies by selecting the appropriate settings on User’s browser. However, please note that, if User chooses to do this, User may not be able to use the full functionality of Owner’s Website. Furthermore, User can prevent Google’s collection and use of data (Cookies and IP address) by downloading and installing the browser plug-in available for various browsers located at https://tools.google.com/dlpage/gaoptout.
Additional information concerning Google’s data privacy policy and other associated topics can be found at https://support.google.com/analytics/answer/6004245.
Privacy Policy – Opt Out.
Owner’s Websites, mobile applications and e-mails may use Cookies and other computer code processes. These are small amounts of computer code that interact with User’s computer, mobile device, browser or e-mail. The types of Cookies Owner uses are referred to as “session” Cookies and “persistent” Cookies. Session Cookies are temporary and are automatically deleted once User closes the internet browser. Persistent Cookies remain on User’s computer hard drive or mobile device until User deletes them or are otherwise removed upon expiration. Cookies are required for the online reservation process so that Owner can keep User’s information on multiple pages throughout the process. Additionally, Owner uses Cookies to remind us of who User is, tailor Owner’s services to suit User’s personal interests, track User’s status in Owner’s promotions and/or analyze User’s visiting patterns. Some of the purposes for which Cookies are installed may also require the User's consent. Where the installation of Cookies is based on consent, such consent can be freely withdrawn at any time following the instructions provided in this document.
Technical Cookies and Cookies Serving Aggregated Statistical Purposes
Activity strictly necessary for the functioning of the service: This Website uses Cookies to save the User's session and to carry out other activities that are strictly necessary for the operation of this Website, for example in relation to the distribution of traffic.
Activity regarding the saving of preferences, optimization, and statistics: This Website uses Cookies to save browsing preferences and to optimize the User's browsing experience. Among these Cookies are, for example, those used for the setting of language and currency preferences or for the management of first party statistics employed directly by the Owner of the site.
Analytics: This Website uses Cookies to enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior
Owner may also use Cookies to form an association between multiple devices such as User’s smartphone, desktop computer and tablet. A unique identifier, or fingerprint, is created on User’s devices, which enables the association. Owner uses the device association to link User’s device searches on its Websites, which enables Owner to provide User with a more convenient and personal digital experience.
User can generally set User’s browser to not accept Cookies or to notify User when User is sent a cookie, providing the chance to decide whether or not to accept it. Not accepting Cookies will adversely affect User’s ability to perform certain transactions and functions on Owner’s Websites.
Some of our third party providers collect statistics in an anonymized and aggregated form and may not require the consent of the User or may be managed directly by the Owner - depending on how they are described - without the help of third parties.
If any third party operated services are listed among the tools below, these may be used to track Users’ browsing habits – in addition to the information specified herein and without the Owner’s knowledge. Please refer to the privacy policy of the listed services for detailed information.
In addition to what is specified in this document, the User can manage preferences for Cookies directly from within their own browser and prevent – for example – third parties from installing Cookies.
Through browser preferences, it is also possible to delete Cookies installed in the past, including the Cookies that may have saved the initial consent for the installation of Cookies by this Website.
Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses: Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Internet Explorer.
With regard to Cookies installed by third parties, Users can manage their preferences and withdrawal of their consent by clicking the related opt-out link (if provided), by using the means provided in the third party's privacy policy, or by contacting the third party.
Notwithstanding the above, the Owner informs that Users may follow the instructions provided on the subsequently linked initiatives by the EDAA (EU), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.
Since the installation of third-party Cookies and other tracking systems through the services used within this Website cannot be technically controlled by the Owner, any specific references to Cookies and tracking systems installed by third parties are to be considered indicative. In order to obtain complete information, the User is kindly requested to consult the privacy policy for the respective third-party services listed in this document.
Given the objective complexity surrounding the identification of technologies based on Cookies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of Cookies by this Website.
Owner respects the right of each User to control how his or her Personal Data is used. If User does not want Owner to provide Personal Data to its business partners, or if User does not wish to receive promotional communications from Owner or its affiliates concerning special offers, discounts, or other promotions, use the “Unsubscribe” function in the e-mail received from Owner. User can also change privacy settings in User’s browser.
User can also e-mail Owner at gm2020@staycreekstone.com or write to Creekstone Inn and Suites 328 Depot St. St. Marys, PA 15857. Please include User’s name, address, e-mail address, and clearly state the nature of User’s request.
By filling in the contact form with User’s Personal Data, the User authorizes Owner’s Website to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.
Personal Data collected: User’s name, address, telephone number, e-mail address, accommodation preference, credit card details, birth date, as well as various types of Data, Usage Data and Cookies (discussed below).
Owner is allowed to transfer Personal Data collected within the EU to third countries (i.e. any country not part of the EU) only pursuant to a specific legal basis. Owner has centralized certain aspects of its data processing, allowing Owner to better manage our business as a whole. That centralization will result in the transfer of personal information from one country to another. These countries may have data protection laws that are different to the laws of User’s country (and, in some cases, may not be as protective).
Owner’s Website servers are located in the United States, and Owner has business relationships globally. This means that when Owner collects Personal Data it may be processed globally if there is a legal basis to do so. If there is a legal basis, Personal Data of Users shall be transferred from the EU to third countries only if the User has explicitly consented to such transfer, after having been informed of the possible risks due to the absence of an adequacy decision and appropriate safeguards. In such cases, the Owner shall inform Users appropriately and collect their explicit consent via this Website.
To facilitate transferring European Economic Area (EEA) citizens’ Personal Data out of the EEA countries, Owner incorporates the Standard Contractual Clauses approved by the EU Commission into applicable contract agreements to ensure that the necessary levels of protection and care are required of all parties. Information about the European Commission’s Standard Contractual Clauses and a copy of the Standard Contractual Clauses can be found at: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en. Additional information about Owner’s incorporation of the Standard Contractual Clauses in its contract agreements or the data protection measures associated with data transfers can be requested by sending Owner notice at Creekstone Inn and Suites, 328 Depot Street, St. Marys, PA 15857
Other Legal Basis for Data Transfer Abroad (This Website)
If no other legal basis applies, Personal Data shall be transferred from the EU to third countries only if at least one of the following conditions is met:
This type of service allows User to view content hosted on external platforms directly from the pages of this Website and interact with them. This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it.
Under no circumstances may persons under the age of 13 use this Website.
Users declare themselves to be adults according to their applicable legislation. Minors (under the age of 18) may use this Website only with the assistance of a parent or guardian.
Users may exercise certain rights regarding their Data processed by the Owner.
In particular, Users have the right to do the following:
Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.
Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. To learn whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.
Any requests to exercise User rights can be directed to the Owner at gm2020@staycreekstone.com or write to Creekstone Inn and Suites, 328 Depot St. St. Marys PA 15857. Please include User’s name, address, e-mail address, and clearly state the nature of User’s request. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month.
Owner will work with User to address complaints, which may include contacting applicable authorities as part of the resolution process.
The User's Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Website or the related Services. The User declares to be aware that the Owner may be required to reveal Personal Data upon request of public authorities.
Owner is only responsible for the privacy and security policy and content on this website and Owner’s mobile apps. staycreekstone.com and may redirect to other websites and mobile apps. Those websites and mobile apps are not covered by this privacy and security policy, and OWNER IS NOT responsible for the privacy practices or the content of those other websites and mobile apps.
In addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information concerning particular products or services or the collection and processing of Personal Data upon request.
For operation and maintenance purposes, this Website and any third-party services may collect files that record interaction with this Website (system logs) use other Personal Data (such as the IP Address) for this purpose.
More details concerning the collection or processing of Personal Data may be requested from the Owner at any time at gm2020@staycreekstone.com or write to Creekstone Inn and Suites 328 Depot St. St. Marys, PA 15857. Please include User’s name, address, e-mail address, and clearly state the nature of User’s request. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month.
Do Not Track Signals: Some web browsers offer a "Do Not Track" ("DNT") signal that is an HTTP header field indicating User’s preference regarding tracking or cross-site user tracking. This Website currently does not recognize “Do Not Track” requests. To determine whether any of the third-party services Owner uses honor the “Do Not Track” requests, please read their privacy policies.
By using Owner’s Website User consents to Owner’s collection and use of User’s Personal Data as described in this policy. Owner reserves the right to modify this privacy and security policy and related business practices at any time by posting updated text on this Website. Any changes to this policy become effective upon posting of the revised policy to this Website. Use of this Website following such changes constitutes User’s acceptance of the revised policy then in effect. Should the changes affect processing activities performed based on the User’s consent, the Owner shall collect new consent from the User, where reasonably required.
It is strongly recommended that User check this page often, referring to the date of the last modification listed at the bottom.
Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.
Information collected automatically through this Website (or third-party services employed in this Website), which can include: the IP addresses or domain names of the computers utilized by the Users who use this Website, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.
The individual using this Website who, unless otherwise specified, coincides with the Data Subject.
The natural person to whom the Personal Data refers.
The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this Website. The Data Controller, unless otherwise specified, is the Owner of this Website.
The means by which the Personal Data of the User is collected and processed.
The service provided by this Website as described in the relative terms (if available) and on this site/application.
Unless otherwise specified, all references made within this document to the European Union include all current member states to the European Union and the European Economic Area.
Small sets of data stored in the User's device.
This privacy statement has been prepared based on provisions of multiple legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation). This privacy policy relates solely to this Website, if not stated otherwise within this document.
Latest update: December 6, 2019
