For example, when you make a booking or reservation through the website or mobile app of one of our affiliates and related corporations or business partners, your booking or reservation information with them might be forwarded to us so that we can process your booking and ensure its success. Also, we allow you to log into visitcambodia.com with your social media account or Apple ID, and with your consent (where you grant authorization to such third party), your personal data (e.g., openid, name, nickname, email address, profile photo, where applicable) will be shared with us through that third party.

visitcambodia.com automatically collects user-related information during service use for security, service provision, claim response, dispute resolution, and restriction of legal and terms violations. The specific details are as follows.

· Log information that the system may automatically collect when you use our Services via cookies, web beacons, or other channels (including those placed by our third-party partners).
· Device information or software information such as IP address, software version, and device identifier of the mobile device you use, Web Browser or mobile device information used to access our Services.
· Information on the web pages visited, keywords searched, pages accessed through our apps, and other information searched or provided during the use of our Services.
· Information included in content shared or posted through our Services, such as photos, comments, dates, and times.
· User preference information such as language, region, and currency.
· Where you have given your consent: location information collected when you use location-based services after setting the location function on your device. This includes location information collected via GPS or Wi-Fi, address information included in Account Information you provided to us, the location information and current/past location you shared with us. If you do not want your location information to be collected, you can disable the location function setting.

For more details on how we use cookies, please refer to our Cookie Statement.

We may share your personal data with the following categories of recipients:

Details of data sharing

Personal data that we collect from you may be transferred to and stored at a destination outside your country. Due to the global nature of our business, your personal data may be disclosed to our Travel Service Providers, third-party vendors, financial institutions and third-party payment processors, business partners, advertising partners, affiliates and related corporations within our group, government authorities, law enforcement, regulators and fraud prevention agencies, prospective buyers and their advisers, and visitcambodia.com’s advisers outside of your country, in connection with the purposes described above. Where these locations do not provide an adequate level of data protection, we ensure appropriate safeguards are in place to protect your personal data in these countries.

Depending on your location, you have certain data protection rights in accordance with applicable data laws.

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you wish to exercise any of these rights, please contact us at the contact details set out below.

Wherever we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Please also note that we will not be able to provide some or all of our Services and/or enter into a contract with you in case you withdraw your consent.

You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message (e.g. clicking the unsubscribe link contained at the bottom of marketing emails), by adjusting the notification settings in your account profile on visitcambodia.com websites or apps, or by contacting us using the details set out below.

We are committed to investigating and resolving complaints about our collection, use and/or disclosure of your personal data. To make a complaint, please clearly provide the following information to help us address the issue effectively:

• • The specific data privacy complaint (please provide as much detail as possible including country, your understanding of the data privacy infringement, and redress requested)

• • Your full name and how we can contact you
  • Any previous correspondence on this specific data privacy issue

If you are not satisfied with our resolution of your complaint, you have the right to complain to the relevant data protection authority.

We aim to resolve all issues in a timely manner, or as mandated by applicable law, but if this is not possible because a more detailed investigation is required, we will keep in regular contact with you to ensure that you are kept informed of the resolution of your matter.

Where visitcambodia.com processes your personal data as allowed by law or with your consent, visitcambodia.com will store your personal data i) only for as long as is required to fulfil the purposes mentioned previously or other business or legal purposes, ii) until you object to our use of your personal data (where visitcambodia.com has a legitimate interest in using your personal data), or iii) until you withdraw your consent, whichever is applicable. However, if visitcambodia.com is required to retain your personal data for business or legal purposes or to address legal claims, visitcambodia.com will retain your personal data until there is no longer any business or legal purpose to do so or until the claims in question have been settled. In particular:

Where we process your personal data in relation to your account, we do this for as long as you are a user of visitcambodia.com and as allowed by applicable laws after this. If you request data deletion when deleting your account, we will respond to your request in accordance with applicable laws.

Where we process personal data for marketing purposes or with your consent, we process the personal data until you ask us to stop and for a short period after this to allow us to implement your requests. We also keep a record of the fact that you have asked us not to send you direct marketing or not to process your personal data indefinitely so that we can respect your request in future.

Where we process your personal data for student verification or your health information for refund or change of reservation, we will automatically delete them on a rolling basis after the necessary period for the purposes above.

visitcambodia.com attaches great importance to information security and has set up a dedicated team for this. We strive to protect your personal data and have taken appropriate managerial, technological, and physical security measures.

In terms of the data life cycle, we have established security measures for all stages including data collection, storage, display, processing, use, and destruction. We take different control measures according to the level of information sensitivity, including but not limited to access control, SSL encryption transmission, and high-level encryption algorithms for encrypted storage, in order to mask the sensitive information to be displayed, etc. We have obtained ISO 27001, PCI DSS, and SOC2 Type 2 certifications. We rely on currently available technologies and take appropriate security measures to protect your personal data.

In the unlikely event of a data breach affecting your personal data, we will inform you in accordance with laws and regulations by email or other means.

We reserve the right to update this Privacy Notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.

The data controller for your personal data is visitcambodia.com a website operated by the Ministry of Tourism of the Kingdom of Cambodia. If you have questions about this Privacy Notice or wish to contact us for any reason in relation to our personal data processing, please contact our Data Protection Officer at [email protected],kh.

Our websites and apps (“platforms”) use cookies that are essential for their operations. We also use cookies for various other purposes including analytics, functionality, and marketing.

A cookie is a small text file that we store on your computer or phone when you use our platforms. To learn more about cookies, please go to www.aboutcookies.org.

We may also use similar technologies such as Software Development Kits (SDKs). In this statement we refer to all such technologies as “cookies”.

You have the option to accept or decline cookies. While most web browsers are set to accept cookies by default, you can typically adjust your browser settings to refuse them if you wish. However, doing so might limit your ability to fully utilize the website’s features.

What type of cookies does visitcambodia.com use?

We use the following types of cookies:

These are cookies that our platforms cannot operate without. They include, for example, cookies that enable you to log into our platforms, use a shopping cart, and pay for travel products. You can switch these cookies off in your browser settings, however you may then not be able to use our platforms.

• • These cookies allow us to collect information on how you interact with our platforms. This helps us measure and improve the way our platforms work, for example by seeing how effective our offers and advertisements are and ensuring that you can easily navigate our platforms.

• • These cookies remember you between visits to our platforms. This enables us to personalize your experience and remember your preferences, for example, your past searches and your language, region, and currency settings.

• • We, together with our trusted third-party partners, use these cookies to record your visit to our platforms and your other online activities. This allows us to gather information on you to determine which travel products, advertisements, and offers we display to you both on our platforms and across the Internet. This helps us to provide a more personal advertising experience. To learn more about your options for personalized advertising, please go to www.youronlinechoices.eu. To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.

We use session and persistent cookies. Session cookies are deleted when you close your browser or our apps. Persistent cookies remain on your computer or phone and are activated the next time you visit our platforms. Cookies may be placed by us, or one of our trusted third-party partners.