Peregrine Hospitality ("Peregrine") understands the importance of privacy to our visitors ("you") and presents this Privacy Policy to help explain how we collect, use, and disclose your personal information. This Privacy Policy also explains your options and rights with respect to your personal information along with the ways in which you can express your communication preferences.

This Privacy Policy describes the privacy practices of Peregrine Hospitality for personal information that we collect:

• through websites operated by us from which you are accessing this Privacy Policy, including Pasaroblesinn.com and other websites owned or controlled by Peregrine Hospitality. (collectively the "Websites")
• when you visit or stay as a guest at one of our properties, or through other offline interactions with us related to our hospitality services (collectively "Hospitality Services")
• through email messages that we send you that link to this Privacy Policy and through your communications with us online or in person
• through our social media pages that we control from which you are accessing this Privacy Statement (collectively our "Social Media Pages")
• from third parties such as Hotel Operations Partners, Property Owners, Affiliates, and Business Services Providers.

Collectively, we refer to the Websites, our Social Media Pages, and electronic communications as the "Online Services."

This Privacy Policy does not apply to:

• Third-Party Sites. Websites, apps, videos (embedded or direct links), or other content (each a "Linked Site") to which we link that are not operated by us. Linked Sites have their own personal information collection and use practices, and we are not responsible those practices. We encourage you to read each Linked Site's privacy disclosures to understand how your personal information is processed.
• Non-Personal Information. Our processing of information that cannot be linked to an identifiable or identified individual. We may process this data for any legitimate business purpose.

Online Services

We and our third-party partners use cookies, web beacons, clear GIF, pixels, internet tags, and other similar tracking technologies (collectively, "tracking technologies") to gather information when you interact with our websites and email communications. We use some of these tracking technologies help us optimize and maintain the security of our websites and your account. We also use them for compatible purposes like save your preferences, fixing errors, and ensuring consistent service of our websites and mobile apps.

We permit third parties to use tracking technologies on our websites for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, and provide metrics on advertising effectiveness. The third parties use their technology to provide advertising about products and services tailored to your interests which may appear either on our websites or on other websites.

The information we collect using these technologies includes:

• Device and Browser Identifiers. For example, an assigned user ID, IP address, or similar identifier that can be used to identify your device. This includes when you connect a device to WiFi or other Internet-enabled services at our Properties.
• Coarse and Precise Location Information. We may gain a general approximation of your location that is not based on global position system (GPS) information. We may collect your precise location when you enable us to collect it via your device. You can use your device's settings to restrict access to precise location.
• Browsing and Search History. Information about the content you view and searches you make on our Site(s).
• Website Log and Usage Data. Information related to our pages you viewed, the services and features you used or interacted with, your browser type and details about any links or communications with which you interacted.
• Advertising Metrics. Information about the advertisements you have viewed on our Website.
• Chat Modules. We may collect certain categories of personal information from you when you use our interactive chat module. By interacting with the chat box, you consent to our collection practices and understand and acknowledge that we may use this data to provide our chat functionality.

Because the "Do Not Track" browser-based standard signal has yet to gain widespread acceptance, our Website(s) currently does not respond to those signals. To learn more about your options with respect to tracking technologies, please see the Your Privacy Preferences section, below.

When you interact with us in connection with our Hospitality Services we may collect and process certain information about you. This information includes:

• Your Personal Details. These include your first and last name, email address, phone number, mailing and billing address, employer or group information (if your reservation is part of a company or group booking), and other contact information you provide.
• Government Identifiers. These include your driver's license, passport, or other government ID information as well as your country of citizenship.
• Personal Characteristics. These include your gender, marital status, information about family members and travel companions (including children), language preferences, amenity requests, dietary restrictions, relevant dates (birthdate, anniversary, special occasions), and hospitality preferences.
• Travel Details. These include your travel itinerary, dates of travel/stay, activities and amenities booked and purchased.
• Guest History. This includes your past stays or interaction with the Property or Peregrine Hospitality, goods or services purchased, services and requests, feedback or communications from prior stays.
• Financial Information. This includes credit and debit card number or other payment data.
• Survey data. We may contact some individuals to request participation in a survey or other general research. If you choose to take part in these, you may provide personal information, in or along with your survey responses, or in any other feedback or comments you give us.
• Contests, sweepstakes, and prize drawings data. If you take part in a contest, sweepstakes, or prize drawing, then you may provide personal information, feedback, or comments to enter, or as part of the contest, sweepstakes, or prize drawing.
• Messages and email data. We collect information about you when you send, receive, open, read or otherwise engage with messages, email, or other communications in connection with our Services, including whether you have opened or acted on those communications.
• Social Media Content. For example, interactions with our Social Media Pages and content you post on them. This information may include your social media handle, account ID, publicly available photos and other data made public by you on your social media.
• Other Personal Information You Provide. If you provide us personal information other than that described above, we will collect it and use it for the purposes for which you provide it or other consistent purposes.
• Inferences. In certain instances, we may infer personal information about you based on the information you have provided to us or that we have collected about you.
• Security Surveillance Information. Our properties may capture audio-visual information and images of you when you visit our Properties.

We collect this information when you sign up or otherwise agree to receive marketing communications from a Property or Peregrine Hospitality, make a reservation to stay at one of our Properties or use our Hospitality Services, interact with Peregrine Hospitality or a Property's workforce members, visit our Properties, engage with use on social media, participate in a promotion, contest, or sweepstakes we offer contact our customer services teams or submit it to us online or in-person.

We obtain the personal information described above from third parties including:

• Hotel Operations Partners. When you book through a third-party company providing hospitality services, they may share your personal information with us to facilitate your hospitality requests. These include franchisors of branded hotels.
• Property Owners. When Peregrine Hospitality acts as the property manager or operator for a specific Property, we may receive personal information about you from the Property Owners.
• Travel Providers. These include booking and reservations services, airlines, travel agencies.
• Hospitality Service Providers. These include providers of hospitality and other services, including restaurants, spas, shops, golf courses, and similar activities providers by or through our Properties or associated with our Properties.
• Affiliates. We share personal information with other entities within the Peregrine Hospitality portfolio.
• Business Services Providers. These are those persons or entities with whom we have a relationship to provide business operations services and support to Company. These providers may include the following:
  • IT Operations Providers. These include cloud computing service providers, internet service providers, data backup and security providers, functionality and infrastructure providers, and similar service providers.
  • Operations Providers. These include service provider with whom we partner to provide day-to-day business operations, including payment processors, security vendors, business software service providers, hospitality service providers, banks, facilities management providers.
• Marketing and Advertising Providers. These include advertising, direct marketing, and lead generation providers, affiliate marketing program providers, retargeting platforms, data brokers, ad networks, marketing consultants, and similar services providers.
• Publicly Available Sources. These include public databases, marketing partners, and event sponsors.

We may use your personal information for a variety of reasons. Depending on how you interact with our Services, these include using personal information:

• Delivering Our Hospitality Services to you and to provide the related customer support, communication, and security. We provide all of the services common with the hotel and hospitality industry and our use of your personal information is consistent with providing our hospitality services.
• Customer Service to provide customer service, maintain and service products and accounts, provide training for quality assurance purposes, and perform similar activities.
• Processing Transactions to process or fulfill orders and transactions, verify customer information, process payments, confirm eligibility promotional benefits, and perform similar activities.
• Policy Enforcement including enforcing our terms of stay and service, acceptable use policies, anti-spam policies, and similar policies.
• Advertising & Marketing to send advertisements and marketing material via physical and electronic mail relating to product specials and other promotional events or offers, perform marketing research and data analytics, and perform similar activities.
• Contextual and Behavioral Targeting to provide contextual customization of ads shown as part of an interaction with our website or application, using tracking technologies like cookies and pixels.
• Counting Ad Impressions & Website Interactions to audit interactions with our websites, applications, or advertisements, count ad impressions to unique visitors, verify position and quality of ad impressions, and perform similar activities.
• Fraud Prevention to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to prosecute those responsible for that activity.
• Public Health and Safety to ensure the health and safety of our guests, our workforce members, and the general public.
• Defending Against Claims & Litigation to defend against or respond to potential or actual claims and litigation.

When we process personal information about you to comply with legal requirements or to perform our obligations under a contract with you or with our customer through whom you use our offerings, failure to provide such information may prevent or delay our fulfillment of these obligations. To the extent required by applicable law, we will collect your personal data with your consent, where required, and in accordance with our legitimate need to provide our Services.

Under European data protection laws, Peregrine Hospitality is required to rely on one or more legal bases to collect, use, share, and otherwise process the information we have about you. We describe these legal bases and some accompanying examples in more detail below.

• Performance of Contract. Peregrine Hospitality processes your information as is necessary to perform our contract with you, including:
  • Facilitating reservations and bookings of accommodations and related services.
  • Processing payments and security deposits.
• Your Consent. Peregrine Hospitality processes certain information based on your consent, which you may revoke at any time. For example:
  • We and our partners use cookies and similar technologies based on your consent.
  • Where you choose a method of verification to confirm your address, we do so in accordance with your consent.
  • If you decide to use location services in the context of Peregrine Hospitality, we collect and process such location information based on your consent.
  • We rely on your consent to tailor ads based on your activity and information on other websites and partner data, such as inferred interests.
  • We will send you marketing communications where you have consented to receiving such communications in accordance with applicable law.
• Legal Obligation. Peregrine Hospitality may process your information to comply with a legal obligation, a court order, or to exercise and defend legal claims. For example:
  • We may preserve and disclose your information if it is necessary to respond, based on applicable law, to a valid legal request (e.g., a subpoena, search warrant, court order, or other binding request from government or law enforcement).
  • We may retain and process your information where it is necessary for compliance with applicable tax or records retention laws.
• Vital Interests. Peregrine Hospitality may process your information in certain circumstances when it is necessary to protect your vital interests, or those of others. For example:
  • We may need to process your information in order to protect your life or safety or the lives or safety of others, or otherwise prevent physical injury or other harm to any person or the general public.
  • We may preserve or share your information with law enforcement and related authorities where we have a good faith belief that it is required in the context of an imminent threat.
  • We may share your personal data with disaster relief agencies, first responders and other individuals to facilitate disaster or emergency response efforts.
• Legitimate Interests. We may process your information where it is necessary for the purposes of Peregrine Hospitality. We process your information in furtherance of the following legitimate interests:
  • Providing, improving, and developing our Online Services.
  • Providing, improving, and developing our Hospitality Services.
  • General Business Operations.
  • Sending marketing communications. This includes marketing and promoting our brands, Properties, and Hospitality Services. We use your contact information and send you marketing communications in accordance with applicable law, except where applicable law requires that we rely on your consent to send such communications.
  • Customer Service. This includes responding to customer complaints or concerns, fulfilling guests' preferences, monitoring Properties for safety and security purposes, and enforcing policies and procedures for the benefit of our workforce members, other guests, and protection of property.
  • Providing promotions, contests, and sweepstakes. We may also rely on consent, when required by law, when processing personal information for these purposes.

Peregrine Hospitality does not have an establishment in the European Economic Area, the United Kingdom, or Switzerland, nor do we target our activities to those jurisdictions. Nevertheless, you may submit requests related to rights provided under the General Data Protection Regulation (GDPR) (as implemented in the country or region applicable to you) consistent with this policy. If you would like to lodge a complaint with the appropriate data protection authority for your country or region or where an alleged infringement of applicable data protection laws occurs, please contact your local data protection authority.

For the EEA, a list of the national data protection authorities can be found at: https://ec.europa.eu/newsroom/article29/items/612080.

For the UK, the responsible data protection authority is the Information Commissioner's Office (ICO), more details about which can be found on the ICO website. Our notice to you consistent with the obligations of data controllers under the GDPR or other laws applicable to data subjects located in the EEA, UK, or Switzerland is not an admission as to the application of foreign data protection laws on Peregrine Hospitality.

We may share your personal information with the following:

• Hotel Operations Partners.
• Property Owners.
• Travel Providers.
• Hospitality Service Providers.
• Affiliates.
• Business Services Providers.
• Marketing and Advertising Providers.
• Professional Advisors. These include lawyers, accountants, consultants, security professionals, and other similar parties when disclosure is reasonably necessary to comply with our legal and contractual obligations, prevent or respond to fraud or abuse, defend ourselves against attacks, or protect the rights, property, and safety of us, our customers, and the public.
• Legally Required Parties/Governmental Entities. Persons to whom we are required by law to provide information, such as pursuant to a subpoena or a court order.
• Reorganization. Persons involved in the consideration, negotiation, completion of a business transaction, including the sale, merger, consolidation, acquisition, change in control, transfer of substantial assets, bankruptcy, or reorganization, and any subsequent integration.
• Authorized Disclosures. To any party when authorized by the individual to whom it pertains to share it.

We will retain your personal information only for so long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure of your personal information; the purposes for which we process your personal information and whether we can achieve those purposes through other means; and the applicable legal requirements. In some circumstances, you may ask us to delete your information. Additionally, we may anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

We have implemented and maintain reasonable security procedures and practices, appropriate to the nature of the information, to protect your personal information from unauthorized access, destruction, use, modification, or disclosure. However, no security measure is perfect, so we cannot guarantee the security of your personal information. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account has been compromised), please immediately notify us in accordance with the "Contact Us" section, below.

We are located and operate in the United States. By submitting personal information to us, you understand that we may transfer your personal information to country foreign to you, including the United States, for processing. The laws that apply to the use and protection of personal information in the United States, or other countries or jurisdictions in which we transfer or process personal information, may be different from the laws and protections in your country. These transfers may include transfers to our service providers located in foreign jurisdictions. Whenever we engage a service provider, we require that its privacy and security standards adhere our requirements and applicable privacy laws.

You can control the collection and use of personal information for some of our processing activities. This includes:

Adjusting Communication Preferences

• Emails From Peregrine Hospitality: During the registration for Peregrine Hospitality, you should be presented with an opt-in to receive email communications. If you wish to no longer receive email communications, you can click on the "unsubscribe" link located at the bottom of the email, email Peregrine Hospitality at [email protected] to let us know, and we will remove you as soon as possible. Opting out of marketing or newsletter emails will not opt-you out of all emails—we may need to send you transactional or similar emails related to your Peregrine Hospitality or a Property's account, purchases, legal or contractual updates, or similar topics. You are not able to opt-out of these emails.
• Text Messages: You may opt out of automated text notifications any time by replying "STOP," or any alternative keyword we have shared with you. You may still receive communications from Peregrine Hospitality regarding safety issues, such as messages related to your account, even if you have opted out.

There are several ways to opt-out of cookies. If, however, you do not accept any cookies, you may experience some inconvenience in your use of the Online Services. For example, we will not be able to recognize your computer, and you will need to log in every time you visit. You also will not receive advertising or other offers from us that are relevant to your interests.

This Website recognizes the Global Privacy Control.

Browser settings: You can opt out of cookies on your browser. Every browser is different so please check the instructions provided by your browser.

Google Analytics: We collect data through Google Analytics and Adobe Analytics, which use cookies and technologies to collect and analyze data about use of the Online Services. These services also collect data regarding the use of other websites, apps, and online resources. You can learn about Google's practices by going to www.google.com/policies/privacy/partners/ and opt out by downloading the Google Analytics opt out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

Facebook: Using Facebook's privacy setting to restrict Facebook's use of cookies. Please go here to do so.

Some jurisdictions provide covered individuals with specific privacy rights which can be exercised against covered entities. Depending on the jurisdiction, these rights may include the following:

• Access. The right to know (or confirm) what personal information an entity has collected about you, and to receive a copy of it.
• Deletion. The right to request that an entity delete personal information it has collected from you.
• Restriction. The right to request an entity restrict how it uses certain personal information. In California, this right is referred to as the right to limit the use of sensitive personal information.
• Correction. The right to request correction of inaccurate personal information maintained by an entity.
• Opt-Out of the Sale/Sharing of Your Personal Information. The right to opt-out of the sale of your personal information to third parties. The term "sale" varies by jurisdiction, but sometimes includes the right to opt-out of the use of personal information for targeted advertising purposes ("sharing").
• Revoke Consent. Where consent is required for processing under applicable law, the right to withdraw your consent.
• Object to Processing. The right to object to the processing of personal information by an entity under applicable law.
• Opt-out of Profiling/Automated Decision-Making: The right to opt- out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
• Non-Discrimination. The right not to be discriminated against for exercising any of the rights conferred at law.
• Complaints. The right to lodge a complaint with the appropriate governmental authority.

Peregrine Hospitality will honor the privacy rights afforded to individuals in accordance with applicable law and will not discriminate against individuals for exercising their privacy choices under the law.

Access, Deletion, Restriction, Correction, And Objection Requests

You or an authorized agent may make a request at any time to exercise the rights listed above by emailing us at connect@peregrinehg.com or by submitting a request through [our privacy portal]. We will respond to your request within a reasonable period (if properly submitted) and in accordance with applicable law. If we need more time to process and respond to your request, we will notify you of that fact along with the reason for the delay. If we decline to act regarding your request, we will inform you of our decision and the reason for it, and, if applicable, with instructions on how you may appeal our decision.

Opting Out Of Sale, Sharing, And Targeted Advertising

To make a request to opt-out of sale and/or sharing of personal information email us at [email protected]

Our Services are not intended for persons under 16 years of age. We do not knowingly collect or process the personal information of individuals under the age of 16. If we learn that we have collected personal information from a child under age 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us their Personal Information, please contact us at [email protected].

We may update this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the Policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website homepage or sending you a notification). We encourage you to review the Privacy Policy whenever you access our Services or otherwise interact with us to stay informed about our information practices and the choices available to you.

Please visit our California Consumer Privacy Choices page which includes our California Consumer Privacy Policy, which supplements this Privacy Policy.

If you have questions or comments about this Privacy Policy or complaints and our privacy practices, please contact us at:

Peregrine Hospitality

Mail: Peregrine Hospitality. 320 Fillmore St, Suite 400 Denver, CO 80206
Email: [email protected]
Telephone: (800) 401-0686