1. Introduction
The Aruba Tourism Authority (ATA) provides this Global Privacy Policy to explain how it processes personal data across its digital properties, including Aruba.com and associated platforms. By using the Site or the Services, you acknowledge that we may collect information about you and use or disclose such information as described herein.
2. Applicable Data Protection Laws
ATA is committed to complying with privacy regulations worldwide. We will handle your Personal Data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other jurisdiction specific requirements. Personal Data means any information relating to an identifiable individual, whether directly or indirectly identifying them.
3. Information We Collect
ATA gathers several categories of data depending on how you interact with us: identity information, contact details, travel preferences, technical data from your device, customer inquiries, usage patterns, marketing preferences, and limited financial information. ATA does not otherwise collect or process consumer payment card information in connection with tourism bookings. Non identifiable, aggregated or anonymized information falls outside the definition of Personal Data under applicable protection laws.
4. Data Belonging to Minors
Our Site and Services are intended for a general audience and are not directed at children. We do not knowingly collect Personal Data from minors without appropriate consent from a parent or guardian. If we learn that we have collected Personal Data from a minor without the required consent, we will take reasonable steps to delete that information.
5. How We Collect Your Information
We collect information directly from you when you browse the Site, submit a form, subscribe to communications, or contact our team, as well as automatically through cookies, analytics tools and similar technologies as you interact with our digital properties. We may also receive information from trusted travel and tourism partners who work with ATA to support your visit.
6. Purpose and Legal Basis of Data Processing
We process Personal Data to provide and improve our Services, respond to inquiries, personalize your experience of the Site, send requested communications, and comply with legal obligations. Depending on the context, our legal basis includes your consent, the performance of a request you have made, and ATA's legitimate interest in promoting Aruba as a destination.
7. Data Retention
We retain Personal Data only for as long as reasonably necessary to fulfill the purposes described in this policy, including to meet legal, accounting or reporting requirements. When Personal Data is no longer needed, we take reasonable steps to securely delete, anonymize or archive it in accordance with our internal retention practices.
8. Security of Personal Data
ATA maintains reasonable administrative, technical and physical safeguards designed to protect Personal Data against loss, misuse, unauthorized access, disclosure, alteration and destruction. While no system can guarantee absolute security, we regularly review our practices to reduce risk and respond promptly to any suspected incident.
9. Sharing Your Personal Data
We may share Personal Data with trusted service providers who support the operation of the Site and Services, with tourism and travel partners involved in fulfilling your request, and where required by law or to protect the rights and safety of ATA and its visitors. We do not sell Personal Data to third parties for their own marketing purposes.