Privacy Policy

Managing Your Cookies - You can choose to disable some or all cookies using your web browser’s preferences menu or the “Your Privacy Choices” link in the footer of our websites. By turning off cookies, we will still be able to track your browsing history during a single visit to one of our websites, however, we will not be able to link your browsing history during each of these visits to you, as you will be considered a new visitor each time you visit one of our websites. Be aware that turning off cookies may disable certain functions on the website and cause it not to function properly.

Do our Websites and Apps Respond to “Do Not Track” Signals?

We recognize the Global Privacy Control (“GPC”). Your browser must be able to support the GPC for us to recognize your opt-out preference signal.

3. WHEN WE MAY COMBINE YOUR PERSONAL INFORMATION

We may combine the Personal Information that you provide, or that we collect, to better understand your needs, requirements, and personal preferences so that we may improve our business, products, services and programs and optimize your experience when you visit our resort locations, or when you are dealing with one of our team members, a call center representative, agents or other authorized third party.

Depending on your marketing preferences, we may also use this information to send you offers, invitations or promotions relating to our resorts, products, services or programs that we believe may be of interest to you. For example, we may evaluate your commercial transactions or browsing habits on our websites or at our resorts which may influence the personalized special offers and promotions that we send to you.

4. WHEN WE SHARE PERSONAL INFORMATION

We may provide your Personal Information to service providers and other third parties in the following circumstances:

• Vendors – We may share your Personal Information with vendors (including affiliates acting in this capacity) who provide services on our behalf such as payment card processors, call center administrators, web-site hosting service providers, app developers, and data management, identity verification (for example, to confirm your eligibility for special offers, such as military discounts), market analyses, marketing, advertising and contest administration vendors, or your Personal Information may be collected by such service providers on our behalf.
• Industry Partners - We may disclose your Personal Information to third-party partners in situations where the disclosure is necessary to complete or provide the service, product (such as, a pass product), or information that you have purchased or requested, or it is intended to optimize the service, product, or information that you have purchased, inquired about, or requested. For example, we may disclose your Personal Information to a third-party tour operator if you purchased a tour from the third-party tour operator using one of our resort’s websites.
• Pass Product Resorts - When you scan certain pass products at Pass Product Resorts, we may disclose your Personal Information to Pass Product Resorts that are outside of the family of Alterra Mountain Company-owned and operated resorts to administer your pass product. When you scan your pass at a Pass Product Resort, you should consult that resort’s privacy policy.
• Other Entities in the Alterra Mountain Company Group of Companies – Personal Information relating to Alterra Mountain Company customers is maintained in a database that is accessible to the Alterra Mountain Company group of companies. We may combine that information with other information we collect about you, but we will always use the information as described in this Policy. This means that Personal Information collected by one of our subsidiaries may be used to send you communications regarding another subsidiary or businesses within our group of companies. The purpose of this sharing is to facilitate customer bookings and reservations across all our resorts and, depending on your marketing preferences, allow our businesses to better understand your preferences and send you information about our resorts, products, services and programs.
• Alterra Mountain Company Community Foundation – we may disclose limited personal information about you, such as your name, email and product purchased, to the Alterra Mountain Company Community Foundation for internal recordkeeping and future donations, as permitted by law.
• Corporate Transactions – We may disclose your Personal Information to another entity, if necessary, in the event of an actual or proposed merger, sale, corporate transaction, re-organization, including as part of insolvency or bankruptcy proceedings, or similar type of transaction, or for the purposes of evaluating and/or performing such transaction. Additionally, if we are entering into a corporate transaction with a third party, we may receive Personal Information in connection with the diligence. If we close a transaction, the third party may transfer Personal Information, which we would use as described in this Policy.
• Special Circumstances – We may consider it necessary or may be required by law to disclose your Personal Information with our attorneys, with others who are legally authorized in certain emergencies where, in our reasonable opinion, the health, safety or well-being of a person is at imminent risk, with law enforcement or other parties to comply with a court order, such as a subpoena, or as otherwise is required to comply with the law.

5. YOUR CONSENT

We collect, use and disclose your Personal Information as outlined in this Policy and with your consent, except where permitted or required otherwise by law. We may be required or permitted under statute or regulation to collect, use or disclose Personal Information without your consent, for example to comply with a court order, to collect a debt owed to us or if there is an imminent threat to an individual’s health, safety, or well-being.

Your consent may be express (for example, oral, written, or electronic) or your consent may be reasonably inferred or implied from something that you do (for example, use of our websites implies consent to the collection, use and disclosure of your Personal Information as described in this Policy). In some instances, an authorized representative may consent on your behalf. In the case of minor children, a parent or legal guardian may consent to our collection, use and disclosure of a minor’s Personal Information in connection with the purchase and administration of a product, such as a pass product or service. For more information about how we obtain parental consent, please see the “Children’s Privacy” section below.

You may withdraw your consent at any time, subject to legal or contractual restraints, by contacting us at the locations listed in the “Your Privacy Options” section of this Policy. However, your withdrawal of consent might affect your experience and our ability to provide products or services to you, or quick and accurate service to you either online or through our service agents.

If you do not consent to the collection, use and disclosure of your Personal Information online as described in this Policy, do not use our websites, Apps or purchase our products or services.

6. HOW TO MANAGE YOUR MARKETING PREFERENCES

If you no longer want us to use your Personal Information for marketing purposes, including to send you promotional communications, you may contact us at the locations listed in the “Your Privacy Options” section of this Policy and ask to be removed from our mailing and/or contact lists. We may ask you for more information where required in order to identify you correctly. If you unsubscribe from marketing communications, please note that we may still need to contact you regarding other matters such as those relating to a purchase transaction or the administration of your pass.

You may also manage your email subscriptions by clicking on “Unsubscribe” at the bottom of any of our emails you receive to stop receiving future promotional email communications from us.

If you wish to stop receiving text messages from us, please reply “STOP” to the text message.

7. CHILDREN'S PRIVACY

Children Under 13: We do not knowingly collect Personal Information from children under the age of thirteen, without obtaining verified, prior consent of the child’s parent or legal guardian. Alterra Mountain Company’s websites and social media pages available online and Apps are not directed to users under the age of thirteen. This Policy, along with any additional parental consent forms provided as part of the provision of the Services to children, describes our privacy practices including the way we collect and process your child’s information. If you believe that your child under the age of thirteen may have provided us with Personal Information online, please contact us at yourprivacy@alterramtnco.com and we will take appropriate action.

We require the consent of the child’s parent or guardian for a child under the age of 13 to open an account or create profile related to an App. Parents and guardians understand the App may collect information about their child, such as photos, chat sessions, location information and the lifts that the child has skied or snowboarded. We collect this information for the limited purpose of providing the App Services. We do not collect or use this information to market products or services to children, and we will not sell this information. You may request deletion of your child’s Personal Information at any time. You have the right to consent to our collection and use of your child’s Personal Information while withholding consent for disclosure of that Personal Information to third parties. You may review, delete or prohibit further collection of your child’s Personal Information at any time. To disable your child’s account, request a copy of the information, or ask a question about the Apps and your child’s data, parents and guardians should contact our Chief Privacy Officer at yourprivacy@alterramtnco.com.

8. HOW LONG WE KEEP YOUR PERSONAL INFORMATION

We will keep your Personal Information on file for a the period of time for which it is necessary to accomplish the purpose for which it was provided, to meet our business requirements, and fulfill our legal obligations and as applicable, the needs of the parties to whom we disclose it, including Pass Product Resorts. We may retain your Personal Information for longer periods for specific purposes to the extent that we are obliged to do so in accordance with applicable laws and regulations, to protect you, other people, and us from fraud, abuse, unauthorized access, as necessary to protect our legal rights, or for certain business requirements.

We will delete your Personal Information when it is no longer necessary for the purpose for which it was collected, or upon your request, subject to exceptions as discussed in this Policy or under applicable law, contract, or regulation.

If you use our App(s), you can delete your account by deleting your account through the App(s). If you delete your account from within the App(s), we will delete the accompanying Personal Information.

9. HOW WE PROTECT YOUR INFORMATION

The security of your Personal Information is important to us. We take various reasonable, organizational, administrative, and technical measures (described below) to protect your Personal Information from unauthorized access, disclosure, alteration, or destruction. However, we cannot and do not guarantee complete security, as it does not exist on the Internet.

If required by law to do so, we will notify you and/or the relevant supervisory authority in the event of a data breach.

Your Personal Information may be maintained on our servers or those of our service providers and accessible by our authorized employees, service providers and representatives. We maintain reasonable and systematic controls, schedules, and practices to retain and destroy Personal Information.

Internal Protections: We protect Personal Information by security safeguards appropriate to the sensitivity of the information. We have policies and practices to protect against loss, theft, unauthorized access, disclosure, copying, use, modification, or destruction. While we make efforts to protect your Personal Information, we are not in a position to guarantee that your Personal Information will always be secure. There may be factors beyond our control which may result in loss or theft, or unauthorized access, use or disclosure of your Personal Information. As a consequence, we disclaim any warranties or representation on non-disclosure of your Personal Information. We also employ a Chief Privacy Officer to be accountable for our compliance with these policies and whom you may contact at the address below with any question, concern or complaint.

External Protections: To protect information disclosed to service providers, we use contractual or other means to provide a similar level of protection so that service providers treat the information confidentially, implement appropriate security measures and only use and disclose the information for the purposes of providing the applicable services.

10. WHERE WE STORE YOUR PERSONAL INFORMATION

Please be aware that your Personal Information may be transferred to, stored and processed by us and our affiliates in Canada and the United States where Alterra Mountain Company, or its affiliates or service providers operate and maintain data. If you are a citizen of a country other than the United States, your Personal Information will be subject to applicable U.S. laws, which may permit foreign government, regulatory or national security authorities to have access to your Personal Information in certain circumstances. By providing us with your Personal Information, you understand and agree that your Personal Information may be transferred to our facilities in the United States, processed by us in the United States, stored in the United States, and transferred to those with whom we share it as described in this Policy.

11. YOUR PRIVACY OPTIONS AND RIGHTS

(a) California Customers

If you are a California resident, you have certain rights with respect to the collection, use, transfer, and processing of your Personal Information, as defined by the California Consumer Privacy Act, Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act and implementing regulations (collectively the “CCPA”). We reserve the right to limit these rights where permitted under applicable law, including where your identity cannot be reasonably verified or to the extent your rights adversely affect the rights and freedoms of others. Please note that terms in this California Privacy Rights section are used in accordance with the definitions provided to them in the CPRA, which may differ from how those terms are used throughout the rest of the Privacy Policy (for example, the word “share”).

What Information Do We Collect?

The below examples are illustrative examples from the CCPA and do not reflect the specific pieces of information we collect.

In the previous 12 months, we have collected the following categories of Personal Information:

Sources From Which Personal Information Is Collected

We collect your Personal Information directly from you, from your interaction with our websites, Apps, and Services, from publicly available sources, and from third parties which collect the personal information directly from you.

Business or Commercial Purposes for Which Personal Information Is Collected

Your Personal Information is used for the following purposes:

• To present our Services, our websites and Apps and their contents in a suitable and effective manner for you and your device;
• To comply with the law;
• To contact you to provide you with information or services that you request from us;
• To advertise opportunities, services, or special events that we think may be of interest to you;
• To provide customer support, troubleshoot issues, manage accounts, and respond to requests, questions, or comments;
• To carry out our obligations and enforce our rights arising from any contracts; and
• To notify you about any additions, upgrades, or changes in our services.

Third Parties with Whom Personal Information Is Disclosed, Shared, or Sold

In the preceding 12 months, we have disclosed the following personal information about consumers for business purposes:

• We disclose Personal Information in categories A (Identifiers), B (Personal), C (Protected Classification), D (Commercial), F (Internet), G (Geolocation), K (Inferences), and L (Sensitive Personal Information) with service providers. We disclose content posted on our social media platforms (e.g., if a consumer “comments” on a story) with other consumers. Such posts may include Personal Information in categories A and B, but the content depends on the individual posts.
• We may disclose all of your information, including your Personal Information, to our subsidiaries and affiliates in connection with providing the Services to you or otherwise in connection with business operations.

In the preceding 12 months, we have shared for cross-contextual behavioral advertising the following the Personal Information in categories A (Identifiers), B (Personal), D (Commercial), F (Internet), G (Geolocation), and K (Inferences).

In the preceding twelve (12) months, we have not sold the Personal Information of any consumer for monetary consideration. However, our use of cookies and other tracking technologies may be considered a sale of Personal Information under the CCPA. Categories of Personal Information that we have sold under the CCPA include categories A (Identifiers), B (Personal), D (Commercial), F (Internet), G (Geolocation), and K (Inferences). Categories of third parties to whom Personal Information is sold under the CCPA include data analytics providers and advertising and marketing providers.

You can opt out of our tracking technologies for analytics and advertising service providers by clicking the “Your Privacy Choices” link in the footer of our websites. Please note that your use of our website will still be tracked by Alterra Mountain Company and its service providers.

We do not have actual knowledge that we sell or share the Personal Information of consumers under sixteen (16) years of age.

Individual Rights

a. Right to Know About Personal Information Collected, Disclosed, Shared, or Sold

You have the right to request that we disclose the Personal Information we collect, use, and disclose about you to third parties. There are two types of Rights to Know requests that you can make:

1. Right to Know (Abbreviated Request): If you make a Right to Know (Abbreviated Request), you will receive the following information about you:
   1. Categories of Personal Information collected, sold, or shared;
   2. Categories of sources from which Personal Information is collected;
   3. Categories of third parties to whom the information is sold, shared or disclosed;
   4. Business or commercial purpose for collecting, sharing, or selling Personal Information;
   5. Categories of Personal Information disclosed for a business purpose and categories of persons to whom it was disclosed for a business purpose.
2. Right to Know (Specific Pieces of Information Request): If you make a Right to Know (Specific Pieces of Information Request), you will receive the following information about you:
   1. Specific pieces of Personal Information collected about you.

This information will be provided to you free of charge, unless we determine that your request is manifestly unfounded or excessive. You may request this information twice in a 12-month period. There are certain exceptions to a consumer’s Right to Know. We will state in our response if an exception applies.

b. Right of Deletion

You have the right to request that we and our service providers delete any Personal Information about your which we have collected from you upon receipt of a verifiable request. This right is subject to certain exceptions. We will state in our response if an exception applies.

c. Right to Opt-Out of the Sale or Sharing of Personal Information

You have the right to opt-out of the sale or sharing of your Personal Information by a business subject to certain laws and regulations. For more information, please visit our “Your Privacy Choices” link in the footer of our websites. You can also opt out by using the Global Privacy Control signal.

Please note that opt-out choices may be stored via cookies. If you clear cookies, if your browser blocks cookies, or if you view the page from a different browser or device, your opt-out choice may no longer be logged or recognized.

d. Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising the privacy rights conferred by California law. We will not discriminate against you because you exercised any of your privacy rights, including, but not limited to, by: denying goods or services to you; charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; providing a different level of quality of goods or services to you; or suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services. We will also not retaliate against any employee, applicant for employment, or independent contractor for exercising their rights under the CCPA.

e. Right of Correction

If we maintain inaccurate Personal Information about you, then you have the right to request that we correct the inaccurate Personal Information upon receipt of a verifiable request. Taking into account the nature of the Personal Information and purposes of processing the Personal Information, you have the right to request that we correct inaccurate Personal Information about you, if applicable.

f. Right to Limit Use and Disclosure of Sensitive Personal Information

If we process Sensitive Personal Information, we will only do so for the purposes specifically authorized by California law and in a manner that is necessary and proportionate for those purposes. As such, we do not perform any processing for which a Right to Limit request is available.

g. Submitting Requests

You can submit your request by visiting our “Your Privacy Choices” link in the footer of our websites or by toll-free phone at 1-866-675-7529 and leave a detailed message your first and last name, date of birth, email address and zip code, along with instructions for the correction. Please provide the information associated with your account or that you use to transact with Alterra Mountain Company. You must provide all required information to submit a request. Only complete requests received by Alterra Mountain Company’s Privacy office that include all required information and that are matched with information in our records will be processed. For your safety and security, we may ask you for more information where required to verify your identity. In the event that we refuse a request, we will provide you a reason as to why.

h. Verifying Requests

To ensure the protection of your Personal Information, we must verify that the individual submitting a request to know, request to delete, or request to correct is the consumer to whom the request relates prior to processing the request. To verify a California consumer’s identity, we may request up to four pieces (including your name, date of birth, email address and/or zip code) of Personal Information about you when you make a request to compare against our records. Please provide the information associated with your account or that you use to transact with Alterra Mountain Company. We may also request that you sign a declaration under the penalty of perjury from the consumer whose Personal Information is the subject of the request.

Making a verifiable consumer request does not require you to create an account with us.

We will only use Personal Information provided in your request to verify your identity and will delete any information you provide after processing the request. We reserve the right to take additional steps as necessary to verify the identity of California consumers where we have reason to believe a request is fraudulent.

i. Authorized Agents

You may choose a person or a business registered with the California Secretary of State that you authorize to act on your behalf to submit your requests (“Authorized Agent”). If you choose to use an Authorized Agent, we require that you provide the Authorized Agent with written permission to allow them to submit your request and that you verify your identity directly with us. Failure to do so may result in Alterra Mountain Company denying your request.

We reserve our right not to respond to requests sent more than once in a calendar year, or requests submitted to an address other than the one set out in this policy.

(b) Colorado, Connecticut, and Virginia Customers

Colorado, Connecticut, Utah and Virginia residents have certain rights with respect to their data. These rights are established through the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), and the Virginia Consumer Data Protection Act (“VCDPA”). The chart below explains these rights and lists the states whose residents may exercise those rights. To exercise any of the following rights listed in the chart below, please click on the “Your Privacy Choices” link in the footer of our websites or call 1-866-675-7529 and follow the instructions in the “Your Privacy Options” section above.

Sensitive Data

Sensitive Data as defined in the CPA, CTDPA, UCPA, and VCDPA includes precise geolocation information, an individual’s racial or ethnic origin, mental or physical health condition or diagnosis, sexual orientation, and citizenship status. We will not collect this information from Connecticut and Virginia residents without first obtaining consent. We will not collect this information from Utah residents without first presenting them with clear notice and an opportunity to opt out of the processing[A8] . We will not collect this information from Colorado residents without first obtaining consent . Please note the collection and processing of Sensitive Data (as defined in certain state statutes) is necessary to administer the Services.

Exercising Your Rights

If you are a Colorado, Connecticut, Utah, or Virginia resident and wish to exercise one of the above rights and it applies to you, please visit our “Your Privacy Choices” link in the footer of our websites. If necessary, we may request additional information reasonably necessary to authenticate you and your request.

In certain circumstances, you may make a request on behalf of another such as if you are an authorized agent or the parent or guardian of a child on behalf of whom you wish to exercise their rights.

We will respond to these consumer requests, if applicable, within 45 days of receipt of the request and without undue delay. If we need to extend this period, we will notify you of the delay and explain the reasonably necessary justifications for our delay.

We will provide responses to your requests free of charge unless certain exclusions apply, depending on the state in which you reside. We may charge a fee in:

• Colorado, Connecticut and Utah, if you make more than one request in a twelve-month period; and
• Connecticut and Virginia, if the request is manifestly unfounded or excessive, or repetitive in nature.

Appealing a Rights Request Decision

If you are a resident of Colorado, Connecticut, or Virginia, and we deny or fail to take action on your request to exercise your applicable consumer privacy rights, you may appeal our decision. To do this, you may email us at yourprivacy@alterramtnco.com. In the email appeal, please specify the right(s) you requested to exercise and the date you made such a request.

We will inform you in writing within 45 days of any action taken or not taken in response to the appeal. We will also provide a written explanation of the reasons for our decisions regarding your request(s).

(c) European Union, Switzerland and United Kingdom Customers

This section of our Privacy Policy is applicable to persons located in the European Union (“EU”), an European Economic Area member state (“EEA”), United Kingdom (“UK”), or Switzerland as well as to persons whose Personal Information is processed in or transferred from the EU, EEA, UK, or Switzerland. You are entitled under the EU General Data Protection Regulation and UK General Data Protection Regulation (collectively, the “GDPR”), to the information in this section of our Privacy Policy.

Your Rights

You are entitled by law to access, correct, amend, or delete Personal Information about you that we hold. A summary listing these rights appears below. Please note that these rights are not absolute and certain exemptions may apply to specific requests that you may submit to us.

To exercise these rights, please visit our “Your Privacy Choices” link in the footer of our websites or by toll-free phone at 1-866-675-7529 and leave a detailed message your first and last name, date of birth, email address and zip code, along with instructions for the correction. Please provide the information associated with your account or that you use to transact with Alterra Mountain Company. You must provide all required information to submit a request. Only complete requests received by Alterra Mountain Company’s Privacy office that include all required information and that are matched with information in our records will be processed. For your safety and security, we may ask you for more information where required to verify your identity. In the event that we refuse a request, we will provide you a reason as to why.

Asking us to access your Personal Information

You have the right to obtain from us confirmation as to whether or not we are processing Personal Information about you, and if so, the right to be provided with the information contained in this Policy. You also have the right to ask us for copies of your Personal Information. When making a request, please provide an accurate description of the Personal Information to which you want access. Where requests are repetitive or manifestly unfounded or excessive, we may charge a reasonable fee based on administrative cost.

Asking us to rectify your Personal Information

You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Asking us to delete your Personal Information

You have the right to ask us to erase your Personal Information if:

• We no longer need it for the purposes for which we collected it;
• We have been using it with no valid legal basis;
• We are obligated to erase it to comply with a legal obligation to which we are subject;
• We need your consent to use the information and you withdraw consent; or
• You object to us processing your Personal Information where our legal basis for doing so is our legitimate interests and there are no overriding legitimate grounds for the processing.

However, this right is not absolute. Even if you make a request for deletion, we may need to retain certain information for legal or administrative purposes, such as record keeping, maintenance of opt-out requirements, defending or making legal claims, or detecting fraudulent activities. We will retain information in accordance with the “How Long We Keep Your Personal Information” section above.

If you do exercise a valid right to have your Personal Information deleted, please keep in mind that deletion by third parties to whom the information has been provided might not be immediate and that the deleted information may persist in backup copies for a reasonable period (but will not be available to others).

Asking us to restrict our use of your Personal Information

You have the right to ask us to place a restriction on our use of your Personal Information if one of the following applies to you:

• You contest the accuracy of the information that we hold about you, while we verify its accuracy;
• We have used your information unlawfully, but you request us to restrict its use instead of erasing it;
• We no longer need the information for the purpose for which we collected it, but you need it to deal with a legal claim; or
• You have objected to us using your information, while we check whether our legitimate grounds override your right to object.

The right to transfer your Personal Information to another service provider

You have the right to ask that we transfer the Personal Information you gave us from one organization to another, or give it to you (i.e., data portability). This applies to Personal Information we are processing to service a contract with you and to Personal Information we are processing based on your consent.

The right to withdraw consent

If we obtain your written consent to collect and process your Personal Information, you can subsequently withdraw such consent as to any further processing of such information.

The right to lodge a complaint with a supervisory authority

If you believe your rights under the GDPR have been violated, the GDPR gives you the right to file a complaint with your supervisory authority. A list of supervisory authorities is available here: EEA and EU Data Protection Authorities (DPAs); Swiss Federal Data Protection and Information Commissioner (FDPIC); UK Information Commissioner’s Office (ICO).

Rights related to automated decision-making

To the extent that we engage in decision-making based solely on automated processing, including profiling, which produces legal effects concerning you or which significantly affects you, you have the right not to be subject to such decision-making.

Right to object to processing

You have the right to object to the processing of your Personal Information that is based on legitimate interests or your consent (rather than when the reason for using it is to perform an obligation due to you under a contract with us). If you make such an objection, we will cease to process the Personal Information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or we can demonstrate the processing is for the establishment, exercise, or defense of legal claims. You can object to the processing of your Personal Information by contacting us using the information in the “Contact Us” section below.

Legal Bases for Processing Your Personal Information

Alterra Mountain Company collects your Personal Information to provide our products and Services to you; otherwise, we may not be able to process the transactions you request. We will only process your Personal Information when we have a lawful basis for doing so. If you are in a country in the EU, EEA, UK, or Switzerland, you are entitled to an explanation of the legal bases we rely on to process your Personal Information. The legal basis for collecting and using the Personal Information described above will depend on the Personal Information concerned and the specific context in which we collect it, which is discussed below.

• Consent. We may process your personal information based on your consent such as when you purchase a service or ask us to send you certain kinds of marketing communications. You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal.
  • Children's Consent. We do not knowingly process data of EU, EEA, UK, or Swiss residents under the age of 16 without reasonably verified parental consent.
• Our Legitimate Interests. We may process your personal information if doing so is necessary for our legitimate interests relating to our business purposes arising from your relationship with us, and your rights as an individual do not override those legitimate interests. For example, our legitimate interests include but are not limited to when we process your personal information to carry out fraud prevention activities and activities to increase network and information security, identify usage trends, determine the effectiveness of promotional campaigns, expand our business activities and improve our services and the content and functionality of our Services. Our legitimate interests also include providing you with the products and services you request, view, engage with, or purchase and communicating with you regarding your account or transactions with us.
• To Perform a Contract. We may process your personal information to administer and fulfill contractual obligations to you. We will also collect and process your personal information as necessary for the performance of a contract to which you are a party.
• To Enable Us to Comply with a Legal Obligation. We may process your personal information to comply with legal obligations to which we are subject. This may include any requirement to produce audited accounts, any legal obligation to share information with law enforcement agencies, public or governmental authorities, and to comply with legal process.
• Necessary for the Exercise or Defense of Legal Claims. If you bring a claim against us or we bring a claim against you, we may process your personal information in relation to that claim.

Depending on the situation, we may be the controller or the processor for personal information collected from residents of the EU, EEA, UK or Switzerland. If you have any questions about or need further information concerning the legal basis on which we collect and use your personal information for any specific processing activity, please contact us using the information in the “Contact Us” section below.

Cross-Border Transfers of Personal Information

Our Services are operated in the United States. Personal information about you provide while in the EU, an EEA member state, the UK, or Switzerland may be transferred to the United States. The United States does not have an adequacy decision or adequacy regulation. The GDPR permits such transfers when necessary for the performance of a contract between you and us, if we obtain your explicit consent to such transfer, or if it is in our legitimate interest to transfer the personal information. The laws in the United States may not be as protective as the GDPR or the laws of other jurisdictions where you may be located. If we transfer personal information from the EU, EEA, UK, or Switzerland, or another country with cross-border transfer obligations, we will provide an appropriate safeguard, such as using standard contractual clauses.

To obtain a copy of the safeguard(s), please contact us using the information provided in the “Contact Us” section below.

12. THIRD PARTY LINKS

We may include links to third party sites on our websites. When we provide links, we do so only as a convenience and we are not responsible for any content of any third-party websites or any links contained within. When you click on those third-party links, you leave our website. This Policy does not apply to third party sites or any information that you provide on those sites. We are not responsible and assume no responsibility for personal information collected, stored, or used by any third party as a result of you visiting third-party websites. We also advise that you carefully read the privacy notice of any third-party websites you choose to visit.

13. SUBJECT TO CHANGE

This Policy is subject to change and may be supplemented or modified at any time. You should check this site regularly to stay up to date about changes to this Policy. If material changes are made, we will notify you by placing a notice on our website https://www.alterramtnco.com/privacy-policy. Your continued use of our Services constitutes acceptance of the most current version of this Policy.

14. CONTACT US

If you have any questions regarding our privacy practices, you may contact us at:

Mail:

Alterra Mountain Company

3501 Wazee Street, Suite 400

Denver, CO 80216

Attention: Chief Privacy Officer

Phone: 1-866-675-7529 (North American Toll-Free)

Email: yourprivacy@alterramtnco.com