Updated & Effective: August 7, 2023

This Privacy Policy (this “Policy”) presents our privacy practices, so you understand when and how personal information is collected, used, disclosed, and protected.

This Policy applies to information collected by Festival Fun Parks, LLC, a Delaware limited liability company doing business as Palace Entertainment, and the parks and properties owned or operated or managed by Palace Entertainment (such parks and properties are hereinafter each a “Park and collectively referred to in this Policy as “Palace,” “we,” “us” and “our”) and by Palace’s parent company, Parques Reunidos Servicios Centrales, S.A., including through our websites, mobile applications, services, at our Parks, retail locations, and other online or offline offerings operated by or on behalf of Palace (the “Services”).

Please review this policy to understand how we handle your information. If you do not agree to this Privacy Policy, please do not use the Services.

1.     INFORMATION WE COLLECT

The information we collect about you depends on the Services you use, how you use them, and the information you provide to us. We collect information in three main ways: (1) information you choose to provide to us through the Services; (2) information we collect automatically through technology when you use the Services; and (3) information we collect from other sources.

Please note, we may de-identify information we collect so the information cannot reasonably identify you or your device, or we may collect information that is already in de-identified form. Our use and disclosure of de-identified information is not subject to any restrictions under this Privacy Policy, and we may use and disclose it to others for any purpose, without limitation.

1.1  Information you provide us

When you use our Services, you may choose to provide certain information to us. For example, we collect information directly from you when you purchase a ticket to a Park, sign up for our newsletters, make a purchase at a Park, contact us with comments or questions, participate in surveys, or otherwise communicate and interact with us. Depending on the Services or Park, this information may include:

• Contact information, such as name, email address, address, and phone number;
• Certain demographic information or profile information, such as gender and date of birth and photo associated with certain tickets, such as age-based tickets or season passes;
• Identity Verification & Other Park Entry information (which may include health information), such as driver’s license or government issued identification or health information (e.g., as permitted by law, symptom information or vaccine status) or biometric information (e.g., fingerprint associated with a season pass) in order to access one of our Parks;
• Information related to your visit to our Parks, such as entry/exit times, security video footage, photos taken in-Park, related travel reservations, and meal preferences;
• Payment card information and purchase history (both online and at our Parks);
• Customer service interaction information, such as messages submitted to us through online forms or email, and summaries or voice recordings of interactions with our customer service personnel;
• Information you provide in connection with surveys and sweepstakes, such as your interests, preferences, demographic data (e.g., gender), photos and videos, and information needed for you to participate and for us to fulfill your prize or participation incentives (if any);
• User generated content that you may be able to post or submit on certain parts of the Services or when you integrate with other services through which we may receive content.  Such content may include reviews, ratings, photos or other content, that, depending on where you post them, may be publicly viewable.

1.2  Automatically-Collected Information

We automatically receive certain types of information when you interact with our Services online. For example, when you visit one of our websites, our systems automatically collect your IP address, the type of browser you use, device IDs and characteristics, platform type, advertising identifiers, operating system, and the state or country from which you accessed the Services. Information may be automatically collected through the use of “cookies” which are discussed further below. We may also collect and analyze usage information about your browsing behavior, such as IP address information, entry and exit points for a website, page views, the date/time you visited one of our websites or opened one of our emails, impressions, and similar information.  

We use a variety of third-party technologies, including cookies and similar tools, to assist in collecting this information:

• Cookies are small text files that a website saves to your computer or mobile device when you visit a website. They support certain essential features of our websites, and also enable a website to remember your actions and preferences over a period of time. Most browsers automatically accept cookies as the default setting. You can modify the setting to reject cookies or to prompt you before accepting a cookie from a website you visit by editing browser options. If you decide not to accept our cookies, you will still be able to access our websites, but you may not be able to use some of the websites’ features or services and you may have a less satisfactory experience.
• Web beacons are small, transparent graphic images that are delivered through a web browser or HTML e-mail. Web beacons may include GIF or PNG images, pixels, javascript, or other tags, which are used to track user activity on a particular web page, or the viewing of a particular e-mail. Web beacons may send this information directly to us, or to third parties we have approved to receive the information.

1.3  Information Collected from Other Sources

We may receive information about you from other sources, such as others who invite you to the Services or from whom you buy your tickets or make travel arrangements, travel partners, marketers, social network services, and other parties. If you interact with our ads or profiles on a third-party website, application, or social media platform (such as Facebook, Instagram or X), we may receive information about you from that third-party site, application, or platform, depending on the third-party’s data practices and your privacy settings on that platform. Palace is not responsible for the content or practices of third-party websites, applications, or platforms. We urge you to read the privacy and security policies of any third-party websites, applications, or social media platforms you choose to use.

2.     USE OF YOUR INFORMATION

Palace may use the information we collect in the following ways:

• To provide the Services, such as by processing your purchase, issuing tickets and passes, and administering our websites.
• To communicate with you about our Services, including by sending information about Services you have purchased, communicating changes to our terms, conditions and policies, providing customer service assistance, and responding to your inquiries and requests for information.
• For marketing and advertising purposes, including sending announcements and updates about our Services, providing you with information about promotions from us and our partners and information about upcoming events, and providing advertisements about our Services on other site and services (as described in more detail below).
• To personalize your experience and customize the Services, such as delivering relevant content and recommending features through our Services.
• To improve our Services, including bug detection and error reporting, to understand how users interact with our Services and advertisements, perform research and analytics, and to test and create new features and services.
• For our business operations, including managing your reservations, compliance with legal and regulatory requirements, contractual obligations, and other legal process and procedure, and auditing.
• To secure our Services, including through detecting and preventing security incidents, and protecting against malicious, deceptive, fraudulent, or illegal activity, and to protect the safety of our employees, customers, and the public;
• To recognize you across our various Services and your personal devices and browsers to provide you with a more seamless experience across our Services and your devices and browsers.
•  Other purposes, where we have provided you notice and have obtained your consent to process your information in accordance with applicable legal requirements.

3.     DISCLOSURE AND SHARING OF INFORMATION

We may disclose and share your information in the following ways:

• Affiliated entities. We may share information with our parent company, Parques Reunidos Servicios Centrales, S.A., and any of our affiliate companies to deliver the Services, operate our business, and improve our Services and your customer experience.
• Service providers. We may disclose information to third-party vendors that we engage to assist us in providing our Services and operating our business. These services include, but are not limited to, customer service, payment processing, shipping, marketing, product design and development, analytics, data storage, security, fraud prevention, and legal services. These service providers are permitted to access and use your information for purposes of performing services for us or to comply with applicable legal requirements.
• Third Party Businesses or to Provide Co-Branded or Jointly Offered Products and Services. Some of our Services may from time-to-time work with another brand or other third party, to offer services, products, events and promotions on a co-branded, sponsored, or cross-promotional basis. The information you provide in connection with such Services may be collected directly by, or shared with the third party. These third parties will use your information in accordance with their own privacy policy.
• Legal and safety purposes. We may disclose the information we collect about you if required to do so by law or in a good faith belief that such disclosure is reasonably necessary to: (a) comply with legal process (for example, a subpoena or court order); (b) defend or enforce our legal rights, such as by enforcing Terms of Service, this Privacy Policy, or other contracts with you, including investigation of potential violations; (c) protect or defend the rights, property, or personal health and safety of Palace staff, partners, users, customers, service providers, or the general public.
• Business transfers. We may disclose your information in furtherance of any merger or acquisition, creation of a separate business, or the sale or pledge of our assets as well as in the event of an insolvency, bankruptcy or receivership in which information may be transferred as a business asset.
• With Your Consent:  If you have consented to our sharing of your information or direct us to share your information, we will also share your information consistent with your consent or direction.

Please note that we may disclose aggregate and deidentified information for any purpose in our sole discretion.

4.     INFORMATION RETENTION

We retain information for the period that we find necessary to fulfill the purposes outlined in this Policy, unless we believe a longer retention period is required or permitted by law.

5.     SECURITY

We use a variety of technical, physical, and organizational security measures designed to protect against unauthorized access, alteration, disclosure, or destruction of information. However, no security measures offer complete protection. As such, we cannot guarantee the security of your information.

6.     ONLINE ADVERTISING

We may use third-party advertising technologies that allow for the delivery of relevant content and advertising on our websites and other websites you visit. The ads may be based on various factors such as the content of the page you are visiting, information you have shared such as your age and gender, your searches, demographic data, and other information we or other sites have collected from you. These ads may be based on your current activity or your activity over time and across other websites and online services and may be tailored to your interests.

Third parties may also place cookies or other tracking technologies on your computer, mobile phone, or other device to collect information about you as discussed above. We also allow other third parties (e.g., ad networks and ad servers) to serve tailored ads to you on our websites and other websites and to access their own cookies or other tracking technologies on your computer, mobile phone, or other device you use to access the websites. We sometimes provide site visitor information (such as email addresses) to service providers, who may “match” this information in de-identified form to cookies (or mobile ad identifiers) and other proprietary IDs, in order to provide you with more relevant ads when you visit other websites.

We neither have access to, nor does this Policy govern, the use of cookies or other tracking technologies that may be placed on your device you use to access the Websites by such non-affiliated third parties. If you are interested in more information about tailored browser advertising and how you can generally control cookies from being put on your computer to deliver tailored advertising, you may visit the Network Advertising Initiative’s Consumer Opt Out, the Digital Advertising Alliance’s Consumer Opt-Out, or Your Online Choices to opt-out of receiving tailored advertising from companies that participate in those programs. To opt out of Google Analytics for display advertising or customize Google display network ads, visit the Google Ads Settings page. We do not control these opt-out links or whether any particular company chooses to participate in these opt-out programs. We are not responsible for any choices you make using these mechanisms or the continued availability or accuracy of these mechanisms.

7.     CHILDREN’S PRIVACY

We do not knowingly collect information from children under 13. If we become aware that we have collected data without legally valid parental consent from children under an age where such consent is required, we will take reasonable steps to delete it as soon as possible.

8.     CONTROLS AND CHOICES

We provide you the ability to exercise certain controls and choices regarding our collection, use and sharing of your information. Your legal rights to exercise such controls and choices vary based on the laws of your jurisdiction. These controls and choices include:

8.1  Marketing email

You can opt out of receiving marketing messages from Palace by clicking the “unsubscribe” link at the bottom of any marketing email sent by us, or by visiting the following link and entering your email address: https://palace.secure.force.com/optout. Please note, opting out or unsubscribing will not prevent you from receiving communications about your transactions, service updates, or other important notices such as changes to our terms and policies, which are not marketing in nature.

8.2  SMS alerts

To opt out of SMS alerts from Palace, text STOP to 30912.

8.3  Requests regarding your personal information

Depending on your jurisdiction of residence, you may have certain rights with respect to your personal information, including the right to correct, amend or delete your personal information. If you would like to exercise your rights under applicable law, please email us at PrivacyPolicy@palaceentertainment.com with “Request for Privacy Information” in the subject line and in the body of your message. We may request additional information to verify your identity and will respond to your request as required by applicable law in your jurisdiction. Please allow us a reasonable time to respond to your inquiries and requests.

8.4  Do Not Track

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. We are committed to providing you with meaningful choices about the information collected on our website for third-party purposes, which is why we describe a variety of opt-out mechanisms above. However, we do not currently recognize or respond to browser-initiated DNT signals. Learn more about Do Not Track.

9.     Jurisdiction-Specific Disclosures

9.1  California

If you are a California resident, California law requires us to provide you with some additional information regarding how we collect, use, and share your “personal information” (as defined in the California Consumer Privacy Act (“CCPA”)).

9.1.1       Categories of personal information we collect and how we use them. 

We collect and disclose the following categories of personal information for the business purposes described in our main Privacy Policy, above: identifiers (such as name, address, email address); commercial information (such as purchase information); financial data (when you make a purchase through the Services); internet or other network or device activity (such as browsing history or website usage); audio or visual information (such as security footage collected in our Parks or call recordings); gender; date of birth, physical characteristics or description; general geolocation information (e.g., your city and state based on IP address, contact information including your physical address, or precise location, with your consent); and other categories of information, with your consent.

9.1.2       Categories of parties to which information is disclosed or sold. 

We disclose the above categories of personal information to our parent and affiliate companies, service providers, entities for legal purposes, and entities in connection with business transactions.

Depending on what Services you use, we may share (and over the past 12 months may have shared) the following categories of information for such advertising with advertising networks and advertisers and other third parties including: identification and demographics; device information and identifiers, such as IP address, and unique advertising identifiers and cookies; connection and usage information, such as browsing history or app usage; geolocation information, such as city; and inference data.

9.1.3       California Consumer Privacy Act Rights.

The CCPA provides certain rights to California residents in connection with personal information that is collected and sold, as defined under the statute. For instance, if you are a California resident, you may request that we:

• Provide you the categories of personal information we have collected or disclosed about you in the last twelve months; the categories of sources of such information; the business or commercial purpose for collecting or selling your personal information; and the categories of third parties with whom we shared personal information.
• Provide access to and/or a copy of specific pieces of personal information we hold about you.
• Delete certain personal information we have about you.

You also have the right to not be discriminated against (as provided for in applicable law) for exercising certain of your rights. These rights are subject to certain exceptions or qualifications, including information that we need to maintain to complete a transaction with you or for legal purposes.

You can exercise these rights by:

·       Emailing us at PrivacyPolicy@palaceentertainment.com; 

Note that you will be required to verify your identity before we fulfill your request. To do so, we will request certain information that you have provided to us. You can also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney, signed by you, for the agent to act on your behalf. You will still need to verify your identity directly with us.

9.1.4       Do Not Sell

California residents may opt out of the “sale” of their personal information.  Under the CCPA, “sale” is broadly defined to mean the sharing of personal information with third parties who are not acting as our service providers or who are otherwise not restricted from using data only on our behalf or pursuant to an applicable CCPA exception.

In some circumstances, we may share certain of your information with third parties for advertising purposes, such as by allowing third parties to place cookies and similar technologies on your browser, which may be considered a “sale” under the CCPA. If you would like to opt out of our use of your information for such purposes that are considered a “sale” under California law, you may do so as outlined on the following page: Do Not Sell My Personal Information. Please note that we do not knowingly sell the personal information of minors under 16 years of age without legally-required affirmative authorization.

The CCPA further provides you with the right to not be discriminated against (as provided for in applicable law) for exercising your access, deletion or sale opt out rights.

9.1.5       California Shine the Light Disclosure.

The California “Shine the Light” law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. We do not share your personal information with third parties for their own direct marketing purposes.

9.2  Australia

For users of the Services in Australia:

9.2.1       Disclosure to overseas recipients 

Notwithstanding clause 3 above, we may disclose your personal information to overseas recipients, including, but not limited to, the following countries: United States, Spain. Your personal information may be processed in an overseas country from Australia.  You agree to the transfer, storage and processing of your personal information in a country other than Australia, and you agree that we will not be liable for the acts or practices of those overseas parties in how they handle your personal information. 

If we do not collect your information, then this may limit our ability to adequately provide you with the Services for all the purposes set out in this policy.

9.2.1       Access, corrections and complaints 

Individuals in Australia may access their personal information and seek correction of such information held by us. You also have a right to complain about any breach of the Australian Privacy Principles. If you would like to access or correct the personal information we hold about you, or if you wish to make a complaint about our privacy practices, please contact us at: PrivacyPolicy@palaceentertainment.com.

10.   UPDATING THIS POLICY

We may revise and update this Policy from time to time, such as if our practices, technology, or Services change, or if there is a change in applicable law. Updates to this Policy will be posted on this webpage, and we will notify you of material changes to the policy where required by applicable law.

11.  CONTACT

If you have questions, concerns, or comments about our Policy, you may contact us at:

PrivacyPolicy@palaceentertainment.com.