- What personally identifiable information is collected from or about you by DHISCO, how it is used and with whom it may be shared.
- What choices are available to you regarding the use of your personally identifiable information.
- The security procedures in place to protect against the misuse of your personally identifiable information.
Data Protection/EU–U.S. Privacy Shield Framework
This Website and Direct Contact
We have access to and collect the personally identifiable information that you voluntarily give us by entering it on this website, by e-mail or by other direct contact from you. We are the sole owners of the information that we collect on this website or from your direct contact with us.
We will use your personally identifiable information that we collect on this website or from your direct contact with us to respond to you regarding the reason you contacted us. We will not sell or lease this information to anyone. We will not share this information with any third party outside of our organization, except as necessary to fulfill a request that you make.
In order to access the customer portal to which this website links, you must either enter your account information on the portal landing page or register for an account if you are a first-time user. During the registration process you provide us with certain personally identifiable information (such as name and email address). We use this information to identify you and respond to you about the reason you have accessed the customer portal.
DHISCO obtains your personally identifiable information when we transmit an electronic lodging reservation that is made by you or on your behalf through the system of a third party travel agent or online reservation distributor. The information obtained and transmitted by DHISCO is the information you provide to the third party to request the lodging reservation. We use your personally identifiable information that we transmit solely to facilitate the provision of services requested by you from the lodging provider to which your reservation request is directed. DHISCO will not sell or lease this personally identifiable information to any third party. We have no control over the use of your personally identifiable information by the third party through which your lodging reservation is transmitted to us, or by the lodging establishment to which your lodging reservation is directed. To fulfill your requests, your personally identifiable information will be transmitted from a third party travel agent or online reservation distributor, which may be outside the U.S., to the DHISCO data centers located in the U.S. The lodging reservation will then be transmitted from the DHISCO data centers in the U.S. to the lodging establishment, which may be outside the U.S., to facilitate your lodging reservation.
In its performance of these services, DHISCO maintains relationships with third party travel agents, online reservation distributors, and lodging companies requiring DHISCO’s maintenance of personally identifiable information regarding individuals associated with these organizations. Likewise, DHISCO maintains relationships with suppliers who provide products or services to, or on behalf of, DHISCO which may require DHISCO to maintain personally identifiable information regarding individuals associated with these organizations.
Additional Disclosure to Third Parties
In the course of performing our services we may transfer your personally identifiable information to one or more third parties acting on our behalf as our agent. DHISCO will remain responsible under the Privacy Shield Principles if a third party acting as our agent processes personally identifiable information in a manner that is inconsistent with the Privacy Shield Principles unless we can prove we are not responsible for the specific event in question.
DHISCO will disclose personally identifiable information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Human Resources Information
DHISCO collects certain personally identifiable information about the organization’s employees, which DHISCO uses solely in the context of the employment relationship. Information about DHISCO’s employees may also be shared with DHISCO entities or third party service providers (such as DHISCO’s benefits providers) solely in the context of the employment relationship. To facilitate this processing, employee data may be transmitted to countries outside the region where the employee resides. For example, data for an employee in the EU may be processed in the U.S., which would require transmittal of the data outside the employee’s country and region of residence.
With respect to EU employee data, DHISCO commits to resolve complaints about its collection or use of its EU employees’ personal information in accordance with local regulations. EU employees should first contact the human resources department if they have questions or complaints about DHISCO’s application of the Privacy Shield Principles to their personally identifiable information. If DHISCO does not provide timely acknowledgment or resolution of a question or complaint, an employee may contact the Privacy Shield dispute resolution panel established by the EU data protection authorities. DHISCO commits to cooperate with the dispute resolution panel and to comply with the advice given by the panel with regard to human resources data transferred to DHISCO from the EU in the context of the employment relationship.
Your Access to and Control over Information
- Learn what personally identifiable information we have about you, if any.
- Request that we change/correct any personally identifiable information we have about you.
- Request that we delete any personally identifiable information we have about you.
- Express any concern you have about our use of your personally identifiable information.
Please note that any request that has the effect of restricting our ability to obtain and transmit your personally identifiable information will prevent us from facilitating the provision of services requested by you from any third party.
When your personally identifiable information is stored on our information technology infrastructure, it is protected by a number of security practices and protocols involving system architecture, password protection, intrusion monitoring and detection and malicious software monitoring and detection. Security practices also include policies restricting access to personally identifiable information to individuals with a need to know, and the physical segregation of our information technology infrastructure in a secure environment.
Dispute and Liability
DHISCO commits to resolve complaints about our collection or use of your personal information under the Privacy Shield Principles.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
For more information on the circumstances under which binding arbitration can be invoked for complaints regarding Privacy Shield compliance, please visit https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
Three Lincoln Center
5430 LBJ Freeway
Dallas, TX 75240