Who we are
Our website address is: https://columbiacountytourism.org.
When visitors send us a message or information request using the contact form, we collect the data shown in the form, and also the visitor’s IP address and browser user agent string to help spam detection.
The contact form submission data, including IP address, user agent, name, email address, and message, are submitted to the Akismet service for the sole purpose of spam checking. The submission data is also stored in the database of the site and is emailed directly to the owner of the website. This email will include the submitter’s IP address, timestamp, name, email address, and message.
If you visit this website on a mobile device, you will see a banner inviting you to download our mobile app. When you dismiss this banner, we store a session cookie to prevent the banner from appearing again. This cookie is deleted when you close the browser.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. We also set a cookie (jpp_math_pass) for 1 day to remember if/when a user has successfully completed a math captcha to prove that they’re a real human.
If you have an account on our website, when you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
This feature sends page view events (and potentially video play events) over to Google Analytics for consumption. We enable the IP Anonymization feature of Google Analytics to prevent your full IP address from being stored.
Event, Venue, and Organizer Information
If you submit Event, Venue, or Organizer information, such information is retained in the local database:
- Venue information: name, address, city, country, state, postal code, phone, website, geographical coordinates (latitude and longitude)
- Organizer information: name, phone, website, email
- Event information: website, cost, description, date, time, image
Please note that to submit events using the event submission form, a user must hold an account on this website.
In order to check login activity and potentially block fraudulent attempts, the following information is used: attempting user’s IP address, attempting user’s email address/username (i.e. according to the value they were attempting to use during the login process), and all IP-related HTTP headers attached to the attempting user.
How we protect your data
Website administrator accounts are protected with strong passwords and other anti-hacking measures. Non-administrator users do not have access to personal data.
What data breach procedures we have in place
We monitor this website for unauthorized access and we will make best efforts to respond to any breach within 24 hours.
How long we retain your data
If you have an account on our website, we store the personal information found in your user profile. This account information is retained indefinitely in the local database. Website administrators can see and edit that information.
When visitors send us a message or information request using the contact form, the submission and its metadata are retained indefinitely. Website administrators can see and edit that information.
Google Analytics data are retained for 14 months.
What rights you have over your data
If you have an account or have submitted the contact form on this website, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.