United States Privacy Supplement

1. Disclosure.

If you are a resident of certain U.S. states or are otherwise protected by the privacy laws of those jurisdictions, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Vermont, Virginia or Washington, you may have specific privacy rights. The additional disclosures and rights relevant to residents of certain U.S. states that have enacted privacy laws and regulations are set forth below.

This content supplements the GetYourGuide Privacy Policy (the “Privacy Policy”), and includes our Notice at Collection, as required by certain U.S. state laws. It provides you with necessary information about the personal information we collect, how we may use that information, your rights and how to exercise them. This supplement does not apply to information that is publicly available.

Some information is collected automatically when you interact with our website. You can find more details in Section III. 2 and 4 of the Privacy Policy.

More details on the personal information we collect, how we collect it and why we collect it can be found below:

• When you create an account on our website (see Section III. 2 of the Privacy Policy);

• When you decide to leave reviews (see Section III. 2.3 of the Privacy Policy);

• Where you need customer support (see Section III. 3 of the Privacy Policy);

• By our service providers (see Section III. 4 of the Privacy Policy);

• When you subscribe to our newsletter (see Section III. 5 of the Privacy Policy);

• When you book activities on our Platform (see Section III. 6 of the Privacy Policy);

• For fraud prevention purposes (see Section III. 8 of the Privacy Policy);

• To protect us against bots (see Section III. 4.3 of the Privacy Policy);

• By using cookies (see Section III. 9 of the Privacy Policy);

• For marketing purposes (see Section III. 11 of the Privacy Policy);

• Some of our trusted partners may collect some of your personal information as described in Section III. 12 of the Privacy Policy;

• When you interact with us on social media (see Section III. 13 of the Privacy Policy);

• For customer support purposes (see Section III. 14 of the Privacy Policy);

• For product development purpose;

• For personalisation of website content purposes (see Section III. 15 of the Privacy Policy); and

• For data enrichment services provided by Revenue Roll Inc., based in the U.S. (“Revenue Roll”), we may share certain information you provide when using our Platform, including your IP address. Revenue Roll uses this information only to create an online identification code, which we may store in our first-party cookie. This code helps us to send you interest-based advertising. The identification code created by Revenue Roll does not contain any of your directly identifiable personal data and will not be used by Revenue Roll to re-identify you. Detailed information on Revenue Roll’s data processing activities can be found in Revenue Roll’s privacy policy at Revenue Roll Privacy Policy. You have the right to opt-out of the processing of your data at any time via our “Cookies and Marketing Preferences” or via the “Privacy Preferences” section in the App menu and the processing by Revenue Roll via Revenue Roll Opt-Out.

If it is necessary to provide a service you are requesting, we will collect, process, or you may supply us with personal information (including sensitive information) to operate our business. For example, in a very limited number of cases, some tour operators who sell you tickets and activities via the Platform may require you to provide your passport number or other valid identification number during the checkout process, as well as any additional special requirements (such as dietary restrictions) to provide the activity, if applicable.

Depending on your cookie preferences, we may “share” categories of personal information, as defined under California law, to or with third parties and for the business and commercial purposes described in the Privacy Policy. According to the California Privacy Rights Act (“CPRA”), “sharing” means the disclosure of your personal information to a third party or cross-context behavioral advertising, whether or not for monetary or other valuable consideration. See Section 6 below for more information about the context in which we share your personal information and how you can request to opt-out.

We do not “sell” personal information as defined under CPRA, the California Consumer Privacy Act (“CCPA”) or Virginia Consumer Data Protection Act (“CDPA”).

2. Access to Specific Information Rights.

You have the right to request that we disclose certain information to you about how we collected and used your personal information. Once we have received a valid request from you, we will disclose to you, to the extent permitted by law:

• The categories of personal information we collected about you;

• The categories of sources for your personal information we collected about you;

• The business or commercial purpose for collecting, or sharing your personal information, if applicable;

• The categories of third parties with whom we share your personal information; and

• If we disclosed your personal information for a business purpose, the personal information categories that each category of recipient obtained.

3. Deletion Right.

Residents of certain states have the right to request that we delete the personal information that we have collected about them, subject to certain exceptions described in Section III. 20.3 of the Privacy Policy and as set forth in applicable law(s).

4. Correction Right & Right to Limit.

Residents of certain states have the right to request that we correct inaccurate personal information that we maintain about them as explained in Section III. 20.2 of the Privacy Policy, subject to certain exceptions set forth in applicable law(s). Residents of certain states have the right to request that we limit the use of sensitive personal information (for example, financial account information, your precise geolocation data, etc.) for limited purposes, such as providing you with the services you requested.

5. No Discrimination.

We will not discriminate against you for exercising any of your privacy rights.

6. Do Not Sell or Share My Personal Information.

We provide clear and accessible methods for you to opt out of the sharing of your personal information, including for targeted advertising. These options are available through the 'Cookies and Marketing Preferences' on our website or app settings. By “sharing”, we refer to the processing of personal data as described in Section III. 9 Cookies and Section III. 11 Marketing and remarketing services of the Privacy Policy. We and other companies place tracking technologies on our websites to allow us to collect and share, with selected partners, information about your behavior on our website in order to display interest-based advertising for our products on other pages or to improve our advertising accuracy and relevance. If you decide to opt out of this data sharing, you will need to click on the Cookies and Marketing Preferences link or on the footer of our website and change your preferences by opting out of optional technologies.

7. Opt Out of Targeted Advertising.

Certain data collection and processing on our website for purposes of interest-based advertising may be deemed “targeted advertising,” or a “sharing” of personal information by some state laws, like under the CDPA. Depending on your cookie preferences and to the extent permitted by law, we may disclose your personal information to our trusted partners for targeted advertising. You may request that we stop using and sharing your personal information for such targeted advertising by clicking on the Cookies and Marketing Preferences link on the footer of our website and change your preferences by opting out of optional technologies.

8. Do not share or disclose my sensitive personal information.

We will not disclose your sensitive personal information, such as financial details or health data, without explicit consent, except as necessary to fulfill service requests or as required by law. In addition, you have the right to limit how your sensitive personal information is disclosed or shared with third parties. To exercise your rights described in the Privacy Policy, please contact us at the following link: https://www.getyourguide.com/contact/.

9. Children.

Our services are not intended for children under the age of 18. We handle information about children solely with the approval of their parents or legal guardians, or when the parents or legal guardians provide the information to us directly. If we learn that we have inadvertently collected personal information from a minor under the age of 18 without the required legal consent of a parent or guardian, we will promptly delete such information.

10. Exercising Your Rights.

You can exercise any of your rights as described in the Privacy Policy to the extent permitted by applicable law(s).

Please provide enough information and describe your request with sufficient detail to enable us to properly respond to your request. We will take reasonable steps to verify your identity before we can respond to your request.

If you reside in California, you or a person registered with the California Secretary of State that you authorize to act on your behalf, may file a request.

If you reside in Connecticut or Colorado, you have the option to designate an authorized agent to file a request on your behalf.

You may also make a verifiable consumer request on behalf of your minor child.

Last updated: February 2025