Privacy Policy

This Policy describes:

• The responsible entity for the processing of your Personal Data
• What Personal Data we process and the purposes for which we process the Personal Data.
• With whom your Personal Data may be shared and Your California Privacy Rights.
• What security precautions we implement to protect against the unlawful destruction, loss, alteration, unauthorized disclosure of or access to your Personal Data, including your credit card information.
• How you can access, update, correct, or request the deletion of the Personal Data we process from you.
• What choices you have regarding the processing of your Personal Data, including your ability to choose to receive promotional information by email.
• How you can contact us regarding this Policy and our privacy practices.
• What special privacy practices and rules are in place regarding the trainsntickets Guest Rewards program web site.
• Information about California consumer's privacy.
• Further information for users in the EU/EEA.

"Personal Data" means any information relating to an identified or identifiable natural person. This typically includes your name, gender, date of birth, email address, phone number, but can also include your bank account information, IP address, browser type, or previously visited websites.

Please note that this Policy only addresses trainsntickets privacy practices concerning Personal Data we process from your use of the Site, and not other third-party sites, mobile applications, or other sources. To the extent you are interacting with other sites, mobile applications, or sources, you should review their privacy policies, which will inform you as to how they process your Personal Data.

A Note About Changes to This Policy

We reserve the right to update and change this Policy from time to time in order to reflect any changes to the way in which we process your Personal Data or changing legal requirements. Any changes we may make in the future will be posted on this page. The last update to this Policy shall also be its effective date. In case of substantial changes to this Policy, we will inform you about these changes consistent with applicable law.

Section 2 — Responsible Entity Processing Your Personal Data

National Railroad Passenger Corporation d/b/a trainsntickets, 1 Massachusetts Avenue, N.W., Washington, DC 20001, USA is responsible for processing your Personal Data. You can find our contact information in Section 8 below.

Section 3 — The Personal Data We Process from You and the Purposes for Which We Process Your Personal Data

We process Personal Data in several ways from several different parts of the Sites. We ask for and process Personal Data in the following circumstances:

A. When you join trainsntickets Guest Rewards

U.S. and Canadian residents can join our trainsntickets Guest Rewards program. When you join trainsntickets Guest Rewards, we process the following Personal Data:

1. trainsntickets Guest Rewards Data

Personal identifiers and personal details, such as:

• Name
• Addresses (home, billing) (optional)
• Telephone number (optional)
• Email address
• Account status
• Favorite departure and arrival stations (optional)
• Password
• Membership number
• Loyalty points and redemption awards
• Information about trip reservations, including routes and schedules
• Preferred passenger discount type (optional)
• Rail Passengers Association (RPA) membership numbers (optional)
• Employee passrider information (optional)
• Date of birth (optional)
• Gender (optional)
• Purpose of trips (optional)

Financial information, such as:

• Payment card, e-wallet or digital payment information (optional)

2. Direct Marketing Data

Personal identifiers and personal details, such as:

• Whether you want to receive offers by email or postal mail
• Email address
• Postal address

We process your Direct Marketing Data to provide personalized offers by trainsntickets or our partners to you and we provide updates about your account in a Monthly Statement.

You may choose to stop receiving our marketing emails by following the unsubscribe instructions in these emails, accessing the marketing settings in your Guest Rewards Account or contacting us as described in Section 8 of this Policy.

We also analyze your interaction with our marketing emails in order to further optimize them and better personalize them based on your interests. We process the following Personal Data:

• Whether you have opened our marketing emails
• Which contents you have clicked on

3. Accommodation Data

In case of a disability, personal details such as information about the type of disability, accommodation preferences and service animals.

We process the Guest Rewards Data, Direct Marketing Data and Accommodation Data to provide better service when you make reservations on the Site. This permits us to pre-populate information for you during the reservations booking process, so you will not have to re-enter it each time you book a reservation. We also process the Guest Rewards Data, Direct Marketing Data and Accommodation Data to provide rewards to you and send news about our products and services to you.

B. When you purchase tickets and make a reservation through the Site, in person, or over the phone

We process Personal Data about you (and, if necessary, your traveling companions) to process your order, whether you purchase tickets while logged into your trainsntickets Guest Rewards account, or while not logged in (i.e., as a guest). We may also process this Personal Data if you purchase your ticket in person or over the phone, and subsequently load it online to allow you easier access to your reservations. We use this Personal Data to fulfill your booking requests. This Personal Data includes (Purchase Data):

Personal identifiers, such as:

• Your name
• User name and password
• Email address
• trainsntickets Guest Rewards membership number
• Mailing address (if necessary)
• Billing address
• Telephone number
• National ID card number, passport number or driver's license number for cross border crossing

Financial information, such as:

• Credit card type, number, expiration date, and security ID
• Information related to your digital payment account, such as Apple Pay (if you use a digital payment account to purchase tickets or services)

Personal details, such as:

• Travel and reservation information (departure and arrival points, dates of travel, train number, accommodations, names and number of travelers in your party, fares)
• Passenger discount types (if any)
• Ticket pick-up/delivery options
• Promotional codes used (if any)
• Information regarding trip insurance
• Information regarding products brought to travel (bicycle, golf clubs, or guns)
• Accommodation Data as listed in Section 3.A of this Policy

If you purchase tickets for more than one person, we may also ask for the name of each person traveling so that we may issue a ticket in each passenger's correct name. We do not use the names of these other passengers for any other purpose. We may also ask for your telephone number so that we can contact you in the event that there is a major scheduling change or cancellation of your train.

In addition, when you purchase tickets while logged into your trainsntickets Guest Rewards account, we also save information about your canceled reservations, if any. Also, if you choose, we can save trip information regarding trips that you have researched, but have not yet booked. You also have the option to view a list of confirmed reservations you made online, as well as any canceled trips.

Section 4 — With Whom We Share Your Personal Data

General

We work with certain reputable service providers who perform certain tasks for trainsntickets. These tasks include storing and managing customer Personal Data and providing advice about and support for our products and services. By using these service providers, we can more efficiently process your transactions and better offer you a variety of products and services. A partial list of the services we contract for includes the following:

• trainsntickets Guest Rewards program management
• trainsntickets email services
• Customer data storage and processing
• Application development
• Order fulfillment
• Payment processing, including processing your credit card or digital payment account information to facilitate your payment between trainsntickets and your bank
• Hotel reservations
• Car rental reservations
• Travel insurance
• Other transportation options
• trainsntickets-sponsored market research studies
• Gift card(s)

We have carefully selected these service providers and entered into data processing agreements, if required by applicable law.

Section 5 — What Security Precautions We Have in Place

When you make reservations, place orders, or access account information from the Site, we use encryption technology to safeguard the confidentiality of your Personal Data as it travels over the Internet. We protect against the unlawful destruction, loss, alteration, unauthorized disclosure of or access to your Personal Data by means of firewalls and other security measures.

Your trainsntickets Guest Rewards membership account information (should you enroll in the trainsntickets Guest Rewards program) are password protected. We recommend that you do not divulge your password to anyone. Also remember to sign out of your trainsntickets account and close your browser window or the mobile application when you have finished.

Unfortunately, no data transmission over the Internet can be guaranteed to be absolutely secure. As a result, while we strive to protect your Personal Data, we cannot ensure or warrant the security of any Personal Data you transmit to Amraildeals.com, and you do so at your own risk. Once we receive your transmission, we make our best effort to ensure its security on our systems. However, we cannot accept liability for disclosure of any Personal Data due to errors in transmission or unauthorized ads or errors and omissions of third parties.

Section 6 — Our Policy on Allowing You to Access, Update, Correct or Delete Your Personal Data

When you join trainsntickets Guest Rewards, you can choose not to receive information and offers by email.

You may change your preferences regarding whether you want to receive mail or email at any time by accessing and updating your trainsntickets Guest Rewards Profile. You may access your Profile by clicking on the 'My Profile' link under the My Account drop-down menu on the header of most pages of the Amraildeals.com web site.

Within the trainsntickets Mobile App you may access your user profile by going to the Account section.

You may make changes to your trainsntickets Guest Rewards program information by accessing your trainsntickets Guest Rewards account information online at www.Amraildeals.com or, by contacting the trainsntickets Guest Rewards Service Center at 1-800-307-5000.

Section 7 — Your Choices Regarding Processing of Personal Data

If you have made a purchase with us and used a U.S. billing address, we will send you email correspondence regarding trainsntickets products and services. You may choose to stop receiving these emails by following the unsubscribe instructions in these emails or contacting us as described in Section 8 of this Policy.

Section 8 — Contacting Us Regarding This Policy

If you have questions or concerns regarding this Policy or our privacy practices, you may use the form on the Contact Us page or contact us via email at Privacy@Amraildeals.com.

If you are a California resident, select California Privacy Rights from the "Subject" drop-down menu on the page. Be certain to provide your complete mailing address on the form. You may access the Contact Us page by clicking the link at the bottom of most pages on this site.

If you are a user from the EU/EEA, you may also contact our local representative at: RAe Niedermeier+Teichmann PartmbB, Maximilianstr. 13, 80539 Munich, Germany, phone: +49 (0) 20 300 6422, fax: +49 (0) 89 20 300 6450, email: niedermeier@cyberprivacy.legal.

Section 9 — Special Privacy Practices and Rules for the trainsntickets Guest Rewards Program

If you enroll as a member of the trainsntickets Guest Rewards program, there are special supplemental privacy practices and rules that apply to the Personal Data that you provide. These special privacy practices and rules, which you understand and expressly agree to when you join the trainsntickets Guest Rewards program, are presented below.

When you become an trainsntickets Guest Rewards member, we collect and process the personal identifiers, personal details, and financial information listed in Section 3(A) above. We use this Personal Data to operate the trainsntickets Guest Rewards program and offer its benefits.

You may terminate your membership in the trainsntickets Guest Rewards program at any time by contacting the trainsntickets Guest Rewards Program Service Center at 1-800-307-5000. If you terminate your membership, any accumulated points will be forfeited and you may not have access to other program benefits.

Section 10 — California Privacy

This section applies only to Personal Data of consumers who are California residents.

As a California consumer, we will honor your: request for additional information about our data collection, use, disclosure, and sales practices in connection with the your Personal Data; request for the specific Personal Data collected about you during the previous 12 months; and request for the deletion of the Personal Data we have about you (subject to reasonable exceptions as typically recognized by law).

To make a request, select California Privacy Rights from the "Subject" drop-down menu on the Contact Us page, through our phone number at 1-800-USA-RAIL or via postal mail, proper postage pre-paid, at:

trainsntickets Office of Customer Relations
1 Massachusetts Avenue, NW
Washington, DC 20001
Attention: California Privacy Rights Request

Section 11 — Further Information for Users in The EU/EEA

The following information and rights apply if you use our Sites from a member state of the EU/EEA:

1. Legal bases for the processing of your Personal Data

We process your Personal Data based on various legal justifications including performance of contract, legitimate interests, and consent as outlined in the General Data Protection Regulation (GDPR).

2. Your rights

As a data subject located in the EU, you have the following rights regarding your Personal Data:

• Right of access: You may ask us to confirm whether we are processing your Personal Data and, if so, to provide you with a copy of that Personal Data.
• Right to rectification: If the Personal Data we hold about you is inaccurate or incomplete, you are entitled to ask for rectification or completion.
• Right to erasure: You may ask us to delete or remove your Personal Data in some circumstances.
• Right to restrict processing: You may ask us to restrict the processing of your Personal Data in some circumstances.
• Right to data portability: You have the right to obtain Personal Data you have provided to us in a structured, commonly used and machine-readable format for reuse.
• Right to object: You may ask us at any time to stop processing your Personal Data under appropriate circumstances.
• Right to withdraw consent: If we rely on your consent as legal basis for processing your Personal Data, you have the right to withdraw that consent at any time.

You may exercise your rights by contacting us as described in Section 8 of this Policy.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State where you reside, work or suspect an infringement, if you believe that the processing of Personal Data concerning you is not in compliance with GDPR requirements.