Bermuda’s Official Travel Resource

Bermuda Arrival Card Privacy Notice

This Privacy Notice sets out how we use your personal information.

Please read this document carefully and contact us if you have any questions.

Definitions:

“Card” means the Bermuda Arrival Card;

“Hard Copy Card” means the hard copy version of the Card available through your travel operator or when transiting Bermuda Immigration;

“Online Card” means the Bermuda Arrival Card (pdf format) created upon completing the online form available at the Website.

“Website” means bermudaarrivalcard.com.

All visitors to Bermuda are obliged to complete an Arrival Card. This Online Card is provided for your convenience. You are not obliged to use this service. Hard Copy Cards are still available for your use upon arrival.

  1. Who we are and contact details

We are the:

Bermuda Tourism Authority
22 Church Street
Hamilton HM 11

t: +1 (441) 296 9200

e: [email protected]

We are a body corporate created by the Bermuda Tourism Authority Act 2013.  If you have a question about this Privacy Notice or our use of your personal information, please contact our Privacy Officer.

The contact details for our Privacy Officer are:

Erin Smith
Privacy Officer

22 Church Street
Hamilton, HM 11
Bermuda

e: [email protected]

  1. What personal information do we use and where does it come from?

Personal information can include things that can allow someone to identify you either directly, through your name or passport number (etc.), or indirectly, through your address, phone number, date of birth or IP address (etc.).

We obtain your personal information from:

You:

The Website uses:

  • First name
  • Middle initial
  • Last name
  • Gender*
  • Citizenship / Nationality*
  • Passport number* (which is anonymized in our database but remains available in document for printing)
  • Passport expiration date
  • eMail address
  • Date of birth
  • Arrival date
  • Flight
  • Home address including country and zip
  • First trip Yes or No?
  • Intended stay / No. of nights
  • Purpose of entry
  • Intended address Type (hotel etc.)
  • Positive marketing contact click button
  • Positive truth declaration click button

* Indicates sensitive personal information.

Transfer from a third-party organisation:

The Department of Immigration transfers electronic files to us containing:

  • Title
  • First name
  • Middle initial
  • Last name
  • Gender*
  • Citizenship / Nationality*
  • Passport number* (which is anonymized in our database but remains available in document for printing)
  • Passport expiration date
  • Issuing country
  • Date of birth
  • Arrival date

  1. Third Party Personal Information

If you complete the Online Card with personal information relating to an individual other than yourself (a third party) you must ensure that:

  1. the third party has provided you with their consent for the use of their personal information in this way; and
  2. the personal information you provide is accurate.

If the third party does not provide this consent, we ask they either (i) complete this Online Card themselves; or (ii) complete a Hard Copy Card on arrival.

If the third party does not have legal capacity, you must be either:

  • the individual legally authorised to provide consent on their behalf (in the jurisdiction in which you/they are permanently resident; or
  • be authorised by that person to complete the Online Card.

  1. Children’s Personal Information

If you are under the age of 14 years, you should not use this Website.

If you are legally authorized to act on behalf of a child (see paragraph 3), you may use this Website.

  1. The legal basis for our use?

Our legal basis for use is:

  • a provision of law (Bermuda Immigration and Protection Act 1956 s42);
  • consent; and/or
  • that you would not reasonably request us to “not begin or cease”.

Visitors arriving in Bermuda are required to provide the Card (and the personal information it contains) as a ‘condition’ of landing in Bermuda (Bermuda Immigration and Protection Act 1956: s42). Failure to do so may impact your ability to transit immigration.

  1. How we use your personal information?

We collect your personal information as follows:

  • Your personal information is input directly into a secure database housed in Bermuda;
  • You are required to hand the Online Card to the Department of Immigration upon arrival in Bermuda (the Online Cards are then delivered to us for validation of your arrival);
  • The Department of Immigration transfers an electronic file of personal information to us as detailed in paragraph 2 as further validation of your personal information and arrival.

We use your personal information as follows:

  • to invite you to participate in a survey;
  • to provide the Government of Bermuda and interested stakeholders with aggregated and anonymised statistical information to ensure, direct and improve the level and quality of visitor experience and target marketing and other communication and information services for the benefit of the economy of Bermuda and visitors’ Bermuda travel experience;
  • to answer questions / deliver relevant marketing / information / or services to individuals who have consented to receive this;
  • to transfer to relevant third parties for them to answer questions / deliver relevant marketing / information / or services to individuals who have consented to receive this.

  1. Who has access to your personal information and do we transfer your personal information to organisations in Bermuda / overseas?

Relevant staff and/or contractors have access to only that personal information necessary for the lawful discharge of our duties and their tasks.

All our staff understand their obligation to maintain customer personal information subject to conditions of confidence.

Transfers:

Inside Bermuda - We transfer your personal information externally with third parties in Bermuda:

  • when required by law. We disclose only the personal information that is necessary to comply with a lawful request.

Overseas - We transfer your personal information overseas to third parties for purposes of research and reporting:

  • Destination Analysts (www.destinationanalysts.com) based in the United States for visitor exit survey research.

    Information transferred:
    • Name
    • Date of arrival
    • Email address
  • Experian Information Systems Inc. (www.experian.com) based in the United States for marketing research purposes. Their Privacy Policy may be viewed at www.experian.com/privacy

    Information transferred:
    • First name
    • Middle initial
    • Last name
    • Gender*
    • Citizenship / Nationality*
    • eMail address
    • Date of birth
    • Arrival date
    • Flight
    • Home address including country and zip
    • First trip Yes or No?
    • Intended stay / No. of nights
    • Purpose of entry
    • Intended address Type (hotel etc.)

When we use third party service providers based overseas, we disclose only the personal information necessary for the task. We ensure a contract is in place providing a comparable level of security and protection equivalent to that we provide.

We will not share your personal information with third parties for marketing purposes unless you have expressly consented to this.

We will not sell or rent your personal information.

  1. Analytics

We use "Google reCAPTCHA" ("reCAPTCHA").

This service is provided by Google Inc., ("Google").

reCAPTCHA is used to check whether the data entered on our Website has been entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behaviour of the visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, mouse movements made by the user, screen image etc.). The data collected during the analysis will be forwarded to Google. The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place. We have a legitimate interest in protecting our Website site from abusive automated crawling and spam. For more information about Google reCAPTCHA and Google's privacy policy, please visit the following links:

www.google.com/recaptcha/intro/v3.html

https://policies.google.com/privacy?hl=en.

  1. How long do we keep your personal information?

We retain the personal information provided through the Online Card for ten years. The hard-copy print outs of the cards are destroyed within two years.

  1. What are your rights?

We will do all we reasonably can to assist you with any issue arising from our use of your personal information.

[When the PIPA comes into force this section will be amended to detail your full legal rights under the Act.]

  1. Any questions? [How can you exercise your rights?]

Please contact our Privacy Officer. [link to para 1]

  1. Security

We constantly monitor the security of our systems and we review our policies and procedures on a regular basis.

For communication purposes the Website uses secure communication over HTTPS protocol. It is validated by a digital certificate issued by Starfield Secure Certificate Authority - G2. The Certificate uses SHA-256 hashing algorithm and 2048-bits RSA signing algorithm.

Information transmitted normally over the Internet can never be guaranteed as 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us. Once we receive your personal information, we make all reasonable (and appropriate) efforts to ensure its security on our systems.

  1. Privacy Notice (administrative details)

Privacy Notice No.[101 v1.0]

Effective Date: [March 2019]

This Privacy Notice may be updated from time to time. Any amended Privacy Notice becomes effective and replaces the previous version once published.