EventBuilder Privacy Notice

This Privacy Notice describes how we treat information collected through portal.eventbuilder.com, eventbuilder.com, eventbuilder.rocks and other websites we own or operate (collectively, the “Site”), our suite of software and professional services owned and operated by NW Virtual Partners LLC and/or delivered under the business name EventBuilder (the “Software”) for creating and managing virtual events, webinars, and online meetings and presentations (collectively, “Events”), our other digital properties or services, and your communications with us by any means (collectively, with the Site and Software, the “Services”). EventBuilder embeds privacy by design and privacy by default throughout the Services.

EventBuilder is a service provider to our customers that use our Software to organize and host an Event (“Organizer”), meaning we provide Event attendees or participants (“Attendees”), presenters, moderators, or delegates for Events (“Presenters”), and other end users with access to the Services as instructed by the Organizer. Please note that each Organizer is responsible for providing us with instructions and authorizations for processing your Personal Information, limiting the collection and use of Personal Information to what is necessary, and informing you about and supporting the exercise of your privacy rights. 

This Privacy Notice does not apply to any websites or platforms not owned or operated by EventBuilder, such as an Organizer’s or other third party’s website or platform, even if accessible from EventBuilder’s Services.

As used in this Privacy Notice, “Personal Information” means information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual consumer or household, such as:

• Identifiers (e.g., name, email, telephone number, address, username); 
• Sensitive Personal Information (e.g., government identification number; precise geolocation; racial or ethnic origin; religious beliefs; health data; contents of messages when we are not the recipient; in some cases, information about a known child);
• Legally protected information (e.g., race, citizenship, marital status, sex);
• Employment-related information (e.g., current or past employment);
• Non-public educational information, including information protected under the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g, 34 C.F.R. Part 99);
• Biometrics (e.g., DNA, face/voice prints, health data) and audio, electronic, visual, thermal, or olfactory information;
• Commercial information (e.g., products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies);
• Internet or other similar activity (e.g., browsing history; content interactions); and
• Inferences drawn from Personal Information to create a profile about preferences, characteristics, trends, predispositions, behavior, attitudes, intelligence, and aptitudes. 

Not all information about you is legally protected as Personal Information. Depending on where you live, publicly available information, aggregated information (meaning data summaries or reports with Personal Information removed), employment-related information, or anonymized information (that cannot be linked back to you as an individual) may not qualify as “Personal Information.” 

The types of Personal Information we collect about you and the manner of collection depends on how you interact with us, whether as a prospective customer, Organizer, Attendee, Presenter, or otherwise. EventBuilder receives Personal Information from Organizers, Attendees, Presenters, and other end users as a service provider on behalf of the Organizer. In any case, EventBuilder limits the collection, use, disclosure, and retention of Personal Information to what is necessary to accomplish the purposes described in this Privacy Notice, or notified at the time of collection, or as authorized by you directly or through the Event Organizer.  

a. Categories of Personal Information Collected

EventBuilder only collects and uses your Personal Information: (i) with your consent as informed by this Privacy Notice and freely given at the time you provide the information; (ii) if we have a legitimate interest in doing so; or (iii) as authorized or required by law.

During the preceding 12 months, EventBuilder has collected these categories of Personal Information:

• Identifiers;
• Biometric information;
• Sensitive Personal Information (if you choose to provide it); and
• Internet or other similar activity.

We will notify you before we collect additional categories of Personal Information or use your Personal Information for purposes that are incompatible with the purpose stated at the time of collection.

b. Sources of Collection

We only collect Personal Information as a controller through the Site or when you reach out to us. When we collect Personal Information for an Event, EventBuilder processes that Personal Information as a service provider to the Event Organizer. EventBuilder collects Personal Information from these sources:

• Your Event registration, with your consent. As a service provider to Organizers, we collect identifiers when you register as an Attendee including your name and email address. We collect this information with your consent, and we use it to provide our Services to the Event Organizer and Attendees and to improve our Services. Note that the Organizer of the Event may ask you to submit additional information through our Services as part of your registration for which the Organization, not EventBuilder, is responsible for the collection and use. It is your Organizer’s choice to collect this information and your choice to submit it.
• When you organize an Event, with your consent. If you use our Services as an Organizer or on behalf of an Organizer as an Event administrator, we will collect from you information like your name, email, phone, address, company information, job title, primary contact information for your company, social media links, and information related to your company’s online presence. If you choose to access the Services via a third-party single sign-on functionality, our Software will receive a token and access to certain of your Personal Information from that third party to facilitate your sign-on and use of the Services. We collect this information with your consent, and we use it to provide our Services to you and to your Attendees and to improve our Services.
• Your participation in an Event, with your consent. During the Event, if you enable your camera or microphone and participate by video or audio, EventBuilder may capture biometrics including your image or voice. EventBuilder will also collect any information you submit during the Event, which may include sensitive Personal Information if you choose to include it. For example, an Attendee may include Personal Information in their chat messages and poll or survey responses or a Presenter may share Personal Information as part of their presentation materials. EventBuilder collects this information as a service provider to the Event Organizer and with your consent, and we use it to provide you with access to and support for the Event. The Event Organizer and Presenter will have access to information collected from your registration and Event participation. Recordings of Events may be shared with the Organizer, Attendees, or others as the Organizer instructs.
• From the Organizer of an Event about you as a Presenter, in our role as a service provider. Presenters do not register for Events, but the Presenter or Organizer may submit the Presenter’s name, email, company, job title, photo, social media link, and biography for inclusion in Event materials. The Organizer may also choose to submit additional Personal Information it holds about you for inclusion in your Presenter Profile on the Event, pursuant to the Organizer’s own privacy practices. If you choose to access the Services via a third-party single sign-on functionality, our Software will receive a token and access to certain of your Personal Information from that third party to facilitate your sign-on and use of the Services.
• From the Organizer of an Event about you as an Attendee, in our role as a service provider. If an Organizer submits your email address to register you as an Event Attendee, EventBuilder will generate an email invitation to you to complete your registration. EventBuilder collects and uses this information as a service provider to fulfill our contractual obligations as a service provider to the Organizer. When acting as a service provider, we only collect and use Personal Information as permitted by our agreement with, and at the direction of, the Organizer and as permitted by law.
• Web analytics, in our role as a service provider. EventBuilder’s Software version 3.xx.xx.x or newer gives Organizers the option to embed code that reports data about how the user interacts with the website or app back to the Organizer. For example, the Organizer might collect analytic data generated from clicks on a page by a Potential Registrant. The Organizer decides whether to use this feature and how the code will process Potential Registrant, Registrant, and Attendee data. Data collected via the Organizer’s code is processed and stored by the Organizer according to the Organizer’s privacy practices. EventBuilder never receives, processes, or stores Personal Information or other data collected through Organizer’s use of this code.
• Event conversations and interactive questionnaires, in our role as a service provider. Event Organizers may ask you to complete an interactive questionnaire or may choose to record, transcribe, or monitor portions of the Event using certain features of the Services. Please note that these features require EventBuilder to have simultaneous and in real-time access to the selected audio or video conversations, chats, or questionnaire responses related to the Event for these Services to function. The Event Organizer is responsible for notifying Attendees if the Event is being recorded or if EventBuilder or another third party is granted access to your data (see paragraph (d), Organizer Privacy Practices). By completing the questionnaire or attending the Event, you consent to EventBuilder accessing your conversations for the purposes identified by the Organizer. Please direct any questions about these features to the Event Organizer.
• Your communications with us, with your consent. If you contact EventBuilder online, by email, or other means, we will collect your name, email address and other information necessary to respond to your inquiry. If you complete one of our surveys, we will collect your responses. If you register for one of our Events and you opt in, we may send you information about our Services. We collect this information with your consent, and we use it for the purposes stated at the time of collection, to provide you with our Services, to communicate with you, or market to you according to your preferences.
• Automatically when you use our Services, with a legitimate interest. During the Event we collect technical information about your device and session (e.g., IP address, browser type, time zone, language, session connection and disconnection time, bandwidth and referring URL) to provide you with technical support and to analyze and improve our Services. We also automatically collect your usage details (e.g., features used, page visits, length of meetings, individual participant activity, network and viewer performance, polling, surveys, and Q&A) to generate reports for the Organizer and Presenters related to attendance, user summaries, and features used. Our Marketing Site uses cookies to customize the content you see, to improve our marketing efforts, and to provide and improve our Services. Please read our Cookie Notice for more information. We collect this information automatically, including some Personal Information to achieve our legitimate interest of providing and improving our Services, offering customer support, analyzing trends, and troubleshooting technical issues.

c. Other Uses

In addition to the specific uses described above, we might also use your Personal Information to (i) monitor your compliance with any of your agreements with us; (ii) protect your privacy and enforce this Privacy Notice; (iii) if we believe it is necessary, to identify, contact, or bring legal action against persons or entities who may be causing injury to you, to us, or to others; (iv) comply with a law, regulation, legal process, or court order; or (v) fulfill any other purpose to which you consent.

Organizers are responsible for ensuring that Personal Information collected through the Services is accurate, complete, current, and reliable for its intended uses and EventBuilder cooperates to support Organizers’ efforts to do so. We will not collect additional categories of Personal Information or use already collected Personal Information for purposes that are materially different, unrelated, or not reasonably necessary or compatible with the original purpose without notice and consent to you as required by law.

d. Organizer Privacy Practices

Organizers and our prospective customers are responsible for their own privacy practices. Each Organizer and prospective customer must ensure that the Personal Information they collect is accurate, complete, current, and reliable for its intended uses. Additionally, the Organizer is solely responsible for how any Personal Information an Organizer or prospective customer receives from EventBuilder, such as Event data, is collected, processed, used, and stored. Organizers and prospective customers must only retain Personal Information for as long as is necessary to accomplish their legitimate business purposes disclosed to you and for legally compatible purposes. EventBuilder will reasonably assist and cooperate with requests from Organizers and prospective customers to assist in meeting these obligations.

e. Children’s Privacy

EventBuilder is committed to providing the Services in compliance with applicable laws designed to protect children’s privacy. We do not knowingly collect Personal Information from children under 16 without parent or guardian consent. If an Organizer chooses to host an Event that is open to children under age 16, we require the Organizer to collect all legally required parent or guardian consent prior to collecting any Personal Information from the child or permitting the child to attend the Event. If you have questions about a child under age 16 attending an Event using our Services, please contact the Organizer. EventBuilder is not responsible for an Organizer’s failure to comply with any law designed to protect children or any other law governing the Organizer’s use of our Services. As part of our commitment to Attendee privacy, we encourage you to contact us at privacy@eventbuilder.com if you believe we might have collected any information online from a child under 16, or if you are aware of any unauthorized submission of information to us.

EventBuilder’s policy is to retain Personal Information only for as long as is necessary to accomplish the purposes stated at the time of collection or for compatible purposes, according to our retention policies. For example:

• Attendee registration information is retained for up to two years unless the Organizer instructs us to delete this information on a shorter timeline.
• Attendee technical information collected during the Event for technical support purposes is deleted seven days after the Event.
• Data we collect to generate reports related to attendance, user summaries, and features used may be retained for up to two years depending on the Organizer’s preferences.
• Event recordings, materials, and information about Presenters is retained for the duration of the Organizer’s subscription to our Services and is deleted 30 days after the Organizer cancels their subscription, unless the organizer instructs us to delete this information on a shorter timeline. 

EventBuilder reserves the right to also retain and use Personal Information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

a. Categories of Personal Information Disclosed

EventBuilder will only disclose your Personal Information with your permission, as described in this section, or as required by law. In the preceding 12 months, EventBuilder has disclosed (i) identifiers; (ii) biometric information; (iii) sensitive Personal Information (if you chose to provide it); and (iv) internet or other similar activity to third parties for a business purpose. We will not disclose Personal Information to third parties except as described in this section or with your consent. EventBuilder will be responsible for all onward transfers of Personal Information to our subcontractors and other disclosure recipients.

b. Disclosure Limitations

EventBuilder honors the confidentiality of Organizer, Attendee, and Presenter private communications. We do not disclose your private, online communications (i.e., email invitations, meeting schedules, attendee lists, questions and answers, file uploads/downloads) to third parties, ever. EventBuilder personnel will only view materials related to confidential Events as necessary to appropriately support the service. Any viewing of such content will be restricted to select, authorized operations and technical staff that support the service. We will only use this information to anticipate, diagnose, support, or resolve any problems that might limit or disrupt the service.

Before disclosing any Personal Information, EventBuilder will obtain assurances from the recipient that the recipient will only use the Personal Information to assist us in providing the Services and will provide at least the same level of protection for Personal Information as EventBuilder promises by this Privacy Notice and in compliance with Data Privacy Framework Principles.

All recipients of disclosed Personal Information are required to notify EventBuilder if the recipient becomes unable to provide these protections. Upon notice of, or if we learn of any unauthorized processing of disclosed Personal Information, EventBuilder will act promptly to discontinue and remediate the processing. 

c. Recipients of Disclosed Personal Information

Personal Information that is not subject to our disclosure limitations may be disclosed to the following recipients:

• The Event Organizer. If you register or participate in an Event as an Attendee or Presenter, the Organizer of that Event will have access to your registration information and any information you submit to the Services through chat or other features while participating in that Event.  The Organizer will also have access to recordings of the Event, which may include your image or voice recordings if you enabled your camera or microphone and participated using audio visual means. Please do not submit Personal Information to the Services if you do not wish the Organizer to access it.
• Event Participants. Depending on the Event and the Organizer’s instructions, when you attend an Event your name or other Personal Information may be visible to other Event participants. For example, if the Organizer chooses to host a live virtual Event, each Attendee’s name may be displayed in the virtual meeting room and visible to other Attendees. Organizers may also choose to share additional Personal Information collected from you via EventBuilder for the Organizer’s own purposes. If you have questions about how an Organizer might share your Personal Information collected via our Services, please contact the Organizer.
• Sub-Processors. Vendors that provide us with services (“Sub-Processors”) like cloud service providers, payment processors, content delivery networks, IT service providers, and email and data hosting providers may have access to your Personal Information to perform their contractual obligations. The type of information that we provide to a Sub-Processor will depend on the service that they provide to us. We prohibit our service providers from selling or disclosing the Personal Information we provide, and we require all service providers to maintain confidentiality standards and appropriate technical and organizational measures to ensure the security of your Personal Information. See our Sub-Processor list to learn more about our work with Sub-Processors.
• Cookie information recipients, subject to their respective privacy notices.
• Affiliates and Other Third Parties. EventBuilder may disclose the Personal Information we collect to our business affiliates or subsidiaries. Their use and disclosure of your Personal Information will be subject to this Privacy Notice. Additionally, under some circumstances we may disclose Personal Information we collect as permitted by applicable law, for example: if we go through a business transition (e.g., merger, acquisition, or sale of a portion of our assets); to comply with a legal requirement or a court order; when we believe it is appropriate in order to take action regarding illegal activities or prevent fraud or harm to any person; to exercise or defend our legal claims; or for any other reason with your consent.
• Law enforcement, and other governmental agencies. EventBuilder may be required to disclose, and may disclose, Personal Information in response to lawful requests by public authorities. This type of disclosure may relate to an investigation of illegal activities as required by law enforcement or our obligations to meet national security requirements. If permitted by law, we will inform the relevant Organizer or prospective customer and provide a reasonable opportunity to object before making such disclosure.

d. Aggregated and Deidentified Information. 

EventBuilder reserves the right to share aggregated, anonymized, or deidentified information about any individuals with nonaffiliated entities for marketing, advertising, research or other purposes, without restriction.

a. Controlling Your Personal Information

EventBuilder gives you the ability to directly control the Personal Information we collect and hold about you through our Services:

• Your Registration.  You can change your Event registration, correct, update, or delete Personal Information associated with your registration, or update your preferences for how and about what we communicate with you. You can also unsubscribe from our emails via the Manage My Personal Data link on the Event page and in emails you receive from us. If you require assistance, please contact privacy@eventbuilder.com.
  
  
• Emails. We may send you informational or support emails related to an Event or your other use of our Services. Depending on your communication preferences, we may also send you marketing emails. If you do not wish to receive emails from us, you can unsubscribe or change your preferences via the links provided in the emails or send a request to privacy@eventbuilder.com to be removed from our email list. Note that if you opt out of marketing communications, we may still send you non-promotional communications, such as those about your account or our ongoing business relations.
  
  
• Device Settings. You can control the data we collect automatically by adjusting your device settings.
  
  
• Do Not Track. Do Not Track signals are signals sent through a browser informing us that you do not want to be tracked. Currently, our systems do not recognize browser “do-not-track” requests. You may, however, disable certain tracking as discussed below.
  
  
• Privacy Requests. Depending on where you reside, you may be entitled to additional controls over your Personal Information. Read more about Consumer Privacy Rights in paragraph b of this section. When EventBuilder receives Personal Information, we do so on behalf of an Organizer or prospective customer. If you are an Attendee or Presenter, please contact the Organizer of your Event to request access to, or correction, amendment, or deletion of your Personal Information. EventBuilder will cooperate with the Organizer’s instructions to honor your requests and privacy choices.
  Otherwise, if you wish to exercise your privacy rights beyond the methods described above, or if you want to express concerns, lodge a complaint, or request information, please submit a verifiable Consumer Privacy Request: 
  1.    Using our online Consumer Privacy Request.
  2.    By email to privacy@eventbuilder.com.
  
  If EventBuilder collects or processes your Personal Information as a service provider to an Organizer, we will relay your request to the Organizer for further processing.
  
  In all other cases, we may only legally fulfill a Consumer Privacy Request when we have sufficient information to verify that the requester is the person or an authorized representative of the person about whom we have collected Personal Information, and to properly understand, evaluate, and respond to the request. We do not charge a fee to process or respond to a verifiable request unless we have legal grounds to do so, such as requests that are excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
  
  We endeavor to respond to privacy requests in accordance with the requirements of the law applicable to your jurisdiction. If we do not fulfill your request within the legally required timeline, you can appeal our response by contacting privacy@eventbuilder.com.
  
  
• DPF Recourse Mechanism. In compliance with DPF Principles, EventBuilder commits to resolve complaints relating to our collection or use of Personal Information transferred to the United States and your privacy through a recourse mechanism made available to you free of charge. To learn more about EventBuilder and the DPF, please see our Data Privacy Framework Notice.
  
  European Union, Swiss, and United Kingdom individuals with inquiries or complaints about our handling of Personal Information received in reliance on the DPF should first contact EventBuilder online using our Consumer Privacy Request form or by email at privacy@eventbuilder.com.   
  
  You may have the right to complain to the data protection authority of your country of residence. If you live in the UK, you can make a complaint with the Information Commissioner’s Office . If you live in the EU, you can find the relevant data protection authority information on the European Data Protection Board website . The U.S. Federal Trade Commission has jurisdiction over EventBuilder’s compliance with the DPF, and you can submit a complaint here .
  
  In compliance with DPF Principles, EventBuilder further commits to refer unresolved privacy complaints under the DPF Principles to an independent recourse mechanism, JAMS Data Privacy Framework Dispute Resolution . If EventBuilder does not acknowledge your complaint in a timely fashion, or your complaint is not addressed to your satisfaction, please submit your complaint to JAMS . This service is provided free of charge to you.
  
  If your DPF complaint cannot be resolved through the above options, under certain conditions you may have the option to invoke binding arbitration for certain residual claims. More information is available through the Data Privacy Framework Program . 

b. Consumer Privacy Rights

This section provides informational notices pursuant to consumer privacy laws that require companies to inform consumers about their privacy rights, such as the European Union’s General Data Protection Regulations and its counterpart in the United Kingdom, Canada’s Personal Information Protection and Electronic Documents Act and Québec’s provincial privacy law, and U.S. privacy laws such as the California Consumer Privacy Act and other state laws providing privacy rights to consumers. Some or all the protections afforded under these laws may not apply to EventBuilder or your use of the Services. EventBuilder will support your exercise of privacy rights to the extent a consumer privacy law applies to your use of our Services, subject to statutory exceptions and limitations. 

To exercise your rights or ask questions, please submit a verifiable Consumer Privacy Request or contact privacy@eventbuilder.com.

Depending on where you live, your rights over your Personal Information may include some or all of the following:

• Right to Know. You have the right to know how we collect and process your Personal Information. We have set the required notices in this Privacy Notice. We may provide you with additional notices about other ways we process your Personal Information, such as by sending you a notice via email or by other means of communication.
  
  
• Right to Expect. You expect us to collect, use or disclose Personal Information responsibly and not for any purpose other than which you consented. We set your expectations in this Privacy Notice, and we collect legally required consent at various stages of our interactions with you. If we collect or use your Personal Information based on your consent, we will also notify you of any changes and will request your further consent as required by law. You may withdraw your consent at any time with reasonable notice by contacting privacy@eventbuilder.com.
  
  
• Right to Correct. You have the right to the accuracy of your Personal Information and the right to request that we correct inaccurate Personal Information about you on our systems. If you become aware that the Personal Information that we hold about you is incorrect, or if your information changes, please inform us and we will update our records.
  
  
• Right to Deletion. You have the right to request that we delete or dispose of your Personal Information on our systems, with certain exceptions. EventBuilder may permanently delete, deidentify, or aggregate the Personal Information in response to a request for deletion.
  
  
• Right to Access. You have the right to request confirmation that we have collected Personal Information about you and that we provide you with access to that Personal Information. If you submit an access request, we will provide you with copies of the requested pieces of Personal Information in a portable and readily usable format. Please note that certain laws may prohibit EventBuilder from disclosing specific pieces of Personal Information, and we may be limited in the number or frequency of requests we must fulfill.
  
  
• Right to data portability. In some cases, we are required to provide your Personal Information to another organization at your request and in a structured, commonly used machine-readable format, so that the other organization can read and use it.
  
  
• Right to Disclosure. You may request that we provide you with certain details about our collection and use of your Personal Information, such as: (a) the categories of Personal Information we have collected about you; (b) the categories of sources for the Personal Information we have collected about you; (c) categories of our team members who have access to your Personal Information and EventBuilder’s business purpose for collecting, using, processing, sharing or selling that Personal Information, as applicable; (d) the categories of third parties with whom we share that Personal Information; and (e) if we sold or shared your Personal Information under the CCPA, two separate lists stating: (i) sales or sharing, identifying the Personal Information categories that each category of recipient purchased; and (ii) disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained. Certain laws may limit the number or frequency of requests we must fulfill.
  
  
• No Sale or Sharing. Some states entitle consumers to opt out of the sale or sharing of Personal Information or targeted advertising practices. EventBuilder does not sell your Personal Information or share your Personal Information with third parties for cross-contextual behavioral advertising purposes. If this changes in the future, we will update this Privacy Notice and provide you with a method to opt out of such sale and sharing.
  
  
• Limited Use and Disclosure of Sensitive Personal Information. You have the right to opt out or limit our use of your sensitive Personal Information. EventBuilder does not seek to collect sensitive Personal Information about any Attendee, Participant, or other user. An Organization may request that you submit sensitive Personal Information, or an Attendee or Presenter may volunteer their sensitive Personal Information as part of an Event. Your submission of sensitive Personal Information via the Services is your choice and is done with your consent. In no case will EventBuilder use or disclose any sensitive Personal Information for the purpose of inferring characteristics about you. If this ever changes in the future, we will update this Privacy Notice and provide you with methods to limit use and disclosure of sensitive Personal Information.
  
  
• No ADM or Profiling. You have the right to opt out of automated decision-making or profiling. EventBuilder does not use any form of automated processing of Personal Information to evaluate, analyze, or predict your performance, preferences, choices, or behavior. But we have no control over whether an Event Organizer uses the Services in a manner that qualifies as ADM or profiling. Please contact the Event Organizer if you have questions about automated use of your Personal Information related to an Event.
  
  
• Right to Restrict. You may have the right to request that we restrict the processing of your Personal Information if (i) the data is inaccurate, (ii) the processing is unlawful, (iii) we no longer need the Personal Information, or (iv) you exercise your right to object. Your right to restrict may be limited to Personal Information that is sensitive in nature, or that is sold or shared for certain purposes.
  
  
• Right to Object. You may have the right to request, under certain circumstances and where we are required to do so by law, that we limit our processing of your Personal Information as you request.
  
  
• Health Data Rights. The Services are not designed to be used to collect health data. EventBuilder does not collect health data and we do not anticipate that your health data will be collected through your use of the Services. Some laws entitle consumers to certain details about health data collected about them, including (i) confirmation of whether the entity collects, shares, or sells the consumer’s health data and access that data, including a list of all third parties and affiliates with whom the entity has shared or sold the health data and a method to contact those third parties, (ii) a method to withdraw consent related to use of health data, and (iii) the right to have their health data be deleted.
  
  
• Right to Nondiscrimination. We will not discriminate against you for exercising your privacy rights. For example, unless permitted by law, we will not: (i) deny you goods or services; (ii) charge you different prices or rates for goods or services; (iii) provide you a different level or quality of goods or services; (iv) retaliate against you as an employee, applicant for employment, or independent contractor for exercising your privacy rights; or (v) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services, because you exercised a right under applicable privacy laws.
  
  
• Right to Disclosure of Marketing Information. California’s Shine the Light Act (Civil Code sections 1798.83-1798.84) entitles California residents to request certain disclosures regarding Personal Information sharing with affiliates and/or third parties for marketing purposes.

EventBuilder is committed to safeguarding the Personal Information entrusted to us. We have implemented and maintained reasonable and appropriate security measures to help protect Personal Information in our possession from unauthorized access, processing, alteration, or disclosure. We use a combination of technical and organizational measures, procedures, and standards to govern Personal Information processing and safeguard the data in our possession. For example, we use multi-factor authentication, industry standard SSL for data encryption, proprietary technology, and other technical safeguards to protect information online and stored on our systems. Only trained and authorized employees and subcontractors may access Personal Information, and only when necessary for a specific business reason. Employees and/or contractors who violate our policies are subject to disciplinary action, up to and including termination. Our security measures are designed to meet our duty of care related to your Personal Information. Please note, however, that no transmission of data over the Internet is 100% secure, and we cannot guarantee that unauthorized third parties will not defeat our security measures or use your Personal Information for improper purposes.

1. Private Events
   We understand that Organizers may use the Services to conduct private Events or to discuss highly confidential information. To protect the confidentiality of your Events, at the Organizer’s request we will provide validation codes, emailed URLs and meeting keys to restrict unauthorized access to Organizers’ confidential materials.
2. Your Account
   Organizers who subscribe to EventBuilder will have a login and password. Attendees and Presenters will be given unique links to access Events for which they are registered. We encourage you to take steps to protect against unauthorized access to your password, Event links, and devices by, among other things, choosing a robust password that nobody else knows or can easily guess, and keeping your password and Event links private, and signing off after using a shared computer or other device. We are not responsible for any lost, stolen, or compromised passwords, or for any unauthorized activity on your account or using your Event link.

EventBuilder complies with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce (collectively, the “DPF”). EventBuilder has certified to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles with regard to the processing of Personal Information received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF, and EventBuilder has certified to the U.S. Department of Commerce to certify that we adhere to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of Personal Information received from Switzerland in reliance on the Swiss-U.S. DPF. The Federal Trade Commission has jurisdiction over EventBuilder’s compliance with the DPF. If there is any conflict between the terms in this Privacy Notice and the EU-U.S. DPF Principles, the Principles shall govern. You can learn more about the Data Privacy Framework (DPF) Program . For more information, please see our Data Privacy Framework Notice .

EventBuilder is owned and operated in the United States and uses service providers and technical infrastructure in the United States to provide the Services to our Customers wherever they are located. When transferring Personal Information across jurisdictional borders, we take measures to comply with applicable data protection laws related to such transfer. 

When your information is moved from your home country to another country, the laws and rules that protect your Personal Information in the country to which your information is transferred may be different from those of the country where you live. For example, if your information is transferred to the United States, it may be accessed by government authorities under United States law. 

When a transfer of Personal Information requires a lawful data transfer mechanism, EventBuilder relies on one or more of the following mechanisms:

• Transfer to countries or recipients that are legally recognized as having an adequate level of protection for Personal Information.
• Transfer under Data Privacy Framework, as detailed in our Data Privacy Framework Notice.
• EU Standard Contractual Clauses approved by the European Commission and the UK International Data Transfer Addendum issued by the Information Commissioner’s Office.
• Other lawful methods available to EventBuilder under applicable law.

EventBuilder engages in cross-border data transfers on the legal basis that it is necessary to provide the Services to Organizations and their end users. However, we do not warrant that EventBuilder is appropriate or authorized for use in any other jurisdictions.  Organizers and their end users are solely responsible for determining whether their use of the Services complies with applicable laws.

By allowing us to collect Personal Information about you, you consent to the transfer and processing of your Personal Information as described in this section. 

The Site and other Services may contain links to websites owned or operated by third parties. We have no ability to control, and we are not responsible for, the privacy and data collection, use, and disclosure practices of third-party websites, including Organizer websites. We encourage you to read the privacy statements of each website that collects your Personal Information. 

EventBuilder reserves the right to update this Privacy Notice from time to time. The date that this Privacy Notice was last updated is at the top of this page. Your continued use of the Services after we post updates is deemed to be your acceptance of the corresponding changes to our privacy practices.

Please submit any questions or requests via our Consumer Privacy Request form or via email at privacy@eventbuilder.com.

EventBuilder’s Privacy Officer is Tonya Bollman, Compliance Manager and can be reached at privacy@eventbuilder.com.