Privacy Policy Eventgroove Fundraising Effective Jan 17, 2018 Who we are Eventgroove Fundraising, Inc. and its parents, subsidiaries, affiliates, agents, representatives, consultants, employees, officers, and directors — (collectively, “Eventgroove Fundraising,” “we,” or “us“, “our“) is an online fundraising platform for Users to seek to raise funds for their own Campaigns and to contribute to the Campaigns of others. Administrators may offer Items to Contributors in exchange for the Contributors’ donation of funds. We are based in Tucson, AZ. Undefined capitalized terms used herein shall have the definitions as set forth in our Terms of Use. How this Policy applies This Privacy Policy explains how Eventgroove Fundraising collects, uses, or otherwise processes information, including information that personally identifies you (“Personal Information”) and how you can control the collection, correction and/or deletion of such information when you use our Website(s): https://EventgrooveFundraising.com, including on a mobile device, mobile application and related services (the “Service“ or the “Services”) or any other service to which this policy is linked. Your use of our Website and the Services is also governed by our Terms of Use (“Terms“), which are to be read in conjunction with this policy. Who is the Data Controller? Eventgroove Fundraising, Inc. is the “data controller” of personal data collected by all of Eventgroove Fundraising, and Eventgroove Fundraising, Inc. is responsible for deciding how personal data is collected, used, and disclosed. Administrators may also be data controllers of certain data you provide to Administrators when you make a Contribution to a Campaign or through any other Services. You should be aware that when you provide information to us using a third-party site or platform, the information you provide may be separately collected by the third-party site or platform. The information we collect is covered by the Eventgroove Fundraising Privacy Policy only, and the information the third-party site or platform collects is subject to the third-party site or platform’s privacy practices. Privacy choices you have made on the third-party site or platform will not apply to our use of the information we have collected directly through our Site or Services. Please also keep in mind that our Site and Services may contain links to other sites not owned or controlled by us and we are not responsible for the privacy practices of those sites. We encourage you to be aware when you leave our Site or Services and to read the policies of other sites that may collect your personal information. Data you provide to us We collect information you provide directly to us, information from third parties, and information that we collect through automated means. For example, we collect: Registration information you provide when you create an account or a Campaign, enter a promotion, or link your profile on a third-party site or platform with your registration account, such as your first name and last name, country of residence, email address, and password. Transaction information you provide when you request information, contact Eventgroove Fundraising, create a Campaign, or make a Contribution to a Campaign. Information you provide in public forums on our sites and applications, such as your public posts. Information sent directly to another User, post, or similar functionality, where we are permitted by applicable law to collect this information. Information we obtain from a third party, such as a site or platform provider, about use of our applications on third-party platforms or devices. Location information, including location information provided by a mobile or other device interacting with one of our sites or applications, or associated with your IP address, where we are permitted by law to process this information. Activity information about your use, and the use by any person(s) you authorize through your account, of our sites and applications, such as the content you view or post, how often you use our services, and your preferences. Usage, viewing, technical, and device data when you visit our sites, use our applications on third-party sites or platforms, or open emails we send, including your browser or device type, unique device identifier, and IP address. You may decline to provide us with your information. However, this will limit your ability to register for an account or use our Services. You may Contribute to a Campaign as a User by providing only a name and email address. However, to take most other actions on our Site, you will need to finish creating an account. You may review, change or remove your information through your account settings. How we collect information We collect information you provide to us when you request or purchase products, services, or information from us, register with us (including when you link your profile on a third-party site or platform with your registration account), participate in public forums or other activities on our sites and applications, respond to User surveys, or otherwise interact with us online or offline. We collect information through a variety of technologies, such as cookies, Flash cookies, pixels, tags, software development kits, application program interfaces, and Web beacons, including when you visit our sites and applications or use our applications on third-party sites or platforms using one or more devices, whether or not you are logged in or registered. Please visit our Cookie Policy for further information, including Do Not Track and how to disable cookies and otherwise make choices with respect to such data collection. We collect information using analytics tools, including when you visit our sites and applications or use our applications on third-party sites or platforms. We acquire information from other trusted sources to update or supplement the information you provided or we collected automatically, such as when we validate postal address information using third party services. Applicable law may require that you authorize the third party to share your information with us before we can acquire it. If you access the Service through a third-party connection or log-in (like a social network), we may collect certain information from your social network profile. For a description of how social networking sites handle your information, please refer to their privacy policies and terms of use, which may permit you to modify your privacy settings. If you do not want to share information from your social network profile, do not access the Service through that third-party service. How we use this information Consistent with applicable law and choices and controls that may be available to you, we may use information collected from you, or from devices associated with you, to: To enable us to provide you with our Services, and to improve and promote our Services; Communicate with you about your account or transactions with us and send you information or request feedback about features on our sites and applications or changes to our policies. Send you offers and promotions for our products and services or third-party products and services. Personalize content and experiences. Provide you with targeted advertising based on your activity on our sites and applications and on third-party sites and applications. Operate, understand, optimize, develop, or improve our sites, applications, products, services and operations, including by performing User market research and using analytics tools. Detect, investigate and prevent activities that may violate our policies or be illegal. We may aggregate and/or anonymize any information collected through the Service so that such information can no longer be linked to you or your device (“Aggregate/Anonymous Information”). We may use Aggregate/Anonymous Information for any purpose and share such data with any third parties, including advertisers. How we share your information with third parties We will share your information in the following ways: When you Contribute to a Campaign, so that the Administrator can send you Items, provide you with customer service, conduct market research, and comply with our Additional Terms and policies. Please note that once we share your personal information with an Administrator, the information received by the Administrator is controlled by that company and becomes subject to the Administrator’s privacy practices. When you allow us to share your personal information with another company, such as directing us to share your personal information with third-party sites or platforms like social networking sites. Please note that once we share your personal information with another company, the information received by the other company is controlled by that company and becomes subject to the other company’s privacy practices. When companies perform services on our behalf, including, but not limited tom marketing and advertising, and customer service; however, these companies are prohibited from using your personal information for purposes other than those requested by us or required by law; and When we share your personal information with third parties in connection with the sale of a business, to enforce our Terms of Use or rules, to ensure the safety and security of our Users and third parties, to protect our rights and property and the rights and property of our Users and third parties, to comply with legal process (including to comply with national security or law enforcement requirements), or in other cases if we believe in good faith that disclosure is required by law. When we share your personal information with your consent, including when you post personal information on public forums or blogs accessible to third parties. Your controls and choices The laws in some jurisdictions requires us to provide you the ability to exercise certain controls and choices regarding our collection, use and sharing of your information. To the extent those laws apply to you, your controls and choices may include: Updating, and deleting your registration account; Choosing or changing your choices for subscriptions, newsletters, and alerts; Choosing whether to receive from us offers and promotions for our products and services; Controlling targeted advertising from many ad networks and partners; data exchanges; and marketing analytics and digital advertising and marketing service providers (by visiting the Digital Advertising Alliance); Controlling whether you want us to access location information, such as by controlling or disabling location services in your mobile device’s settings menu; Choosing to control targeted advertising you receive within applications by using the settings and choices made available to you through your device(s), for example, by re-setting your device’s advertising identifier and/or opting out of interest-based ads; Requesting removal of your personal information from a public forum on one of our sites or application. You may exercise these controls and choices in various ways, including by contacting us, following instructions provided in communications sent to you, or by using your device or other available settings (for example, by re-setting your device’s advertising identifier and/or opting out of interest based ads). You can opt out of interest-based ads by visiting the Digital Advertising Alliance or using the opt-out mechanism in the “Interest Based Ads” link in the footer of the site you are visiting. Please be aware that if you do not allow us to collect personal information from you, we may not be able to deliver certain experiences, products, and services to you, and some of our Services may not be able to take account of your interests and preferences. If you have questions about the specific personal information about you that we process or retain, and your rights regarding that personal information, please contact us. European Economic Area residents: Legal bases for use of your information & controls and choices The laws in the European Economic Area and some other jurisdictions require us to provide Users, to the extent those laws apply to such Users, with the following information: Legal grounds for use and disclosure of personal information As necessary to perform our obligations under any contract with you, including to provide for Campaign disbursement, manage your Campaign or otherwise comply with the Eventgroove Fundraising Terms of Use; or On the basis of implied or express consent, such as to send you certain information, including marketing communications, to share your information with partners when you have requested we do that, or to collect and process your information for research purposes if you have Contributed to a Campaign, or otherwise agreed; or For our legitimate interests or the legitimate interests of others such as to ensure the security of our Sites, operate and improve our business and our Sites, respond to your questions, engage in certain marketing, make and receive payments, comply with our legal obligations, prevent fraud, conduct analysis, enforce our Terms, engage in a business change (e.g., sale, merger), to know User to whom we are providing the Service, and to create anonymous data. To protect the vital interests of the individual or others. For example, we may collect or share personal data to help resolve an urgent medical situation. Controls and choices In addition, Users in the European Economic Area and some other jurisdictions outside the United States have certain legal rights to obtain confirmation of whether we hold personal data about them, to access personal data we hold about them (including, in some cases, in portable form), and to obtain its correction, update, amendment or deletion in appropriate circumstances. They may also object to our uses or disclosures of personal data, to request a restriction on its processing, or withdraw any consent, though such actions typically will not have retroactive effect. They also will not affect our ability to continue processing data in lawful ways (for example, if you opt out of the use of your telephone number for direct marketing, we might still decide to contact you by phone regarding potential fraud on your account). Users in the European Economic Area have the right to opt-out of all our processing of their personal data for direct marketing purposes. To exercise this right, they may contact us. The rights and options described above are subject to limitations and exceptions under applicable law. In situations in which we process personal data on behalf of our User, we may refer the request to the relevant User and cooperate with their handling of the request, subject to any special contractual arrangement with that User. In addition to these rights, Users in the European Economic Area have the right to lodge a complaint with the relevant supervisory authority. However, we encourage you to contact us first, and we will do our very best to resolve your concern. How we protect your information and data retention The security, integrity, and confidentiality of your information are extremely important to us. We have implemented technical, administrative, and physical security measures that are designed to protect User information from unauthorized access, disclosure, use, and modification. We regularly review our security procedures to consider appropriate new technology and methods. Please be aware that, despite our best efforts, no security measures are perfect or impenetrable. We will retain your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law. To dispose of personal data, we may anonymize it, delete it or take other appropriate steps. Data may persist in copies made for backup and business continuity purposes for additional time. Data transfers, storage, and processing globally We operate globally and may transfer your personal information to third parties in locations around the world for the purposes described in this privacy policy. Wherever your personal information is transferred, stored or processed by us, we will take steps to safeguard the privacy of your personal information. Privacy Shield To bring you the Services, we operate globally. Eventgroove Fundraising complies with the EU-US and Swiss-US Privacy Shield principles (the “Principles”) regarding the collection, use, sharing, and retention of personal information from the European Union, United Kingdom, and Switzerland, as described in our EU-US Privacy Shield certification and Swiss-US Privacy Shield certification. If you have a Privacy Shield-related complaint, please contact us at support@eventgroovefundraising.com. As part of our participation in Privacy Shield, if you have a dispute with us about our adherence to the Principles, we will seek to resolve it through our internal complaint resolution process and under certain conditions, through the Privacy Shield arbitration process. Residents of the European Union, United Kingdom, or Switzerland may elect to arbitrate unresolved complaints but prior to initiating such arbitration, you must: (1) contact us and afford us the opportunity to resolve the issue; (2) seek assistance from our designated independent recourse mechanism above; and (3) contact the U.S. Department of Commerce (either directly or through a European Data Protection Authority) and afford the Department of Commerce time to attempt to resolve the issue. Each party shall be responsible for its own attorney’s fees. Please be advised that, pursuant to the Privacy Shield, the arbitrator(s) may only impose individual-specific, non-monetary, equitable relief necessary to remedy any violation of the Privacy Shield Principles with respect to the individual. Privacy Shield participants are subject to the investigatory and enforcement powers of the US Federal Trade Commission and other authorized statutory bodies. Under certain circumstances, participants may be liable for the transfer of personal information from the EU, United Kingdom, or Switzerland to third parties outside the EU, United Kingdom, and Switzerland. As required under the principles, when we receive information under the Privacy Shield and then transfer it to a third-party service provider acting on our behalf, Eventgroove Fundraising has certain liability under the Privacy Shield if both (i) the agent processes the information in a manner inconsistent with the Privacy Shield and (ii) we are responsible for the event giving rise to the damage. Learn more about the EU-US Privacy Shield and Swiss-US Privacy Shield. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://www.jamsadr.com/eu-us-privacy-shield. Children’s privacy People under 18 (or the legal age in your jurisdiction) are not permitted to use Eventgroove Fundraising on their own. Eventgroove Fundraising does not knowingly collect any personal information from children under the age of 13 and children under 13 are not permitted to register for an account or use our Services. If you believe that a child has provided us with personal information, please contact us at support@eventgroovefundraising.com. If we become aware that a child under age 13 has provided us with personally identifiable information, we’ll delete it. We do not knowingly process data of EU residents under the age of 16 without parental consent. If we become aware that we have collected data from an EU resident under the age of 16 without parental consent, we will take reasonable steps to delete it as quickly as possible. We also comply with other age restrictions and requirements in accordance with applicable local laws. Rights of California residents If you are a California resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information to third parties for the third parties’ direct marketing purposes. To make such a request, please send an email to support@eventgroovefundraising.com. Pursuant to California Civil Code Section 1798.83(c)(2), we do not share your personal information with third parties’ direct marketing use unless you elect that we do so. If you are a California resident under the age of 18, and a registered user of any site where this policy is posted, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information you have publicly posted. To make such a request, please contact us with a detailed description of the specific content or information to. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested. Changes to this Privacy Policy From time to time, we may change this privacy policy to accommodate new technologies, industry practices, regulatory requirements or for other purposes. We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent. Notice may be by email to you at the last email address you provided us, by posting notice of such changes on our sites and applications, or by other means, consistent with applicable law. Contact us If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this Site, please contact us at support@EventgrooveFundraising.com.