Website Privacy Policy

Last Updated:  June 27, 2019

1. SCOPE OF THIS PRIVACY POLICY

   This Privacy Policy describes the types of personal information Cabarrus County Tourism Authority d/b/a Cabarrus County Convention & Visitors Bureau (“CCCVB,” “us” or “we”) collects through cdf.rajcmmementos.com and/or www.cabcocvb.com (each, a “Site” and together, the “Sites”), and how we collect, use, and share that information. This Privacy Policy does not govern our collection of personal information through any other website or other means, other than through the Site.

   Our processing of personal data, such as your name, address, e-mail address, or telephone number, shall be undertaken consistent with the requirements of applicable privacy laws, including, but not limited to, the General Data Protection Regulation (“GDPR”). The purpose of this Privacy Policy is to provide to users and potential users of our website information about the nature, scope, and purpose of the personal data we collect, use and process and to advise data subjects of their rights. Whether we serve as the data controller or processor, CCCVB has implemented numerous technical and organizational measures to ensure the protection of personal data processed through the Site. However, Internet-based data transmissions may in principle have security gaps, so please understand that absolute protection is not assured.

   By using the Site, you accept and expressly agree to our practices surrounding the collection, use, and sharing of personal information provided by you in the manner described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, you cannot, and we do not authorize you to, access, browse, or use the Site.

2. PERSONAL INFORMATION WE COLLECT
   1. Information You Give Us

      CCCVB is committed to adhering to the Digital Advertising Alliance self-regulatory principles (“DAA Principles”) that govern best practices for Interest-based and Internet-based advertising (“IBA”). Our use of IBA is described in more detail below. Consistent with DAA Principles, if you would like to opt-out from such third-party data collection for use in IBA, please visit the Digital Advertising Alliance Consumer Choice Page at www.aboutads.info/choices.

      Except for physical location information and tracking technologies (as described below), you do not have to give us any personal information to browse this Site. However, you may be asked to provide personal information to submit or request information from us, or to use the services offered through this Site. Once you provide us with your personal information, you are no longer anonymous to us. This information may include:

      • Registration Information. When you sign up to receive information from us, you are required to provide information such as your name, the name of company for which you work and your title, street address, telephone number, email address, age, and interests.
      • Additional Information. Additional information that you provide to us, including through feedback, testimonials, pictures you upload, messages, emails, and answers to surveys or questionnaires that you may submit.
   2. Location Information
      In order to access and use certain areas or features of the Site, you consent to our collection and use of your physical location information if you use the Site on a location-enabled device (including GPS, cellular, and Wi-Fi networks) or from your browser.
   3. Automated Information Collection

      In order to access and use certain areas or features of the Site, you consent to our collection and use of certain information about your use of the Site through the use of tracking technologies or by other passive means. Your consent to our access and use of this “passively collected” information includes, but is not limited to, the domain name of the website that allowed you to navigate to the Site, search engines used, the internet protocol (IP) address used, the length of time spent on the Site, the pages you looked at on the Site, other webpages you visited before and after visiting the Site, the type of internet browser you have, the frequency of your visits to the Site, and other relevant statistics, including the following:

      • Log Information. When you access the Site, you also consent to our servers automatically recording information that your browser sends whenever you visit a website. These server logs may include information such as your web request, IP address, browser type, browser language, the date and time of your request, your computer operating system, mobile device and mobile operating system, name of your internet service provider or your mobile carrier, and one or more cookies (small text files containing a string of characters) that may uniquely identify your browser. Our servers also automatically record what you click on while visiting the Site.
      • Location Information. You consent to our receipt of location data passed to us from location-enabled devices or that you have enabled, from your browser, or from third-party services.
      • Links. The Site may include links in a format that enables us to keep track of the IP addresses from which these links have been followed. You further consent to our collection and use this information to improve the quality of our Site, product(s) and CCCVB business operations.
      • URLs. When you visit or access the Site, you consent to our receipt of the URL of the site from which you came and links you click on to leave the site.
      • Cookies. When you visit or access the Site, you consent to our use of one or more cookies (small text files containing a string of characters) to your computer that uniquely identifies your browser. We use cookies to improve the quality of the Site by storing user preferences tracking user trends, and providing personalized content and ads. Most web browsers accept cookies automatically, but can be configured not to do so or to notify the user when a cookie is being sent. If you wish to disable cookies, refer to your browser help menu to learn how to disable cookies. Please note that if you disable cookies, you may not be able to use some customized features available through the Site. For more information on our Cookie Policy, including an opt-out, please visit  cdf.rajcmmementos.com/cookie-policy.
      • Web Beacons. Our Site may contain electronic images known as web beacons (also called single-pixel GIFs and transparent graphic images) that we use to help deliver cookies on our sites, count users who have visited those sites, deliver services, and analyze the effectiveness of our promotional campaigns, for example. We may also include web beacons in our marketing email messages or newsletters to determine whether an email is opened or if links are clicked. You consent to our use of web beacons to facilitate Site administration and navigation, to track the actions of users of the Site, to compile aggregate statistics about Site usage and response rates, and to provide an enhanced online experience for visitors to the Site.
      • Aggregate Information. We may compile certain personal information and other information collected through the Site on an aggregate basis. This information may include, without limitation, the number of people who have visited the Site and other user demographics. Such aggregate information does not identify you individually.
3. HOW WE USE PERSONAL INFORMATION

   CCCVB complies with its obligations under applicable privacy laws by: keeping personal data up to date where needed based on the purposes for which the personal data is being processed; by not collecting or retaining excessive amounts of data; by ensuring that appropriate technical measures are in place that are designed to protect personal data from loss, alteration, misuse, unauthorized access and disclosure as it is transmitted, stored, or otherwise processed, and by using appropriate measures to securely destroy personal data when it is no longer needed by CCCVB.

   Personal information collected through the Site may be used by us and our affiliates for purposes of:

   • Responding to your questions and feedback;
   • Providing the services you select through this Site;
   • Contacting you, whether by email, postal mail, or telephone with information about this Site, our products, or our services;
   • For such purposes as you may authorize at the time you submit the information;
   • Auditing, research, and analysis to maintain, protect, and improve this Site and our services;
   • Ensuring the technical functions of our network;
   • Improving and customizing the content and layout of the Site;
   • Developing new products and services; or
   • Compiling personal information and other information collected through the Site on an aggregate basis.
4. PERSONAL INFORMATION WE SHARE

   We do not sell, rent, trade, or otherwise share personal information collected through the Site, except as described below:

   • Subsidiaries and Affiliates. We may share personal information with our subsidiaries and affiliates for the purposes for which you provided the information or as reasonably necessary for our internal administrative and business purposes.
   • Service Providers. We work with third parties that provide services on our behalf. Such services may include website hosting, marketing, and website usage analytics. We may share personal information and non-personal information with these third parties for the purpose of enabling them to provide these services.
   • Consent. We may share personal information in accordance with any consent you provide.
   • Required by Law. We may disclose personal information or any information collected through this Site if we are required to do so by law or pursuant to legal process, in response to a request from government officials or law enforcement authorities, or as necessary or appropriate in connection with an investigation of illegal activity.
   • Certain Transactions. We may disclose or transfer personal information or any information collected through this Site to third parties who acquire all or a portion of our business, whether such acquisition is by way of merger, consolidation, or purchase of all or a portion of our assets, or in connection with any bankruptcy or reorganization proceeding brought by or against us.
   • Internet Based Advertising. We may participate in Interest-based and interest-based advertising. This means that you may see advertising on the Site tailored to how you engage or browse, or you may see advertising for us on other websites, applications and social media based on your behavior across websites, applications and social media. We may target ads based on data we have collected, or data provided by third parties alone or in combination with the data we collect ourselves. If you choose to interact with specific third parties who advertise through the Site, the information you provide to them is subject to the conditions of their specific privacy policies.In connection with the foregoing activities, third parties, often called “ad servers” or “ad networks,” may place and access cookies, web beacons, or other tracking technology on your device to collect information about your use of the Site and your use of third-party sites. The information about your use of the Site may be combined with information about your use of third-party websites to provide targeted advertisements and content that may be of interest to you (this is known as “interest-based advertising”). The information they collect from the Site may identify you personally, or they may associate it with personal information collected in other ways or received from other third parties. We do not control these third parties or their use of cookies, web beacons, or other tracking technology. By using the Site you agree to usage tracking and targeted interest-based advertising. If you do not wish to have cookies track your usage for these purposes, please visit our Cookie Policy at cdf.rajcmmementos.com/cookie-policy for information regarding how to refuse all or some browser cookies, or do not use the Site. Some advertisers may provide you with the choice to opt-out of having your information used for interest-based advertising. If you would like more information about interest-based advertising, or for information about how to opt-out of interest-based advertising, please visit the Network Advertising Initiative’s (“NAI”) consumer website at http://www.networkadvertising.org/understanding-online-advertising, and in particular, NAI’s Ad Network “Opt-Out” page at http://www.networkadvertising.org/choices/. Even if you opt-out of interest-based advertising, we may still collect and use information about your use of the Site to the extent otherwise permitted by this Privacy Policy (such as to analyze Site traffic and usage, conduct website analytics, administer the Site, etc.). In addition, if you opt-out of receiving interest-based advertising from a particular advertiser, the advertiser may still provide advertisements to you, but the ad will not be targeted to you based on your online activities. For additional assistance with opting-out, please contact us directly at [email protected].
5. AGGREGATE INFORMATION
   We may compile de-identified personal information and other information collected through the Site on an aggregate basis. This information may include, without limitation, the number of users who have registered for the Site and demographic information about users of the Site. Such aggregate information does not identify you individually. We may use aggregate information and share aggregate information with third parties for any of the purposes specified in this Privacy Policy, and for any other lawful purpose.
6. YOUR CHOICES
   1. Information You Provide
      You can always choose whether or not to provide information on the Site. However, if you choose not to disclose certain information, you may not be able to access to certain portions of the Site or receive certain products or services.
   2. Communications From Us
      If at any time you decide that you no longer wish to receive notices from us regarding the Site, you may indicate this preference by clicking the “unsubscribe” button at the bottom of any previous communication from us or by contacting us at [email protected].
   3. Do Not Track
      As described in more in our Cookie Policy located at cdf.rajcmmementos.com/cookie-policy, you can configure your browser not to accept cookies or to notify you when a cookie is being sent.
   4. Your Rights and Your Personal Data

      Unless subject to an exemption under the GDPR, if your personal data is subject to the GDPR, you have the following rights with respect to your personal data:

      • The right to request a copy of your personal data which the CCCVB holds about you;
      • The right to request that the CCCVB correct any personal data if it is found to be inaccurate or out of date;
      • The right to request your personal data be erased where it is no longer necessary for CCCVB to retain such data;
      • The right to withdraw your consent to the processing at any time of personal data to which you provided consent for processing;
      • The right to request that CCCVB provide you with a copy of your personal data and where possible, to transmit that data directly to another data controller (known as the right to data portability);
      • The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction be placed on further processing;
      • The right to object to the processing of personal data (where applicable); and
      • The right to lodge a complaint with a data supervisory authority.
   5. Transfer of Data Abroad

      If your personal data is subject to the GDPR, CCCVB will transfer personal data from the European Economic Area (EEA) to a location outside the EEA only when there has been a documented adequacy determination, or where CCCVB has confirmed adequate privacy protections. If CCCVB transfers personal data to a third party acting as an agent of CCCVB, we will also obligate the third party to have adequate privacy protections in place.

      CCCVB may transfer personal data to and on behalf of clients and third party’s with whom CCCVB has an existing service agreement or as part of our legal obligations, each of which shall be subject to CCCVB policies, and only to the extent necessary for purposes of legitimate interests pursued by the data controller (or by a third party).

   6. Automated Decision Making
      Under the GDPR, data subjects have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her, as long as the decision (1) is not is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) is not authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) is not based on the data subject’s explicit consent. We do not engage in automated decision making.
   7. Further processing
      If we wish to use your personal data for a new purpose, not covered by this Privacy Policy, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
7. INFORMATION STORAGE AND SECURITY
   We employ, and require our third party vendors to employ, reasonable security precautions to help protect against the loss, misuse, and alteration of personal information provided on or through the Site. However, no method of transmitting or storing data is completely secure. As a result, although we strive to protect personal information about you, we cannot guarantee the security of any information you transmit to us through or in connection with the Site. If you have reason to believe that personal information is no longer secure, please notify us immediately by contacting us in accordance with the last section below.
8. A SPECIAL NOTE ABOUT CHILDREN AND CALIFORNIA RESIDENTS

   Children are not eligible to use the Site, and we ask that minors (children under the age of 16) not submit any personal information to us. If you are a minor, you can use the Site only in conjunction with your parents or guardians.

   If you are a California resident, you have the right, pursuant to Section 1798.83 of the California Civil Code, to receive once a year, free of charge: (1) information identifying each third party company to whom we may have disclosed, within the past year, personal information pertaining to you for that company’s direct marketing purposes; and (2) a description of the categories of personal information disclosed to that third party company in the immediately preceding calendar year. If you are a California resident and would like to make this request, please call 1.888.207.4588. In addition, please refer to the Section of this Privacy Policy entitled “Information Collection & Use.”

9. EXTERNAL LINKS
   The Site may contain links to various websites that we do not control. When you click on one of these links, you will no longer be transacting business through the Site. Third party websites maintain their own privacy policies, and we do not exercise any control over any of the third party websites that may be linked to the Site. If you visit a website that is linked to the Site, you should consult that website’s privacy policy before providing any personal information. Please be aware that we are not responsible for the privacy practices of such other websites, and we are not liable for their misuse of personal information about you.
10. SPECIAL ADMONITIONS FOR INTERNATIONAL USE
    The Site is hosted in the United States. All matters relating to the Site are governed exclusively by the laws of the State of North Carolina in the United States of America and not the jurisdiction in which you are located. If you are located outside of the United States of America and you contact us, please be advised that any information you provide to us will be transferred to the United States of America and that by submitting information, you explicitly authorize such transfer.
11. UPDATES TO THIS PRIVACY POLICY
    We may change or update the Site or any of our policies and procedures without prior notice, except that if any changes are likely to have an adverse impact on your rights under data protection law, we will use reasonable efforts to notify you of the changes in advance in writing or by post mail, and, where required, obtain your consent to our activities. We will post a notice on this Site to advise you of any significant changes to this Privacy Policy and indicate via the “Last Updated” legend in this Privacy Policy when it was most recently updated. Except to the extent that your express consent to any change or update is required under data protection law, your continued use of the Site signifies your continued assent to the terms of this Privacy Policy, as updated or amended at that time.
12. QUESTIONS REGARDING THIS PRIVACY POLICY
    If you have any questions or comments regarding this Privacy Policy, please send us an email at [email protected].
    If your personal data is subject to the GDPR, the data controller for the purposes of GDPR or other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:
    Cabarrus County Convention & Visitors Bureau
    10099 Weddington Road Ext.
    Suite 102
    Concord, NC 28027
    Email: [email protected] Any data subject may, at any time, contact us directly with any questions and suggestions concerning data protection. We encourage interested persons to raise any concerns about the collection, use, or processing of personal data using the contact information provided above. In the event of a privacy related issue or complaint, we will investigate and attempt to promptly resolve any complaints and disputes regarding use and disclosure of personal data.For complaints that cannot be resolved, if your personal data is subject to the GDPR, we commit to cooperating with the panel established by the EU data protection authorities (DPAs) or the Swiss Federal Data Protection and Information Commissioner (FDPIC), as applicable, and comply with the advice given by the DPAs or FDPIC about personal data transferred from the EU or Switzerland.In order to facilitate the handling of complaints, individuals in the EU can choose to contact their national DPA or use the form located at this link:
    http://ec.europa.eu/newsroom/document.cfm?doc_id=42962

    Individuals in Switzerland can contact the Swiss FDPIC by visiting:
    http://www.edoeb.admin.ch/edoeb/de/home.html
    This independent dispute resolution process is provided at no cost to the individual.