Effective Date: [August 1, 2018].

This Privacy Statement describes the practices of the Cross-Border Data Forum (“CBDF”, “we” or “us”) with respect to personal information we collect through our websites and mobile applications that display or link to this Statement (the “Sites”).

Collection of Personal Information
How We Use Personal Information Collected through the Sites
Sharing of Personal Information
Your Choices and Rights
Information Security
Transfers of Personal Information
Linked Sites
Changes and Questions

Collection of Personal Information
We collect personal information that you provide when you visit our Sites. For example, we collect personal information about you when you:

• Sign up to receive advisories, articles, announcements or other communications;
• Register for an event; or
• Submit a comment, question or otherwise communicate with us through the Sites.

The personal information we collect may include your first and last name, contact information including email address, communication preferences, and other information you submit through the Sites.

We also collect certain information automatically when you visit our Sites (“Technical Information”). Technical Information includes information such as the IP address of your device; the type of browser, device and operating system you use; other identifiers associated with the device you use to access our Sites; items you download from our Sites or videos you watch; the pages you visit and the features you use, including dates and times; and if you navigated from or navigate to another Web site, the address of that Web site. We may collect Technical Information through the use of cookies, clear gifs, web beacons, local shared objects, Flash cookies or other tags, identifiers or technologies as they may become available or change over time (collectively “Cookies”). We permit third parties to collect information on the Sites through Cookies and through embedded objects (such as a video player). Third parties may use the information that they collect for their own purposes subject to their own privacy notices. This information may include personally identifiable information about your activities over time and across different websites when you visit or use our Sites. You can learn more about specific services which may set Cookies when you visit our Sites, including privacy and opt-out options, through our Cookies Notice.

Information collected, including through Cookies by us and by third parties, includes Technical Information, information regarding the total number of visitors to our Sites, the number of visitors to each page of our Sites, whether visitors share our Sites with others, and the domain names of our visitors’ Internet service providers. Through a service such as Google Analytics, tracking this information enables us to perform analytics to understand our website audience better. In connection with Google Analytics, we have taken steps designed to mask IP addresses. This measure aims to prevent data collected by Google Analytics from containing your complete IP address when that data is permanently stored by Google. We may also collect information regarding the effectiveness of our email or other communications, such as whether you open an email we send to you. To learn more about specific services which may set Cookies when you visit our Sites, including privacy and opt-out options, please see our Cookies Notice.

How We Use Personal Information Collected through the Sites
We use personal information we collect through our Sites to contact you, to provide you with information that you have requested, to provide features on our Sites, to provide additional information which we believe may be of interest to you, to perform an activity you have requested, to enhance or improve the Sites, for security purposes, or otherwise to operate our Sites and organization.

Sharing of Personal Information
We may share personal information with third parties in the following circumstances:

• When authorized by you.
• With service providers retained to perform services on our behalf or in connection with activities on our Sites.
• With our fellows, members, and advisors
• To enable features of our Sites that allow you to interact or communicate with others. For example, we may provide the ability to share public comments on our Sites. Your personal information may be shared in this case. If we are required to do so by law, pursuant to legal process or in response to a request from law enforcement authorities or other government officials.
• When we believe disclosure is necessary or appropriate to prevent harm, fraud or theft, to protect our rights and properties and those of others, or in connection with an investigation of suspected or actual illegal activity.
• In connection with the sale or transfer of all or a portion of our organization or assets to a third party.

Your Choices and Rights
You may unsubscribe from advisories, articles, announcements and other promotional emails received from us by following the unsubscribe link included at the bottom of each such email or by contacting us at unsubscribe@crossborderdataforum.org. Please note that you may continue to receive non-promotional communications to the extent permitted by law.

Your browser and your device may enable you to limit the use of cookies and other technologies used to collect Technical Information. You should consult documentation for your browser or device for more information about exercising these options. Please note that you may not be able to use all the features of our Sites if you limit the Technical Information you share with us. In addition, our Sites are not designed to respond to “do not track” requests from browsers or other mechanisms that provide consumers the ability to exercise choice regarding the collection of personally identifiable information about an individual consumer’s online activities over time and across third-party Web sites or online services.

To request details of the personal information we hold about you or to delete or rectify any inaccurate personal information about you, please contact us at privacy@crossborderdataforum.org. We will handle any such request in accordance with applicable law. Please note that we may take reasonable steps to verify your identity before implementing your request.

Information Security
We maintain administrative, technical and physical safeguards for the Sites designed to protect against loss or misuse of the personal information we collect through our Sites. The use of the Internet creates inherent information security risks, and we are not able to guarantee the security of our Sites.

Transfers of Personal Information
We may transfer the personal information we collect through the Sites to countries with laws that may be deemed not to provide the same level of data protection as the laws in the country in which you reside. Please note that our primary data processing facilities are located in the United States of America.

Linked Sites
The Sites may include links to sites operated by external third parties. The inclusion of a link to a third party site does not imply our endorsement of the site or the products and services offered at such site. Please note that this Privacy Statement does not apply to any third party sites. You should consult privacy policies of each site you visit.

Changes and Questions
We may revise this Privacy Statement from time-to-time. Please check this page periodically for changes.

If you have questions about this Privacy Statement or our practices with respect to personal information, please send your request to privacy@crossborderdataforum.org.