ITECHLAW PRIVACY POLICY 

ITechLaw is committed to protecting your privacy. This privacy policy (“Privacy Policy”) applies when you use the International Technology Law Association website (www.itechlaw.org), the online community Member Center (www.membercenter.itechlaw.org) and our mobile app, whether accessed via computer, mobile device or other technology, and any associated content, material, or functionality contained therein (collectively, the “Site”). This Privacy Policy describes what information ITechLaw collects about you on our Site, how we use the information we collect, with whom we may share it, and what choices you have regarding your use of our information. This Privacy Policy is compliant with the European General Data Protection Regulation (“GDPR”) and the data protection laws of California and Delaware. We encourage you to become familiar with the terms and conditions of this Privacy Policy.

About us 
In this Privacy Policy references to “ITechLaw” or “we” or “us” or “our” are to:

International Technology Law Association at 1660 International Drive, Suite 600, McLean VA, USA

ITechLaw is managed by MCI USA at 1660 International Drive, Suite 600, McLean VA, USA, a nonprofit management firm.

ITechLaw acts as data controller in respect of your personal information that we process.

If you have any questions about this Privacy Policy or our privacy practices, please contact us at memberservices@itechlaw.org.

Changes to our Privacy Policy 
This Privacy Policy was most recently updated in June 2018. We may change this Privacy Policy at any time. All updates and amendments are effective immediately upon notice to you, which we may give by any means, including, but not limited to, by posting a revised version of this Privacy Policy or other notice on the Site. We recommend reviewing this Privacy Policy often to stay informed of changes that may affect you.

Information We Collect 
ITechLaw collects information in two ways: (i) directly from you and (ii) automatically as a result of your use of the Site, in accordance with the sections below. The information ITechLaw collects, either from you or automatically, will be collectively referred to as “Collected Information” throughout this Privacy Policy.

• Information We Collect Directly from You

From Visitors to the Site
When you visit our site or contact us by e-mail or by using a web form, we may collect personal information about you, including but not limited to: contact information, such as your name, home or other physical address, email, telephone number, and any other information you choose to provide.

From Visitors who make a purchase on the Site
When you place an order using the Site, we may collect personal information about you, including but not limited to: contact information, such as your name, home or other physical address, email, telephone number; credit card information; and any other information you choose to provide.

From publically available sources
We occasionally use LinkedIn, Facebook, and Twitter to collect personal information about you, such as the city or country in which you reside or what type of law you practice.

• Information We Collect Automatically
  We may also collect information regarding how you interact with the Site, which may include pages you view, selections you make on the Site, features you use, preferences you set, your web browser type and version, the operating system type and version of the device you are using to access the Site, cookies, the Internet protocol (IP) address of the device you are using to access the Site (or any portion thereof), physical location, how you arrived at our site and Internet service provider.

How We Use the Information We Collect 

We may use the Collected Information for a variety of purposes, including without limitation:

• Administering, improving, maintaining, and supporting the Site;
• Processing your payment if you place an order using the Site;
• Organizing events and conferences;
• Maintaining records of Committee members;
• Maintaining records of event participants;
• Providing you with international legal updates, analysis, and insights;
• Communicating with you and respond to your inquiries, requests, or orders;
• Performing data analytics;
• Sending you the information you request from us and promotional materials regarding our projects and events;
• Creating a more personalized user experience;
• Engaging in marketing activities;
• Creating an aggregated data set; and
• Preventing fraudulent activity.

For each purpose, we must have a legal ground for such processing. In respect of your personal information, the legal grounds we rely on are:

• Our performance of a contract with you;
• Us having an appropriate business need to use your data, and such need does not overly prejudice you;
• You having given your explicit consent for us to use your personal information;
• Us having a legal or regulatory obligation to use your data; and
• The necessity to use your data to establish, exercise or defend our legal rights.

Sharing the Collected Information 
We share Collected Information with our internal teams and management firm via internal reports and via access to central IT systems.
We also disclose your personal information for the reasons and to the third parties listed below:

• As is necessary to allow our service providers or agents to provide services to us or on our behalf, including without limitation, for the development, hosting and maintenance of the Site, organizing events and conferences, filing VAT returns and for payment processing;
• If you are a member of ITechLaw, with other professional societies, publishers, or other organizations to provide member benefits such as notification of upcoming conferences, events, publications, or the like;
• If you are a member of ITechLaw, we will include part of your personal information in our public membership directory. Please note that via your member profile, you can opt-out of having  your information published online;
• As is required by law, such as to comply with a subpoena or similar legal process, with regulatory authorities or law enforcement agencies;
• When we believe in good faith that disclosure is necessary to protect our rights or property, investigate fraud or respond to a government request, with our professional advisers;
• In the event of a corporate transaction, including a merger, acquisition, financing, dissolution, or due diligence activities associated with any of the foregoing, of all or a portion of our assets;
• In the event of an insolvency, bankruptcy, or receivership, personal information may also be transferred as a business asset of ITechLaw;
• As you otherwise request or authorize; and
• As otherwise permitted by law.

Your Rights  
You have certain rights in relation to the personal information that we hold about you. You may exercise these rights at any time by contacting us using the contact details set out in this Privacy Policy.

Please note that in some cases we may not be able to comply with your request because of our own obligations to comply with other legal or regulatory requirements. We will however always respond to any request you make and if we cannot comply with your request, we will tell you why.

Your rights are: 

• The right to access your data
  You are entitled to a copy of the personal information we hold about you and certain details of how we use it. Your information will usually be provided to you in writing, unless otherwise requested, or where you have made the request by electronic means, in which case the information will be provided to you by electronic means where possible.
• The right to rectification
  We take reasonable steps to ensure that the information we hold about you is accurate and complete. However, if you do not believe this is the case, you can ask us to update or amend it.
• The right to erasure
  In certain circumstances, you have the right to ask us to erase your personal information.
• The right to restriction of processing
  In certain circumstances, you are entitled to ask us to stop using your personal information.
• The right to data portability
  In certain circumstances, you have the right to ask that we transfer any personal information that you have provided to us to another third party of your choice.
• The right to object to marketing
  You can ask us to stop sending you marketing communications at any time.
• The right to withdraw consent
  For certain uses of your personal information, we will ask for your consent. Where we do this, you have the right to withdraw your consent to further use of your personal information.
• The right to lodge a complaint with a supervisory authority
  You have a right to complain to the supervisory authority established in your EU Member State if you believe that any use of your personal information by us is in breach of applicable data protection laws and regulations. Making a complaint will not affect any other legal rights or remedies that you have.

Marketing Communications  
We may also use your personal information to provide you with information about the services we provide which may be of interest to you where you have provided your consent for us to do so. This information may includealerts, newsletters and invitations to events. We will communicate this to you in a number of ways including by post, telephone, email or other digital channels.

We are committed to only sending you marketing communications that you have clearly expressed an interest in receiving.  If you wish to unsubscribe from marketing communications sent by us or wish to change your settings, you may choose to do so at any time in one of the following ways:

• Correct, update, and delete your online account, if you have one;
• Change your choices for subscriptions and certain communications from within your online account;
• Choose whether to receive promotions and offers from us from within your online account;
• Request that we do not list your information in our membership directory; and/or
• Request that we do not share your personal information with third parties.

You may exercise such choices by contacting us via your online account, via memberservices@itechlaw.org, or by following instructions provided in our communications sent to you.

Please note that because we plan our communications in advance, it may take a few days for your request to become effective. If you continue to receive our communications after expressing an opt-out preference, please let us know so that we can investigate the situation.

Using the Site from outside the United States 
If you are visiting the Site, or any part thereof, from outside of the United States of America, please be aware that your information may be transferred to, stored or processed in the United States, where our servers are located and our central database is operated. By using any portion of the Site, you understand and consent to the transfer of your information to our facilities in the United States and those third parties with whom we share your information as described in this Privacy Policy.

How Long We Keep Collected Information 
We will only retain your personal information for as long as reasonably necessary to fulfill the relevant purposes set out in this Privacy Policy and in order to comply with our legal and regulatory obligations. Please contact us if you would like further information regarding the periods for which your personal information will be stored.

How We Protect Collected Information  
We take commercially reasonable technical and organizational measures to protect information transmitted by or stored on the Site. However, ITechLaw makes no representation or warranty as to whether the information you transmit to the Site will be intercepted by, or otherwise be received by, an unauthorized third party, and you transmit such information at your own risk. You agree to immediately notify us of any breach of Site’s security, this Privacy Policy, or the Terms of Use of which you become aware.

California Privacy Rights  
Under California law, California residents have the right to request in writing from businesses with whom they have an established business relationship, (a) a list of the categories of personally identifiable information, such as name, e-mail, and mailing address, and the type of services provided to the customer, that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes and (b) the name and address of all such third parties.  To request the above information, please email us at: memberservices@itechlaw.org with a reference to California Disclosure Information.

California and Delaware “Do Not Track” Disclosures 
California and Delaware law require ITechLaw to indicate whether it honors “Do Not Track” settings in your browser concerning targeted advertising. ITechLaw adheres to the standards set out in this Privacy Policy and does not monitor or follow any Do Not Track browser requests.

Children 
The Site is intended for a general audience and is not intended for use or view by children under 16 years of age without parental consent, and we do not knowingly collect information about children or sell products to children.  We will not knowingly collect any information from children under the age of 16.  If you are under the age of 16, you must ask your parent or guardian to assist you in using the Site.

Links to Third-Party Websites and Social Media Platforms 
The ITechLaw Site often contains links to other web sites and social media platforms (collectively, “Linked Sites”). ITechLaw is not responsible for the security of any Linked Sites, or for the terms of use or privacy/security policies of any Linked Sites, even if you link to them from our Site. This Privacy Policy does not apply to any Linked Sites.  It is your responsibility to review the Linked Sites for policies and practices of concern to you. Furthermore, any information, communications, or material of any type or nature that you submit to any of our pages contained on a social media platform or website by e-mail, posting, messaging, uploading, downloading, or otherwise is done at your own risk and without any expectation of privacy.