Effective Date: August 31, 2022
ON LOCATION – PRIVACY POLICY
On Location SAS, a company organized and existing under the laws of France (Company Number 901 328 013) having its registered office is located at 20, rue de la Baume, 75008 Paris, France (“On Location”) is a premier hospitality and enhanced experiences company and we and our partners are part of On Location Events, LLC and Endeavor Group Holding, Inc.
On Location has been designated as the official hospitality provider by the Paris 2024 Organising Committee for the Olympic and Paralympic Games (“Paris 2024”), along with the International Olympic Committee (“IOC”). This policy, as updated from time to time, applies only to personal information processed by or on behalf of On Location. On Location shares some of your information with Paris 2024 and the IOC. In this context, Paris 2024, the IOC and On Location, shall be the separate controllers of that data shared with them. Their respective privacy policies (accessible here: Paris 2024 ; IOC) set out how they will use this information.
The present privacy policy (“Privacy Policy”) describes how we (On Location) use the data (which may include personal information) we collect about you offline and through our digital properties such as websites, apps, or other content or service delivery mechanism (“Site(s)”) when: you create an account, make a reservation, request support, chat, send us a message, or otherwise communicate or interact with us via our websites or app, when you buy a ticket or other merchandise from us online or onsite, when you view or interact with content on our online channels, and when you otherwise interact with us, including our social media, marketing, contests, sweepstakes, and surveys (collectively our “Service(s)”).
Please read this Privacy Policy carefully to understand how we handle your information. This Privacy Policy (together with our Terms of Use, Cookie Policy and any other documents referred to therein) provides information on the data we collect from you, or that you provide to us, and how we process it. Please read this policy carefully before you provide us with your personal information. This Policy provides detailed information about when and why we collect your personal information, how we may use it, and how we keep it secure. This policy works in conjunction with the Cookie Policy and Terms of Use. It covers what we collect from you or your use of the Services, it does not apply to information that you provide or have provided to other websites or social media or that has come from public sources. This policy also provides information about your privacy rights and to how to request and enforce them.
WHO WE ARE
HOW WE COLLECT INFORMATION ABOUT YOU
INFORMATION WE COLLECT AND HOW WE USE IT
DISCLOSURE OF YOUR INFORMATION
MARKETING AND ADVERTISING
COOKIES
DO NOT TRACK
STORAGE AND TRANSFER OF INFORMATION
CALIFORNIA
NEVADA
OPTING OUT OF THE SALE OF PERSONAL INFORMATION ABOUT YOU
EU AND UK
BRAZIL
MEXICO
INDIA
JAPAN
SOUTH KOREA
CHINA
SECURITY
LINKS TO THIRD PARTY WEBSITES
UPDATES
CONTACT
WHO WE ARE
We are On Location.(“we”, “us”, “our”). We are also part of Endeavor Group Holding, Inc. and may share data (as described further below) with its affiliated entities (collectively, “Endeavor”).
Like any company, we use a variety of third party businesses and partners to market and provide our Services to you. Some of those companies are part of Endeavor, and some are third parties (e.g., event organizers, sporting associations, artists, etc.) that we partner with or support our operations so we can provide the best experience to you.
HOW WE COLLECT INFORMATION ABOUT YOU
Directly From You
You may provide us with personal information in a number of ways, namely when you:
- Access our Sites, applications, and other digital channels by signing up, creating accounts (including using social media login), filling out forms, using chat services, commenting, or otherwise engaging with our online Services;
- Purchase a product from us;
- Communicate with us by e-mail or phone;
- Subscribe to e-mails, newsletters, or other features made available on our Sites or apps from time to time;
- Report a problem or request support for any of our Services;
- Apply to, register for, inquire about or participate in our programs or events;
- Buy a ticket or merchandise from us;
- Interact with our social media accounts;
- Participate in our contests, promotions, sweepstakes or surveys;
- Interact with technology platforms we make available to you;
- Subscribe to or otherwise view our content online, including any of our online social media channels official videos, or participate in any of our online streaming events;
- Attend any event using our Services (e.g. ticket scanning, CCTV, and other on location interactions you may have with us);
- Interact with us in person at events; and
- Interact with us during your time at our events.
Information We Collect From Other Sources
We work closely with our affiliates that are part of Endeavor to provide our Services, market to you and to provide a seamless service across different businesses. As such we receive from such affiliates, personal information such as name, email, phone number or address.
We work closely with third parties and may receive personal information about you from them such as: technology, customer support service partners, and other service providers (to seamlessly provide our services to you), fraud prevention and cybersecurity companies (that protect our Services and information from fraud or other cyber threats), event registration companies and venue providers (that enable you to register for our events, and host events and provide various marketing, advertising, customer support, and security services related to events), cookies and similar tracking technologies (information that is automatically collected when you visit our Sites), medical services partners (that assist in providing medical services (e.g. medications, allergies, emergency care, etc.), marketing, media and digital content partners (IP addresses and email addresses to market our products and services and create additional audiences for our Services), partners and sponsors (who partner with us or sponsor our events), performance technology platforms (to enhance our service offering to you by providing performance statistics and analytics), ticketing providers (that provide services supporting our sale of tickets for our events), promotions companies (who assist in operating and managing promotions), reservation booking platforms, advertising networks (such as Google/Bing), analytics providers, payment providers and processing companies (that process your purchases of our Services and fulfil your payments on our behalf, by providing us with your billing and purchase information), e-commerce platforms (that provide platforms enabling you to purchase our Services (e.g., merchandise, tickets to events, etc.) and fulfil your orders on our behalf), lead generation partners (which provide us with your information if you are interested in receiving our Services or communicating with us), directly managed hotels and travel bookings (that enable us to facilitate your travel to/from our events), and third party data providers (that provide us with information regarding individuals interested in our Services or the services of our affiliates).
We may also receive and display personal information and content which is or you make publicly available on your social media account when you use social media logins for our Services or interact with any of our content (such as contests or when you post using one of our promoted hashtags).
Some of our key partners, who we receive data from and may share some data with (see “DISCLOSURE OF PERSONAL INFORMATION” section below), include:
- E-commerce platforms and services
- Media and digital content partners.
- Ticket sellers and ticketing platforms around the world who sell tickets to events
INFORMATION WE COLLECT AND HOW WE USE IT
This is the generally applicable portion of the Privacy Policy. If you are located in California, Nevada, the European Economic Area, the United Kingdom, Brazil, Mexico, India, Japan, South Korea or China, please also refer to the jurisdiction-specific section below that is relevant to you. If there is any conflict between the generally applicable portion and the jurisdiction-specific section, the jurisdiction-specific section shall prevail in the event that you are located in such a jurisdiction.
Categories of personal information collected | Business or commercial purposes for collection, use, and sharing personal information | Affiliates/Categories of third parties with whom personal information is shared for a commercial or business purpose | Affiliates/Categories of third parties with whom personal information is sold for CCPA purposes |
Personal and online identifiers (such as first and last name, email address, date of birth, phone number, country of residence, usernames, unique online identifiers, address, business or organization information (B2B)) | To provide and improve the Services Personalize the Services To provide customer support Marketing and targeted advertising Security and fraud prevention | Customer support partners E-Commerce vendors Endeavor IOC Paris 2024 Analytics services Technology service providers
| Endeavor IOC Paris 2024
|
Financial account information (such as credit card numbers, bank account information, Paypal account information) | To provide the Services To sell you merchandise and/or tickets Security and fraud prevention | E-Commerce vendors Payment providers Fraud prevention and cybersecurity companies Endeavor | Endeavor
|
Personal Information categories listed in the California Consumer Records statute (e.g., Government IDs, such as driver’s license or passport) | To provide travel related services, such as when you stay at hotels. To comply with our obligations with the French government who may also run background checks on people receiving certain credentials. | Endeavor
| Endeavor
|
Customer Profile Information (such as gender, age range, income range, ad demographics, business sector) | To provide and improve the Services Personalization of the Services Direct marketing Targeted advertising Analytics Research and development Security and fraud prevention
| Endeavor IOC Paris 2024 Analytics services Technology service providers
| Endeavor IOC Paris 2024
|
Commercial and transactional Information (such as ID client, ID order, status order, date of order, time of order, ID package ordered (requested and / or bought), number of package ordered (requested and / or bought), ticket category, type of ticket, group size, package price payment method, billing address, marketing, privacy policy and purchase policy consents) | To provide and improve the Services To provide customer supportAnalytics Research and Development Security and fraud prevention
| Endeavor IOC Paris 2024 Analytics services Technology service providers E-Commerce Vendors Fraud prevention and cybersecurity companies Customer Service Partners | Endeavor IOC Paris 2024
|
Communications with you (such as customer support messages, emails, chatbots, social media posts) | To provide and improve the Services To provide customer supports | Endeavor IOC Paris 2024 Analytics services Technology service Providers E-Commerce vendors Customer Service Partners | Endeavor IOC Paris 2024
|
Internet Activity Information (such as browsing history, search history, interactions with a website, email, application, incoming url, pages visited, ip address, session duration, clicks made, type of device, or advertisement) | To provide and improve the Services Personalization of the Services Direct marketing Targeted advertising | Endeavor IOC Paris 2024 Technology service providers Analytics services | Endeavor IOC Paris 2024 |
Non-Precise Geolocation information (such as zip or area code, state, country) | To provide and improve the Services to you Personalization of the Services Fraud prevention and cybersecurity Direct marketing Targeted advertising | Endeavor IOC Paris 2024 Technology service providers
| Endeavor IOC Paris 2024 |
Precise Geolocation (such as full address or specific location while at an event) | To provide and improve the Services to you Personalization of the Services Direct Marketing Fraud prevention cybersecurity | Endeavor Technology service providers
| Endeavor
|
Sensory information (such as audio, video, photos, electronic, visual, or similar information) | To provide and improve the Services, for example, when you interact with certain apps, events, including, uploading of photos and videos Personalization of the services Marketing and promotion of the Services Enhancing live event experiences Research and development | Endeavor Technology service providers
| Endeavor
|
Dietary Preferences | To provide and improve the Services Personalization of the Services
| Endeavor
| Endeavor
|
Inferences drawn from the above information about your predicted characteristics and preferences | To provide and improve the Services Personalization of the Services Direct marketing Targeted advertising Analytics | Endeavor IOC Paris 2024 Technology service providers Analytics companies
| Endeavor IOC Paris 2024 |
Other information about you that is linked to the personal information above | To provide and improve the Services Personalization of the Services | Endeavor IOC Paris 2024 | Endeavor IOC Paris 2024 |
We may also use personal information we have about you
- as necessary if we believe there has been a breach of the Purchase Policy, Terms of Use, the Paris 2024 Ticketing Terms and Conditions or the rights of any third party,
- as necessary to assist in the investigation of potential criminal activity or other activity that is in violation of our rules, regulations and policies,
- to comply with legal and regulatory requirements.
We combine personal information we receive from other sources with personal information you give to us and personal information we collect about you. We use this combined information for the purposes set out above. We may use data that has been anonymized or aggregated without limitation in a lawful manner.
DISCLOSURE OF PERSONAL INFORMATION
We do share personal information with Endeavor, the IOC and Paris 2024, and the other categories of partners as listed above. Some of these disclosures of personal information may constitute a sale of personal information under certain data privacy laws (i.e. CCPA). Accordingly, we offer the option for you to opt out of the transfer or sale of personal information, as further set forth below.
The IOC and Paris 2024, as independent data controllers of your personal data, will utilize or share your personal data among them and their affiliates, where necessary and where there is a legal basis for processing.
We may also disclose personal information to third parties:
- if we evaluate or enter into negotiations to buy, sell, or merge with any business or assets, or if we enter into bankruptcy, reorganization, or receivership, or some similar proceeding in which case we may disclose personal information about you to the prospective or eventual seller or buyer of such business or assets;
- if we are under a duty to disclose or share personal information about you in order to comply with any legal obligation, or in the event of an emergency, or in order to enforce or apply our applicable Terms of Use, registration documents, and other agreements, or to protect the rights, property, or our safety or of, Endeavor, our customers, clients or others; and
- to any other third party not covered in this policy with your prior consent.
MARKETING AND ADVERTISING
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
Promotional offers from us
We may use the information we have collected from you to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.
You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have not opted out of receiving that marketing.
Third-party marketing
We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.
COOKIES
We and trusted third parties use cookies and similar technologies on the Site to collect and process personal information. For more information, please see our Cookie Notice. You can change your preferences by interacting with the cookie banner on our Site and selecting “Cookie Settings.”
DO NOT TRACK
Some web browsers may transmit “do-not-track” signals to the websites with which the user communicates. Like many websites, our Sites are not currently able to respond to these “do-not-track” signals. To learn more about “do-not-track” signals, you can visit http://www.allaboutdnt.com/.
STORAGE AND TRANSFER OF INFORMATION
We operate the Services and store personal information about you in and from a number of different jurisdictions, including the United States, the United Kingdom (the “UK”) and European Economic Area (the “EEA”). The personal information that we collect from you will be transferred to and stored at/processed in countries outside of your location. Personal information about you is processed by staff operating outside of your respective country who work for us or our third party service providers. Personal information about you may be disclosed in response to inquiries or requests from government authorities or to respond to legal process in the countries in which we operate and/or store personal information about you. We will take steps reasonably necessary to ensure that your information is treated securely and in accordance with this Privacy Policy. For any transfers outside the UK or EEA, we transfer information to be able to perform our Services under our contract with you. In order to comply with applicable laws and their requirements on international data transfers, we may ask you for consent to such transfer or, where possible, we will enter approved model contracts like the European Commission’s model contracts, and, in any cases, we will provide appropriates safeguards required by laws for the transfer of personal information to third countries (i.e. the standard contractual clauses), or, for transfer out of the UK, China, Russia and other countries, any similar model contracts approved by the relevant authorities with entities we share your data with.
JURISDICTION SPECIFIC SECTIONS
CALIFORNIA PRIVACY RIGHTS
In the past 12 months, we collected, used, shared, and sold (as defined within the California Consumer Privacy Act (“CCPA”)), the categories of personal information detailed in the chart above in the “INFORMATION WE COLLECT AND HOW WE USE IT” section. As also noted above, we sell personal information as that term is defined in the CCPA.
California residents have certain rights with respect to the personal information collected by businesses under the CCPA. If you are a California resident, you may exercise the following rights regarding personal information about you, subject to our ability to verify your request and certain other limitations:
- Information about You. You may ask for us to state what categories of personal information about you we have, and the categories of sources from which we collect personal information about you;
- Receive a Copy of Your Data. You may request the categories and specific pieces of information (if any) we have about you, the categories of personal information that we have disclosed about you for a business purpose, and the categories of third parties with which we have shared personal information in the previous 12 months.
- Delete Your Data. You may request that we delete the personal information we have collected from you.
- Do-Not-Sell. You may opt out of our sale(s) of personal information about you, as “sale” is defined by California law. Please see above for more information.
- Non-Discrimination. California law prohibits discrimination against you for exercising your privacy rights.
In addition, California’s “Shine the Light” law permits users of our Services, who are California residents, to request certain personal information regarding our disclosure of personal information to third parties for their direct marketing purposes.
How to Exercise Your Rights. To exercise any of the above California Privacy Rights, please follow the instructions below:
- By phone at 1-866-983-0571
- Online by using this webform.
If you have any other request you wish to submit to the privacy team, you may submit a general request to privacy@onlocationexp.com.
Verification Process and Required Information. All requests must be verified. Some requests, including receiving a copy of personal information about you or requests made by an agent claiming to be acting on your behalf, are subject to heightened requirements. If we cannot verify your identity based on the personal information provided, a request for a copy of personal information about you shall be treated as a request for information and if we cannot verify your identity, a request to delete personal information may be treated as a request to opt-out of the sale of personal information.
Authorized Agent. You may designate an authorized agent to make a request on your behalf. An authorized agent must have written documentation of their authority to act on your behalf, such as a power of attorney.
NEVADA
Under Nevada law, you may direct a business that operates an internet website not to sell certain personal information a business has collected or will collect about you. Nevada residents who wish to exercise their right to opt-out of a sale under Nevada Revised Statutes Chapter 603A may submit a request by submitting the webform or calling 1-866-983-0571.
OPTING IN TO/OPTING OUT OF THE SALE OF PERSONAL INFORMATION
We share personal information about you with sponsors, vendors, Endeavor, technology partners, and third party advertising networks (as discussed above in the “INFORMATION WE COLLECT AND HOW WE USE IT” section). These transfers, which are used to provide you with certain Services and/or to more effectively provide you with personalized services (including advertising), can be deemed a sale under some data privacy laws, including the California Consumer Privacy Act and Nevada law.
You may opt out of the sale of personal information about you by clicking on the Do Not Sell My Personal Information link on the appropriate Site or calling 1-866-983-0571. You will be asked to provide certain information to us in order to exercise this option so we can verify your identity and locate your records with us.
If you are a 13-16 years old, you may opt in to the sale of personal information, including by submitting a request through this webform.
Please note if do not provide us with certain information, we may be unable to provide you with certain corresponding Services.
CANADA, EEA AND UK
If you are in Canada, the EEA or UK, the disclosures set out below apply to you (as applicable) in addition to the disclosures set out in the general sections of this Privacy Policy.
In order to comply with the General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”) and the UK General Data Protection Regulation and/or the UK Data Protection Act 2018 (together, the “UK GDPR”),
We process personal information about you on the legal basis specified in the table.
Categories of personal information we collect | Why we collect this information | Legal basis we rely on to collect this information |
Personal and online identifiers (such as first and last name, email address, phone number, usernames, or unique online identifiers) | Provide the Services Personalize the Services Customer support | Necessary to perform our contract with you and to provide the Service
|
Marketing and targeted advertising
| With your consent | |
Security and fraud prevention Improve the Services | It is in our legitimate interests to ensure the security of our Service and improve our Services
| |
Financial account Information (such as credit card numbers, bank account information, Paypal account information) | Provide the Services, including selling merchandise and/or tickets | Necessary to perform our contract with you and to provide the Services
|
Personal information such as Government IDs, such as driver’s license or passport, etc. | Provide travel-related services | Necessary to perform our contract with you and to provide the Services
|
Travel Information (such as loyalty cards, bookings, itineraries) | Provide travel-related services | Necessary to perform our contract with you and to provide the Services
|
Customer profile information (such as gender, age range, income range, ad demographics, academic information, sport information photos, videos) | Provide the Services Personalize the Services
| Necessary to perform our contract with you and to provide the Services
|
Direct marketing Targeted advertising | With your consent.
| |
Analytics
| Where allowed, to use this information to monitor the success of our advertising and marketing programs and improve the operation of our Services | |
Research and development Security and fraud prevention Improve our Services
| It is in our legitimate interests to ensure the security of our Service and improve our Services | |
Commercial and transactional Information | Provide our Services Customer support | Necessary to perform our contract with you and to provide the Service and customer support and it is in our legitimate interests to improve our Services
|
Analytics
| Where allowed, to use this information to monitor the success of our advertising and marketing programs and improve the operation of our Services | |
Research and development Improve our Services
| It is in our legitimate interests to improve our Services | |
Communications with you (such as customer support messages, emails, chatbots, social media posts) | Provide and improve the Services Customer support
| Necessary to perform our contract with you and to provide the Service and customer support and it is in our legitimate interests to improve our Services.
|
Internet activity Information (such as browsing history, search history, interactions with a website, email, application, or advertisement) | Provide the Services Personalize the Services
| Necessary to perform our contract with you and to provide the Service
|
Direct marketing Targeted advertising
| With your consent | |
Improve our Services | It is in our legitimate interests to improve our Services | |
Analytics
| Where allowed, to use this information to monitor the success of our advertising and marketing programs and improve the operation of our Services. | |
|
| |
Research and Development
| It is in our legitimate interests to improve our service | |
Non-Precise geolocation information (such as zip or area code, state, country) | To provide and improve the Services to you Personalization of the Services | Necessary to perform our contract with you and to provide the Service and it is in our legitimate interests to improve our Services. |
Fraud prevention and cybersecurity
| It is in our legitimate interests to ensure the security of our Service and improve our Services. | |
Direct marketing Targeted advertising | With your consent. | |
Precise geolocation (such as full address or specific location while at an event) | To provide and improve the Services to you Personalization of the Services Fraud prevention and cybersecurity | Necessary to perform our contract with you and to provide the Service and it is in our legitimate interests to improve our Service.
|
Direct Marketing | With your consent. | |
Photographs and videos of you | To provide the Services, for example, when you interact with certain apps at events or competitions, including, uploading of photos and videos Personalization of the services | Necessary to perform our contract with you and to provide the Service
|
Enhancing live event experiences Research and development Marketing and promotion of the Services | It is in our legitimate interests to improve our Services | |
Dietary Preferences | To provide the Services | Necessary to perform our contract with you and to provide the Service.
To the extent that your dietary preferences reveal information regarding your religion (e.g. Kosher, Halal), the additional legal basis for processing we rely on is: with your explicit consent.
|
Inferences drawn from the above information about your predicted characteristics and preferences | To provide and improve the Services Personalization of the Services
| Necessary to perform our contract with you and to provide the Service and it is in our legitimate interests to improve our Service.
|
Direct marketing Targeted advertising
| With your consent. | |
Analytics | Where allowed, to use this information to monitor the success of our advertising and marketing programs and improve the operation of our Services | |
Other information about you that is linked to the personal information above | To provide and Improve the Services Personalization of the Services | Necessary to perform our contract with you and to provide the Service and it is in our legitimate interests to improve our Service. |
Depending on your location, certain laws apply to you and personal information about you, and you have certain rights in relation to personal information about you:
- Access. You have the right to access personal information we hold about you and ask us for other information such as purposes of processing, categories of personal information and recipients of the information.
- Portability. You have the right to request a copy of personal information about you and request that we transfer it to a third party (with certain exceptions).
- Correction. You may be entitled to request correction of any personal information about you which is incomplete or inaccurate.
- Erasure. In certain circumstances, you have the right to request deletion or erasure of the personal information we hold about you.
- Restriction of processing to storage only. You have the right to require us to stop processing the personal information we hold about you other than for storage purposes in certain circumstances.
- Objection. Where we are processing personal information about you on the basis of legitimate interests, you have the right to object to our processing of personal information about you. You also have the right to object to marketing at any time by opting out at the bottom of our emails to you.
- Withdrawal of Consent: Where we rely on consent to process personal information about you, you have the right to withdraw this consent at any time by contacting us using the webform.
You may also have the right, in certain circumstances, to object to our processing personal information about you. However, we may be entitled to continue processing it in line with applicable law. Where we rely on consent to process personal information about you, you have the right to withdraw this consent at any time.
These rights apply under and subject to applicable law and in many cases are limited by applicable law. For example, where fulfilling your request would adversely affect other individuals or our trade secrets or intellectual property or where there are overriding public interest reasons or where we are required by law to retain personal information about you. If you want to exercise any of these or other rights under applicable law, please contact us using the webform. We may require you to prove your identity with approved identification. We will respond to any requests to exercise your rights without undue delay and at least within one month (though this may be extended by a further two months in certain circumstances).
You may also have the right, where provided under applicable law, to ask us to stop processing personal information about you for direct marketing purposes. You can exercise this right by checking certain boxes on the forms we use to collect personal information about you or by clicking “unsubscribe” on the emails you receive.
We will retain personal information about you for as long as needed to provide you with services you have requested. We will retain and use personal information about you as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.
If you have complaints about how we process personal information about you, please contact us and we will respond to your request as soon as possible. If you think we have infringed data protection laws, you can file a claim with (as applicable to where you are located) the Officer of the Privacy Commissioner of Canada or provincial Privacy Commissioner, the UK Information Commissioner’s Office or the data protection supervisory authority in the European Union country in which you live or work.
BRAZIL
If you are in Brazil, the disclosures set out below apply to you in addition to the disclosures set out in the general sections of this Privacy Policy.
If the Brazilian Data Protection Law (Law No. 13,709/2018 or “LGPD”) applies to you and personal information about you, you have certain rights in relation such personal information:
- Access. Right to obtain a confirmation if personal information related to you are being processed and, where that is the case, have access to them.
- Correction. Right to obtain the correction of inaccurate personal information about you;
- Erasure. Right to obtain the erasure of personal information about you.
- Restriction of processing. Right to obtain a restriction of processing in certain circumstances;
- Portability. Right to receive such personal information and transmit such data to another data controller.
- Object. Right to object to our processing of such personal information in certain circumstances.
- Withdrawal of consent. Where an instance of processing is based on consent, you have the right to withdraw your consent at any time. The withdrawal of your consent does not affect the legitimacy of the processing that occurred based on the consent prior to the withdrawal.
- Right to lodge a complaint with the supervisory authority. Right to lodge a complaint with the competent Brazilian supervisory authority.
We will respond to requests to exercise your access right without undue delay and within fifteen days, though this may be extended as permitted in certain circumstances.
We will retain personal information about you for as long as needed to provide you with services you have requested. We will retain and use personal information about you as necessary to comply with our legal obligations and to resolve disputes.
If you want to exercise any of these or other rights under the LGPD, please contact us emailing us at privacy@onlocationexp.com.
MEXICO
If you are in Mexico, the disclosures set out below apply to you in addition to the disclosures set out in the general sections of this Privacy Policy.
Sensitive Data. Some of the personal information that we collect from you may be considered sensitive data, including your medical/health information and, under certain circumstances, your biometric data.
Purposes of Processing. Some of the purposes of processing stated above are voluntary purposes, including marketing and targeted advertising. You may object to the processing of personal information about you for voluntary purposes as stated in the section “Your rights” below in this section.
Data Transfer Consent. We require your consent to transfer personal information about you to the entities mentioned in this Privacy Policy, except when the transfer is to companies within our corporate group, such as Endeavor, authorities to comply with legal/authority requirements or defend our rights, or to entities acting on our behalf (data processors).
By using the Site and providing us with personal information about you, or otherwise interacting with us, as well as by providing us your explicit written consent on the forms we use to collect personal information about you (where applicable) you agree to the data transfers detailed in this Privacy Policy that require your consent. You may exercise your rights in connection with personal information about you as stated in the section “Your rights” below.
Your Rights. You have the following rights in relation to personal information about you:
- Access. You have the right to access personal information we hold about you and ask us for other information such as purposes of processing, categories of personal information and recipients of such information.
- Correction. You may be entitled to request correction or update of any personal information about you which is incomplete or inaccurate.
- Erasure. In certain circumstances, you have the right to request deletion or erasure of the personal information we hold about you.
- Objection. You have the right to object to our processing of personal information about you for voluntary purposes or under other legitimate grounds.
- Withdrawal of Consent: Where we rely on consent to process personal information about you, you have the right to withdraw this consent at any time.
- Use and disclosure limitation. You have the right to request we limit the use and disclosure of personal information about you.
We may require you to prove your identity with approved identification to fulfill your request. We will respond to any request to exercise your rights within 20 days from the day we receive your request, and if your request is deemed valid, it will take effect within 15 days from our response. These deadlines can be extended in extraordinary circumstances.
You can ask us to stop processing personal information about you for direct marketing purposes by checking certain boxes on the forms we use to collect personal information about you, by clicking “unsubscribe” on the emails you receive, and/or other mechanisms as described in this Privacy Policy or within the communication we send you.
To exercise your rights, know more about your rights, as well as the applicable means, procedures, and requirements to exercise any of them, please contact us using the webform.
INDIA
If you are in India, the disclosures set out below apply to you in addition to the disclosures set out in the general sections of this Privacy Policy.
Age Restrictions. Children under the age of 18 may not use our Services, without providing parental/legal guardian consent.
Sensitive Personal Information. Under applicable law, Sensitive Personal Information is passwords, financial information such as bank account, credit card, debit card or other payment instrument details, biometric data, physical or mental health details, sex life or sexual orientation, and/or medical records or history, biometric, genetic and gender related information, caste or ethnicity, religious or political affiliations and similar information, excluding information available in the public domain, or accessible by exercise of statutory rights under Indian laws.
Withdrawal Of Consent. To the extent provided by applicable laws and regulations, you may withdraw any consent you previously provided to us for certain processing activities, and correct or update personal information about you by contacting privacy@onlocationexp.com or by submitting a request through this webform. Where consent is required to process personal information about you, if you do not consent to the processing or if you withdraw your consent, we may not be able to deliver the expected Services. Your request to withdraw your consent shall not (i) apply retrospectively, or (ii) require deletion of records required for statutory purposes.
JAPAN
If you are in Japan, the disclosures set out below apply to you in addition to the disclosures set out in the general sections of this Privacy Policy.
Minimum Age. Parental/legal guardian consent is required for children under the age of 20, you must obtain your parent’s or legal guardian’s consent to use our Services.
Information we collect and how we use it. The table above in the “INFORMATION WE COLLECT AND HOW WE USE IT” section applies, with the necessary changes as stated below, to our collection and handling of personal information about you by:
- replacing the names of columns “Business or commercial purposes for collection, use, and sharing personal information” and “Affiliates/Categories of third parties with whom personal information is shared for a commercial or business purpose” with “Purposes for collection, use, transfer and joint-use of personal information” and “Our group companies and the Joint-use Third Parties with whom personal information is jointly used“, respectively; and
- adding “transfer to third parties” as a purpose to each category in the “Purposes for collection, use, transfer and joint-use of personal information” column.
Joint-use Third Parties. We and third parties whose handling of personal information is reasonably regarded as equivalent to the handling of personal information by On Location SAS, Paris 2024 and IOC (“Joint-use Third Parties“) may jointly use, share, or process personal information about you, within our group companies (i.e., Endeavor) and with our Joint-use Third Parties (if any).
Consent to a Sale of Personal Information. You consent to the sale of personal information about you to third parties by us based on your consent to the transfer of personal information about you to third parties. You may request us to cease the sale of personal information about you at any time via the webform.
Collection of Special Care-required Personal Information. The categories of personal information specified in the above table may include “special care-required personal information” (i.e., sensitive information as detailed under applicable law), and you consent to the collection of such information.
Your Rights. You may request us to notify you about the purposes of, use of, to disclose, to make any correction to, to discontinue the use or provision of, and/or to delete any and all of personal data about you which is stored by us, to the extent provided by the Act on the Protection of Personal Information of Japan. When you wish to make such requests, please contact us at privacy@onlocationexp.com or using the webform.
SOUTH KOREA
If you are in South Korea, the disclosures set out below apply to you in addition to the disclosures set out in the general sections of this Privacy Policy above.
Items of Personal Information Processed. Please refer to the table under “INFORMATION WE COLLECT AND HOW WE USE IT” for the items of personal information processed by us.
Period of Retention and Processing of Personal Information. In principle, when the purposes of collection and use of personal information are achieved, we will destroy the personal information without undue delay. However, if any personal information is required to be retained under applicable law, such information will be retained for the period and purpose as prescribed by law.
Examples of retention prescribed by law are as follows:
- Act on the Consumer Protection in Electronic Commerce (Article 6)
- contract or records of rescinding of offer, etc. (5 years)
- records of settlement or rendering of services (5 years)
- records of consumer complaints or consumer disputes (3 years)
- Protection of Communications Secrets Act (Article 15-2)
- Record of computer communication or Internet log, trace data of access point (3 months)
Process and Method of Destruction of Personal Information. Personal information, which has fulfilled the purpose for which it was collected or used, and has reached the period of time during which personal information was to be processed, will be destroyed in an irreversible way, unless we are required to retain them for a longer period under applicable laws. Personal information stored in electronic files will be deleted in an irreversible way by using technical methods, and printed information will be destroyed by shredding or incinerating. Furthermore, measures will be taken to segregate the personal information which is required to be retained even after the expiration of the retention period or whose purpose of collection and use is fulfilled under applicable laws from other personal information.
Delegation of Processing of Personal Information. We delegate the processing of personal information as described below, and the delegatees may process personal information according to the purpose of the delegation:
Delegatee | Description of Delegated Services |
Atlas/Atlarge | Processes online orders and sends order & customer data to a customer relationship management platform) |
Rarecrew | Processes all customer information in relations to CRM integrations, receives customer data to import as leads into CRM, etc. |
Lamark Media | Receives customer information to build lookalike audiences for paid media marketing campaigns |
Data Transfers to Overseas Country and Provision of Personal Information to Third Parties. We transfer Personal Information overseas to third parties as follows:
Recipient (Contact Information of Information Manager) | Country to which Personal Information is to be Transferred | Date and Method of Transfer | Items of Personal Information to be Transferred | Purposes of Use by Recipients | Period of Retention of Use by Recipient |
On Location Events, LLC (please see “Contact” section below) | USA | Via online network, phone sales and other as other physical methods and platforms, upon collection | All collected personal information | Please see “INFORMATION WE COLLECT AND HOW WE USE IT” section of this Privacy Policy | Please see “PERIOD OF RETENTION AND PROCESSING OF PERSONAL INFORMATION” section above |
On Location SAS
| France | Same as above | Same as above | Same as above | Same as above |
Paris 2024 | France | Same as above | Personal identification data Personal location data Marketing consents data Order data Data related to transactions detected as potentially fraudulent | Marketing purposes: Commercial and financial purposes: Operational purposes: Security checks and fraud prevention The Cookies data will be used by P24 to analyse the browsing behaviour and to evaluate the performance of the OLE e-commerce platform | Same as above |
IOC | Switzerland | Same as above |
Personal identification data
Personal location data Marketing consents data Order data | Marketing purposes The Cookies data will be used by IOC to analyse the browsing behaviour and to evaluate the performance of the OLE e-commerce platform | Same as above |
Rights of Data Subjects and Methods to Exercise Such Rights. You may exercise rights related to the protection of personal information by requesting access to, correction, deletion or suspension of processing of personal information about you, in writing or via email, fax, phone, etc. pursuant to applicable laws. You may also exercise these rights through your legal guardian or someone who has been authorized by you to exercise such rights. However, in this case, you must submit a power of attorney to us in accordance with applicable laws. Upon your request, we will take necessary measures without delay in accordance with applicable laws. You can also withdraw your consent or demand a suspension of the personal information processing at any time.
In accordance with the Personal Information Protection Act (“PIPA”), we may use or provide personal information within the scope or reasonably related to the initial purpose of the collection, in consideration of whether disadvantages have been caused to data subjects and whether necessary measures have been taken to secure such personal information such as encryption, etc. We will determine with due care whether to use or provide personal information in consideration of general circumstances including relevant laws and regulations such
as the PIPA, purpose of use or provision of personal information, how personal information will be used or
provided, items of personal information to be used or provided, matters to which data subjects provided consent or which were notified/disclosed to data subjects, impact on data subjects upon the use or provision, and measures taken to protect such information. Specific considerations are as follows:
- Whether the additional use/provision is related to the initial purpose of the collection;
- Whether the additional use/provision is foreseeable in light of the circumstances under which personal information was collected and practices regarding processing;
- Whether the additional use/provision unfairly infringes on the interests of the data subject; and
- Whether the necessary security measures such as pseudonymization or encryption were taken.
Contact. If you have any questions or comments about this Privacy Policy and/or this section, if you need to report a problem, or if you would like us to update, amend, or request deletion of the information we have about you, please contact our data protection officer or Privacy Team at:
- E-mail: privacy@onlocationexp.com
CHINA
If you are in China, the disclosures set out below apply to you in addition to the disclosures set out in the general sections of this Privacy Policy above.
Age Restrictions. Children under the age of 18 may not use our Services, without providing parental/legal guardian consent.
Sensitive Personal Information. Under applicable law, “sensitive personal information” means personal information the divulgence, illegal provision or misuse of which may endanger the bodily or property safety or may probably result in damage to personal reputation or bodily or mental injury or discrimination, which may be composed of data concerning race, religion, political position, personal property, personal health and physiological information, personal identity and network identifier data. Your sensitive personal information such as bank account, credit card, debit card or other payment instrument details, government IDs, browsing history, search history, performance data (including movement output, information about your wellbeing and sleep habits, heart rate information, height body composition, health assessment information, etc.), precise geolocation, dietary preferences, medical information (such as, COVID testing or similar information), biometric data, and similar information may be collected by us.
Permissions. In order to provide related services, we need your authorization to open the following related permissions to collect related information. If you refuse to enable relevant permissions, you may not be able to obtain related functions or services.
- Location services (location data is not stored)
- Camera access
- Microphone access
- Photos access
- Documents access
Consent storage of personal information outside of China. Where permitted by law or where you have given express consent to do so, personal information about you will be stored in countries or regions outside of China where we have databases or affiliates, including to the United States.
Your Rights. You may exercise rights related to the protection of personal information about you:
- Access. You have the right to access personal information about you, except as provided by laws and regulations;
- Correction. When you find any error about personal information about you processed by us, you have the right to request us to make corrections; and
- Deletion. If our processing of personal information violates laws and regulations, or if we collect, use, or process personal information that is not covered in this Policy and without your consent, you can request us to delete personal information about you;
- Withdraw Consent. You may have a right to withdraw your authorization and consent at any time;
- Account Deregistration. You may deregister your account in our online services at any time, and we will delete such account as soon as practicable. Please note that, the deregistration of the account will result in an irrevocable removal of all personal information about you, including but not limited to your account information.
If you wish to exercise such rights, you may direct your request to us using the contact details set out below, and we will reply to you within 15 working days from receipt of such inquiry.
Contact. If you have any questions or comments about the Privacy Policy and/or this China Section, if you need to report a problem, or if you would like us to update or amend, or request deletion of, the information we have about you, please contact us at privacy@onlocationexp.com.
SECURITY
We use a variety of administrative, physical, and technology solutions to protect your data from unauthorized access, loss, or misuse. Because there is always some risk in transmitting data over the internet and otherwise processing data, we cannot and do not guarantee or warrant the security of any data that you transmit on or through the Services or that we otherwise maintain.
LINKS TO THIRD PARTY WEBSITES
Our Services, newsletters, email updates and other communications may, from time to time, contain links to and from the websites of others, including our partner networks, retail partners, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.
UPDATES
Any updates we may make to our Privacy Policy will be posted on this page, and we may also provide a website notice of any material changes for a reasonable period of time. Please check back frequently to see any updates or changes to our Privacy Policy. If you do not agree or consent to these updates or changes, do not continue to use the Services.
CONTACT
Questions or comments regarding this Privacy Policy should be submitted to us using the webform here or privacy@onlocationexp.com.
