WHAT INFORMATION WE COLLECT AND HOW WE DO IT
Information can generally be collected in two ways: (1) information that is knowingly and voluntarily input into Our system directly by You in response to particular prompts or fields, or that is otherwise knowingly and voluntarily provided by You (such as in an e-mail); and (2) information that is collected automatically when You use the Site.
Some information can be "personally identifiable." We use the term "personally identifiable" information to mean any type of information which could be utilized to identify or be readily associated with You. Examples of personally identifiable information we collect include, but are not limited to, Your name, address, telephone number, e-mail address, or any combination thereof. We also collect a sub-category of personally identifiable information that we call financial information. Financial information includes passwords, credit/debit card numbers, bank and other account numbers, and bank routing information. In order to operate Our Site and provide You with information on events and services that may be of interest to You, We collect personally identifiable information (including financial information) as well as demographic information (e.g. zip code, hometown, gender, purchase history, and age) from You. Please note that, in some instances as described below, We treat financial information differently from how We treat other types of personally identifiable information.
COLLECTION OF INFORMATION YOU PROVIDE VOLUNTARILY
Whenever You are prompted by the Site or mobile applications to complete forms, provide payment information, and make choices, for example, and You choose to do so, You are voluntarily providing information to Us. This information may or may not be personally identifiable, depending upon what You are asked to provide. You may also choose to voluntarily submit information to Us when you communicate with Us by e-mail or telephone. For Your own security and protection, You should not send personally identifiable information through unencrypted e-mail, particularly information that You deem to be sensitive or confidential (such as financial information).
When You choose to access or connect to the Site through Facebook or another social networking website, certain information ("Social Web Information") may be collected by Us. Social Web Information includes, but is not limited to, Your Facebook (or other social networking site) connect credentials, information that You authorize the site to share with Us though permissions like http://developers.facebook.com/images/devsite/auth-dialog-example.png, and e-mail account information. Social Web Information may also include personally identifiable information about other individuals that Our users authorize and provide to Us. For example, to help You connect to friends and contacts You may want to use Our service with (as well as to improve our service and fight fraud), We may allow You to import data, such as your e-mail contacts, from a variety of social networking sites and e-mail service providers. However, TBA does not evade or circumvent personal privacy settings on Facebook or any other site.
AUTOMATIC COLLECTION OF INFORMATION
Certain information is collected automatically from You when You interact with the Site. This can be done through the use of software or other automated processes that Our Site uses. However, TBA does NOT use such automated processes to collect personally identifiable information such as Your name, contact information or financial information from You, and we do not permit third parties (e.g. advertising networks) to use automated processes to collect personally identifiable information on the Site.
If you do not wish to accept cookies, you can usually set your browser to decline them, and if You wish to delete or disable cookies previously placed on your computer, the "help" portion of the toolbar on most browsers will tell You how to do so. Please note, however, that if You choose to set Your browser to decline, delete or disable cookies, You may not be able to access certain areas of Our Site.
Like most websites, each time You visit the Site, We automatically collect Your "internet protocol" ("IP") address (and the website address that directed You to Us, when applicable). An IP address is a unique series of numbers that identifies each computer connected to the Internet. An IP address can be used to provide information such as the date and time of a user's visit, the availability of certain requested files, the popularity of various website functions, and the amount of information transmitted to each user from a site. Presently, We use Your IP address to help identify You, to gather demographic information, to note the frequency of Your visits to this Site and to determine the frequency with which certain pages and functions of the Site are accessed. This allows Us to improve the Site's functionality and to diagnose problems.
In addition to cookies, We or Our service providers may use web beacons, pixels and similar technologies on our Site and in e-mail messages or newsletters. These tiny electronic images can be used to assist Us in determining how many users have visited certain pages or opened messages or newsletters. However, We do NOT use these images to collect personally identifiable information.
Finally, We may also use automated processes to collect statistical information about the behavior of visitors to the Site on an aggregated, anonymous basis, i.e., that does not identify You as the subject or source of the information.
HOW WE USE YOUR INFORMATION
TBA USES YOUR INFORMATION TO:
process Your transactions and deliver the products and services that You have requested (for example, We use Your financial information to bill You for products and services and to enable You to participate in discount, rebate, and similar programs in which You choose to participate); provide customer support; solicit feedback; send You offers that You have opted in to receive; perform research and analysis about Your use of, or interest in, Our products, services or content, or products, services or content offered by others; communicate with You about products or services that may be of interest to You either from Us or third parties (e.g. discounts, special events and exclusive deals); develop and display content and advertising (such as targeted ads) tailored to Your interests on Our Site and other websites: verify Your eligibility and deliver prizes in connection with promotions, contests and sweepstakes; enforce Our Terms of Service; protect TBA, Our Event Affiliates, our Site, Our customers and/or other users, and other third parties from fraud, hacking or other harm; cooperate with legal, criminal or regulatory investigations or proceedings; provide You with newsletters, RSS feeds, or other communications or services which You have signed up for or otherwise agreed to receive; send account-or transaction-related communications such as welcome letters and transaction confirmations. We may also send You surveys and marketing communications to inform You of new products or services or other information or offers that may be of interest, and/or updates about TBA or the Site. These surveys, marketing communications, or updates may come from TBA or Our service providers. If You do not wish to continue to receive surveys, marketing communications or updates, You may indicate this preference by following the "unsubscribe" or "opt-out" instructions included within each e-mail communication. Please keep in mind that, even if You choose not to receive these e-mail communications, You may continue to receive transactional or account communications (e.g., confirmation emails and notices of event changes and cancellations) and other communications which are required or permitted by applicable law. Also, opting-out or changing Your e-mail preferences on the Site will only affect future e-mail communications from Us or on Our behalf and will not affect e-mails from Event Affiliates or other unaffiliated third parties who may have already received Your information. If you wish to stop receiving marketing e-mails from an Event Affiliate or other third party, you will need to contact them directly.
HOW WE SHARE YOUR INFORMATION
We only share your personally identifiable information with third parties as specifically described below. We also will NEVER make Your financial information available to Event Affiliates or third-party marketers except in connection with a particular event or transaction you have specifically requested.
From time to time, where permitted by applicable law, We may share Your personally identifiable information (but not Your financial information) and automatically collected information about You with reputable direct marketers so that they may offer products and services which We hope will be of interest to You. Please see the section below entitled "Access to Your Personally Identifiable Information" for detailed information on Your choices regarding Your personally identifiable information.
In addition, We may disclose Your personally identifiable and non-personally identifiable information to Our agents, contractors and service providers who are engaged to perform functions on Our behalf (such as processing of payments, provision of data storage, hosting of Our website, marketing of Our products and services, conducting audits, and performing web analytics). For example, in order to process transactions and payments on the Site, We will share Your personally identifiable information with providers of credit and debit card processing services and payment applications, and other agents, representatives, contractors, vendors and service providers, so they can provide Us with support services such as authorization of credit and debit card transactions, order and ticket fulfillment, and promotional fulfillment. These third party contractors and service providers shall be permitted to obtain only the personally identifiable information they need to provide the service.
We may also disclose Your personally identifiable information to third parties when We believe, in good faith and in Our sole discretion, that such disclosure is reasonably necessary to (a) enforce or apply Our Terms of Service, including investigation of potential violations thereof, (b) comply with legal or regulatory requirements or cooperate with a law enforcement or regulatory investigation, (c) protect the rights, property or safety of Us, Our users or other third parties, (d) prevent a crime or protect national security, or (e) detect, prevent or otherwise address fraud, security or technical issues. We may also disclose non-personally identifiable information to Our business partners, merchants, advertisers, investors, potential buyers and other third parties if We deem such disclosure, in Our sole discretion, to have sound business reasons or justifications.
Certain information relating to usage of the Site and/or Our services may be shared with third parties (such as advertisers, Event Affiliates, marketing partners, service providers and others) on an aggregated, anonymous basis for research, analytical or promotional purposes (for example, so that they can customize their advertisements, promotions, and communications to the appropriate audience). However, such information will not identify You as the subject or source of the information.
We may also share Your personally identifiable information where You grant Us permission to do so.
Information about Our customers and users, including personally identifiable information, may be disclosed as part of any merger, acquisition, or sale of TBA and/or its assets, as well as in the unlikely event of insolvency, bankruptcy, or receivership, in which case personally identifiable information would be transferred as one of the business assets of the company.
Finally, please also be aware that Event Affiliates and other third parties visiting the Site may see Your information You choose to enter into Your profile or otherwise post on the Site (for more information, please see the section below entitled "Your Postings").
We may provide areas on Our Site where You can post information about Yourself, communicate with others, post reviews or upload content. Whenever You disclose personally identifiable information publicly (such as on publicly viewable web pages), that information becomes public and can be collected and used by others, including for the sending of unsolicited messages. We can't control who reads Your posting or what others may do with information You voluntarily post, so we encourage You to use Your discretion with respect to posting personally identifiable information. Also, such postings are governed by Our Terms of Service, so be sure to review them before posting.
VISITING OUR SITE FROM OUTSIDE THE UNITED STATES
WHAT CHOICES DO I HAVE ABOUT MY INFORMATION?
As a user of TBA, you have some choices related to the use of your information. Any requests related to your information should be directed to firstname.lastname@example.org. You have the ability to opt-out of receiving marketing communication. You may do so at any time by submitting a request to email@example.com. You have the ability to see the data you have provided to TBA. You can do so at any time by logging into your account. Individuals within the European Union or European Economic Area are entitled to additional choices as a result of the data privacy law known as the EU General Data Protection Regulation, more commonly referred to as "GDPR". The following are those additional choices.
Access and Export: As stated above, you have access to view your data at any time by logging into your account. You may also request a machine readable format export of your data by contacting firstname.lastname@example.org. Limit Use: You can request that we limit the use of your data by contacting email@example.com. Rectification: If you find inaccuracies in your information, you have the ability to request that those inaccuracies be corrected by submitting a request to firstname.lastname@example.org. Removal: You can request that your data be removed from the TBA system by contacting email@example.com. For legal, accounting, and safety reasons, some data may not be able to be immediately removed or anonymized. For example, to comply with anti-money laundering laws, we may be required to maintain personal information tied to financial transactions. Such data may only be able to be removed after a minimum required data retention period.
OUR SECURITY PRECAUTIONS
TBA uses reputable third-party data centers and similar service providers to store much of Your personally identifiable information in order to boost security and protection. We and these service providers attempt to protect Your personally identifiable information by utilizing reasonable security measures to prevent loss, misuse, alteration, unintentional destruction or unauthorized access. We use secure server software (SSL) for Your Site transactions. We encrypt all of Your personally identifiable information as it travels over the Internet.
We also restrict access to personally identifiable information to TBA employees, contractors, service providers and agents who need to know that information in order to operate, develop or improve Our Site or services. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations.
However, no system can be completely secure. Although We and Our data center providers take very significant steps to secure Your information, there is always a chance that Your information will not remain secure, and You should always take great care in handling and disclosing Your personally identifiable information. If You learn that Our security measures have been compromised or have other concerns, please inform Us immediately at firstname.lastname@example.org.
ACCESS TO YOUR PERSONALLY IDENTIFIABLE INFORMATION
When you use Our Site, we make good faith efforts to provide You with access to your personally identifiable information and either to correct this data if it is inaccurate or to delete such data at Your request if it is not otherwise required to be retained by law or for legitimate business purposes. For example, if You are an Event Affiliate, You can access or change Your name and contact information and Your billing information on Your dashboard for the Site; otherwise please e-mail us at email@example.com. We ask individual users to identify themselves and the information requested to be accessed, corrected or removed before processing all such requests, and We may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others, or would be extremely impractical (for instance, requests concerning information residing on backups), or for which access is not otherwise required. In any case, where We provide information access and correction, We perform this service free of charge, except if doing so would require a disproportionate effort. Please e-mail us at firstname.lastname@example.org with any questions, if You need assistance accessing or changing Your personally identifiable information, or if You would like to have Your personally identifiable information deleted. Please be aware that if You delete your personally identifiable information, You may not be able to continue to use the Site or Our services. Please also be aware that, as discussed above, where TBA has shared Your personally identifiable information with Event Affiliates and third-party marketers, You will need to contact these third parties directly to access, change or delete personally identifiable information held by them.
YOUR CALIFORNIA PRIVACY RIGHTS
For Residents of California - California Consumer Privacy Act (CCPA)
The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights. A California resident who has provided personal information to a business with whom he/she has established a business relationship for personal, family, or household purposes ("California Customer") is entitled to request information about whether the business has disclosed personal information to any third parties for the third parties' direct marketing purposes. In general, if the business has made such a disclosure of personal information, upon receipt of a request by a California Customer, the business is required to provide a list of all third parties to whom personal information was disclosed in the preceding calendar year, as well as a list of the categories of personal information that were disclosed. California Customers may request this information from TBA by e-mailing Us at email@example.com or by mailing a request to the attention of Data Protection Officer, Patron Technology, 10675 Perry Hwy, #1316, Wexford, PA 15090. Your request will be responded to within 45 days. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We only use personal Information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
Once we receive and confirm your verifiable consumer request, we will disclose to you:
The categories of sources for the personal information we collected about you. Our business or commercial purpose for collecting or selling that personal information. The categories of third parties with whom we share that personal information. The specific pieces of personal information we collected about you (also called a data portability request). If we sold or disclosed your personal information for a business purpose, two separate lists disclosing: sales, identifying the personal information categories that each category of recipient purchased; and disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not: Deny you goods or services. Charge you different prices or rates for goods or services, including granting discounts or other benefits, or imposing penalties. Provide you a different level of quality of goods or services. Suggest that you may receive a different price rate for goods or services or a different level of quality of goods or services. In the preceding twelve (12) months, TBA has sold the following categories of Personal Information: Category A: Identifiers [NO] Category B: California Consumer Records Personal Information categories [NO] Category C: Protected classification characteristics under California or federal law [NO] Category D: Commercial information [NO]
While some of the events listed on Our Site may appeal to children, Our Site is not targeted at children under the age of thirteen (13), and they are not permitted to use the Site. Accordingly, we do not knowingly collect personally identifiable information from children under the age of thirteen (13). Where tickets for an event of potential interest to children are purchased through the Site, they must be purchased by a parent or other adult guardian. If You believe that TBA has inadvertently collected personally identifiable information from a child under the age of thirteen (13), please contact Us at firstname.lastname@example.org and provide Us with all relevant information so that We can investigate the matter. If we find that you are correct, We will delete the information. In the same vein, if You are a parent or other adult guardian who provided Us with personally identifiable information about Your child who is under the age of thirteen (13), and You wish to have this information deleted, please contact Us at email@example.com. For privacy and security reasons, We may verify your identity and confirm any desired changes or deletions before granting a request to access or delete personally identifiable information.
CHANGES TO THIS POLICY