CMA is subject to the jurisdiction of the investigatory and enforcement powers of the Federal Trade Commission (“FTC”). CMA intends that this policy be compliant with the California Consumer Privacy Act (“CCPA”) where applicable, and with respect to residents of the European Union, the General Data Protection Regulation (“GDPR”). Under certain conditions, you may be entitled to invoke binding arbitration with respect to a dispute between yourself and CMA under this policy.
1. Persons Under 13 Years of Age. CMA does not knowingly collect or distribute personal information from or about children under the age of 13. The Sites and Apps are not intended for children under 13 years of age.
2. Information CMA May Collect:
2.2 Information That CMA Automatically Collects Through the Sites and the Applications. In addition to information that you directly and voluntarily provide to us, CMA may automatically collect information about you when you use the Sites or the Apps.
CMA may automatically collect the information described below from you the following ways:
(a) Web Browsers. CMA may automatically gather information about you that your web browser, depending on your settings, may make available to us. This information includes your Internet Protocol (“IP”) address, operating system, and browser type. CMA may also automatically gather information on the means in which you got to the Sites or Apps. This information includes device used (mobile, desktop, tablet), source type (direct, search engine, referral), referral source (URL, social network, or advertisement referred from), and Google search query.
(b) Third Party Cookies
- Type of web browser used, software manufacture and version number.
- Type of operating system
- Color processing ability of the users screen
- Flash version
- Screen resolution
- Network location and IP address
- Country, city, state, region, county, or any other geographic data
- Bandwidth (internet connection speed)
- Time of visit
- Pages visited
- Time spent on each page of the website
- Referring site statistics
- The website the user came through in order to arrive at the Sites
- Search engine query used
The data collected by Google Analytics is primarily used to optimize the Sites for CMA’s users; however, CMA may also use this data for marketing purposes.
The data CMA automatically collects using Google Analytics is shared with Google. For more information on Google’s Privacy Policies, visit: https://policies.google.com/privacy. You can also opt-out of having your information used by Google Analytics by following the instructions located at https://tools.google.com/dlpage/gaoptout/.
CMA also uses Google Analytics for Display and Search Advertising and, specifically, Google Analytics Demographics and Interest Reporting, on the Sites to help CMA display advertising for products or services that CMA thinks may be of interest to you. CMA will use demographic information CMA collects through CMA’s use of Google Analytics Demographics and Interest Reporting for purposes of performing internal statistical analytics relating to the Sites. You can opt-out of receiving interest-based advertisements through the Sites, as well as customize the types of advertisements that will be displayed to you through the Sites, by following the instructions located at https://support.google.com/ads.
Google LLC is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection legislation
(b.2) Facebook Pixels. We use the “visitor action pixels” from Facebook Inc. on our Websites and Apps.
This allows user specific behavior to be tracked after they have been redirected to the advertiser’s website by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. This data is stored and processed by Facebook. Facebook may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook’s Data Usage Policy https://www.facebook.com/about/privacy/.
You can regulate the collection of your data by Facebook pixel, or to the use of your data for the purpose of displaying Facebook ads by visiting the following address: https://www.facebook.com/settings?tab=ads.
Facebook is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
(b.3) Cloudflare. CMA uses the Cloudflare CDN (Content Distribution Network) service from Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare offers better global performance through the internal CDN (Content Distribution Network) and additional security against DDoS attacks. Allowing the placement of Cloudflare cookies onto your browser is a requirement when visiting the Sites to ensure that security features work properly.
Cloudflare, Inc. is based in the US and is certified to the US Privacy Shield, which ensures compliance with the level of data protection in the EU. (https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active)
(c) Location Services. If you access the Sites or Apps through a mobile device, CMA may request that you share your mobile device’s location information. You may choose not to share your mobile device’s location information with us, as well by adjusting your mobile device’s location services settings. For instructions on changing the relevant settings, please contact your service provider or device manufacturer.
4. Information You Post on the CMA Sites or the Apps. Some portions of the Sites and the Apps may allow you to submit comments, ratings and other information which may be displayed on the Sites or the Apps and viewed by others. Public submissions to these Sites or Apps may be archived by CMA.
CMA recommends that you do not post any information on the Sites or the Apps that you do not want to make available to other users of the Sites or the Apps or the public generally. YOU ASSUME ALL RESPONSIBILITY FOR ANY LOSS OF PRIVACY OR OTHER HARM RESULTING FROM INFORMATION YOU POST ON THE SITES OR THE APPS.
6. How CMA Uses Your Information. CMA uses the information gathered through the Sites and the Apps to better understand how they are being used. By identifying patterns and trends in usage, CMA is able to better design the Sites and the Apps to improve your experiences, both in terms of content and ease of use. CMA may also use this information to contact and communicate with you, including to send you information about products or services that might be of interest to you and to respond to your communications and requests. CMA may link information we gather automatically from you with information that CMA directly collects from you through the Sites or Apps.
6.1 Your Information, Which May Include PII, May Be Used by CMA for the Following Reasons:
(a) The information used is necessary for us to provide you with Marketing Messaging. (for example, your email address)
(b) The information used is necessary for us to provide you with Personalized Messaging. (for example, first and last name)
(c) The information used is necessary for us to verify your identity so we can provide you with access to Ticketed CMA Events and Experiences. (for example, your date of birth)
(d) The information used is necessary for you to participate in Contests, Sweepstakes, and other CMA Fan Experiences. (for example, your street address)
(e) The information used is necessary for you to purchase Official CMA Merchandise or Tickets to CMA Events. (for example, your debit/credit card information)
(f) The information used is necessary for you to work with CMA as an employee, third-party processor, or third-party service provider. (for example, your SSN/business ID number)
6.2 Marketing Communications. CMA may email you about products and services that we believe may be of interest to you. If you wish to opt-out of receiving marketing materials from us, please follow the instructions contained in each email you receive from us describing how you can opt-out of receiving further marketing communications from us.
7. How CMA Shares Your Information with Third Parties. CMA will not disclose your information to third parties unless we obtain your permission to do so, except as set forth below:
7.4 Responding to Legal Orders; Protection of CMA Rights and to Comply with CMA Policies. To the extent permitted by law, CMA will disclose your information to government authorities or third parties if: (a) required to do so by law, including in response to a court order, subpoena or other legal process; (b) CMA believes in its sole discretion that disclosure is necessary to protect against fraud, to protect the rights of CMA or other users, third parties or the public at large; or (c) CMA believes that you have abused the Sites or the Apps by using them to attack other systems or to gain unauthorized access to any other system, to send unauthorized or illegal communications (such as “spamming”) or otherwise to violate applicable laws. After disclosure to any third party, your information may be accessible by others as permitted or required by applicable law.
7.6 Anonymous, Aggregated Information. CMA may share information relating to users of the Sites or the Apps with affiliated or unaffiliated third parties on an anonymous, aggregated basis. This information is collected and analyzed for the purpose of better understanding the Country Music consumer, their interests, and how they interact with CMA Sites, Apps, and brands.
9.1 Your Rights in the Data We Collect.
(a) Right to Notice. You have the right to be informed at or before the point of data collection what categories of personal information will be collected, and the purposes for which these categories will be used.
(d) Right To Be Forgotten. Also sometimes referred to as “Right of Deletion” or “Right of Erasure”. Individuals whose data CMA has collected and stored have the right to request their data be deleted or removed from our systems. However, CMA can refuse a deletion request in certain instances. Those instances include when your data is:
- Needed for CMA to complete a transaction for which it was collected or is needed to provide goods or services requested by you
- Used in the context of CMA’s business relationship with you
- Required to perform a contract
- Used to detect security incidents and protect against malicious, fraudulent or illegal activity
- Needed to engage in historical, or statistical research in the public interest
- Used solely for internal uses that are reasonably aligned with your expectations
- Required to comply with a legal obligation or applicable laws
(e) Right to Equal Services & Prices. You have the right to equal services and prices regardless of whether or not you choose to exercise any of the rights listed above.
9.2 California Do Not Track Disclosures. Your browser may allow you to adjust your browser settings so that “do not track” requests are sent to the websites that you visit. However, we will not disable tracking technology that may be active on the Sites in response to any “do not track” requests that we receive from your browser.
a. You may withdraw data processing consent that is based consent you’ve previously given at any time. CMA ensures that withdrawal of consent will be as easy for the end user as it was for the end user to provide consent in the first place.
b. You may withdraw data processing consent that is based on the legitimate interests of CMA and/or a third-party associated with CMA at any time. CMA ensures that withdrawal of consent will be as easy for the end user as it was for the end user to provide consent in the first place.
c. You may object to the processing of your personal information used for direct marketing purposes.
We may use automated decision making technologies, including profiling, to support our data processing activities. Our automated decision making capabilities include logic that attempts to identify artists, music, communications, products, or offers that we believe may interest you. By using this logic, it helps us personalize your interactions with CMA and CMA Affiliates. For you, this means that you may see online advertisements, direct marketing communications (if you have subscribed), or other advertising or marketing messages or special offers based on your activity on our Sites or interactions with CMA Companies or our third party partners.
In some instances, you may be required to provide us with personal data for processing as described above, in order for us to be able to provide you to use all the features of the Sites or Apps.
(a) transferring personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission;
(b) using specific contracts approved by the European Commission which give personal data the same protection it has in Europe; or
(c) transferring personal data to the United States to an entity, if they are part of the Privacy Shield, which requires them to provide similar protection to personal data shared between the Europe and the U.S.
CMA subjects all personal data received from the EU in reliance on the Privacy Shield to the Privacy Shield Principles as adopted by the U.S. Department of Commerce. To the extent required by the Principles, CMA shall remain liable under the Principles if its agent processes personal data in a manner inconsistent with the Principles, unless CMA proves that it is not responsible for the event giving rise to the damage.
CMA has further committed to refer unresolved Privacy Shield complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not resolved your complaint, please contact or visit JAMS at https://www.jamsadr.com/file-an-eu-us-privacy-shield-claim for more information or to file a complaint. The services of JAMS are provided at no cost to you.
You may be entitled, in accordance with applicable law, to request a copy of relevant safeguards by contacting CMA as described in the “Contact Information” section.
10.3 Security Measures To Protect Your Personal Data. CMA uses industry standard data protection protocols to protect your data.
(b) Email us at firstname.lastname@example.org.
(c) Fill out a request form here: www.cmaworld.com/privacy/contact
(d) Call us toll-free at 1-800-998-4636