Privacy Policy

Privacy Policy

This privacy policy (“Privacy Policy“) describes the types of information that Country Music Association, Inc. and/or CMA Foundation (“CMA”) may collect from you in connection with your use of the websites located at cmaworld.com, cmafest.com, cmaawards.com, cmachristmas.com, cmasongwritersseries.com, cmafoundation.org, my.cmaworld.com, cmapartnerships.com, (“Sites“) and mobile applications related to the Sites (“Apps“). It also describes how CMA uses and discloses that information, and your rights in relation to that information. Some of the information governed by this Privacy Policy is anonymous, (i.e. cannot be associated with you personally) whereas other information is personally identifiable, such as your first & last name, email address, telephone number, or credit card number (“Personally Identifiable Information” or “PII”).

CMA is subject to the jurisdiction of the investigatory and enforcement powers of the Federal Trade Commission (“FTC”). CMA intends that this policy be compliant with the California Consumer Privacy Act (“CCPA”) where applicable, and with respect to residents of the European Union, the General Data Protection Regulation (“GDPR”).  Under certain conditions, you may be entitled to invoke binding arbitration with respect to a dispute between yourself and CMA under this policy.

CMA complies with the EU-U.S. and the Swiss-U.S. Privacy Shield Frameworks, as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States. CMA has certified to the Department of Commerce that it adheres to the Privacy Shield Principles.  If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern.  To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

By your affirmative acceptance of this Privacy Policy, you expressly consent to CMA’s collection, storage, use and disclosure of your information as described in this Privacy Policy. This Privacy Policy is part of, and is governed by, the terms and conditions set forth in CMA’s Terms of Use at CMAworld.com/terms.

The procedures for modifying or changing this Privacy Policy are discussed in Section 11 of this Privacy Policy.

1. Persons Under 13 Years of Age. CMA does not knowingly collect or distribute personal information from or about children under the age of 13. The Sites and Apps are not intended for children under 13 years of age.

2. Information CMA May Collect:

2.1 Information You Voluntarily Provide to CMA. We may collect information that you provide when you communicate with us, such as if you participate in a CMA conducted survey through the Sites or Apps or if you sign up to receive CMA information and marketing messaging by email. Additionally, we may from time to time offer you the opportunity to participate in contests, giveaways and other promotions. Any information submitted in connection with promotions will be subject to the terms of the promotion, and, if indicated in the rules of the promotion, this Privacy Policy.

2.2 Information That CMA Automatically Collects Through the Sites and the Applications. In addition to information that you directly and voluntarily provide to us, CMA may automatically collect information about you when you use the Sites or the Apps.

CMA may automatically collect the information described below from you the following ways:

(a) Web Browsers. CMA may automatically gather information about you that your web browser, depending on your settings, may make available to us. This information includes your Internet Protocol (“IP”) address, operating system, and browser type. CMA may also automatically gather information on the means in which you got to the Sites or Apps. This information includes device used (mobile, desktop, tablet), source type (direct, search engine, referral), referral source (URL, social network, or advertisement referred from), and Google search query.

(b) Third Party Cookies

(b.1) Google Analytics. Visitors to the Sites who have JavaScript enabled may be tracked using Google Analytics. Google Analytics collects the following types of information from users of the Sites:

  • Type of web browser used, software manufacture and version number.
  • Type of operating system
  • Color processing ability of the users screen
  • JavaScript support
  • Flash version
  • Screen resolution
  • Network location and IP address
  • Country, city, state, region, county, or any other geographic data
  • Hostname
  • Bandwidth (internet connection speed)
  • Time of visit
  • Pages visited
  • Time spent on each page of the website
  • Referring site statistics
  • The website the user came through in order to arrive at the Sites
  • Search engine query used

The data collected by Google Analytics is primarily used to optimize the Sites for CMA’s users; however, CMA may also use this data for marketing purposes.

The data CMA automatically collects using Google Analytics is shared with Google. For more information on Google’s Privacy Policies, visit: https://policies.google.com/privacy. You can also opt-out of having your information used by Google Analytics by following the instructions located at https://tools.google.com/dlpage/gaoptout/.

CMA also uses Google Analytics for Display and Search Advertising and, specifically, Google Analytics Demographics and Interest Reporting, on the Sites to help CMA display advertising for products or services that CMA thinks may be of interest to you. CMA will use demographic information CMA collects through CMA’s use of Google Analytics Demographics and Interest Reporting for purposes of performing internal statistical analytics relating to the Sites. You can opt-out of receiving interest-based advertisements through the Sites, as well as customize the types of advertisements that will be displayed to you through the Sites, by following the instructions located at https://support.google.com/ads.

Google LLC is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection legislation
(https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active)

(b.2) Facebook Pixels. We use the “visitor action pixels” from Facebook Inc. on our Websites and Apps.

This allows user specific behavior to be tracked after they have been redirected to the advertiser’s website by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. This data is stored and processed by Facebook. Facebook may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook’s Data Usage Policy https://www.facebook.com/about/privacy/.

You can regulate the collection of your data by Facebook pixel, or to the use of your data for the purpose of displaying Facebook ads by visiting the following address: https://www.facebook.com/settings?tab=ads.

Facebook is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

(b.3) Cloudflare. CMA uses the Cloudflare CDN (Content Distribution Network) service from Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare offers better global performance through the internal CDN (Content Distribution Network) and additional security against DDoS attacks. Allowing the placement of Cloudflare cookies onto your browser is a requirement when visiting the Sites to ensure that security features work properly.

For more information about Cloudflare and Cloudflare’s Privacy Policy, please visit: https://www.cloudflare.com/privacypolicy/

Cloudflare, Inc. is based in the US and is certified to the US Privacy Shield, which ensures compliance with the level of data protection in the EU. (https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active)

(c) Location Services. If you access the Sites or Apps through a mobile device, CMA may request that you share your mobile device’s location information. You may choose not to share your mobile device’s location information with us, as well by adjusting your mobile device’s location services settings. For instructions on changing the relevant settings, please contact your service provider or device manufacturer.

3. Information Collected by Third Parties. The Sites and the Apps may include third-party advertising, links to other websites, and other content from third party businesses. These third-parties or advertising companies working on their behalf, sometimes use “web beacons” (i.e. objects embedded in the third party web page(s) or emails that allows them to check whether you have viewed that page or email) and “cookies” (i.e. a string of information that is stored on your computer which your browser provides to the third party site each time you visit) to measure the effectiveness of their ads, personalize or optimize advertising content and to track users who link from their respective websites to the Sites or the Apps. These third-parties may use cookies and web beacons to track the actions of users online over time and across different web sites or platforms to deliver targeted electronic advertisements to an individual user. For information about how tracking works for online advertising purposes you can visit http://www.aboutads.info/choices. CMA does not have access to or control over web beacons or Cookies that these third parties may use. The information practices of these advertisers and third-party websites or businesses are not covered by this Privacy Policy. They are instead covered by each third party’s respective privacy policy. Before visiting a third-party website, whether by means of a link on the Sites or the Apps or otherwise, and before providing any information to any third party, you should inform yourself of the privacy policies and practices (if any) of the applicable third-party website.

4. Information You Post on the CMA Sites or the Apps. Some portions of the Sites and the Apps may allow you to submit comments, ratings and other information which may be displayed on the Sites or the Apps and viewed by others. Public submissions to these Sites or Apps may be archived by CMA.

CMA recommends that you do not post any information on the Sites or the Apps that you do not want to make available to other users of the Sites or the Apps or the public generally. YOU ASSUME ALL RESPONSIBILITY FOR ANY LOSS OF PRIVACY OR OTHER HARM RESULTING FROM INFORMATION YOU POST ON THE SITES OR THE APPS.

5. Facebook, Twitter, YouTube, Instagram, and other Social Media. If you post any comments, photos or other information on CMA’s Facebook, Twitter, YouTube, Instagram or other social media pages, CMA may display those comments, photos or information on the Sites or the Apps. Note that your use of these “social media services” may result in the collection or sharing of information about you by these social media services. By logging in to these social media services and posting a comment on the Sites or Apps, you give CMA permission to access, store and use any information that you permit these social media services to share with CMA in accordance with the privacy settings that are applicable to your account with them. Information that CMA receives from these social media services is stored and used by us in accordance with this Privacy Policy. CMA encourages you to review the privacy policies and settings on the social media services with which you interact to make sure you understand the information that may be collected, used, and shared.

6. How CMA Uses Your Information. CMA uses the information gathered through the Sites and the Apps to better understand how they are being used. By identifying patterns and trends in usage, CMA is able to better design the Sites and the Apps to improve your experiences, both in terms of content and ease of use. CMA may also use this information to contact and communicate with you, including to send you information about products or services that might be of interest to you and to respond to your communications and requests. CMA may link information we gather automatically from you with information that CMA directly collects from you through the Sites or Apps.

6.1 Your Information, Which May Include PII, May Be Used by CMA for the Following Reasons:

(a) The information used is necessary for us to provide you with Marketing Messaging. (for example, your email address)

(b) The information used is necessary for us to provide you with Personalized Messaging. (for example, first and last name)

(c) The information used is necessary for us to verify your identity so we can provide you with access to Ticketed CMA Events and Experiences. (for example, your date of birth)

(d) The information used is necessary for you to participate in Contests, Sweepstakes, and other CMA Fan Experiences. (for example, your street address)

(e) The information used is necessary for you to purchase Official CMA Merchandise or Tickets to CMA Events. (for example, your debit/credit card information)

(f) The information used is necessary for you to work with CMA as an employee, third-party processor, or third-party service provider. (for example, your SSN/business ID number)

6.2 Marketing Communications. CMA may email you about products and services that we believe may be of interest to you. If you wish to opt-out of receiving marketing materials from us, please follow the instructions contained in each email you receive from us describing how you can opt-out of receiving further marketing communications from us.

7. How CMA Shares Your Information with Third Parties. CMA will not disclose your information to third parties unless we obtain your permission to do so, except as set forth below:

7.1 Information You Voluntarily Provide CMA and/or Vendors, Affiliates, Sponsors, and Promotional Partners. By providing information to CMA or a third party affiliated with CMA, you may be asked to allow CMA to share that data with vendors, affiliates, sponsors and/or promotional partners, in accordance with that party’s Privacy Policy.

7.2 Employees, Third-Party Processors and Third-Party Service Providers. CMA may disclose your information to our employees, contractors, affiliates, vendors and suppliers (“Service Providers“) who provide certain services to CMA or on our behalf, such as operating and supporting the Sites and the Apps, or performing marketing or consulting services. These Service Providers are prohibited from using your information for any purpose other than the purpose for which the Service Provider was engaged by CMA and/or as stated in this Privacy Policy.

7.3 DMCA Infringement Notifications, Counter Notices, Notices of Violations of Site Terms of Use. CMA may share your information with third parties if you submit a Digital Millennium Copyright Act (“DMCA“) infringement notification or counter notification as described in CMA’s Digital Millennium Copyright Notice Policy. In addition, CMA may share your information with third parties if CMA receives other notices regarding violations of CMA’s Terms of Use or other user’s rights (including communications about content stored on or transmitted through the Sites or the Apps). For notices other than DMCA infringement notifications and counter notices, upon request, CMA will edit out your name and contact information. However, DMCA infringement notifications and counter notifications must be forwarded as submitted to us without any deletions.

7.4 Responding to Legal Orders; Protection of CMA Rights and to Comply with CMA Policies. To the extent permitted by law, CMA will disclose your information to government authorities or third parties if: (a) required to do so by law, including in response to a court order, subpoena or other legal process; (b) CMA believes in its sole discretion that disclosure is necessary to protect against fraud, to protect the rights of CMA or other users, third parties or the public at large; or (c) CMA believes that you have abused the Sites or the Apps by using them to attack other systems or to gain unauthorized access to any other system, to send unauthorized or illegal communications (such as “spamming”) or otherwise to violate applicable laws. After disclosure to any third party, your information may be accessible by others as permitted or required by applicable law.

7.5 Business Transfers; Bankruptcy. In the event of a sale or transfer of all or a portion of our assets, user information owned or controlled by CMA may be transferred to third parties. CMAs reserves the right, as part of this type of transaction, to transfer or assign your information and other information we have collected from users of the Sites or the Apps to third parties. Other than to the extent ordered by a bankruptcy or other court, the use and disclosure of all transferred user information will be subject to this Privacy Policy, or to a new privacy policy if you are given notice of that new privacy policy. Any information you submit or that is collected after a transfer, however, may be subject to a new privacy policy adopted by the transferee.

7.6 Anonymous, Aggregated Information. CMA may share information relating to users of the Sites or the Apps with affiliated or unaffiliated third parties on an anonymous, aggregated basis. This information is collected and analyzed for the purpose of better understanding the Country Music consumer, their interests, and how they interact with CMA Sites, Apps, and brands.

8. Data Retention. How long we keep the personal information we collect depends on the type of information, the purpose for which it is used, how sensitive it is, and similar factors. In general, we will retain your personal information for the length of time reasonably needed to fulfill the purposes outlined in this privacy policy (including for as long as needed to provide you or our customer with products and services), unless a longer retention period is required or permitted by law. We will also retain and use your information for as long as necessary to resolve disputes and/or enforce our rights and agreements. Non-personally identifiable and aggregated information may be stored indefinitely.

9. California Resident Users. This section of this Privacy Policy applies only if you use the Sites or Apps as a resident of the state of California.

9.1 Your Rights in the Data We Collect.

(a) Right to Notice. You have the right to be informed at or before the point of data collection what categories of personal information will be collected, and the purposes for which these categories will be used.

(b) Right to Access. You have the right to request that we disclose the categories of personal information collected; the categories of sources from which personal information is collected; the business or commercial purpose; the categories of third parties with which the business shares personal information; and the specific pieces of personal information the business holds about a consumer. For more information on how to request this information, refer to Section 12 of this Privacy Policy.

(c) Right to Opt-Out. You have the right—at any time—to prevent CMA from selling your personal data to third parties by clicking THIS LINK and filling out the form with the DO NOT SELL MY PERSONAL DATA request type selected, or by following any of the steps to contact CMA described in Section 12 of this Privacy Policy.

(d) Right To Be Forgotten. Also sometimes referred to as “Right of Deletion” or “Right of Erasure”. Individuals whose data CMA has collected and stored have the right to request their data be deleted or removed from our systems. However, CMA can refuse a deletion request in certain instances. Those instances include when your data is:

  • Needed for CMA to complete a transaction for which it was collected or is needed to provide goods or services requested by you
  • Used in the context of CMA’s business relationship with you
  • Required to perform a contract
  • Used to detect security incidents and protect against malicious, fraudulent or illegal activity
  • Needed to engage in historical, or statistical research in the public interest
  • Used solely for internal uses that are reasonably aligned with your expectations
  • Required to comply with a legal obligation or applicable laws

(e) Right to Equal Services & Prices. You have the right to equal services and prices regardless of whether or not you choose to exercise any of the rights listed above.

9.2 California Do Not Track Disclosures. Your browser may allow you to adjust your browser settings so that “do not track” requests are sent to the websites that you visit. However, we will not disable tracking technology that may be active on the Sites in response to any “do not track” requests that we receive from your browser.

10. European Union and European Economic Area Users. This section of this Privacy Policy applies only if you use the Sites or Apps from a country that is a Member State of the European Economic Area (EEA), and supplements the information in this Privacy Policy. As a member of the EEA, you have the right to access, rectify, erase, and export your personal data, as well as the right to object to the processing of your personal data. These rights are elaborated in the sections that follow.

a. You may withdraw data processing consent that is based consent you’ve previously given at any time. CMA ensures that withdrawal of consent will be as easy for the end user as it was for the end user to provide consent in the first place.

b. You may withdraw data processing consent that is based on the legitimate interests of CMA and/or a third-party associated with CMA at any time. CMA ensures that withdrawal of consent will be as easy for the end user as it was for the end user to provide consent in the first place.

c. You may object to the processing of your personal information used for direct marketing purposes.

10.1 Legal Basis for Processing Data. We process personal data for the purposes set out in this Privacy Policy, as described above. Our legal basis to process personal data includes processing that is: necessary for the performance of the contract between you and us (for example, to provide you with the services you request and to identify and authenticate you so you may use the Sites or Apps); necessary to comply with legal requirements (for example, to comply with applicable accounting rules and to make mandatory disclosures to law enforcement); necessary for our legitimate interests (for example, to manage our relationship with you and to improve the Sites or Apps); and based on consent by our customers (for example, to communicate with you about our products and services and provide you with marketing information), which may subsequently be withdrawn at any time (by using preference settings in emails, using this form, or emailing us as set out in Section 12: Contact Information) without affecting the lawfulness of processing based on consent before its withdrawal.

We may use automated decision making technologies, including profiling, to support our data processing activities. Our automated decision making capabilities include logic that attempts to identify artists, music, communications, products, or offers that we believe may interest you. By using this logic, it helps us personalize your interactions with CMA and CMA Affiliates. For you, this means that you may see online advertisements, direct marketing communications (if you have subscribed), or other advertising or marketing messages or special offers based on your activity on our Sites or interactions with CMA Companies or our third party partners.

In some instances, you may be required to provide us with personal data for processing as described above, in order for us to be able to provide you to use all the features of the Sites or Apps.

10.2 International and onward transfers. Our sharing your personal data in accordance with this Privacy Policy, may involve transferring your data outside the European Economic Area (EEA). Whenever we transfer your personal data out of the EEA, and in compliance with the Accountability for Onward Transfer Principles of the GDPR, we ensure a similar degree of protection is afforded to your data by ensuring, where required by law, at least one of the following safeguards is implemented:

(a) transferring personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission;

(b) using specific contracts approved by the European Commission which give personal data the same protection it has in Europe; or

(c) transferring personal data to the United States to an entity, if they are part of the Privacy Shield, which requires them to provide similar protection to personal data shared between the Europe and the U.S.

CMA subjects all personal data received from the EU in reliance on the Privacy Shield to the Privacy Shield Principles as adopted by the U.S. Department of Commerce.

In the event you have questions regarding our Privacy Policy, or your data, please send your inquiry to CMA at the email or physical address listed in Section 12 below, or by filling out the form at www.cmaworld.com/privacy/contact.

CMA has further committed to refer unresolved Privacy Shield complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not resolved your complaint, please contact or visit JAMS at https://www.jamsadr.com/file-an-eu-us-privacy-shield-claim for more information or to file a complaint.  The services of JAMS are provided at no cost to you.

You may be entitled, in accordance with applicable law, to request a copy of relevant safeguards by contacting CMA as described in the “Contact Information” section.

10.3 Security Measures To Protect Your Personal Data. CMA uses industry standard data protection protocols to protect your data.

11. Privacy Policy Amendments. CMA will notify you of changes to this Privacy Policy by posting the amended terms on the Sites five (5) business days before the effective date of the changes. If you do not agree to the new terms, you should stop using the Sites and Apps, and you will not be bound by the new terms. Otherwise, the new terms will take effect after thirty (30) days. If you are a user of one of the Apps, you will be asked to affirmatively accept the new terms in order to continue using the Application.

12. Contact Information. If you have any questions about this Privacy Policy, or wish to have your information removed from our systems, you may do so in the following ways:

(a) Write to us by postal mail at: Privacy Policy: Country Music Association, Inc.; 35 Music Square East, Suite 201, Nashville TN 37203

(b) Email us at online@cmaworld.com.

(c) Fill out a request form here: www.cmaworld.com/privacy/contact

(d) Call us toll-free at 1-800-998-4636

This Privacy Policy is effective as of and was last updated on 11/18/2019.