Brewers Association Privacy Policy

The Brewers Association Inc. and its subsidiaries and affiliates (collectively, “Brewers Association,” “BA,” “us,” “we,” or “our”) has prepared this Privacy Policy (“Privacy Policy”) to describe to you, or if you represent an entity or other organization, that entity or organization (in either case, “you,” or “your”) our online and offline practices regarding the personal information that the Brewers Association collects, uses, and shares on behalf of end users (“Users”) of our online informational platform (the “Platform”) accessed through the following websites www.CraftBeer.com, www.BrewersAssociation.org, www.HomebrewersAssociation.org, www.GreatAmericanBeerFestival.com, www.CraftBrewersConference.com, www.WorldBeerCup.org, www.BrewersPublications.com, and any other websites operated by the Brewers Association (each, a “Site”); or using the following mobile applications: the Craft Brewers Conference app, the Homebrew Con app, and any other applications operated by the Brewers Association (each, an “Application”); our related online and offline services, events, social media pages, and email and other electronic communications (and together with each Site and Application treated as a part of the “Platform” for purposes of this Privacy Policy); and the choices you have with respect to your personal information. In some cases, region-specific terms may apply to you, which are indicated in the section headings below.

The Brewers Association is a 501(c)(6) not-for-profit trade association. Note that certain not-for-profit entities are exempt from general personal information privacy policy disclosure requirements under some privacy laws.

The Brewers Association reserves the right, at any time, to modify this Privacy Policy. If we make revisions that change the way we collect, use, or share personal information, we will post those changes in this Privacy Policy. You should review this Privacy Policy periodically so that you keep up to date on our most current policies and practices. We will note the effective date of the latest version of our Privacy Policy at the end of this Privacy Policy. Your continued use of the Platform following posting of changes constitutes your acknowledgement of such changes.

This Privacy Policy covers the following topics:

COLLECTION OF PERSONAL INFORMATION
USE OF PERSONAL INFORMATION
SHARING OF PERSONAL INFORMATION
SECURITY OF PERSONAL INFORMATION
YOUR CHOICES
INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION
NOTICE TO EUROPEAN USERS
NOTICE TO RESIDENTS OF COLORADO
NOTICE TO RESIDENTS OF NEVADA
CONTACTING US

1. COLLECTION OF PERSONAL INFORMATION

1.1. Personal Information Collected. The following are categories (with non-exhaustive examples) of personal information we may collect about you. We may also collect other personal information that is not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Categories	Examples
A. Individual Identifiers and Demographic Information	Registration Information. When you become a member, register to attend one of our events, or otherwise register for an account with the Brewers Association, we may collect your name, title, email address, mailing address, phone number, and other similar identifiers. Such information shall be associated with your account, and you may update such information by editing the information with your account. Demographic Information. We may collect your age, gender, and photo. Where permitted by applicable law or with your consent, we may also collect information revealing racial or ethnic origin for the purpose of measuring our diversity and inclusion efforts or as otherwise described to you at the time of collection. Mailing List Information. When you sign up for one of our mailing lists, we may collect your email address or postal address.
B. Geolocation Data	Precise Geolocation. When you use one of our Applications, we may collect your location using GPS, or other similar location-tracking technologies. The Brewers Association may capture physical location or movements in order to provide route guidance, and proximity and duration information for providing personalized products and services, demographic analysis, or behavioral analysis.
C. Sensory Data	Videos and Audio Recordings. We collect audio and video recordings of events hosted by the Brewers Association. We and our service provider may also record or monitor any call or chat you have with us for quality control or training purposes, or to enforce our rights.
D. Commercial Information	Order Placement Information. We may collect your name, billing address, shipping address, email address, phone number, payment amounts and methods, order history, and order preferences when you place an order on one of our Sites. Feedback/Support. If you provide us feedback or contact us for support, we will collect your name and email address and possibly other personal information, as well as any other content that you send to us in order to reply. Market Research Studies. We perform marketing research studies to collect data for research purposes. The information you provide is used for research analysis and we analyze the answers in aggregate. Information you provide in response to or in connection with a market research study is and will be provided to our members or other entities or the public as part of cumulative market research information or statistical data in the ordinary course, but without identifying you. Member or Sponsor Promotions. We may collect information that you provide as part of a co-branded or sponsored promotion with a member or event sponsor. Such information may be shared with the promotion member or event sponsor. Preferences. We may collect information about your preferences and interactions with us, such as dietary restrictions, travel preferences, and marketing preferences.
E. Internet or Network Activity	Device Information. We may collect information from your computer or mobile device such as unique identifying information broadcast from your device or hardware and software specifications. Such device data may include computer or mobile device operating system type and version number, device or machine ID, manufacturer and model, browser type, IP address, internet service provider, and general location information such as city, state, or geographic area. Online Activity Information. We may collect online activity information from you, including what pages you visit, what products or files you view, referring/exit page, click-activity, referring website, or a date/time stamp for your visit.
F. Social Network Information	Social Information. We may offer you the ability to share your personal information through a social networking site (e.g., Instagram, Facebook, Twitter, LinkedIn), using such site’s integrated tools (e.g., Facebook Connect feature, Facebook “Like” button, Twitter “Tweet” button). The use of such integrated tools enables you to share personal information about yourself with other individuals or the public, depending on the settings that you have established with such social networking site. Additionally, by making personal information available on the website, you “opt in” to allow the Brewers Association to provide such personal information to a social networking site without your further consent.
G. Professional or Employment-Related Information	Professional Brewers Information. If you are associated with a Professional Brewer member, we will collect employment and professional information such as your employee contact information, employer headquarters, number of associated employees, current and past job history, and other employee personal information.
H. Inferences Drawn from Personal Information	Profile Information. We may infer information about your preferences and activities from your order history, and other personal information that we collect about you.

Unless we specifically request it, we ask that you not provide us with any sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the Platform, or otherwise to us.

We may also collect or create information from personal information in a manner that it cannot reasonably be used to infer information about, or otherwise be linked to, a particular individual. To the extent that we classify such information as “de-identified,” we commit to maintaining and using such information in a de-identified form and to not attempting to re-identify such information (except for purposes permitted by law).

1.2. Sources of Personal Information. We obtain the categories of personal information listed above from a variety of sources, including the following categories of sources:

Personal Information You Provide. The Brewers Association collects personal information when you voluntarily submit it to us. For example, we may collect or receive personal information from Users when a User creates an account; edits Registration Information; signs up to receive promotional communications; uses or accesses a service or content available through the Platform; participates in one of our events, conferences, or educational presentations; participates in one of our promotional sweepstakes, contests, or surveys; posts a review; submits a request to our customer service team; interacts with our social media pages; or otherwise interact with us or other Users through the Platform.

Automatically Collected Personal Information. In addition to personal information that we may receive directly from you, the Brewers Association indirectly collects other information from you automatically through the Platform. For example, we receive personal information from Users when a User visits and navigates our Platform on any device; installs and uses the Application; or enables location-based features on the Application. We may also collect personal information about Users over time and across different websites, apps, and devices when a User accesses the Platform. Third parties, such as our Advertising Partners, may also collect personal information this way on our Platform. Like many online services, we use cookies and similar technologies to facilitate some of this automatic data collection, such as:
- Cookies, which are text files that websites store on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, helping us understand User activity and patterns, and facilitating online advertising.
- Flash cookies, or locally stored objects, which are used on websites for purposes similar to cookies but allow storage of a larger amount of data.
- Web beacons, also known as pixel tags or clear GIFs, which are typically used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked, typically to compile statistics about usage of websites and the success of marketing campaigns.
- Local storage, which is used to save data on a visitor’s device. We use data from local storage to turn on web navigation, store multimedia preferences, customize what we show you based on your past interactions with our services, remember your preferences, and measure ad effectiveness.
- Session-replay technologies, which are third-party software used to record a video replay of users’ interactions with the Site and Application. The video replay may include users’ clicks, mouse movements, scrolls, mobile app touches, typing, and other activity taken during the session. We use these replays for research and development purposes, such as to help us troubleshoot problems with the Site and Application, understand how users interact with and use the Site and Application, and identify areas for improvement.
- Application Programming Interface (API), which collect personal information through third party APIs. An API is a programming interface that may be used to connect two computer applications for a variety of purposes, including to provide us with analytics regarding the use of our Platform, to integrate with social media, add features or functionality to our Platform, or to facilitate online advertising. APIs may enable third parties to collect personal information directly via our Platform.

Referrals. Users may recommend other contacts to join the Platform by providing their contact information or other data. Users may also provide information about other users of the Platform such as reviews of the services or products that he or she received, booking or scheduling information, or membership information. Please do not provide us with someone’s information unless you have their permission to do so.

Personal Information Obtained from Third Parties. In addition to the personal information that we collect from you directly and automatically, the Brewers Association may receive personal information about you from other third-party sources. For example, we receive personal information from our members, event organizers, fulfilment vendors, government agencies, social media sites, third party API integration partners, advertising partners, data analytics partners, operating systems and platforms, publicly available sources, or data licensors/providers that provide personal information to supplement what we already know about Users. We may merge or combine such personal information with the personal information we collect from you directly or automatically.

2. USE OF PERSONAL INFORMATION

In addition to the uses described in this Privacy Policy or at the time of collection, the Brewers Association may also use personal information for various purposes, including without limitation to:

Provide Our Platform. We may use your personal information to improve your experience on the Platform; provide services, products, and content to you and to our members and other Users; communicate with you about information that you request; identify you when you access and use the Platform; register, administer, and monitor accounts on the Platform.
Provide Our Products, Member Services, and Events. This could include fulfilling your orders for our products, request for member services, or registrations for our events. It could also include processing purchases or other transactions made through our eCommerce Sites or event registration Sites. For example, if you share your personal information to ask a question about our products, member services, or events, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product, request a member service, or register for an event, we will use such information to process your payment and facilitate delivery. We may also save your personal information to facilitate new product orders, process returns, respond to future requests for member services, or future event registrations.
Improve Our Platform, Products, Member Services, and Events. We use personal information to understand and analyze the usage trends and preferences of our Users to make our Platform, products, member services, or events better, diagnose technical issues, prevent fraud, and develop new and improved products and services. As part of these activities, we may create aggregated, de-identified, or other anonymous data from personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous or de-identified data and share it with third parties for our lawful business purposes.
Understand Your Interests. We use your personal information to personalize your experience on the Platform and to deliver information about products and services relevant to your interests. Our Platform may make suggestions for content that may be interesting to you and others. We use the data you provide and the data we have about other Users, to make these recommendations.
Respond to Your Requests or Questions. We use personal information to provide you with support and to respond to your requests for customer support, including to investigate and address your concerns and monitor and improve our responses. This may also include responding to your feedback.
Determine Your Eligibility and Set Up Your Account. We use your personal information to verify your identity or determine your eligibility for some of our products, member services, and event registrations. For example, this may include verifying your age, date of birth, and place of residence. If you set up an account on the Platform, we will use the Registration Information you provide in relation to that account creation to create, maintain, customize, and secure your account.
Market Products, Member Services, and Events. We use your personal information to provide you with information about products, member services, events, or other promotions. These might be third party offers we think you might find interesting, including those from other members or event sponsors. You may opt-out of our marketing communications as described in the “YOUR CHOICES” section below.
Interest-Based Advertising. We work with third-party advertising companies and social media companies to help us advertise our business and to display ads for our products and services. These companies may use cookies and similar technologies to collect information about you (including the online activity information and device information described above) over time across our Platform and other websites and services or your interaction with our emails, and use that information to serve ads that they think will interest you. In addition, some of these companies may use hashed customer lists that we share with them to deliver ads to you and to similar users on their platforms. You can learn more about your choices for limiting interest-based advertising in the “YOUR CHOICES” section below.
Offer the Membership Directory: We may include your Registration Information and other personal information as part of a membership directory that is published on the Platform to other Users.
Secure the Platform. We use personal information to: (a) maintain the safety, security, and integrity of our Platform, products and services, databases and other technology assets and business; (b) protect our, your, or others’ rights, privacy, safety or property (including by making and defending legal claims); (c) audit our internal processes for compliance with legal and contractual requirements and internal policies; (d) enforce the terms and conditions that govern the Platform; and (e) prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.
Communicate with You. We may communicate with you about your account or our relationship. We may also contact you about this Privacy Policy.
Comply with Law. We use personal information to respond to requests from law enforcement and as required by applicable law, court order, or government investigation.
With Your Consent. We will disclose your personal information in accordance with your prior direction or, in some cases, we may specifically ask you for your consent to collect, use, or share your personal information, such as when required by law.

3. SHARING OF PERSONAL INFORMATION

In addition to the specific situations discussed elsewhere in this Privacy Policy or at the time of collection, the Brewers Association may share your personal information in the following circumstances:

Related Companies and M&A Transactions. We may share your personal information with companies that are affiliated with us (that is, that control, are controlled by, or are under common control with us). In addition, if we transfer all or part of the business or make a transfer of assets or are otherwise involved in a merger or business transfer, financing, consolidation, reorganization, divestiture, or dissolution of all or a portion of our business (including in connection with a bankruptcy or similar proceedings), we may transfer your personal information to a third party as part of that transaction, including at the negotiation stage.
Consent. We may ask if you would like us to share your personal information with other unaffiliated third parties who are not described elsewhere in this Privacy Policy, and we may do so with your consent.
Legal Enforcement. We may disclose personal information in response to subpoenas, warrants, or court orders, in connection with any legal process, or to comply with relevant laws.
Compliance. We may share your personal information in the good faith belief that such action is necessary to comply with a legal obligation or for the purposes described above in the section titled “Secure the Platform.”
Service Providers. We may share your personal information with third parties who perform services on our behalf that are necessary for the orderly operation of the Platform. Among other things service providers may help us perform technology hosting, Application design, maintenance services, database management, questionnaire and form creation, Site analytics, Application analytics, event registration and management, billing, payment processing, eCommerce providers, fraud protection, credit risk reduction, marketing, or any other use set out in this Privacy Policy
API Integration Partners. We may share your personal information with third party API integration partners, such as Facebook, for advertising and marketing purposes, including generating web analytics and compiling User information, advertising, conducing marketing analysis, segment generation, promotional material planning and distribution, and providing you with recommendations for products or services based on a User’s interaction with our Platform.
Advertising Partners. We may also share personal information with third parties who we partner with for advertising campaigns or that collect information about your activity on the Platform for the purposes described in the “Interest-Based Advertising” section above.
Joint Member or Event Sponsor Offerings. We may jointly offer events, promotions, or any other product or service offerings with our members or event sponsors. The personal information that you submit through a joint event, promotion, or other product or service offering may be combined and transmitted with the Registration Information related to your account. Members and event sponsors may collect information directly from you, which may be combined with personal information disclosed by us. If you decide to request, enter into, or participate in an event, promotion, or other product or service offering that is offered by us and identified as a joint effort with a member or event sponsor, the information that you provide may be shared with us and with that identified member or event sponsor.
Social Networking. We may offer you the ability to share your personal information through a social networking website (e.g., Facebook, Twitter, Instagram), using such site’s integrated tools (e.g., Facebook Connect feature, Facebook “Like” button, or Twitter “Tweet” button). The use of such integrated tools enables you to share personal information about yourself with other individuals or the public, depending on the settings that you have established with such social networking site. For more information about the purpose and scope of data collection and use in connection with such social networking site or a site’s integrated tools, please visit the privacy policies of the entities that provide these social networking sites.
Public Forum and Messaging. We may provide you with the opportunity to post comments, messages, or reviews in a public forum. If you decide to submit personal information at these locations, that information will be available to other Users of the Platform and potentially the public. We do not control how other Users or third parties use any personal information that you make available to other Users or the public.
Professional Advisors. We may share personal information with persons, companies, or professional firms providing Brewers Association with advice and consulting in accounting, administrative, legal, tax, financial, debt collection, and other matters.

4. SECURITY OF PERSONAL INFORMATION

No method of transmission over the Internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from the risks presented by unauthorized access or acquisition, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of any unauthorized access or acquisition of your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

5. YOUR CHOICES

You can make the following choices regarding your personal information:

Changes to Your Personal Information. We rely on you to update and correct the personal information contained in your account. Note that we may keep historical information in our backup files as permitted by law. If our Platform does not permit you to update or correct certain personal information, please contact us as described at the end of this Privacy Policy.
Promotional Emails. You may choose to provide us with your email address for the purpose of allowing us to send newsletters, surveys, offers, and other promotional materials related to our Platform, as well as targeted offers from third parties. You can stop receiving promotional emails by clicking the “unsubscribe” links in the emails or by contacting us as described below. If you decide not to receive promotional emails, we may still send you service-related communications, such as those about your account, to fulfill orders for products and service you have requested, or deliver notifications directly to you through the Platform.
Geolocation Choices. You may choose not to provide your location to us in connection with your use of our Applications by declining any prompt requesting location information that appears in your device, and by customizing your device settings to prevent sharing of geolocation information.
Marketing Mailings/Catalogues. You may stop receiving promotional postal mail at any time by contacting us at the address listed in the section titled “CONTACTING US” below.
Application Push Notifications. Upon download of an Application, you were provided the option to opt-in to receiving notifications that may include alerts, sounds, and icon badges. Push notifications can be configured in settings on your mobile device.
Cookies. Most browsers let you remove or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser’s settings. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, however, you may not be able to use all functionality of the Platform and our Sites may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.
Analytics. The Site may use Google Analytics to help us analyze how the Site is being accessed and used. You can learn more about Google Analytics cookies by clicking here and about how Google protects your data by clicking here. To opt-out of Google Analytics, you can download and install the Google Analytics Opt-out Browser Add-on, available here.
Interest-Based Advertising. If you wish to limit third parties’ collection of information about your use of our Platform for the purpose of interest-based advertising, you can block third-party cookies in your browser settings, use browser plug-ins/extensions, and/or use your mobile device settings to limit the use of the advertising ID associated with your mobile device. You may also opt-out of interest-based advertising at the Digital Advertising Alliance or Network Advertising Initiative in the U.S., the Digital Advertising Alliance of Canada in Canada, or the European Digital Advertising Alliance in Europe. Mobile app users may opt out of receiving interest-based advertising in mobile apps provided by participating members of the Digital Advertising Alliance by installing the AppChoices mobile app. Some of the companies we work with may offer their own opt-out mechanisms. For example, you can learn more about how Google uses cookies for advertising purposes by clicking here and opt-out of ad personalization by Google by clicking here. Many of the opt-out preferences described in this section must be set on each device and/or browser for which you want them to apply. Please note that some of the advertising companies we work with may not participate in the opt-out mechanisms described above, so even after opting-out, you may still receive interest-based advertisements from other companies. If you opt-out of interest-based advertisements, you will still see advertisements online but they may be less relevant to you.
Do-Not-Track. Some web browsers and devices permit you to broadcast a preference that you not be “tracked” online. At this time, we do not modify your experience based upon whether such a signal is broadcast. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

6. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION

The Brewers Association is based in the United States of America. If you are from a country outside of the United States of America with laws governing data collection, use, and disclosure that may differ from U.S. law and you provide personal information to us, please note that any personal information that you provide to us may be transferred to the United States of America. By providing your personal information, where applicable law permits, you hereby specifically and expressly consent to such transfer and processing and the collection, use, and disclosure set forth herein related to the use of and access to the Platform.

7. NOTICE TO EUROPEAN USERS

The information provided in this “Notice to European Users” section applies only to individuals in the European Union, the European Economic Area, or the United Kingdom (collectively, “Europe” for purposes of this Privacy Policy). Except as otherwise specified, references to “personal information” in this Privacy Policy are equivalent to “personal data” governed by European data protection legislation.

7.1. Controller. The controller of your personal information covered by this Privacy Policy for purposes of European data protection legislation is Brewers Association Inc., Attn: Privacy Compliance, 1327 Spruce St., Boulder, Colorado US 80302.

7.2. Lawful basis for processing. The Brewers Association is required to inform you of the lawful basis of our processing of your personal information, which are described in the table below. If you have questions about the lawful basis of how we process your personal information, contact us at the address listed in the section titled “CONTACTING US” below.

Processing Purpose (as described above in the section titled, “USE OF PERSONAL INFORMATION”)	Lawful Basis
• To Improve Our Platform, Products, Member Services, and Events. • To Market Products, Member Services, and Events.• Interest-Based Advertising.	Processing is based on your consent. Where we rely on your consent you have the right to withdraw it anytime in the manner indicated on the Platform.
• To Provide Our Platform. • To Provide Our Products, Member Services, and Events. • To Offer the Membership Directory. • To Communicate with You. • To Understand Your Interests. • To Respond to Your Requests or Questions. • To Determine Your Eligibility and Set Up Your Account.	Processing is necessary for the performance of a contract. You are subject to a contract with us and we need to use your personal information to provide products and services.
• To Secure the Platform. • As Required by Law.	Processing is necessary to comply with our legal obligations.
• To Provide Our Platform. • To Provide Our Products, Member Services, and Events. • To Improve Our Platform, Products, Member Services, and Events. • To Understand Your Interests. • To Market Products, Member Services, and Events. • Interest-Based Advertising. • To Offer the Membership Directory. • To Secure the Platform. • To Use Personal Information as Otherwise Described in this Privacy Policy.	Processing activities constitute our legitimate interests. We consider and balance the potential impact on your rights before we process your personal information for our legitimate interests. We do not use your personal information for activities where our interests are overridden by the impact on you (unless we have your consent, or we are otherwise required to perform a contract or by law).

We may use your personal information for reasons not described in this Privacy Policy where permitted by law and if the reason is compatible with the purpose for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and explain the applicable legal basis. We will use your personal information only for the purposes for which we collected it, unless we reasonably determine we need to use it for another reason and that reason is compatible with the original purpose. For example, we consider deidentification, aggregation, and anonymization of personal information to be compatible with the purposes listed above and in your interest, because the deidentification, aggregation, and anonymization of such information reduces the likelihood of improper disclosure of that information.

7.3. Retention. The Brewers Association retains your personal information:

For so long as your account is active or as needed to provide you with the Platform or to fulfill our contractual obligations;
As necessary to comply with our legal obligations, resolve disputes, and enforce our agreements; and
For so long as is necessary for the purposes for which we collected such personal information.

7.4. Your Rights. European data protection laws give you certain rights regarding your personal information. You may ask us to take the following actions in relation to your personal information that we hold:

Access. Provide you with information about our processing of your personal information and give you access to your personal information.
Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
Correct. Update or correct inaccuracies in your personal information.
Restrict. Restrict the processing of your personal information.
Object. Object to our reliance on our lawful basis as the basis of our processing of your personal information that impacts your rights.
Delete. Delete your personal information.

When we receive your request, we may ask you to verify your identity before we can act on your request. We may withhold information where we are required by law to do so or if the search for that information would require disproportionate effort or have a disproportionate effect to, for example, the cost of providing the information, the time it would take to retrieve the data, or how difficult it may be to obtain the information requested.

If you are a resident of Europe and would like to exercise any of these rights, please submit your request to the email address listed at the end of this Privacy Policy. If you would like to submit a complaint about our use of your personal information or response to your requests regarding your personal information, you may contact us or submit a complaint to the data protection authority in your jurisdiction. In the European Economic Area, you can find your data protection regulator here. In the United Kingdom, you can find your data protection regulator here.

7.5. Cross-Border Data Transfer. If we transfer your personal information to a country outside of Europe such that we are required to apply additional safeguards to your personal information under European data protection laws, we will do so. Please contact us at the email address provided at the end of this Privacy Policy for further information about any such transfers or the specific safeguards applied.

8. NOTICE TO RESIDENTS OF CALIFORNIA (SHINE THE LIGHT LAW)

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits Users of our Platform that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes, if any. To make such a request, please write or email us by using the details at the end of this Privacy Policy. You must include the words “Shine the Light” in your subject line or correspondence.

9. NOTICE TO RESIDENTS OF COLORADO

This section applies only to Colorado residents and supplements the practices described in this Privacy Policy. It describes how we collect, use, and share personal information of Colorado residents, and their rights with respect to their personal information. For purposes of this section “personal information” means “personal data” as such term is defined in the Colorado Privacy Act (“CPA”), but does not include information exempted from the scope of the CPA.

9.1. Description of Privacy Practices. The following table sets forth the categories of personal information that may be processed, and how such information may be used, when provided for the specified purpose. For a description of the categories of personal information processed, see the section titled, “COLLECTION OF PERSONAL INFORMATION.” For a description of each of the processing purposes, see the section titled, “USE OF PERSONAL INFORMATION.”

All categories of personal information that we process may be shared with third parties to operate our business and for the purposes described in this Privacy Policy or at the time of collection. We may also “sell” your personal information to a third party in exchange for monetary or other valuable consideration, or process it for targeted advertising in the manner described in the section titled, “Interest-Based Advertising,” each as further detailed in the table below. For a description of the categories of third parties mentioned in the table, see the section titled, “SHARING OF PERSONAL INFORMATION.” To exercise your right to opt out of “sales” or targeted advertising, see “How to Exercise Your Colorado Privacy Rights” below.

Categories of Personal Information Processed	Processing Purpose	Personal Information “Sold” or Used for “Targeted Advertising”
Individual Identifiers and Demographic Information	Provide the Platform Provide Our Products, Member Services, and Events Improve Our Platform, Products, Member Services, and Events Understand Your Interests Respond to Your Requests or Questions Determine Your Eligibility and Set Up Your Account Market Products, Member Services, and Events Offer the Membership Directory Secure the Platform Communicate with You Comply with Law With Your Consent	Event registration information (contact information) may be “sold” to event sponsors.
Geolocation Data	Provide the Platform Provide Our Products, Member Services, and Events Market Products, Member Services, and Events With Your Consent	No
Sensory Data	Research and Development Direct Marketing For Compliance, Fraud Prevention, and Safety With Your Consent	No
Commercial Information	Provide the Platform Provide Our Products, Member Services, and Events Improve Our Platform, Products, Member Services, and Events Understand Your Interests Respond to Your Requests or Questions Market Products, Member Services, and Events Offer the Membership Directory Secure the Platform Communicate with You Comply with Law With Your Consent	No
Internet or Network Activity	Provide the Platform Provide Our Products, Member Services, and Events Improve Our Platform, Products, Member Services, and Events Understand Your Interests Market Products, Member Services, and Events Interest-Based Advertising	Used for targeted advertising
Social Network Information	Understand Your Interests Respond to Your Requests or Questions Market Products, Member Services, and Events Communicate with You	No
Professional or Employment Related Information	Provide the Platform Provide Our Products, Member Services, and Events Understand Your Interests Respond to Your Requests or Questions Determine Your Eligibility and Set Up Your Account Market Products, Member Services, and Events Offer the Membership Directory Secure the Platform Communicate with You Comply with Law With Your Consent	Event registration information (contact information) may be “sold” to event sponsors.
Inferences Drawn from Personal Information	Provide the Platform Provide Our Products, Member Services, and Events Understand Your Interests Market Products, Member Services, and Events Interest-Based Advertising	Used for targeted advertising.

9.2. Your Colorado Privacy Rights. Under Colorado law, you may request the rights listed below. Please note, these rights are not absolute, and, in some cases, we may not be able to respond to your request, such as when a legal exemption applies or if we are not able to verify your identity.

Access. You can request that we confirm whether we process your personal information and to access that personal information.
Correct. You can ask us to correct inaccurate personal information that we maintain about you.
Delete. You can ask us to delete personal information provided by or obtained about you.
Port. You can request to obtain a copy of personal information in a portable and, to the extent technically feasible, readily usable format.
Opt-out of sales or targeted advertising. If we “sell” your personal information or engage in “targeted advertising” according to Colorado law, you can opt-out.

9.3. How to Exercise Your Colorado Privacy Rights. You may request to exercise the Colorado privacy rights described above as follows:

Right to access/port, delete, correct, or opt-out of “sales”. You can request to exercise your access/port, deletion, correction, and opt-out of “sale” rights by:
- Emailing info@brewersassociation.org – Please put the statement “Colorado Consumer Request” in the subject line; or
- Calling (888) 822-6273
Right to opt-out of targeted advertising. You can request to opt-out out of the automatic collection of data on our Platform by cookies and similar technologies for targeted advertising by clicking on “Cookie Settings” in the footer of our website and updating your cookie preferences. Note that due to technological limitations, if you visit our Platform from a different computer or device, or clear cookies on your browser that store your preferences, you will need to return to this screen to select your preferences.

9.4. Authentication Process. We reserve the right to confirm your Colorado residence to process your requests and will need to confirm your identity to process your requests. This is a security measure to, for example, help ensure we do not disclose information to a person who is not entitled to receive it. The identity verification process may vary depending on how you submit your request. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.

9.5. Authorized Agents. Consistent with Colorado law, you may designate an authorized agent to make an opt out request on your behalf using the method described above. If you do so, we may require proof of your identification, the authorized agent’s proof of identification, and any other information that we may request in order to verify the request, including evidence of valid permission for the authorized agent to act on your behalf.

9.6. Right to Appeal. If we decline to take action on your request, you may appeal such refusal by sending us an email to info@brewersassociation.org within a reasonable time period after we sent you our decision.

10. NOTICE TO RESIDENTS OF NEVADA

Nevada Revised Statutes Chapter 603A allows Nevada residents to opt-out of the “sale” of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to another person. If you are a Nevada resident who wishes to exercise your “sale” opt-out rights, you may submit a request to us using the contact information listed at the end of this Privacy Policy.

11. CONTACTING US

If you have any questions or concerns about our Privacy Policy or any other privacy or security issue, please contact us at:

Brewers Association

Attn: Privacy Compliance

1327 Spruce St.

Boulder, Colorado US 80302

info@brewersassociation.org

Effective Date: June 27, 2023