Eventbrite Privacy Policy

DATED 2023-06-28 · VERSION 20230701_rev01 · COMPARED WITH 20230530_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20230530_rev01 to 20230701_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+Last Updated: October 27, 2022
+Last Updated: June 28, 2023
 To learn more about Eventbrite's Legal Terms, take a look [here](https://www.eventbrite.com/l/LegalTerms).
 ## 1-2
 \. Who We Are.
 Welcome to Eventbrite! We are a ticketing and registration platform dedicated to bringing the world together through live experiences. Through our platform, mobile apps and services, we enable people all over the world to create, discover, share and register for events.
 Eventbrite's products, features and offerings are available (a) online through various Eventbrite properties including without limitation, Eventbrite, Eventbrite Communities, Eventbrite Music, Eventbrite Venue, Lanyrd, Rally, Ticketea, Ticketfly, nvite ("Site(s)"); (b) off platform, including without limitation, RFID, entry management, sponsorship and marketing or distribution services; and (c) through mobile applications, webpages, application programming interfaces, and subdomains ("Applications"). (a), (b), and (c) are collectively referred to as "Eventbrite Properties" or our "Services".
 .2 Who's Who.When this Privacy Policy uses the term "Organizer" we mean event creators using the Services to create events for consumers using our Services (a) to consume information about, or attend, events ("Consumers"), or (b) for any other reason. Organizers, Consumers and third parties using our Services are all referred to in these Terms collectively as "Users", "you" or "your".
+Eventbrite, Inc. is a Delaware corporation with its principal place of business at 95 Third Street, 2nd Floor, San Francisco, California, 94103, Reg. No. 4742147 ("Eventbrite," "us," "we" or "our"). If you are resident in the EEA or Switzerland, Eventbrite, Inc. is the responsible party with respect to Personal Data (defined below) collected through the Services. Eventbrite EU's representative for European data protection law purposes is Eventbrite Operations (IE) Limited with its principal place of business at 97 South Mall Cork, T12 XV54 Ireland. Eventbrite's UK representative for European data protection law purposes is Eventbrite UK Limited with its principal place of business at 10-11 Charterhouse Square, London, EC1M 6EE United Kingdom.
+Eventbrite, Inc. is a Delaware corporation with its principal place of business at 95 Third Street, 2nd Floor, San Francisco, California, 94103, Reg. No. 4742147 ("Eventbrite," "us," "we" or "our"). If you are resident in the EEA or Switzerland, Eventbrite, Inc. is the responsible party with respect to Personal Data (defined below) collected through the Services. Eventbrite EU's representative for European data protection law purposes is Eventbrite Operations (IE) Limited with its principal place of business at 97 South Mall Cork, T12 XV54 Ireland. Eventbrite's UK representative for European data protection law purposes is Eventbrite UK Limited with its principal place of business at The Pavilions, Bridgwater Road, Bristol, England, BS13 8FD.
 If you have any questions or concerns at any time, please do not hesitate to contact us at the address above or by contacting us at privacy@eventbrite.com.
 \. Our Privacy Statement.
 .1 Application.This Privacy Policy sets forth our policy with respect to information that can be associated with or which relates to a person and/or could be used to identify a person ("Personal Data") that is collected from Users on or through the Services. This policy also covers personal data collected from Eventbrite sales customers and prospects. We take the privacy of your Personal Data seriously. Because of that, we have created this Privacy Policy. Please read this Privacy Policy as it includes important information regarding your Personal Data and other information.
 ## 3-4
 \. Personal Data That We Collect.When you use or interact with us through the Services or engage with Eventbrite as a sales customer or prospect, we may collect Personal Data. Sometimes this will be on our own behalf and other times this will be on behalf of an Organizer using our Services to run an event. This is an important distinction for purposes of certain data protection laws and is explained in more detail below.
 .1 Information Collected From All Users.Information you provide to us: For all Users we collect Personal Data when you voluntarily provide such information to the Services, such as when you register for access to the Services, contact us with inquiries, respond to one of our surveys or browse or use certain parts of the Services. The Personal Data we may collect includes without limitation your name, address, email address and any other information that you choose to provide and/or that enables Users to be personally identified. Information we automatically collect: We also automatically collect certain technical data that is sent to us from the computer, mobile device and/or browser through which you access the Services ("Automatic Data"). Automatic Data, includes without limitation, a unique identifier associated with your access device and/or browser (including, for example, your Internet Protocol (IP) address) characteristics about your access device and/or browser, statistics on your activities on the Services, information about how you came to the Services and data collected through Cookies, Pixel Tags, Local Shared Objects, Web Storage and other similar technologies. You can find out more information about how we use Cookies and other similar tracking technologies in our Cookie Statement. When you register for the Services or otherwise submit Personal Data to us, we may associate other Non-Personal Data (including Non-Personal Data we collect from third parties) with your Personal Data. At such instance, we will treat any such combined data as your Personal Data until such time as it can no longer be associated with you or used to identify you.
+.2 Information Collected From Organizers.If you are an Organizer we will collect additional Personal Data from you. Information you provide to us: In some cases, we may collect your credit card information (e.g., your credit card number and expiration date, billing address, etc.), some of which may constitute Personal Data, to secure certain payments. In addition, if you use our payment processing services, we will collect financial information from you (e.g., your bank account information or an address to send checks) as necessary to facilitate payments and information required for tax purposes (e.g., your taxpayer identification number). Information we obtain from other sources: We may also collect or receive Personal Data including your name, email address and other contact information from third party sources, such as third party websites and marketing partners, your bank, our payment processing partners and credit reporting agencies.
+.2 Information Collected From Organizers.If you are an Organizer we will collect additional Personal Data from you. Information you provide to us: In some cases, we may collect your credit card information (e.g., your credit card number and expiration date, billing address, etc.), some of which may constitute Personal Data, to secure certain payments. In addition, if you use our payment processing services, we will collect financial information from you (e.g., your bank account information or an address to send checks) as necessary to facilitate payments and information required for tax purposes (e.g., your taxpayer identification number). When you create an event, we may ask you to provide a phone number and send you a text message to verify your account and prevent fraudulent activity on our Services. Our SMS Terms are available [here](https://www.eventbrite.com/help/en-us/articles/927159/). Information we obtain from other sources: We may also collect or receive Personal Data including your name, email address and other contact information from third party sources, such as third party websites and marketing partners, your bank, our payment processing partners and credit reporting agencies.
 .3 Information Collected From Consumers.If you are a Consumer we will collect additional Personal Data from you, sometimes for our own purposes and other times on behalf of an Organizer (see Section 16 below for more information).
 Information you provide via Eventbrite Properties or Applications: If you register for a paid event, you will provide financial information (e.g., your credit card number and expiration date, billing address, etc.) some of which may constitute Personal Data. In addition, Organizers can set up event registration pages to collect virtually any information from Consumers in connection with registration for an Organizer's event listed on the Services. Eventbrite does not control an Organizer's registration process nor the Personal Data that they collect. When you register for, or otherwise provide information to Eventbrite in conjunction with an Organizer event or activity, whether that information is yours or a third party's, in connection with a purchase, registration, or transfer, that Organizer will receive and may use the information you provide. Please see Section 5.5 below, titled "How We Disclose and Transfer Your Personal Data:[Organizers](https://www.eventbrite.com/support/articles/en_US/Troubleshooting/eventbrite-privacy-policy)" for more information about an Organizer's receipt and use of your Personal Data.
 Information we obtain from other sources: We may also collect or receive Personal Data from third party sources, such as Organizers, other Consumers, social media or other third party integrations, your credit card issuing bank, our payment processing partners or other third parties.
 .8 Aggregated Personal Data.In an ongoing effort to understand and serve our Users better, we often conduct research on our customer demographics, interests and behavior based on Personal Data and other information that we have collected. This research is typically conducted on an aggregate basis only that does not identify you. Once Personal Data is in an aggregated form, for purposes of this Privacy Policy, it becomes Non-Personal Data.
 ## 5-6
 \. How We Disclose And Transfer Your Personal Data.
+.1 Background. We are not in the business of selling your Personal Data. We consider this information to be a vital part of our relationship with you. Therefore, we will not sell your Personal Data to third parties, including third party advertisers. There are certain circumstances in which we may disclose, transfer or share your Personal Data with certain third parties without further notice to you, as set forth in this Privacy Policy.
+.1 Background. We are not in the business of selling your Personal Data. We consider this information to be a vital part of our relationship with you. Therefore, we will not sell your Personal Data to third parties, including third party advertisers. Some interpretations of the CCPA take the position that when a website uses third parties' cookies or similar technology for its own analytics or advertising purposes, the website is engaged in a "sale." For more information, please see the State-Specific Supplemental Privacy Notices available [here](https://www.eventbrite.com/support/articleredirect). There are certain circumstances in which we may disclose, transfer or share your Personal Data with certain third parties without further notice to you, as set forth in this Privacy Policy.
 .2 Business Transfers. As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, Personal Data may be part of the transferred assets. We may also disclose your Personal Data in the course of due diligence for such an event. You acknowledge and agree that any successor to or acquirer of Eventbrite (or its assets) will continue to have the right to use your Personal Data and other information in accordance with the terms of this Privacy Policy.
 .3 Parent Companies, Subsidiaries and Affiliates.We may also share your Personal Data with our parent companies, subsidiaries and/or affiliates for purposes consistent with this Privacy Policy. Our parent companies, subsidiaries and affiliates will be bound to maintain that Personal Data in accordance with this Privacy Policy.
 .4 Agents, Consultants and Service Providers.We may share your Personal Data with our contractors and service providers who process Personal Data on behalf of Eventbrite to perform certain business-related functions. These companies include our marketing agencies, online advertising providers, data enhancement and data services providers, database service providers, backup and disaster recovery service providers, email service providers, payment processing partners, customer support, tech support, hosting companies and others. When we engage another company to perform such functions, we may provide them with information, including Personal Data, in connection with their performance of such functions.
 (d) Transactional or Responsive Communications. Certain electronic communications from Eventbrite are responsive to your requests. For instance, if you are a Consumer, we must email you your ticket or registration on behalf of the Organizer when you purchase such ticket or registration. As a further example, if you email our customer support department, we will return your email. Notwithstanding any unsubscribe election that you have made, you will still receive these transactional or responsive emails. You can stop receiving these types of emails only by [contacting us](https://www.eventbrite.com/support/contact-us). By electing to stop receiving all electronic communications from us or through our system, you will no longer receive any updates on events you have created (including payout issues) or on events you are registered to attend (including emails with your tickets). We do not recommend that you do this unless you plan to no longer use the Services, are not currently registered for an event, are not currently organizing an event, and will have no need to receive further communications from us or through our system.
 (e) Retention. It may take up to forty-eight (48) hours for us to process an unsubscribe request. Even after you opt out of all electronic communications, we will retain your Personal Data in accordance with this Privacy Policy, however, we will no longer use it to contact you. However, Organizers who have received your Personal Data in accordance with this Privacy Policy may still use that Personal Data to contact you in accordance with their own privacy policies, but they may not use our system to do so.
 .3 Do Not Track. We currently do not participate in any "Do Not Track" frameworks that would allow us to respond to signals or other mechanisms from you regarding the collection of your Personal Data.
+.4 Targeted Advertising. Eventbrite may work with certain advertising partners to show you ads that are targeted to your interests as described in section 4.4 of this Privacy Policy. To opt out of targeted advertising, click the **Do Not Sell Or Share My Personal Information** link in the footer of our [homepage](http://www.eventbrite.com/)**.** To complete your request, you must switch the toggle and submit a request through the [Eventbrite Privacy Center.](https://privacy.eventbrite.com/policies)
 ## 11-12
 \. Exclusions.
 .1 Personal Data Provided to Others. This Privacy Policy does not apply to any Personal Data that you provide to another User or visitor through the Services or through any other means, including to Organizers on event pages or information posted by you to any public areas of the Services.
 .2 Third Party Links. This Privacy Policy applies only to the Services. The Services may contain links to other websites not operated or controlled by us (the "Third Party Sites"). The policies and procedures we described here do not apply to the Third Party Sites. The links from the Services do not imply that we endorse or have reviewed the Third Party Sites. We suggest contacting those sites directly for information on their privacy policies.
 \. Children - Children's Online Privacy Protection Act. We do not knowingly collect Personal Data from children under the age of thirteen (13). If you are under the age of thirteen (13), please do not submit any Personal Data through the Services. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce our Privacy Policy by instructing their children never to provide Personal Data through the Services without their permission. If you have reason to believe that a child under the age of 13 has provided Personal Data to us through the Services, please [contact us](https://www.eventbrite.com/support/contact-us) and we will endeavor to delete that information from our databases.
 ## 13-14
+\. International Privacy Laws. If you are visiting the Services from outside the United States, please be aware that you are sending information (including Personal Data) to the United States where our servers are located. That information may then be transferred within the United States or back out of the United States to other countries outside of your country of residence, depending on the type of information and how it is stored by us. These countries (including the United States) may not necessarily have data protection laws as comprehensive or protective as those in your country of residence; however, our collection, storage and use of your Personal Data will at all times continue to be governed by this Privacy Policy. 14. Changes To This Privacy Policy. The Services and our business may change from time to time. As a result, at times it may be necessary for us to make changes to this Privacy Policy. We reserve the right, in our sole discretion, to update or modify this Privacy Policy at any time (collectively, "Modifications"). Modifications to this Privacy Policy will be posted to the Site with a change to the "Updated" date at the top of this Privacy Policy. In certain circumstances Eventbrite may, but need not, provide you with additional notice of such Modifications, such as via email or with in-Service notifications. Modifications will be effective thirty (30) days following the "Updated" date or such other date as communicated in any other notice to you. Please review this policy periodically, and especially before you provide any Personal Data. This Privacy Policy was updated on the date indicated above. Your continued use of the Services following the effectiveness of any Modifications to this Privacy Policy constitutes acceptance of those Modifications. If any Modification to this Privacy Policy is not acceptable to you, you should cease accessing, browsing and otherwise using the Services.
+\. International Privacy Laws. If you are visiting the Services from outside the United States, please be aware that you are sending information (including Personal Data) to the United States where our servers are located. That information may then be transferred within the United States or back out of the United States to other countries outside of your country of residence, depending on the type of information and how it is stored by us. These countries (including the United States) may not necessarily have data protection laws as comprehensive or protective as those in your country of residence; however, our collection, storage and use of your Personal Data will at all times continue to be governed by this Privacy Policy.
+\. Changes To This Privacy Policy. The Services and our business may change from time to time. As a result, at times it may be necessary for us to make changes to this Privacy Policy. We reserve the right, in our sole discretion, to update or modify this Privacy Policy at any time (collectively, "Modifications"). Modifications to this Privacy Policy will be posted to the Site with a change to the "Updated" date at the top of this Privacy Policy. In certain circumstances Eventbrite may, but need not, provide you with additional notice of such Modifications, such as via email or with in-Service notifications. Modifications will be effective thirty (30) days following the "Updated" date or such other date as communicated in any other notice to you.
+Please review this policy periodically, and especially before you provide any Personal Data. This Privacy Policy was updated on the date indicated above. Your continued use of the Services following the effectiveness of any Modifications to this Privacy Policy constitutes acceptance of those Modifications. If any Modification to this Privacy Policy is not acceptable to you, you should cease accessing, browsing and otherwise using the Services.
 ## 15-16
+\. Dispute Resolution. If you have a complaint about Eventbrite's privacy practices you should write to us at: Eventbrite, Inc., Attn: Privacy Officer, 95 Third Street, 2nd Floor, San Francisco, California, 94103 USA, or by email privacy@eventbrite.com. We will take reasonable steps to work with you to attempt to resolve your complaint. Residents of the EEA, Switzerland or the UK who believe that their information has not been processed in compliance with the Privacy Shield Principles may raise their complaints in a number of ways. For further information, please see our [Privacy Shield Notice](https://www.eventbrite.com/support/articleredirect). 16. EEA, SWITZERLAND AND UK ONLY The EU General Data Protection Regulation (GDPR) requires Eventbrite and Organizers using the Service to provide Users with more information about the processing of their Personal Data. Here is what you need to know: Legal grounds for processing your Personal Data The GDPR requires us to tell you about the legal ground we're relying on to process any Personal Data about you. The legal grounds for us processing your Personal Data for the purposes set out in Section 4 above will typically be because:
+\. Dispute Resolution. If you have a complaint about Eventbrite's privacy practices you should write to us at: Eventbrite, Inc., Attn: Privacy Officer, 95 Third Street, 2nd Floor, San Francisco, California, 94103 USA, or by email privacy@eventbrite.com. We will take reasonable steps to work with you to attempt to resolve your complaint. Residents of the EEA, Switzerland or the UK who believe that their information has not been processed in compliance with the Privacy Shield Principles may raise their complaints in a number of ways. For further information, please see our [Privacy Shield Notice](https://www.eventbrite.com/support/articleredirect).
+\. EEA, SWITZERLAND AND UK ONLY The EU General Data Protection Regulation (GDPR) requires Eventbrite and Organizers using the Service to provide Users with more information about the processing of their Personal Data. Here is what you need to know:
+Legal grounds for processing your Personal Data
+The GDPR requires us to tell you about the legal ground we're relying on to process any Personal Data about you. The legal grounds for us processing your Personal Data for the purposes set out in Section 4 above will typically be because:
 - you provided your consent;
 - it is necessary for our contractual relationship;
 - the processing is necessary for us to comply with our legal or regulatory obligations; and/or
 - the processing is in our legitimate interest as an event organizing and ticketing platform (for example, to protect the security and integrity of our systems and to provide you with customer service, etc.).
+Transfers of Personal Data As Eventbrite is a global company, we may need to transfer your Personal Data outside of the country from which it was originally provided. This may be intra-group or to third parties that we work with who may be located in jurisdictions outside the EEA, Switzerland and the UK which have no data protection laws or laws that are less strict compared with those in Europe. Whenever we transfer Personal Data outside of the EEA, Switzerland or the UK, we take legally required steps to make sure that appropriate safeguards are in place to protect your Personal Data. This includes the use of Standard Contractual Clauses issued pursuant to Commission Implementing Decision (EU) 2021/914 of June 4, 2021 of the European Parliament and of the Council, and for transfers from the UK, the UK International Data Transfer Addendum (IDTA). You can find Eventbrite's [pre-signed Standard Contractual Clauses](https://cdn.evbstatic.com/s3-s3/static/images/en_US/legal_policies/Eventbrite_Organizer_Standard_Contractual_Clauses.pdf) and additional information in the [Organizer Data Processing Agreement](https://www.eventbrite.com/support/articles/en_US/Troubleshooting/data-processing-addendum-for-organizers) (DPA). Eventbrite has also certified its compliance with the EU-U.S. and Swiss-U.S. Privacy Shield as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data transferred from those countries. We have certified that we adhere to the Privacy Shield principles of Notice, Choice, Accountability for Onward Transfers, Security, Data Integrity & Purpose Limitation, Access and Recourse, Enforcement & Liability when processing Personal Data from the EEA, Switzerland or the UK in the United States. You can find out more about our commitment to the EU-U.S. and Swiss-U.S. Privacy Shield Framework in our Privacy Shield Notice. Personal Data retention We retain your Personal Data for as long as necessary to provide you with our Services, or for other important purposes such as complying with legal obligations, resolving disputes, and enforcing our agreements. If you have an account with us, we will typically retain your Personal Data for a period of ninety (90) days after you have requested that your account is closed or if it's been inactive for seven (7) years. Your rights. Data protection law provides you with rights in respect of Personal Data that we hold about you, including the right to request a copy of the Personal Data, request that we rectify, restrict or delete your Personal Data, object to profiling and unsubscribe from marketing communications. For the most part, you can exercise these rights by logging in and visiting the My Account page or changing the "cookie settings" in your browser (see our Cookie Statement for more information). If you can't find what you're looking for in the My Account page, please contact us using the contact information set out in Section 15 above. Please note that requests to exercise data protection rights will be assessed by us on a case-by-case basis. There may be circumstances where we are not legally required to comply with your request because of the laws in your jurisdiction or because of exemptions provided for in data protection legislation. If you have a complaint about how we handle your Personal Data, please get in touch with us as set forth in Section 15 to explain. If you are not happy with how we have attempted to resolve your complaint, you may contact the relevant data protection authority. Eventbrite as a data controller and a data processor EU data protection law makes a distinction between organizations that process Personal Data for their own purposes (known as "data controllers") and organizations that process personal data on behalf of other organizations (known as "data processors"). If you have a question or complaint about how your Personal Data is handled, these should always be directed to the relevant data controller since they are the ones with primary responsibility for your Personal Data. Eventbrite may act as either a data controller or a data processor in respect of your Personal Data, depending on the circumstances. For example, if you create an account with us to organize your events, Eventbrite will be a data controller in respect of the Personal Data that you provide as part of your account. We will also be a data controller of the Personal Data that we have obtained about the use of the Applications or Eventbrite Properties, which could relate to Organizers or Consumers. We use this to conduct research and analysis to help better understand and serve Users of the Services as well as to improve our platform and provide you with more targeted recommendations about events we think may be of interest to you. However, if you register for an event as a Consumer, we will process your Personal Data to help administer that event on behalf of the Organizer (for example, sending confirmation, promotional and feedback emails, processing payments, etc.) and to help the Organizer target, and understand the success of, their event and event planning (for example, providing event reports, using analytics to gain insights into the effectiveness of various sales channels, etc.). In these circumstances, Eventbrite merely provides the tools for Organizers; Eventbrite does not decide what Personal Data to request on registration forms, nor is it responsible for the continued accuracy of any Personal Data provided. Any questions that you may have relating to your Personal Data and your rights under data protection law should therefore be directed to the Organizer as the data controller, not to Eventbrite.
+Transfers of Personal Data
+## 17-19
+As Eventbrite is a global company, we may need to transfer your Personal Data outside of the country from which it was originally provided. This may be intra-group or to third parties that we work with who may be located in jurisdictions outside the EEA, Switzerland and the UK which have no data protection laws or laws that are less strict compared with those in Europe.
+\. CALIFORNIA RESIDENTS ONLY. If you are a California resident, we provide additional information about our information practices and you may have certain rights with respect to your information. For more information, please see the State-Specific Supplemental Privacy Notices [here](https://www.eventbrite.com/support/articleredirect). 18. NEVADA RESIDENTS ONLY. If you are a Nevada resident, you may have certain rights with respect to your information. For more information, please see the State-Specific Supplemental Privacy Notices [here](https://www.eventbrite.com/support/articleredirect). 19. BRAZIL ONLY. If you are a Brazil user, we provide additional information about our information practices and you may have certain rights with respect to your information. For more information, please see the Brazil Supplemental Privacy Notice [here](https://www.eventbrite.com.br/support/articleredirect).
+Whenever we transfer Personal Data outside of the EEA, Switzerland or the UK, we take legally required steps to make sure that appropriate safeguards are in place to protect your Personal Data. This includes the use of Standard Contractual Clauses issued pursuant to Commission Implementing Decision (EU) 2021/914 of June 4, 2021 of the European Parliament and of the Council, and for transfers from the UK, the UK International Data Transfer Addendum (IDTA). You can find Eventbrite's [pre-signed Standard Contractual Clauses](https://cdn.evbstatic.com/s3-s3/static/images/en_US/legal_policies/Eventbrite_Organizer_Standard_Contractual_Clauses.pdf) and additional information in the [Organizer Data Processing Agreement](https://www.eventbrite.com/support/articles/en_US/Troubleshooting/data-processing-addendum-for-organizers) (DPA).
+Eventbrite has also certified its compliance with the EU-U.S. and Swiss-U.S. Privacy Shield as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data transferred from those countries. We have certified that we adhere to the Privacy Shield principles of Notice, Choice, Accountability for Onward Transfers, Security, Data Integrity & Purpose Limitation, Access and Recourse, Enforcement & Liability when processing Personal Data from the EEA, Switzerland or the UK in the United States. You can find out more about our commitment to the EU-U.S. and Swiss-U.S. Privacy Shield Framework in our Privacy Shield Notice.
+Personal Data retention
+We retain your Personal Data for as long as necessary to provide you with our Services, or for other important purposes such as complying with legal obligations, resolving disputes, and enforcing our agreements.
+If you have an account with us, we will typically retain your Personal Data for a period of ninety (90) days after you have requested that your account is closed or if it's been inactive for seven (7) years.
+Your rights.
+Data protection law provides you with rights in respect of Personal Data that we hold about you, including the right to request a copy of the Personal Data, request that we rectify, restrict or delete your Personal Data, object to profiling and unsubscribe from marketing communications.
+For the most part, you can exercise these rights by logging in and visiting the My Account page or changing the "cookie settings" in your browser (see our Cookie Statement for more information). If you can't find what you're looking for in the My Account page, please contact us using the contact information set out in Section 15 above. Please note that requests to exercise data protection rights will be assessed by us on a case-by-case basis. There may be circumstances where we are not legally required to comply with your request because of the laws in your jurisdiction or because of exemptions provided for in data protection legislation. If you have a complaint about how we handle your Personal Data, please get in touch with us as set forth in Section 15 to explain. If you are not happy with how we have attempted to resolve your complaint, you may contact the relevant data protection authority.
+Eventbrite as a data controller and a data processor
+EU data protection law makes a distinction between organizations that process Personal Data for their own purposes (known as "data controllers") and organizations that process personal data on behalf of other organizations (known as "data processors"). If you have a question or complaint about how your Personal Data is handled, these should always be directed to the relevant data controller since they are the ones with primary responsibility for your Personal Data.
+Eventbrite may act as either a data controller or a data processor in respect of your Personal Data, depending on the circumstances.
+For example, if you create an account with us to organize your events, Eventbrite will be a data controller in respect of the Personal Data that you provide as part of your account. We will also be a data controller of the Personal Data that we have obtained about the use of the Applications or Eventbrite Properties, which could relate to Organizers or Consumers. We use this to conduct research and analysis to help better understand and serve Users of the Services as well as to improve our platform and provide you with more targeted recommendations about events we think may be of interest to you.
+However, if you register for an event as a Consumer, we will process your Personal Data to help administer that event on behalf of the Organizer (for example, sending confirmation, promotional and feedback emails, processing payments, etc.) and to help the Organizer target, and understand the success of, their event and event planning (for example, providing event reports, using analytics to gain insights into the effectiveness of various sales channels, etc.). In these circumstances, Eventbrite merely provides the tools for Organizers; Eventbrite does not decide what Personal Data to request on registration forms, nor is it responsible for the continued accuracy of any Personal Data provided. Any questions that you may have relating to your Personal Data and your rights under data protection law should therefore be directed to the Organizer as the data controller, not to Eventbrite.
+## 17-18
+\. CALIFORNIA, VIRGINIA, COLORADO, CONNECTICUT, UTAH, and NEVADA RESIDENTS ONLY. If you are a resident of California, Virginia, Colorado, Connecticut, Utah or Nevada, we provide additional information about our information practices and you may have certain rights with respect to your information. For more information, please see the State-Specific Supplemental Privacy Notices [here](https://www.eventbrite.com/support/articleredirect).
+\. BRAZIL ONLY. If you are a Brazil user, we provide additional information about our information practices and you may have certain rights with respect to your information. For more information, please see the Brazil Supplemental Privacy Notice [here](https://www.eventbrite.com.br/support/articleredirect).