Privacy & Data Protection Policy

How to Read This Policy

This Policy applies to personal data collected by Gether and our affiliates during your interactions with us, including but not limited to:

• Communications on our platform or through other channels, such as attending our events or engaging with our support team.

• Usage of our products and services.

We are dedicated to transparency in our data practices, ensuring you understand how your personal data is handled and your rights regarding that data.

Collection and Use of Personal Data

Personal Data is defined as any information related to an identifiable individual, which can include names, identification numbers, location data, online identifiers, and characteristics specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person. Special categories of personal data as outlined in GDPR Articles 9, 10, and 87 are also considered under this Policy.

Subscription of Services

Our "Subscription of Services," as detailed in the Gether Terms of Use, encompasses all web-based applications, tools, and platforms provided by us, which you subscribe to or are made available to you. These services are accessible via Gether.com or other designated URLs.When using these services, Gether may process personal data as a processor, following the directions of our customers who act as data controllers. These controllers are responsible for adhering to applicable privacy and data protection laws, which may include providing privacy notices, disclosures, and obtaining consent for collecting personal data.

Data Processing Addendum

For detailed information on data processing as part of the Subscription of Services, please refer to the Gether Data Processing Addendum. This document provides comprehensive insights into our role as data processors and the types of information we handle.

Exclusions

This Policy does not extend to data collected by third parties, including content or applications linked to or from our services. We encourage you to review the privacy policies of any third-party services you interact with.

Your Rights and Choices

You have specific rights regarding the management and protection of your personal data, including but not limited to:

• The right to access and obtain a copy of your personal data on request.

• The right to request the correction of any inaccurate personal data we hold about you.

• The right to request the deletion of your personal data under certain conditions.

• The right to object to or restrict the processing of your personal data.

We are committed to enabling you to exercise these rights and manage your personal information effectively.

Our Commitment to Your Privacy

At Gether Event Tech Pvt Ltd. and its corporate affiliates ("Gether", "We", "Us", "Our"), we are steadfast in our commitment to protecting your privacy and safeguarding your Personal Data. Adhering strictly to this Policy, we implement a range of data protection regulations and industry best practices designed to secure your information and guarantee your ability to access and control it at any given time. This Policy elucidates the methods through which Gether collects information and the privacy and security measures we enact on our Platform.

Should there be any changes in the usage of your information, rest assured that we will keep you informed through various communication channels, such as email. We encourage you to regularly review this Policy for any updates or modifications by visiting our Platform at https://gethertech.com/.

Introduction to Gether

Gether is proud to offer what is among the world's most comprehensive and immersive community and event platforms. This platform enables Customers (as defined below) of a community or event to utilize Gether’s services ("Services") for connecting with Members, Attendees(as defined below) via our Gether Platform.

Roles Defined:

Data Controller: When Gether collects information directly from you, we assume the role of the Data Controller, responsible for managing your Personal Data.

Data Processor: Conversely, when we receive information from our Customers, Gether acts as a Data Processor, handling data in accordance with the directives provided by the Data Controller.

Should you have any inquiries regarding the management of your Personal Data by Gether, or wish to exercise your privacy rights, please do not hesitate to contact us at privacy@gether.com.‍

Definitions

Account

The self-service account created by the Customer on Gether’s Platform for utilizing the Services.

Customer Data

All data submitted, displayed, and/or uploaded by the End User, Authorized Administrator(s), and/or the Customer during registration, access, event hosting, or other uses of the Site.

Applicable Data Protection Laws

Refers to all data protection laws and regulations applicable to the processing of Personal Information (also known as “Personal Data”), including, but not limited to, United States federal and state privacy laws, European Union Data Protection Laws such as the General Data Protection Regulation ("GDPR"), and the California Consumer Privacy Act of 2018 ("CCPA"), along with any amendments and final regulations.

Customer (Data Controllers or Data Stewards)

The Organizer of the event holding a subscription agreement with Gether to use/access the Gether Platform for hosting virtual events. This includes employees, independent contractors, consultants, affiliates, successors, and assigns involved with the Platform/Services. They bear responsibility for the safe custody, transport, and storage of data, and the implementation of business rules.

Customer Personal Data

Any Personal Data that the Customer shares with or permits Gether to access, store, host, modify, share, delete, and further Process for the Services, processed by Gether and/or its Affiliates.

Personal Data

Information relating to an identifiable natural person, including names, identification numbers, location data, online identifiers, and other specific factors. This also covers special categories defined in Art. 9 of the GDPR, data related to criminal convictions and offences as outlined in Art. 10 of the GDPR, and national security numbers as defined in Art. 87 of the GDPR.

End Users (Attendees/Audiences)

Clients and individuals attending or participating in the events organized by the Customer via Gether Services.

Processor (Data Processor)

Entities processing Personal Data on behalf of the Data Controller, usually for specific purposes and services accessible to the Data Controller.

Sub-processor (Third-Party Service Provider)

Any appointed entity processing Personal Data on behalf of the Controller or an existing Sub-processor, as defined in Art. 4(10) and further explained in 28(4) of GDPR.

Supervisory Authority

Defined under the GDPR.Data Protection Officer (DPO)An individual responsible for the protection of Personal Data at Gether, where applicable.

What Information We Collect About You

Gether collects data for various reasons, such as product demonstrations, marketing, job vacancies, and other purposes when explicit consent is provided.

As Data Controller

• Contact Information: Gathered through the “Request for demo” form, including first name, last name, business email, phone number, and company name.

• Professional Information: For job vacancies, including job title, CVs, resumes, educational information, professional qualifications, work history, and other relevant professional details.

• Customer Contact Information: Includes first name, last name, email address, official address, title, designation, organization name, social media credentials, and payment details, where applicable.

• Customer Account Creation: Details such as first name, last name, email address, username or similar identifier, title or designation, and organization name, where applicable.

• Information Technology-Related Data: Data from the use of Gether’s website and mobile applications, including IP address, geolocation, browser, operating systems, device ID, cookies data, and metadata.

As Data Processor

Gether offers customised service options for Customers, enabling them to collect Personal Data of Attendees/Audiences according to the Customer’s privacy policy. This includes:

• Attendee Account Creation: Utilizes social logins from Facebook and LinkedIn, collecting email, first name, last name, and profile data. Fields are customizable.

• Registration and Ticketing: Standard fields include name, email, and contact number, with customization options available.Community/Event Website: May contain customizable "Contact Us" sections and embedded registration forms, collecting various Personal Information as per the Customer’s needs.

• Networking Community: Involves logging in through social profiles, with Gether using cookies. Features messaging, newsfeeds, and profile viewing, where Personal Information is utilized.

• App: Requires login, possibly through social profiles, and may request permissions such as access to media files and contacts. Attendees receive calendar invites for events.

Sensitive Personal Data collection is at the Customer's discretion and is protected with stronger safeguards in line with the Customer’s privacy policy.‍

Purpose for Collecting Your Information

When you engage with our Platform and Services, we collect your Personal Information for several key purposes aimed at enhancing your experience and our offerings. Below are the detailed reasons why we use your Personal Data:

Assisting with Inquiries and Services

• Demo Requests: When you fill out the "request a demo" form on our Platform, we use the information you provide to assist with your inquiry, whether you're looking to:some text

  • Request a demonstration of our solutions

  • Subscribe to our services

  • Opt-in to receive our newsletters for updates on upcoming products and initiatives

• Pre-Contractual and Contractual Interactions: We may need to identify and interact with you in response to your queries, particularly in situations that involve pre-contractual discussions or existing contractual obligations.

Contacting Purposes

Business Partners: We collect and utilize the Personal Data of our business partners, including their staff and third parties, to facilitate collaboration and maintain a productive business relationship or partnership.

Customers: Managing our contractual relationship with you is paramount, which includes handling your Personal Data throughout the lifecycle of our contract. This encompasses stages before, during, and after the establishment of a contract with you, your organization, and your staff.Enhancing Customer Service and Product QualityEvent Participation: During events, we may access your Personal Data to generate session transcripts using Google STT (Speech-to-Text). These transcripts, analyzed by OpenAI, help us in refining our customer service and the overall quality of Gether services.Profiling for Better UnderstandingTo gain deeper insights into our audience and customer base, we analyze certain aspects of your Personal Information, including but not limited to:Geographic location inferred from your IP addressPreferred language

Email domain usage

Engagement metrics, such as the number of pages visited and emails openedCommunication history with us, including instant messages, phone calls, and emailsWe employ aggregated information for these analyses to ensure privacy. For more detailed information, please refer to our Cookie Policy.Providing a Customized Platform ExperienceOur goal is to offer you a secure, efficient, and personalized experience on our Platform. We process both your Personal and non-Personal Information to continually create, develop, operate, deliver, and improve our Platform and Services. Rest assured, we do not intend to collect additional categories of Personal Information or use your data for significantly different, unrelated, or incompatible purposes without obtaining your explicit consent.Legal Basis for Processing Your InformationThis Privacy Policy is designed to be globally applicable, regardless of where you reside. In this section, we detail the legal grounds, often referred to as the "legal basis," for processing your personal information across our main activities.Note on Jurisdictional RequirementsThe legal requirements for processing personal information, including international transfers, may vary by country. For instance, the General Data Protection Regulation (GDPR) may necessitate specific legal bases. Where required, we will obtain your consent before processing your personal data.Our Legal Grounds for Processing:Contractual Necessity: We process your contact details and other relevant information to fulfill our contractual obligations, manage your account, and provide customer support and related offers.Consent: Where applicable, we obtain your consent for processing activities, such as:some textBrowsing our websites and using certain featuresMarketing communications, product updates, and newslettersSharing your data with third parties in jurisdictions with different data protection standardsCreating your user account and using cookies or similar technologiesCompliance with Legal Obligations: In certain circumstances, we retain personal information to comply with legal, tax, or accounting requirements.Retention, Return, and Deletion of Your Personal InformationWe retain your personal data only as necessary for the purposes outlined in this Policy and to meet legal obligations.Retention Periods:Platform Users: Personal data is retained for the duration necessary to provide our services and comply with legal requirements, including tax and accounting laws.Customer Data: We retain customer data for 36 months post-contract termination for potential reuse in future events, after which it is automatically deleted from our databases.Data Categories and Their Retention Basis:Platform User Data:Purpose: Enhancing and providing the Gether Platform and ServicesLegal Basis: Consent for cookies and marketing communications; Legitimate Interest for responding to inquiriesCustomer Data:Purpose: Customer interaction, offer provision, contract management, and administrative purposesLegal Basis: Contractual necessity for service provision and fulfillment; Legitimate Interest and Consent for additional processing activitiesProcessed Customer Data:Purpose and Legal Basis: Defined by the Customer, with Gether acting as the processor based on contractual obligations to the CustomerDeletion and Return Procedures:Upon Request: If you request deletion or return of your data and we have no legitimate business need to retain it, we will securely delete or anonymize it. If deletion is not immediately possible (e.g., data stored in secured archives), we will isolate and store your data securely until deletion is feasible.Attendee Data: Data provided by our customers is retained for 36 months post-contract or until an earlier deletion is requested by the customer. All such data is automatically purged from Gether and third-party databases after the retention period or upon customer request.‍Sharing Your Personal InformationGether EmployeesAccess to your Personal Data is limited to duly authorized Gether employees who require it to perform their job functions.Disclosure to Third-Party Service ProvidersIn certain cases, we might share your Personal Data with external Third-Party Service Providers for reasons including but not limited to:some textIT services for Platform maintenance and breakdown resolution.Internal business processes like access administration, data analysis, customer identification, service enhancement, marketing effectiveness, and billing.External auditors and data centers, or for fraud and illegal activity prevention when mandated by law or court orders.Your explicit consent is obtained for sharing Personal Data with Third-Party Service Providers utilized for services such as marketing, analysis, advertising, contract management, and cloud services.We ensure all Third-Party Service Providers process your Personal Data under our instructions, maintaining confidentiality, security, and compliance with applicable data protection laws.Cookies and Tracking TechnologiesOur site employs cookies and similar tracking technologies to gather non-Personal Data about your device usage. For details, refer to our cookie policy.Note: Cookie policies for different sections of our site (dashboard and community) are addressed separately.Data MinimizationTo protect your privacy, we take reasonable steps to remove or anonymize data that can directly or indirectly identify you, minimizing the Personal Data we use and share.Unsubscribe and Withdrawal of ConsentUnsubscribing from Gether NewsletterYou can easily unsubscribe from our marketing communications at any time via the "unsubscribe" link in our emails or by contacting us at privacy@gether.com or mydata@gether.com.Withdrawing Your ConsentYou have the right to withdraw your consent at any time. Please notify us at privacy@Gether.com or mydata@gether.com.

Withdrawal of consent may lead to us being unable to provide certain services. In such cases, we may delete or anonymize your information.Protecting Your InformationWe employ technical and organizational measures, including encryption and anonymization, to protect your Personal Data from unauthorized access, alteration, or destruction.Our security measures are periodically reviewed and updated to ensure effectiveness.Security MeasuresOur systems are configured with industry-standard security measures to protect your Personal Data.Access to your Personal Data is strictly limited to those with a legitimate business need.Cross-Border TransfersPersonal Data shared with us may be transferred across borders, ensuring compliance with applicable data protection laws through mechanisms like the EU-U.S. Privacy Shield or Standard Contractual Clauses.Additional Privacy InformationLinks to Other WebsitesOur Service may contain links to external sites. We recommend reviewing their privacy policies as we do not control these sites.Children’s PrivacyOur services do not target children under 18. We do not knowingly collect Personal Data from minors without appropriate consent.Personal Data BreachesWe have robust procedures to manage data breaches, ensuring prompt identification, assessment, and response.Your RightsDepending on your location, you may have various rights regarding your Personal Data, including access, rectification, and erasure.You have the right to object to certain processing activities and request data portability.Specific Rights Under U.S. State Laws and the CCPAResidents of certain U.S. states and California have specific rights concerning their Personal Data.Exercising Your RightsYou may exercise your rights by submitting requests through designated channels. Verification may be required.

Changes to This Privacy PolicyThis Policy is subject to updates. Please review periodically for changes.Contact InformationGether Event Tech Pvt Ltd
No. 3571, 13th G Main, 4th Cross,
HAL 2nd Stage, Indira Nagar,
Bengaluru (Bangalore), Karnataka 560038, India
Email: privacy@Gether.com, mydata@Gether.comData Protection OfficerFor specific inquiries regarding data protection, please contact our Data Protection Officer.Pushpalatha Krishnamurthypushpa.krishnamurthy@gethertech.com