DC Jazz Festival (“we”, “us”, or “our”) is dedicated to protecting the privacy of your personal data. We have created this Privacy Policy to explain: i) what personal data we collect from users who engage with us via our mobile applications (app) or who visit our website at https://www.dcjazzfest.org/ (the “Sites”) and from users who use our digital services during DC JazzFest® (collectively, the “Services”); ii) how we use that information; and iii) how we share it with others. We encourage you to read this Privacy Policy and reach out to us using the contact methods at the end of the Privacy Policy if you have any questions.

​

This Privacy Policy does not apply to third-party websites, products, or services, even if they may link to our Sites or if our Sites link to them. We recommend that you review the privacy practices of those third parties before accessing third-party websites and sharing any personal data.

If you are a visually-impaired customer, a customer who has another disability or a customer who seeks support in other language, you may access this Privacy Policy by emailing us at privacy@dcjazzfest.org.

 

​

1. Collection and Use of Personal Data

​

For the purposes of this Privacy Policy, “personal data” means individually identifiable information about an individual consumer collected online by the operator and maintained by the operator in an accessible form. Personal data does not include “aggregate” or other non-personally identifiable information. Aggregate information is information that we collect about a group or category of products, service, or users that is not personally identifiable or from which individual identities are removed. We may collect the following personal data about you:

Category of Personal Data

Processing Purposes

Identifiers, including:

• Name

• Address

• Email address

• Phone number

• IP address

• Contact you and provide information

• Provide and maintain our Services

• Provide customer service

• Process donations and purchases

• Facilitate interactive features

• Internal analytics

• Market our Services directly to you

• Internal business purposes, including general business administration

• Audit, compliance, legal, policy, procedure, and regulatory obligations

• Fraud investigation and prevention

• Systems and data security

• Protecting the safety of our employees and others

• Any other purpose consistent with your consent and expressed preferences

• ​

Financial information, including

• Credit card number

• Debit card number

• Any other financial information

• Process donations and purchases

• Internal business purposes, including general business administration

​

Internet or other electronic network activity information, including:

• Browser version, the pages of our Sites that you visit, the time and date of your visit, the time spent on those pages

• Information using cookies and tracking technologies

• Diagnostic data

• Unique device identifiers

• Device operating system information

• Internet browser type

Same purposes as noted for “Identifiers”

​

Geolocation Data

• None

​

 We link users to map services for directions but do not collect geolocation data ourselves.

​

Characteristics of protected classifications, including:

• Disability status or necessary accommodations

• Provide and maintain access to our Services or DC Jazz Fest

• For internal business purposes, including general business administration

 

2. Sources of Personal Data

​

a. Personal data you provide us

We may ask you to provide us with certain information on our Sites when you contact us, sign up for our promotional emails, or otherwise interact with us.

​

If you make a purchase on our Sites, we may collect your name, physical address, billing address, email address, telephone number, and payment information such as your credit or debit card number (via Stripe, our third-party payment processor) and any other personal data that you choose to share with us on our Sites.

​

If you make a donation, we may collect your first and last name, email address, phone number, donation amount, and payment information such as your credit or debit card number.

​

We link users  to external map services (such as Google Maps or Apple Maps) to provide directions. This geolocation data is not stored by us , and we do not track or monitor your location over time.

​

b. Personal data collected automatically

​

Our Sites may use tracking technologies such as web beacons, embedded scripts, and tags, which collect information from you automatically as you use our Sites, including:

• Browser and device data. When you use our Sites, we may automatically collect information such as IP address, device identifier, device type, operating system and Internet browser type, screen resolution, operating system name and version, device manufacturer and model, language, plug-ins, add-ons, and the language version of the Sites you are visiting.

• Usage data. When you use our Sites, we may automatically collect information such as browsing history, time spent on the Sites, pages visited, links clicked, language preferences, patterns of use, and the pages that led or referred you to our Site.

 

3. Disclosure of Personal Data

​

We may disclose personal data to the following categories of third parties:

• Service providers. We may disclose personal data to our service providers to provide services on our behalf, such as payment processing, analytics, advertising, hosting, marketing, customer and technical support, and other services.

• Compliance and harm prevention. Under certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities.

• Business transfers and transactions. If we are involved in a merger, acquisition, asset sale, or other corporate combination, your personal data may be transferred to the acquiring or surviving entity.

​

4. Children’s Data

​

Our festival is a family-friendly event; however, we do not knowingly use our website, app or other digital Services to collect any personal data from children under the age of 18. If you think that your child provided personal information on our Sites without your permission, we encourage you to contact us immediately, and we will use our best efforts to promptly remove such information from our records.

​

5. Data Security and Retention

​

The security of your personal data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. We maintain appropriate technical, administrative, and physical safeguards to help protect the security of your personal data against unauthorized access, destruction, loss, alteration, disclosure or misuse, but we cannot guarantee its absolute security.

We will retain your personal data for as long as necessary for the purposes outlined in this Privacy Policy. This information will be used and retained to the extent necessary to comply with any legal obligations or policies, to resolve disputes, and/or enforce legal agreements. Personal data may also be retained for internal analytic purposes. This information is retained for a shorter period of time, unless it used to enhance security features or improve the functionality of our Sites. Our determination of precise retention periods will be based on (i) the length of time we have an ongoing relationship with you (such as whether you are a current employee or contractor) (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position, including regard to applicable statutes of limitations, litigation or regulatory investigations.

​

6. Transfers of Personal Data

​

Our Services are operated exclusively in the United States and intended for users located in the United States. We may transfer, store, and use information we collect and maintain about you, including personal data outside of your state, province, country, or other governmental jurisdiction. For such transfers, we take the necessary measures to ensure that your personal data receives an adequate level of protection. Please note that the data protection laws in the jurisdiction in which we process personal data may differ from those of your jurisdiction, and in certain circumstances, your personal data may be subject to access requests from governments, courts, law enforcement agencies or regulatory agencies in those other jurisdictions.

​

7. Opting Out of Promotional Emails and Newsletters

​

You may opt-out of any emails that we send for promotional purposes by clicking the “unsubscribe” links provided at the bottom of those emails. Please note that if you opt out of receiving promotional emails from us, we may still send you important administrative messages that are required to provide you with our Services or for other reasons disclosed in this Privacy Policy. You will continue to receive these emails, if appropriate, even if you unsubscribe from our optional communications.

​

9. Notice to Residents of Maryland

​

This Privacy Notice contains additional information for residents of Maryland about personal data that we collect, how we use it, what sources it is derived from, and who we disclose it to, and provides information regarding your rights, and our responsibilities, under applicable laws and regulations. This Notice does not apply to certain personal data that is already subject to certain federal and state regulations.

The provisions contained within this Notice are intended to provide disclosures in compliance with the Maryland Online Data Privacy Act (the “Maryland Privacy Law”). The Maryland Privacy Law provides or will provide rights to residents of Maryland to receive certain disclosures and access regarding collection, use, sale, and sharing of personal data.

​

a. Our personal data practices

​

The Maryland Privacy Law provides rights to Maryland residents to receive certain disclosures and access regarding collection, use, sale, and sharing of personal data. Details about what kinds of personal data we may collect or have collected, how we collect it, why we collect it, and who we may disclose it to are found in Sections 1 through 3 of this Privacy Policy.

​

b. Your privacy rights

​

If you are a resident of Maryland, you have the following rights under applicable law in relation to your personal data, subject to certain exceptions:

• Right to know and access. You have the right to know what personal data we collect, use, disclose, and/or sell or share as those terms are defined under applicable law. You may ask us to provide you with a portable copy of this information up to two times in a rolling twelve-month period.

• Right to delete and erase. You have the right to request under certain circumstances that we, as well as our service providers and contractors, delete the personal data that we collect about you.

• Right to correct inaccurate personal data. You have the right to request the correction of inaccurate personal data.

• Right to non-discrimination. You have the right not to receive discriminatory treatment for the exercise of the privacy rights described above.

• Right to opt out. You have the right to opt-out of targeted advertising, the sale of your personal data, and profiling decisions that could produce legal or similarly significant effects concerning the consumer.

• Rights concerning sensitive personal data. We cannot and will not process your sensitive data (as defined by applicable law) or your sensitive data inferences, or use your personal data for certain purposes without your affirmative consent.

​

c. How to Submit a Request

​

To exercise your privacy rights described above, please Contact Us (see Section 11 below). Please note that any request you submit to us is subject to an identification and residency verification process as permitted under applicable law. Additionally, all requests are subject to certain exceptions under applicable law, which may vary.

We do not charge a fee to process or respond to your verifiable consumer request unless it’s excessive, repetitive, manifestly unfounded, or in accordance with applicable law. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

You may designate an authorized agent to submit a request on your behalf, and if so, we may require proof of the agent’s authorization by you and/or verification of the agent’s own identity. Generally, a rights request must include:

• Sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which must include, at a minimum, your first and last name and email address.

• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to the request.

We cannot respond to your request or provide you with personal data if we cannot verify or authenticate your identity or authority to make the request and confirm that the personal information relates to you. We will only use personal data provided in a verifiable or authenticated consumer request to verify your (or your authorized agent, as applicable) identity or authority to make the request.

Except where otherwise noted, we will respond to your request within forty-five (45) days after receipt and we reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary, provided consumer notification of the extension is made within the first month. We will deliver our written response by mail or electronically, at your option.

​

d. How to Appeal Decisions About Your Rights  

​

Maryland residents. If you are a Maryland resident and want to appeal our decision about a request that you have made, please Contact Us (see Section 11 below). Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If the appeal is denied, you may contact Maryland’s Office of the Attorney General by phone at (888) 743-0023 or by submitting a form here. 

​

10. Updates to this Privacy Policy

​

We may change this Privacy Policy from time to time to reflect changes in our data practices or relevant laws. We will let you know via email and/or a prominent notice on our Sites, prior to the change becoming effective, and update the “Effective Date” at the top of this Privacy Policy. We recommend periodically reviewing this Privacy Policy for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

​

11. Contact Us

​

If you would like to communicate with us regarding certain privacy rights or have questions or concerns regarding this Privacy Policy, please contact us via the methods listed below:

• Email us at privacy@dcjazzfest.org

• Contact us: www.dcjazzfest.org/contact

• Call us at 855-332-7767

​