Young Presidents’ Organization, Inc. dba Magic of YPO is the producer of Abracadabra! The Magic of YPO at Disney, a multi-day experience of the joys of childhood for members and their families and is referred to in this privacy notice as the “YPO,” “we,” “us,” or “our.”

We are committed to respecting your privacy and protecting your personal information.  In support of our commitment, we developed this privacy notice (together with our Cookie Notice and Controls) in order to be transparent about the information we collect about you and how we use and share this information, as well as the choices and rights available to you with respect to the information we maintain about you.  This privacy notice applies to the following:

• All YPO websites, applications, emails, and other online content that display or link to this privacy notice (each, an “online service”), including all information collected through our online services.
• Information collected by us (or on our behalf) offline or at events or other YPO-affiliated events and activities, but excluding instances where your information is collected under a different privacy policy or notice made available to you at the time your information is collected.
• Information shared with us by third parties for our own use, as well as publicly-available information collected by us.

The collection, use, and disclosure (collectively, “processing”) of information described in this privacy notice is controlled YPO.  Please read this privacy notice carefully.  If you have any questions or concerns about this privacy notice or our practices with regards to the information processed under this notice, please contact us using the contact information and methods provided under How To Contact Us below.

TABLE OF CONTENTS

1. Information We Process
2. How We Use Your Information
3. How We Share Your Information
4. Use Of Cookies and Similar Technologies
5. International Transfers
6. Links To Third-Party Websites
7. Retention Of Your Personal Information
8. How We Protect Your Information
9. Your Privacy Rights
10. Important Information Regarding Minors
11. Supplemental Information
12. How We Make Updates To This Privacy Notice
13. How To Contact Us
14. Supplemental Information and Rights | CALIFORNIA RESIDENTS
15. Supplemental Information and Rights | EUROPEAN RESIDENTS

Information We Process

We collect information that can be used to identify or contact a particular person (we refer to this type of data as “personal information”).  Personal information includes information that does not directly identify you by name or include your contact information, but which may be used to identify that a specific computer or device has accessed our online services and which if combined with certain other information could be used to identify you.  We collect personal information when you provide it to us directly (e.g., when you submit a contact form or register as a competitor through our online services); when generated by your activity on our online services (e.g., the amount of time spent on a particular page of our website); and when shared with us by our business partners (e.g., email marketing vendors or competition sponsors) or collected from other sources (e.g., publicly-available sources).

Information You Give To Us

In Short: We collect personal information that you provide to us such as name, address, contact information, passwords and security data, and payment information. 

You may visit our online services without submitting any information about yourself.  However, we do collect personal information that you voluntarily provide to us when registering with us, expressing an interest in obtaining information about us, when engaging with us, or otherwise contacting us.  This includes:

• Registering as one of our members, a family member of a member or a guest of a member.
• Requesting our communications.
• Participating at one of our events.
• Purchasing products or services from us.
• Participating in member profiles and directories, apps, message boards, chat rooms or other online services where registration is required.
• Communicating by any other means with us.

The personal information that we collect depends on the context of your interactions with us, the choices you make and the products and features you use.  The personal information we collect can include the following:

• Name and Contact Data.  We collect your first and last name, email address, postal address, phone number, and other similar contact data.
• Biographical Data. We collect your birthday, country of citizenship, name and contact data for your emergency contact, and if you are under 16 at the time of registration with us, your parent’s or guardian’s first and last name, email address, and phone number.
• Credentials.  We collect passwords, password hints, and similar security information used for authentication and account access.
• Photos.  We collect profile photos and other pictures and videos you share with us.
• Social Media Handles and Account Information.  We collect third-party social media handles and account information that you choose to share with us, such as LinkedIn, YouTube, Facebook, and Twitter account names and profile data.
• Event Data.  We collect information regarding the events and competitions in which you participate, including any prize amounts and other awards.
• Payment Data.  We collect data necessary to process your payment if you make purchases or donations, such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument.  In addition, if we award you prize money or otherwise issue payment to you, we collect your financial account information and other financial data as necessary to provide you with payment and to comply with applicable tax and other laws.  All payment data is stored by our payment processor and you should review its privacy policies and contact the payment processor directly to respond to your questions. 

ALL PERSONAL INFORMATION THAT YOU PROVIDE TO US MUST BE TRUE, COMPLETE AND ACCURATE, AND YOU MUST NOTIFY US OF ANY CHANGES TO SUCH PERSONAL INFORMATION. 

Information We Collect Automatically

In Short:  Some information – such as IP address and/or browser and device characteristics and device geolocation data – is collected automatically when you visit our online services.

We use cookies and similar technologies on our online services that automatically receive and track certain data about how you and other visitors interact with our online services, preferences expressed, and settings chosen.  For example, we may collect information about your device (such as your device and browser type, operating system, IP address, mobile network carrier, and device and advertising identifiers), and your use of our online services (such as access dates and times, online features or pages viewed, system activity and the third-party site or service you were using before interacting with our online services). In some cases, we do this through the use of cookies, pixel tags, local storage, statistical identifiers, software development kits, and similar technologies that create and maintain unique identifiers.

PLEASE SEE OUR COOKIE NOTICE AND CONTROLS TO LEARN MORE ABOUT OUR USE OF COOKIES AND SIMILAR TECHNOLOGIES, THE TYPES OF DATA COLLECTED THROUGH THESE TECHNOLOGIES, AND YOUR CHOICES REGARDING THEIR USE ON OUR ONLINE SERVICES.

Information Collected From Other Sources

In Short:  We may collect limited data from public databases, marketing partners, event organizers, and other outside sources.

We may obtain information about you from other sources, such as public databases, marketing partners, event organizers, as well as from other third parties.  Examples of the information we receive from other sources include social media profile information, results of competitions, and registration information submitted to third parties event sponsors and organizers.

Combining Information

Where permitted by law, we may combine the personal information you provide to us through our online services with information we collect through other online services, information collected offline, and information provided to us by third parties.  Where permitted by law and feasible, we may also combine your personal information with data collected automatically through your use of our online services, in which case we will treat any information that is combined or associated with your personal information as personal information for as long as it can reasonably be linked with your personal information.  We use this consolidated information to improve our online services and product and service offerings, enhance our marketing and research activities, communicate information to you, and for any other legitimate purpose described in this privacy notice.

How We Use Your Information

In Short: We process your information for a variety of legitimate business purposes described below, such as providing access to and securing your account, organizing and administering competitions, contacting you, and other operational purposes.

We use your personal information for a variety of legitimate business purposes, including the following:

• To facilitate account creation and logon process and administer user accounts.  We use your registration information and information collected automatically through cookies and similar technologies to create, administer, and provide you with access to your account.  In some cases, we process your information for these purposes pursuant to your consent.  In other cases, we process your information for these purposes in order to fulfill our obligations under an agreement with you, such as a competitor agreement.  In other cases, we process your information for these purposes based on our legitimate interest in providing members with a forum and mechanism to connect and compete.
• To supplement account profiles and sharing.  If you choose to link your account with us to a third-party account such as your Google or Facebook account, we use the information you allowed us to collect from those third parties to supplement your profile information and to enable you to easily share information with others on the applicable third-party services.  In some cases, we process your information for these purposes pursuant to your consent.  In other cases, we process your information for these purposes based on our legitimate interest in enhancing our products and services.
• To send you marketing and promotional communications. We and/or our third-party marketing partners may use the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt-out of our marketing emails at any time (see Your Privacy Rights below).  In some cases, we process your information for these purposes pursuant to your consent.  In other cases, we process your information for these purposes based on our legitimate interest in direct marketing.
• To send administrative information to you. We may use your personal information to send you product, service and new feature information and/or information about changes to our terms, conditions, and policies.  In some cases, we process your information for these purposes in order to fulfill our obligations under an agreement with you, such as a competitor agreement, supporter agreement, or promoter agreement.  In other cases, we process your information for these purposes based on our legitimate interest in providing you with relevant information about our products, services, and events.
• Administer events. We may use your information to administer events when you elect to participate in events.  In some cases, we process your information for these purposes pursuant to your consent.  In other cases, we process your information for these purposes in order to fulfill our obligations under an agreement with you, such as a registration agreement.  In other cases, we process your information for these purposes based on our legitimate interest in facilitating events.
• Request feedback. We may use your information to request feedback and to contact you about your use of our online services.  In some cases, we process your information for these purposes pursuant to your consent.  In other cases, we process your information for these purposes based on our legitimate interest in product, service and event development.
• To protect our online services. We may use your information as part of our efforts to keep our online services safe and secure (for example, for fraud monitoring and prevention).  We process your information for these purposes based on our legitimate interest in preventing fraud and securing our online services and information.
• To enforce our terms, conditions and policies.  In some cases, we process your information for these purposes in order to fulfill our obligations under an agreement with you, such as a registration agreement, or membership agreement.  In other cases, we process your information for these purposes based on our legitimate interest in ensuring network and information security and preventing fraud.  In other cases, we process your information for these purposes in order to comply with or enforce our rights under applicable law.
• To receive and issue payments.  In some cases, we process your information for these purposes in order to fulfill our obligations under an agreement with you, such as a competitor agreement, supporter agreement, or promoter agreement.  In other cases, we process your information for these purposes based on our legitimate interest in debt collection and facilitating payments.
• To respond to legal requests and prevent harm.  If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.  In some cases, we process your information for these purposes based on our legitimate interest in complying with applicable laws and preventing harm.  In other cases, we process your information for these purposes in order to comply with or enforce our rights under applicable law.
• For the purposes identified in our Cookie Notice and Controls.  In some cases, we process your information for these purposes pursuant to your consent.  In other cases, we process your information for these purposes based on our legitimate interests in performing online service analytics, product development, direct marketing, understanding user preferences, and securing our online services.  In other cases, we process your information for these purposes in order to comply with or enforce our rights under applicable law.
• For other business purposes.  We may use your information for other business purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our ventures, products, services, marketing and your experience.  In some cases, we process your information for these purposes pursuant to your consent.  In other cases, we process your information for these purposes based on our legitimate interests in performing online service analytics, product development, direct marketing, and understanding user preferences.

We may generate aggregate or de-identified data that does not contain your personally identifiable information.  We are not restricted in how we use or share of such data.

How We Share Your Information

In Short:  We share information with our affiliates, service providers, marketing partners, business partners, with other members or users of our online services, in the event of a business transfer, and for legal purposes.

We may share or otherwise disclosure your personal information with/to the categories of recipients identified below for the following purposes:

• YPO and Our Affiliates.  Any information collected by YPO will be shared with the other entity in order to jointly engage in the activities described in this privacy notice.  We may also share your information with our other affiliates, in which case we will require those affiliates to honor this privacy notice.  Affiliates include any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.  In some cases, we share your information for these purposes pursuant to your consent.  In other cases, we share your information for these purposes in order to fulfill our obligations under an agreement with you, such as a registration agreement, or membership agreement.  In other cases, we share your information for these purposes based on our legitimate interest in supporting our internal administrative operations.
• Vendors, Consultants and Other Third-Party Service Providers.  We may share your data with third party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to do provide such services.  Examples include payment processing, data analysis, email delivery, hosting services, customer service and marketing efforts. We may allow selected third parties to use tracking technology on the online services, which will enable them to collect data about how you interact with the online services over time. This information may be used to, among other things, analyze and track data, determine the popularity of certain content and better understand online activity.  In some cases, we share your information for these purposes pursuant to your consent.  In other cases, we share your information for these purposes in order to fulfill our obligations under an agreement with you, such as a competitor agreement, supporter agreement, or promoter agreement.  In other cases, we share your information for these purposes based on our legitimate interest in supporting our operational activities.  Unless described in this privacy notice or at the time your information is collected, we do not share, sell, rent or trade any of your information with third parties for their promotional purposes
• Third-Party Advertisers.  We may use third-party advertising companies to serve ads when you visit our online services. These companies may use information about your visits to our online services and other websites that are contained in or generated by cookies and similar technologies in order to provide advertisements about goods and services of interest to you.  Please see our Cookie Notice and Controls for additional information.  In some cases, we share your information for these purposes pursuant to your consent.  In other cases, we share your information for these purposes based on our legitimate interest in marketing and improving our products, services and events.
• Business Partners.  We may share your information with our business partners (such as event sponsors and promoters) to offer you certain products, services or promotions.  If we offer products, services, events or content a ‘co-branded’ basis, you may see both our logo and the logo of the co-branded partner.  To access, use, or participate in co-branded products, services, events or content, you may have to provide certain requested information which may be shared with our co-branded partners.  You should read the individual privacy policies and terms of use of our co-branded partners, as these may differ in some respects from this privacy notice.  Remember, you can always opt-out of sharing your information with a co-branded partner by choosing not to use or participate in the product, service, event, or content provided.  In some cases, we share your information for these purposes pursuant to your consent.  In other cases, we share your information for these purposes in order to fulfill our obligations under an agreement with you, such as a registration agreement, or membership agreement. In other cases, we share your information for these purposes based on our legitimate interest in promoting and facilitating our products, services and events.
• Other Members and Users.  Your member profile information and posted content (if any) may be shared with other registered members through account directories, apps, message boards, chat rooms or other interactive online services in which you participate.  In some cases, we share your information for these purposes pursuant to your consent.  In other cases, we share your information for these purposes in order to fulfill our obligations under an agreement with you, such as a registration agreement, or membership agreement.  In other cases, we share your information for these purposes based on our legitimate interest in providing members with a forum and mechanism to connect and compete.
• Business Transfers.  We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.  We share your information for these purposes based on our legitimate interest or in order to comply with or enforce our rights under applicable law.
• Legal Purposes.  We may also disclose information we collect to legal counsel, law enforcement, and other appropriate authorities in special cases, including when we have a reason to believe that such disclosure is necessary to identify, contact, or bring a legal action against someone who may be causing injury to or interference with our rights and property or those of any other person; or when we believe that it is required by applicable laws, court orders, or government regulations.  We share your information for these purposes in order to comply with or enforce our rights under applicable law.

The categories of recipients described above include the specific third parties listed below, as well as others.  We have categorized each recipient so that you may be easily understand the purpose of our data collection and processing practices.

• • Advertising, Direct Marketing, and Lead Generation: Google AdSense
  • Allow Users to Connect to their Third-Party Accounts: Facebook account, Instagram account and Youtube account
  • Communicate and Chat with Users: Attendify, MailChimp, Mandrill and Zendesk Chat
  • Content Optimization: Instagram embed, SoundCloud embedded player, Vimeo video, YouTube video embed and Google Fonts
  • Data Backup and Security: Updraft, Wordfence
  • Invoice and Billing: Stripe and Donately
  • Social Media Sharing and Advertising: AddThis
  • User Account Registration and Authentication: Facebook Login, Google OAuth 2.0, Instagram Authentication and WordPress Single Sign On
  • User Apps, Commenting and Forums: Attendify
  • Web and Mobile Analytics: Facebook Analytics, Google Analytics and Google Tag Manager
  • Website Hosting: Ionos
  • Website Performance Monitoring: New Relic
  • Website Testing : Google Website Optimizer

The list above identifies some of the third-parties that may receive information about you.  However, we may disclosure your information to other recipients that are not listed here.  This list is subject to change at any time and without notice.

Use Of Cookies and Similar Technologies

In Short:  We may use cookies and other tracking technologies to collect and store your information.  

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice and Controls.

International Transfers

In Short: We may transfer, store, and process your information in countries other than your own.  

The YPO and our servers are located in United States. If you are engaging with us from outside the United States, please be aware that your information will be transferred to, stored, and processed by us in our facilities located in the United States and by those third parties with whom we may share your personal information, which third parties may be located in the United States or in other countries.  The level of protection for your information in the United States or such other countries may not be the same as the level of protection in your country.

If you are a resident in the European Economic Area, then these countries may not have data protection or other laws as comprehensive as those in your country. We will however take all necessary measures to protect your personal information in accordance with this privacy notice and applicable law.

In particular, we comply with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States and has certified its compliance with it. As such, we are committed to subjecting all personal information received from European Union (EU) member countries, in reliance on the Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Framework, visit the U.S. Department of Commerce’s Privacy Shield List.

Company is responsible for the processing of personal information it receives, under the Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf.

With respect to personal information received or transferred pursuant to the Privacy Shield Framework, Company is subject to the regulatory enforcement powers of the U.S. FTC. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.  

Links To Third-Party Websites

In Short:  We are not responsible for and do not endorse the content of third-party websites or resources available through our online services.

This privacy notice only applies to our online services that link to this privacy notice.  However, our online services may contain links to third-party sites or services (e.g., websites relating to sanctioned and non-sanctioned competitions and events).  We do not endorse and are not responsible for the content of third-party websites or resources, and our privacy notice does not apply to any sites that are not controlled by the YPO, even if you access such sites via a link on our online services.  You should review the privacy policies and terms of use of any third-party site before providing any information to the controller of such site.

Retention Of Your Personal Information

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. 

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements).  No purpose in this privacy notice will require us keeping your personal information for longer than 2 years past the termination of the user’s account.  When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

How We Protect Your Information

In Short:  We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process.  To the extent appropriate or required by applicable law, these security measures include the following:

• Access to personal information is limited to authorized employees and service providers who need access to perform the activities described in this privacy notice on our behalf.
• Personal information is pseudonymized where appropriate or required by law, and sensitive personal information transferred to or stored on any mobile device is encrypted using industry-accepted encryption solutions.
• Personnel engaged in the processing of personal information are informed of the confidential nature of personal information, receive appropriate training on their responsibilities, and are obligated pursuant to our policies to maintain the confidentiality of personal information.
• The effectiveness of our security measures are regularly tested, assessed, and evaluated to ensure the ongoing security of processing systems.
• Internet-connected databases containing personal information are monitored for unauthorized intrusions using network-based and/or host-based intrusion detection mechanisms.
• Service providers and other third parties engaged by us to process personal information on our behalf are contractually obligated to process personal information only on our documented instructions and must provide similar security measures as those used by us or as required under applicable law.

Although we strive to provide reasonable and appropriate security for the personal information we process, no security system can prevent all potential security breaches.  In particular, email or forms sent using our online services may not be secure.  You should take special care before deciding to send us information via email and the transmission of personal information to and from our online services is at your own risk.  Further, if you create an account through our online services, it is your responsibility to protect your access credentials from unauthorized access or use.

Your Privacy Rights

In Short:  You have the rights and choices regarding the processing of your information as described below.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can log into your account settings and update your user account.  Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases.  However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with legal requirements.

Apps, Member Directory and Public Forums

If you create an account with us, you can make your profile information private so that it can’t be viewed by other members via the directory.  In addition, you can choose not to post information in apps, public forums, or chat rooms available through our online services.

Cookies and Similar Technologies

You can manage and change your cookie preferences or delete cookies entirely as described in our Cookie Notice and Controls.

Opting Out of Email Marketing

You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided under How To Contact Us below.  You will then be removed from the marketing email list – however, we will still need to send you service-related emails that are necessary for the administration and use of your account.

Jurisdiction-Specific Rights

In some regions and jurisdictions (such as California and the European Economic Area), you may have certain additional rights under applicable data protection laws.  To the extent that relevant jurisdictions grant additional privacy rights to individuals, these rights are described separately under the applicable Supplemental Information and Rights section included with and incorporated in this privacy notice below.

Controls For Do-Not-Track Features

In Short:  Our online services don’t honor do-not-track requests at this time.

Certain web browsers may allow you to enable a “do not track” option that sends signals to the websites you visit indicating that you do not want your online activities tracked.  Right now, there is no industry standard for how companies should respond to “do not track” signals, although one may be adopted in the future.  We do not respond to “do not track” signals at this time.  If we do so in the future, we will modify this privacy notice accordingly.  More information about “do not track” is contained in our Cookie Notice and Controls and available at www.allaboutdnt.com.

Important Information Regarding Minors

Our online services are intended for general audiences.  We do not knowingly collect any personal information from children under the age of 16 through our online services, except after obtaining verifiable parental consent or as otherwise permitted under applicable law.

IF YOU ARE UNDER 16 (SIXTEEN) YEARS OLD, PLEASE TALK TO YOUR PARENTS OR GUARDIANS BEFORE USING OUR ONLINE SERVICES OR PROVIDING YOUR NAME OR OTHER PERSONAL INFORMATION TO THE YPO.  YOU CANNOT SUBMIT INFORMATION TO OUR ONLINE SERVICES WITHOUT YOUR PARENT’S OR GURDIAN’S PERMISSION.  If the parent or guardian of a child under 16 years old believes that their child has provided us with personal information without permission, the parent or guardian should contact us using the details provided under How To Contact Us below to request access to the information and deletion of such information where required.

Supplemental Information

To the extent that certain jurisdictions require us to disclose additional information regarding our processing activities or grant additional privacy rights to individuals, such jurisdictions and the respective Supplemental Information and Rights section of this privacy notice describing these additional requirements/rights are identified below.

JURISDICTION | SCOPE	PRIVACY NOTICE SECTION
California residents	Supplemental Information and Rights | CALIFORNIA RESIDENTS
European residents or individuals who access our online services from Europe	Supplemental Information and Rights | EUROPEAN RESIDENTS

How We Make Updates To This Privacy Notice

In Short:  We will update this privacy notice at our discretion and as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time at our discretion. The updated version will be indicated by an updated “Last Updated” date and the updated version will be effective as soon as it is accessible.  If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to stay informed of how we process your information and your privacy rights relating to such processing.

How To Contact Us

If you have any questions or comments about this privacy notice, or to submit a request or otherwise exercise your privacy rights under this privacy notice, please contact (or submit your request to) our Data Protection Officer (DPO) using the contact information below.

E-mail:	aperry@ypo.org
Phone (toll-free):	+1 972 5871500
Postal mail:	The Magic of YPO, a dba of Young Presidents’ Organization, Inc.  Attn: Amber Perry, Data Protection Officer 225 East John Carpenter Freeway, Suite 500 Irving, Texas 75062, USA