EVENT PRIVACY NOTICE

This Event Privacy Notice ("Privacy Notice") supplements our Website Privacy Notice and describes how Sigma Computing, Inc., its subsidiaries, and its affiliates (collectively "Sigma", "we", "our", and "us") collect, use, transfer, and process Personal Data about you for Events, and your rights with respect to your Personal Data.

As used in this Privacy Notice,

• "Personal Data", means information that identifies, relates to, describes, or is reasonably capable of being associated, directly or indirectly, with you;
• "Participant(s)", "you", or "your" means individuals who register for, apply for, participate in, host sessions at, are speakers or panelists at, or otherwise attend Events.
• "Event(s)" means any summits, demonstrations, conferences, trade shows, webinars, seminars, or other events (whether virtual or in-person) that are hosted, organized, sponsored, or otherwise managed by Sigma (whether alone or with its partners and/or co-sponsors), and any related websites and apps.

Privacy Notice Contents

1. Personal Data We Collect and Process
2. Sources of Personal Data
3. Our Uses of Personal Data
4. Disclosure of Personal Data
5. Data Retention
6. Rights And Obligations
7. International Data Transfers
8. Security of your Personal Data
9. Changes to This Privacy Notice
10. Contact Us

Supplemental Privacy Notice for California Participants

Supplemental Privacy Notice For EEA/UK Participants

1. Personal Data We Collect and Process.

We may collect and process the following types of Personal Data of Participants:

• Identifiers and Contact Information, such as name, email address, and phone number;
• Professional Information, such as information regarding your job role and duties, your job title, your employer company’s name and address, and the industry you work in;
• Application Information, that is information you submit to be considered a session host, demonstrator, speaker, or panelist at an Event ("Speaker"), such as your profile, portfolio, resume, photograph, previous speaking, hosting or other relevant experience, publications, responses to application questions, and information regarding your prior experience using, selling, reselling, integrating, configuring, evaluating, analyzing, or developing Sigma’s products and service;
• Communication information, such as information you provide in emails, texts, or phone calls you initiate (or send) or receive in connection with your participation in an Event;
• Location Data, such as your country of residence;
• Information collected via technology, including links clicked, language preferences, IP addresses, device type, operating system and internet browser type, screen resolution, operating system name and version, language, plug-ins, and add-ons;
• Premises Records, such as information about your attendance and participation at in-person Events are Event premises, including access records from facility entry systems, your details on any Event badges (or other passes and entry tickets), and information captured our site security systems such as CCTV systems;
• Audio, Video and Electronic Information, such as information captured in Event photographs, Event recordings, Event live-streams, or CCTVs on Event premises, and media where the aforementioned Event related content is reproduced; and
• Information that may be considered sensitive Personal Data or Protected Characteristics, such as dietary needs, disability requirements, gender, sizing related information (e.g., t-shirt sizes).

2. Sources of Personal Data.

We collect Personal Data about you from the following sources:

• From you directly: We collect Personal Data from you directly, such as when you register for or attend an Event, submit your Speaker application, scan your Event badge, fill out a form or survey, or otherwise initiate or respond to communication with us. We also collect certain Personal Data from you automatically, such as information about you or your device(s) (i) through systems and technology that you use as part of registering/applying for or attending the Event, (ii) when you interact with Event related online forums and communications, or download Event related content, or (iii) when you attend or participate in any Event or sessions that are filmed or recorded.
• From Co-sponsors and Partners: When an Event is hosted, organized, or managed by a third-party ("Co-Sponsor"), and Sigma acts as a co-sponsor or partner at such Event (but is not the sole provider), the Co-Sponsor (i) may share, transfer, or disclose certain information about you with Sigma (such as your business contact information), and (ii) is responsible for the collection, use and transfer/sharing of your Personal Data to Sigma, in accordance with their privacy notices (as available on their website and event pages).
• From other third-parties: Sigma may contract with third-party service providers for the purposes of organizing, hosting, or managing Events ("Third-Party Providers"). These Third-Party Providers may collect your information from publicly available sources, from you directly, or through third parties they work with.

We may also combine information we have collected about you by the methods described above or in other contexts (such as data we have collected about you in connection with your use of any Sigma products and services) for our marketing and promotional purposes, such as to help us better determine what products, services and/or Events might be of interest to you.

3. Our Uses of Personal Data.

We collect, use, and process your Personal Data described above for the facilitation of your participation at Events, and for our other legitimate business purposes including:

• For hosting, managing, or organizing the event, including to (i) allow your participation in and registration for the Event, (ii) assess, determine, and confirm, your suitability as a Speaker at an Event, and facilitating such Speaking assignments, (iii) provide you with appropriate information about accessibility to the Event, and (iv) to administer the Event’s online properties and for internal operations, including troubleshooting, data analysis, and statistical and survey purposes;  
• For filming, photographing or otherwise recording the Event and publishing or reproducing such content on our website, social media accounts, and other formats where it would not be necessary, appropriate or practicable to obtain your specific consent;
• For communication purposes, including to correspond and communicate with you about the Event. Communications about the Event may include sending you pre-and post-Event information, creating biographies of Speakers or Participants, and preparing and distributing Event related materials;
• For compliance and legal purposes, including to (i) enforce our Event Terms, (ii) protect our business interests and the interests and rights of third parties; (iii) comply with and monitor our compliance with applicable laws and regulations, (iv) comply with lawful requests and legal process, (e.g., responding to subpoenas or requests from government authorities), and (v) resolve disputes, carry out our obligations and enforce our rights, and for any purposes in connection with any legal claims made by, against or otherwise involving you;
• For Sigma’s security, business, operational, and administration purposes, including (i) to analyze attendance of and participation in our Events; (ii) to maintain and monitor the security of the Event premises and systems, applications, and Sigma’s systems, (iii) to prepare and maintain analytics and records related to Events and participation in Events, (iv) to maintain and operate our relationship with Third-Party Providers, Co-Sponsors, and Event Partners, and (v) to research, analyze, develop, train, test, provide, maintain, and improve Sigma products, and services; and
• For marketing and sales purposes, including to (i) market and sell our Events, products, and services to you and (ii) to allow our Event Partners to market and sell their products and services to you, with your consent (as described in Section 4). You can opt-out of these marketing and sales related communications at any time, by clicking the unsubscribe links (or the equivalent) in our communications, or by filling this form.

In general, we will only use the Personal Data we collect from you for the purposes described in this Privacy Notice.
However, we may also use your Personal Data for other purposes that are not incompatible with the purposes we have disclosed to you (such as in the public interest) where this is permitted by applicable data protection laws.

4. Disclosure of Personal Data.

In addition to disclosure of your Personal Data, as stated in Section 3 of the Website Privacy Notice, we disclose your Personal Data in the following manner:

• Service Providers. We may disclose your Personal Data to third party service providers in order for those service providers to perform business functions on behalf of Sigma, related to the organization, hosting, or management of the Event ("Service Providers"); and
• Event Partners: We may share your Personal Data with third-parties that sponsor/co-sponsor the Sigma Event or otherwise partner with Sigma to host, organize, deliver, or manage the Event (collectively the "Event Partners") (i) to the extent required for Event Partners to effectively support Sigma in hosting, organizing, delivering, or managing the Event, and (ii) with your consent (and/or subject to your opt-out preferences), to allow Event Partners to market and sell their products and services to you. Your consent for the disclosure of Personal Data under (ii) may be collected at the time of registration (e.g., through the registration form) and/or otherwise during the Event (e.g., when you choose to scan your badge at an Event Partner’s booth).

When we disclose your Personal Data to third-parties who perform processing activities for or on behalf of Sigma, including Service Providers, we require them to abide by contractual, technical, and organizational measures that address the safeguarding and proper use of your Personal Data, and ensure that your Personal Data is processed only to the extent that such processing is necessary, consistent with this Privacy Notice, and in accordance with applicable law.

5. DataRetention.

We retain your Personal Data only so long as reasonably necessary to fulfill the purpose for which it was collected, or as otherwise permitted by applicable law. We securely delete or anonymize your Personal Data, when retention of such data is no longer reasonably necessary. If you have any questions regarding our retention policies or wish to make specific requests regarding the retention of your Personal Data, please contact privacy@sigmacomputing.com. We will make commercially reasonable efforts to comply with your reasonable requests, and where we cannot comply with your requests, we will provide you with our reasons for such non-compliance without unreasonable delay.

6. Rights And Obligations.

6.1 Your Rights.

Depending on your region, and/or your residency, your local data protection and privacy laws may grant you rights with respect to your Personal Data. These rights differ based on the local laws that apply to you but could include one or more of the following:

• Right to know (and/or access) the Personal Data that we hold about you, including access to duplicates of the Personal Data retained;
• Right to correct your Personal data if it is inaccurate, outdated, or incomplete;
• Right to request deletion of irrelevant Personal Data that we hold about you;
  Please note:    
  • If we delete your Personal Data, we may no longer be able to allow your participation in the Event; and    
  • We may have an overriding lawful basis for retaining your Personal Data (e.g., we may have to retain your Personal Data pursuant to our legal obligations).
• Right to limit processing, use, or disclosure of your sensitive Personal Data;
• Right to withdraw consent, where we have relied on your consent to process certain Personal Data;
• Right to request suspension of processing your Personal Data in certain circumstances, including when you believe that the Personal Data we hold about you is inaccurate or unlawful;
• Right to file a complaint with a supervisory authority; or
• Right to opt-out of sale and/or sharing of your Personal Data for targeted advertising, profiling, or cross-context behavioral advertising.

6.2 Exercising Your Rights.

We value your privacy. To exercise your privacy rights, please contact us by emailing us at privacy@sigmacomputing.com or using this link to submit your request. We will make commercially reasonable efforts to confirm receipt of your request within 10 business days and respond to your request within 30 to 45 calendar days (subject to the applicable privacy regulation in your region, and after requisite verification), unless we need additional time, in which case we will let you know. We may charge you a reasonable fee in instances that require a disproportionate effort, but we will advise you of any fee in advance. We may decline to process requests that are frivolous, unreasonably repetitive or burdensome, risk the privacy or impact the rights of others, or are extremely impractical.

6.3 Verification.

We may request certain information about you or your interactions with Sigma to verify your identity before we can respond to your requests to exercise your rights. This is done to protect your privacy and maintain security. We may require you to verify your name, region/country, location, email address, home address, and/or phone number in our records and provide information about your prior applications with Sigma (such as roles and positions for which you previously applied). In certain limited circumstances, we may require you to sign a declaration under penalty of perjury that you are the Participant whose Personal Data is the subject of the request.

6.4 Agent Requests.

You may authorize someone to make a privacy rights request on your behalf (an authorized agent). Authorized agents will need to demonstrate that you’ve authorized them to act on your behalf or must demonstrate they have power of attorney pursuant to applicable probate law. Sigma retains the right to request confirmation directly from you confirming that the agent is authorized to make such a request, or to request additional information to confirm the agent’s identity. An authorized agent is prohibited from using your Personal Data, or any information collected from or about you, for any purpose other than to fulfill your requests, for verification, or for fraud prevention.

7. International Data Transfers.

Sigma’s global organizational structure requires the global transfer of Personal Data to Sigma’s business partners, Event Partners, Co-Sponsors, Service Providers, and other third parties as described in Section 4 of this Privacy Notice. Your Personal Data may be transferred to, stored, and processed in a country (or region) other than the one in which it was provided. Sigma will ensure that appropriate or suitable safeguards are in place to protect the transferred Personal Data and that transfer is in compliance with applicable data protection laws.

• For transfers of Personal Data from territories other than EEA and the UK, and to the extent required by applicable laws, we have implemented data transfer agreements and/or obtained your consent, to securely transfer your Personal Data to territories other than the one in which it was provided your Personal Data or your home country.
• For transfers of Personal Data from the EEA and the UK, we implement appropriate data transfer mechanisms, such as implementing applicable data transfer mechanisms, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum (as applicable) or other lawful mechanisms for transfers of Personal Data as approved by the applicable regulators or legislators. Additionally, Sigma Computing, Inc. is certified under the Data Privacy Framework Program (DPF) as further described in our Website Privacy Notice.

If you have any inquiries or complaints about the handling of your Personal Data, please contact us in accordance with Section 10 of this Privacy Notice.

8. Security of your Personal Data.

Sigma has implemented appropriate technical, physical and organizational measures designed to provide industry standard security appropriate to the risk. Access to your Personal Data is restricted to those individuals who need such access for the purposes listed in Section 3. All Sigma personnel who are permitted to access Personal Data are bound by and required to abide by contractual, technical, and organizational measures that address the safeguarding and proper use of your Personal Data and are also regularly provided with privacy related training.

9. Changes to This Privacy Notice.

We reserve the right to change this Privacy Notice at any time. The "Last Updated" heading in this Privacy Notice indicates when it was last revised. Any changes will be posted on this page with an updated revision date. It is your responsibility to periodically review this Privacy Notice to remain informed about our collection, processing and sharing of your Personal Data. We may, in our sole discretion, provide you communications, including via email, about changes to our Privacy Notice; however, such communications do not abrogate or otherwise limit your responsibility to periodically review the Privacy Notice to determine whether any amendments have been made hereto. 

10. Contact Us.

If you have any questions about this Privacy Notice or our privacy practices, or would like to access the information it contains in a different format please contact us at privacy@sigmacomputing.com or write to us at: Sigma Computing, Inc., 116 New Montgomery St. Suite 700, San Francisco CA 94105.

Schedule 1

Supplemental Privacy Notice for California Participants

This Schedule 1 to the Event Privacy Notice ("CA Schedule") applies to Participants that are residents of California or California consumers as defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (Cal. Civ. Code §§ 1798.100 et seq.), and its implementing regulations ("CCPA"). This CA Schedule describes how Sigma processes and discloses your "Personal Information" (as defined by the CCPA, and as referred to hereinafter as "Personal Data"). This CA Schedule and supplements the information contained in the Event Privacy Notice.
1. Privacy Notice at Collection of Personal Data: Please see the following Sections of the Privacy Notice for an overview of what Personal Data we collect, and why: Section 1 (Personal Data We Collect and Process), Section 2 (Sources of Personal Data), Section 3 (Our Uses of Personal Data), and Section 4 (Disclosure of Personal Data).
2. Categories of Personal Data Collected and Disclosed:  

• Section 1 of the Event Privacy Notice describes the categories of Personal Data collected by Sigma in the last 12 months.
• Sigma doesn’t use or disclose your sensitive Personal Data for purposes other than those described in CCPA.
• The table below describes the categories of Personal Data disclosed to third parties (Recipients) in the last 12 months, including the categories of Recipients it was disclosed to.

3. Sale/Sharing of Personal Data. With your consent (and/or subject to your opt-out preferences), Sigma may "sell" or "share" (as defined in the CCPA/CPRA) your business contact information (e.g., your name, email address, phone number, job title and role, and employer name) with our Event Partners, as further described in Section 4. Sigma doesn’t sell or share your sensitive Personal Data. The categories of data shared with Event Partners in the last 12 months are (i) Identifiers and Contact Information, and (ii) Professional Information, as described in Section 2 of this CA Schedule.

4. Your Rights. In addition to the rights stated in Section 6.1. of the Privacy Notice, you have the following rights under the CCPA:

• Right to opt-out of "sharing" or "sale" of your Personal Data or processing of your Personal Data for targeted advertising, profiling or cross-context behavioral advertising
• Right to limit the use and disclosure of your sensitive Personal Data.
• Right to appeal any decision with regard to your privacy request
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights.

Schedule 2

Supplemental Privacy Notice For EEA/UK Participants

This Schedule 2 to Sigma’s Event Privacy Notice ("EEA/UK Schedule") applies to Participants and Speakers who are residents of or otherwise in the European Economic Area ("EEA") and United Kingdom ("UK"). This EEA/UK Schedule supplements the information contained in Privacy Notice.

1. DPO and Data Controller. A data controller is the entity who determines the purposes and means of the processing Personal Data. For Participants, Sigma Computing Inc., is the data controller for your Personal Data processed in accordance with this Privacy Notice. If you have any questions about our privacy practices please contact our Data Protection Officer ("DPO"). Our DPO may be reached at privacy@sigmacomputing.com or by writing to us at: Sigma Computing, Inc., 116 New Montgomery St. Suite 700, San Francisco CA 94105.
‍
2. Legal Basis for Processing. Our legal basis for collecting and using your Personal Data will depend on the Personal Data we collect and the context in which we collect such Personal Data. In most cases, our processing of your Personal Data will be justified on one of the following bases:

• As necessary for the performance of a contract with you or to take steps at your request to enter a contract, such as the performance of our contractual duties under the Event Terms;
• As necessary for the legitimate interests pursued by the Sigma, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of Personal Data, including the following interests (as further described in Section 3 of this Privacy Notice):    
  • For hosting, managing, or organizing the Event;    
  • For communication and correspondence purposes;    
  • For compliance and legal purposes;    
  • For Sigma’s security, business, operational, and administration purposes; and    
  • For certain marketing and sales purposes.
• In limited circumstances, we will rely on your consent for processing of your Personal Data. For example, we rely on your consent, when we share your Personal Data with our Event Partners for their sales and marketing activities.

3. Your Rights. In addition to the rights stated in Section 6.1 of this Privacy Notice, you have the following privacy rights:

• Right to Data Portability: Where we are relying upon your consent or the fact that the processing is necessary for the performance of a contract to which you are party as the legal basis for processing, and that Personal Data is processed by automatic means, you may ask us to provide you with your Personal Data, in a structured, commonly used and machine-readable format, and also to have your Personal Data transferred to another party where this is technically feasible.
• Right to Object: When we process your Personal Data based on legitimate interests, you may object to this processing. If you object, we will no longer process your Personal Data unless there are compelling and prevailing legitimate grounds under applicable law (e.g., your data is necessary for us to establish, exercise, or defend our legal rights).
• Right to Restriction: You may ask us to restrict our processing of your Personal Data where (a) you contest the accuracy of the Personal Data until we have taken sufficient steps to correct or verify its accuracy; (b) the processing is unlawful but you do not want us to erase your Personal Data; (c) we no longer need the Personal Data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims; or (d) where you have objected to processing justified on legitimate interest grounds pending verification as to whether Sigma has compelling legitimate grounds to continue processing. Where Personal Data is subjected to restriction in this way, we will only process it with your consent or for the establishment, exercise or defense of legal claims.
• Right to complain to a supervisory authority: You may lodge a complaint with your applicable supervisory authority if you consider that the processing of your Personal Data infringes applicable data protection laws. A list of supervisory authorities is available at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en