Privacy

Updated: December 19, 2025

Your privacy is important to us, so we have developed this Privacy Statement that outlines our privacy practice on how we process, collect, use, and share your Personal Information as well as your privacy rights under certain privacy laws.

This Privacy Statement (“Privacy Statement”) applies to the Services of RSA Conference LLC and its subsidiaries, including RSAC AS (“RSAC”, “we,” “us,” or “our”). Services include (i) RSAC's websites and mobile experience, including our mobile application(s) (our "Websites"), (ii) RSAC programs such as RSAC Membership, (iii) physical events such as RSAC’s annual cybersecurity conference (“RSAC Conference”) and Executive Programs (together with RSAC Conference “Physical Event(s)”), and (iv) virtual events such as seminars, webcasts, podcast, webcasts and webinars (“Virtual Event(s)”) (collectively “Physical Events and “Virtual Events” are referred to herein as “RSAC Events”) . This Privacy Statement does not apply to RSAC's Business Partners (as defined below); or to any other third parties, even if links to their websites are on our Websites. We recommend that you review the privacy statements of the other parties with whom you interact.

What this Privacy Statement Covers

This Privacy Statement applies to Personal Information, which we define as any information relating to an identified or identifiable person who can be identified, directly or indirectly, by reference to an identification number or to one or more factors specific to their physical, physiological, mental, economic, cultural, or social identity.

This Privacy Statement applies to all Personal Information we collect when you access or use our Services, or otherwise interact with us or our representatives. This Privacy Statement does not apply to data that is not Personal Information, including anonymous, deidentified, or aggregated data.

Contents

Categories and Sources of Personal Information We Collect
How We Use and Share Your Information
Your Marketing Choices
Our Use of Cookies and Other Tracking Technologies
Generative Artificial Intelligence, Machine Learning and Related Tools
Data Retention and Security
Biometric Information
Your Privacy Rights
Submitting a Request
Other Region-Specific Disclosures
How We Protect Your Information
Our Services are Not Intended for Children
Links to Third-Party Websites and Services
Legal Basis of Processing
International Transfer of Personal Information
Contact Us
Changes to this Privacy Statement

Categories and Sources of Personal Information We Collect

Sources of Information We Collect

The type of information we collect about you depends on your specific use of our Services, and the ways that you interact with us. This may include information about:

How you use or visit our Websites, mobile experience, accounts;
Registering for, attending, or participating in RSAC Event(s) or programs, (including Membership);
Requesting Services;
Contacting, billing, and other information you provide;
Profiling which includes communication and presenting you with relevant content; and
How we advertise and market to you, which includes sending promotional communications, targeting advertising, and presenting you with relevant offers.

We also obtain information from third party sources. We protect information obtained from third parties according to the privacy practices as described in this Privacy Statement. These third-party sources vary over time and may include:

Data brokers from which we purchase demographic data to supplement the information we have collected about you;
Communication services, including email providers and social networks, when you give permission to access your information on such third-party services or networks;
Partners with which we offer co-branded products, services, or engage in joint marketing activities;
Publicly available sources, such as open government databases;
RSAC business partners, including sponsors, exhibitors and community partners (“Business Partners”) to provide you offers, products and services, to better predict and deliver content and marketing offers that may interest you; and
Service providers to support functionality for our Services including our mobile applications, payment processing, authentication and account access, and customer support (“Service Provider”).

Categories of Information We Collect

The Personal Information we process may include the following:

Identifiers and contact details such as your name, email address, mailing address, travel booking details, contact telephone numbers;
Professional and employment information such as your job title and other business or company information;
Biometric information such as your faceprint, which is collected by our Service Providers. See the “Biometric Information” section of this Privacy Statement to learn more about how this information is collected, used, disclosed and stored by our Service Providers in connection with our RSAC Membership web application or mobile application(s);
Education Information such as educational degrees;
Credentials such as your passwords, password hints, and similar security information used for authentication and account access;
Demographic information such as your age, country, interests, and preferences;
Web form information you provide in our web forms (forms that you choose to complete will indicate whether the information requested is mandatory or voluntary);
Financial payment information to process payments, such as your payment instrument number (e.g., a credit card or debit card number) and the security code associated with your payment instrument;
Account history information related to the Services you purchase, and the activities associated with your account;
Internet or Electronic Usage Data such as IP address, device identifier, location data, browser type and language, access times, the Uniform Resource Locator (URL), other unique identifiers and other technical data that may uniquely identify your device, system or browser;
Audio, electronic, or visual information such as video and audio recordings of certain RSAC Event sessions.
Browser history information about our Websites you visit;
Error reports and performance information of the Services and any problems you experience, including error reports;
Troubleshooting and help information when you contact RSAC for technical support or customer support services, phone conversations or chat sessions with our representatives may be monitored and recorded;
Content consumption information about media content (e.g. videos, apps and games) you access through our Services;
Feedback and ratings information you provide to us such as customer survey feedback and product reviews you write;
Social Media Account Information such as account name and link, publicly available account data, and history of engagement with RSAC to communicate and improve our relationship with you within the confines of social channels;
Sensitive Personal Information you provide to us such as an identification card to verify your identity upon entrance to an RSAC Event and account log-in (e.g., username and password to online account with us); and
Protected Classifications you provide to us such as your gender and your disability accommodation requests.

How We Use and Share Your Information

Purposes for Collecting Personal Information

We may use your information in the following ways:

We use identifiers, contact details, financial payment information, travel booking details, videos, and account history information and feedback and ratings information to deliver and maintain our Services;
We use error reports and performance information to help you with customer service and technical support issues or questions;
We use demographic information to help us improve and personalize our Services;
We use identifiers and internet or electronic usage data to better predict content and marketing offers that may interest you, which includes sending promotional communications, targeted advertising, and presenting you with relevant offers;
We use credentials, the results of biometric identity verification, and sensitive Personal Information to authenticate you and deliver our Services;
We use internet or electronic usage data and error reports and performance information to manage and protect our networks and our Services;
We use financial payment information and account history to deliver our Services, information, materials, content, products and support or carry out the transactions you have requested;
We use contact details to send communications to you, such as your transaction status (including but not limited to, registration confirmations, and program attendance), information about programs available from RSAC and its Business Partners, event announcements, important notices including those announcing changes to our terms or policies, promotional offers and surveys to better predict and deliver content and marketing offers that may interest you;
We use identifiers, contact details and browsing history information to facilitate the use of our Website and communications, which may include sending text message alerts for emergency communications;
We use identifiers and internet or electronic usage data to advertise and market RSAC Events and related content of our Business Partners by, for example, delivering targeted ads on our Websites and other web sites, analyzing the effectiveness of ads, and determining whether you would be interested in receiving offers about new programs, content or services;
We use identifiers, contact details, demographic information, web form information, social media account information, internet or electronic use data, content consumption information and feedback and ratings to administer, customize, personalize, analyze and improve our Services (including the content and advertisements on our website), technologies, communications and relationship with you;
We use contact details, web form information, account history information, internet or electronic usage data and browsing history to enforce our conditions of sale, our Services terms and conditions and/or separate contracts (if applicable) with you;
We use identifiers, contact details, credentials, account history information, internet or electronic usage data to prevent fraud, to prevent other prohibited or illegal activities and to protect the security or integrity of our Services and our business; and
We use protected classifications, specifically gender in order to provide you with your desired clothing size, and disability status to provide any requested accommodations.

How We Share Information With Others

We may share Personal information if RSAC is involved in a merger, acquisition, or sale of all or a portion of its assets, whether as a going concern or as a part of a bankruptcy, liquidation, or similar proceedings, in which Personal Information held by RSAC about users of our Services is among the assets transferred.

We may share Personal Information with our affiliated entities and Service Providers, to support RSAC’s internal business purposes, to carry out transactions you request and in furtherance of the internal business operations (not for marketing purposes) of RSAC, including for research purposes to find ways to better provide our Services or to assist in the creation of new products, services, events and programs.

We may share Personal Information with Business Partners to make our business or that of our Business Partners more responsive to your needs, including so that our Business Partners may provide you with information about those Business Partners’ products and services, or for research or analysis, where such Business Partner has a legal basis to do so.

Additionally, we may share your Personal Information (which may include first and last name, email address, company, job title/position, industry, state, country, phone number, pass type) with Business Partners, as further described below:

If you attend RSAC Conference, you may be asked to scan your badge by a Business Partner for the purposes of conducting business and sending marketing communications regarding their own products or services. If you agreed to have your badge scanned, you agreed to allow RSAC to share your Personal Information with such Business Partner that scanned your badge.
If you registered for an RSAC Event other than RSAC Conference, RSAC may share your Personal Information with a Business Partner for the purposes of sending marketing communications regarding their own products or services.
If you received a promotional code or other discount offer from a Business Partner and use it to register for one of RSAC’s events, including RSAC Conference, we may share your Personal Information with that Business Partner.

At the time your badge is scanned at an RSAC Event or upon RSAC sharing your Personal Information with the Business Partner, you become subject to the Business Partner’s communications and privacy practices. If you wish to opt-out or exercise any applicable privacy rights you may have regarding these third-party communications, you must exercise those rights directly with those parties.

We may also disclose Personal Information in connection with legal orders from law enforcement or other government bodies; as required by law or regulation; to protect the rights of RSAC, its customers, the public, or others; to combat fraud or criminal activity; or with your consent. We may also disclose Personal Information to your employer if your employer sends RSAC a request to verify your registration for an RSAC Event.

In addition, we may share Personal Information to carry out transactions you request with Service Providers that helps RSAC customize, analyze and/or improve our communication or relationship with you. This may include requests relating to RSAC Events or content.

We may disclose your mobile phone number to Service Providers that assist us with providing text message alerts for emergency communications. You can opt out from further text communications by texting STOP TO THE SMS number used by RSAC to contact you.

Except as described above, we will not disclose Personal Information to third parties for their own marketing purposes unless you have provided consent. To opt out of out or exercise any applicable privacy rights you may have regarding these third-party communications, please exercise those rights directly with those third parties.

Your Marketing Choices

You have choices about how we reach you with marketing offers and about other uses of your information. To update your preferences, you can:

Click “unsubscribe” in any email marketing communications we send you.
Go to your MyAccount in our web or mobile application(s) or visit our Marketing Preference Management Center to select your marketing communication choices.

Our Use of Cookies and Other Tracking Technologies

We want you to be aware that certain online tools exist to help us serve and recognize you when you visit our Website. We receive and store certain types of information when you visit our Websites. When you access our Websites, we (including our Service Providers) may place small data files on your computer or other device. These data files may be web beacons, cookies, clear gifs, pixel tags, e-tags, flash cookies, log files, or other local storage provided by your browser or associated applications. These tracking technologies, which are often referred to collectively as cookies, allow us to understand how users navigate to and around our Websites, view different pages, access content and request Services. We may use them, for example, to keep track of your preferences and profile information and collect general usage and volume statistical information. If you want to remove or block cookies, you may be able to update your browser settings. You can also find instructions on how to manage cookies on different types of web browsers at www.allaboutcookies.org. Please go to our Manage Cookie Preferences Center linked at the bottom of our Websites (www.rsaconference.com and www.onersac.com) to change your preferences regarding cookies.

RSAC, or our Service Providers on our behalf, may use information about your visit to our Websites, including pages you visit, the items you view, or your responses to our ads and emails. This information allows us to make the RSAC ads you see more relevant to you. This is referred to as interest-based advertising.

You may opt out of interest-based ads from companies participating in the National Advertising Initiative consumer opt out link (optout.networkadvertising.org) or the Digital Advertising Alliance's consumer opt out link (aboutads.info/choices). Please note this does not opt you out of being served ads and opting out via one browser, device, or app may not necessarily opt you out of collection from all browsers, devices, or apps. Additionally, you may still see “contextual” ads even if you opt out of interest-based ads. These ads, however, are based on the context of what you are looking at on the websites and pages you visit. Even if you opt out of interest-based ads you will still receive these non-personalized, contextual ads.

To enable you to opt-out of interest-based advertising delivered by our Service Providers working with RSAC, or to customize your experience on our Websites, please visit our Manage Cookie Preference Center. If you opt-out, you may still see RSAC ads on our Websites and other websites, but those ads will not be customized to you by RSAC or our Service Providers.

Please note that if you clear your cookies, or if you use a different browser or device, you may need to reset your opt-out selections.

You may learn more about interest-based advertising by visiting these links:

Digital Advertising Alliance (DAA) – https://www.aboutads.info/choices/

Digital Advertising Alliance Canada (DAAC) – https://youradchoices.ca/choices

Do Not Track Signals

Some browsers have a “do not track” feature. It lets you tell websites you visit that you do not want them to track your online activity. These features are not yet uniform across browsers. Our Websites are thus not currently set up to respond to these signals. For more information on Do Not Track signals, please visit allaboutdnt.com.

You can use mobile device settings to limit mobile tracking technologies and associated activities. For instance, you can adjust or reset the advertising identifiers on your mobile device in the device settings.

Generative Artificial Intelligence, Machine Learning and Related Tools.

We may use generative artificial intelligence, machine learning or related tools (“AI”) to improve, develop, and deliver our Services. We may use AI to analyze how our Services are used and interacted with, or to process certain content our customers send or display through our Services, including by conducting data analytics to develop insights about your use of our Services, needs and preferences, so we can make more informed predictions, recommendations and improve our Services. Some of the AI technologies we use allow us to monitor and analyze how visitors use our Services to better understand user behavior and improve our Services. When you interact with us online, information related to your behavior may be collected by us.

When utilizing AI technology, we will provide additional notice and the opportunity to opt out, when appropriate. We will not use AI to subject you to decisions based solely on automated-decision making that have a significant impact on you without providing additional notice, as appropriate.

Data Retention and Security

We will retain and use your information for as long as we need it to provide you our Services, or as long as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. If you wish to request that we no longer use your information to provide you our Services, please contact us at privacy@rsaconference.com.

We have implemented security measures designed to protect your personal information against loss, unauthorized disclosure or access, and other unlawful forms of processing. Despite the security measures that we have put in place to protect your personal information; no such measures can guarantee security or protect against unauthorized activity.

Biometric Information

In addition to the information provided in this Privacy Statement, we want to help you better understand the potential processing of biometric information through our RSAC Membership web application and mobile application(s). Where permitted by law, we and certain of our Service Providers may use ID scanning and facial recognition technology to verify your identity. This section of our Privacy Statement more specifically describes the collection and use of biometric information.

Through our RSAC Membership web application or mobile application(s), we use third-party vendors to verify your identity, including GB Group Plc (“GBG”). GBG may collect data that potentially constitutes “biometric identifiers,” “biometric information,” “biometric data” or similar term under the Illinois Biometric Information Privacy Act, 740 ILCS § 14/1 et seq., Texas Capture or Use of Biometric Identifier Act (“CUBI”), Bus. & Com. § 503.001 et seq., or other applicable laws. “Biometric identifiers” are typically defined by such laws to include retina or iris scans, fingerprints, voiceprints, or scans of the hand or face geometry. “Biometric information,” means any information, regardless of how it is captured, converted, stored, or shared, based on an individual’s biometric identifier that can be used to identify an individual.

RSAC does not retain or store your biometric information or biometric identifiers itself. The processing of such biometric identifiers and biometric information provided to GBG will be done in accordance with GBG’s Biometric Notice and Privacy Policy. In accordance with GBG’s Biometric Notice, Privacy Policy and applicable law, GBG commits to using biometric identifiers and biometric information for the sole purpose of verifying or authenticating your identity, to not sell, lease, trade or otherwise profit from the biometric data, and to not disclose or disseminate biometric data to any entity other than those contracted service providers that assist in providing this verification service, as required by applicable federal, state or local law, or as required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction.

In accordance with GBG’s Biometric Notice, GBG will retain any biometric identifiers or biometric information for the limited period of time required to authenticate your identity and will destroy any biometric identifiers or biometric information upon a successful identity verification or, in the event of a failed verification, retain such information for 31 days or until a successful identity verification is completed, whichever comes first. After such time, all biometric identifiers or biometric information will no longer be retrievable or readable. We do not control the systems or security practices of GBG or other third-party service providers and cannot guarantee, and are not responsible for, the privacy or security of any data collected, shared with or processed by such parties, even if such parties are acting on our behalf. Any data collection, processing, or handling performed by third parties is subject to the security and privacy policies and practices of those third parties and we encourage you to review the privacy and/or security statements of any such third-party vendors.

Biometric identifiers and biometric information will only be collected by our Service Providers with your prior explicit consent. Before opting to provide GBG with any biometric identifiers or biometric information, you will be provided with a copy of our Biometric Information Privacy Policy Acknowledgement and Consent Form and this Privacy Statement. By checking the box provided when prompted on our RSAC Membership web application or mobile application(s), you are consenting to the collection and storage of your potential biometric identifiers or potential biometric information in accordance with this Privacy Statement and the privacy notices of GBG linked above.

Your Privacy Rights

RSAC provides its customers, employees, job applicants and business to business contacts with the privacy rights as described below. For residents of jurisdictions without privacy rights, we will consider requests but will apply our discretion in how we process such requests.

Subject to certain exceptions, you may have the following consumer privacy rights under applicable data privacy laws:

Right to Know: You may have the right to request information about the Personal Information we have collected about you and for what purpose.
Right to Access: You may have the right to request information about how we process your Personal Information and to obtain a copy of that Personal Information.
Right to Portability: You may have the right to receive your Personal Information, in a structured, commonly used, and machine-readable format and to have that information transmitted to another organization in certain circumstances.
Right to Deletion: You may have the right to request the deletion of your Personal Information that we have collected from you.
Right to Opt-out of Sale or Sharing: You may have the right to opt-out of the sale or sharing of your Personal Information.
Right to Limit the Use of Your Sensitive Personal Information: You may have the right to direct us to limit the use or disclosure of your sensitive Personal Information to only the purposes specified in your applicable privacy law.
Right to Correction: You may have the right to correct inaccurate Personal Information that we hold about you.
Right to Object: You have the right to object to certain types of processing of your Personal Information, including processing for direct marketing purposes.
Right to Limit Processing: You have the right, under certain circumstances, to block or restrict our processing of your Personal Information.
Right to Opt Out of Automated Decision Making: You may have the right to opt out of automated decision-making, including profiling.
Right to Opt Out of Targeted Advertising: You have the right to request that we stop disclosures of your Personal Information for targeted advertising.
Right to Appeal: If you are unsatisfied with our actions related to the exercise of one of your privacy rights above, you may appeal our decision.
Right to Contact the Attorney General: If you are unsatisfied with the results of your appeal, you may contact the Attorney General of your state if your state has an applicable privacy law.
Right to be Free From Discrimination: RSAC will not discriminate against you for exercising your consumer privacy rights.

Submitting a Request

If you have any questions about the type of Personal Information we hold about you or if you wish to request deletion of Personal Information we may hold about you, or exercise any other consumer privacy right as set out above, contact us by:

Email to privacy@rsaconference.com
Phone: Toll free 1-844-201-6576; International: 1-781-222-0051
Postal mail to the following address:

RSA Conference LLC
Attention: Law Department – Privacy
28 Geary Street, Suite 650 #1500
San Francisco, CA 94108
USA

For certain requests, you must provide us with your name and email address. To verify your identity, we may also request information that you previously provided to us such as a registration code or an emergency contact name. Failure to provide the foregoing information may prevent us from processing your request. For an online request to delete, we will also send you a second verification to confirm that you want your information to be deleted.

In order to designate an authorized agent to act on your behalf, you or your agent may be required to send a signed, written authorization to us at privacy@rsaconference.com.

Please be aware that your request does not guarantee complete access or comprehensive removal of your Personal Information as the law may not permit or require removal in certain circumstances.

Other Region-Specific Disclosures

Certain jurisdictions provide their residents with additional rights regarding our use and disclosure of their personal information. To learn more about the particular additional rights applicable to your jurisdiction, please see the additional provisions below.

California Consumer Privacy Act.

This section applies to our privacy practices as required under the California Consumer Privacy Act, including as amended by the California Privacy Rights Act (together, the “CCPA“).

Categories and sources of Personal Information we collect
In the preceding 12 months, we or our Service Providers have collected the following categories of Personal Information: contact information, identifiers, biometric information, financial information, personal characteristics or traits, commercial information, internet, or electronic usage data, professional or employment information and sensitive personal information. For details about precise data points we collect and the categories of sources of such collection, please see the section above titled Categories of Personal Information We Collect.

Sale of Personal Information
To opt-out of the “sale” (as that term is defined in the CCPA) of Personal Information, click here. We do not knowingly sell the personal information of minors under the age of 18.

Sharing of Personal Information
Certain web browsers allow users to opt out of tracking by website and online services by enabling an opt out preference signal such as Global Privacy Control (“GPC”), If you choose to enable an opt out preference signal, you will only be opted out of Cookie-based sales of your personal information or sharing of your personal information for targeted advertising and will need to turn it on for each browser you use. To submit a request to opt out of offline sales and sharing which would not otherwise be controlled by an opt out preference signal, please click on the “CCPA: Do Not Sell or Share My Personal Information” button located on any of our Websites.

We do not knowingly share the Personal Information of minors under the age of 18.

Notice of Financial Incentive

From time to time, RSAC and our Business Partners may offer financial incentives, such as free merchandise, promotional items, exclusive access to sessions, or other perks commonly provided at conferences. These incentives may be offered in exchange for scanning your event badge, which will share your Personal Information (which may include first and last name, email address, company, job title/position, industry, state, country, phone number, pass type) with RSAC and its Business Partners. Participation in these programs is voluntary and you may opt out at any time by declining to have your badge scanned or by contacting us as described below.

We do not assign a specific monetary value to the Personal Information collected; however, based on our good-faith estimate, the value of the incentive offered is reasonably related to the value of the Personal Information provided. This estimate considers factors such as the cost of the merchandise or promotional item, marketing and analytics expenses, and the overall benefit to RSAC and its Business Partners from engaging with attendees.

Use or Disclosure of Sensitive Personal Information
In the preceding 12 months, we have not used or disclosed sensitive Personal Information for purposes to which the right to limit use and disclosure applies under the CCPA.

Purposes for which we use Personal Information: We collect Personal Information for the business and commercial purposes described in the section above titled Purposes for Collecting Personal Information.

Disclosure for a business purpose: In the preceding 12 months, we have disclosed the following categories of Personal Information for business purposes to the following categories of third party recipients:

Category of Personal Information	Categories of Recipients
Contact Information	Service providers Exhibitor Sponsor Operating Systems and Platforms
Identifiers	Service providers Exhibitor Sponsor Operating Systems and Platforms
Biometric Information	Service providers
Financial Information	Service providers Operating Systems and Platforms
Personal Characteristics or Traits	Service providers Operating Systems and Platforms
Commercial Information	Service providers Operating Systems and Platforms
Audio, electronic or visual information	Service providers Business Partners Operating Systems and Platforms
Internet or Electronic Usage Data	Service providers Operating Systems and Platforms
Professional or Employment Information	Service providers Operating Systems and Platforms
Sensitive Information	Service providers Operating Systems and Platforms

For a more expansive description of the categories of recipients and business purposes for which we share Personal Information, please see the How We Use and Share Your Information section above.

Shine The Light. If you are a California resident, this section applies to you. The California Shine the Light law (Cal. Civ. Code § 1798.83) permits residents of California to request certain details about how their information is shared with third parties for the third parties’ direct marketing purposes. If you are a California resident and would like to make such a request, please contact us at privacy@rsaconference.com, and include “CA Shine the Light” in the subject line of your email.

Other Privacy Rights Information. Under the EU and UK General Data Protection Regulation, we are required to provide residents of the European Economic Area with the following information:

You also have the right to lodge a complaint with a supervisory authority: A list of the European data protection authorities is available here, the contact of the UK Information Commissioner's Office (ICO) is available here, and the contact of the Federal Data Protection and Information Commissioner of Switzerland is available here.

How We Protect Your Information

We use technical, organizational, and physical data security safeguards designed to help protect against unauthorized access to, use or disclosure of information we collect, use or store. The ways we do this include:

Using encryption when collecting or transferring sensitive information, such as credit card details.
Designing our data security safeguards to ensure the ongoing security, integrity, availability and resilience of processing systems and services.
Limiting physical access to our premises.
Limiting access to the information we collect about you.
Ensuring that our Business Partners and Service Providers have appropriate technical and organizational security measures to keep your Personal Information protected.
As required by law, destroying or de-identifying Personal Information.

We encourage you to keep any passwords you use confidential and to be careful to avoid “phishing” scams where someone may send you an email that appears to be from RSAC asking for your Personal Information. RSAC will not request your ID or password through email. Despite the security measures that we have put in place to protect your Personal Information; no such measures can guarantee security or protect against unauthorized activity.

Our Services are Not Intended for Children

The Website is not targeted at and we do not knowingly collect Personal Information from children under the age of eighteen (18) or equivalent minimum age in the relevant jurisdiction. Children under the age of 18 or equivalent minimum age in the relevant jurisdiction must not share their Personal Information unless their parent or guardian provided verifiable consent. If at any time a parent or guardian needs to access or delete data associated with their child’s or guardian’s account, they may contact us through one of the options provided in this Privacy Statement.

Links to Third-Party Websites and Services

We may sometimes provide links to other websites, which if you click on them may collect Personal Information about you and direct you to those websites. We are not responsible for the content of these sites, any products or services that may be offered through these sites or any other use of these sites, nor for any data processing and privacy practices associated with such sites. The information practices of those third-party websites linked to our Website are covered by the third party’s own privacy statements and we encourage you to read those.

Legal Basis of Processing

We process your information on the following legal basis:

If it is necessary to fulfill our contractual obligations. The extent and purpose of our use of your Personal Information depends on the contract that we have concluded with you.
If you consent to our use of your Personal Information. If you have given us your prior consent, we will use your Personal Information in a manner consistent with the scope of that consent.
If it is necessary for pursuit of, or to safeguard, the legitimate interests of RSAC, provided that these interests are not overridden by your interests or fundamental rights and freedoms.
If it is required to comply with our legal obligations. These obligations may arise from applicable provisions of national or regional laws or regulations, including commerce, trade, and tax.

International Transfer of Personal Information

We are based in the United States. If you are using our Websites from outside the United States, please be aware that information we obtain about you will be processed in the United States or in other jurisdictions. By using our Services, you acknowledge your Personal Information may be transferred to and processed in jurisdictions outside your own, including the United States, as described in this Privacy Statement. Please be aware that the data protection laws and regulations that apply to your Personal Information transferred to the United States or other countries may be different from the laws in your country of residence. The United States may not afford the same level of protection as laws in your own country. Information we transfer from the European Economic Area, the United Kingdom or Switzerland to the United States will be subject to appropriate safeguards under applicable law. Those safeguards may include standard data protection clauses approved by the European Commission/ICO and available on their website.

Contact Us

If you would like to exercise Your Privacy Rights as described in this Privacy Statement, have a privacy question, concern, or complaint, please contact us at privacy@rsaconference.com or write to us at:

RSA Conference LLC
Attention: Law Department – Privacy
28 Geary Street, Suite 650 #1500
San Francisco, CA 94108
USA

Changes to this Privacy Statement

We may make changes to this Privacy Statement when necessary to provide greater transparency or in response to:

Feedback from our customers, regulators, industry or other stakeholders.
Changes in our privacy practices, products or services.
Changes in applicable privacy laws.

If there are material changes to the Privacy Statement, we will revise the date at the top of this statement. We encourage you to periodically review this Privacy Statement to learn how RSAC is processing your information.