Privacy Policy

1. Who We Are.

1.1 festiVOL™ Services.

Welcome to festiVOL! We are a ticketing and registration platform dedicated to bringing the world together through participation at live experiences, bringing the fans the working perspective and the opportunities to participate at the events they love. Through our platform, mobile apps and services, we enable people all over the world to create, discover, share and register as fan labor for events.

festiVOL's products, features and offerings are available (a) online through various festiVOL properties including without limitation, www.workexchangeteam.com, festiVOL.com, festiVOL.net ("Site(s)"); (b) off platform, including without limitation, entry management, shift and event management, sponsorship and marketing or distribution services; and (c) through mobile applications, webpages, application programming interfaces, and subdomains ("Applications"). (a), (b), and (c) are collectively referred to as "festiVOL Properties" or our "Services".

festiVOL, LLC is a Georgia limited liability corporation with its principal place of business at 1314 Deerwood Dr, Decatur, GA 30030. Contact us at [email protected].

1.2 Who's Who.

When this Privacy Policy uses the term "Organizer" we mean event creators using the Services to create event fan labor programs for Participants. "Participants" are users who use our Services to consume information about, or attend, events as part of ticket trade programs, volunteer programs, FanStaff programs, or staffing programs. Organizers, Participants and third parties using our Services are all referred to collectively as "Users", "you" or "your".

2. Our Privacy Statement.

2.1 Application.

This Privacy Policy sets forth our policy with respect to information that can be associated with or which relates to a person and/or could be used to identify a person ("Personal Data") that is collected from Users on or through the Services. "Non-Personal Data" is any information that does not relate to a person and/or cannot be used to identify a person. The limitations and requirements in this Privacy Policy on our collection, use, disclosure, transfer and storage/retention of Personal Data do not apply to Non-Personal Data.

3. Personal Data That We Collect.

3.1 Information Collected From All Users.

Information you provide to us: We collect Personal Data when you voluntarily provide such information to the Services, such as when you register for access to the Services, contact us with inquiries, respond to one of our surveys or browse or use certain parts of the Services. The Personal Data we may collect includes without limitation your name, address, email address and any other information that you choose to provide.

Information we automatically collect: We also automatically collect certain technical data sent to us from the computer, mobile device and/or browser through which you access the Services ("Automatic Data"), including a unique identifier associated with your access device and/or browser, characteristics about your access device and/or browser, statistics on your activities on the Services, information about how you came to the Services and data collected through Cookies, Pixel Tags, Local Shared Objects, Web Storage and other similar technologies.

3.2 Information Collected From Organizers.

If you are an Organizer we will collect additional Personal Data from you, including in some cases credit card or bank account information to facilitate payments and information required for tax purposes (e.g., your taxpayer identification number). We may also collect or receive Personal Data including your name, email address and other contact information from third party sources, such as third party websites and marketing partners, your bank, our payment processing partners (including Stripe and Authorize.net) and credit reporting agencies.

3.3 Information Collected From Participants.

If you are a Participant registering for a paid event, you will provide financial information (e.g., your credit card number and expiration date, billing address, etc.). Organizers can set up event registration pages to collect virtually any information from Participants in connection with registration for an Organizer's event. festiVOL does not control an Organizer's registration process nor the Personal Data that they collect.

4. How We Use Your Personal Data.

We collect and use Personal Data in a manner consistent with this Privacy Policy and applicable privacy laws. Uses include:

  • Fulfilling your requests and responding to your inquiries;
  • Access and account management, including verifying your identity and qualifications;
  • Internal business purposes, including improving the Services, protecting against wrongdoing, and enforcing our Terms;
  • Marketing and advertising (where permitted by applicable law and your preferences — see opt-out options below);
  • Organizer communications on behalf of Organizers for current and past events;
  • Interest-based recommendations and targeted advertising, including on behalf of Organizers.

5. How We Disclose And Transfer Your Personal Data.

We do not sell your Personal Data to third parties. We may disclose, transfer or share your Personal Data in the following circumstances:

  • Business Transfers: In connection with a corporate sale, merger, reorganization, or similar event;
  • Affiliates: With our parent companies, subsidiaries and/or affiliates for purposes consistent with this Privacy Policy;
  • Service Providers: With contractors and service providers who process Personal Data on our behalf, including marketing agencies, data services providers, payment processing partners (including Stripe and Authorize.net), customer support, hosting companies and others;
  • Organizers: When you register for, purchase tickets to, or otherwise interact with an Organizer event, that Organizer receives your Personal Data;
  • Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect our rights, prevent wrongdoing, or protect the personal safety of users.

6. How We Store Your Personal Data.

We may store Personal Data itself or such information may be stored by third parties to whom we have transferred it in accordance with this Privacy Policy. We take reasonable steps to protect Personal Data from loss, misuse, unauthorized use, access, inadvertent disclosure, alteration and destruction. Personal Data may be stored in the United States and transferred to other countries in accordance with applicable cross-border transfer mechanisms (see Section 13 below).

7. How You Can Access, Update, Correct or Delete Your Personal Data.

You can access and edit your Personal Data stored by us by logging in and visiting the Profile page in My Account. To request a deletion of data and account, email said request to [email protected]. If a Consumer initiates a data deletion request, festiVOL is authorized to delete or anonymize Personal Data of the requesting Consumer from the Services even if that means removing its availability to the Organizer through the Services.

8. How Long We Retain Your Personal Data.

We may retain your Personal Data as long as you are registered to use the Services and for an additional period as is permitted or required under applicable laws. Even if we delete your Personal Data it may persist on backup or archival media for an additional period of time for legal, tax or regulatory reasons or for legitimate and lawful business purposes.

9. Cookies and Similar Technologies.

Please refer to our Cookie Statement for more information about our use of cookies and other similar tracking technologies.

10. Your Choices.

10.1 Limit the Personal Data You Provide.

You can browse the Services without providing any Personal Data (other than Automatic Data). If you choose not to provide any Personal Data or limit the Personal Data you provide, you may not be able to use certain functionality of the Services.

10.2 Opt Out from Electronic Communications.

(a) festiVOL Marketing Communications. You can "opt out" of receiving festiVOL marketing electronic communications by clicking on the "Unsubscribe" link at the bottom of any such electronic communication, or by managing your email preferences in Account > Profile.

(b) Organizer-initiated Communications. To opt-out of an Organizer email or text communication, cancel the application for that event.

(c) Transactional Communications. Certain electronic communications are responsive to your requests (e.g., confirmation emails) and will still be sent regardless of marketing opt-out elections.

11. Exclusions.

This Privacy Policy does not apply to Personal Data that you provide to another User or visitor through the Services or through any other means, including to Organizers on event pages or information posted by you to any public areas of the Services. The Services may contain links to other websites; the policies described here do not apply to those third-party sites.

12. Children.

We do not knowingly collect Personal Data from children under the age of thirteen (13) in the United States, or under the applicable minimum age in other jurisdictions (e.g., under 16 in the EU for data consent purposes). If you are under the applicable minimum age, please do not submit any Personal Data through the Services. If you have reason to believe that a child has provided Personal Data to us through the Services, please contact us at [email protected].

13. International Privacy Laws and Cross-Border Data Transfers.

13.1 General.

festiVOL is based in the United States. When you use the Services, your Personal Data may be transferred to and processed in the United States and other countries. These countries may not have data protection laws as comprehensive as those in your country of residence; however, our collection, storage and use of your Personal Data will at all times be governed by this Privacy Policy and applicable law.

13.2 EU / EEA / UK / Switzerland — GDPR.

If you are located in the European Union, European Economic Area, United Kingdom, or Switzerland, the following applies:

Legal Bases for Processing. We process your Personal Data on the following legal bases: (a) your consent; (b) performance of or taking steps to enter into a contract with you; (c) compliance with a legal or regulatory obligation; or (d) our legitimate interests (such as improving the Services, preventing fraud, and ensuring network security), where those interests are not overridden by your rights.

Your Data Subject Rights. You have the right to: (i) access a copy of your Personal Data; (ii) rectification of inaccurate data; (iii) erasure ("right to be forgotten") in certain circumstances; (iv) restriction of processing; (v) data portability; and (vi) object to processing based on legitimate interests or for direct marketing. To exercise these rights, contact us at [email protected] or by post to the address in Section 15.

Cross-Border Transfers. Where we transfer Personal Data from the EU/EEA/UK/Switzerland to countries not recognized as providing adequate data protection, we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses (SCCs) (Commission Implementing Decision EU 2021/914) and, for UK transfers, the UK International Data Transfer Addendum (IDTA) to the SCCs. We are also certified under the EU-US Data Privacy Framework, the UK Extension to the EU-US Data Privacy Framework, and the Swiss-US Data Privacy Framework.

Controller / Processor. festiVOL acts as a data controller with respect to Organizer account data and platform analytics. With respect to Participant registration data collected on behalf of Organizers, festiVOL acts as a data processor. Organizers are responsible for obtaining necessary consents and providing required notices before sharing Participant Personal Data with festiVOL. A Data Processing Addendum (DPA) is available to Organizers upon request at [email protected].

Right to Lodge a Complaint. You have the right to lodge a complaint with the supervisory authority in your Member State of habitual residence, place of work, or place of the alleged infringement.

13.3 Australia — Privacy Act 1988.

If you are located in Australia, festiVOL handles your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You have the right to access and correct your personal information held by us. Cross-border disclosure of your personal information may occur to countries including the United States; by using the Services you consent to such disclosure, or we will take reasonable steps to ensure the overseas recipient complies with the APPs. To make a privacy complaint or access request, contact us at [email protected]. If your complaint is not resolved to your satisfaction, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

13.4 Canada — PIPEDA.

If you are located in Canada, festiVOL handles your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation including Quebec's Act respecting the protection of personal information in the private sector (Law 25). You have the right to access and correct your personal information held by us, and to withdraw consent (subject to legal or contractual restrictions). Contact us at [email protected] with any privacy requests or complaints.

13.5 New Zealand.

If you are located in New Zealand, festiVOL handles your personal information in accordance with the Privacy Act 2020. You have the right to access and correct your personal information. Contact us at [email protected] with any privacy requests. Unresolved complaints may be referred to the Office of the Privacy Commissioner at www.privacy.org.nz.

14. Changes To This Privacy Policy.

We reserve the right, in our sole discretion, to update or modify this Privacy Policy at any time. Modifications will be posted to the Site with a change to the "Updated" date at the top of this Privacy Policy and will be effective thirty (30) days following that date. Your continued use of the Services following the effectiveness of any Modifications constitutes acceptance of those Modifications.

15. Dispute Resolution.

If you have a complaint about festiVOL's privacy practices, please write to us at: festiVOL, LLC, Attn: Privacy, 1314 Deerwood Dr, Decatur, GA 30030, USA, or by email at [email protected]. We will take reasonable steps to work with you to resolve your complaint. EU/EEA/UK/Swiss users may also lodge a complaint with their local supervisory authority (see Section 13.2).

16. California Residents Only.

If you are a California resident, we provide additional information about our information practices and you may have certain rights with respect to your information. Please see the State-Specific Supplemental Privacy Notices.

17. Nevada Residents Only.

If you are a Nevada resident, you may have certain rights with respect to your information. Please see the State-Specific Supplemental Privacy Notices.