BRITESTAR EVENTS, its agents, subsidiaries and affiliates (“BRITESTAR”) produces the Once Upon a Weekend, Once Upon a RomaDrama, RomaDrama VIP Weekend, and all Once Upon Conference, Virtual Events and Festivals, (collectively, the “Events”), and is committed to respecting your privacy. This Privacy Policy identifies what information is collected about you and how it’s used by BRITESTAR when you use the websites RomaDrama.com, OnceUponAWeekend.com, or related sites, as well as the mobile app (collectively, the “Site”), purchase goods or services, or communicate with BRITESTAR.

To request a summary of the information that BRITESTAR collects about you, or to request that data be deleted or changed, please email [email protected]. To update your email marketing preferences, please visit https://www.romadrama.com/newsletters and make your updates or email [email protected].

Personal Data Overview

Below is an overview of the type of personal data BRITESTAR commonly collects, and how we use that personal data. The column on the left details in brackets which CCPA (defined below) category of personal information is applicable for the entry on that row. Those categories are further defined in the Notice to All California Residents section of this Privacy Policy.

Click here for our Data Collection & Use Chart.

 

How and Why We Collect Personal Data

 

Delivering a Customized Site Experience

Cookies. We use cookies to collect the information detailed in the chart above. Cookies are small computer files that we transfer to your computer’s hard drive that allow us to know how often you visit the Site and the activities you conduct while on the Site (e.g., whether you purchase BRITESTAR credentials, referred to here as a “Badge”). Every computer is assigned a different cookie by BRITESTAR.

Deactivating Cookies. You can block collection of your information and Site activity by turning off cookies. You will find further information on how to turn off cookies in the support page of your respective browser. Deactivating cookies may hinder our ability to provide you with certain services or your ability to enjoy certain features of the Site.

Web Beacons. We also may use web beacons to collect anonymous, non-personal information about your use of our Site. Web beacons are tiny graphic image files embedded in a web page or email that provide a presence on the web page or email and send back to its home server information from the users’ browser. The information collected by web beacons allows us to statistically monitor how many people are using our Site or are opening our emails.

How Use We Cookie and Web Beacon Information. The information collected by cookies and web beacons helps us dynamically generate content on the Site or in emails specifically designed for you, allows us to monitor Site traffic (i.e., where a user is geographically located, device type, browser selection, referring website, Site navigation, demographic information), and provide advertising tailored to you, as discussed in detail in the Marketing and Promotions section. We will not link non-personal cookie or web beacon information to any personal data collected, unless you share that personal data with BRITESTAR through one of the BRITESTAR forms (e.g., subscribing to a BRITESTAR Newsletter).

Location Services. You can opt-in to Location Services on the Once Upon app, which will enable BRITESTAR to communicate with you about the BRITESTAR event based on your location using push notifications. If you opt-in to location services, BRITESTAR will collect the geofence zones you enter. BRITESTAR may use this information in the aggregate to understand attendee navigation of the Event.

BRITESTAR Recommends. You will have the option to schedule ‘favorite’ information in order to log the events you are interested in attending. If you log favorite items on the BRITESTAR schedule, you will receive schedule, event, and registrant networking recommendations from BRITESTAR based on those favorited items. You can also choose to make your profile in the Once Upon app public or private. As a default, your Once Upon app and BRITESTAR site profile is public, which means you will receive recommendations for other registrants in the directory based on the other registrants you’ve favorited, and your profile (including your name and photo) may be used in recommendations to other registrants and listed under the header “favorited by” alongside any events in the BRITESTAR schedule that you “favorite.” If you make your profile private, your profile will not be shared with other BRITESTAR registrants or be included in the BRITESTAR schedule.

Public Forums. If you share personal data with others in a forum or chatroom, such as via BRITESTAR Virtual Event Chats, that information will not be private. Please think carefully before disclosing any personal information in any public forum.

Co-branded Channel Partners. BRITESTAR links to co-branded products and/or services to websites hosted and operated by companies other than BRITESTAR, such as YouTube for video content, Zoom, Cvent, and others such as hotel reservations (each a “Channel Partner Website(s)”). The co-branded BRITESTAR pages that you may access through a Channel Partner Website may have different registration processes and privacy policies. If you visit a Channel Partner Website, please read the privacy policy that is posted on that site.

Marketing and Promotions

BRITESTAR works with third-party service providers to collect information about your Site activity using common tracking technologies, such as cookies, web beacons, and tags. These tools allow BRITESTAR to customize your experience on the Site by analyzing Site traffic and providing you with content and advertising that is tailored to your interests. If you don’t wish to have your activity tracked, learn more about the Do Not Track tool and/or vendor opt-outs.

BRITESTAR also uses linked advertisements and newsletters to deliver information to you that is interest-based or about the Event.

Tracking Technologies

Cookies & Web Beacons. We may use information from cookies and web beacons collected from your use of the Site to target your online activity, browser or apps, with certain advertisements, and/or to determine the popularity of certain content or advertisements. By using the Site, you agree to BRITESTAR collecting and using your behavioral information for those purposes.

Third-Party Tracking. BRITESTAR works with advertisers that use tracking technology (i.e., Facebook Pixel, LinkedIn Insight Tag, Twitter Pixel, etc.) to collect information about your Site activity and third-party website activity that allows us to customize the content and advertising that is delivered to you. We may also use third-party tracking technology to generate analytics reports used to improve our Site, track our success at reaching audiences, and optimize delivery of Site and ad content specifically targeted to your interests based on your use of our Site. We will not combine non-personally identifiable information collected through third-party advertiser tracking with your personal data. We will not attempt to disaggregate data that third-parties report in aggregate.

Google Analytics. We use Google Analytics Demographics & Interests reports to improve our Site, track our success at reaching audiences, and optimize delivery of Site and ad content specifically targeted to your interests based on your use of our Site. We also use Google Display Network Impression Reporting in order to understand the effectiveness of different ad types across various platforms, and remarketing with Google Analytics to deliver relevant ads to you based on your use of our Site. We may use additional Google products and services that require Google Analytics to collect data for advertising purposes. We will not combine non-personally identifiable information collected through Google Analytics with your personal data. We will not attempt to disaggregate data that Google reports in aggregate. The Google Analytics Terms of Service and the Google Privacy Policy govern Google’s ability to use and share information collected through Google Analytics. You can prevent your data from being used by Google Analytics by using the Google Analytics Opt-Out tool.

Linked Advertisements. Our Site or emails may include links to external websites of third-party sponsors, BRITESTAR business partners or advertisers. Third-Parties may use their own cookies, tracking codes, or web beacons when you click on their advertisement or link to their site or service, even if the advertisement simply appears on a page or in an email that you are viewing. In certain situations, you may be temporarily redirected to another website, which may not be apparent to you. We do not control the use of cookies, tracking codes, or web beacons by third-parties, or how they manage personal data you provide to them. You should review the privacy policy of the sites you visit to understand their privacy practices before you share personal data.

Newsletters / Email List. You may opt-in to receive email subscriptions that contain content about the Event based on your preferences. BRITESTAR may suggest certain newsletter/email subscriptions to you based on your Site activity. To opt-in or opt-out from BRITESTAR Newsletters/E-mails, see the section below: Managing Your Preferences.

Badges and Other Website Purchases

Badge Purchase Information. In order to access certain products and services available on the Site (e.g., a Badge), you must register with BRITESTAR and provide personal information, including your name, email address, physical address, phone number. This information is necessary for BRITESTAR to complete the purchase, provide the products and/or services to you, and communicate with you about your purchase. If you connect to the Site or sign up for promotions using your Facebook or other third party credentials, you authorize us to collect your authentication information, such as your username, access credentials, and other information that may be available through your Facebook or other third party account, such as your name, profile picture, country, hometown, email address, and/or date of birth.

Badge Registration Terms. All Badge purchasers must agree to the Participation and Credentials Terms and Conditions (“PCTC”) available here, and the RFID Policy, which is available here and included in the PCTC. Please carefully review the PCTC and RFID Policy before proceeding with a purchase.

Badge Usage

• BRITESTAR scans Badges for RFID at the entrance of official BRITESTAR and ONCE UPON events to discourage counterfeiting, communicate with you about the Event, and tailor future offerings based on attendance. For example, BRITESTAR may email you asking for feedback based on a panel you attended. RFID does not contain any personal data, however, it contains a unique ID code that may be correlated with your personal data, such as your name, phone number, mailing address and email address. BRITESTAR does not share RFID information with third parties for their marketing purposes, and BRITESTAR does not track RFID tags after BRITESTAR has ended. For more about the RFID Policy, please visit romadrama.com/rfid, and direct questions regarding RFID to [email protected].
• You can also choose to scan your Badge to participate in lead retrieval, which is a program for BRITESTAR official clients to collect information from and to communicate with BRITESTAR badge-holders. If you elect to participate in lead retrieval and have your Badge scanned, you will share your name, email address, phone number, company, title, City, State, and Country with the company scanning your Badge. BRITESTAR may also use this data for aggregate reporting.

Your Personal Financial Information. When you purchase a Badge, Online Ticket, or any other goods or services , BRITESTAR does not process your financial information on the BRITESTAR servers or databases. BRITESTAR does store your billing address information for accounting purposes. Your payment information, such as your name, address, and other financial information (i.e., credit card number, CVV and expiration date), is collected by the third-party payment processor, Stripe (when you make purchases on RomaDrama.com). The third-party payment processor tokenizes your payment information and send the token back to BRITESTAR to complete the payment process. Please review the relevant third-party agreement (Stripe) and agree to their Privacy Policy before your purchase from BRITESTAR or before providing your personal information.

Other Purchases. You may be directed to third-party websites to purchase other goods or services. If these third-party sites require that you enter payment information, such as your name, address, and other financial information, please review and agree to the applicable privacy policy for the payment processor before providing them with your personal information.

Participating in BRITESTAR as a Speaker, Entertainer, Celebrity Guest and More

Applying to Participate in BRITESTAR. If you choose to apply to participate in BRITESTAR as a Speaker, Entertainer, Celebrity Guest, or any of the many other ways you can participate in BRITESTAR, you will be asked to complete an application including your name and email address, along with other information necessary for BRITESTAR to review your application, determine whether to select you to participate in the event, and communicate with you about your application.

Participating in BRITESTAR. If you are selected to participate in BRITESTAR, you will have access to tools that allow you to share information with BRITESTAR in order for you to be included in the BRITESTAR schedule and other promotions. The information you share varies on your participation, but generally includes your name and email address, and other contact information to facilitate communication between you and BRITESTAR. BRITESTAR uses cookies within these tools to maintain your session information so you can log out and back into the tool and it will remember you.

Communication with BRITESTAR. If you email BRITESTAR or communicate with BRITESTAR via any chatbots, any information you share with BRITESTAR may be stored on our email servers and elsewhere depending on your request. If you want to keep business information, resumes, ideas, concepts or inventions private or proprietary, do not send them in an email to BRITESTAR.

Sharing Your Personal Data

Generally. BRITESTAR will only share your personal data with a third party for a legitimate business purpose with your consent or as necessary to answer your questions, provide the products and/or services you request or purchase from BRITESTAR, or to comply with governmental, legal, or internal record-keeping requirements as reasonably required. When we disclose personal information for a legitimate business purpose, we enter into a contract that describes the purpose and requires the recipient both keep that personal information confidential and not use it for any purpose except performing the contract.

Subsidiaries. BRITESTAR may also share your personal data with its corporate subsidiaries or entities affiliated with BRITESTAR (“Subsidiaries”) in order to deliver the goods or services you purchased, or to fulfill a request you’ve made. Any personal data provided to BRITESTAR’s Subsidiaries will be handled in accordance with the terms of this Privacy Policy and cannot be used for any other purpose.

Operations and Maintenance Vendors. BRITESTAR’s operations and maintenance vendors may have access to your personal data to the extent reasonably necessary to provide specified products or services to BRITESTAR. These vendors and suppliers provide us with technology, services, and/or content related to operation and maintenance of our Site, the BRITESTAR systems, and the Event. Access to your personal data by these vendors is limited to the information necessary for it to perform its function for BRITESTAR. Drawings, Contests, Giveaways, and Promotions. We may offer you the chance to participate in drawings, contests, giveaways, and promotions (“Special Promotions”) through our Site. By registering for a Special Promotion, you may agree to the use of your name in marketing associated with the Special Promotion, along with the announcement of winners.

Drawings, Contests, Giveaways, and Promotions. We may offer you the chance to participate in surveys, drawings, contests, giveaways, and promotions (“Special Promotion(s)”) through our Site or our third-party survey provider, SurveyMonkey. If you’ve opted-in to receiving email marketing from BRITESTAR and if we use SurveyMonkey to administer a Special Promotion, we will share your name and email address with SurveyMonkey so that they can email you the Special Promotion on behalf of BRITESTAR. Please review the SurveyMonkey Privacy Policy available here. By registering for a Special Promotion, you may agree to the use of your name in marketing associated with the Special Promotion, along with the announcement of winners.

Third-Party Promotions. While on our Site, you may have the opportunity to sign up or opt-in to receive information and/or marketing offers from BRITESTAR’s sponsors or partners or to otherwise consent to the sharing of your personal data with a third-party. If you agree to have your personal data shared, your personal data will be disclosed to the third-party and the personal data you disclose will be subject to the privacy policy and business practices of that third-party. If you no longer wish to have your personal data shared with third-parties, you will have the opportunity to opt-out by sending an email to [email protected].

Necessary Disclosures. We may release your personal data to third parties when we have a good faith belief it is necessary:

(1) to comply with valid legal requirements such as a law, regulation, search warrant, subpoena or court order; or (2) in special circumstances, such as a financial or physical threat to you or others, including, without limitation, if BRITESTAR detects that a fraudulent credit card charge may have occurred.

In the event that BRITESTAR is legally compelled to disclose your personal data to a third-party, we will use our best efforts to notify you unless doing so would violate the law or court order.

Aggregate Information. BRITESTAR may provide third parties with non-personal information about you that does not allow you to be identified or contacted and that is combined with the non-personal information of other users. For example, we might inform third parties regarding the aggregate number of users of our Site.

Storage. BRITESTAR stores your personal data to provide a backup of BRITESTAR’s systems or as required by applicable law. BRITESTAR uses physical and cloud-based database servers operated by third-party providers WPEngine and Amazon Web Services, respectively. Please review the WPEngine Privacy Policy available here and the Amazon Web Services Privacy Policy available here.

Managing Your Preferences

Opting-In. You may opt-in or sign up for recurring informational / promotional emails from BRITESTAR at www.romadrama.com/newsletters.

Opting Out. You may opt-out of receiving emails, newsletters or other communications from BRITESTAR at any time by following these steps:

(1) When you have received a newsletter you wish to stop, navigate to the bottom of the email, and select the link “unsubscribe or update your email preferences here”
(2) You may also unsubscribe by contacting us at [email protected]

You may opt-out of geolocation notifications by visiting your profile in the ONCE UPON mobile app, clicking on the setting cog in the right-hand corner of the website, and under “Notifications and Alerts” set to “Opt Out.”

You may opt-out of push notifications by disabling notifications in your cell phone settings, or by visiting the ONCE UPON mobile app Settings page and disabling the notifications you no longer want to receive.

Accessing and Updating Your Personal Data

To request a summary of the information that BRITESTAR collects about you, or to request that data be deleted or changed, please email [email protected] and you will be directed to fill out our data request form. To update your email marketing preferences, please visit RomaDrama.com/newsletters and make your desired updates, or email us for assistance.

If you have a complaint or problem, you may email us at [email protected] and the customer service department will forward your complaint to the appropriate internal BRITESTAR department for a response or resolution. We try to answer every email in a timely manner but are not always able to do so.

 

Other Important Privacy Information

Updating this Privacy Policy. By using the Site, you agree to this Privacy Policy and the website Terms of Use. If you do not agree to be bound by these terms, please leave the Site. This Privacy Policy may change from time to time, and changes are effective upon posting, so please check back to review any updates.

Where We Store and Process Personal Data. Since the Site is operated in the United States, any information you provide to us will be transferred to the U.S., and you agree to that transfer.

Our Retention of Personal Data. BRITESTAR retains personal data for as long as necessary to provide the products and fulfill the transactions you have requested, or to comply with our legal obligations, resolve issues, or enforce our agreements. Actual retention periods vary depending on the data types and the goods or services you purchased.

Collection of Data from Children. This Site is not intended for use by persons under thirteen (13) years of age and shall not be used without the consent from a parent and/or guardian. BRITESTAR does not knowingly collect personal data from or about children under the age of thirteen (13). If a parent or guardian believes that a child under thirteen (13) years of age has shared personal data with BRITESTAR without the parent or guardian’s consent, please email us.

Security. BRITESTAR has put in place appropriate safeguards to prevent unauthorized access to your personal data. Although we take such efforts to protect your personal data from loss, misuse, or alteration by third parties, you should be aware that there is always some risk involved in transmitting information over the Internet.

Notice to California Residents

The California Consumer Privacy Act (CCPA) provides California residents with rights regarding their personal information. This section describes how to contact BRITESTAR to exercise those rights.

Personal Information Sales Opt-Out and Opt-In.

BRITESTAR does not sell your personal information to third parties. If you have questions about this policy, please email [email protected].

Categories of Information We Collect.

BRITESTAR collects the information detailed in the chart at the beginning of this Privacy Policy, which also explains how BRITESTAR uses the information.

Access to Specific Information and Data Portability.

You have the right to request your personal information that BRITESTAR has collected and stored. Once we receive and confirm a verifiable data portability request from you, we will disclose the personal information we collected about you over the prior 12 months.

Deletion Request Rights.

You have the right to request that BRITESTAR delete any of your personal information that BRITESTAR has collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable request for deletion of your personal information, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Exercise free speech ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
4. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
5. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
6. Comply with a legal obligation.

Exercising Access, Data Portability, and Deletion Rights.

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:

• Emailing [email protected]
• Visiting RomaDrama.com/datarequestform and filling out the webform
• Mailing your request along with proof of your identity to:

BRITESTAR EVENTS
Attn: Privacy Officer
3982 Powell Road, Ste 170, Powell, OH  43065

Only you, or someone legally authorized to act on your behalf, may make a verifiable request related to your personal information. You may also make a verifiable request on behalf of your minor child.

Verification.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. We’ve created the webform available at RomaDrama.com/datarequestform to aid in verification by asking consumers to: (1) provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and (2) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Response Timing and Format.

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 45 additional days for a total of 90 days), we will inform you of the reason and extension period in writing. We will deliver our response to you in the same format we receive the request (i.e., via email if you send in an email request).

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will deliver the data to you via email through a secure attachment. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Non-Discrimination.

We will not discriminate against you for exercising your CCPA rights. Unless allowed under the CCPA, we will not deny you goods or services, charge you different prices or rates for goods or services, or provide you with a different level of quality of goods or services in response to you exercising your CCPA rights. Please be aware that if you purchase a BRITESTAR registration credential and later request BRITESTAR delete your personal information, we will not be able to provide you with the credential you purchased because the badge lists your name and other information you provide to BRITESTAR.

Other California Privacy Rights.

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Site that are California residents to request a detailed list of any third-party entities with which BRITESTAR shares personal information for their own marketing purposes. You may opt-out of having your personal data shared with third parties by sending your request including your full name, email address, and postal address to:

BRITESTAR EVENTS
Attn: Privacy Officer
3982 Powell Road, Ste 170, Powell, OH  43065

or by emailing [email protected]. California residents using the Site are entitled to know that they may file grievances and complaints with the California Department of Consumer Affairs, 400 R Street, Suite 1080, Sacramento, CA 95814, by phone at 916-445-1254 or 800-952-5210, or by email to dca at dca.ca.gov.

How to Contact BRITESTAR

You may contact us by U.S. mail with any questions about this Privacy Policy at the address below, or email [email protected] for general inquiries and personal data inquiries.

BRITESTAR EVENTS
Attn: Privacy Officer
3982 Powell Road, Ste 170, Powell, OH  43065