PRIVACY POLICY

Effective date: 10.02.2025

This privacy policy of Unstoppabl.ai AS, a Norwegian company registered with the Register of Business Enterprises from Norway under organization number 932 609 681 (subsequently referred to as "Unstoppabl.ai", "we," "our," or "us") is based on data protection laws of Norway, European General Data Protection Regulation 2016/679 (GDPR), United Kingdom Data Privacy Act 2018 (UK DPA) California Consumers Privacy Act (CCPA) and Brazil's Lei Geral de Proteção de Dados (LGPD). This privacy policy discloses what we collect and how we process your Personal Data. This privacy policy regulates privacy matters and Personal Data processing when it comes to:

• using https://unstoppabl.ai website ("Website");
• participating in online events hosted by us for our clients at https://app.unstoppabl.ai ("Platform");
• recruiting activity performed by us;
• processing data of our customers, partners, service providers or anyone else with whom we have business relations.

The terms listed below have the following meanings:

• Personal Data means information that relates to identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, etc.;
• Processing means any operation or set of operations which is performed on Personal Data, such as collection, recording, organization, structuring, storage, adaptation or destruction;
• Data Subject (or you) is an identified or identifiable natural person who can be identified, directly or indirectly, based on particular Personal Data.

Personal Data Processing

You agree that Unstoppabl.ai will be the data controller of your Personal Data when you are visiting our Website or registering with our Platform. Personal Data includes the following types:

• Identity data: name, surname, avatar image;
• Contact data: email address, location, company name, phone number, position of employment;
• Technical and system-generated data: log files, third party account identifier, user ID, password, IP address, browser version, pages you visited on our website, type of the event, number of participants, number of exhibitors, cookie identifiers, device screen resolution, device type, device identifiers, device operating system, preferred language of display, mouse events (mouse clicks, etc.), key press, date and time when pages were visited, videos being watched, planned meetings; saved auditorium timeslots.
• Communication data: content, communications, and other information you provide when you use the Website or Platform, information that other visitors provide about you (including when you create or share messages or communicate with others); content, messages and emails you send us (include information about you); reviews and ratings; messages, files, images; resume or CV you may provide us with;
• Payment data: cardholder name, unique customer identifier, order ID, bank account details, payment card details, card expiration date, CVC code, date/time/amount of transaction, recipient name/ID and location.
• Sensory information: video calls, audio calls, call duration, video recording. We do not retain video calls data in the course of providing our services to you. However, event organizers may keep such records.

We use different methods to collect data from and about you including through:

• Direct interactions. You may provide us your Identity, Contact, Communication, Sensory information, Technical or Payment data by filling in forms on our Website or Platform, by corresponding through the Website or Platform features or in course of communication with us through email or by other means.
• Automated technologies or interactions. As you interact with our Website or Platform, we will automatically collect Technical and system generated data about your equipment, browsing actions and patterns. We collect this Personal Data by using cookies, website analytics tools and other similar technologies. Please see our cookie policy for further details.

When you are visiting our Website or Platform, your Personal Data will be used in order to provide our services or respond to your request. If you decide to contact us by email or by phone, we will process your Personal Data in order to respond to your request.

After registration of an account with our Platform, your Personal Data will be used or processed only for the creation of an account with our Platform, unless you are invited to or decide to participate in an online event, decide to become event organizer or decide to contact us.

We act as a data controller with regards to Personal Data when (1) you are visiting our Website or Platform, (2) you are registering an account with our Platform, (3) when you are communicating with us through our Website chat, through our email or other contact means, or (4) when we contact you based on our legitimate interest.

For online events hosted through our Platform, we act as data processors acting on behalf of the event organizers, who act as data controllers. Information about event organizers is available at the online event's or event organizer's privacy policy which should be accepted in the process of registration for a particular online event. Once you register for a particular online event, we start to act as a technical service provider and all Personal Data collected within the framework of a particular online event shall be Processed according to event organizers' privacy policy. Please note that the scope of Personal Data collected according to event organizer's instructions usually differ, since event organizers are able to set which data will be collected or enable different functionalities of our Platform. For example, event organizers may define the scope of Personal Data collected during registration, conduct polls, provide other participants with access to collected Personal Data or record live streams attended by participants. In such cases, we only provide our online software solution for the online event hosting and act solely under the event organizer's instructions as a data processor. For the avoidance of doubt, we are not Processing for our own purposes Personal Data collected according to event organizers' instructions. The decision of how your Personal Data will be processed starting from the moment of registration for an online event lies solely with the event organizer. In this case, your Personal Data is collected (1) when you are registering through the web form for the online event or (2) when you are attending an online event in the scope determined by the event organizer's decision.

Once you are participating in a certain online event and start communicating with other users, some of your information becomes publicly available inside of a particular online event. You and others may post content that includes particular information about you. Meanwhile, we collect information as data processors about you when you send, receive, or engage with messages through our Platform. When you participate in certain polls created by the event organizer, we may store your Platform user ID to save poll results.

We do not collect any special categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offenses.

We will process Personal Data when onboarding service providers, employees or purchasing goods or services. We process Personal Data for recruitment purposes to ensure that we recruit qualified candidates or certain personnel. This includes Contact Data, Identity Data and Communication Data.

Use of the Personal Data

We process your Personal Data for the following purposes:

• To provide our Platform. We make our website publicly available to potential event attendees, visitors, or event organizers. We may Process Technical and system generated data to provide you with the best experience with regards to our website.
• To provide events created by event organizers. Our Platform is designed as an environment where users interact with each other during specific online event(s) created by event organizer(s). So, we allow our users to create accounts with our Platform, but they cannot participate in online event without the event organizer's decision or invitation. For this purpose, we process identity data, contact data, messages data, and technical data.
• To provide our services to event organizers. Our Platform is designed as an environment where users interact with each other during specific events, organized and controlled by event organizers. For this purpose, we process identity data, contact data and communication data when potential customers contact us. We also process Personal Data in the amount defined in event organizers' privacy policy according to event organizer instructions which may be found on a particular online event page.
• Platform and Website functioning and developing. We process Personal Data, including public feedback, to conduct research and for the further development of our Platform in the context of legitimate interest of the data controller. For this purpose, we process technical data and Personal Data in the amount defined in event organizers' privacy policy according to event organizer instructions.
• Security. We process identity data, contact data, communication data and technical data in the context of your and data controllers legitimate interest - to ensure safety and security, to investigate possible fraud or other violations. For example, we may use your log files for technical analysis as well as for statistical evaluation.
• To respond to your question and inquiries regarding our services. We process identity data, communication data, sensory information and contact data for this purpose.
• To communicate with the general public, certain individuals or target groups (customers, service providers). For this purpose, we process technical data, contact data, communication data and identity data.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests unless fundamental rights of other Data Subject(s) override those interests.
• For legal purposes. We may use any type of Personal Data when Processing is required by the applicable law.

Lawful basis

We process EEA-based User's Personally identifiable data under the following legal bases:

• On the basis of Art. 6 (1) (a) GDPR; Art 7 (I) LGPD - on the basis of consent - to provide you with the possibility to create an account with our Platform and use our Platform.
• On the basis of Art. 6 (1) (f) GDPR; Art 7 (IX) LGPD - in the context of data controller (event organizer) legitimate interest. Our legitimate interest lies in our Processing on the basis of the contract made with the organizer.
• For other legitimate interests, unless those interests are overridden by user's interests or fundamental rights and freedoms that require protection of Personal Data. For example we rely on our legitimate interest when it comes to (1) diagnose analytics to assess the number of visitors, posts, page views, reviews for further optimization of our Platform; (2) optimize of our visitors' experience; (3) prevent cyberbullying & fraud; (4) ensure network and information security, (5) analyze customer satisfaction; (6) provide information and ensure good management of and support for our customers, suppliers and partners; (7) make recommendations or/and suggestions to you about online events or other services available through the Platform that may be of interest to you, (8) ensuring good management of and support of our service providers, suppliers, partners and customers, and (9) perform a contract or take steps to initiate entering into the contract.

How do we protect your data

We process Personal Data in a way that assures an appropriate level of security, including protection against unauthorized Processing, destruction, accidental loss, or damage, while applying suitable organizational and technical measures under industry standards.

Our physical security complies with industry standards. All data transits are encrypted to align with best practices with Secure Socket Layer technology. Our Platform uses industry-standard data transport protocols. We never store Personal Data on devices like USB or CD. We are using security reports to monitor access patterns and to proactively identify and mitigate potential threats.

Our platform is hosted on Amazon Web Services servers based in Frankfurt-in-Main operated by Amazon Web Services EMEA SARL. All data are automatically replicated in real-time to secondary hot failover databases and file repositories in the same data center.

All our personnel and contractors are subject to confidentiality agreements. Only authorized personnel have granted minimum access on a need-to-have basis to Personal Data.

How do we share your Personal Data

Once you are starting to participate in a particular online event, some part of your Personal Data may become visible to certain users of the online event in which you are participating. When you decide to share any message, content or link publicly, it can be viewed by every participant of an online event (others will be able to find and see your publicly shared content, including your name and photo if you have provided one).

We will share your Personal Data with our service providers in order to provide and facilitate our Platform. Also, we will share your Personal Data with event organizers as part of the event organization process and our Platform provision.

We retain the right to share your Personal Data as part of change in control, merge or sale, or in preparation for any of these events. Any third party which further buys us, or part of our business, will be entitled to continue to use your data, but only in the manner set out in this Privacy Policy unless you agree otherwise.

Service providers

Our service providers acting as processors based in the EEA or USA who provide services and IT and system administration services:

• We use Amazon AWS provided by Amazon Web Services EMEA SARL (having a principal place of business at 38 Avenue John F. Kennedy, L-1855, Luxembourg) for our Platform hosting. Amazon AWS privacy policy is available at https://aws.amazon.com/privacy. Purpose of Processing - storage of data based on consent and on the basis of our legitimate interest. Legal basis: Art. 6 (1) (a) GDPR and Art. 6 (1) (f) GDPR, Art 7 (I) LGPD and Art 7 (IX) LGPD.
• We use Stripe provided by Stripe Payments Europe, Ltd (a private limited company organized under the laws of Ireland with company number 513174 and offices at The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland) for payments processing between Participants and Event Organizers. We have entered into a Data Processing Agreement with Standard Contractual Clauses with Stripe. Stripe Privacy Policy is available at https://stripe.com/privacy. Legal basis: Art. 6 (1) (a) GDPR and Art. 6 (1) (f) GDPR; Art 7 (I) LGPD and Art 7 (IX) LGPD.
• We use MongoDB as a database sub-processor in our data processing activities. MongoDB will be provided to us by MongoDB Limited, a company registered under the laws of Ireland, with registered address at Building 2, Number One, Shelbourne Rd, Ballsbridge, Dublin 4. D04Y3X9. MongoDB privacy policy is available at https://www.mongodb.com/legal/privacy-policy. We have entered into the following data processing agreement with MongoDB https://www.mongodb.com/legal/dpa. Legal basis: Art. 6 (1) (a) GDPR and Art. 6 (1) (f) GDPR; Art 7 (I) LGPD and Art 7 (IX) LGPD.
• We use Hotjar services provided by Hotjar Ltd (having a principal place of business at Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta). Hotjar is behavior analytics and product experience insights service that helps empathize and understand users' preferences, and get their feedback through tools like heatmaps, session recordings, and surveys. Hotjar privacy policy is available at: https://www.hotjar.com/legal/policies/privacy/. Legal basis: Art. 6 (1) (a) GDPR and Art. 6 (1) (f) GDPR; Art 7 (I) LGPD; and Art 7 (IX) LGPD.
• We use Hubspot services provided by HubSpot, Inc. (having a principal place of business at 25 First Street, 2nd Floor Cambridge, MA 02141 USA). Hubspot is an inbound marketing and sales software that helps companies attract visitors, convert leads, and close customers. Hubspot privacy policy is available at: https://legal.hubspot.com/privacy-policy. Unstoppabl.ai and HubSpot have entered into a Data Processing Agreement with Standard Contractual Clauses. Legal basis: Art. 6 (1) (a) GDPR and Art 7 (I) LGPD. Hubspot services are not used at https://app.unstoppabl.ai.
• We use JustCall services, provided by SaaS Labs US, Inc. a corporation registered under the laws of the State of Delaware (having principal place of business at 3260 Hillview Avenue, Palo Alto, California 94304, the United States). JustCall is a cloud phone system for sales, support, and report teams. Unstoppabl.ai and JustCall have entered into a Data Processing Agreement with Standard Contractual Clauses. Legal basis: Art. 6 (1) (a) GDPR and Art 7 (I) LGPD. JustCall services are not used at https://app.unstoppabl.ai.
• We use CookieBot services provided by Cybot A/S, a company registered under the laws of Denmark (having principal place of business at Havnegade 39, 1058 Copenhagen, Denmark). Cookiebot is a cloud-driven solution that automatically controls cookies and trackers, enabling full GDPR/ePR. CookieBot privacy policy is available here: https://www.cookiebot.com/en/privacy-policy/. Legal basis: Art. 6 (1) (a) GDPR and Art 7 (I) LGPD.
• We use Matomo analytics cloud service provided by InnoCraft Ltd, 7 Waterloo Quay, PO Box 625, 6140 Wellington, New Zealand. We use Matomo as an analytical tool to track online visits of our websites and event pages and display reports on these visits for analysis. This tool collects IP addresses in anonymized form. Personal data is stored in servers located in Ireland or in Germany. Personal Data transfers to New Zealand are subjects to EU Commission adequacy decision #2013/65/EU, thus being assimilated as intra-EU data transfers. Matomo privacy policy is available at https://matomo.org/privacy-policy/. Matomo's EU representative is located at ePrivacy Holding GmbH Große Bleichen 21 20354 Hamburg Germany. Legal basis: Art. 6 (1)(f) GDPR, and Art. 6 (1)(a) GDPR; Art 7 (I) LGPD and Art 7 (IX) LGPD.
• We use SafeINIT software development services provided by SC FUSECON SRL, a company incorporated in Romania whose registered office is at Str. Constantin Daniel 4, Bucharest, Romania, having sole registration code RO38855898. SafeINIT provides DevOps and Automation, and other software development services. Legal basis: Art. 6 (1)(f) GDPR, and Art. 6 (1)(a) GDPR; Art 7 (I) LGPD and Art 7 (IX) LGPD.
• We use OpenAI software provided by OpenAI, a company incorporated in the United States of America, whose registered office is in San Francisco, 3180, 18th Street, San Francisco CA 94110, United States of America. OpenAI provides AI research and deployment services. Legal basis: Art. 6 (1)(f) GDPR, and Art. 6 (1)(a) GDPR; Art 7 (I) LGPD and Art 7 (IX) LGPD.
• We use Text, Inc. software (OpenWidget) provided by Text, Inc., a company incorporated in the United States of America, whose registered office is in Boston, 101 Arch Street, 8th Floor, Boston MA 02110, United States of America. Legal basis: Art. 6 (1)(f) GDPR, and Art. 6 (1)(a) GDPR; Art 7 (I) LGPD and Art 7 (IX) LGPD.
• We may share data with our contractors and service providers, who act either as: (1) processor or controller based in the EEA or worldwide who provide development services, IT and system administration services, software testing services or support services or (2) acting as a processor or joint controllers including lawyers, bankers, auditors and insurers. Purpose of Processing - make our services available to our customers. Legal basis: Art. 6 (1)(f) GDPR, and Art. 6 (1)(a) GDPR; Art 7 (I) LGPD and Art 7 (IX) LGPD.

Event organizers

Upon registration for a particular online event, we will share Personal Data with the event organizer of such an online event. We share this data on the basis of Art. 6 (1)(f) GDPR. Please refer to the event privacy policy to find more about the Processing of your Personal Data.

When you create an event organizer's account with our Platform, we remain the controller of your Personal Data you provide us. However, you should keep in mind that we are not data controllers when it comes to Personal Data collected or Processed according to your instructions (by editing registration fields, enabling or using certain event functionalities, sharing Personal Data with event participants, etc.).

Data transfers

We are not and will never sell your Personal Data to third parties.

The Personal Data you provide us with may be transferred to and processed on our servers, or servers of third-party providers. When you participate in online events hosted with our software, if such third party providers are located outside EEA, we either enter into standard ("model") contractual clauses, or ensure that the transfer is pursuant to another valid mechanism under GDPR.

As far as the transmitting of Personal Data to a third party is not explicitly permitted by law, you agree that we may, if necessary, transmit Personal Data to law enforcement offices when relevant to defending against a governmental and public safety threat or the prosecution of a criminal act. Furthermore, you agree that we may, if necessary and related to legitimate law enforcement or criminal prosecution interests, transmit Personal Data to a third party. Transmission of data is not necessary and will not occur if a preliminary legal or law enforcement proceeding can be initialized or has already been initialized.

You retain, at all times, the possibility to object to the replacement of data controllers, data processors, subcontractors or sub-processors handling Personal Data to such changes or to terminate the contract with us.

Your Privacy Options according to GDPR and UK DPA 2018

According to GDPR and UK DPA 2018, you have the following rights:

• Right to rectification. You have the right to request to rectify, without undue delay, any incomplete, inaccurate or incorrect data pertaining to you.
• Right to limitation of Processing. You can limit the use of Personal Data processed.
• Right of opposition. You have the right to object, for reasons related to its particular situation, to the Processing based on our legitimate interest of your Personal Data, including regarding the creation of profiles. We will no longer process Personal Data, unless we demonstrate that we have legitimate and compelling reasons justifying the Processing and prevailing over the interests, rights and freedoms of the Data Subject or that the purpose is to establish, exercise or defend a right in court. When the Processing of Personal Data is for direct marketing purposes, you have the right to oppose the Processing of Personal Data for this purpose, including about the creation of profiles, insofar as it is related to that direct marketing. In this case, Personal Data is no longer processed for this purpose.
• Right of access. You may request a copy of Personal Data collected during use of Platform. This data includes Personal Data processed, purposes of Processing, categories of Personal Data concerned, recipients of personal data, origin of the data (unless collected directly from you), the envisaged period for which Personal Data will be stored, the existence of other rights.
• Objecting to or restricting the use of Personal Data. You can ask to stop using all or some portion of Personal Data or limit use thereof by requesting its erasure as described above or sending us a request.
• Right to lodge a complaint with supervisory authority. You have the right to lodge a complaint with a competent data protection supervisory authority.
• Right to data portability. You can receive Personal Data we collected about you in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. Please note that we are acting as data processors with regards to events you are participating in and we will only disclose information with regards to which we are the data controller. If you are willing to receive personal data that event organizer is Processing about you, please mention this in the request you are sending to us and we will redirect it to the event organizer, or otherwise contact the event organizer directly, using credentials available on the event organizer's privacy policy.
• Right to be forgotten. You can request deletion of your Personal Data when following grounds applies: (1) the Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (2) you withdraw your consent and where there is no other legal ground for Processing; (3) and there are no overriding legitimate grounds for Processing, or you object to Processing pursuant to Article 21(2) GDPR. You can remove your Personal Data by accessing your account settings. You can also request removal of your Personal Data by sending a respective request to the email described below. Please note that removing your account means that you will lose access to the events you've attended. Please note that you can request the deletion of your Personal Data using the same procedure as stated above even if your request is not subject to GDPR and UK DPA 2018. Please be aware that, where imposed and/or permitted by the applicable law, we may not delete your Personal Data insofar as the Processing is necessary for: (1) for the exercise of the right to free expression and information; (2) for compliance with a legal obligation which stipulates the Processing obligation under European Union law or domestic law applicable to us; (3) for the establishment, exercise or defense of a right in court.
• Right not to be subject to a decision based solely on automated Processing, including profiling.

Exercise of rights granted according to GDPR or UK DPA 2018

To exercise any of the aforesaid rights you may send us an email to privacy@unstoppabl.ai. Upon request, we will review it and will provide a response if we are a data controller. We may also redirect it to the event organizer, should the request explicitly mention the event organizer. We may charge a reasonable fee if the request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

If we are data controllers, we shall review and pronounce on the request within 1 month as of its filing. This period may be extended by further two months, if necessary, for example, if your request is particularly complex or you have made several requests. We shall inform you as to any such extension within 1 month as of receipt of the request, stating the reasons for the delay. When you file a request by electronic means, the information is provided electronically, if possible, unless you have requested otherwise. Should your request be unclear we reserve our right to send you our additional questions.

Upon the filing of a request by an authorized person, the notarized power of attorney must be attached to the request. In case of death of the natural person, his / her rights are exercised by his / her heirs and the certificate of heirs shall be attached to the request. The heritage should be confirmed by a respective certificate, issued in the dead person's jurisdiction.

Where data does not exist or their provision is forbidden by law, access of the requesting party to such data is refused.

Third-party content and links

Our Platform may contain embedded videos or links to other websites, services, and web addresses. This privacy policy applies only to our Platform, not to embedded videos nor to those external websites, services and web addresses that we link to. Those websites, services, video hosting services and web addresses have their own privacy policies. We are not responsible for these external websites and services and their privacy policies and practices, as well as their compliance with applicable data protection laws. In addition, if you link to our Platform from an external site, we cannot be responsible for the privacy policies and practices of the owners and operators of that external website and recommend that you check the privacy policy of that external website.

Retention

When you are creating your account with our platform, we will store your Personal Data as long as your account will be active, but not more than five years in case you are not participating in online events.

When you do not have an account with our platform, we will store your Personal Data for the term not longer than five years.

When you are making an inquiry with our platform, or we process your Personal Data on the basis of our legitimate interest, we will process your Personal Data as long as it is required for the purpose or our legitimate interest, but not more than five years from such inquiry or occurrence of our legitimate interest.

We will store Personal Data collected on behalf of the event organizer for as long as it is required by the event organizer acting as data controller. We may also retain and use Personal Data as necessary to comply with legal obligations, resolve disputes, and enforce agreements.

Age Limitation

Our Platform is generally not for users who are under 16 years old. We do not knowingly process any Personal Data from persons under 16 years of age, and any such data shall be immediately deleted upon detection, unless (1) Processing of Personal Data of persons under 16 years of age is explicitly allowed by the national Personal Data protection law applicable to such person's Personal Data and Event Organizer, (2) person under 16 years of age consented to Processing of its Personal Data or, where lawfully required, the consent was given by the tutor of the person under 16 years of age and (3) Processing of Personal Data of individual under 16 years of age is explicitly disclosed in Event Organizer's privacy policy. If you learn that anyone younger than 16 years old has provided us with Personal Data, please contact us at privacy@unstoppabl.ai.

Privacy Policy Changes

We may amend this Privacy Policy from time to time, and we shall inform you about any such amendments in the future. The use of data we collect, process, and save now is subject to the version of this Privacy Policy that is in effect at the time users provide such data.

Information for California and Nevada Residents

Under California Consumers Privacy Act (CCPA) and Nevada Privacy Law we have to inform consumers based in California and Nevada about our use, disclosure, Processing and collection of personal information. This section explains your rights as of California/Nevada consumer or resident pursuant to this act. Categories of Personal Data that we collect are described in the "Data Processing" section of this Privacy Policy. The purposes of Processing of Personal Data are described in the "Use of Personal Data" section of this Privacy Policy.

We will never collect, sell, and/or disclose Personal Data to third parties or service providers for a business purpose, except disclosure to event organizers, whose role is explained in the "Event organizers" section. Please see the respective event organizer privacy policy to understand how your Personal Data will be treated.

CCPA prohibits any kind of discrimination acts against California consumers for executing their rights granted pursuant to CCPA and imposes requirements and restrictions on any kinds of financial incentives related to collection, Processing and use of California consumers Personal Data. We will not discriminate against you and will provide, and will not deny, a different level of quality of services. Also, we will not charge or suggest that we will charge different prices or rates or impose penalties. However, we reserve the right to do so, when it is reasonably related to the value provided to the consumer by the consumer's data.

We honor rights granted to consumers pursuant to CCPA and Nevada Privacy Law, so we will accept verifiable requests of copy, deletion and right to know. California and Nevada consumers can execute your right twice per 12 months period.

• Deletion request. Right to request deletion of Personal Data we collected about you.
• Copy request. Right to request a copy of Personal Data we collected about you.
• Right to know. Description of Personal Data we collected about you within the last 12 months period as per the CCPA.

You can execute your rights by sending email to privacy@unstoppabl.ai. When you file a request by electronic means, the information is provided electronically, if possible, unless you have requested otherwise.

For California based consumers: we will provide you with a response within 45 days from the moment we received your request and verify your identity.

For Nevada based consumers: we will provide you with a response within 90 days from the moment we received your request and verify your identity.

Please take into account that we will satisfy your request only when we have verified your identity to a reasonable degree of certainty. You are entitled to authorize your agent to execute your rights. However, please note that we will verify your agent's authorisation.

Information for Brazilian residents

Brazil's Lei Geral de Proteção de Dados, the Brazilian General Data Protection Law, Federal Law no. 13,709/2018 ("LGPD") became effective on August 16, 2020. The LGPD is a legal policy in Brazil, both online and offline, in the private and public sectors. As supervisory authority, the National Data Protection Authority (ANPD) has been created and charged with overseeing and enforcing the LGPD. LGPD requires that Brazilian Personal Data processed by any organization is appropriately and sufficiently managed and protected.

We honor Brazilian residents' rights and allow to execute the following rights granted by the article Art 18 of LGPD:

• The right to confirmation of the existence of the Processing;
• The right to access the data;
• The right to correct incomplete, inaccurate or out-of-date data;
• The right to anonymize, block, or delete unnecessary or excessive data or data that is not being processed in compliance with the LGPD;
• The right to the portability of data to another service or product provider, by means of an express request;
• The right to delete Personal Data processed with the consent of the Data Subject;
• The right to information about public and private entities with which the controller has shared data;
• The right to information about the possibility of denying consent and the consequences of such denial; and
• The right to revoke consent.

You can execute your rights by sending email to privacy@unstoppabl.ai. When you file a request by electronic means, the information is provided electronically, if possible, unless you have requested otherwise.

We will provide you with a response within:

• Response to the right of access request will be provided within 15 days from the moment we received your request and verify your identity.
• Other requests will be executed within reasonable time, but not more than 30 days from the moment we received your request and verified your identity.

Please take into account that we will satisfy your request only when we have verified your identity to a reasonable degree of certainty. You are entitled to authorize your agent to execute your rights. However, please note that we will verify your agent's authorisation.

Supervisory Authority

We're regulated by the Norwegian Data Protection Authority (DPA). You can also contact them for advice and support at https://www.datatilsynet.no/en/about-us/contact-us/.

How To Contact Us

If you have any questions or requests regarding this policy, please send your request to privacy@unstoppabl.ai

SPECIAL PROVISIONS

Login through third parties

Facebook Connect. The users who have a Facebook account can login or create an account with our Platform through "Facebook Connect" of the social network Facebook, published by Facebook Inc. (with register address at 1 Hacker Way, Menlo Park, CA 94025, USA).

Google+ The users who have a Google account can login or create an account with our Platform through "Google+ Sign-In", published by Google Ireland Limited (with registered address at 4 Barrow St, Dublin, D04 E5W5, Ireland).

Sign-In with LinkedIn. The users who have a LinkedIn account can login or create an account with our Platform through "Sign-In with LinkedIn", provided by LinkedIn Ireland Limited (with registered address at Wilton Place, Dublin 2, Ireland).

Twitter Api. The users who have a Twitter account can login or create an account with our Platform through "Twitter Api", provided by Twitter, Inc. (with registered address at 1355 Market Street, Suite 900, San Francisco, CA 94103).

YouTube video service

Our Platform uses YouTube, a video streaming platform operated by Google LLC, D/B/A YouTube. 901 Cherry Ave. San Bruno, CA 94066. USA to stream video content, live streams and video sessions published by our Event Organizers. YouTube uses cookies and local storage in order to collect information about your visit to our website. According to YouTube they collect the following data using cookies and local storage: IP address, browser type, language, view history, access time, other cookies' content, including marketing IDs, visited websites. For more information on data protection at "YouTube", please see the provider's Privacy Policy at: https://policies.google.com/privacy. Legal basis for the data transfer to YouTube as an independent controller is Art. 6-1(f) GDPR. The legitimate interest is (1) providing Event Organizers with functionality to display video content and video streaming, (2) the customer orientated design of the website and (3) the opportunity to present videos without leaving the website.

Vimeo video service

Our Platform uses Vimeo, a video streaming platform operated by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA to stream video content, live streams and video sessions published by our Event Organizers. Vimeo uses cookies and local storage in order to collect information about your visit to our website. According to Vimeo they collect the following data using cookies: IP address, browser type, language, view history, access time, other cookies' content, including marketing IDs, and visited websites. For more information, please see the provider's Privacy Policy at https://vimeo.com/privacy. Legal basis for the data transfer to Vimeo as an independent controller is Art. 6-1(f) GDPR. The legitimate interest is (1) providing Event Organizers with functionality to display video content and video streaming, (2) the customer orientated design of the website and (3) the opportunity to present videos without leaving the website.

Wistia video service

Our Platform uses Wistia, a video streaming platform operated by Wistia, Inc., 120 Brookline Street Cambridge, Massachusetts, 02139 USA to stream video content, live streams and video sessions published by our Event Organizers. Wistia uses local storage in order to collect information about your visit to our website. According to Wistia they collect the following data using cookies: view history, access time and visited websites. For more information, please see the provider's Privacy Policy at https://wistia.com/privacy. Legal basis for the data transfer to Wistia as an independent controller is Art. 6-1(f) GDPR. The legitimate interest is (1) providing Event Organizers with functionality to display video content and video streaming, (2) the customer orientated design of the website and (3) the opportunity to present videos without leaving the website.

Calendar integration

Our Platform allows you to add information about available online events to your calendar. For avoidance of doubts, we do not collect any information from your calendar application.

Data Processing for direct advertising

Based on our legitimate interest to send marketing mails directly to potential new customers, we will, in accordance with Art. 6-1(f) GDPR store your email address and, if given, your name and location, and use it to send direct personalized marketing mails, or use your phone number to contact you.

Based on our general economic and legitimate interest to send personalized direct mails to potential new customers, we reserve the right, in accordance with Art. 6-1(f) GDPR, to store your name, email address and location and to use it to send you product information by email or to use your phone number to contact you.

Based on your consent, we will, in accordance with Art. 6-1(a) GDPR, store your email address and, if given, your name and location, and use it to send our newsletters to you. You can revoke your prior consent to receive our newsletters at any time and free of charge, either by using the "unsubscribe" option that is included in any received newsletter or by sending us a request in this regard to privacy@unstoppabl.ai.

Personal Data collected for the purpose of direct advertising will be stored until an objection is received and in accordance with applicable data processing regulations.