Privacy Policy

At Summit One Vanderbilt (“Summit” or “we”), we respect your right to privacy.

This Privacy Policy (the “Policy”), which is part of our overall Terms and Conditions, is designed to provide you with information about how we collect, use, and share the personal information that we may collect from you when you visit our website, use our other online services, purchase our products, or otherwise interact with Summit (collectively, the “Site”). By accessing Summit’s website or otherwise interacting with Summit, you acknowledge that you have reviewed this Privacy Policy and understand the practices described herein.

This Privacy Policy also applies to information (including the “Personal Information” defined below) that we may collect from you in person at our physical locations (each a “Location” or collectively, “Locations”), via phone calls or other communications with our representatives, by using Company-provided Wi-Fi, by purchasing tickets at Locations, at Company-sponsored events, or in any other instance when you contact us. We refer to all of the above as our “Services.”

By using our Services, you agree to the collection, use, disclosure, and procedures this Privacy Policy describes. Please note that this Privacy Policy does not apply to third party websites (“Third Party Services”), such as Facebook, Twitter, Pinterest, Instagram, Snapchat, Trip Advisor, and Google My Business, that we do not own or control, even if you access them through our Services. We try to work only with Third Party Services that share our respect for your privacy, but we cannot take responsibility for their practices, content, or privacy policies. We encourage you to carefully review the privacy policies of any Third-Party Services you access so that you know how they will collect, use, and share your information.

This Privacy Policy applies whether you are accessing the Website through the use of your personal computer, a mobile device, or any other technology or software known today or later developed. As we update and expand our services, we reserve the right to modify this Privacy Policy at any time. Any changes will be posted here so that you are always aware of what information is collected, how it is used and when, if ever, it is disclosed. Your continued use of the Website will signify acceptance of the terms of the new policy.

If you have any questions, please submit them using the contact information we provide below.

1. What Information We Collect

We use a variety of methods to gather information to help ensure that your experience is as efficient and accommodating as possible. We may obtain personal information about you from various sources, including through your communications with us. We also collect certain information by automated means, using technologies such as cookies and pixel tags.

In connection with the Services we provide, the types of information we may collect, in order to serve you better, include: (i) your first and last name, email address, home or business address, other shipping or billing addresses, telephone number, mobile number, your birthdate, your purchase and/or service history, or other information that could reasonably be used to identify you personally or identify your household or device (hereinafter, “Personal Information”); and/or (ii) demographic information, such as your country, state, or county of residence or business operation (“Demographic Information”); and/or information you provide about other people, such as a gift recipient.

We may collect this information when you:

• Request information about our products and services from us via forms or emails, such as signing up for our newsletter or requesting information about Summit One Vanderbilt;
• Visit our website, experience, or retail location(s);
• Contact our call center or customer service desk or ask for assistance on social media;
• Create an online shopping account or travel trade portal account;
• Purchase, return, or exchange a product by phone, mail or online, including tickets to Summit One Vanderbilt or retail products;
• Contact us regarding a question, concern, or inquiry, such as when you make inquiries concerning our Sites, products and/or Services (including at in-person events, or by phone or email);
• Register and create an account on our Site(s);
• Access or Sign up for free Wi-Fi at one of our Locations;
• Sign up or request to be placed on our mailing and/or email marketing lists;
• Apply for employment with Summit;
• Provide billing information to us;
• Upload user-generated content for use on our Site;
• Provide us with comments or suggestions;
• Participate in a promotion, survey, sweepstakes, or contest sponsored or co-sponsored by us; and/or
• Otherwise interact with the Site or our representatives.

We may offer Wi-Fi Services, whether ourselves or through a business partner. When we do this, those Wi-Fi Services will be governed by separate Terms of Use and Privacy Policies, which will be made available through those services.

Your decision to provide us with information is voluntary, but if you choose not to provide any requested information, you may not be able to take advantage of all of the Site’s features or our Services, including ordering tickets, products, or Services, submitting inquiries, or signing up for newsletters or marketing lists.

We may also collect personal information from you in conjunction with content that Summit produces and distributes, including virtual Summit programs and events hosted on third party platforms, including but not limited to social media platforms. In such instances, we may use our social media accounts or other methods of electronic communication to interact with you and others to promote participation in our informational, artistic, or community-building content and to solicit photos, video, or other media of you interacting with our content. We may publish such media as you submit to Summit, or derivatives thereof, to one or more of the Summit Sites, such as our social media accounts, or other modes of broadcasting, distributing, or promoting such content. Such submissions are voluntary on your part.

In addition to information that you choose to submit to us, we and/or our service providers may automatically collect and/or store certain information when you visit or interact with the Site(s) or use Wi-Fi at any of our Locations (“Usage Information”). This Usage Information may be stored and/or accessed from your personal computer, laptop, tablet, mobile phone or other device (a “Device”) whenever you visit or interact with our Site(s) or with Wi-Fi at one of our Locations. Usage Information may include:

• Your IP address, IDFA, Android/Google Advertising ID, IMEI, or another unique identifier (“Device Identifier”);
• Your Device functionality (including browser, browser language, operating system, hardware, mobile network information);
• Referring and exit web pages and URLs;
• The areas within our Site(s) that you visit and your activities there, including remembering you and your preferences;
• Your Device location or other geolocation information, including the zip code, state, or country from which you accessed the Services;
• Your Device characteristics; and
• Certain other Device data, including the time of day you visit our Site(s).

For location information, we may use this information to provide customized Services, content, promotional offers, and other information that may be of interest to you. If you no longer wish for us or our service providers to collect and use location information, you may disable the location features on your device. Consult your device manufacturer settings for instructions. Please note that if you disable such features, your ability to access certain features, Services, content, promotions, or products may be limited or disabled.

We, as well as third parties that provide content, advertising, or other functionality on our Services, may use cookies, pixel tags, local storage, and other technologies (“Technologies”) to automatically collect information through the Services. We use Technologies that are essentially small data files placed on your computer, tablet, mobile phone, or other devices (referred to collectively as a “device”) that allow us to record certain pieces of information whenever you visit or interact with our sites, services, applications, messaging, and tools, and to recognize you across devices to automatically collect information through the Services.

A few of the Tracking Technologies used on the Site(s), include, but are not limited to, the following (as well as future-developed tracking technology or methods that are not listed here):

• Cookies. Cookies are small text files placed in visitors’ computer browsers to store their preferences. Most browsers allow you to block and delete cookies. However, if you do that, the Site may not work properly.
• Pixel Tags/Web Beacons. A pixel tag (also known as a web beacon) is a piece of code embedded on the Site that collects information about users’ engagement on that web page. The use of a pixel allows us to record, for example, that a user has visited a particular web page or clicked on a particular advertisement.
• Embedded Scripts. An embedded script is programming code that is designed to collect information about your interactions with the Site, such as the links you click on.
• Recognition Technologies. Technologies, including application of statistical probability to data sets, which attempt to recognize or make assumptions about users and devices (e.g., that a user of multiple devices is the same user).
• Location information. When you use the Services, we (and our service providers) may automatically collect general location information (e.g., IP address, city/state and or postal code associated with an IP address) from your computer or mobile device. We likewise may collect precise location information when your mobile device is near a physical “beacon” system that we or our vendor operates. You may also prevent this by disabling location information in your device settings.
• Analytics. We may also use Google Analytics and Google Analytics Demographics and Interest Reporting and other providers to collect information regarding visitor behavior and visitor demographics on some of our Services, and to develop website content. Google Analytics data is not tied to any Personal Information. For more information about Google Analytics, please visit www.google.com/policies/privacy/partners/. You can opt out of Google’s collection and Processing of data generated by your use of the Services by going to http://tools.google.com/dlpage/gaoptout. If you receive email from us, we may use certain tags or pixels to capture data such as when you open our message or click on any links or banners our email contains. This data allows us to gauge the effectiveness of our communications and marketing campaigns.

Our uses of such Technologies fall into the following general categories:

• Operationally Necessary. We may use cookies, web beacons, or other similar technologies that are necessary to the operation of our sites, services, applications, and tools. This includes technologies that allow you access to our sites, services, applications, and tools; that are required to identify irregular site behavior, prevent fraudulent activity, and improve security; or that allow you to make use of our functions such as shopping-carts, saved search, or similar functions;
• Functionality Related. We may use cookies, web beacons, or other similar technologies that allow us to offer you enhanced functionality when accessing or using our sites, services, applications, or tools. This may include identifying you when you sign into our sites or keeping track of your specified preferences, interests, or past items viewed so that we may enhance the presentation of content on our sites;
• Performance Related. We may use cookies, web beacons, or other similar technologies to assess the performance of our websites, applications, services, and tools, including as part of our analytic practices to help us understand how our visitors use our websites, determine if you have interacted with our messaging, determine whether you have viewed an item or link, or to improve our website content, applications, services, or tools; and
• Advertising or Targeting Related. We may use first-party or third-party cookies and web beacons to deliver content, including ads relevant to your interests, on our sites or on third party sites. This includes using technologies to understand the usefulness to you of the advertisements and content that has been delivered to you, such as whether you have clicked on an advertisement.

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to disable cookies on your browser (see below) but doing so may prevent you from using the full features of the Services. For information about your choices regarding these technologies, please see “Your Information Choices and Opt-Out Options” in Section 8 below.

If you would like to opt-out of the Technologies we employ on our sites, services, applications, or tools, you may do so by blocking, deleting, or disabling them as your browser or device permits. You can get more information about Cookies and Tracking Technologies, and instructions on how to opt out of cookies and certain tracking technologies, in our “Your Information Choices and Opt-Out Options” in Section 8.

The Site(s) may include functionality that allows certain kinds of interactions between the Site and your account on a third-party website or application. The use of this functionality may involve the third-party site providing information to us. For example, we may provide links on the Site to facilitate sending a communication from the Site or we may use third parties to facilitate emails or postings to social media (like a “Share” or “Forward” button). We also may provide links to allow third parties to process credit card and/or electronic payments. These third parties may retain any information used or provided in any such communications or activities and these third parties’ practices are not subject to our Privacy Policy. We may not control or have access to your communications through these third parties. Further, when you use third-party sites or services, you are using their services and not our services and they, not we, are responsible for their practices. You should read the applicable third-party privacy policies before using such third-party tools on our Site.

The Site may contain links to other websites and other websites may reference or link to our Site or other Services. These other domains and websites are not controlled by us, and Summit does not endorse or make any representations about Third-Party websites or social media platforms. We encourage our users to read the privacy policies of each and every website and application that they interact with. We do not endorse, screen, or approve, and are not responsible for the privacy practices or content of such other websites or applications. Visiting these other websites or applications is at your own risk.

The Site and our other Services may also contain links and interactive features with various social media platforms. If you already use these platforms, their cookies may be set on your device when using our Site or other Services. You should be aware that Personal Information which you voluntarily include and transmit online in a publicly accessible blog, chat room, social media platform or otherwise online, or that you share in an open forum may be viewed and used by others without any restrictions. We are unable to control such uses of your information when interacting with a social media platform, and by using such services you assume the risk that the Personal Information provided by you may be viewed and used by third parties for any number of purposes.

In addition, we may collect information about you from other sources, including consumer credit reporting agencies, in order to evaluate your application for employment. We may also obtain information about you from marketers and market research firms. We may combine the information we collect from third parties with information that we have collected from you or through your use of the Services.

For reasons such as improving and tailoring our products and services to you, we may use information received from other sources to supplement your account information. For example, when visiting Summit, we may collect publicly available information about your social media activity, including your location, in accordance with the Privacy Policies of your social media platforms.

2. How We Use Personal Information

We acquire, hold, use, and Process Personal Information about Individuals for a variety of business purposes, including:

Summit may use information about you to fulfill requests for products, Services, or information, including information about potential or future Services, including to:

• Generally manage Individual information and accounts;
• Respond to questions, comments, and other requests;
• Support the tracking and recovery of your Summit tickets and/or other products;
• Provide access to certain areas, functionalities, and features of Summit’s Services;
• Allow you to register for events;
• Communicate about Individual accounts and activities on Summit’s Services and systems, and, in Summit’s discretion, changes to any Summit policy;
• For internal business purposes;
• Comply with the law and protecting the safety, rights, property or security or Summit, the Services, and the general public; and

Summit may use Personal Information about you for its administrative purposes, including to:

• Send email to the email address you provide to us to verify your account and for informational and operational purposes, such as account management, customer service, or system maintenance;
• Measure interest in Summit’s Services;
• Develop new products and Services;
• Ensure internal quality control;
• Verify your identity and for fraud prevention;
• Process payment for products or services purchased;
• Process applications and transactions;
• Protect the security and integrity of the Site, including understanding and resolving any technical and security issues reported on our Sites;
• Prevent potentially prohibited or illegal activities;
• Enforce our Terms and Conditions.
• For purposes disclosed at the time you provide your information or as otherwise set forth in this Privacy Policy.

Summit may use Personal Information to provide you with materials about offers, products, and Services that may be of interest, including new content, ticket offerings, products, or Services. Summit may provide you with these materials via online social platforms, websites, phone, text/SMS, postal mail, facsimile, or email, as permitted by applicable law. Such uses include:

• To provide you with updates and information about your Summit experience, or a service we provide;
• To tailor content, advertisements, and offers;
• To send you marketing and sales information about Summit and our affiliated entities;
• To send you email communications such as electronic newsletters about our products, Services, events, and promotions;
• To notify you about offers, products, and services that may be of interest to you;
• To provide Services to you and our sponsors;
• To identify your product and service preferences, providing personalized content and ads and informing you of new or additional information, products and services that may be of interest to you;
• To provide mobile marketing messages and other communications and messages;
• To improve the effectiveness of our Site, our marketing endeavors, and our product and service offerings;
• To help us address problems with and improve our Site and our products and services, including testing and creating new products, features, and services;
• To engaging in analysis, research, and reports regarding the use of our Sites and Services; and
• For other purposes disclosed at the time that Individuals provide Personal Information

Summit may use Personal Information to create non-identifiable information that we may use alone or in the aggregate with information obtained from other sources, in order to help us to optimally deliver our existing products and Services or develop new products and Services. From time to time, Summit may perform research (online and offline) via surveys. We may engage Third-Party service providers to conduct such surveys on our behalf. All survey responses are voluntary, and the information collected will be used for research and reporting purposes to help us better serve Individuals by learning more about their needs and the quality of the products and services we provide. The survey responses may be utilized to determine the effectiveness of our Services, various types of communications, advertising campaigns, and/or promotional activities. If an Individual participates in a survey, the information given will be used along with that of other study participants. We may share anonymous Individual and aggregate data for research and analysis purposes.

Individuals who provide us with Personal Information, or whose Personal Information we obtain from third parties, may receive periodic emails, referral offers, newsletters, mailings, or phone calls from us with information on Summit’s or our business partners’ products and services or upcoming special offers/events we believe may be of interest. We offer the option to decline these communications by following the instructions in Section 8 below.

From time to time, Summit may provide Services that are specifically designed to be compatible and used on mobile devices. Summit will collect certain information that your mobile device sends when you use such Services, like a device identifier, user settings and the operating system of your device. Mobile versions of Summit’s Services may require that users log in with an account. In such cases, information about use of mobile versions of the Services may be associated with user accounts. In addition, Summit may enable Individuals to download an application, widget, or other tool that can be used on mobile or other computing devices. Some of these tools may store information on mobile or other devices. These tools may transmit Personal Information to Summit to enable Individuals to access user accounts and to enable Summit to track use of these tools. Some of these tools may enable users to email reports and other information from the tool. Summit may use personal or non-identifiable information transmitted to Summit to enhance these tools, to develop new tools, for quality improvement and as otherwise described in this Policy or in other notices Summit provides.

Summit may use Personal Information and other information about you to create anonymized and aggregated information, such as de-identified demographic information, de-identified location information, information about the computer or device from which you access Summit’s Services, or other analyses we create. Anonymized and aggregated information is used for a variety of functions, including the measurement of visitors’ interest in and use of various portions or features of the Services. Anonymized or aggregated information is not Personal Information, and Summit may use such information in several ways, including research, internal analysis, analytics, and any other legally permissible purposes. We may share this information within Summit and with third parties for our or their purposes in an anonymized or aggregated form that is designed to prevent anyone from identifying you.

You agree that Summit is free to use the content of any communications submitted by you via the Services, including any ideas, inventions, concepts, techniques, or know-how disclosed therein, for any purpose including developing, manufacturing, and/or marketing goods or Services. Summit will not release your name or otherwise publicize the fact that you submitted materials or other information to us unless: (a) you grant us permission to do so; (b) we first send notice to you that the materials or other information you submit to a particular part of a Service will be published or otherwise used with your name on it; or (c) we are required to do so by law.

Summit’s Services may offer various tools and functionality. For example, Summit may provide functionality on its Services that will allow you to forward or share certain content with a friend or colleague. Email addresses that you may provide for a friend or colleague will be used to send your friend or colleague the content or link you request, but will not be collected or otherwise used by Summit or any other third parties for any other purpose.

Summit may use Personal Information for which we have a legitimate interest, such as direct marketing, individual or market research, anti-fraud protection, or any other purpose disclosed to you at the time you provide Personal Information or with your consent.

Summit respects the rights users give us when opting to receive email and SMS communications and enforces internal policies to preserve those rights. It is our objective to retain the long-term ability to continue to communicate with our users. If you do not want Summit or Summit representatives to contact you, you may “opt out” of this preference at any time, whether you are online or contacting Summit directly. As part of your preference flexibility, you will always have the option to opt back in and have Summit contact you based on your previous or new preferences.

In each of the cases described in this Policy, we process or share personal information only if: (a) we have your consent for doing so, (b) we believe we have a legitimate interest in doing so, (c) we need to process or share your data in order to perform or deliver the service you have requested, or (d) we are processing or sharing the data in compliance with a legal obligation to which we are subject.

Beyond its representatives, Summit does not offer or allow the selling of any user-provided information to third parties.

3. What Information We Share

We may share your information as described in this Policy in the following ways (e.g., with our Third-Party service providers; to comply with legal obligations; to protect and defend our rights and property) or with your permission.

• With service providers, sellers, and partners;
• With analytics service providers and advertisers;
• With third parties for legal reasons;
• With third parties as part of an acquisition or liquidation; or
• Aggregated information with third parties.

We share information about you with service providers to perform functions and process your data and to help provide our Services, including hosting and storage providers or email service providers. In addition to using your information to help us provide our Services, service providers may use your personal information internally to improve their own services and may share it in connection with a sale, divestiture, or transfer of business assets; to protect their rights; or to comply with the law. In addition, our providers may share your personal information with their own third-party service providers. They may also combine the information about you that we share with them with contact and social media information related to you that they collect from publicly available sources or from third parties.

We let third parties use cookies, web beacons, and similar tracking technologies on our Services. They may collect information about how you use our Services and other websites and online services over time and across different services. This information may be used to, among other things, analyze and track data, determine the popularity of certain content, and better understand your online activity.

Some companies may use information collected on our Services to deliver advertisements on behalf of us or other companies, targeted to your interests and preferences, on other websites or apps you may visit or on your social media feed and to gauge their effectiveness. To learn about your choices regarding this sharing of your information please see “Your Choices with Respect to Your Information” section below.

We would share information about you if we reasonably believe that disclosing the information is needed to:

• comply with any valid legal process, governmental request, or applicable law, rule, or regulation;
• investigate, remedy, or enforce potential violations of our Terms of Use or Privacy Policy;
• protect the rights, property, and safety of us, our users, or others; or
• detect and resolve any fraud or security concerns.

If we are involved in a merger, asset sale, financing, corporate divestiture, reorganization, or acquisition of all or some portion of our business to another company, or if we undergo liquidation or bankruptcy proceedings, we may share your information with that company before and/or after the transaction closes or the proceedings are completed.

We also share with third parties—such as advertisers—aggregated or de-identified information and we do not limit our third-party providers from using, selling, licensing, distributing, or disclosing de-identified data.

We do not sell personal information, and we will not sell personal information except as described in this Privacy Policy or if we provide you with notice and a right to opt-out of such sale.

4. Legal Bases for Processing and Sharing Your Information

We process your information and share it with third parties for the purposes described in this Policy, based on the following legal grounds:

• With your consent;
• For our legitimate interests;
• To fulfill our contractual obligations; and
• To comply with legal obligations

We ask for your consent to process or share your information for specific purposes and you have the right to withdraw your consent at any time. For example, we ask for your consent to provide you with promotional information. We also ask for your consent to collect information through surveys.

We process and share your information for our legitimate interests and those of third parties while applying appropriate safeguards that protect your privacy. For example, we process and share your information in order to help us:

• Maintain and improve our Services;
• Perform analytics and research aimed at improving the accuracy, effectiveness, usability, or popularity of the Services;
• Improve the content and features of the Services or develop new content and features;
• Promote the Services;
• Detect, prevent, or otherwise address fraud, abuse, security, or technical issues with the Services;
• Protect against harm to the rights, property, or safety of Summit, our customers, or the public as required or permitted by law; and
• Enforce legal claims, including investigation of potential violations of applicable Terms and Conditions for the Services.

We process and share your information to provide a service you have requested under a contract. For example, we process your payment information when you purchase a ticket to visit Summit One Vanderbilt.

We process and share your information when we have a legal obligation to do so, for example, if we are responding to legal process or an enforceable governmental request.

5. Data Transfer

We transfer, process, and store information about you on servers located in the United States and in the cloud, on our servers, on the servers of our affiliates or the servers of our service providers. Your Personal Information may be accessible to law enforcement or other authorities pursuant to a lawful request.

By using the Services, you understand and consent to the collection, storage, processing, and transfer of your information to our facilities in the United States and the cloud and to those third parties with whom we share it as described in this Policy.

6. How We Protect Your Information

We take reasonable precautions to protect your information. Please keep in mind that the Internet is not a 100% secure medium for communication, and we cannot guarantee that the information collected about you will always remain private when using our Services. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk.

7. How Long We Retain Your Information

We will retain your information after you stop using Services to the extent that we are obliged to do so in accordance with applicable laws and regulations and/or as necessary to protect our legal rights or for certain business requirements.

Please note that even if you request that we delete your information, deletion by our third-party providers may not be immediate and the deleted information may persist in backup copies for a reasonable period of time.

8. Your Information Choices and Opt-Out Options

If you need to access, update, or delete other personal information that we may have, you can send a request to privacy@summitov.com. To protect your privacy, before we give you access or let you update your information, we may ask you to verify your identity or provide additional information. We will try to update and allow you to access your information for free, but if it would require a disproportionate effort on our part, we may charge a fee. We will disclose the fee before we comply with your request. We may reject a request for a number of reasons, including, for example, that the request risks the privacy of other users, requires technical efforts that are disproportionate to the request, is repetitive, or is unlawful.

You can stop receiving promotional email communications—such as our newsletter—from us by clicking on the “unsubscribe link” provided in such communications. We will retain your email address in order to be able to abide by your opt-out choice. We make efforts to promptly process all unsubscribe requests. You may not opt out of service-related communications. If you have any questions, you can contact us directly at unsubscribe@summitov.com. Unsubscribing or opting out of communications with us will not stop communications you receive from third parties separately. Please review their terms and conditions for relevant options for opting out of their communications.

You can control the information provided to Google and opt out of certain ads provided by Google by using any of the methods set forth at http://www.google.com/policies/privacy/partners/ or using the Google Analytics opt out browser add-on at http://tools.google.com/dlpage/gaoptout?hl=en.

Persistent cookies can be removed by following your web browser’s directions. A session cookie is temporary and disappears after you close your browser. You can reset your web browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Services may not function properly if the ability to accept cookies is disabled.

Turning off your browser’s cookies will also prevent web beacons from tracking your specific activity. The web beacon may still record an anonymous visit from your IP address, but unique information will not be recorded.

If you do not want to receive tracking pixels, you will need to disable HTML images in your email client, which may affect your ability to view images in other emails that you receive. To find out how to see what cookies have been set and how to reject and delete the cookies, please visit: http://www.aboutcookies.org.

You can understand which third parties have currently enabled cookies for your browser or mobile device and how to opt-out of some of those cookies by visiting the Network Advertising Initiative’s website at http://optout.networkadvertising.org/#!/; or the Digital Advertising Alliance’s website at http://optout.aboutads.info/#!/ or, if you’re located in the European Union, at http://www.youronlinechoices.eu. For more information on mobile-specific opt-out choices, please visit http://www.networkadvertising.org/mobile-choices.

On your mobile device you may have features that allow you to opt out of some targeted advertising (“Limit Ad Tracking” on iOS devices or “Opt out of Interest-Based Ads” on Android). To learn more about how these opt-out features work, please review your device settings.

Even if you disable the tracking, keep in mind that you may still receive interest-based advertising, including from third parties with whom your information had been previously disclosed and that you may still receive advertising from third parties, though such advertising may not be based on your interests and preferences.

If you would prefer that we not share your name and mailing address with third parties (other than with our affiliates) to receive promotional offers, you have the option to opt out of such sharing. To do so, please email us at privacy@summitov.com. Your choice will not affect our ability to share information in the other ways described in this Privacy Policy.

If you do not wish to receive e-mails about special offers, events, and other promotions from us, email us at unsubscribe@summitov.com to opt out, or click the link in the email to “unsubscribe.”

Please note that certain of your personal information, such as your name or other identifying information, may remain in our database even after a deletion request in order to maintain the integrity and historical record of our database and systems.

9. Privacy of Individuals Under 18

Use of the Services is limited to individuals aged 18 or to individuals aged 13-18 that have provided us with valid parental consent. In the event that we learn that we have collected personal information from an individual under 18 without valid parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us at:

Summit One Vanderbilt
Marketing Department
420 Lexington Avenue
24th Floor
New York, NY 10170

We do not sell the personal information of California consumers that are less than 16 years of age, unless the consumer (in the case of consumers between 13 and 16 years of age) or the consumer’s parent or guardian (in the case of consumers who are less than 13 years of age) has affirmatively authorized the sale of the consumer’s personal information.

10. Links to Other Websites and Services

We are not responsible for the practices employed by websites or services linked to or from our website, including the information or content contained in such websites or services, and this Policy does not apply to them. Your browsing and interaction on any third-party website or service, including those that have a link on our website, are subject to that third party’s own rules and policies. Please read the terms and privacy policies of such websites carefully and exercise care when providing your personal information.

If we include banners on our Site that utilize review content from third-party providers, including but not limited to TripAdvisor and Google, the treatment of such content is governed by the terms and policies of those entities and not Summit.

11. Browser Do Not Track

The Services do not support Do Not Track ("DNT") currently. DNT is a privacy preference you can set in your web browser to indicate that you do not want certain information about your web page visits tracked and collected across websites. For more details, including how to turn on Do Not Track, visit https://www.eff.org/issues/do-not-track.

12. California Consumer Privacy Act

As a California resident, you have the right, under the California Consumer Privacy Act, to:

• Request that a business delete any personal information about you which the business has collected from you.
• Request that a business that collects personal information about you disclose to you, free of charge, the following:
• The categories of personal information that it has collected about you.
• The categories of sources from which the personal information is collected.
• The business or commercial purpose for collecting or selling personal information.
• The categories of third parties with whom the business shares personal information.
• The specific pieces of personal information it has collected about you.
• Request that a business that sells your personal information, or that discloses it for a business purpose disclose, free of charge, to you:
• The categories of personal information that the business collected about you.
• The categories of personal information that the business sold about you and the categories of third parties to whom the personal was sold, by category or categories of personal information for each third party to whom the personal information was sold.
• The categories of personal information that the business disclosed about you for a business purpose.
• Direct a business that sells personal information about you to third parties not to sell your personal information.

You may submit a request under the California Consumer Privacy Act through the following methods:

You may e-mail us at privacy@summitov.com.

To submit a request, we are required to verify your identity. We will match the personal information that you provide to us with personal information that we already maintain about you in order to verify your identity. We may also need to contact you to confirm your request.

You may also designate an authorized agent to make such requests on your behalf.

We may not be able to honor each request that we receive, but if we are unable to do so, we will respond to let you know our reasons. We will not discriminate against you if you choose to exercise any of your rights as described in this section.

13. EU Data Subject Rights

Under the General Data Protection Regulation ("GDPR"), if you are an EU resident and we are processing your personal information, you have the following rights:

• Right of access: You have the right to request a copy of the information that we hold about you.
• Right of rectification: You have the right to have information that we hold about you that is inaccurate or incomplete corrected.
• Right to be forgotten: You have the right to request that we erase from our records the information that we hold about you.
• Right to restriction of processing: You have the right to restrict the processing of your information.
• Right to withdraw consent: If you have provided consent for the processing of your information you have the right to withdraw that consent at any time which will not affect the lawfulness of the processing before your consent was withdrawn.
• Right of portability: In certain limited circumstances, you have the right to have the information we hold about you transferred to another organization.
• Right to object: You have the right to object to certain types of processing of your information, such as direct marketing.
• Right to object to automated processing, including profiling: You have the right to not be subject to the legal effects of automated processing or profiling.
• Right to lodge a complaint: You have the right to lodge a complaint to your country's data protection authority if you believe that we have not complied with the requirements of the GDPR with regard to your personal information.

All requests must be made in writing to:

Summit One Vanderbilt
Marketing Department
420 Lexington Avenue
24th Floor
New York, NY 10170

14. Changes to the Privacy Policy

We may make changes to this Policy from time to time, in our sole discretion. When we make changes we deem material, we will provide you with prominent notice as appropriate under the circumstances, e.g., through the Services or by sending you an email. In some cases, we will notify you in advance of the changes taking effect. Otherwise, we any modification will be effective upon posting, as indicated by the “last updated” date located at the end of this Privacy Policy.

Your continued use of our website constitutes your full acceptance of the Privacy Policy, which is part of the Terms of Use governing the use of the Services, in its then-current form. Please do not access or use this website or the Services if you do not agree to the terms of this Privacy Policy. Please make sure you read any such notice carefully.

15. How to Contact Us

If you have any requests, questions, comments, or concerns regarding our Privacy Policy or practices, please contact us as at privacy@summitov.com.

This Privacy Policy was last updated April 2021.