Producer of CES®

Skip to content
Become a member

Privacy Policy

Privacy Policy Archive

Jump To

Effective Date: September 4, 2026

The Consumer Technology Association (CTA)® ("CTA", "we", "us", "our") is the leading membership organization for companies in the technology industry. CTA is a 501(c)(6) corporation incorporated in the Commonwealth of Virginia and operates as a standards and trade organization on behalf of consumer technology company members in the United States. CTA is also the brand behind CES®, the world's most powerful tech event. CTA is committed to respecting the privacy and protection the personal data of individuals with whom we interact. CTA Foundation (“Foundation”) is an affiliate of CTA and is a 501(c)(3) corporation incorporated in the Commonwealth of Virginia. For the purposes of applicable data protection laws and within the scope of this privacy policy (“Policy”), CTA is the controller of personal data collected from or about individuals in connection with CTA’s activities and the Foundation is also a controller of personal data processed in connection with the Foundation’s activities.

Please read this Policy carefully, together with any other privacy notice or information that we may provide on specific occasions when we are collecting or processing personal data about you, to ensure that you understand how we may process your personal data and, where applicable, your rights under data protection laws.

If you have any questions about this Policy or how we use your personal data, please contact us using the information in the 'Contact us' section below.

About This Policy

This Policy informs individuals in the categories of data subjects outlined below about how we process your personal data, in accordance with applicable data protection laws, including the EU and UK GDPR. We do not believe that U.S. state consumer privacy laws apply to us because of our non-profit status and the business-to-business nature of the information we collect and because we do not meet the thresholds of these laws. However, this Policy is intended to also inform U.S. individuals of our data practices as outlined in this Policy. This Policy does not fully cover CTA's personal data processing activities in relation to users of the CES app ("CES App") – for further information about how we process your personal data when you use the CES App, please see the App Supplemental Privacy Notice, which supplements this Policy.

This Policy applies to information that we collect we you engage with us directly, including where you fall into one of the following categories of individuals:

  • users of our websites, including cta.tech, ces.tech, members.cta.tech and any other CTA website which posts this Policy (each a "Website", together the "Websites");

  • employees and other personnel of our members and prospective members;

  • event registrants (including to CES and CES Unveiled);

  • event attendees, prospective attendees, guests and emergency contacts;

  • employees and other personnel of our event exhibitors and prospective exhibitors;

  • event speakers, panelists and moderators;

  • awards applicants;

  • webinar attendees;

  • marketing recipients;

  • customers of our online store;

  • business contacts;

  • survey participants;

  • research study participants;

  • employees and other representatives of our suppliers, vendors and other business partners;

  • press/media contacts;

  • government/legislative contacts;

  • policy stakeholders;

  • social media followers/interactors;

  • correspondents and complainants;

  • CTA board members and other committee volunteers;

  • innovation award and CTA Foundation judges;

  • CTA Foundation Donors, grant applicants, board members and newsletter subscribers; and

  • other individuals who otherwise communicate or interact with us.

This Policy also applies to information that we collect about you from sources other than directly from you, including where we receive your information from an appointed agent, from your employing organization, for example, if your employer is a corporate CTA member or if you will be attending one of our events on behalf of your employer, or where technical information is collected from the device used to access the Website. We may also collect or receive your personal data from:

  • databases such as government directories, media directories, policy organizations, legislative databases, purchased databases and marketing lists;

  • press credential applications and media monitoring services;

  • social media platforms and social media management tools;

  • third party analytics providers and intelligence platforms, social media plugins, cookie tracking services, app stores platforms and providers of lead generation services; and

  • industry contacts and referrals from events.

Some information about your use of our services and certain other online services may be collected using tracking technologies (e.g., cookies, web beacons) ("Tracking Technologies") across time, services, and devices and used by us and third parties for purposes such as to associate different devices you use and deliver relevant ads and/or other content to you on our services and certain other online services.

Your browser settings may allow you to automatically transmit a "Do Not Track" signal to online services you visit. Note, however, there is no consensus among industry participants as to what "Do Not Track" means in this context. Like many online services, we currently do not alter our practices when we receive a "Do Not Track" signal from a visitor's browser.

For more information on Tracking Technologies and your choices regarding them, please see our Cookie Notice.

To help us ensure we are being as transparent and accurate as possible, we keep this Policy under regular review. We reserve the right to change this Policy or create additional policies or notices to take account of changes in our circumstances or activities, or new legal requirements. As a result, we ask that you check back here on a regular basis and read this Policy together with any other privacy policies or notices that we have provided to you on specific occasions. If required, we will notify you of any material change we make to this Policy. Otherwise, any new or revised Policy will apply prospectively to personal data collected after it is posted on our Website.

It is also important that the information we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us, for example if your name or contact details change.

You can always choose not to give us your personal data but, you should be aware that this may prevent us responding to your enquiry, providing you with the information or services you have requested, entering into a contract with you or your employer or the organization that your represent, or otherwise complying with our legal or contractual obligations. For example, if you refuse to provide us with payment details we will not be able to process your request to attend an event.

The Personal Data We Process and Our Legal Basis

We collect and process your personal data for different reasons in different circumstances, provided that, where required by applicable data protection laws, we have a legal basis for doing so. Our purposes and, where required, legal bases for processing your personal data are set out in the table below:

Website Users

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Technical data, including IP addresses, browser types and version, device information, operating system, page views, time on site, referral sources, geographic location, cookie identifiers, session data, search queries and download activity.
• To improve the delivery of content on our Website.
• To ensure and improve the security and functionality of our Website.
• To customize our Website according to your online behavior and preferences.
Necessary for our legitimate interests in making improvements to our Website, keeping our Website secure, carrying out analyses of the use of our Website to assist us with promoting our services and running our business and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Necessary to comply with a legal obligation.
Your consent, where required and obtained.

Members and Prospective Members

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Corporate contact information and details, including names, titles, postal addresses, telephone numbers and email addresses.
Professional or employment-related information, including roles/titles, employer details, company size/revenue and industry classification.
Membership information, including membership level, dues payment history, engagement metrics, committee participation, benefit usage tracking, years of membership and renewal history.
• To administer memberships and related accounts and services, for planning and operations purposes, including member relationship management, providing services to members, communicating with you in connection with such member accounts and services and deciding whether to accept any organization as a member.
• For maintaining accounts and records, including keeping accounts relating to our business and activities, keeping records of transactions, making financial or management forecasts and other general record keeping and information management.
Necessary for our legitimate interests in effectively operating and administering our business and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

Event Registrants

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, country/region.
Professional or employment-related information, including roles/titles, seniority level, department, company size and other possible employer details.
Product category interests and registration type (media, industry or exhibitor).
Details of any dietary restrictions/ preferences.
Emergency contact information.
Payment information (to the extent this constitutes personal data).
• For overall business, core records and accounts and information management purposes.
• To coordinate, manage and plan our events and to communicate with you in relation to the same, including to verify attendance eligibility (including consumer technology industry or employer affiliation) and to process event badges.
• To cater for any required dietary restrictions/ preferences.
• To contact your emergency contact in case of an emergency.
• To process any required payments. 
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in effectively operating and administering our business, including planning, managing and running our events and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Your consent, where required and obtained.
Accessibility needs.
• For event logistics and personalization purposes. 
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in effectively operating and administering our business, including planning, managing and running our events.
Necessary to comply with a legal obligation.
Your consent, where required and obtained.
Marketing preferences.
• For advertising, marketing and public relations purposes, including to promote our events, business, activities and services and coordinate marketing efforts.
Necessary for our legitimate interests in promoting our business, including membership services and our events and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Your consent, where required and obtained.

Event Attendees, Prospective Attendees, Guests and Emergency Contacts

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Additional registration information such as date of birth, headshot photograph and gender.
Professional or employment-related information, including roles/titles and employer details.
Other identifiers, including nationality and correspondence records.
Event attendance information, including badge information, check-in/check-out data, session attendance records, badge location via technology embedded in event badges (only while on-site at a CES event), networking interaction data, lead scanning activity and social media interactions at events. 
Payment information (to the extent this constitutes personal data).
Visual information, including signatures.
If applicable, details of any dietary restrictions/ preferences.
• For overall business, core records and accounts and information management purposes.
• To coordinate, manage, plan our events and to communicate with you in relation to the same.
• To process any required payments.
• To carry out assessments and analytics on attendee information, including to better understand attendee interests and improve our events and services.
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in effectively operating and administering our business, including planning, managing and running our events and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Your consent, where required and obtained.
Photograph for event badge. 
Facial geometry derived from photographs and data based on facial geometry.
• To confirm the identity of event attendees 
• For security and fraud prevention 
• To prevent duplicate CES registrations and detect potential impersonation, we may use specialist software, such as Amazon Rekognition. For more information, see our Photo Data Processing Notice here.
Necessary for our legitimate interests in maintaining the security of our events, including through access controls and by ensuring that the photographs used for event badges are genuine.

Your consent, where required and obtained.
If applicable, photographs of attendees, video recordings and audio recordings taken during events.
• To document and publicize past events and promote our services and future events.
Necessary for our legitimate interests in promoting our business, including publicizing and promoting our services and events, including via our social media accounts and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Guest information, including name and contact details.
• For overall business, core records and accounts and information management purposes.
• To arrange accommodation in relation to our events.
Necessary for our legitimate interests in effectively operating and administering our business, including planning, managing and running our events and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Emergency contact information, including name and phone number.
• To get in touch with event attendees' emergency contacts in the case of an emergency.
Necessary for our legitimate interests in ensuring that we can contact the right person and necessary for the interests of the contact to be informed in case of an emergency. 
If applicable, details of disabilities and/or use of a service animal.
• To provide reasonable accommodations, technical assistance.
Necessary for our legitimate interests in ensuring that attendees can attend the event. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Necessary to comply with a legal obligation.
Your consent, where required and obtained.
Marketing preferences.
Event attendance information, including badge information, name, email, address, employer company details, check-in/check-out data and session attendance records. 
• Sharing with event exhibitors and sponsors.
Necessary for our, as well as exhibitors and sponsors', legitimate interests in ensuring that exhibitors and sponsors can promote their business to event attendees. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Your consent, where required and obtained.
Any personal data provided when interacting with the CES chatbot.
• For the provision of the CES chatbot.
• For quality training and operational services.
• To train AI models used to provide services to CTA, including the CES chatbot.
• To improve CTA products and services.
Necessary for our legitimate interests in improving the event attendee experience, including by providing the CES chatbot. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

Event Exhibitors and Prospective Exhibitors

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Professional or employment-related information, including employer details.
Event-related information such as contract information, payment data, exhibitor manual downloads, lead retrieval preferences, booth specifications, marketing materials and sales pipeline data. 
• For overall business, core records and accounts and information management purposes.
• To enter into, administer and perform a contract with your employer.
• To coordinate, manage and plan our events and to communicate with you in relation to the same, including to verify eligibility to exhibit.
• To invoice and process any required payments.
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in effectively operating and administering our business, including planning, managing and running our events and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Professional or employment-related information, information provided on professional social media and related interactions.
If applicable, photographs of exhibitors, video recordings and audio recordings taken during events.
• To publicize past events and promote our services future events.
Necessary for our legitimate interests in promoting our business, including publicizing and promoting our services and events, including via our social media accounts and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Marketing preferences.
• For advertising, marketing and public relations purposes, including to promote our events, business, activities and services and coordinate marketing efforts.
Necessary for our legitimate interests in promoting our business, including membership services and exhibitor space at our events and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Your consent, where required and obtained.

Event Speakers, Panelists and Moderators

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Professional or employment-related information, including biography, headshot photo, speaking topics/expertise, roles/titles and employer details.
Event-related information including travel preferences, dietary requirements, AV/technical requirements, honorarium/payment information,
Social media handles and company affiliations.
• For overall business, core records and accounts and information management purposes.
• To coordinate, manage and plan our events and to communicate with you in relation to the same.
• To process any required payments.
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in coordinating, planning and managing our events and publicizing past, current and future events. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Your consent, where required and obtained.
Marketing preferences.
• To publicize past events and promote future events.
Necessary for our legitimate interests in coordinating, planning and managing our events and publicizing past, current and future events. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Your consent, where required and obtained.
Professional or employment-related information, information provided on professional social media and related interactions.
If applicable, photographs of speakers, video recordings and audio recordings taken during events.
• To publicize past events and promote our services and future events.
• To make session recordings available.
Necessary for our legitimate interests in promoting our business, including making publicizing and promoting our services and events including via our social media accounts and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
If applicable, details of disabilities and/or use of a service animal.
• To provide reasonable accommodations and technical assistance.
• To prepare and comply with onsite health protocols and requirements.
Necessary for our legitimate interests in ensuring that speakers can attend the event. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Necessary to comply with a legal obligation.
Your consent, where required and obtained.
Professional or employment-related information, including biography, headshot photo, speaking topics/expertise, roles/titles and employer details.
Session information.
• For the provision of the CES chatbot.
• For quality training and operational services.
• To train AI models used to provide services to CTA, including the CES chatbot.
• To improve CTA products and services.
Necessary for our legitimate interests in improving the event attendee experience, including by providing the CES chatbot. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

Awards Applicants/Nominees, including in respect of the Innovation Awards

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Professional or employment-related information, including employer details.
Product details, application materials, submission materials (such as videos, documents and images), judges scores, award categories and payment data (to the extent this constitutes personal data). 
• For the purposes of processing award applications and judging these, as well as organizing granting of awards and to communicate with you in relation to the same.
• To process any required payments.
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in administering the program, developing and awarding awards and program development. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

Award judges, including in respect of the Innovation Awards

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers, headshot and email addresses.
Professional or employment-related information, including biography, expertise, roles/titles and employer details.
• For the purposes of selecting judges for our awards programs, to run the programs and to communicate with you in relation to the same.
Necessary for our legitimate interests in administering the program, developing and awarding awards and program development. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

Webinar Attendees

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Registration information (including name and contact details), attendance information, time zone data, session duration, participation data, including information provided and recorded during sessions and in relation to polls, Q&A and chat function, device/connection information.
Payment information (to the extent this constitutes personal data).
• To deliver webinars and to communicate with you in relation to the same.
• To track attendees' attendance and engagement. 
• To process any required payments.
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in promoting our business, including by providing free webinars, and carrying out service improvement assessments, and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

Online Store Customers

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information, including name and email address.
Payment information (to the extent this constitutes personal data).
Membership data.
Transaction history. 
• For overall business, core records and accounts and information management purposes.
• To sell our products and services, including to process payments.
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in selling our goods and services, in communicating with you about your orders and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

Marketing Recipients

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Professional or employment-related information, including roles/titles and employer details.
Subscription preferences, communication frequency preferences, open/click rates, engagement history, unsubscribe status, marketing consent(s), geographic data and subscription source tracking. 
• For advertising, marketing and public relations purposes, including to promote our events, business, activities and services and coordinate marketing efforts.
Necessary for our legitimate interests in promoting our business, including membership services and our events and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Your consent, where required and obtained.

Business Development Contacts

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Professional or employment-related information, including roles/titles and employer details.
Sales pipeline status, communication history, meeting records, contract negotiation data, partnership opportunities and referral sources. 
• For overall business, core records and accounts and information management purposes.
• To publicize past events and promote future events.
• For sales activities and relationship management purposes, including communication, marketing and business development purposes.
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in administering the program, developing and awarding awards and program development. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

Survey Participants

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Survey responses, demographic information, company characteristics, opinion data, market research responses, behavioral data, participation history, incentive/compensation records.
• For market research, industry analysis and reporting purposes.
• For research program management.
Necessary for our legitimate interests in conducting research about our members, assessing relevant industries and markets and managing our research program. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Your consent, where required and obtained.

Research Study Participants

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses.
Study participation data, research responses, demographic characteristics, consent records, compensation information, follow-up contact preferences, data usage permissions.
• For academic and industry research purposes.
• For research program management, participant management and research compliance purposes.
• For follow-up, future collaboration and research interest purposes.
Necessary for our legitimate interests in conducting research and managing participants and our research program. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Necessary to comply with a legal obligation.
Your consent, where required and obtained.

Suppliers' and Vendors' Employees or Representatives

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Corporate contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Professional or employment-related information, including roles/titles and employer details.
Other identifiers, including gender, nationality, correspondence records, performance evaluations, insurance certificates and compliance documentation.
Products/services data, including contract details, details about products/services supplied, service categories, invoices and payment information.
• To engage with prospective or actual suppliers of goods and services.
• To process any required payments.
Necessary for our legitimate interests in procuring or purchasing products and services, including making payments, arranging for supply and/or deliveries, generally for the purposes of dealing with our suppliers and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

Press/Media Contacts

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Media outlet information, beat/coverage areas, press credentials, interview history, media kit requests, press release distribution preferences, circulation/audience data.
• For the purposes of monitoring the media, managing media relations and press communications.
• For press event management and coordination purposes.
Necessary for our legitimate interests in monitoring and managing public and media relations, as well as our brand. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

Government/Legislative Contacts

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Corporate contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Government agency/office, contact information, policy areas of interest, legislative history, meeting records, position statements, staff contact information.
• For government relations and advocacy, legislative engagement and policy development and coalition building and stakeholder engagement purposes. 
Necessary for our legitimate interests in monitoring and managing government relations, policy development and advocacy activities. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

Policy Stakeholders

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses.
Organization affiliation, policy expertise, position statements, coalition memberships, regulatory comments, advocacy activities, meeting participation, influence mapping.
• For policy development and advocacy coordination, coalition management and stakeholder engagement and industry influence and relationship mapping purposes. 
Necessary for our legitimate interests in monitoring and managing industry relations, policy development and advocacy activities. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

CTA Board Members

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Personal and professional information, board service history, expertise areas, conflict of interest disclosures, meeting attendance, voting records and contact preferences.
• For board governance and administration purposes, including conflict of interest management, compliance with applicable laws and board communications and coordination purposes. 
Necessary for our legitimate interests in managing our business and board. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Necessary to comply with a legal obligation.

Social Media Followers/Interactors

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Social media handles, profile information (as shared by platforms), interaction data (likes, shares, comments), follower demographics, engagement metrics, social media advertising data.
• For social media engagement and community building, social media marketing and advertising purposes and brand monitoring and reputation management purposes.
Necessary for our legitimate interests in promoting our business, including publicizing and promoting our services and events, including via our social media accounts and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

Correspondents and Complainants (including via Website form submission)

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Professional or employment-related information, including roles/titles and employer details.
Other identifiers, including correspondence records, referral source, inquiry details, issue categories, resolution status, satisfaction ratings, follow-up preferences/requirements and account associations. 
• To communicate with individuals who contact us
• To manage complaints, including any potential legal claims.
Necessary for our legitimate interests in running our business, responding to enquiries, dealing with any legal claims that we wish to establish, exercise or defend against and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

CTA Foundation Donors

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Donation information such as donation amounts, payment method details, donation history, tax receipt information, employer information, donor recognition preferences and memorial/tribute information. 
Communication preferences. 
• For the purposes of managing and processing donations, including receipt management. 
• For tax reporting and compliance purposes.
• For managing the relationships and communications with donors.
• To process any payments.
Foundation Grant Applicants 
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in requesting and managing donations and donor relations, communicating with donors and managing future donation campaigns. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Necessary to comply with a legal obligation.
Your consent, where required and obtained.

CTA Foundation Grant Applicants

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Professional or employment-related information, including roles/titles and employer details.
Grant information such as grant application data, financial information, program details, impact metrics, reporting requirements, tax-exempt status and documentation. 
• For grant managing purposes, including grant application review and processing, grant program administration and reporting and foundation program and development outreach purposes. 
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in administering the program, developing and awarding awards and program development. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

CTA Foundation Grant Judges

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Professional or employment-related information, including roles/titles and employer details.
• For grant managing purposes, selecting judges, grant program administration and reporting, foundation program and development outreach purposes and communications in relation to these.
Necessary for our legitimate interests in managing and administering the grant program, including assessing and developing the program. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

CTA Foundation Board Members

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Contact information and details, including names, titles, postal addresses, telephone numbers and email addresses. 
Personal and professional information, board service history, expertise areas, conflict of interest disclosures, meeting attendance, voting records and contact preferences.
• For board governance and administration purposes, including conflict of interest management, compliance with applicable laws and board communications and coordination purposes. 
Necessary for our legitimate interests in managing our business and board. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Necessary to comply with a legal obligation.

CTA Foundation Newsletter Subscribers

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Email address, name, subscription preferences, engagement metrics, donation history correlation, communication preferences, interest areas (grants, programs, events).
• For advertising, marketing and public relations purposes, including to promote the foundation, engage with donors and stewardship and coordinate marketing efforts.
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in administering the program, developing and awarding awards and program development. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.

Additional Uses of Data and Legitimate Interests

Where applicable and required, we may rely on our (or a third party's) legitimate interests as the lawful basis for processing your personal data. Where we do so, we will carry out a balancing exercise to ensure that such interests are not overridden by your interests, fundamental rights and freedoms. Aside from the legitimate interests and purposes set out in the table above, we may also process your personal data based on the following legitimate interests and purposes:

  • operating our business, administering our services and managing member accounts;

  • contacting you to respond to your requests, inquiries or complaints;

  • processing and completing transactions you have requested, including, as applicable, processing payments and providing services;

  • operating, managing and securing certain Website functionality;

  • enabling you to register for our services;

  • improving and optimizing our events, services and other products, including for the benefit of CTA, its users and members;

  • training our AI-tools to provide better output and improve our tools and services;

  • conducting industry and market research, surveys, polls and similar inquiries to help us understand trends and member needs in order to improve our services;

  • ensuring the security of our systems and networks and to maintain the integrity of our IT systems and the continuity of our business;

  • preventing, investigating, or providing notice of fraud, unlawful or criminal activity, or unauthorised access to or use of personal data, our Website or data systems;

  • complying with legal obligations;

  • establishing, exercising or defending legal claims; and

  • enforcing our membership terms and other agreements.

In addition, we may create aggregated, anonymized and, where permitted by applicable law, de-identified information from personal data. We may use, disclose, share, license, sell and otherwise exploit such information for any lawful business purpose. Where information has been anonymized such that it no longer relates to an identified or identifiable individual, it will no longer be treated as personal data under this Policy.

Who We Share Your Data With

We may share your personal data with the following third parties for the business purposes described above where it is fair and lawful to do so:

  • our affiliates and group companies, such as the CTA Foundation. In such circumstances, your personal data will be processed in accordance with this Policy;

  • our vendors, service providers or processors that we engage for specific purposes, such as for the provision of our IT systems or software, to coordinate and host our events;

  • event exhibitors, for example, if you attend one of our events (such as CES) and scan your event badge at an exhibit booth to confirm your intent to receive communications from that exhibitor then we will share your contact details information with that exhibitor;

  • event sponsors, for example, if you attend one of our events (such as CES) and attend any sponsored conference programming, keynotes or other specific events, you will be required to scan your badge for attendance and access purposes and your name, email address, company and job title may be shared with event sponsors in certain cases;

  • policy and trade organizations, legislative databases and GLA contact list providers;

  • our professional advisers, such as our lawyers, accountants and auditors;

  • where required to comply with applicable law or to establish, exercise or defend legal claims, such as to regulatory authorities, public authorities, law enforcement agencies and courts, opposing or other parties to legal proceedings and their professional advisors, or as otherwise required by applicable law; and/or

  • in the event of a disposal or refinancing of all or a part of our business or assets, the prospective buyer or funder and their professional advisers, and in connection with any such transaction.

In addition, we may create aggregated, anonymized and, where permitted by applicable law, de-identified information from personal data and we may disclose, share, license, sell and otherwise exploit such information for any lawful business purpose. Where information has been anonymized such that it no longer relates to an identified or identifiable individual, it will no longer be treated as personal data under this Policy.

International Transfers of Personal Data

We are located in and will process your personal data in the United States (U.S.). In addition, some third parties with whom we transfer or share your personal data may also be located outside of the UK, European Economic Area or the jurisdiction in which you reside. For example, we may transfer your personal data to our service providers in the U.S. The laws of some of these countries may not offer the same standard of protection for personal data as the jurisdiction in which you reside.

To the extent required by applicable data protection laws, we take steps to ensure that appropriate safeguards are in place to protect your personal data when it is transferred internationally. For example, by relying on an approved framework such as the EU-U.S. Data Privacy Framework (and the UK Extension to the EU-U.S. Data Privacy Framework) or by putting appropriate contractual agreements in place, such as the EU Commission's Standard Contractual Clauses and the ICO's UK Addendum. If you require further information on the safeguards we rely on or wish to obtain a copy of these, please contact us using the information in the 'Contact us' section below.

Keeping Your Data Safe and Secure

We are committed to taking reasonable efforts and precautions to keep your personal data secure and have implemented technical and organizational measures designed to protect your personal data from being accidentally or unlawfully destroyed, lost, altered, disclosed, used or accessed.

However, please note that despite our best efforts we cannot guarantee the security of information being exchanged over the internet.

Third-Party Services

The Website may contain links to other third-party website plugins, apps, locations, platforms, code (e.g., application programming interfaces) or other services that are not operated by us ("Third-Party Services"). Clicking on those Third-Party Services links or enabling those connections may allow third parties to collect or share data about you. You should review these third parties' privacy notices or policies for further information about how they process your personal data. We are not responsible for, and make no representations regarding, the policies or business practices of any third parties associated with the Website.

How Long We Keep Your Personal Data

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, or as otherwise required for legal purposes. Once those purposes have been achieved then, unless a different purpose for processing your data arises, it will be anonymized or permanently deleted, subject to our standard data back-up procedures.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means. We also take into account legal and regulatory requirements which require the retention of personal data for a minimum period of time and applicable limitation periods in respect of legal claims.

Your Rights in Connection with Your Personal Data

If our processing of your personal data is protected under the UK or EU GDPR, or certain other applicable data protection laws, you may have certain rights in relation to your personal data. We have set out a list of rights that you may be entitled to below, although please note that they may not always apply in every case and may be subject to certain qualifications or otherwise only apply under certain conditions. If you reside in a jurisdiction where you are not provided rights relating to your personal data, or the data protection law in effect does not apply to us, we will consider complying with requests from you in relation to the below rights, but we do so at our own discretion.

  • Access: you may have the right to obtain from us confirmation as to whether we are processing your personal data in addition to certain related information, as well as the right to obtain a copy of your personal data undergoing the processing.

  • Rectification: you may have the right to request the rectification of inaccurate personal data and to have incomplete data completed.

  • Erasure: you may have the right to request that we erase your personal data in certain circumstances, such as if (i) our processing of your personal data is no longer necessary for the purposes for which we collected it, (ii) you have withdrawn your consent and no other legal ground for the processing applies, (iii) you objected and no overriding legitimate grounds for the processing exist, or (iv) the processing is unlawful, or erasure is required to comply with a legal obligation.

  • Restriction: you may request that we restrict the processing of your personal data in certain cases, including where you object to us processing your personal data on the basis of our legitimate interests or where you want to establish the accuracy or the reason we are processing your personal data.

  • Objection: where we process your personal data on the basis of our legitimate interests, you may have the right to object to this processing for reasons relating to your particular situation. If this is the case, we will stop this processing of your personal data unless we can demonstrate compelling reasons why we need to process it which override your rights and freedoms, or where we need to process it for the purposes of legal claims.

  • Portability: you may have the right to receive your personal data that you have provided to us, in a structured, commonly used and machine-readable format and to transmit it to other data controllers. This right only applies if the processing is based on your consent or where our processing of your personal data is necessary for the performance of (or to enter into) a contract with you and the processing is carried out by automated means.

  • Right to refuse to provide information: you may have the right to refuse to provide information when requested, however please note that where the processing of that information is necessary for the purposes of entering into or performing contractual obligations, or to comply with our legal obligations, then your failure to provide certain information when requested could mean that we are unable to comply with those obligations.

  • Right to refuse or withdraw consent: in cases we ask for your consent to processing, you are free to refuse to give consent and you can withdraw your consent at any time without any adverse consequences. However, this will not affect the lawfulness of any processing of your personal data that occurred prior to the withdrawal.

To make a request to exercise any of these rights, please contact us using the information in the 'Contact us' section below. You will not usually have to pay a fee to exercise any of these rights. However, we reserve the right to charge a reasonable fee where permitted by applicable data protection laws, including if your request is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances to the extent permitted by applicable data protection laws.

In certain circumstances, we may need to request specific information from you to help us confirm your identity before we comply with a request. If it is necessary to collect additional information from you, we will use the information only for verification purposes and will delete it as soon as practicable after complying with the request. If you appoint a third party to make a request on your behalf, we will require written proof from you that the third party is authorized to act on your behalf.

We do not discriminate against you, for example, by charging you a different price or offering a different level of service, for exercising any of these rights.

As above, the rights described above are not absolute and may not apply in certain circumstances. We reserve all of our rights available to us under applicable law in this regard.

Communications

You can opt out of receiving certain promotional communications (emails or text messaging) from us at any time by (i) for promotional e-mails, following the instructions provided in emails to click on the unsubscribe link, or if available by changing your communication preferences by logging onto your account; (ii) for text messages, following the instructions provided in text messages from us to text the word, "STOP" and (iii) for app push notifications turn off push notifications on the settings of your device and/or the app, as applicable. Please note that your opt-out is limited to the e-mail address or phone number used and will not affect subsequent subscriptions. If you opt-out of only certain communications, other subscription communications may continue. Even if you opt out of receiving promotional communications, we may, subject to applicable law, continue to send you non-promotional communications, such as those about your account, transactions, servicing, or our ongoing business relations.

Children's Privacy

Protecting the privacy of minors is especially important. Our Websites and services are not directed towards minors and CTA does not knowingly collect or solicit personal data from minors. If you believe that we might have any information from or about a minor, please contact us and we will delete that information.

Complaints

We would always welcome the chance to deal with your concerns in the first instance, but you may also have the right to make a complaint to a relevant data protection supervisory authority if you feel that we have handled your data improperly. The relevant supervisory authority will depend on the jurisdiction you are in.

Contact Us

If you have any questions about this Policy or how we process your data then you can contact us at any time using the details below. You can also make a formal complaint to us by contacting us using these details.

CTA and CTA Foundation

CTA Legal

1919 S. Eads St

Arlington, Virginia 22202

Email: privacy@cta.tech

Other Policies

  • Cookie Notice

  • Terms of Use

  • Code of Conduct

  • App Supplemental Privacy Notice