Producer of CES®

Skip to content
Become a member

App Supplemental Privacy Notice

Privacy Policy

Jump To

Effective Date: September 4, 2026

The Consumer Technology Association (CTA)® ("CTA", "we", "us", "our") is the leading membership organization for companies in the technology industry. CTA is a 501(c)(6) corporation incorporated in the Commonwealth of Virginia and operates as a standards and trade organization on behalf of consumer technology company members in the United States. CTA is also the brand behind CES®, the world's most powerful tech event. CTA is committed to respecting the privacy and protection the personal data of individuals with whom we interact. For the purposes of applicable data protection laws, CTA is the controller of personal data collected from or about individuals via our CES app (the "App").

This App Supplemental Privacy Notice ("Notice") describes how CTA collects, uses and shares your personal information in connection with the App and supplements our general Privacy Policy.

Please read this Notice carefully, together with our general Privacy Policy and any other privacy notice or information that we may provide on specific occasions when we are collecting or processing personal data about you, to ensure that you understand how we may process your personal data and, where applicable, your rights under data protection laws.

If you have any questions about this Notice or how we use your personal data, please contact us using the information in the 'Contact us' section below.

About this Notice

This Notice informs you about how we process your personal data, in accordance with applicable data protection laws, including the EU and UK GDPR. We do not believe that U.S. state consumer privacy laws apply to us because of our non-profit status and the business-to-business nature of the information we collect and because we do not meet the thresholds of these laws. However, this Notice is intended to also inform U.S. individuals of our data practices as outlined in this Notice.

This Notice also applies to information that we collect about you from sources other than directly from you, including where technical information is collected from the device used to access the App. We may also collect or receive your personal data from third party analytics providers and intelligence platforms, social media plugins, cookie tracking services, app stores platforms and providers of lead generation services.

Certain features of the App are only available if you log in. In order to log in, you will need a CTA/CES Account. If that account has been created on your behalf, for example, by your employer, this processing will be covered by our general Privacy Policy.

To help us ensure we are being as transparent and accurate as possible, we keep this Notice under regular review. We reserve the right to change this Notice or create additional policies or notices to take account of changes in our circumstances or activities, or new legal requirements. As a result, we ask that you check back here on a regular basis and read this Notice together with any other privacy policies or notices that we have provided to you on specific occasions. If required, we will notify you of any material change we make to this Notice. Otherwise, any new or revised Notice will apply prospectively to personal data collected after it is posted on our App or in the app store.

It is also important that the information we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us, for example if your name or contact details change.

You can always choose not to give us your personal data but, you should be aware that this may prevent us responding to your enquiry, providing you with the information or services you have requested, entering into a contract with you or otherwise complying with our legal or contractual obligations. For example, if you choose not to log in to the App, we will not be able to provide you with full App functionality.

App Users

Categories of Data (as applicable) Purpose(s) Legal Basis (if applicable and required)
Technical data, including IP addresses, device types and version, device information, operating system, page views, time on site, referral sources, geographic location, cookie identifiers, session data, search queries and download activity.
• To improve the delivery of content on our App.
• To ensure and improve the security and functionality of our App.
• To customize our App according to your behavior and preferences.
Necessary for our legitimate interests in making improvements to our App, keeping our App secure, carrying out analyses of the use of our App to assist us with promoting and improving our services and running our business and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Necessary to comply with a legal obligation.
Your consent, where required and obtained.
Corporate contact information and details, including name, email address, company and title.
Login details, including password.
• To permit you to install the App on your device and register you as a new App user.
• To enable you to log in as a user and to provide you with full App functionality.
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in delivering our App to you. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Name and employer company.
• To build and publish the attendee directory, unless you have opted out. 
• To carry out attendee matching recommendations, if opted in. 
Necessary for our legitimate interests, as well as attendees' legitimate interests, in improving the attendee experience, including by publishing an attendee directory. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Corporate contact information and details, including names, titles, postal addresses, country/region.
Professional or employment-related information, including roles/titles, seniority level, department, company size and other possible employer details.
• To link the App with the registration details provided on our website and/or your account. 
Necessary for entry into or the performance of a contract with you.
Necessary for our legitimate interests in effectively operating and administering our App and business, including planning, managing and running our events and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Personal agenda data.
Notes.
• To allow you to add events (such as keynotes and conference sessions) to your personal App agenda.
• To allow you to save notes you want to take during the event on the App.
Necessary for our legitimate interests in delivering our App and improving the event attendee experience. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Any personal data provided when interacting with the App chatbot.
• For the provision of the App chatbot.
• For quality training and operational services.
• To train AI models used to provide services to CTA, including the App chatbot.
• To improve CTA products and services.
Necessary for our legitimate interests in improving the event attendee experience, including by providing the App chatbot. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Location data, IP address and device ID. 
• Our App includes functionality which allows App users to identify their location at CES, in certain cases such as when using the App navigation services. App users may choose to use the application without logging in or to login as an identified user, in which case the personal data provided upon registration may be used.
Necessary for our legitimate interests in improving the event attendee experience, including by providing location services to allow users to make their way around our event. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Your consent, where required and obtained.
Contact information 
• To allow you to share your contact information with other attendees via a secure QR code.
Necessary for our legitimate interests, and those of other attendees, in facilitating event attendees sharing contact details with one another. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Technical data.
Any information you provide in the course of any troubleshooting or complaints.
• To administer, monitor and improve our business, our events and this App including troubleshooting, data analysis and system testing.
Necessary for our legitimate interests in delivering and improving our App. Where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Corporate contact information and details, including names, titles, postal addresses, country/region.
Professional or employment-related information, including roles/titles, seniority level, department, company size and other possible employer details.
Information about sessions registered for, attended and derived interests from these.
• To recommend or promote sponsored sessions to you.
Necessary for our legitimate interests in publicizing and promoting sessions and our sponsors’ legitimate interest in maximising attendance to the sessions they sponsor. 
Corporate contact information and details, including name, email address, company and title.
• To notify you of changes to the App, CES and our related services and terms and conditions.
• To notify you of updates to this Privacy Policy.
• To manage complaints, including any potential legal claims.
Necessary for our legitimate interests in running our business, responding to enquiries, dealing with any legal claims that we wish to establish, exercise or defend against and, where applicable, as otherwise described in the 'Additional uses of data and legitimate interests' section below.
Necessary to comply with a legal obligation.

Additional Uses of Data and Legitimate Interests

the lawful basis for processing your personal data. Where we do so, we will carry out a balancing exercise to ensure that such interests are not overridden by your interests, fundamental rights and freedoms. Aside from the legitimate interests and purposes set out in the table above, we may also process your personal data based on the following legitimate interests and purposes:

  • operating our business, administering our services and managing member accounts;

  • contacting you to respond to your requests, inquiries or complaints;

  • operating, managing and securing certain App functionality;

  • enabling you to register for our services;

  • improving and optimizing our events, services and other products, including for the benefit of CTA, its users and members;

  • conducting industry and market research, surveys, polls and similar inquiries to help us understand trends and member needs in order to improve our services;

  • ensuring the security of our systems and networks and to maintain the integrity of our IT systems and the continuity of our business;

  • preventing, investigating, or providing notice of fraud, unlawful or criminal activity, or unauthorised access to or use of personal data, our App or data systems;

  • establishing, exercising or defending legal claims; and

  • enforcing our membership terms and other agreements.

Who We Share Your Data With

We may share your personal data with the following third parties for the business purposes described above where it is fair and lawful to do so:

  • our vendors, service providers or processors that we engage for specific purposes, such as for the provision of our App, IT systems or software, to coordinate and host our events;

  • our professional advisers, such as our lawyers, accountants and auditors;

  • where required to comply with applicable law or to establish, exercise or defend legal claims, such as to regulatory authorities, public authorities, law enforcement agencies and courts, opposing or other parties to legal proceedings and their professional advisors, or as otherwise required by applicable law; and/or

  • in the event of a disposal or refinancing of all or a part of our business or assets, the prospective buyer or funder and their professional advisers, and in connection with any such transaction.

International Transfers of Personal Data

We are located in and will process your personal data in the United States (U.S.). In addition, some third parties with whom we transfer or share your personal data may also be located outside of the UK, European Economic Area or the jurisdiction in which you reside. For example, we may transfer your personal data to our service providers in the U.S. The laws of some of these countries may not offer the same standard of protection for personal data as the jurisdiction in which you reside.

To the extent required by applicable data protection laws, we take steps to ensure that appropriate safeguards are in place to protect your personal data when it is transferred internationally. For example, by relying on an approved framework such as the EU-U.S. Data Privacy Framework (and the UK Extension to the EU-U.S. Data Privacy Framework) or by putting appropriate contractual agreements in place, such as the EU Commission's Standard Contractual Clauses and the ICO's UK Addendum. If you require further information on the safeguards we rely on or wish to obtain a copy of these, please contact us using the information in the 'Contact us' section below.

Keeping Your Data Safe and Secure

We are committed to taking reasonable efforts and precautions to keep your personal data secure and have implemented technical and organizational measures designed to protect your personal data from being accidentally or unlawfully destroyed, lost, altered, disclosed, used or accessed.

However, please note that despite our best efforts we cannot guarantee the security of information being exchanged over the internet.

Third-Party Services

The App may contain links to other third-party websites, website plugins, apps, locations, platforms, code (e.g., application programming interfaces) or other services that are not operated by us ("Third-Party Services"). Clicking on those Third-Party Services links or enabling those connections may allow third parties to collect or share data about you. You should review these third parties' privacy notices or policies for further information about how they process your personal data. We are not responsible for, and make no representations regarding, the policies or business practices of any third parties associated with the App.

How Long We Keep Your Personal Data

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, or as otherwise required for legal purposes. Once those purposes have been achieved then, unless a different purpose for processing your data arises, it will be anonymized or permanently deleted, subject to our standard data back-up procedures.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means. We also take into account legal and regulatory requirements which require the retention of personal data for a minimum period of time and applicable limitation periods in respect of legal claims.

Your Rights in Connection with Your Personal Data

If our processing of your personal data is protected under the UK or EU GDPR, or certain other applicable data protection laws, you may have certain rights in relation to your personal data. We have set out a list of rights that you may be entitled to below, although please note that they may not always apply in every case and may be subject to certain qualifications or otherwise only apply under certain conditions. We do not believe that U.S. state consumer privacy laws apply to us because of our non-profit status and the business-to-business nature of the information we collect and because we do not meet the thresholds of these laws. If you reside in a jurisdiction where you are not provided rights relating to your personal data, or the data protection law in effect does not apply to us, we will consider complying with requests from you in relation to the below rights, but we do so at our own discretion.

  • Access: you may have the right to obtain from us confirmation as to whether we are processing your personal data in addition to certain related information, as well as the right to obtain a copy of your personal data undergoing the processing.

  • Rectification: you may have the right to request the rectification of inaccurate personal data and to have incomplete data completed.

  • Erasure: you may have the right to request that we erase your personal data in certain circumstances, such as if (i) our processing of your personal data is no longer necessary for the purposes for which we collected it, (ii) you have withdrawn your consent and no other legal ground for the processing applies, (iii) you objected and no overriding legitimate grounds for the processing exist, or (iv) the processing is unlawful, or erasure is required to comply with a legal obligation.

  • Restriction: you may request that we restrict the processing of your personal data in certain cases, including where you object to us processing your personal data on the basis of our legitimate interests or where you want to establish the accuracy or the reason we are processing your personal data.

  • Objection: where we process your personal data on the basis of our legitimate interests, you may have the right to object to this processing for reasons relating to your particular situation. If this is the case, we will stop this processing of your personal data unless we can demonstrate compelling reasons why we need to process it which override your rights and freedoms, or where we need to process it for the purposes of legal claims.

  • Portability: you may have the right to receive your personal data that you have provided to us, in a structured, commonly used and machine-readable format and to transmit it to other data controllers. This right only applies if the processing is based on your consent or where our processing of your personal data is necessary for the performance of (or to enter into) a contract with you and the processing is carried out by automated means.

  • Right to refuse to provide information: you may have the right to refuse to provide information when requested, however please note that where the processing of that information is necessary for the purposes of entering into or performing contractual obligations, or to comply with our legal obligations, then your failure to provide certain information when requested could mean that we are unable to comply with those obligations.

  • Right to refuse or withdraw consent: in cases we ask for your consent to processing, you are free to refuse to give consent and you can withdraw your consent at any time without any adverse consequences. However, this will not affect the lawfulness of any processing of your personal data that occurred prior to the withdrawal.

To make a request to exercise any of these rights, please contact us using the information in the 'Contact us' section below. You will not usually have to pay a fee to exercise any of these rights. However, we reserve the right to charge a reasonable fee where permitted by applicable data protection laws, including if your request is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances to the extent permitted by applicable data protection laws.

In certain circumstances, we may need to request specific information from you to help us confirm your identity before we comply with a request. If it is necessary to collect additional information from you, we will use the information only for verification purposes and will delete it as soon as practicable after complying with the request. If you appoint a third party to make a request on your behalf, we will require written proof from you that the third party is authorized to act on your behalf.

We do not discriminate against you, for example, by charging you a different price or offering a different level of service, for exercising any of these rights.

As above, the rights described above are not absolute and may not apply in certain circumstances. We reserve all of our rights available to us under applicable law in this regard.

Communications

You can opt out of receiving App push notifications at any time by turning off push notifications on the settings of your device and/or the App, as applicable. If you opt-out of only certain communications, other subscription communications may continue. Even if you opt out of receiving promotional communications, we may, subject to applicable law, continue to send you non-promotional communications, such as those about your account, transactions, servicing, or our ongoing business relations.

Children's Privacy

Protecting the privacy of minors is especially important. Our App is not directed towards minors and CTA does not knowingly collect or solicit personal data from minors. If you believe that we might have any information from or about a minor, please contact us.

Complaints

We would always welcome the chance to deal with your concerns in the first instance, but you may also have the right to make a complaint to a relevant data protection supervisory authority if you feel that we have handled your data improperly. The relevant supervisory authority will depend on the jurisdiction you are in.

Contact Us

If you have any questions about this Policy or how we process your data then you can contact us at any time using the details below. You can also make a formal complaint to us by contacting us using these details.

CTA

CTA Legal

1919 S. Eads St.

Arlington, Virginia 22202 Email: privacy@cta.tech

Other Policies

  • Privacy Policy

  • Cookie Policy

  • Terms of Use

  • Code of Conduct