Website Privacy Policy

Processing of Personal Data

Delfi Labs Inc. (referred to throughout as “Delfi Labs”, “our”, “we”, or “us”) is committed to ensuring your privacy and the confidentiality of your personal data, which is defined as any information which is related (whether directly or indirectly) to an identified or identifiable natural person or household or is reasonably capable of being associated with or could reasonably be linked to a particular person or household (“Personal Data”). By accessing or using our website located at www.delfi.co and all associated websites linked to it by us (collectively, the “Website”), participating in an event and/or communicating with us, you consent to this Privacy Policy. In case you do not agree to any part of it, you must inform us and discontinue using our Website. If you have any questions, please contact us at info@delfi.co.
We collect Personal Data such as name, email address, source of connection, communication contents you may make with us directly, interactions with our Website and, in the case you are brought to our Website through paid advertising, which advertising service (for example, which banner advertisement you clicked on) brought you to our Website.

We collect the following categories of Personal Data. The specific types of Personal Data we collect about you depend on your relationship with us and how you interact with us. Accordingly, we may not collect all of the below information about you.

In addition to the below, we may collect and/or use additional types of information and will do so after providing notice to you and obtaining your consent to the extent such notice and consent is required by applicable law

Category	Examples of Personal Data that would fall into this category (not necessarily Personal Data we collect)	Source
Identifiers	A real name, email address, online identifier, network location and Internet Protocol address.	Directly from you. Indirectly from you via automatically collected meta-data and internet cookies. [From advertising networks.]
Electronic network activity information	Data related to the device/browser.	Indirectly from you via automatically collected meta-data and internet cookies. [From advertising networks.]
Geolocation data	Physical location or an individual's movements.	Indirectly from you, for example, by observing your IP address.
Inferences	Individual profiles, preferences, characteristics and behaviors.	Indirectly from you, by drawing from any of the other information we collect from you.

We process, collect, and share Personal Data for the following purposes, and we will only process Personal Data on the lawful basis specified:
To provide our services to you, including as necessary between our subsidiaries and affiliates.
To communicate with you, including to maintain our list of contacts and/or to provide you with other information you may request from us.
For research purposes, including to develop, improve, maintain and facilitate operation of our Website.
Legal Basis for Processing:
We have a legitimate interest in carrying out the processing (to the extent such interest is not overridden by your fundamental rights or freedoms); or
We have obtained your prior consent to the processing.
To process your requests.
Legal Basis for Processing:
The processing is necessary to comply with a legal obligation;
We have a legitimate interest in carrying out the processing (to the extent such interest is not overridden by your fundamental rights or freedoms); or
We have obtained your prior consent to the processing.
To respond to law enforcement requests and as required by applicable law, court order, governmental regulations, or our policies.
Legal Basis for Processing:
The processing is necessary to comply with a legal obligation; or
We have a legitimate interest in carrying out the processing (to the extent such interest is not overridden by your fundamental rights or freedoms).
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by us about our Website users is among the assets being contemplated for transfer or being transferred.
Legal Basis for Processing:
The processing is necessary in connection with a contract you may enter into with us, or to take steps prior to entering into a contract with us;
We have a legitimate interest in carrying out the processing (to the extent such interest is not overridden by your fundamental rights or freedoms); or
We have obtained your prior consent to the processing.
We may process your Personal Data to manage our information technology and communications systems, including for the purpose of security audits.
Legal Basis for Processing:
The processing is necessary to comply with a legal obligation;
The processing is necessary in connection with a contract you may enter into with us, or to take steps prior to entering into a contract with us;
We have a legitimate interest in carrying out the processing (to the extent such interest is not overridden by your fundamental rights or freedoms); or
We have obtained your prior consent to the processing.
We do not collect any sensitive personal data (as defined under the European Union's General Data Protection Regulation (“GDPR”)) or sensitive personal information (as defined under the California Privacy Rights Act of 2020 (“CPRA”)).

We disclose Personal Data for a legitimate business purpose to the following categories of third parties:

Categories of Third Party	Business Purpose	Category of Personal Information Disclosed for a Business Purpose
Service providers	Performing services on behalf of us, such as analytic services.	Identifiers, electronic network activity information and geolocation data.
To those whom we are legally required to share	To comply with the law.	Identifiers. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).

When processing, collecting, and sharing your Personal Data, we rely on your consent to this Privacy Policy. You have the right to withdraw consent at any time, although such withdrawal will not make any processing, collecting, or sharing we carried out while we had your consent unlawful.
We restrict use and access to your Personal Data to those who have a need to know. Appropriate technical and organizational measures maintain the confidentiality and integrity of your Personal Data. We ensure compliance with applicable data protection and security laws.
We grant you the data protection rights as per the CPRA, irrespective of your country of residence: You have the right to be informed by us of any processing of your Personal Data, including how we collect, use, disclose and sell your Personal Data (“right to know”). If you are affected by inaccurate Personal Data, you may request correction of relevant data (“right to correct”). You may request the deletion of your Personal Data (“right to delete”). You have the right to opt-out from the sharing of your Personal Data to a third party for cross-contextual behavioral advertising (i.e., targeted advertising) (“right to opt out of sharing”), and the right to opt-out from the sale of your Personal Data (“right to opt-out of sale”). Please contact us at info@delfi.co to exercise any of your rights enumerated in this clause. Only you (or, under the CPRA, someone legally authorized to act on your behalf) may make requests related to your Personal Data under this Clause. Your request must provide sufficient information that allows us to reasonably verify you are the person about whom we or our service providers collected Personal Data or an authorized agent, which may include: (1) personal information, including your IP address and/or unique device identifiers (note that Delfi Labs may request additional information beyond the information already collected only if Delfi Labs cannot verify your identity based on the information already maintained; Delfi Labs shall delete any new personal information collected for verification as soon as practical) and (2) the nature of your request. Your request must include enough detail to allow us to respond to it. To verify your request, we will compare the information you provide in your request to any Personal Data we maintain about you. Note that we may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled. Pursuant to the CPRA, we will not require you to verify your identity, beyond asking for the information necessary to complete your request, when you exercise your right to opt out of sharing or right to opt out of sale.
Unless permitted by applicable privacy laws, we will not discriminate against you for exercising any of your privacy rights discussed in Clause 1.9, including by not: (1) denying you access to goods or services; (2) charging you different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; (3) providing you with a different level or quality of goods or services; or, (4) suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
We store your Personal Data only for as long as necessary to respond to requests and/or as required by applicable laws and/or best practice retention requirements.
In case you are dissatisfied with any aspect of processing your Personal Data, please contact us at info@delfi.co. You may also contact the data protection supervisory authority in your country of residence.
If we plan to use Personal Data for a new purpose, we will update this Privacy Policy and communicate the changes to you before starting any new processing.
Cookie Policy
The Website may use cookie technology to collect additional user and usage data. Cookies contain data that identifies you during your use of our Website. We use session cookies to better understand how you use our Website, to monitor aggregate usage by our users, and to improve our Website. We or our third party service providers may also use cookies or other tracking technologies to manage and measure the performance of advertisements displayed on or delivered by or through the Website. This also helps us and our service providers and Partners provide more relevant advertising.
You may use your browser software to stop accepting cookies or to warn you before accepting a cookie. If you choose not to accept cookies, parts of the functionality of the Website operated by us may be impaired.
Analytics
Delfi Labs uses Google Analytics to improve the performance of the Website and for analytics purposes. Through the use of cookies, Google Analytics collects Personal Data such as online identifiers, network location, website usage and behavior, and data related to your device. For more information about how Google Analytics uses cookies, please visit: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage. Google's ability to use and share information collected by Google Analytics about your visits to the Website is governed by Google Analytics Terms of Services and Google Privacy Policy (https://policies.google.com/privacy). You may prevent your data from being used by Google Analytics by downloading the Google Analytics opt-out add-on available at: https://tools.google.com/dlpage/gaoptout.
Links to Other Websites
The Website may contain links to other websites not operated or controlled by us (“Third-Party Sites”). The information that you share with Third-Party Sites will be governed by the specific privacy policies and terms of service of such Third-Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact these sites directly for information on their privacy practices and policies.
Privacy of Children
Our Website is not directed to children under the age of 13 and we do not knowingly collect Personal Data from children under the age of 13. No one under the age of 13 may provide any Personal Data to us on the Website. If you are under 13, do not use or provide any information on our Website. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from, or about, a child under 13, please contact us at info@delfi.co.
Notice to California Residents
Do Not Sell or Share My Personal Information. We do not sell or share your Personal Data for money, but we and our business partners use tracking technologies to help us to understand our customers and visitors to the Website, to enhance your online experience, and to customize our offerings in ways that may be deemed a “sale” or “sharing” of personal information under the CPRA. As discussed elsewhere in this Privacy Policy, this includes working with third parties that collect Personal Data via tracking technologies to personalize advertisements both on our Website and elsewhere to provide us with certain data collection metrics.

To the extent we or our partners use such technologies on the Website, we offer a “Do Not Sell or Share My Personal Information” opt-out button. If you elect to opt out, we will notify third parties of your request. If you are a resident of the state of California, you are entitled to request information regarding the disclosure of your Personal Data to third parties for direct marketing purposes. To make such a request, please contact us at info@delfi.co.
Your browser may include the ability to send us “Do Not Track” signals. We [do not] respond to Do Not Track signals. We [do not] track your activity over time and across third-party websites. However, third parties that have content integrated on our Website may set cookies on your web browser that may permit them to track your activity.
Notice to EU Residents
If you are located in the EU, you have the following data protection rights: You have the right to be informed by us of any processing of your Personal Data, including how we collect, use and disclose your Personal Data, and obtain a copy thereof to verify the lawfulness of processing (“right of access”). If you are affected by incorrect or incomplete Personal Data, you may request rectification or completion of relevant data (“right to rectification/right to correct”). You may request the deletion of your Personal Data (“right to erasure”) or a temporary processing restriction in certain cases (“right to restriction of processing”). You may object to the processing of your Personal Data (“right to object”), and you have the right to receive your Personal Data in a structured, commonly used and machine-readable format or to have your Personal Data transferred to another data controller if technically feasible (“right to data portability”). To the extent we process your Personal Data based on your consent, you may withdraw your consent, without affecting the lawfulness of our processing based on your consent, before its withdrawal. Please contact us at info@delfi.co to exercise any of your rights enumerated in this clause.
Our website is accessible to EU residents and may therefore need to transfer Personal Data in connection with the purposes set out in this Privacy Policy. In particular, if this involves transferring your Personal Data from inside to outside the European Economic Area (the “EEA”), we will take steps to ensure your information remains adequately protected in accordance with this Privacy Policy and applicable law, including the GDPR. The destination of a transfer for your Personal Data may be to the United States or any future location where we may operate. These locations may have different laws and data protection compliance requirements, including data protection laws of a lower standard than those that apply in the country in which you are located. However, if we make such a transfer of your Personal Data, we will take steps to ensure that the privacy of your Personal Data is respected, by ensuring that one of the following safeguards is put in place:
Binding corporate rules;
Appropriate contractual clauses; or
Other valid transfer mechanisms.
Updates to Privacy Policy
We may update our Privacy Policy from time to time, in particular due to changes in applicable law.
When we change the Privacy Policy in a material way, a notice will be posted on our Website along with the updated Privacy Policy.
Your continued use of our Website following the posting of such updates constitutes your acceptance of the changes made.