Cigar & Bourbon Events Data Processing Addendum

This Data Processing Addendum (“Addendum”) supplements the terms of the Data Protection Statement of the Cigar & Bourbon Events Ticketing and Registration Platform (“Platform”), owned and operated by Cigar & Bourbon Events LLC (“Company”, “we”, “us”, or “our”), in the United States territory. This Addendum forms part of the agreement between Company and its users. To learn more about Cigar & Bourbon Event’s Legal Terms, take a look here.

Definitions

a. “Data Controller” means the entity that determines the purposes and means of processing personal information.

b. “Data Processor” means the entity that processes personal information on behalf of the Data Controller.

c. “Data Subject” refers to an individual whose personal information is processed.

Roles of the Parties

a. Company, as the operator of the Platform, acts as the Data Controller for the personal information collected through the Platform, as described in the Data Protection Statement.

b. Event Organizers, who use the Platform to list and manage events, may act as independent Data Controllers for the personal information they collect from Data Subjects. Company acts as a Data Processor on behalf of Event Organizers in processing such personal information.

Obligations of the Data Processor

a. Compliance with Instructions: Company shall process personal information in accordance with the instructions provided by the Event Organizers, as documented in the Platform’s functionalities and agreed-upon terms.

b. Confidentiality: Company shall ensure that its personnel involved in the processing of personal information are subject to appropriate confidentiality obligations.

c. Security Measures: Company shall implement reasonable technical and organizational measures to protect the personal information against unauthorized access, disclosure, or loss.

d. Data Subject Requests: Company shall, to the extent possible, assist Event Organizers in fulfilling their obligations to respond to Data Subject requests relating to the personal information processed through the Platform.

e. Sub-Processors: Company may engage sub-processors to assist in the provision of the Platform’s services. Company shall ensure that such sub-processors are bound by contractual obligations that provide the same level of data protection as set forth in this Addendum.

f. International Transfers: Company may transfer personal information to countries outside the United States or other jurisdictions with different data protection laws. In such cases, Company shall implement appropriate safeguards to ensure the lawful transfer and processing of personal information as required by applicable data protection laws.

Event Organizer’s Responsibilities

a. Compliance with Laws: Event Organizers shall comply with all applicable data protection laws and regulations in their collection, use, and processing of personal information through the Platform.

b. Lawful Basis for Processing: Event Organizers shall ensure that they have a valid lawful basis, such as consent or legitimate interest, to process personal information and that all necessary consents or permissions are obtained from Data Subjects as required by applicable laws.

c. Data Subject Rights: Event Organizers shall be responsible for responding to Data Subject requests relating to their personal information, including requests to access, rectify, delete, or restrict the processing of personal information.

d. Indemnification: Event Organizers shall indemnify and hold Company harmless from any claims, losses, or damages arising out of or in connection with their processing of personal information through the Platform.

Term and Termination

This Addendum shall remain in effect as long as the Event Organizer continues to use the Platform. Either party may terminate this Addendum in the event of a material breach by the other party, subject to any notice and cure provisions in the agreement between the parties.

Governing Law and Dispute Resolution

This Addendum shall be governed by and construed in accordance with the laws of the United States, without regard to its conflict of laws principles. Any disputes arising out of or in connection with this Addendum shall be subject to the exclusive jurisdiction of the courts located in the United States.

This Data Processing Addendum is an integral part of the agreement between Company and Event Organizers using the Platform and reflects the specific data processing obligations related to the processing of personal information.