i. Our personal data practices

Detail about what kinds of personal data we may collect or have collected, how we collect it, why we collect it, and who we may disclose it to is found in the Collection of Personal Data; Use of Personal Data; and Disclosure of Personal Data sections of this Privacy Policy.

We may disclose personal data to third party advertising networks and platforms for purposes of providing targeted behavioral advertising on those platforms, which may be considered a "sale" of personal data under the Nebraska Data Privacy Act and the Texas Data Privacy and Security Act.

ii. Your privacy rights

Nebraska and Texas residents may have the following rights under applicable law in relation to your personal data, subject to certain exceptions:

• Right to know and access. You have the right to know what personal data we collect, use, disclose, and/or sell or share as those terms are defined under applicable law. You may ask us to provide you a portable copy of this information up to two times in a rolling twelve-month period.
• Right to delete and erase. You have the right to request under certain circumstances that we, as well as our service providers and contractors, delete the personal data that we collect about you.
• Right to correct inaccurate personal data. You have the right to request the correction of inaccurate personal data.
• Right to opt out. You have the right to opt-out of targeted advertising, our sale of your personal data, and profiling decisions that could produce legal or similarly significant effects concerning the consumer.
• Rights concerning sensitive personal data. We cannot process your sensitive data or use your personal data for certain purposes without your affirmative consent. However, we do not collect sensitive data.
• Right to non-discrimination. You have the right not to receive discriminatory treatment for the exercise of the privacy rights described above.

To exercise your privacy rights described above, please email us at privacy@dps.gg. Any request you submit to us is subject to an identification and residency verification process as permitted under applicable law. Additionally, all requests are subject to certain exceptions under applicable law, which may vary.

We do not charge a fee to process or respond to your request unless it is excessive, repetitive, manifestly unfounded, or in accordance with applicable law. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. You may designate an authorized agent to submit a request on your behalf, and if so, we may require proof of the agent's authorization by you and/or verification of the agent's own identity. We will only use personal data provided in a verifiable or authenticated consumer request to verify your (or your authorized agent, as applicable) identity or authority to make the request.

Except where otherwise noted, we will respond to your request within forty-five (45) days after receipt and we reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and permitted by applicable law.

iii. How to appeal decisions about your rights

Nebraska and Texas residents can appeal our decisions about privacy rights requests as follows:

• Nebraska residents. If you are a Nebraska resident and want to appeal our decision about a request you have made, please Contact Us. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons for reaching the decision. If the appeal is denied, you may contact Nebraska's Office of the Attorney General by phone at (402) 471-2683 or by submitting a form here.
• Texas residents. If you are a Texas resident and want to appeal our decision about a request you have made, please Contact Us. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons for reaching the decision. If the appeal is denied, you may contact Texas' Office of the Attorney General by phone at (800) 621-0508 or by submitting a form here.

i. Basis for processing your personal data

We rely on one or more legal bases to process your personal data under applicable law. We may process personal data (1) as necessary to perform our contractual obligations to you, including, but not limited to, those obligations in our terms of use; (2) as necessary to pursue our legitimate interests as further detailed below; (3) as necessary for our compliance with our legal obligations such as a request or order from courts, law enforcement, or other government authorities; and/or (4) with your consent, including to send you marketing email messages and other information that may be of interest to you, which you may withdraw at any time.

ii. Legitimate business interests

We may collect, process, and maintain personal data to pursue the legitimate business interests outlined below. To determine these legitimate interests, we balance our legitimate interests against the legitimate interests and rights of you and others and only process personal data in accordance with those interests where they are not overridden by your data-protection interests or fundamental rights and freedoms. Our legitimate interests generally include:

• Providing, improving, and developing our Site, including delivering requested services, sending you messages and providing user support, customizing our Site to better fit your needs as a user, developing new products and services, and performing internal analytics and research and development. This also includes sharing personal data with our trusted service providers that provide services on our behalf.
• Protecting you and others and to create and maintain a trusted environment, such as to comply with our legal obligations, to ensure compliance our agreements with you and other third parties, to ensure a safe, secure, and reliable Site, and to detect and prevent wrongdoing and crime, assure compliance with our policies, and protect and defend our rights, interests, and property. In connection with the activities above, we may conduct internal research and profiling based on your interactions on our Site, content you submit on our Site, and information obtained from third parties.
• Providing, personalizing, measuring, and improving our marketing, including sending you promotional messages and other information that may be of interest to you with your consent. We may also use personal data to understand our user base and the effectiveness of our marketing. This processing is done pursuant to our legitimate interest in undertaking marketing activities to offer products or services that may be of interest to you.

iii. Your privacy rights

In certain circumstances, individuals located within the EEA, UK, and Switzerland are entitled to the following privacy rights:

• Right to Access. You have the right to request confirmation of whether we process personal data relating to you, and if so, to request a copy of that personal data.
• Right to Erasure. You have the right to request that we erase your personal data in certain circumstances provided by law.
• Right to Rectification. You have the right to request to have your personal data corrected or updated if that information is inaccurate, outdated, or incomplete.
• Right to Object to Processing. You have the right to object to our processing of your personal data.
• Right to Restrict Processing. You have the right to request that we restrict the processing of your personal data.
• Right to Data Portability. You have the right to request that we provide you with a copy of your personal data in a structured, machine-readable and commonly used format.
• Right to Withdraw Consent. You also have the right to withdraw your consent at any time where we rely on your consent to process your personal data.
• Right to Lodge Complaint. You have the right to complain to a data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority.
  • A list of EU supervisory authorities is available here.
  • The relevant UK supervisory authority is the UK Information Commissioner's Officer.
  • The relevant Swiss supervisory authority is the Federal Data Protection and Information Commissioner.

To exercise your privacy rights described above, please email us at privacy@dps.gg. Any request you submit to us is subject to an identification and residency verification process as permitted under applicable law. Additionally, all requests are subject to certain exceptions under applicable law, which may vary.

We do not charge a fee to process or respond to your request unless it is excessive, repetitive, manifestly unfounded, or in accordance with applicable law. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. You may designate an authorized agent to submit a request on your behalf, and if so, we may require proof of the agent's authorization by you and/or verification of the agent's own identity.

We will only use personal data provided in a verifiable or authenticated consumer request to verify your (or your authorized agent, as applicable) identity or authority to make the request.

Except where otherwise noted, we will respond to your request within one month after receipt and we reserve the right to extend the response time by an additional two months when reasonably necessary and permitted by applicable law.