Legal

This privacy policy specifies how we use and protect any information that you give us when you use this website.

If you continue to browse and use this website, you are agreeing to comply with and be bound by the following Privacy Policy, which together with our Terms and Conditions, govern the relationship of Design District Management, Inc. d/b/a DACRA (“DACRA”) with you in relation to this website. Please note that the use of this website (www.dacra.com) constitutes your acceptance of this Privacy Policy.

The term “DACRA” or “us” or “we” refers to the owner of this website whose address is 3841 NE Second Avenue, Suite 400, Miami, Florida USA 33137.  The term “you” refers to the user or viewer of this website.

We reserve the right to update or modify this Privacy Policy at any time without prior notice.  You are bound by such revisions and therefore should periodically visit this page to review the then-current Privacy Policy. 

DACRA is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then it will only be used in accordance with this Privacy Policy.

This policy is effective from 07/25/2019.

What we collect

We may collect the following information:

• name and job title
• contact information including email address
• demographic information such as postcode, preferences and interests
• other information relevant to customer surveys and/or offers
• domain name and IP address of your computer

What we do with the information we gather

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

• Internal record keeping.
• We may use the information to improve our products and services.
• We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided. 
• From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customize the website according to your interests.
• In the aggregate with other information in such a way so that your identity cannot reasonably be determined (for example, statistical compilations).
• As required by law, for example, in response to a subpoena or search warrant.
• As necessary to enforce the Terms and Conditions.
• As necessary to protect the rights, safety or property of DACRA, its users, or others; this may include (for example), exchanging information with other organizations for fraud protection and/or risk reduction.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

How we use cookies

A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyze web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyze data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

• whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes
• if you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us at privacy@dacra.com.
• Take customary precautions to guard against “malware” (viruses, Trojan horses, bots, etc.) for example by installing and updating suitable anti-virus software.

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

GDPR privacy notice for EU residents

Design District Management, Inc. d/b/a DACRA ("we", "us" or “DACRA”) own, operate, and/or provide access to www.dacra.com and any of the DACRA mobile applications, email newsletters, ticket purchases, registrations, as well as other sites, digital platforms and interactive services (collectively On-line Services"). The General Data Protection Regulation (“GDPR”) was enacted to protect the privacy of European Union (“EU”) citizens. The GDPR applies not only to companies in the EU, but also to companies that control or process the personal data of EU residents.  DACRA is working diligently to ensure that its business practices comply with the GDPR. This Privacy Notice governs our privacy practices in handling the personal data we collect about EU citizens ("you" or "your") who use our On-line Services. You must be at least 18 years of age to submit any personal data on or through the Services.

Personal data under the GDPR

“Personal data” means all information relating to an identified or identifiable natural person (a “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Consent to processing personal data

We process personal data based on your consent in order to send personalized messages from us and our sponsors, to enable registration and use of On-line Services, collect precise location information and to send promotional emails. If you do not consent to processing, you may still view our content on https://www.dacra.com but you will not be able to access all of our On-line Services. If you do grant consent, you can withdraw your consent at any time by visiting https://www.dacra.com, unsubscribing from emails and as further described in "Rights of Affected Persons" below. Please note that all processing of your personal data will cease once you have withdrawn consent, but this will not affect any personal data that has already been processed.

“Consent” means the freely given, informed and unambiguous indication of the data subject’s wishes by which such person, by a clear affirmative action, signifies agreement to the processing of personal data relating to such affected person.

“Processing” means any operations performed or personal date, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaption, alteration, retrieval, consultation, use, disclosure, restriction, erasure or destruction.

Collection of information from you

We may obtain personal data from you including, but not limited to, your email address, name, home address, work address, telephone numbers, and any anonymous demographic information about you. This personal data is collected from you such as when you register with us, submit any application or request, login to our website, e-mail to us, sign up for a newsletter, apply for a job with us, volunteer information to us or provide information to us for response by us.

Collection of information through technology

In addition to information you provide to us, we also collect information through technology (such as through cookies, pixels, and access logs) depending upon how you use and access our On-line Services. The information collected can include, but is not limited to, your email address, IP address, approximate geographic location, unique device identifiers, time and frequency specifics about your interaction with our On-line Services, navigation path through our On-line Services, files you download or interact with, the domain name of your Internet Service Provider, information about your computer or mobile device (such as its browser, software, settings, and operating system), and the website, application or platform you visited before and after using our On-line Services.

Information not obtained directly from you

The On-line Services use third-party analytics, cookie data collection and linking services (collectively "Analytics Services"). These Analytics Services may use cookies, pixel tags, and other tracking and storage technologies to collect or receive information (not including your name or the email address you register with us) from the On-line Services and elsewhere on the Internet and use that information to analyze and measure our audience and target. For example, we and Analytics Services may use first-party cookies (such as the Google Analytics cookies) and third-party cookies together to inform, optimize, and serve sponsorship messages based on your past interactions with our On-line Services and other websites or services. In addition, we may use analytics data, including but not limited to, geographic, demographic, and interest reporting information to recognize and understand user preferences, make improvements, and for other operational purposes.  In order to prevent your data from being used by Google Analytics, click here for the Google Universal Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout. To learn more about how Google uses data, visit www.google.com/policies/privacy/partners/.

Processing personal data

We can lawfully process your personal data if any of the following conditions exist:

(i) you have given consent to the processing of your personal data; (ii) the processing is necessary for us to perform a contract to which you are a party or prior to entering into such a contract; (iii) processing is necessary for compliance with a legal obligation to which we are subject; (iv) processing is necessary to protect your interests or another natural person’s interests; and/or (v) processing is necessary for the purposes of legitimate interests of us or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data, in particular where the data subject is a child.

Purposes of processing personal data

We will process personal data lawfully and fairly in order to: (i) fulfill, and communicate with you regarding, your requests for On-line Services; (ii) manage user accounts; (iii) send you marketing, email newsletters, and other communications; (iv) manage, analyze, provide, and improve the On-line Services and our related communications; (v) analyze personal preferences or interests to provide personalized content and messages; (vi) generate aggregate or other information that does not directly identify you or the devices you use to utilize our On-line Services, and use and share that information for our purposes; (vii) to comply with applicable laws and enforce our Terms and Conditions and other legal rights; (viii) use the information collected from you in other ways, and for other purposes, consistent with our policies and Terms and Conditions; (ix) directly market to you; (x) analyze data; (xi) secure the network and information; and (xii) use for fraud prevention.

Sharing your personal data

We may share your personal data with the following categories of recipients: (i) authorized service providers to provide services on our behalf; (ii) authorized third- party applications to provide certain Services to you on the third-party applications; (iii) providers of Analytics Services; (iv) in the event of bankruptcy; (v) with public authorities when required by law, to respond to subpoenas, court orders, legal process, and other law enforcement measures, and to comply with legal or regulatory obligations; (vi) with other parties when necessary to enforce our Terms and Conditions, to protect the vital interests of us, our users or other natural persons, and their sponsors, or when required by law; (vii) with other parties if the information is anonymous and aggregate; (viii) with other parties if we have disclosed such sharing to you at the time of collection of the information or if we otherwise have your consent.

Retention of personal data

Your personal data is retained no longer than is reasonably necessary to perform the processing described in this Notice and in case of any legal claims or complaints, or as required by law.

Rights of affected persons

Each data subject affected by the processing of their personal data (an “affected person”), has the following rights, all of which may be exercised by contacting us at privacy@dacra.com, providing the e-mail address you used to register with us, and stating your specific request in writing. We reserve the right to verify your identity and confirm your right to the information.

Right to confirmation

Each affected person is entitled to request that we confirm whether we process personal data relating to such person.

Right to information

Any affected person is entitled to obtain free-of-charge information from DACRA of any of such person’s personal data stored by DACRA and to receive a copy of that personal data.  In addition, the following information will be provided, where appropriate:

• the purposes of the processing;
• the categories of personal data that are processed;
• the recipients to whom the personal data has been disclosed or is still being disclosed;
• if possible, the planned duration for which the personal data is being stored or, if this is not possible, the criteria for determining this duration;
• the existence of a right to rectification or erasure of such personal data relating, or to the restriction of processing by DACRA, or of the right to object to this processing;
• the existence of a right to complain to a supervisory authority;
• if the personal data have not been collected from the affected person, all the available information on the origin of the data;
• whether personal data has been transmitted to a third country or to an international organization. If this is the case, the affected person also has the right to obtain information on the appropriate guarantees in conjunction with the transmission.

Right to rectification

Any affected person is entitled to request the immediate rectification of incorrect personal data that relates to such person. In addition, the affected person has the right, with due consideration to the purpose of the data processing, to request the completion of incomplete personal data – including by means of a supplementary declaration.

Right to erasure (right to be forgotten)

Any affected person is entitled to request DACRA to delete the personal data relating to such person without delay if:

• The personal data was collected for purposes or processed in other ways for which it is no longer needed.
• The affected person revokes the consent which provided the basis for the processing, and there is no other legal basis for the processing.
• The affected person submits an objection to the processing and there are no overriding legitimate reasons for the processing, or the affected person submits an objection to processing in the case of direct advertising and associated profiling.
• The personal data has been processed unlawfully.
• The erasure of the personal data is necessary to fullfill a legal obligation under EU law, or the law of its member states, to which DACRA is subject.
• The personal data was collected in relation to On-line Services that were offered directly to a child.

Right to restrict processing

Any affected person has the right to request that DACRA restrict the processing of their data if one of the following conditions exist:

• The affected person disputes the correctness of that personal data for a duration which enables the Data Protection Officer to check the correctness of the personal data.
• The processing of that data is unlawful, and the affected person rejects the erasure of the personal data and, instead, requests a restriction on the use of the personal data.
• The Data Protection Officer no longer requires the personal data for the purpose of processing, but the affected person requires the data for asserting, exercising or defending legal claims.
• The affected person, for reasons arising from their particular situation, has submitted an objection to the processing and it is not yet clear whether the legitimate interests DACRA outweigh the rights, freedom and legitimate interests of the affected person.

Right to data portability

Any affected person has the right to receive the personal data relating to them in a structured, commonly used and machine-readable format. The affected person also has the right to have this data transmitted to another data controller providing the statutory requirements are fulfilled.

In addition, the affected person has the right to arrange for the personal data to be transmitted directly from one data controller to another, to the extent technically feasible, and subject to the rights of other persons.

Right to object

Any affected person has the right, at any time, to object to the processing of the personal data relating to them for reasons arising from their particular situation.

In the event of an objection, DACRA will no longer process the personal data, unless we can provide evidence of compelling reasons, worthy of protection, for this data to be processed which outweigh the rights and interests of the affected person, or unless the processing serves the assertion, exercise or defense of legal claims.

Right to revoke consent to the processing of data

Any affected person is entitled to revoke, at any time, the consent they have given to the processing of personal data.

Transfer of data abroad

Because we operate the On-line Services from the US, your personal data may be transferred to the US and/or to countries or territories outside the EU not recognized by the European Commission as ensuring an adequate level of protection pursuant to the GDPR. Where required, data transfers will be made subject to the terms of the applicable EU Standard Contractual Clauses or with your consent. We will take all steps reasonably necessary to ensure that personal data is treated securely and in accordance with this Notice in respect of such transfer.

Automated decision making and analysis

“Profiling” means any type of automated processing of personal data which involves the personal data being used to evaluate specific personal aspects of a natural person.

We and our data analytics and sponsorship vendors analyze user interactions with the On-line Services to deliver personalized content to users and to serve personalized sponsorship messages. The consequences of such processing for you is that you receive content that may be of interest to you, as well as email, online and in-app messages from us and our sponsors that are geared towards your interests and preferences.

Each affected person has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

This right does not apply if the decision: (i) is necessary for entering into, or performance of, a contract between the data subject and DACRA; (ii) is authorized by the EU or any law of a member state to which DACRA is subject and which also provides suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests; or (iii) is based on the data subject’s explicit consent.

In cases described in clauses (i) or (iii) above, DACRA shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of DACRA; to express his or her point of view and to contest the decision.

Security

We employ technical and organizational safeguards to ensure an appropriate level of security for personal data, taking into account current available technology, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and security for the rights and freedoms of natural persons.

Updates and revisions

We reserve the right to modify this Notice at any time.  An up-to-date version is always available on the DACRA website.  Please visit our website on a regular basis for the current provisions.