The IRONMAN Group Privacy Policy California

This Addendum supplements the UTMB World Series Privacy Notice that addresses how UTMB collects and processes data when you use the utmb.world website and related websites.

This Addendum applies solely to all visitors, users, and others who reside in the State of California (“Consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively “CCPA”) and any terms defined in the CCPA have the same meaning when used in this Policy.

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer, household, or device (“Personal Information”). The table below describes the Personal Information that we collect from you, the sources from which we collect that Personal Information, the purposes of the collection, and our disclosures of Personal Information to third parties for business purposes, valuable consideration (“sales”), and targeted advertising (“sharing”).

We use sensitive personal information (i.e., precise geolocation) only for purposes expressly permitted under California law.

We do not knowingly share for targeted advertising or sell Personal Information related to individuals under the age of 16 or sensitive Personal Information. We share or sell other Personal Information for targeted advertising purposes. To opt out of sales and shares of Personal Information, please send us an email at dpo@utmb.world.

We retain your Personal Information for as long as reasonably necessary to achieve the purposes disclosed at the point of collection or in this Privacy Policy, unless a shorter retention period is required by law. We retain your Personal Information for complying with legal, regulatory, audit and tax requirements. In addition, we retain your Personal Information for the period of time that enables us to handle and respond to your questions, complaints and requests, to investigate, initiate and depend legal claims, and to protect our rights or our legal position.

If you are a California resident, you may have rights with respect to your Personal Information, subject to applicable exceptions. Once we receive your request and confirm your identity, we will review and process your request, as discussed below.

Right to Access

You may be entitled to request that we disclose to you the specific pieces of your Personal Information that we have collected about you in a portable and, to the extent technically feasible, readily usable format.

Right to Know

You may be entitled to request that we disclose certain information to you about our collection and use of your Personal Information.

Right to Delete

You may be entitled to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions.

Right to Correct

You may be entitled to request that we correct Personal Information that we hold about you in the event that the Personal Information is inaccurate, taking into account the nature of the Personal Information and the purposes of processing the Personal Information. Right to Opt-

Right to Opt-Out

You may be entitled to direct us to not sell or share your Personal Information (the “Right to Opt-Out”). To exercise the Right to Opt-Out, you (or your Authorized Agent) may send us an email at dpo@utmb.world.

Exercising Your Rights to Access, Know, Correct or Delete

To exercise these rights, please submit a request by contacting us at dpo@utmb.world or by calling us at +33 (0)4 50 53 47 51. Once we receive your request and confirm your identity, we will review your request to see if an exception allowing us to retain the information applies. Only you, or someone legally authorized to act on your behalf (“Authorized Agent”), may exercise the rights related to your Personal Information using the methods described above. Authorized agents may need to provide documentation proving that they are authorized to exercise rights on behalf of the Consumer whose Personal Information is subject to the request. We may notify the Consumer and require the Consumer to independently verify their identity before fulfilling the Authorized Agent’s request

You may only exercise the Right to Know twice within a 12-month period. To exercise your rights, you must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative, which may include: · Your name, address or email address on file.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
• We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

You do not need to create an account with us to exercise your rights. However, we do consider requests made through your password protected account sufficiently verified when the request relates to Personal Information associated with that specific account. We will only use Personal Information provided in the request to verify the requestor’s identity or authority to make it.

Rights to Access, Know, Correct or Delete Response Timing and Format We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact us at dpo@utmb.world.

We endeavor to substantively respond to a verifiable Consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

If you have any questions or comments about this notice, please do not hesitate to contact us at dpo@utmb.world.

If you need to access this Addendum in an alternative format due to having a disability, please contact us at dpo@utmb.world .