Festival 26 – Data Privacy Notice

Last Updated: March 31, 2026

This Data Privacy Notice describes how America Scores New England, Incorporated (d/b/a Boston Scores) and our parent organizations, subsidiaries, and affiliates (“Boston SCORES,” “we,” “us” or “our”) process the Personal Information (as defined below) that we collect, including the purposes for which we use it, the parties with whom we may share it, and your choices with respect to such information, in connection with Festival 26.

For purposes of this Data Privacy Notice, “Personal Information” means any information that relates to you as an individual and could reasonably be used to identify you.

I.              The information that we collect:

We collect Personal Information directly from you that includes:

·      Contact data, such as your first and last name, phone number, email address, home address, delegation and role in your delegation.

·      Demographic data, such as your nationality, date of birth and gender.

·      Verification data*, such as your passport / ID card number, travel insurance information, and background check information.

·      Health and medical data*, such as your blood type, date of last tetanus shot, medical conditions, medications, and physician’s name and phone number.  

·      Audiovisual data, such as photographs, audio recordings and video recordings that we capture or you otherwise make available to us in connection with Festival 26.

·      Other data not specifically listed here, which we will use as described in this Data Privacy Notice or as otherwise disclosed at the time of collection.

Third-party sources. We may also receive Personal Information from third-party sources such as your delegation, your parent / legal guardian, or our event co-sponsor, Sports dans la Ville, and we may combine this information with Personal Information we receive from you directly.

*Limited Use and Sharing. With respect to any verification data and health and medical data that we collect, we will only use and disclose this information as necessary to allow for your participation in Festival 26 (including as required to provide medical treatment, if necessary), as necessary to facilitate any business transaction we undertake (such as a sale of all or some of our assets to an acquiring entity), or as otherwise required by law.

II.            How we use the information we collect:

We may use the Personal Information we collect for the following purposes*:

·      Provide our services. We may use your Personal Information to facilitate Festival 26 and otherwise make our services available to you, administer our business, and fulfill our contractual obligations.

·      Provide customer support. We may use your Personal Information to provide customer support, including to investigate and respond to complaints.

·      Maintain security. We may use your Personal Information for risk mitigation and security purposes, including to maintain the security of our data, to conduct internal audits or investigations, and for data security testing and business continuity purposes.

·      Communicate with you. We may use your Personal Information to communicate with you regarding Festival 26 and respond to your questions using any of the contact methods you voluntarily provide to us (such as email, mail or telephone).

·      Facilitate a transaction. We may use your Personal Information in the event we undertake, are involved in, or are otherwise contemplating any merger, acquisition, reorganization, sale of assets, bankruptcy, or insolvency event.

·      Comply with the law, lawful requests and exercise our rights. We may use your Personal Information as reasonably necessary to assess and ensure compliance with applicable laws, legal requirements, and organization policies; to protect our assets or to investigate or defend against any claims of illegality or wrongdoing (including to obtain legal advice or to establish, exercise or defend legal rights); and in response to a court order or judicial or other government subpoena or warrant.

*For verification data and health and medical data, see “Limited Use and Sharing” above.

III.          When we share your information

We may share your Personal Information with the following parties and as otherwise described in this Data Privacy Notice or at the time of collection*:

·      Service providers, facilities, and professional advisors. We may share your Personal Information with third-party vendors who provide services or facilities in support of Festival 26, as well as other service providers who perform services on our behalf (e.g., web hosting). We may also share your Personal Information with our professional advisors such as our attorneys, accountants, and insurance providers.

·      Event Co-Host and Staff. We may share your Personal Information with our Festival 26 co-host, Sports dans la Ville, and other Festival 26 staff (e.g., medical staff).

·      Parents and Legal Guardians. We may share your Personal Information with your parents and legal guardians in order to register you and otherwise facilitate Festival 26.

·      Medical Providers. We may share your Personal Information with medical providers, hospital staff and others in the event of an emergency or healthcare-related issue.

·      Parties involved in a corporate transaction. We may share your Personal Information with relevant third parties in the event of, or in connection with diligence regarding, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of a bankruptcy.

·      Law enforcement, other governmental entities or others. Where required by applicable law or legal process, we may share your Personal Information with law enforcement, governmental entities and regulators and others, including if we believe in good faith that such action is necessary to comply with the law, prevent unlawful activity, defend our rights, or maintain security.

·      Other third parties with your consent. We may share your Personal Information with any other third party where you have provided consent to such disclosure.

*For verification data and health and medical data, see “Limited Use and Sharing” above.

IV.          Data Retention

We retain Personal Information as long as it is reasonably necessary to provide Festival 26, and for other purposes including to comply with the law, prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigation, or enforce our agreements. To determine the appropriate retention period for Personal Information, we may consider factors such as the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of the Personal Information, the purposes for which we process the Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements. When we no longer require the Personal Information we have collected about you, we may either delete it, anonymize it, or isolate it from further processing.

V.            Children

We do not knowingly collect or maintain information directly from persons under 13 years of age (for purposes of this Data Privacy Notice, “Children”), and no part of Festival 26 is directed to Children. If we learn that information has been collected in connection with Festival 26 from Children and without verifiable parental consent, then we will take the appropriate steps to delete this information. If you are a parent or guardian and discover that your Child has provided us with Personal Information without your consent, please contact us using the contact information below to request that we delete the information from our systems.

VI.          Visitors from Outside the United States

Boston SCORES operates in the United States, and any Personal Information collected pursuant to this Data Privacy Notice may be accessed from and/or stored by Boston SCORES, or those acting on our behalf, in the United States. If you attend Festival 26 from outside the United States, you acknowledge that your Personal Information may be transferred to or accessed from the United States and consent to such transfer or access. If you are located in Europe or the UK, please see below for further information.

A.   Visitors from the EEA and UK

This Section VI.A supplements our broader Data Privacy Notice and applies only to the extent that the EU-UK Data Protection Legislation (as defined below) applies to our processing of personal data. If this Section applies, the data subject whose personal data is so processed has certain rights with respect to such personal data.

For this Section, “EU-UK Data Protection Legislation” means all applicable legislation and regulations relating to the processing and/or protection of personal data, in each case as in force from time to time in the European Union (“EU”), the European Economic Area (“EEA”) or the United Kingdom (“UK”). The terms “controller,” “processor,” “data subject,” “personal data” and “processing” in this Section shall be interpreted in accordance with the applicable EU-UK Data Protection Legislation.

Controller and Contact Information

For the purposes of EU-UK Data Protection Legislation, America Scores New England, Incorporated (d/b/a Boston Scores) is the controller. We are registered in Massachusetts under company number 043482756.  Our registered office is at 150 Byron Street, East Boston, MA 02128.

Our Legal Bases for Processing Your Personal Data

We are entitled to use your personal data for the purposes set forth in this Data Privacy Notice because one or more of the following legal bases applies:

·      your consent, e.g., when you submit a registration form to attend Festival 26. Note that you can withdraw this consent at any time;

·      to take steps to enter into or perform a contract with you or other individuals, e.g., to carry out our obligations in providing Festival 26;

·      compliance with our legal obligations;

·      in order to establish, exercise or defend our legal rights or for the purpose of legal proceedings; or

·      ours or our third parties’ legitimate interests, where these are not overridden by your privacy and data protection rights. Our legitimate interests include: fulfilling your requests for information about Festival 26 or our other services, personalizing Festival 26 to the participants, allowing us to effectively and efficiently administer and manage the operation of our organization, and maintaining compliance with internal policies and procedures.

International Transfers of Personal Data Outside the EEA / UK

As an organization headquartered in the United States, the personal data that we collect from you may be transferred to, and stored at, a destination outside the UK or the EEA. It may also be processed by staff operating outside the UK or the EEA working for us or for one of our vendors/partners. Such staff may be engaged in, among other things, the processing of your Festival 26 registration form and the provision of support services. If we transfer personal data to a third party outside of the UK or EEA, we will, as required by EU-UK Data Protection Legislation, ensure that your data protection rights are protected by appropriate safeguards, such as the UK’s International Data Transfer Agreement or the European Commission’s Standard Contractual Clauses for the transfer of personal data to controllers or processors established in third countries. Please contact us using the contact details below if you would like more information about these safeguards.

Your Rights

In certain circumstances, EU-UK Data Protection Legislation may give rights to individuals in respect of personal data that Boston SCORES holds about them, for example:

·      the right to refuse to provide any personal data and the right to object at any time to the processing of their personal data;

·      the right to confirm whether we process their personal data and to obtain information regarding the processing of their personal data and access to the personal data that we hold about them;

·      where consent was provided for certain processing activities, the right to withdraw their consent to the collection, processing, use and/or disclosure of their personal data at any time. Please note that this will not affect the lawfulness of any collection, processing, use or disclosure undertaken before such withdrawal and that we may still be entitled to process the personal data if it has another legitimate reason (other than consent) or a consent exception for doing so;

·      the right to receive a copy of some personal data in a structured, commonly used and machine-readable format and/or request that we transmit such data to a third party where this is technically feasible;

·      the right to request that we rectify or correct their personal data if it is inaccurate or incomplete;

·      the right to request that we erase their personal data;

·      the right to request that we restrict, anonymize or block the processing of their personal data; and

·      where applicable, the right to lodge a complaint with the competent data protection supervisory authority in the relevant jurisdiction if they think that any of their rights have been infringed by us, for example, in the UK, this is the Information Commissioner’s Office (“ICO”).

Please note that if you do not provide certain personal data to us when requested (and where relevant, provide your consent), we may not be able to provide you with some or all of our services (including those set out in this Section or in other agreements we enter into with you).

You can exercise your rights at any time by contacting us using the information below. Please note that the exercise of certain of your rights may prevent us from providing services to you, including Festival 26.

We are typically able to resolve privacy questions or concerns promptly and effectively. If you are not satisfied with the response you receive from us, you may have the option to escalate concerns to the data protection supervisory authority in the relevant jurisdiction, here.

VII.        Contact

Please contact us with any questions, comments or concerns about this Data Privacy Notice or our use of your Personal Information by e-mail at info@festival26.org or by mail at Boston Scores, 150 Byron Street, East Boston, MA 02128.