Supplemental Privacy Notice for Residents of the European Economic Area and United Kingdom

Supplemental Privacy Notice for Residents of the European Economic Area and United Kingdom

This Supplemental Privacy Notice (“Supplemental Notice”) is part of and supplements the GeorgeTom Inc. (hereafter, “GeorgeTom,” “we,” “us,” “our,” or the “Company”) Privacy Policy and further describes how GeorgeTom collects, uses, and shares Personal Information. This Supplemental Notice applies to the Company’s online and offline information gathering and dissemination practices in connection with the Company’s website (the “Site”) and Personal Information we may collect or receive through other means. This Supplemental Notice applies only to Personal Information collected about consumers in the European Economic Area (“EEA”) and the United Kingdom (“UK”) in accordance with Article 13 of the EU General Data Protection Regulation 2016/679 (“GDPR”), and the UK General Data Protection Regulation (“UK GDPR”).

The Company serves as the data controller of Personal Information collected and processed through its Site. We can be contacted at:

Chief Legal Officer
GeorgeTom Inc.
PO Box 158067
1906 Glen Echo Road
Nashville TN 37215

Email: [email protected]

Our lawful basis for processing Personal Information collected and covered by this Supplemental Notice will depend on the nature of information collected and the purpose of processing that information as described in the chart below.

Types of Personal InformationPurpose of ProcessingLawful Basis
Contact Information (e.g., name and email address)Communicate and manage our relationship with youLegitimate Business Purpose
GenderMarketing analytics and offerings

Develop, improve, and provide content and services to you related to our website
Consent
Date of BirthMarketing analytics and offerings

Develop, improve, and provide content and services to you related to our website
Consent
Device/Internet information (such as computer, device, and connection information, including IP address, browser type, operating system, website usage data, etc.)Cybersecurity

Marketing analytics and offerings
Legitimate Business Purpose
GeolocationMarketing analytics and offerings

Develop, improve, and provide content and services to you related to our website
Consent

Personal Information collected by us through the Site will be processed in the United States. Visitors and users of the Site acknowledge that Personal Information provided and collected through our Site will be stored in the United States.

In certain circumstances and in accordance with applicable local laws, you have rights under data protection laws with respect to your Personal Information. Your rights include the (i) right of access; (ii) right to correction; (iii) right to erasure; (iv) right to restriction of processing; (v) right to data portability; (vi) right to object to certain types of processing; and (vii) right to withdraw consent to certain types of processing.

If you have any complaints regarding our privacy practices, you have the right to make a complaint with your national data protection authority. However, we would appreciate the opportunity to address any concern that you may have by emailing us at [email protected].

If you wish to exercise any of the rights summarized above, you can do so in one of the following ways:

Click on this link to complete and submit the referenced web form; or

Reach us by email or U.S. mail at:

Chief Legal Officer
GeorgeTom Inc.
PO Box 158067
1906 Glen Echo Road
Nashville TN 37215

Email: [email protected]

Upon receiving a verifiable request, we will confirm receipt of the request within 10 days, provide information about how we will verify and handle the request, and advise when you should expect to receive a response.

Of course, we need to be reasonably sure that the person making the request is you! So, we may need some information from you to verify that you are the person whose Personal Information you are asking to know about or to delete. Accordingly, the verifiable consumer request must:

  • Provide sufficient information that allows us to reasonably verify whether you are the person about whom we collected Personal Information or an authorized representative.
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Where you fail to provide Personal Information by law or by any contract we have with you, we may not be able to fulfill the contract or service we have or are trying to enter into with you. In this case, we may have to cancel a service or order you have with us, but we will notify you if that is the case at the time.