This is the privacy policy (“policy”) for the ASCO Direct GU Highlights Meeting 2024 which is run and provided by Springer Healthcare Limited (we, us and our) in conjunction with Springer Nature AG Co KGaA. Springer Nature Ltd is located at The Campus, 4 Crinan Street, London N1 9XW. We can also be contacted at asco@springer.com.

We will only use the personal data gathered over this website as set out in this policy. Below you will find information on how we use your personal data, for which purposes your personal data is used, with whom it is shared and what control and information rights you may have.

I. Summary of our processing activities

We provide online registration and payment for the ASCO Direct GU Highlights Meeting 2024. Some of this material is freely available, some if it is only available to registrants and/or subscribers. The following summary offers a quick overview of the data processing activities that are undertaken on our website. You will find more detailed information under the indicated sections below.

If you register, further personal data will be processed in the scope of such services (see IV and V).

Your personal data may be disclosed to third parties (see X) that might be located outside your country of residence; potentially, different data protection standards may apply (see XI).

We have implemented appropriate safeguards to secure your personal data (see XII) and retain your personal data only as long as necessary (see XIII).

Under the legislation applicable to you, you may be entitled to exercise certain rights with regard to the processing of your personal data (see XIV).

II. Definitions

Personal data: means any information relating to a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier.

Processing: means any operation which is performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or any kind of disclosure or other use.

III. Informational use of the website

When you visit our website for informational reasons, i.e. without registering for any of our provided services listed under IV and without providing us with personal data in any other form, we may automatically collect additional information about you which will contain personal data only in limited cases and which is automatically recognised by our server, such as:

Examples might include:

• your IP address;
• your device type, name and IDs;
• the date and time of your requests;
• the content of your requests;
• information on your browser version;
• your screen resolution;
• information on your operating system, including language settings.

We use such information only to assist us in providing an effective service (e.g. to adapt our website to the needs of your device or to allow you to log in to our website), and to collect broad demographic information for anonymised, aggregated use.

The personal data automatically collected is necessary for us to provide the website, Article 6 sec. 1 sent. 1 lit. b GDPR, and for our legitimate interest to guarantee the website’s stability and security, Article 6 sec. 1 sent. 1 lit. f GDPR.

IV. Requesting information on the ASCO Direct GU Highlights Meeting 2024

You can request further information for the event via our website.

If you contacted us regarding the ASCO Direct GU Highlights Meeting 2024 but no longer wish to be contacted, you can email asco@springer.com, citing your name, and request that your email address be removed.

V. Registration for ASCO Direct GU Highlights Meeting 2024

Access to registrant/subscription content is provided via a variety of mechanisms such as creating a personal account with us. If your access to our content is provided by an organisation or an institution like a university or a company then they choose the access method on your behalf.

If you create a personal login with us then we will store and process the following:

• Information (such as your name, user name and email address) that is provided by registration;
• Information in connection with an account sign-in facility (e.g. log-in and password details);
• Communications sent by you (e.g. via e-mail or website communication forms).

The information that is necessary for the performance of the service is labelled accordingly. All further information is provided voluntarily.

We will process the personal data you provide:

Examples might include:

• Identify you at sign-in;
• Provide you with the services and information offered through the website or which you request;
• Administer your account;
• Communicate with you;
• Provide access (where appropriate) to other ASCO Direct GU Highlights Meeting 2024 content if you so request

For this, the legal basis is Article 6 sec. 1 sent. 1 lit. b GDPR. The use of your personal data for profiling is done based in consent, Article 6 sec. 1 sent. 1 lit. a GDPR.

You can object to the use of your personal data for direct marketing at any time. We will then refrain from any processing to the extent it is related to such purposes. You may opt-out of direct marketing via opt-out links in any marketing communication or via user profile pages on the website (where available). You can also inform us about your objection by contacting asco@springer.com.

We offer email notifications if you register. You can unsubscribe from our email notifications by opting out via the link provided in each notification email. This notification service is based on your consent, Article 6 sec. 1 sent. 1 lit. a GDPR.

Registration data is kept for 120 days following the end of the ASCO Direct GU Highlights Meeting 2024. You may at any time make a request and we will erase your data within 30 days. Statutory storage obligations or the need for legal actions that may arise from misconduct within the services or payment problems can lead to a longer retention of your personal data. In this case, we will inform you accordingly.

VI. Information about the specific uses that require registration

1. Email notifications

If you register you can receive our email notifications for the event. The legal basis for this processing is Article 6 sec. 1 sent. 1 lit. a GDPR.

You can unsubscribe from our email notifications by opting out via the link provided in each notification email.

VII. Automated decision making

We do not use your personal data for automated decision making which produces legal effects concerning you or similarly significantly affects you, however we do use your personal data to offer you content and services which we believe may be of interest.

VIII. Online advertising (not applicable)

IX. Analytics

OneTrust

We use Onetrust, a service provided by OneTrust LLC, Dixon House, 1 Lloyd’s Avenue, London, EC3N 3DQ (“Onetrust”). We use Onetrust services to provide information about the cookies and other tracking technology used on our website and to manage user preferences on that behalf.

Onetrust places the following cookies on your computer:

OptanonAlert, OptanonConsent, _dc_gtm_UA-xxxxxxxx

This allows us to identify if the cookie banner is displayed, which choices you made and how to act upon those choices (Opt-in or Opt-out of cookie categories). These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences. To review your current settings please go to our Privacy Preference Centre. These cookies do not store any personally identifiable information.

You can set your browser to block these cookies, but some parts of the site may then not perform as designed.

For more information about privacy policies and Onetrust, please refer to the Onetrust website: https://Onetrust.com/privacy-notice/.

For statistical analyses we use web analytics services such as Google Analytics, collect information about the use of this site.

General tracking information

The tools collect information such as:

• Device and browser information (operating system information, Mobile device identifier, mobile operating system, etc.
• IP address
• Page accessed, URL click stream (the chronological order of our internet sites you visited)
• Geographic location
• Time of visit
• Referring site, application, or service

We use the information we get from the providers to determine the most useful information you are looking for, and to improve and optimise this website.

If you do not express a preference regarding tracking we will track your behaviour online for the purposes described above; this data will not be shared outside of SpringerNature. You can stop this tracking using our Privacy Preference Centre. The legal basis for this processing via Google Analytics is Art. 6 sec. 1 sent. 1 lit.f GDPR and represents our legitimate interest to analyse our website’s traffic to improve the user’s experience and to optimise the website in general.

We do not share information on your web behaviour with any 3rd party providers without your explicit consent. Consent is provided by clicking the appropriate button on the web banner that appears on your first visit to the website. You can update or withdraw your consent by visiting our Privacy Preference Centre. The legal basis for this processing is Art. 6 sec. 1 sent. 1 lit. a GDPR and represents you consent to accepting 3rd party targeting cookies.

Depending on the provider the information generated about your use of the website may be transferred to and processed in third countries, e.g. the United States. For further information about the potential risks of a cross border data transfer please refer to section XI. The tools collect only the IP address assigned to you on the date you visit this site, rather than your name or any other identifying information. The provider will use this information in order to evaluate your use of the website, to compile reports on website activities and to provide other services relating to website and internet use to us.

Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). On our behalf Google will use the information generated by a cookie for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet activity in connection with the use of the website and according to your consent preferences. You can access the Google Analytics privacy policy here.

The legal basis for the data transfer is Art. 28 GDPR in conjunction with the data processing agreement.

You may refuse the use of cookies by selecting the appropriate settings on your browser or by amending your preferences. In addition to that you may prevent the collection of the information generated by the cookie about your use of the website (including you IP address) and the processing of this data by Google if you download and install the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout

X. Data Sharing

Your registration data will be shared with the sponsor of the ASCO Direct GU Highlights Meeting 2024 which is Janssen-Cilag AG, Gubelstrasse 34, 6300 Zug, Switzerland for the purposes of attendance validation and agreement of participation, and in order to provide you with relevant professional attendance credits (CME). Agreement of Participation documents are to be returned directly to Janssen-Cilag and use of the data provided in those documents are subject to their appropriate privacy policy.

We may also share your registration details with third parties that have been requested to assist with the administration of the event for in-person attendance and also virtual online attendance.

Limited registration details will also be shared with the speakers and scientific committee. However, no contact details will be provided.

XI. Cross border data transfers

Within the scope of our information sharing activities set out above, your personal data may be transferred to other countries (including countries outside the EEA) which may have different data protection standards from your country of residence. Please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavour to take reasonable measures to maintain an adequate level of data protection when sharing your personal data with such countries.

In the case of a transfer outside of the EEA, this transfer is either safeguarded by the Privacy Shield or EU Model Clauses in accordance with Article 46 GDPR. You can find further information about the aforementioned safeguards by following this link https://ec.europa.eu/info/law/law-topic/data-protection_en or contact our Group Data Protection Officer via dataprotection@springernature.com for specific information on respective safeguards.

XII. Security

We have reasonable state of the art security measures in place to protect against the loss, misuse and alteration of personal data under our control. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to personal data. Whilst we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we use all reasonable efforts to prevent it.

You should bear in mind that submission of information over the internet is never entirely secure. We cannot guarantee the security of information you submit via our website whilst it is in transit over the internet and any such submission is at your own risk.

XIII. Data retention

We strive to keep our processing activities with respect to your personal data as limited as possible. In the absence of specific retention periods set out in this policy, your personal data will be retained only for as long as we need it to fulfil the purpose for which we have collected it and, if applicable, as long as required by statutory retention requirements.

XIV. Your rights

Under the legislation applicable to you, you may be entitled to exercise some or all of the following rights:

1. require (i) information as to whether your personal data is retained and (ii) access to and/or duplicates of your personal data retained, including the purposes of the processing, the categories of personal data concerned, and the data recipients as well as potential retention periods;
2. request rectification, removal or restriction of your personal data, e.g. because (i) it is incomplete or inaccurate, (ii) it is no longer needed for the purposes for which it was collected, or (iii) the consent on which the processing was based has been withdrawn;
3. refuse to provide and – without impact to data processing activities that have taken place before such withdrawal – withdraw your consent to processing of your personal data at any time;
4. object, on grounds relating to your particular situation, that your personal data shall be subject to a processing. In this case, please provide us with information about your particular situation. After the assessment of the facts presented by you we will either stop processing your personal data or present you our compelling legitimate grounds for an ongoing processing;
5. take legal actions in relation to any potential breach of your rights regarding the processing of your personal data, as well as to lodge complaints before the competent data protection regulators;
6. require (i) to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and (ii) to transmit those data to another controller without hindrance from our side; where technically feasible you shall have the right to have the personal data transmitted directly from us to another controller; and/or
7. not to be subject to any automated decision making, including profiling (automatic decisions based on data processing by automatic means, for the purpose of assessing several personal aspects) which produce legal effects on you or affects you with similar significance.

You may (i) exercise the rights referred to above or (ii) pose any questions or (iii) make any complaints regarding our data processing by contacting us using the contact details set out below.

XV. Contacting us

Please submit any questions, concerns or comments you have about this privacy policy or any requests concerning your personal data by email to asco@springer.com. The information you provide when contacting us will be processed to handle your request and will be erased when your request is completed. Alternatively, we will restrict the processing of the respective information in accordance with statutory retention requirements.

XVI. Amendments to this policy

We reserve the right to change this policy from time to time by updating our website respectively. Please visit the website regularly and check our respective current privacy policy. This policy was last updated on 30/11/2022.