When you visit our website https://www.tipmedcom.com (the “Website”), use our uSummit platform (uSummit Web app, uSummit mobile apps, KEconnect, CMS), use any of our services (the “Services” which include the platform), TIP Medical Communications, Inc. (TIPMed) respects your personal privacy and is committed to adhering to federal and state privacy laws, as well as industry guidelines, to protect your identity.

Contained within this document is an outline of the services provided by TIPMed, what personal data are collected via the service, and how such data are processed. TIPMed provides the service to clients and their coordinators (organizations and representatives who have licensed the uSummit platform (the “Platform”) for their event[s]) who will use the platform for the purposes outlined within this privacy policy. If there are any terms in this privacy policy notice that you do not agree with, please discontinue use of our Services immediately.

Types of Data Collected

Personal information
We collect personal information that you freely submit to us when you use the Services, end users may need to register and disclose the information requested in the relevant forms in a complete and truthful manner. Whenever a field in the forms provided is described as “optional” or is not marked with an asterisk (*), it means that the end user is free not to communicate the requested data and the end user’s registration can be fulfilled without this information.

The information collected by the Platform for registration purposes are: first name, last name, and email address. The end user’s personal data shall be processed upon the end user’s prior, free, and informed consent, when required by the law, and solely for the purposes outlined in this privacy policy. End users are responsible for any third-party personal data obtained, published, or shared through the Platform and must confirm that they have the third party’s consent to provide the data to the client and/or TIPMed.

Information automatically collected
When you use our website we automatically collect information about your computer hardware and software through cookies. This information does not reveal your specific identity but can include your IP address, geographical location, browser type, domain names, referring website addresses, access times, click-stream data and the pages you have viewed on our site. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Information collected through the Platform

Usage data
Navigating through the app communicates usage data, which is implicitly acquired during the navigation of the end user through the internet communications protocol.

Usage data include but are not limited to type of device and device ID, IP addresses, operating system, mobile internet browser, internet service provider, referring/exit pages, click patterns, geolocation, and other operating system parameters of the device used by the end user.

Usage data are not collected for the purpose of identifying the end user. However, end users must be aware that their identification may be possible through details provided in the future, as well as information held by third parties. Usage data help us to update and improve the uSummit platform.
We also use this information for security purposes, to detect and to block security breaches, and to provide you with a safe online environment.

Processing Personal Data

Methods used
The data of end users are processed in an appropriate manner and TIPMed shall take appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the data. The data processing is carried out using computers and/or IT-enabled tools, following organization procedures and modes strictly related to the purposes indicated.

Location
The data are processed in the operation offices of the client and/or in any other location of the parties involved with the processing. For further information, please contact TIPMed at privacy@tipmedcom.com.

Retention time
The data are kept for the time necessary to provide the service requested by the end user or stated by the purposes outlined in this document; the end user can always request that the client suspend or remove the data. For further information, please contact TIPMed at privacy@tipmedcom.com.

Purposes
The data concerning the end user are collected for the purposes described below. In particular, usage data are solely processed to:

• Permit the end user to navigate within the Platform from an operational and technical perspective
• Improve the experience of end users on the Platform
• Conduct a statistical analysis in an anonymous and aggregate fashion
• Ensure the security of the data and the Services and uSummit Platform overall

Data communicated by the end user on a voluntary basis are processed to:

• Provide the service
• Fulfill specific duties for the client as set forth in the applicable laws and regulations
• Allow end users to register and customize the Platform based on their preferences
• Provide the end user informational messages and reminders related to the Platform
• Send advertising and informational messages aimed at promoting services of the client upon the consent of the end user
• Allow third parties involved in the provision of the service, where applicable, to fulfill their contractual obligations

Further details about the processing of personal data carried out by the owner can be found in the section below.

How It Works for End Users
End users must be aware that other users of the Platform may have access to, repost, or share the data they have provided on the app, which could include personal data such as name, nickname/screenname, location, as well as other information, including details of the event in which they are participating. These other users may make such information publicly available. Also, end users must be aware that the Platform allows interactions among mobile devices running the uSummit App. In particular, end users should keep in mind that it is up to the discretion of event coordinators at each event how individually identified information in the Platform is made available to other end users and who will be able to see all the information collected through the Platform. Individually identifiable information about a participant made available to others varies from event to event and includes, but is not limited to:

• Session attendance data that may be provided to the event coordinator
• When the end user has checked into a specific session or has been checked into a specific session
• Discussion data that may be provided to the event coordinator after the close of the event
• Notes that may be provided to the event coordinator when sent to the administrator
• Poll/survey data that may be provided to the event coordinator; however, these data are usually anonymous

End users who are not comfortable with the functioning of the Platform may delete the uSummit App from their personal mobile device or may ask the event coordinator to delete their personal data.

Data Communicated to TIPMed

Data automatically collected by TIPMed
The Platform requires the end user to register for the uSummit app and enter a 6-digit code. End users can register by providing the following data: first name, last name, and email address. TIPMed does not automatically collect any personal identifiable information from users. Use of the service may imply the automatic collection of some end user’s information and other usage data, such as type of device, IP address, and operating system.

Data communicated by the client
Notwithstanding the above, TIPMed may receive some personal identifiable information about end users including, but not limited to, their name and email address, primarily to support the functioning of the uSummit App relative to an event in which the app is being used.

TIPMed does not own any such data and shall process the data, as the Data Processor, according to the instructions and terms and conditions set forth in the agreement entered into with the client who remains the sole data controller.

Data Transfers

Liability for data transfers
Clients are solely liable for the lawful transmission of personal data that refer to end users to TIPMed. Clients shall inform such data subjects accurately about the intended data transfer and collect their prior explicit consent, if needed. In particular, clients shall inform their users about profiling activities possibly performed through the services provided by TIPMed. In case such profiling activities take place, clients are solely liable for the fulfillment of the notification, if required, to the competent Data Protection Authority, as well as to comply with any requirements prescribed by the applicable privacy laws, which are relevant to the aforesaid data-processing activities.

Therefore, Clients are bound to inform the end users correctly about the data treatment performed with recourse to services provided by TIPMed according to applicable law, ie, providing a privacy policy including information about data treatment performed by TIPMed on their behalf.

To the same extent, clients are solely liable for the enforcement of consent revocations or other requests received by data subjects. Clients shall inform TIPMed accurately and without undue delay about the revocation of consent or the request and about the data to be deleted, amended, rectified etc. Clients are solely liable for any damage possibly arising to third parties (eg, their users or other users) due to an unlawful processing of personal data transferred to TIPMed.

California Users
Under California’s “Shine the Light” law, California residents have the right to opt out of disclosing information to third parties for the purpose of allowing such third parties to directly market their products and services. At this time, we do not engage in this type of disclosure. Under the California Consumer Privacy Act (“CCPA”), California consumers have the following rights, which can be exercised directly or in certain cases, through an authorized agent:

Right to Know
You have the right to request information about the categories and sources of personal information we collect, our purposes for collecting the information, and the types of third parties that receive that information. Details about our data collection, use and third-party disclosures can be found above. In addition, you have the right to request a copy of your personal information. You may exercise this right once per 12 month period by sending your request to privacy@tipmedcom.com.

Right to Delete
You have the right to request that we delete some or all of the personal information that we have about you. Deleting all data will typically require the deletion of your account, along with all content. Notwithstanding the foregoing, we may retain information to provide services you have ordered, complete transactions, honor opt-outs, prevent fraud, spam, and other abuse, comply with our legal obligations, cooperate with law enforcement, and to exercise and defend our rights. You can exercise your right to delete by sending a request to privacy@tipmedcom.com.

Non-Discrimination
We won’t discriminate against you because you exercise any rights herein. To exercise your rights to know and delete, we must be able to verify your identity as the owner of the uSummit account you are inquiring about. We may not be able to fulfill your request until we can do so. In general, we verify identity by confirming you are the owner of the email address associated with the account. An authorized agent submitting a request on your behalf must also have access to the email address associated with account, along with sufficient evidence that you have authorized that person to submit the request on your behalf. Although you need not have a uSummit account to submit a request, we may not be able to locate certain information to process your quest if you don’t have one.

Nevada Users
Nevada residents have the right to opt out of the sale of certain “covered information” collected operators of websites or online services. We currently do not sell covered information, as “sale” is defined by such law, and we don’t have plans to sell this information. However, if you would like to be notified if we decide in the future to sell personal information covered by the Act, you can send your request to privacy@tipmedcom.com. You can provide us with your name and email address here. You are responsible for updating and change in your email address by the same method and we are not obligated to cross-reference other emails you may have otherwise provided us for other purposes. We will maintain this this information and contact you if our plans change. At that time, we will create a process for verifying your identity and providing an opportunity to complete their opt-out. Please become familiar with our data practices as set forth in this Privacy Policy. We may share your data as explained in this Privacy Policy, such as to enhance your experiences and our services, and those activities will be unaffected by a Nevada do not sell request.

Accessing, Correcting, or Updating Personal Information
The end user has the right to access your personal information to correct, amend, update, or delete information that is inaccurate or to request that we no longer use your personal information. If the end user has any questions or concerns regarding TIPMed’s collection, use, or disclosure of your personal information or if the end user wishes to change, amend, delete, or review your personal information, please send a letter or email with your request and current contact information to TIPMed at:

TIP Medical Communications, Inc.
Attn: Privacy Department
555 E. Main Street
Chester, NJ 07930
Or Email: privacy@tipmedcom.com

We will use reasonable efforts to respond to requests as soon as possible. When updating end user personal information, we may ask requester to verify his/her identity before we can act on the request.

Personal data can be collected using some of the following services:
Analytics
This service is used to analyze aggregate usage data.

Google Firebase
Personal data collected: usage data
Place of processing: U.S.
Privacy policy: https://firebase.google.com/support/privacy

Hosting and back-end infrastructure
This type of service is used to host data and files that enable the Platform to be run and also provides an infrastructure to run specific features of the uSummit Platform.

Amazon Web Services
Place of processing: U.S.
Privacy policy: https://aws.amazon.com/privacy/

Push notifications
The Platform may send push notifications to the user.

Contacting TIPMed
If you have further questions regarding our privacy policy, please contact us to let us know at:

TIP Medical Communications, Inc.
Attn: Privacy Department
555 E. Main Street
Chester, NJ 07930
Or Email: privacy@tipmedcom.com

Last modified: October 16, 2023