Virginia addendum (VCDPA)
This addendum supplements our baseline Privacy Policy for Virginia residents under the Virginia Consumer Data Protection Act (Va. Code § 59.1-575 et seq.).
Your rights
- Access — confirm whether we process your data and obtain a copy.
- Correction — fix inaccuracies, taking into account the nature of the data.
- Deletion — delete personal data we hold about you.
- Portability — receive a copy in a portable, machine-readable format.
- Opt out of: targeted advertising; sale of personal data; profiling in furtherance of decisions that produce legal or similarly significant effects. Galeira does none of these, so opt-out has nothing to act on, but the right exists.
Sensitive data — consent
Under VCDPA § 59.1-578(A), processing sensitive data (including biometric data, data of a known child, precise geolocation) requires opt-in consent. Our face-grouping feature (biometric embeddings) is off by default and only enabled by the event host with guest consent on file; see our host consent template.
Children
We process personal data of children only with verifiable parental consent under COPPA. Our product is not directed at children under 13.
How to exercise
Email privacy@galeira.com. We respond within 45 days (with one 45-day extension when reasonably necessary, with notice). First request each year is free; we may charge a reasonable fee for excessive requests.
Appeal
If we refuse to act on your request, you may appeal by replying to the refusal email with the word "Appeal" in the subject. We respond to appeals within 60 days. If we deny the appeal you may contact the Virginia Attorney General at oag.state.va.us.