Colorado addendum (CPA)
This addendum supplements our baseline Privacy Policy for Colorado residents under the Colorado Privacy Act, C.R.S. § 6-1-1301 et seq., and the Attorney General's implementing rules (4 CCR 904-3).
Your CPA rights
- Right of access
- Right to correction
- Right to deletion
- Right to data portability — up to twice per year.
- Right to opt out of: targeted advertising; sale of personal data; profiling in furtherance of decisions producing legal or similarly significant effects.
Universal Opt-Out Mechanism (UOOM)
We honour browser-level UOOM signals approved by the Colorado AG (including Global Privacy Control). When a UOOM signal is present, we treat it as an opt-out of any future targeted advertising or sale even where consent had previously been granted.
Sensitive data — consent
Processing sensitive data (CPA § 6-1-1303(24): biometric, child, precise geolocation, racial / ethnic origin, religious beliefs, mental / physical health diagnosis, sexual orientation, citizenship) requires opt-in consent. Our face-grouping feature (biometric embeddings) is off by default; opt-in is collected by the event host before the event.
Children
We require verifiable parental consent for any data collection from a child known to be under 13, consistent with COPPA.
How to exercise
Email privacy@galeira.com. Acknowledged within 5 business days, resolved within 45 days (one 45-day extension where reasonably necessary).
Appeal
If we deny your request you may appeal by replying with subject "Appeal"; we respond within 60 days. If denied on appeal you may complain to the Colorado AG at coag.gov/file-complaint.