Privacy Policy

Privacy Policy

Effective Date: February 21, 2025

1. Introduction and Overview.

This Privacy Policy describes how Global Advertising Lawyers Alliance (“GALA,” “we,” “our,” or “us”) collects, uses, and shares information about you as well as your rights and choices about such use and sharing, and applies to your use of our website located at www.galalaw.com and any online service location that posts a link to this Privacy Policy and all features, content, and other services that we own, control, and make available through such online service location (collectively, the “Service”). This Privacy Policy does not apply to our information collection activities outside of the Service (unless otherwise stated below or at the time of collection).

By using the Service, you agree to our Terms of Use and to our collection, use and disclosure practices, and other activities as described in this Privacy Policy. If you do not agree and consent, discontinue use of the Service.

If you have any questions about our privacy practices, please contact us as set forth in the section entitled “Contact Us” below.

2. Information Collection.

A. Information You Provide.

We collect information you provide directly via the Service, such as when you register a membership account, update your member profile, access our content, subscribe to our mailing list and newsletter or contact us. This information may include contact data, such as your first and last name, e-mail address, postal address, law firm name, phone number and similar contact data, and the content of messages you send to us, such as your feedback or questions and information you provide to us. Please do not provide any information that we do not request.

B. Information Collected Automatically.

We automatically collect information about your device and how it interacts with our Service. We may use Service Providers to collect this information. Some examples of information we collect include the following:

• Service Use Data. We collect data about the features you use, the pages you visit, the e-mails and advertisements you view, the time of day you browse, your referring and exiting pages, and other similar information.
• Device Connectivity and Configuration Data. We collect data about the type of device or browser you use, your device’s operating software, your internet service provider, your device’s regional and language settings, and other similar information. This data also includes IP address and other device identifiers.

This information is automatically collected through cookies and other tracking technologies incorporated into our Service, as described below:

• Cookies. Cookies are browser based text files which are dropped on your browser when you visit a website, open or click on an email, or interact with an advertisement.There are various types of cookies, including session cookies (which are cookies that expire when you close your browser) and persistent cookies (which are cookies that do not expire until a set expiration date or you manually delete them). Cookies may be first party (which are cookies served directly by us) or third party (which are cookies served by third parties we work with).  
• Pixels. Pixels (also known as web beacons) are code embedded in a service. There are various types of pixels, including image pixels (which are one-pixel transparent images) and JavaScript pixels (which contain JavaScript code). Pixels are often used in conjunction with cookies. When you access a service that contains a pixel, the pixel may permit us or a third party to collect information from your browser or device, or to drop or read cookies on your browser.

We use these tracking technologies for a variety of purposes, including to help make our Service work, personalize your browsing experience, prevent fraud and assist with security, and perform measurement and analytics.

C. Information From Our Business Relationships

Through our business relationships with you, we collect your contact data and other information relating to you and your business. This information is not subject to this Privacy Policy except as required by applicable law.

D. Information from Other Sources.

We also obtain information about you from other third-party sources. We protect data obtained from these third parties according to the practices described in this Privacy Policy, plus any additional restrictions imposed by the source of the data. These third-party sources vary over time, but may include:

• Social networks when you reference our Service or grant permission to GALA to access your data on one or more of these services.
• Our partners and members.
• Publicly-available sources such as data in the public domain.

For further information on Third Party Services, see the section entitled “Third Parties” below.

3. Use of Information

We use information about you for our legitimate interests, including to:

• Manage our Service, including membership administration, your registration and account.
• Perform services requested by you, such as to respond to your comments, questions, and requests, and provide customer service.
• Send you technical notices, updates, security alerts, information regarding changes to our policies, and support and administrative messages.
• Prevent and address fraud, breach of policies or terms, and threats or harm.
• Monitor and analyse trends, usage, and activities.
• Conduct research, including focus groups and surveys.
• Improve the Service or other GALA websites, apps, marketing efforts, products and services.

We also use information about you with your consent, including to:

• Send you communications (including via our mailing list or newsletter) regarding our membership benefits, GALA-related conferences, and/or other opportunities, and our and our partners’ and members’ services and offers.
• Develop and display content and features.
• Fulfill any other purpose disclosed to you and with your consent.

We may use information that does not identify you (including information that has been de-identified) without obligation to you except as prohibited by applicable law. For information on your rights and choices regarding how we use your information, please see the section entitled “Your Rights and Choices” below.

4. Disclosure of Information.

We disclose information about you as follows:

• Service Providers. We may disclose your information to our agents, vendors, and other service providers (collectively “Service Providers”) in connection with their work on our behalf. Service Providers assist us with services such as payment processing, data analytics, marketing and promotional services (such as, for instance, Constant Contact), website hosting, and technical support. Service Providers are prohibited from using your information for any purpose other than to provide this assistance, although we may permit them to use aggregate information which does not identify you or de-identified data for other purposes.
• Business Purposes. We may disclose your information to our business partners or in connection with GALA-hosted and GALA-sponsored conferences, through the GALA Member Country Directory, or for other similar purposes. If you are a member of GALA, we may disclose your contact information with other members or prospective members for referral purposes.

• Merger or Acquisition. We may disclose your information in connection with, or during negotiations of, any proposed or actual merger, purchase, sale or any other type of acquisition or business combination of all or any portion of our assets, or transfer of all or a portion of our business to another business.
• Security and Compelled Disclosure. We may disclose your information to comply with the law or other legal process, and where required, in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also share your information to protect the rights, property, life, health, security and safety of us, the Service or any third party.
• Consent. We may disclose your information for any other purpose disclosed to you and with your consent.

We may disclose aggregated information which does not identify you or de-identified information about you for any purpose except as prohibited by applicable law. For information on your rights and choices regarding how we share your information, please see the section entitled “Your Rights and Choices” below.

5. Public Information.

Certain areas of the Service, such as user profiles and our blog, are designed to help you share information with the world. If you make information public through our Service, other people will have access to it. Please think carefully before making information public as you are solely responsible for any information you make public. Once you have posted information, you may not be able to edit or delete such information; however, you may have additional rights as set forth in “Your Rights and Choices” below.

6. Third Parties. We may offer our content on social networks such as a Facebook, X, and LinkedIn. Any information you provide to us when you engage with our content is treated in accordance with this Privacy Policy. Also, if you publicly reference our Service on a website, location, platform, or service operated and owned by third parties (e.g., by using a hashtag associated with GALA in a post), we may use your reference on or in connection with our Service.

7. Your Rights and Choices.

A. Review and Update of Account Information.

You may access, update, or remove certain account information that you have voluntarily submitted to us through the Service by sending an e-mail to the e-mail address set forth in the section entitled “Contact Us” below. We may require additional information from you to allow us to confirm your identity. Please note that we will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

B. Tracking Technology Choices.

• Cookies and Pixels. Most browsers accept cookies by default. You can instruct your browser, by changing its settings, to decline or delete cookies. If you use multiple browsers on your device, you will need to instruct each browser separately. Your ability to limit cookies is subject to your browser settings and limitations.
• Do Not Track. Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Except as required by law, we do not respond to preference signals.

Please be aware that if you disable or remove Tracking Technologies some parts of the Service may not function correctly.

C. Analytics.

You can opt-out of your data being used by Google Analytics through cookies by visiting https://tools.google.com/dlpage/gaoptout and downloading the Google Analytics Opt-out Browser Add-on.

D. Communications.

You can opt-out of receiving promotional e-mails from us at any time by following the instructions as provided in e-mails to click on the unsubscribe link, or e-mailing us at the e-mail address set forth in the section entitled “Contact Us” below with the word UNSUBSCRIBE in the subject field of the e-mail. Please note that you cannot opt-out of non-promotional e-mails, such as those about your account, transactions, servicing, or GALA’s ongoing business relations. Please note that your opt-out is limited to the e-mail address used and will not affect subsequent subscriptions.

E. Region-Specific Rights.

Colorado, Delaware, and Oregon

Data Practices

For residents of Colorado, Delaware, and Oregon, our practices regarding the collection, use, disclosure, and retention of your personal data are set out in the main Privacy Policy above.

We do not sell your personal data or process your personal data for purposes of targeted advertising. We do not process personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

Requests

You have the right to exercise choice over your personal data as follows:

Verifiable Requests: You have the right to:

• Confirm whether or not we are processing your personal data, and in some regions, confirm the categories of personal data we have processed;
• Access your personal data;
• Correct inaccuracies in your personal data;
• Delete your personal data;
• Obtain a copy of your personal data that you previously provided to us in a portable and readily usable format

If you are an Oregon resident, you also have the right to receive a list of the specific third parties to which we have disclosed personal data.

If you are a Delaware resident, you also have the right to obtain a list of categories of third parties to which we have disclosed your personal data.

These rights are verifiable rights, meaning that we need to verify your identity before fulfilling them. To exercise any of these rights, please email us at privacy@galalaw.com. We will confirm receipt of and respond to your request consistent with applicable law. To verify your identity, we may require you to confirm receipt of an email sent to an email address that matches our records, provide us with details relating to your history with us, or provide additional information. If we cannot verify your identity, we may deny your request in accordance with applicable law.

You have the right to revoke consent previously given to us for the processing of your personal data. To revoke consent, write us at the email or postal address set out in the “Contact Us” section below (specifying the consent you wish to withdraw). If you withdraw consent, you may not be able to receive certain services related to that consent.

Your rights are subject to exceptions and our retention practices. You have the right not to be discriminated against for exercising any of your rights. To the extent permitted by law, rights requests must be exercised through the applicable designated method listed above. You may make a rights request using an authorized agent. We will require written and signed proof of the agent’s permission to do so and we may verify your identity directly with you.

You have the right to appeal our decision in response to your request. To appeal, please write us at the email or postal address set out in the “Contact Us” section below and specify what you wish to appeal. We will review and respond to your appeal in accordance with applicable law. If we deny your appeal, you may submit a complaint to your Attorney General as follows:

• For Colorado residents: https://coag.gov/file-complaint/
• For Delaware residents: https://attorneygeneral.delaware.gov/fraud/cmu/complaint/
• For Oregon residents: https://justice.oregon.gov/consumercomplaints/ 

Your European Privacy Rights.

If you are a data subject in the European Economic Area (“EEA”), you have the right to access, rectify, or erase any personal data we have collected about you through the Service. You also have the right to data portability and the right to restrict or object to our processing of personal data we have collected about you through the Service. In addition, you have the right to ask us not to process your personal data (or provide it to third parties to process) for marketing purposes or purposes materially different than for which it was originally collected or subsequently authorized by you. You may withdraw your consent at any time for any data processing we do based on consent you have provided to us.

To exercise any of these rights, contact us as set forth in the section entitled “Contact Us” below and specify which right you intend to exercise. We will respond to your request within 30 days. We may require additional information from you to allow us to confirm your identity. Please note that we store information as necessary to fulfil the purposes for which it was collected, and may continue to retain and use the information even after a data subject request for purposes of our legitimate interests, including as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

If you have any issues with our compliance, you have the right to lodge a complaint with an EEA supervisory authority.

8. Children.

The Service is intended for a general audience and not directed to children under thirteen (13) years of age. GALA does not knowingly collect personal information as defined by the U.S. Children’s Privacy Protection Act (“COPPA”) in a manner that is not permitted by COPPA. If you are a parent or guardian and believe GALA has collected such information in a manner not permitted by COPPA, please contact us as set forth in the section entitled “Contact Us” below, and we will remove such data to the extent required by COPPA.

9. Data Security.

We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect your information from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of your information.

10. Data Privacy Framework and International Transfer.

We are based in the U.S. and the information we collect is governed by U.S. law. If you are accessing the Service from outside of the U.S., please be aware that information collected through the Service may be transferred to, processed, stored, and used in the U.S. and other jurisdictions. Data protection laws in the U.S. and other jurisdictions may be different from those of your country of residence. Your use of the Service or provision of any information therefore constitutes your consent to the transfer to and from, processing, usage, sharing, and storage of your information in the U.S. and other jurisdictions as set forth in this Privacy Policy. If your data is collected in the European Union (“EU”), we will transfer your personal data subject to appropriate or suitable safeguards, such as the Data Privacy Framework discussed below.

GALA complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF (the “UK Extension”), and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data from the EU and Switzerland to the U.S., respectively (collectively, the “DPF”). GALA certifies that it adheres to, as applicable, the EU-U.S. DPF Principles with regarding to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF, from the United Kingdom (and Gibraltar) in reliance on the UK Extension, and the Swiss-U.S. DPF Principles (collectively, the “Principles”). If there is any conflict between the terms in this privacy policy and the Principles, the Principles shall govern. The Federal Trade Commission has jurisdiction over Gala’s compliance with the DPF.

In accordance with our obligations under the DPF, and subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission, we hereby affirm our commitment to subject to the DPF Principles all personal data transferred from the EU and Switzerland in reliance on the DPF. Where we rely on the DPF Principles for onward transfers of personal data from the EU, UK, and Switzerland, including the onward transfer liability provisions, we remain responsible under the DPF Principles for third-party agents processing personal data on its behalf.

In the event that you have any inquiry, dispute, or claim arising out of or relating to our compliance with the DPF, please contact us as set forth in the section entitled “Contact Us” below. If we are unable to resolve your complaint directly, you may submit your complaint at no cost to you to JAMS at https://www.jamsadr.com/dpf-dispute-resolution. In the event there are residual complaints that have not been resolved by JAMS, or any other means, you may seek a non-monetary remedy through binding arbitration to be provided to you in accordance with the DPF.

To learn more about the DPF, and to view GALA’s certification, please visit https://www.dataprivacyframework.gov/s/

11. Changes to this Privacy Policy.

We reserve the right to revise and reissue this Privacy Policy at any time. Any changes will be effective immediately upon posting of the revised Privacy Policy. Your continued use of our Service indicates your consent to the Privacy Policy then posted. If the changes are material, we may provide you additional notice to your e-mail address.

12. Contact Us.

If you have any questions or comments about this Privacy Policy, our data practices, or our compliance with applicable law, please contact us:

By e-mail:

privacy@galalaw.com

By mail:

Global Advertising Lawyers Alliance (GALA)
28 Liberty Street, 35th Floor
New York NY, 10005
Attention: Stacy D. Bess