Privacy Policy

This Privacy Policy applies to personal data collected online by Vista Site Selection, LLC (collectively, "Vista" or "we" or "us" or "our"), including through its websites, microsites, or mobile sites that expressly adopt, display or link to this Privacy Policy (collectively, the "Website"). "Social Media Pages" are the official social media pages we operate on Facebook, Twitter, LinkedIn, and other social media platforms.

If you have any questions about this Privacy Policy, please contact us at privacy@vistasiteselection.com.

1. What information does Vista collect about you?

We may collect different types of information about you, including:

• Device Information: When you visit our Website, interact with our Social Media Pages or online ads, or open our emails, we learn about your browser, device type, IP address, internet service provider, and other technical information about your device.
• Location Information: We use various technologies to learn your geographic location, including by collecting your IP address or other device information, which may depend on your device's settings for location services.
• Contact Information: We may collect contact information, which includes personal information like name, email address, phone number, and home or business address.
• Call and Email Records: If you call or email us, we may keep records of those conversations.
• Website Interactions: We collect information about your interactions with our Website including pages visited, links clicked, buttons clicked, mouse movement, and scroll behavior. This information may then be used to replay your interaction, which may be used to troubleshoot Website issues, either individually or in the aggregate, to improve Website functionality and to analyze user interaction.
• Submitted Content: We collect any content you submit to our Website, Social Media Pages, or to us in person including comments, photos or videos.
• Demographic Information: We have access to demographic details about our customers like birthdate, gender, ZIP code, and other similar details.
• Job Applications: If you apply for employment, we have access to the content you provide such as your resume, cover letter, and any information contained therein.
• Social Media Usage: We receive aggregated information about people who visit and interact with our Social Media Pages. "Aggregated" means information that doesn't include personal information associated with identified natural persons.

2. How do we collect your information?

We may collect the information described above directly from you, from third parties we partner with, or through cookies or other automated means. These sources may include:

• You: We collect information directly from you, whenever you: visit our Website; contact us with questions or comments; engage our services; upload content to our Website or Social Media Pages; complete forms for or provide information in connection with a job application; or fill out any forms on our Website or Social Media Pages.
• Your device or browser: Certain information is automatically collected from your device or browser and analyzed when you visit our Website, interact with our Social Media Pages or online advertising, or open our emails.
• Third parties: We work with third parties who provide services to us such as analytics or advertising. Your information may be collected and processed independently in accordance with the third party's own privacy notices.
• Social media platforms: Social media platforms share information, which is typically aggregated and doesn't include personal information, with us.
• Cookies: We use cookies (small data files stored on your device or browser) and other similar technologies to automatically collect information when you visit our Website or interact with our emails. For more information about how we use cookies, you can view our cookie policy.

3. How do we use the information we collect about you?

We only use your information for legal and legitimate purposes, such as:

• Providing Services: Providing our services to you or to our customers, promoting and marketing our services, improving our services, communicating with you about our services, and complying with our legal obligations.
• Advertising: Presenting advertising online and via email, or other communication channels, including through partnerships with social media platforms and internet search engines.
• Understanding Our Website Users: Analyzing your activity with us, including your interactions with our Website, Social Media Pages, emails, or other forms of communications.
• Communications: Communicating with you, including responding to your requests, asking for feedback through surveys or other messages, or sending you information that we think may be of interest to you.
• Website Experience: Serving content on our Website and Social Media Pages and developing our services.
• Performing a Contract: Processing your information in connection with pre-contract activities and discussions with you, or performing a contract that we have with you.
• Recruitment: Recruiting and hiring, including verifying your eligibility for employment and assessing your suitability for any position for which you may apply at Vista.
• Security: Protecting Vista, our customers, and our Website users from fraud, security threats, and other illegal or harmful activity.
• Legal Obligations: Complying with legal and regulatory requirements and responding to requests from courts or other government bodies.
• Other Legitimate Interests: Processing your information for any of our other legitimate interests not described above.

4. How long do we keep your information?

We will retain your information for as long as is necessary to fulfil the purpose for which your information was collected and in accordance with our internal retention procedures, or as otherwise necessary to satisfy our legal obligations. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances we may anonymize your information for research or statistical purposes in which case we may use such anonymized information indefinitely.

5. How does Vista share information with Service Providers and Third Parties?

Vista may share personal information with third parties for certain purposes, including:

• Service Providers: We partner with third parties to assist with many aspects of our business, including our professional advisors and other IT and administrative service providers who help us communicate with you.
• Marketing Providers: We partner with third parties to assist with the advertising and marketing of our business.
• Operations: We operate our Website from the United States of America and store the information we collect through our Website in the United States of America. We market and provide services, however, in countries throughout the world.
• Other Third Parties: We will disclose information about you, including to government bodies or law enforcement agencies, when we believe it to be necessary for compliance with the law or to protect our Website users, our Website, or the public.

6. What are my privacy choices?

• Location Information: You can disable location-based services on your mobile device or web browser by adjusting the settings on your device or browser.
• Emails: You may opt-out of our marketing emails by following the instructions listed in any email communications that you receive or by contacting us.
• Social Media: This Privacy Policy does not cover the privacy and security practices of social media platforms on which Vista has Social Media Pages. Please review the terms, policies, and settings of those social media platforms.
• Online Advertising: For information about opting out of third party advertising, visit NAI Opt-Out or DAA.
• Google Analytics: You can opt out of Google Analytics across all websites. To do so, visit Google Analytics Opt-out.
• Postal Marketing: To opt-out of other forms of marketing (such as postal marketing), please contact us using the contact details provided below.

7. How does Vista address children's privacy?

Our Website and Social Media Pages are not intended for children under 16. No one under 16 should share any personal information with us. We do not knowingly collect any personal information from children under 16. To request deletion of personal information relating to a child under 16, please email privacy@vistasiteselection.com.

8. How does Vista secure personal information?

We employ physical, technical, and administrative procedures to safeguard the personal information we collect online. While we use these security measures on our Website, you should be aware that 100% security is not always possible.

9. How does our Website interact with third-party websites and content?

For your convenience, we may enable you to navigate to third-party sites through links on our Website. We do not endorse these third-party sites, do not have any affiliation with these third-party sites, and we do not control and are not responsible for their Internet and web practices. Whether the third-party content appears within our Website environment (like a map frame), or you leave our Website for another website to view it, the terms, conditions, and privacy policies of those other websites govern your online experience. Please review their separate terms of service and privacy policies if you have any questions about their practices.

10. Where is personal information stored and processed?

The global nature of our business means that your information may be transferred outside the jurisdiction in which you provide it, including, potentially, to countries that do not require organizations by law to look after your personal information in the way in which you have come to expect in your own country. Where we transfer your personal information across national boundaries, we will protect your information by ensuring that those transfers are made in compliance with all relevant data protection laws.

11. What other terms govern my use of the Website?

Your use of the Website is also governed by the Disclaimer & Disclosures.

12. Will this Privacy Policy change?

We may make changes to this Privacy Policy at any time to take into account new or changing circumstances, so please review it periodically. If we make a material change to our information collection, use, or disclosure practices specified in this Privacy Policy, it will be applied only to information collected on a going forward basis. By visiting the Website or submitting information, you agree to the terms of this Privacy Policy and consent to receive notice of any material changes.

13. Your U.S. State Privacy Rights

Residents of California, Virginia, Connecticut, Colorado, and Utah have certain rights concerning the processing and use of their Personal Data. If your Personal Data is subject to a privacy law in your state, you may have certain privacy rights, including the right to:

• Know, access, and confirm your Personal Data.
• Delete the Personal Data we have about you, subject to exceptions under applicable law.
• Correct inaccuracies in your Personal Data.
• Obtain your Personal Data in a portable and readily usable format.
• Opt-out of the use or processing of your Personal Data for profiling or targeted advertising.
• Opt-out of the sale of your Personal Data.

We will not discriminate against you because you have exercised any of your rights.

How to Submit a Request

If you wish to exercise the rights listed above, you may submit a request by emailing privacy@vistasiteselection.com or by calling us toll-free at 888.254.7312. Please include "Privacy Rights Request" in the subject line and provide your full name, email address, and valid physical address. You may only make one request per email.

Authorized Agent

You may authorize an agent to exercise any of these rights on your behalf by contacting us at privacy@vistasiteselection.com or toll-free at 888.254.7312. If you use an agent, we will take measures to verify your agent's authorization.

"Do Not Sell" Rights

We do not sell Personal Data or share Personal Data about you for purposes of cross-context behavioral advertising, profiling, or targeted advertising.

14. Your International Privacy Rights

If you are located in the EEA, the United Kingdom, or Switzerland, you may have certain rights and protections under applicable laws regarding the processing of your Personal Data, including the right to:

• Know whether we're processing your Personal Data.
• Request a copy of the Personal Data we hold about you.
• Request that we correct inaccurate or incomplete Personal Data.
• Request that we erase your Personal Data, subject to exceptions under applicable law.
• Request that we transfer any Personal Data we hold about you to another company.
• Under certain circumstances, restrict certain types of processing.
• Object to having decisions made about you by automated processes or profiling.
• Withdraw your consent.
• Lodge a complaint with the supervisory authority.

Legal Basis for Processing

We will process your Personal Data only where we have a lawful basis for doing so. These "lawful bases" for processing include: (a) the performance of a contract; (b) compliance with our legal obligations; (c) for our legitimate interests; (d) the establishment, exercise or defense of legal claims; (e) to carry out tasks in the public interest; or (f) to comply with anti-money laundering or counter-terrorist financing obligations.

Data Protection Principles

When processing your Personal Data, Vista adheres to the following principles:

• Lawfulness, Fairness and Transparency: Personal Data must be processed lawfully, fairly, and in a transparent manner.
• Purpose Limitation: Personal Data must be collected for specified, explicit, and legitimate purposes.
• Data Minimization: Personal Data must be adequate, relevant, and limited to what is necessary.
• Accuracy: Personal Data must be accurate and kept up to date.
• Storage Limitation: Personal Data must be kept for no longer than is necessary.
• Integrity and Confidentiality: Personal Data must be processed in a manner that ensures appropriate security.

Data Protection Authority

If you have a concern about our processing of Personal Data that we are not able to resolve, you may have the right to lodge a complaint with the Data Protection Authority where you reside:

• For individuals in the EEA: edpb.europa.eu
• For individuals in the UK: ico.org.uk
• For individuals in Switzerland: edoeb.admin.ch

15. How may I contact Vista?

If you have any questions, comments, or concerns about this Privacy Policy, please contact us by emailing Info@vistasiteselection.com. When writing us, please make sure to include your name and mailing address or telephone number so that we can contact you. You may also contact:

Vista Site Selection, LLC
52 East Gay Street
Columbus, Ohio 43215