International Privacy Law Notice Effective Date: January 23, 2024 This International Privacy Law Notice is included in our Privacy Policy and applies to you only to the extent that you are a resident of jurisdictions where GDPR applies (such as U.K., EU, and Swiss residents), Canada, or Mexico. For additional information (or if you are not a resident of jurisdictions where GDPR applies, Canada, or Mexico), please visit our general Privacy Policy available here.

1. Rights under GDPR

This subsection applies to you only if you reside in a jurisdiction where GDPR applies. Lawful bases: If we are aware that you reside in a GDPR jurisdiction, we only collect, use, or share information about you when we have a valid reason. This is called a “lawful basis.” Our lawful bases generally map to the Purposes above, but specifically include:

• The consent you provide to us at the point of collection of your information;
• The performance of the contract we have with you;
• The compliance of a legal obligation to which we are subject; or
• The legitimate interests of Newsette or a third party.

We have a legitimate interest in gathering and processing personal data, for example: (1) to ensure that our networks and information are secure; (2) to administer and generally conduct our business; (3) to prevent fraud; and (4) to conduct our marketing activities. For GDPR purposes, the data controller is Newsette, LLC at 228 Park Ave S, Suite 62351, New York NY 10003. GDPR rights Depending on your jurisdiction’s enactment of GDPR, you may have these rights:

• Request access (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you.
• Request correction. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Request erasure. This enables you to ask us to delete or remove personal data where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised objected to processing (see below), where we may have processed your personal data unlawfully, or where we are required to erase your personal data to comply with local law.  We may not always be able to comply with your request of erasure for specific legal reasons.  If so, we will notify you at the time of your request.
• Object to processing where we are relying on a legitimate interest (or those of a third party) and you object to processing due to a perceived impact on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information that override your rights and freedoms.
• Request restriction of processing during the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful, but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise, or defend legal claims; or (d) you have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
• Request the transfer of your personal data to you or a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.  This right only applies to automated information that you initially provided consent for us to use or where we used the information to perform a contract with you.
• Withdraw consent at any time where we are relying on consent to process your personal data. If you withdraw your consent, we might not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent. For clarity, withdrawal is not retroactive.

We do not charge for access to your personal data or to exercise any of the other rights.  However, we may refuse to comply with your request or charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

2. Canadian users

This subsection applies to you only if you reside in Canada.  To exercise these rights, please contact us via email at gethelp@thenewsette.com. Canadian residents have the right to request access to your Personal Information and request the correction of your Personal Information, subject to limited exceptions set out in applicable laws. You may also withdraw your consent to the collection, use and disclosure of Personal Information at any time, subject to legal or contractual restrictions. Withdrawal of your consent may affect our ability to continue to provide you with the Services that you have or would like to receive because the continued use and disclosure of your Personal Information is a necessary part of making the product or service available to you.

3. Mexican users

This subsection applies to you only if you reside in Mexico. Mexican residents the Aviso de Privacidad addendum below applies to you.  It includes your ARCO rights and the mechanisms to limit the processing of your personal data as well as to revoke your consent, among other applicable matters with respect to your data privacy rights.

4. International Data Transfers

If you reside outside the United States, we transfer information about you for processing in the United States.  By providing your information to us, you consent to the processing of the information in the United States.  The transfer of this information to the United States is necessary for the performance of our contract for use of the Services. When we transfer personal data subject to GDPR outside of Newsette, we use standard contract clauses approved by the EU for this purpose, or another appropriate transfer mechanism. Note that U.S. law is not equivalent to GDPR.  As of the Effective Date above, the U.S. has not been deemed an “adequate” jurisdiction under GDPR for the purposes of international data transfers.  However, the EU and the U.S. are negotiating the terms of an adequacy determination that may go into effect in the years to come.

5. Changes to this International Law Privacy Notice

Any changes we may make to this International Law Privacy Notice will be posted on this page and, where appropriate, you may be notified by e-mail or in the Newsletter. Please check back frequently on our Site to see any updates to this State Law Privacy Notice. Your continued use of our Services following the posting of any updates will mean that you accept the changes we have made.

6. Contact Us

If you have any questions or would like additional information about our privacy practices, please see our Privacy Policy or contact us at gethelp@thenewsette.com.