Frost Bank Center Privacy Policy

Effective: July 1, 2024

Table of Contents

1. About This Privacy Policy

2. Personal Data We Obtain

3. How We Use Personal Data

4. How We Disclose Personal Data

5. Your Choices and Rights

6. Data Security

7. Third-Party Sites and Features

8. Children and Parents

9. Data Transfers

10. Retention of Personal Data

11. Changes to This Privacy Policy

12. How to Contact Us

1. About This Privacy Policy

This Privacy Policy explains how Community Arena Management, LTD. and its affiliates and subsidiaries (“we,” “our,” “us,” or the “Frost Bank Center Family”) processes personal data about individuals in connection with providing our products and services, including through our websites, apps, and digital platforms that link to or display this Privacy Policy (the “Online Services”) and our events and other programs (together the “Services”). The Policy describes the type of personal data we obtain, how we may use the data, to whom we may disclose it, the choices available regarding our use of the data, and other information about our privacy practices.

By using any of the Services, you acknowledge that you have read and agree to this Policy.

2. Personal Data We Obtain

The types of personal data we may collect include:

Contact Information: Name, email address, postal address, government identification, phone number, and other similar contact data.
User Credentials: Username, user ID, password, password hints, and similar information used to create an account and authenticate users of the Online Services.
Demographic Data: Age and gender.
Payment Data: Credit card information and billing address.
Device Data and Online Activity Information: As described in the Automated Data Collection section below.
Location Information: General location information and, with consent, precise geolocation data.
Commercial Information: Products or services purchased, obtained, or considered; events attended; or other purchasing or consuming histories or tendencies.

Interests and Preferences: Information about your favorite teams and players, your home city, or your communications preferences. We may infer your interests and preferences from other data we collect, such as the content and advertisements you interact with while using the Online Services or when attending a Frost Bank Center event.
Online Account Information: Social media information received from third-party online services (for example, social media platforms) when you connect your use of our Online Services through their services.
Communications and Interactions: Information you choose to provide to us in emails and other communications or interactions with us (for example, communications with ticket representatives, customer service inquiries, product reviews, our automated chat features, and other feedback regarding our products and services), surveys you complete, registration or sign-up forms you submit, and other features of the Online Services.
Professional and Education Information: Level of education obtained, job title, industry sector, and company name.

We collect this personal data when you use our products and services or interact with us, such as through the Online Services or while attending our games, events, and other programs. You may provide personal data to us directly, such as when you submit your information through the Online Services or communicate with us, and through automated means as described below. We also obtain your personal data from other sources, including our affiliates, our partners, our customers, our vendors, third-party online services, social media platforms, data brokers, and public sources. In addition, we may obtain other personal data about you in ways that we describe at the time of collection.

Automated Data Collection

When you interact with our Online Services or open our emails, we may obtain certain information by automated means, such as through cookies, web server logs, web beacons (including pixels and tags), technology to review how fans interact with our Online Services, scripts, and other technologies. These technologies help us:

1. Remember your information so you do not have to re-enter it.

2. Track and understand how you use and interact with the Online Services.

3. Provide you with advertising for products, services, tickets, programs, or events that might be of interest to you.

4. Tailor the Online Services to your preferences.

5. Measure the usability of the Online Services and the effectiveness of our communications.

6. Authenticate your identity, protect against fraud, and provide our products and services.

7. Manage and enhance our products and services and help them work properly.

We may use these automated technologies through our Online Services to collect information about your device, browsing actions, usage patterns, and location, such as your device IP address, location information, unique device identifiers, device type and model, device characteristics and settings, browser settings and characteristics, operating system type and version, language and country preferences, software installed on the device, usage statistics, error reports, referring emails and web addresses, and other device details. We also may obtain information about your interactions with our Online Services, such as the pages or portions of the Online Services you visit, links you click, programs or features of our Online Services you access or use, emails you open, content you engage with, referring or exit URLs, dates and times of usage, frequency and duration of your interactions, session information, clickstream and page-scroll data, and other information about your interactions with our Online Services.

Your browser may tell you how to be notified about certain types of automated technologies and how to restrict or disable them. Please note that without these technologies, you may not be able to enjoy all of the features of our Online Services. For mobile devices, you may be able to manage how your device and browser disclose certain device data by adjusting the privacy and security settings on your device.

WE WILL OBTAIN YOUR EXPLICIT CONSENT BEFORE PROCESSING ANY SENSITIVE PERSONAL DATA.

3. How We Use Personal Data

We may use personal data for the following legitimate business purposes:

Operating Our Business

We use personal data to operate our business, including providing, tailoring, and improving our products and services. Specifically:

To deliver location-based products and services and comply with territorial restrictions.
To enhance and personalize fan experiences and enjoyment when using our products and services, including the Frost Bank Center's owned and operated platforms.
To better understand fan preferences when using our products and services, including the Frost Bank Center's owned and operated platforms.
To allow you to participate in interactive features when you choose to do so.
To compile, deidentify, or aggregate personal data for our business purposes.
For analytical and research purposes, such as to better understand our fans and how they use the Online Services. This allows us to improve and expand our products and services.

Communicating with You

We may use the data we collect to communicate with you, including responding to your requests or inquiries. Specifically:

- To respond to your request if you contact us with a question or concern.
- To provide information about your account, your use of the Services, or other transactions that you request.
- To deliver news, updates, and other types of communications according to your subscriptions, alerts, and other preferences.

Marketing and Advertising

We use the data we collect for marketing or advertising purposes on behalf of ourselves, our partners, and other parties. Specifically:

- To send you promotional messages and deliver advertisements about products, services, programs, or events that may be of interest to you. These may be offered by or on behalf of the Frost Bank Center or by our partners and other third parties with whom we have a relationship.
- The promotional messages and advertisements that you see may be determined by data that we collect or receive about you, such as your demographic data, location data, usage data, interests, and preferences. We refer to this as “interest-based advertising.”

Security Compliance and Enforcement

We use the data we collect for security, compliance, and enforcement purposes. Specifically:

To protect the safety and security of our fans and our Services.
To detect and prevent abuse, fraud, or other unlawful or unauthorized activities.
To resolve disputes.
To enforce our agreements, including our policies and terms of service that govern your use of the Services.

4. How We Disclose Personal Data

There are times when the data we collect may be shared by the Frost Bank Center with third parties. We share your data for the following purposes:

Providing the Services

We sometimes engage or partner with other companies to operate the Services or perform certain functions on our behalf, delivering messages and advertising, operating our websites and digital platforms. We may provide these companies with access to your data as needed for them to perform these functions in a manner consistent with this Policy.

Among the Frost Bank Center Family

We share personal data among the companies within the Frost Bank Center Family for purposes consistent with this Policy.

As Part of a Change in Business Structure

In the event of a sale, merger, acquisition, reorganization, or similar event, or in contemplation of such an event (e.g., due diligence), your data may be among the transferred assets.

With Partners and Third Parties.

We may disclose personal data to certain business partners for advertising and marketing purposes, including so that they can provide individuals with special offers, promotions, and other materials that may be of interest to them. We disclose personal data to partners and third parties as part of marketing and advertising on and off the Online Services. We may also use third parties to serve advertisements on the Online Services and on third-party platforms. These third parties may set their own cookies or similar technologies to collect information about users’ online activities over time and across apps and websites. Please see the Your Choices and Rights section for additional information on the rights to opt out of these disclosures of personal data.

When Necessary Under Certain Circumstances

We may disclose your personal data when we believe that disclosure is necessary to:

Comply with applicable law or respond to valid legal processes.
Protect the safety and security of our fans or our Services.
Prevent fraud, abuse, or other unlawful or unauthorized activities.
Protect the rights or property of us or third parties, including enforcing the terms of our agreements.

5. Your Choices and Rights

You have many choices about how we collect, use, and share your data,

Opt-Out

You have the right to opt-out of the sale of your personal data, targeted advertising, and profiling as described in this policy or by contacting us at the addresses listed herein.

Communications Choices

You can choose whether you wish to receive promotional messages from the Frost Bank Center and which types of messages you wish to receive. If you receive promotional messages from us and would like to opt out, you may do so by following instructions within those messages.

Advertising Choices

You can opt out of interest-based advertising as described in this section. When you opt out, your selection is stored on a cookie on your device. If you delete the cookie from that device or sign in from a different device, you will need to opt out again.

Because the data used for interest-based advertising is also used for other necessary purposes (including providing the Services and for authentication and security purposes), opting out of interest-based advertising does not stop the data from being collected nor reduce the number of advertisements you will see. However, the data will not be used for interest-based advertising, which means the advertisements you do see may be less relevant to you.

When using a mobile application, you may receive interest-based in-application advertisements. Depending on your device, you may be able to reset your mobile device’s advertising identifier at any time by accessing the privacy settings on your device. In addition, each operating system (e.g., iOS for Apple devices, Android for Android devices, and Windows for Microsoft devices) provides its own instructions on how to prevent the delivery of interest-based in-application advertisements. You may review the support materials and/or the privacy settings for the respective operating system in order to opt-out of interest-based in-application advertisements. For any other devices and/or operating systems, please visit the privacy settings for the applicable device or contact (or review the applicable privacy web page of) the applicable platform operator.

Other Choices

You also have choices about the data you provide directly to us when you register for or use the Services. Please note, however, that if you choose not to provide data that is necessary to provide certain features of the Services, your use of the Services may not include those features.

You can choose not to share certain location data by adjusting the settings on your device. Please note, however, that if you choose not to share this data, you may not be able to access or use location-based Services.

You can choose to limit the data that third-party services (e.g., social media platforms) share with us using the options provided to you by the applicable third-party service (for example, the options provided by a third-party social media platform when you connect your social media account with the Services). You can also disconnect your use of the Services from the third-party service at any time using the options provided to you by the applicable third-party service. Please note, however, that if you disconnect from the third-party service, that will not delete the data we may have previously collected while you were connected.

6. Data Security

The Frost Bank Center takes security seriously. We implement reasonable administrative, technical, and physical data security practices to protect your personal data based on the volume and nature of the data processed. We take a number of steps to protect your data from unauthorized access, use, or disclosure. These steps take into account the sensitivity of the data we collect and use, as well as the current state of technology. This includes, for example, storing your data on systems that have limited access and are maintained in controlled facilities. We also use and require our vendors to use industry-standard security protocols when processing any payments for your use of the Services. It is important to remember that no system can be guaranteed to be 100% secure. We recommend that you help us keep your data safe by taking reasonable steps such as keeping your passwords private and not disclosing sensitive personal data in places that can be accessed publicly.

7. Third-Party Sites and Features

We work with a number of third parties to operate the Services. When we engage third parties in connection with operating the Services, those third parties may only collect, use, or access your data as needed for them to perform these functions.

The Services may also contain links to or integrations with other websites, platforms, or services that are not operated or controlled by the Frost Bank Center (each a “Third Party Site” and collectively the “Third Party Sites”). Please note that this Policy does not apply to those Third Party Sites. For more information on how those Third Party Sites collect, use, and share data, we suggest that you contact the operators of those Third Party Sites directly.

8. Children and Parents

Although fans of all ages are welcome at the Frost Bank Center, the Services are not directed at children under the age of 13, and our policy is to not knowingly collect personal data from children under the age of 13. We encourage parents and guardians to monitor their children’s online behavior, put parental control tools in place, and teach children not to provide their personal data through the Services without parental consent. For certain activities in which children are allowed to participate, any request for personal data (such as registration data) is directed to the parent or legal guardian.

If you have reason to believe that a child under the age of 13 has provided personal data to us without parental consent, please contact us using any of the methods described in the “How to Contact Us” section of this Policy, and we will endeavor to delete that data from our systems.

9. Data Transfers

Personal data collected by the Frost Bank Center may be stored and processed in the region in which it is collected, in the United States, and in any other region where we maintain major operations. We take steps to ensure that the data we collect under this Policy is stored and processed in accordance with this Policy regardless of where the data is located. By providing personal data in connection with the Services, you acknowledge and agree that such personal data may be transferred from your current location to the offices and servers of the Frost Bank Center and our authorized third-party service providers located in the United States. Our practice when transferring personal data is to rely on standard data protection contract clauses or individual consent.

10. Retention of Personal Data

We retain personal data for as long as necessary to provide the Services and fulfill the transactions you have requested or for other necessary purposes, such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Because these factors vary for different types of personal data, actual retention periods may vary. The criteria we use to determine the appropriate retention periods include:

How long is the personal data needed to provide the Services? This is the baseline for most data retention periods.
Do users expect that we will retain the personal data until they affirmatively remove it? For example, if a user is able to directly access, edit, or remove the personal data at any time, we may maintain the data until the user affirmatively removes it.
Is the personal data of a sensitive type? If so, a shortened data retention period will generally apply.
Has the user provided consent for a longer retention period? If so, we will retain the data in accordance with the user’s consent.
Are we subject to a legal, contractual, or similar obligation to retain the personal data? If so, we will retain the data in accordance with our obligations.

11. Changes to This Privacy Policy

We may change this Policy from time to time to reflect changes in our business, the Services, or our practices and procedures. If we do make changes, we will post any changes on this page and indicate the date on which the Policy was last revised. We encourage you to review this Policy periodically, especially before you provide personal data directly to us through the Services. Your continued use of the Services after any changes to this Policy are in effect constitutes your acceptance of the revised Policy.

12. How to Contact Us

Although we strive to make this Policy as comprehensive as possible, we know you may still have questions or concerns about how we collect, use, and share data. If you have a question, concern, or complaint regarding our data privacy practices, you may contact us by any of the following methods:

- By writing to us at One Frost Bank Center Dr, San Antonio, Texas 78219;

- By sending an email to serviceinnovation@attcenter.com; or

- By calling us at (210) 444-5140.