PRIVACY POLICY

1.1. This Privacy Policy applies to the processing of your personal data as part of your visit to the https://www.narconon.org/ website (“Website”), your communication with us via email, telephone, fax and our social media channels (such as Facebook, X and Instagram), your request for more information, your purchase of materials, your registration for or participation in an event or your donation.

1.2. If you want more information on how we process personal data via cookies, social plugins and other types of tracking technology, you are kindly referred to our Cookie Policy: https://www.narconon.org/cookie-policy.html.

1.3. Where reference is made in this Privacy Policy to laws or regulations, any amendments to these laws or regulations are implicitly included.

1.4. We reserve the right to change and adapt this Privacy Policy on our own initiative. In that case, those changes and adaptations will be communicated to you via our Websites at least two weeks before those changes and adaptations will become applicable. Any further use of our Websites will be subject to the amended Privacy Policy.

2.1. We, Narconon International (“NN Int”), are headquartered at 7065 Hollywood Boulevard, Suite 100, Los Angeles, California 90028, United States of America, and are committed to protecting the privacy and security of your personal data at all times.

2.2. NN Int is a nonprofit public benefit corporation organized under Nonprofit Public Benefit Corporation Law for charitable purposes. NN Int is dedicated (i) to rehabilitate and reform former narcotic addicts, narcotic users and any other individual in need of the services of this corporation into beneficial members of society; (ii) to increase the understanding and awareness of former narcotic addicts, narcotic users and any other individuals in need of the services of this corporation; (iii) to educate the general public concerning the methodology of Narconon drug rehabilitation, education and prevention programs and their effectiveness; (iv) to educate the general public about the dangers of drug abuse and to persuade the public to refuse to become involved with harmful drugs or to cease using them.

2.3. NN Int coordinates the data processing for its own data and also processes data for the Association for Better Living and Education International (ABLE Int) which coordinates its Social Betterment campaigns.

3.1. NN Int acts as the data processor on ABLE Int’s behalf.

3.2. Personal data in the context of Social Betterment Programs coordinated by ABLE Int are controlled by ABLE Int.

4.1. When you use the Website, we process the following categories of personal data:

• Technical information, such as information concerning your device, IP address, browser type, geographical location and operating system;
• Browsing behavior, such as the length of your visit, the links you click, the pages you visit and the frequency with which you visit a page.

4.2. When you communicate with us by filling out a contact form on our Website, or via email, telephone, fax or social media channels, we process the following categories of personal data:

• Identity information you provide us with, such as your first name, last name, gender, birth date, age, the company you work for, preferences and interests;
• Contact details you provide us with, such as your email address, postal address, country, telephone number and mobile telephone number;
• Content of the communication, such as your request or question;
• Technical information of the communication, such as with whom you communicate at our end, date and time of the communication;
• Publicly available information about you, such as information publicly available on your social media profile;
• Any other personal data you provide us with.

4.3. When you order or purchase materials, such as the books available on the Website, we process the following categories of personal data:

• Identity information you provide us with, such as your first name, last name, the company you work for, preferences and interests;
• Contact details you provide us with, such as your email address, postal address, country, telephone number and mobile telephone number;
• Order details, such as the title of the book you purchased;
• Payment details, such as the amount you paid for your purchase.

4.4. When you request more information, register for or participate in an event or if you fill out any other form to which this Privacy Policy applies, we process the following categories of personal data (to the extent freely provided by you):

• Identity information you provide us with, such as your first name and last name;
• Contact details you provide us with, such as your email address, postal address, country, telephone number and mobile telephone number;
• Information necessary to carry out the registration or donation, such as criteria needed to evaluate whether you fulfill the criteria for participation;
• Payment details, such as the amount you paid for your purchase;
• Your photo if you pose for our photographer, or participate in a video interview, or provide a photo to us;
• Any other personal data you provide us with (such as your feedback from participating in the program).

4.5. Please note that the various categories described above may overlap or apply simultaneously. For example, if you fill out a questionnaire via one of our Websites, both Articles 4.1. and 4.2. apply. We receive most of your personal data directly from you, but it may happen that we receive additional information about your preferences and browsing behavior from third-party partners such as Google. If you require more information about the personal data these third parties process about you and make available to others, you are kindly requested to consult their respective Privacy Policies.

5.1. In the table below, we explain the purposes for which we process your personal data and on which legal basis we do so. We rely on the following legal bases:

• Your consent, in which you are informed of what this consent means before you freely give your consent;
• A contract with you, in order to perform that contract or in order to take steps prior to entering into a contract with you;
• A legal obligation that we have to comply with;
• Our legitimate interest, such as continuous improvements of our Website, social media channels, materials and services to ensure that you have the best experience possible, to keep them safe from misuse and illegal activity, to disseminate and promote them and to make them available to you, including our Social Betterment and Humanitarian Programs.

6.1. We will never disclose your personal data to third parties outside or ABLE Int without your consent or another lawful basis, unless we are legally obliged to do so. For example, we may rely on service providers to:

• Provide you our Website (such as a hosting provider); or
• Target our promotional information (such as a marketing company); or
• Process your order (such as a delivery service to deliver you the materials); or
• Process your payment (such as a payment service provider or a credit checking agency).

These third parties are only allowed to process your personal data on our behalf and upon our written instruction. We also warrant that all those third parties are selected with due care and are committed to observing the safety and integrity of your personal data.

6.2. With regard to any sensitive personal data, such as health-related information, we will never disclose such personal data to third parties outside Narconon International or ABLE Int without your explicit consent, unless legally obliged to do so. Additionally, certain protected health information that may be provided by you is protected as described in our Notice of Privacy Practices (https://www.narconon.org/notice-of-privacy-practices.html). In the event of a conflict between the terms of this Privacy Notice and the terms of the Notice of Privacy Practices, the terms of the Notice of Privacy Practices shall control.

6.3. We may be legally obliged to share your personal data with competent law enforcement agents or representatives, judicial authorities, governmental agencies or bodies, including competent data protection authorities.

6.4. We do not send your personal data in an identifiable manner to any other third party than the ones mentioned in this article without your explicit consent to do so. However, we may send anonymized data to other organizations that may use those data for improving materials and services as well as to tailor the marketing, displaying and selling of those materials and services.

7.1. We process your personal data both within and outside the European Economic Area (EEA), including in the USA. In order to process your personal data for the purposes outlined above, we may transfer your personal data to third parties who process on our behalf outside the EEA. Any entities outside the EEA that processes your personal data will be bound to observe adequate safeguards with regard to the processing of your personal data. For ABLE Int⁠, such safeguards result from the fact that we are directly bound by compliance with EU legislation in the context of personal data protection. For third parties, such safeguards may be the consequence of:

• The recipient country having legislation in place which may be considered equivalent to the protection offered within the EEA; or
• A contractual arrangement between us and that entity.

7.2. We may transfer anonymized and/or aggregated data to organizations outside the EEA. Should such a transfer take place, we will ensure that there are safeguards in place to ensure the safety and integrity of your data and all rights with respect to your personal data you might enjoy under applicable mandatory law.

8.1. We do our utmost best to process only those personal data which are necessary to achieve the purposes mentioned above.

8.2. Your personal data are only processed for as long as needed to achieve the purposes listed above or up until such time where you withdraw your consent for processing them. Your withdrawal of consent may imply that you can no longer use the whole or part of one of our Websites. We will de-identify your personal data when they are no longer necessary for the purposes outlined above, unless there is:

• An overriding interest of , ABLE Int or any other third party in keeping your personal data identifiable; or
• A legal or regulatory obligation or a judicial or administrative order that prevents us from de-identifying your personal data.

8.3. You understand that an essential aspect of our marketing efforts pertains to making our marketing materials more relevant to you. We do this by customizing your unique profile based on relevant characteristics as outlined in Article 5 of this Privacy Policy and then use this profile to provide you with communications, promotions, offerings, newsletters and other promotional information about materials and services that may interest you.

8.4. We will take appropriate technical and organizational measures to keep your personal data safe from unauthorized access or theft as well as accidental loss by tampering or destruction. Access by our staff members or third parties’ personnel will only be on a need-to-know basis and be subject to strict confidentiality obligations. You understand, however, that safety and security are best-efforts obligations which can never be guaranteed.

8.5. If you are registered to receive promotional information, such as communications, promotions, offerings and newsletters, via email or other person-to-person electronic communication channels, you can change your preferences for receiving such promotional information by clicking the opt-out link provided in such promotional information.

8.6. If you are registered to receive paper promotional information, such as magazines, communications, promotions, offerings and newsletters, you can object to receiving further promotional information on paper by submitting a request to our Data Protection Officer in accordance with Article 10 of this Privacy Policy.

9.1. You may at any time request information about your personal data, rectification, erasure or restriction of your personal data and you may object to further processing thereof by contacting the Data Protection Officer via dpo@able.org.

9.2. More specifically, you have the right to request access to all personal data processed by us pertaining to you, meaning that you have the right to ask us for a copy of your personal data. We reserve the right to charge a reasonable administrative fee for multiple subsequent requests for access that are clearly submitted for causing nuisance or harm to us. Each request must specify which data categories you wish access to and for what processing activities.

9.3. You have the right to rectification, i.e., to ask that any personal data pertaining to you that are inaccurate are corrected free of charge. If you submit a request for correction, your request needs to be accompanied by proof of the flawed nature of the data for which correction is asked.

9.4. You have the right to withdraw your earlier given consent for processing of your personal data.

9.5. You have the right to erasure, i.e., to request that personal data pertaining to you be deleted if these data are no longer required in light of the purposes outlined above or if you withdraw your consent for processing them. However, you need to keep in mind that a request for deletion will be evaluated by us against:

• Our and a third party’s interests, which may override your interests; or
• Legal or regulatory obligations or administrative or judicial orders, which may contradict such deletion.

9.6. You have the right to restriction instead of deletion, i.e., to request that we limit the processing of your personal data if:

• We are verifying the accuracy of your personal data; or
• The processing is unlawful and you oppose the deletion of your personal data; or
• You require your personal data to establish, exercise or defend a legal claim, while we no longer need your personal data for the purposes listed above; or
• We are verifying whether our legitimate interests override your interests if you exercise your right to object (see below).

9.7. You have the right to object to the processing of personal data for direct marketing purposes if:

• There are justified reasons connected with your particular situation that warrant such objection; and
• The processing is based on our legitimate interest and our legitimate interests do not override your interests.

9.8. You have the right to data portability, i.e., to receive from us in a structured, commonly used and machine-readable format all personal data you have provided to us if the processing is based on your consent or a contract with you and the processing is carried out by automated means.

9.9. If you wish to submit a request to exercise one or more of the rights listed above, you can contact our Data Protection Officer by sending an email to . An email requesting to exercise a right will not be construed as consent with the processing of your personal data beyond what is required for handling your request. Such a request should meet the following conditions:

We will promptly inform you of having received your request. If the request meets the conditions above and proves valid, we will honor it as soon as reasonably possible and at the latest thirty (30) days after having received your request. If you have any complaints regarding the processing of your personal data by us, you may always contact our Data Protection Officer by sending an email to dpo@able.org. If you remain unsatisfied with our response, you are free to file a complaint with competent data protection authorities (see the list of national authorities at edpb.europa.eu/about-edpb/board/members_en).

10.1. If you have any questions about this Privacy Policy, please contact our Data Protection Officer by sending an email to dpo@able.org.