TRANSIT MOBILITY ALLIANCE CONFERENCE 2026

This Event Privacy Notice (“Notice”) supplements the Transit Technologies Privacy Policy (available at https://www.transit-technologies.com/privacy-policy) and describes how Transit Technologies, LLC (“Transit Technologies,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information in connection with the Transit Mobility Alliance Conference 2026 (“TMAC 2026” or the “Conference”), held October 27-30, 2026, at the Marriott Rivercenter, San Antonio, Texas.

To the extent this Notice conflicts with the Transit Technologies Privacy Policy on matters specific to the Conference, this Notice controls.

1. INFORMATION WE COLLECT

We collect the following categories of personal information in connection with the Conference:

1.1. Registration Information (collected via Whova, our registration platform partner):

• Full name, job title, organization/employer name
• Email address, phone number, mailing address
• Ticket type and payment information (processed by Whova’s payment processor; Transit Technologies does not directly store payment card data)
• Dietary restrictions and accessibility accommodation requests
• NAFA membership status (for CAFM Certification registrants)

1.2. On-Site Information:

• Badge scan data and session attendance records
• Check-in and check-out records
• Photographs, video recordings, and audio recordings captured during Conference sessions and events
• Information voluntarily provided at The Pit Stop, Executive Round Table sessions, or through networking interactions

1.3. Digital and Technical Information:

• Information collected through the Whova event app, including profile information, in-app messaging, session bookmarks, and networking activity
• Device identifiers, IP addresses, and usage data collected automatically through the event app and Conference website

1.4. Information from Sponsors and Exhibitors:

• If you voluntarily visit a sponsor or exhibitor booth and consent to badge scanning or other data collection by that sponsor or exhibitor, the sponsor or exhibitor collects your information under its own privacy policy. We are not responsible for sponsor or exhibitor data practices.

2. HOW WE USE YOUR INFORMATION

We use personal information collected in connection with the Conference for the following purposes:

• Event Administration: Processing registrations, issuing badges, managing attendance, coordinating meals and accommodations, and communicating Conference logistics.
• Session and Content Delivery: Managing session schedules, facilitating The Pit Stop and Executive Round Table experiences, and delivering certification training (CAFM).
• Networking: Enabling attendee networking features through the Whova app (subject to your Whova privacy settings).
• Promotional and Marketing Use: Using photographs, video, and audio recordings for Transit Technologies’ promotional, educational, and marketing materials, including on our website, social media, and in future Conference marketing.
• Safety and Security: Managing on-site security, responding to incidents, and complying with venue safety requirements.
• Client Impact Awards: Processing nominations and administering the awards program.
• Analytics and Improvement: Analyzing attendance patterns, session popularity, and feedback to improve future events.
• Legal Compliance: Fulfilling legal obligations, resolving disputes, and enforcing our Terms.

3. HOW WE SHARE YOUR INFORMATION

We may share your personal information with the following categories of recipients:

4.1. Whova:

Conference registration and the event app are provided by Whova, Inc. When you register for the Conference or use the Whova event app, Whova collects and processes your information as both a service provider to Transit Technologies and under Whova’s own privacy policy (available at https://whova.com/privacy/). We encourage you to review Whova’s privacy policy. Transit Technologies has entered into a data processing agreement with Whova governing the handling of attendee data.

4.2. Passkey (hotel booking):

Hotel reservations at the conference rate are facilitated through Passkey. When you book a hotel room through the Conference booking link, Passkey and Marriott process your information under their respective privacy policies.

4. THIRD-PARTY PLATFORMS

4.1. Whova:

Conference registration and the event app are provided by Whova, Inc. When you register for the Conference or use the Whova event app, Whova collects and processes your information as both a service provider to Transit Technologies and under Whova’s own privacy policy (available at https://whova.com/privacy/). We encourage you to review Whova’s privacy policy. Transit Technologies has entered into a data processing agreement with Whova governing the handling of attendee data.

4.2. Passkey (hotel booking):

Hotel reservations at the conference rate are facilitated through Passkey. When you book a hotel room through the Conference booking link, Passkey and Marriott process your information under their respective privacy policies.

5. DATA RETENTION

We retain personal information collected in connection with the Conference as follows:

• Registration and attendance data: Up to three (3) years following the Conference, for event administration, analytics, and future Conference planning.
• Photographs, video, and audio recordings: Retained indefinitely for promotional and archival purposes, unless you request removal (see Section 6).
• Payment data: Retained by Whova and its payment processor in accordance with PCI DSS requirements and applicable law. Transit Technologies does not retain payment card data.
• Dietary and accessibility information: Deleted within thirty (30) days following the Conference.

6. YOUR RIGHTS AND CHOICES

6.1. Opt-Out of Sponsor Data Sharing:

You may opt out of having your information shared with Conference sponsors and exhibitors by emailing [email protected] or by updating your preferences in the Whova app. Opting out will not affect your Conference experience or access to sessions and events.

6.2. Photo/Video Opt-Out:

If you do not wish to appear in Conference photography or recordings, contact [email protected] before the Conference. We will use reasonable efforts to accommodate your request, though we cannot guarantee exclusion from all event media.

6.3. Access, Correction, and Deletion:

You may request access to, correction of, or deletion of your personal information by contacting us at [email protected]. We will respond to verifiable requests within the timeframes required by applicable law.

6.4. Texas Data Privacy and Security Act (TDPSA):

If you are a Texas resident, you have the right to: (a) confirm whether we are processing your personal data; (b) access your personal data; (c) correct inaccuracies; (d) delete your personal data; (e) obtain a portable copy of your personal data; and (f) opt out of the processing of your personal data for targeted advertising, sale, or profiling. To exercise these rights, contact [email protected]. We do not sell personal data or use it for profiling in furtherance of decisions that produce legal or similarly significant effects.

6.5. California Residents (CCPA/CPRA):

California residents have rights under the California Consumer Privacy Act, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information. To exercise your rights, contact [email protected].

6.6. Other State Privacy Laws:

Residents of states with applicable consumer privacy laws (including Colorado, Connecticut, Virginia, and others) may exercise their rights under those laws by contacting [email protected].

7. INTERNATIONAL ATTENDEES

7.1. If you are attending from outside the United States, your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence.

7.2. For attendees from the European Economic Area (EEA), United Kingdom, or Switzerland:

We process your personal information on the basis of contractual necessity (to administer your Conference registration), legitimate interests (event operations, security, and analytics), and consent (for promotional photography and marketing communications). You may withdraw consent at any time by contacting [email protected]. We implement appropriate safeguards for cross-border data transfers, including standard contractual clauses where required.

7.3. EEA, UK, and Swiss attendees have the right to lodge a complaint with their local data protection authority.

8. CHILDREN

The Conference is not directed to individuals under 18 years of age. Transit Technologies does not knowingly collect personal information from children under 18 at the Conference. If you believe that a child under 18 has provided personal information in connection with the Conference, please contact us at [email protected] so that we may take appropriate steps to delete such information.

9. SECURITY

We implement administrative, technical, and physical safeguards designed to protect personal information collected in connection with the Conference, including encryption, access controls, and secure data transmission. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10. UPDATES TO THIS NOTICE

We may update this Notice from time to time. If we make material changes, we will post the updated Notice on the Conference website and, where feasible, notify registered Attendees by email. The “Effective Date” at the top of this Notice indicates when it was last revised.

11. CONTACT US

For questions about this Notice or to exercise your privacy rights:

Email: [email protected]

Mail: Transit Technologies, LLC Attn: Privacy / TMAC 2026 2459 Wilkinson Blvd, Suite 200, Charlotte, NC 28208