EWING SARCOMA INSTITUTE
Website Privacy Policy
Last Updated: July 2025

Use Cookies and Other Online Tracking Technologies on our Website: Like many websites, we use cookies and other online tracking technologies, such as pixels, Flash objects, web beacons, embedded scripts, clear GIFs, and location-identifying technologies to collect information about you, your device and your visit to our Website, including to identify you and/or your location, record your preferences, track your usage of the Website, and improve the Website. Other technologies, including web storage and identifiers associated with your device, may be used for similar purposes.

You can delete cookies and other online tracking technologies from your device by clearing your browser history. This will delete all online tracking technologies from all websites and applications you have visited since you last cleared your browser history. You can also set your browser to prevent certain online tracking technologies from being placed on your device. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you may need to opt-out again. To learn more, please see the links below:

• Firefox
• Google Chrome
• Internet Explorer
• Safari / Safari Mobile

Please note, if you disable the use of online tracking technologies on our Website, this may affect your experience. For example, certain features of the Website may not work. If you use different devices to visit our Website, (for example, your computer, smartphone, tablet etc.), you must ensure that each browser on each device is adapted to your preferences. To learn more about cookies, please see: https://www.aboutcookies.org/.

Legitimate Interests/Consent: To the extent we rely on our legitimate interests as a legal basis for processing of your Personal Data, we have considered the balance between our own interests (among other things, the lawful and efficient operation of our Services) and your interests and we believe that (i) you would reasonably expect us to carry out the kind of processing referenced above and (ii) such processing will not cause you any harm and/or will not seriously impact your rights and freedoms with regard to data privacy. You have the right to withdraw any consent given to us for the processing of your Personal Data.

Disclosures of Personal Information
Please note, we do not “sell” (as that term is defined under the applicable data protection laws) your Personal Data; however, we may disclose certain information to our service providers, advertising and marketing companies, our business partners, and other third-party vendors, as directed by you.

More specifically, we may share your Personal Data with the following categories of recipients:

• Service providers, including those who work to enhance our Website or Services and to protect the security of our systems.
• Affiliates and business partners, including those that have a related interest in our Services.

Where necessary, including to comply with any legal or business operations obligations, we may also disclose the above categories of Personal Data to the following categories of third parties: (i) judicial courts, regulators, or other government agents purporting to have jurisdiction over the group or opposing counsel and parties to litigation; (ii) any relevant third party acquirer(s), in the event that we sell or transfer all or any relevant portion of our business or assets; (iii) other third parties as may otherwise be permitted by law; and (iv) with your direction or consent.

Cross-Border Transfers
We may transfer your Personal Data to a third party that is located in a jurisdiction other than the one from which it was collected, including to countries that have not been deemed to have an adequate level of protection for the rights and freedoms of data subjects. If we do transfer your Personal Data to another jurisdiction, we will do so following due diligence and provided that the data recipient is subject to contractual agreements imposing obligations on it to ensure appropriate technical and organization measures are implemented and maintained at all times to prevent the unauthorized and unlawful processing of Personal Data, and the accidental loss or destruction of, or damage to, Personal Data, consistent with our obligations under applicable data protection laws.

Retention of Personal Data
We will only retain your Personal Data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

Security of Personal Data
The security of all Personal Data provided to us is important and we take reasonable steps designed to protect your Personal Data. We maintain reasonable administrative, technical, and physical safeguards designed to protect Personal Data that we receive against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure or use.

Your Choices & Rights
Depending upon where you are located, certain choices and rights may be available to you under applicable data protection laws. If you have questions about what rights may apply to you, please contact us at pma@esinst.org. Rights that may apply to you, include the following:

1. Right to Know and Access. You may have the right to know and access the Personal Data we have collected about you. We will provide to you your Personal Data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit your Personal Data to another controller.
2. Right to Delete. You may have the right to request that we delete the Personal Data we have collected about you, subject to certain legal exceptions.
3. Right to Correct. You may have the right to request that we correct any inaccurate Personal Data we have collected about you.
4. Rights to Opt-Out of Targeted Advertising, Sale of Personal Data, and/or Profiling. You may have the right to opt-out of our processing of your Personal Data for the purposes of (i) targeted advertising, (ii) the sale of Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Please note we do not sell Personal Data, nor do we process Personal Data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects and therefore these opt out rights do not apply.
5. Right to Appeal. You may have the right to appeal any of our responses with respect to your Personal Data privacy rights requests. You may do so by contacting us at pma@esinst.org with details regarding your initial privacy rights request and your appeal.
6. Right to No Discrimination. You will not receive any discriminatory treatment by us for the exercise of your privacy rights as outlined in this Privacy Policy.
7. Right to Contact Supervisory Authority: You may have the right to complaint to the relevant supervisory authority.

Verifying Your Privacy Rights Request: Only you, or a person that you authorize to act on your behalf, may make a request related to your Personal Data. In the case of access and deletion, your request must be verifiable before we can fulfill such request. Verifying your request will require you to provide sufficient information for us to reasonably verify that you are the person about whom we collected Personal Data, or a person authorized to act on your behalf. We will only use the Personal Data you have provided in a verifiable request in order to verify your request. Please note that we may charge a reasonable fee or refuse to act on a request if such request is excessive, repetitive, or manifestly unfounded.

• Authorized Agents: If you are submitting a privacy rights request on behalf of another individual, we may require more information from you, or you authorized agent to verify that you are the person directing the agent. We may ask you to provide a signed authorization for your agent to make the request or to verify your identity or confirm your request directly with us.

Do Not Track: Our websites and apps are not designed to respond to “do not track” requests from browsers.

“Shine the Light” and “Eraser” Laws: Residents of the State of California may request a list of all third parties to which we have disclosed certain information during the preceding year for those third parties’ direct marketing purposes. We do not disclose information to third parties for their direct marketing purposes.

Third-Party Links
We may provide links to other websites or resources provided by third parties. These links are provided for your convenience only. We have no control over the contents of those sites or resources and accept no responsibility for them or for any loss or damage that may arise from your use of them. If you decide to access any of the third-party links on the Website, you do so entirely at your own risk and subject to the terms and conditions of those websites.

Children
We do not knowingly collect personal information from children under the age of 18 through our Website. If you are under 18, please do not give us any Personal Data. We encourage parents and legal guardians to monitor their children’s internet usage and to help enforce our Privacy Policy by instructing their children never to provide us Personal Data. If you have reason to believe that a child under the age of 18 has provided Personal Data to us, please contact us, and we will endeavor to delete that Personal Data from our databases.

Changes to this Privacy Policy
This Privacy Policy is effective as of the date stated at the top of this Privacy Policy. We may change this Privacy Policy from time to time. By accessing and using the Website after we notify you of such changes to this Privacy Policy, you are deemed to have accepted such changes. Please refer back to this Privacy Policy on a regular basis.

Contact Us
If you have any questions regarding this Privacy Policy or our privacy practices, please contact us at pma@esinst.org. You may also write to us at the following address:
Ewing Sarcoma Institute
5433 La Sierra Drive
Dallas, TX 75231

If you are located in the United Kingdom or European Economic Area (“EEA”) and believe we have not adequately resolved any issues, you may contact the Supervisory Authority concerned.