Privacy policy

This policy explains what personal data Denver Gold Group collects in connection with its conferences and services, why we collect it, who we share it with, and the choices and rights you have.

Who we are

Denver Gold Group, Inc. (“DGG”, “we”, “us”) is a Colorado non-profit corporation with its principal place of business at 3900 S Wadsworth Blvd, Suite 455, Lakewood, Colorado 80235, United States. DGG produces institutional investor-issuer conferences, including Mining Forum Americas and Mining Forum Europe, and publishes editorial coverage through Mining Forum Live.

DGG is the controller of the personal data described in this policy.

Privacy inquiries: admin@denvergold.org, or by post to Denver Gold Group, Inc., 3900 S Wadsworth Blvd, Suite 455, Lakewood, Colorado 80235, United States.

Our representative in Switzerland for the purposes of Article 14 of the Federal Act on Data Protection is BDO AG, Schiffbaustrasse 2, 8031 Zürich, Switzerland.

Scope

This policy covers personal data we collect through our websites, our registration and event management systems, our email communications, and our events, including Mining Forum Americas, Mining Forum Europe, and any other DGG conference or program.

It does not cover the practices of participating companies, sponsors, venues, hotels, or other third parties you may interact with at or around our events. Those organizations are independent controllers of any data you give them, and their own policies apply.

What we collect

Information you provide. Name, job title, employer, business email address, business telephone number, postal address, and billing information when you register for an event, apply for membership, or create an account. Investor registrants may also provide assets under management, investment mandate, geographic focus, and similar profile information used to qualify registration and to match meetings. Issuer registrants provide company profile information including ticker, exchange, market capitalization, commodity, and project locations. We also collect dietary requirements and accessibility needs where you supply them, and any information contained in correspondence you send us.

Information generated by your use of our systems. Account activity, registration history, meeting requests, meeting acceptances and declines, scheduled meeting records, session and presentation attendance, and support correspondence.

Information collected at events. Badge scan records at session entrances, exhibit areas, and registration desks, which record the time and place of each scan. We do not otherwise track your movement within the venue, and we do not provide individual-level movement data to participating companies. We also collect photographs, video, and audio recordings made at the event, as described in section 9.

Information collected automatically online. IP address, browser type and language, device and operating system information, referring URL, pages viewed, and dates and times of access, collected through server logs and analytics tools. Cookies and similar technologies as described in section 10.

Information from other sources. Publicly available business information, including company filings, exchange data, and professional profiles, used to verify registrations and maintain accurate company records. Information provided by your employer when it registers you as a delegate. Information from event partners where you have registered through them.

We do not seek special category data as defined by the GDPR, and dietary and accessibility information should be limited to what is necessary for us to accommodate you.

Why we use it, and on what basis

We use personal data to:

• register you for events, process payment, issue credentials, and administer attendance
• operate the one-to-one meeting system, which includes making your name, title, company, and registration profile visible to other registered participants so that meetings can be requested and scheduled
• verify that registrants meet the eligibility criteria for the category under which they register
• communicate with you about events you have registered for, including logistics, schedule changes, and follow-up
• send you invitations and information about future DGG events and programs
• produce editorial and promotional coverage of our events through Mining Forum Live and our other channels
• compile aggregate statistics on attendance, participation, and event performance
• maintain the security and integrity of our systems, prevent fraud, and enforce our terms
• meet our legal, tax, accounting, and regulatory obligations

Where the GDPR or UK GDPR applies, our legal bases are:

• Performance of a contract with you, or steps taken at your request before entering one, for registration, payment, credentialing, meeting scheduling, and event delivery.
• Legitimate interests for eligibility verification, meeting matching, badge scanning and capacity management, event security, aggregate analytics, editorial coverage of our events, and business-to-business communications about DGG events to professional contacts in our sector, balanced against your rights and interests in each case.
• Consent where required, including for marketing email to individuals in jurisdictions that require it and for non-essential cookies.
• Legal obligation for tax, accounting, and record-keeping requirements.

Where Swiss law applies, we process personal data lawfully, in good faith, proportionately, and for the purposes stated here. You may object to processing as described in section 8.

If we later want to use your data for a purpose not described here, we will tell you and, where the law requires it, obtain your consent first.

Who we share it with, and why

Other event participants. This is the central purpose of our events, so read this section carefully. When you register, your name, job title, company, and the profile information relevant to your registration category are made available through our meeting system to other registered participants so that meeting requests can be made. If you accept a meeting, the counterparty receives your name, title, company, and the meeting details. If you attend a company’s presentation or allow your badge to be scanned at a company’s stand or meeting, that company receives your name, title, company, and business email address. Investor contact details are not made broadly available to issuers outside these interactions. You can limit your visibility in the meeting system through your account settings or by contacting us.

Service providers. Registration and badge production vendors, payment processors, email delivery providers, hosting and infrastructure providers, analytics providers, and professional advisers. These parties act on our instructions under written contracts and may use the data only to provide the service.

Venues and hotels. Where necessary for room blocks, catering, credentialing, and on-site access, we provide the minimum information required.

Sponsors. Where a sponsor receives attendee information as part of a sponsorship, we tell you at the point of registration and, where the law requires it, obtain your consent. We do not sell personal data.

Legal and protective disclosures. Where we reasonably believe disclosure is necessary to comply with applicable law or legal process, to enforce our terms and conditions, to investigate fraud or security incidents, or to protect the rights, property, or safety of DGG, our participants, or the public.

Corporate transactions. In connection with a merger, acquisition, or transfer of assets, subject to this policy continuing to apply to the transferred data.

Aggregate information. We publish and share aggregated statistics that do not identify any individual, such as attendance by investor category or assets under management represented.

International transfers

DGG is based in the United States. Personal data we collect, including data collected at Mining Forum Europe in Switzerland, is transferred to and processed in the United States and may be processed by service providers in other countries.

We transfer personal data from the European Economic Area, the United Kingdom, and Switzerland to the United States under the European Commission’s Standard Contractual Clauses, together with the UK International Data Transfer Addendum and the Swiss-specific adaptations recognized by the Federal Data Protection and Information Commissioner, supplemented by the technical and organizational measures described in section 12. A copy of the relevant clauses is available on request.

How long we keep it

We retain personal data no longer than necessary for the purposes described here. Where a period below runs from your last interaction with DGG, that means the later of your most recent attendance at a DGG event and the date your contact record was suppressed from our email lists.

• Account and registration records: 7 years after your last interaction with DGG, to support membership history, recurring invitations, and financial record-keeping.
• Financial and transaction records: 7 years after your last interaction with DGG, and for any further period required by applicable tax and accounting rules.
• Meeting records and badge scan data: 7 years after your last interaction with DGG.
• Marketing contact records: until you unsubscribe or object. We then keep a minimal suppression record, consisting of your email address and the date of suppression, for as long as we operate our mailing lists, so that we do not contact you again.
• Server logs: 6 months.
• Event photography, video, and recordings: indefinitely, as archival and editorial material.

Where you ask us to delete your data, we do so except where we must retain it for legal, tax, accounting, or dispute-resolution purposes. Residual copies may persist in backups for up to 120 days before being overwritten in the normal backup cycle.

Your rights

Depending on where you are located, you have some or all of the following rights:

• to know what personal data we hold about you and to receive a copy
• to have inaccurate data corrected
• to have data deleted
• to restrict how we process your data
• to receive your data in a portable format and to have it transmitted to another controller where technically feasible
• to object to processing carried out on the basis of our legitimate interests, including profiling
• to opt out of marketing communications at any time
• to withdraw consent where we rely on it, without affecting processing already carried out
• to opt out of the sale of personal data, targeted advertising, and profiling in furtherance of decisions producing legal or similarly significant effects

To exercise any of these, contact admin@denvergold.org or use the controls in your DGG account. We will verify your identity before acting on a request, and we will respond within the period the applicable law requires. That period is one month under the GDPR and the UK GDPR, and 45 days under Colorado and California law, in each case extendable where the law permits and we tell you the reason for the extension.

You may use an authorized agent to submit a request on your behalf, subject to proof of authorization. We honor recognized universal opt-out mechanisms, including Global Privacy Control, where applicable law requires it.

We will not discriminate against you for exercising these rights.

If we deny a request

We will tell you why, and you may appeal by writing to admin@denvergold.org, marked for the attention of the privacy appeals contact. We will respond to an appeal within 45 days. If we deny the appeal, we will provide you with a method to contact the Colorado Attorney General or your state’s regulator.

Complaints

If you are in the EEA or the UK, you may lodge a complaint with your national supervisory authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner. We would prefer the chance to resolve the matter first.

Photography, recording, and editorial coverage

We photograph, film, record, and livestream our events. By attending, you acknowledge that you may appear in that material and that DGG may use it in coverage of the event through Mining Forum Live, in promotional material, and in archival records, as set out in our event terms and conditions. If you do not wish to appear in identifiable footage, tell us at registration or at the registration desk on site and we will do what is reasonably practicable to accommodate you.

Cookies and analytics

We use cookies and similar technologies that are strictly necessary to operate our sites and maintain secure login sessions. We also use analytics cookies, including Google Analytics, to understand how our sites are used.

We manage cookie consent through CookieYes. Where you visit our sites from the EEA, the UK, or Switzerland, the CookieYes banner asks for your consent before any non-essential cookie is set, and you can change or withdraw your choices at any time through the cookie settings control available on every page. CookieYes records your consent choice, together with your IP address and the date and time of the choice, so that we can demonstrate consent if we are asked to. Disabling necessary cookies will prevent parts of our registration and meeting systems from working.

A full description of the cookies we use, maintained by CookieYes and kept current by its scanner, is available in the cookie policy for each of our sites: Denver Gold Group, Mining Forum Americas, and Mining Forum Europe.

Marketing

We send event invitations and updates to professional contacts in the mining and investment sector. Every marketing email contains an unsubscribe link, and unsubscribing takes effect across all DGG marketing lists. Transactional messages about an event you have registered for are not marketing and will continue.

Security

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the data we hold. These include encryption of data in transit using current TLS, access controls limiting personal data to staff and contractors who need it, contractual confidentiality obligations on those parties, multi-factor authentication for account access, periodic review of our collection and storage practices, and weekly backups.

No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights, we will notify you and the relevant supervisory authorities within the timeframes the applicable law requires.

Children

Our events and services are intended for business professionals. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Other sites

Our sites and event materials link to third-party sites, including those of participating companies, venues, and hotels. We are not responsible for their content or privacy practices.

Changes

We may update this policy. We will post the revised version here with a new effective date. If the change materially affects how we use your personal data, we will notify you by email or through a prominent notice before it takes effect. We will not reduce your rights under this policy with respect to data already collected without your consent.

Contact