What are the responsibilities of each party regarding privacy laws applicable to their business under the Even Hotels franchise agreement?

According to Even Hotels' 2025 Franchise Disclosure Document, each party is responsible for complying with the privacy laws applicable to its business. This means that both Even Hotels as the franchisor and the franchisee must adhere to all relevant international, federal, state, and local laws, rules, regulations, directives, and governmental requirements related to the privacy, confidentiality, and security of protected personal information.

This obligation extends to compliance with industry standards concerning privacy, data protection, confidentiality, or information security, including the Payment Card Industry Data Security Standard (PCI DSS) if applicable. Additionally, each party must follow the applicable provisions of their respective written requirements, privacy policies, statements, or notices related to the privacy and security of Personal Information.

For a prospective Even Hotels franchisee, this signifies a need to understand and implement comprehensive data protection measures within their hotel operations. This includes training personnel, establishing secure data handling procedures, and staying updated on evolving privacy regulations such as the California Consumer Privacy Act (CCPA) and other relevant data privacy laws. Franchisees should consult with legal counsel to ensure full compliance and mitigate potential risks associated with data breaches or privacy violations.