U. S. Addendum

Table of Contents

• 1. Overview
• 2. What Types of Personal Data Did We Collect, and How Did We Collect It?
• 3. Data We Do Not Collect and Uses That Do Not Apply
• 4. Disclosure of Data for Business Purposes
• 5. Disclosure of Data for a Sale or Use of Data for Targeted Advertising
• 6. Your Rights and Choices
• 6.1 Opt-Out Rights
• 6.2 Summarize and Data Portability Rights
• 6.3 Correction Rights
• 6.4 Deletion Rights
• 6.5 Exercising Your Rights
• 6.6 Initial Request
• 6.7 Right to Appeal
• 7. Non-Discrimination
• 8. Other California Privacy Rights
• 9. Changes to This U. S.-Specific Addendum
• 10. How to Contact Us

Overview

Some U. S. state comprehensive privacy laws (“U. S. Privacy Laws “) require us to give residents extra disclosures and explain their rights. This U. S. addendum (“U. S. Addendum “) supplements our Global Privacy Notice and applies only to people who live in U. S. states with state privacy laws.

In this U. S. Addendum,”personal data ” means any information that relates to an identified or identifiable person, as defined under the U. S. Privacy Laws that apply to you. This includes what those laws may call personally identifiable information (“PII “) or sensitive personal data.

We try to apply these U. S. Privacy Laws consistently, but some terms, obligations, and rights only apply in certain states. When we talk about”rights” in this U. S. Addendum, we are describing rights you may have under those laws. This U. S. Addendum does not create new rights beyond what the applicable U. S. Privacy Laws provide.

If we use any capitalized terms that are not defined in this U. S. Addendum, you can find their meanings in the Global Privacy Notice . If there is any difference between what this U. S. Addendum says and what the Global Privacy Notice says, you should follow what is written in this U. S. Addendum.

What Types of Personal Data Did We Collect, and How Did We Collect It?

Please review the Global Privacy Notice to see the types of data we collect and how we use it. As some U. S. Privacy Laws require, the chart below shows, for the last 12 months, the categories of personal data we collected, where we got it, and why we collected it.

We may also use or disclose the personal data we collect for any of the purposes described in Section 3,”How We Use Your Data,” of the Global Privacy Notice , including to:

• provide safety and security;
• troubleshoot;
• facilitate corporate transactions;
• obtain your consent;
• comply with legal obligations; and/or
• for aggregated or de-identified data.

Data We Do Not Collect and Uses That Do Not Apply

We do not intentionally collect data about people under 18 or sensitive personal data as defined under applicable Privacy Laws. If we learn that we collected sensitive personal data or data about someone under 18, we will delete it.

We do not use your personal data for profiling that leads to decisions with legal or similarly significant effects, as defined under applicable Privacy Laws.

Disclosure of Data for Business Purposes

We disclose your personal data for business purposes to the following categories of third parties, as described in Section 4,”Who We Share Your Data With & The Purpose of Disclosure,” of the Global Privacy Notice :

• Service Providers, such as services linked to your account; and
• Other Third Parties, such as our analytics and advertising providers, joint marketing partners, and our customers.

As needed to run our business or as required by law, we may also disclose your personal data as part of a corporate transaction, to law enforcement, to our professional advisors, or at your direction or with your consent.

Disclosure of Data for a Sale or Use of Data for Targeted Advertising

The categories of third parties, as each category is further described in Section 4,”Who We Share Your Data With & The Purpose of Disclosure,” of the Global Privacy Notice , with whom we share personal data that may be considered the sale or sharing of personal data for targeted advertising include:

• Analytics and Advertising Providers; and
• Joint Marketing Partners.

Your Rights and Choices

Depending on where you live and the Privacy Laws that apply to you, you may have certain rights over your personal data. This section describes those rights and how to use them. Some requirements must be met before we can honor a request. See Exercising Your Rights below for what you need to provide and how to submit a request.

Some of our activities may be considered a”sale” or”sharing” of your personal data or”targeted advertising” under certain Privacy Laws. Depending on where you live, you may have the right to opt out of targeted advertising and/or the sale or sharing of your personal data.

Opt-Out Rights

Sale/Sharing of Your Data

Some states may treat our use of your personal data as a sale or sharing. To opt out, click “Your Privacy Choices” (also at the bottom of our pages via the cookie button icon), or send a Global Privacy Control signal through your browser or device. You can find more information about Global Privacy Controls here. If these options do not work for you, you can also email us using the contact details in the How to Contact Us section in the Global Privacy Notice .

Profiling

We do not use your personal data to profile inways that lead to decisions withlegal or similarly significant effects.

Summarize and Data Portability Rights

Under certain Privacy Laws, you can ask us to tell you more about our collection and use of your personal data, including:

• The categories of personal data we collected about you;
• The categories of sources from which we collected your personal data;
• Our business or commercial purposes for collecting or selling that personal data;
• The categories of third parties with whom we share that personal data;
• The specific pieces of personal data we collected about you in a portable and, when technically feasible, readily usable format that lets you transfer the data to another entity without hindrance (a data portability request); and

If we sold or disclosed your personal data for a business purpose, you can ask for information on:

• sales, identifying the categories of personal data that each category of recipient purchased; and
• disclosures for a business purpose, identifying the categories of personal data that each category of recipient obtained.

Once we receive and verify your request, we will provide the information you asked for. See Exercising Your Rights for how to submit a request.

Correction Rights

Under certain Privacy Laws, you can ask us to correct inaccurate personal data we collected and keep. We will use commercially reasonable efforts to correct it (and, where required, direct our service providers to correct it) after we receive and verify your request, unless an exception applies. See Exercising Your Rights for how to submit a request.

Deletion Rights

Under certain Privacy Laws, you can ask us to delete personal data we collected from you. After we receive and verify your request, we will delete your personal data (and, where required by law, direct our service providers to delete it), unless an exception applies—for example, if we need the data to provide the Platform, comply with the law, detect or protect against security incidents, or as otherwise permitted by applicable Privacy Laws.

Exercising Your Rights

Only you, or someone legally authorized to act on your behalf, may make a”verifiable consumer request” (we call this a”consumer request “) related to your personal data. To submit a consumer request use our interactive form found here https://my. datasubject.com/SkgA8ojBMM/60495 , or contact us using the details in the How to Contact Us section below.

To verify your request, we need you to:

• provide sufficient information that allows us to reasonably verify that you are the person about whom we collected personal data and that you have rights under this U. S. Addendum;
• describe your request with enough detail to allow us to properly understand, evaluate, and respond to it; and
• if applicable, provide sufficient information that allows us to reasonably verify that you are an authorized representative of the person about whom we collect personal data.

We cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data relates to you. We may require authentication that is reasonable in light of the nature of the personal data requested. We will only use personal data provided in a consumer request to verify the requestor’s identity or authority to make the request.

Initial Request

We try to respond to a consumer request within the timeline required by law. If we need more time, we will inform you in writing of the reason and the extension period.

We will deliver our written response by mail or electronically, at your option.

If we cannot comply with a request, our response will explain why. For data portability requests, we will provide your personal data in a readily usable format that should allow you to transmit the information from one entity to another without hindrance, to the extent technically feasible.

We do not charge a fee to process or respond to your consumer request unless it is excessive or manifestly unfounded. If we determine that a fee is warranted, we will tell you why and provide a cost estimate before completing your consumer request.

Right to Appeal

Under certain Privacy Laws, you may have the right to appeal our decision on your initial consumer request.

If you have a right to appeal, send your appeal to the same place where you sent your initial consumer request (see Exercising Your Rights). Clearly indicate that it is an appeal, and include your initial request along with our response explaining why we could not comply.

We will answer your appeal within a reasonable timeframe. If applicable Privacy Laws allow us to extend our response time and we need more time, we will notify you within the original timeframe and explain the reason for the delay.

Once we respond, we will inform you of any action taken or not taken and explain the reason. If you are not satisfied with the outcome, you may have the right under applicable Privacy Laws to submit a complaint to your state attorney general. If applicable, we will provide a notice and a link to the attorney general’s website.

Non-Discrimination

We will not discriminate against you, as described in applicable Privacy Laws, for exercising any of your rights. Unless permitted by applicable Privacy Laws, we will not:

• deny you goods or services;
• charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• provide you with a different level or quality of goods or services; or
• suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Other California Privacy Rights

California’s”Shine the Light” law (Civil Code §1798.83) lets California residents who use the Platform request certain information about our disclosure of personal data to third parties for their direct marketing purposes. To make such a request, please contact us using the information in the How to Contact Us section below.

Changes to This U. S.-Specific Addendum

From time to time, we may update this U. S. Addendum. For any material changes, we will follow the same process described in the Changes to This Privacy Notice section of the Global Privacy Notice . Please review the Global Privacy Notice for more information.

How to Contact Us

If you have any questions or comments about this U. S. Addendum, how we collect and use your data described here and in the Global Privacy Notice , or your choices and rights, please contact us using the details below.