Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Ημερομηνία τελευταίας τροποποίησης 27 Σεπτεμβρίου 2024

PDF

Η παρούσα Δήλωση Ιδιωτικού Απορρήτου εξηγεί τον τρόπο με τον οποίον η SanDisk (στο εξής «Company», «εμείς», «εμάς» ή «μας») συλλέγει, χρησιμοποιεί και γνωστοποιεί τις πληροφορίες σας. Η Δήλωση Ιδιωτικού Απορρήτου ισχύει για όλα τα προϊόντα και τις υπηρεσίες της Company, πλην εκείνων των προϊόντων και υπηρεσιών που διαθέτουν ξεχωριστή δήλωση ιδιωτικού απορρήτου.

Όπου ισχύει, συναινείτε στη χρήση των πληροφοριών σας όπως περιγράφεται στην παρούσα Δήλωση Ιδιωτικού Απορρήτου κάθε φορά που χρησιμοποιείτε τα προϊόντα ή τις υπηρεσίες μας. Ως εκ τούτου σας προτρέπουμε να διαβάσετε ολόκληρο το παρόν έγγραφο και να Επικοινωνήσετε μαζί μας για οποιαδήποτε ερώτηση.

Ως προσωπικές πληροφορίες νοούνται οι πληροφορίες που μπορούν να χρησιμοποιηθούν για την άμεση ή έμμεση ταυτοποίησή σας. Στις προσωπικές πληροφορίες περιλαμβάνονται επίσης πληροφορίες οι οποίες συνδέονται με πληροφορίες που μπορούν να χρησιμοποιηθούν για την άμεση ή έμμεση ταυτοποίησή σας. Οι προσωπικές πληροφορίες δεν περιλαμβάνουν πληροφορίες οι οποίες έχουν ανωνυμοποιηθεί αμετάκλητα ή είναι συγκεντρωτικές με αποτέλεσμα να μην μπορούμε πλέον, είτε σε συνδυασμό με άλλες πληροφορίες είτε με άλλον τρόπο, να σας ταυτοποιήσουμε. Στον βαθμό που επεξεργαζόμαστε μη αναγνωρίσιμες πληροφορίες, θα διατηρήσουμε και θα χρησιμοποιήσουμε τις πληροφορίες σε μη αναγνωρίσιμη μορφή.

Παρακάτω περιγράφονται τα είδη των προσωπικών πληροφοριών που ενδέχεται να συλλέξουμε και πώς μπορούμε να τις επεξεργαστούμε:

Ποιες προσωπικές πληροφορίες συλλέγουμε

Ανάλογα με τα προϊόντα και τις υπηρεσίες που χρησιμοποιείτε, ενδέχεται να συλλέξουμε ή να έχουμε συλλέξει, συμπεριλαμβανομένων των προηγούμενων 12 μηνών, διάφορα είδη προσωπικών πληροφοριών από εσάς ή σχετικά με εσάς:

• Προσωπικά αναγνωριστικά, όπως όνομα, όνομα χρήστη, διεύθυνση email, αριθμός τηλεφώνου και ταχυδρομική διεύθυνση ή διεύθυνση αποστολής.
• Εμπορικές πληροφορίες, όπως προϊόντα ή υπηρεσίες που αγόρασαν ή εξετάζουν οι πελάτες, πληροφορίες σχετικά με τον λογαριασμό σας στη Company και πληροφορίες ταυτοποίησης: διεύθυνση τιμολόγησης, διεύθυνση αποστολής και στοιχεία επικοινωνίας.
• Οικονομικές πληροφορίες, όπως ορισμένα περιορισμένα στοιχεία πιστωτικής ή χρεωστικής κάρτας.
• Προσωπικά στοιχεία, όπως δημογραφικά δεδομένα, συμπεριλαμβανομένων της τοποθεσίας, της ηλικίας, του φύλου, του εισοδηματικού επιπέδου, της απασχόλησης ή του μορφωτικού επιπέδου.
• Γενικές πληροφορίες τοποθεσίας. Όπου είναι εφικτό, οι υπηρεσίες μας μπορεί να χρησιμοποιήσουν το GPS, την τοποθεσία που προκύπτει από τη διεύθυνση IP σας, καθώς και άλλες τεχνολογίες για να προσδιοριστεί κατά προσέγγιση η τοποθεσία των υπολογιστών, τηλεφώνων ή άλλων συσκευών στις οποίες εγκαθιστάτε τα προϊόντα ή τις υπηρεσίες μας ή αποκτάτε πρόσβαση σε αυτά.
• Πληροφορίες σχετικά με δραστηριότητες στο διαδίκτυο ή σε άλλο ηλεκτρονικό δίκτυο, όπως το ιστορικό περιήγησης, το ιστορικό αναζήτησης και πληροφορίες σχετικά με την αλληλεπίδρασή σας με τα προϊόντα ή τις υπηρεσίες μας, όπως ο τύπος της συσκευής που χρησιμοποιείτε, η ρύθμιση παραμέτρων της συσκευής σας, το μοναδικό αναγνωριστικό της συσκευής σας, η διεύθυνση IP της συσκευής σας, το λειτουργικό σας σύστημα, ο τύπος του προγράμματος περιήγησης που χρησιμοποιείτε, πληροφορίες χρήσης, διαγνωστικές πληροφορίες, πληροφορίες περιήγησης, συνοπτικές πληροφορίες περιόδου λειτουργίας, στατιστικά κεντρικής μονάδας επεξεργασίας (CPU) και άλλα στατιστικά χρήσης, κλήσεις διεπαφών προγραμματισμού εφαρμογών (API), πληροφορίες διακοπής υπηρεσίας, κατάσταση δικτύου, χρήση αποθηκευτικού χώρου, όροι αναζήτησης, χαρακτηριστικά αρχείου (συμπεριλαμβανομένων χαρακτηριστικών για φωτογραφιών, βίντεο, μουσικής και εγγράφων).
• Επαγγελματικές ή σχετικές με την απασχόληση πληροφορίες, όπως θέση, ρόλος, επάγγελμα, προηγούμενη εργασιακή εμπειρία ή τωρινός ή προηγούμενος εργοδότης.
• Συμπεράσματα που προκύπτουν από τις προσωπικές σας πληροφορίες, όπως πληροφορίες σχετικά με τα ενδιαφέροντά σας ή τις από μέρους σας προτιμήσεις αγοράς.
• Ευαίσθητες προσωπικές πληροφορίες και συγκεκριμένα τα στοιχεία πιστωτικής ή χρεωστικής κάρτας που χρησιμοποιούνται από το σύστημα επεξεργασίας πληρωμών μας για την ολοκλήρωση μιας συναλλαγής που ζητήσατε.

Εκτός από τις παραπάνω κατηγορίες προσωπικών πληροφοριών, μπορείτε να επιλέξετε να μας παράσχετε επιπλέον προσωπικές πληροφορίες, όπως εκείνες στην περίπτωση που δημιουργείτε έναν λογαριασμό, συμπληρώνετε μια φόρμα, μας παράσχετε μια φωτογραφία ή υποβάλετε μια αίτηση εργασίας.

Πώς Συλλέγουμε τις Προσωπικές σας Πληροφορίες

• Πληροφορίες που παρέχετε: Ενδέχεται να συλλέξουμε τις προσωπικές πληροφορίες που παρέχετε όταν χρησιμοποιείτε τα προϊόντα και τις υπηρεσίες μας, δημιουργείτε λογαριασμό, επικοινωνείτε μαζί μας, συμμετέχετε σε μια έρευνα, συμμετέχετε σε συζητήσεις στην κοινότητα ή σε δωμάτια συνομιλίας (chat rooms), κάνετε αίτηση για θέση εργασίας, εγγράφεστε για να λαμβάνετε μηνύματα εμπορικής προώθησης, αλληλεπιδράτε αυτοπροσώπως μαζί μας σε εκδηλώσεις ή σε άλλου είδους επικοινωνία μεταξύ μας. Πληροφορίες σχετικά με τις πληρωμές: Εάν πραγματοποιήσετε μια αγορά, ενδέχεται να συλλέξουμε προσωπικές πληροφορίες σε σχέση με την αγορά. 
• Πληροφορίες για τη χρήση των προϊόντων και των υπηρεσιών μας: Όταν χρησιμοποιείτε τα προϊόντα και τις υπηρεσίες μας, συμπεριλαμβανομένων των ιστοτόπων και των διαδικτυακών εφαρμογών, των εφαρμογών για κινητά τηλέφωνα και ηλεκτρονικούς υπολογιστές, ή όταν βλέπετε τα email ή τις διαφημίσεις μας, ενδέχεται να συλλέξουμε πληροφορίες από ή σχετικά με τους υπολογιστές, τα τηλέφωνα ή άλλες συσκευές στις οποίες εγκαθιστάτε τα προϊόντα και τις υπηρεσίες μας ή αποκτάτε πρόσβαση σε αυτά. Ορισμένες από αυτές τις πληροφορίες ενδέχεται να συλλεχθούν αυτόματα. Διαβάστε τη Δήλωση Cookies για να μάθετε περισσότερα για το πώς χρησιμοποιούμε τεχνολογίες παρακολούθησης ιστού και τις επιλογές που έχετε.
• Πληροφορίες από τρίτα μέρη: Συλλέγουμε πληροφορίες από τρίτους, συμπεριλαμβανομένων επιχειρηματικών συνεργατών, εταιρειών μάρκετινγκ και παρόχων υπηρεσιών. Αυτό μπορεί να περιλαμβάνει τα στοιχεία επικοινωνίας σας από συνεργάτες μάρκετινγκ όταν συμμετέχουμε σε κοινές δραστηριότητες μάρκετινγκ ή σε δραστηριότητες από κοινού προώθησης εμπορικού σήματος, τη διεύθυνση IP ή πληροφορίες για την τοποθεσία σας από παρόχους υπηρεσιών προκειμένου να προσφέρουμε ορισμένα προϊόντα και υπηρεσίες που σχετίζονται με την τοποθεσία σας, καθώς και δεδομένα από τα μέσα κοινωνικής δικτύωσης για την ταυτοποίηση της χρήσης του προϊόντος μας από εσάς ή ότι παρέχετε άδεια πρόσβασης στα προϊόντα ή τις υπηρεσίες μας.
• Πληροφορίες από δημόσια διαθέσιμες πηγές: Ενδέχεται να συλλέξουμε πληροφορίες από κυβερνητικές πηγές και αρχεία και άλλες δημόσια διαθέσιμες πληροφορίες.

Πώς χρησιμοποιούμε τις προσωπικές σας πληροφορίες

Μπορεί να χρησιμοποιήσουμε προσωπικές πληροφορίες για τους σκοπούς που περιγράφονται στην παρούσα Δήλωση Ιδιωτικού Απορρήτου. Σε γενικές γραμμές, χρησιμοποιούμε προσωπικές πληροφορίες για την παροχή, τη βελτίωση, την ανάπτυξη και την εξατομίκευση της εμπειρίας σας με τα προϊόντα και τις υπηρεσίες μας, για να επικοινωνήσουμε μαζί σας, να σας προσφέρουμε στοχευμένες διαφημίσεις και υπηρεσίες και να προστατεύσουμε εμάς και τους χρήστες μας. Ενδέχεται να το πράξουμε με τη συγκατάθεσή σας, για σκοπούς συμμόρφωσης με κάποια νομική υποχρέωση, για την εκτέλεση μιας σύμβασης με εσάς ή για τα έννομα συμφέροντά μας, στον βαθμό που επιτρέπει η ισχύουσα νομοθεσία. Η Company συλλέγει, επεξεργάζεται και καθορίζει τον τρόπο επεξεργασίας των προσωπικών σας πληροφοριών ως υπεύθυνος επεξεργασίας δεδομένων για τους εξής σκοπούς:

• Παροχή, βελτίωση, ανάπτυξη και εξατομίκευση της εμπειρίας σας με τα προϊόντα και τις υπηρεσίες μας: Ενδέχεται να χρησιμοποιήσουμε προσωπικές πληροφορίες οι οποίες μας βοηθούν να σας παρέχουμε, να βελτιώνουμε, να αναπτύσσουμε και να εξατομικεύουμε την εμπειρία σας με τα προϊόντα και τις υπηρεσίες μας. Αυτό περιλαμβάνει τη χρήση προσωπικών πληροφοριών για σκοπούς όπως η ανάλυση δεδομένων, η έρευνα και οι έλεγχοι. Ενδέχεται να προβούμε στην εν λόγω επεξεργασία βασιζόμενοι στη συγκατάθεσή σας ή στο έννομο συμφέρον μας να σας προσφέρουμε προϊόντα και υπηρεσίες αλλά και για σκοπούς επιχειρηματικής συνέχειας. Εάν δηλώσετε συμμετοχή σε κληρώσεις, διαγωνισμούς, ή άλλες προωθητικές ενέργειες, ενδέχεται να χρησιμοποιήσουμε τις προσωπικές πληροφορίες που παρέχετε για τη διαχείριση αυτών των προγραμμάτων. Ορισμένες από αυτές τις δραστηριότητες έχουν επιπλέον κανόνες, οι οποίοι μπορεί να περιλαμβάνουν περαιτέρω πληροφορίες για τον τρόπο με τον οποίο χρησιμοποιούμε τις προσωπικές πληροφορίες, γι’ αυτό σας προτρέπουμε να διαβάστε τους σχετικούς κανόνες προσεκτικά προτού δηλώσετε συμμετοχή.
• Επικοινωνία με εσάς: Μπορεί να χρησιμοποιήσουμε προσωπικές πληροφορίες για να απαντήσουμε στα ερωτήματά σας και να επικοινωνήσουμε μαζί σας σχετικά με σημαντικές ειδοποιήσεις, συμπεριλαμβανομένων ειδοποιήσεων σχετικά με τον λογαριασμό σας, τα προϊόντα, τις υπηρεσίες, συναλλαγές ή αλλαγές στις πολιτικές και στους όρους μας. Η εν λόγω επεξεργασία εκτελείται διότι είναι απαραίτητη για την εκπλήρωση μιας σύμβασης με εσάς ή βασίζεται στο έννομο συμφέρον μας να αλληλεπιδρούμε με εσάς για να σας παρέχουμε τα προϊόντα και τις υπηρεσίας μας. Μπορεί επίσης να χρησιμοποιήσουμε προσωπικές πληροφορίες για να επικοινωνήσουμε μαζί σας σχετικά με τις αιτήσεις σας για θέση εργασίας. Οι δηλώσεις ιδιωτικού απορρήτου μας προς τους αιτούντες και τους εργαζόμενους παρέχουν πρόσθετες πληροφορίες σχετικά με τις προσωπικές πληροφορίες που συλλέγουμε και τον τρόπο με τον οποίο χρησιμοποιούμε τις προσωπικές πληροφορίες σε σχέση με τις αιτήσεις σας για θέση εργασίας. Κατόπιν ρητής συγκατάθεσής σας, ενδέχεται να χρησιμοποιήσουμε προσωπικές πληροφορίες για να σας στείλουμε επικοινωνίες μάρκετινγκ σε σχέση με τα προϊόντα και τις υπηρεσίες της Company, και μπορεί να διαβιβάσουμε τις προσωπικές σας πληροφορίες σε τρίτους συνεργάτες, οι οποίοι μπορεί να σας στείλουν επικοινωνίες μάρκετινγκ σε σχέση με τα προϊόντα και τις υπηρεσίες τους. Αν δεν επιθυμείτε πλέον να λαμβάνετε επικοινωνίες μέσω ηλεκτρονικού ταχυδρομείου για σκοπούς μάρκετινγκ, μεταβείτε στην ενότητα Επικοινωνήστε μαζί μας για να απεγγραφείτε. Μπορεί να χρησιμοποιήσουμε τις πληροφορίες σας για να επεξεργαστούμε και να απαντήσουμε στα αιτήματά σας όταν επικοινωνείτε μαζί μας.
• Προσφορά και μέτρηση στοχευμένων διαφημίσεων και υπηρεσιών: Ενδέχεται επίσης να χρησιμοποιήσουμε προσωπικές πληροφορίες για να σας παρέχουμε εξατομικευμένες διαφημίσεις, ακόμα και σε ιστότοπους και εφαρμογές τρίτων, αλλά και για να διαπιστώσουμε την αποτελεσματικότητα των διαφημιστικών εκστρατειών μας. Διαβάστε τη Δήλωση Cookies για να μάθετε περισσότερα για το πώς χρησιμοποιούμε τεχνολογίες παρακολούθησης ιστού για εξατομικευμένες διαφημίσεις και τις επιλογές που έχετε. Μπορεί επίσης να χρησιμοποιήσουμε αντιστοίχιση κοινού για να προσεγγίσουμε άτομα (ή άτομα που ομοιάζουν με άλλα άτομα) τα οποία χρησιμοποιούν τα προϊόντα και τις υπηρεσίες μας ή προσδιορίζονται σε μία ή περισσότερες από τις βάσεις δεδομένων μας. Αυτό το καταφέρνουμε παρέχοντας μια λίστα κατακερματισμένων διευθύνσεων email σε έναν διαφημιστικό συνεργάτη ή ενσωματώνοντας ένα εικονοστοιχείο από έναν διαφημιστικό συνεργάτη στα δικά μας προϊόντα και υπηρεσίες. Στη συνέχεια ο διαφημιστικός συνεργάτης αντιστοιχεί κοινούς παράγοντες ανάμεσα στα δικά του και στα δικά μας δεδομένα.
• Προώθηση της ασφάλειας και της προστασίας: Ενδέχεται να χρησιμοποιήσουμε προσωπικές πληροφορίες για να βοηθήσουμε στην επαλήθευση των λογαριασμών και της δραστηριότητας χρηστών, καθώς και για την προώθηση της ασφάλειας και της προστασίας, όπως για παράδειγμα παρακολουθώντας περιπτώσεις απάτης και διερευνώντας ύποπτη ή δυνητικά παράνομη δραστηριότητα ή παραβιάσεις των όρων ή των πολιτικών μας. Η εν λόγω επεξεργασία εκτελείται διότι είναι απαραίτητη για την εκπλήρωση μιας σύμβασης με εσάς ή βασίζεται στο έννομο συμφέρον μας να διασφαλίσουμε την ασφάλεια των προϊόντων και υπηρεσιών μας.
• Επεξεργασία πληρωμών: Το σύστημα επεξεργασία πληρωμών μας ενδέχεται να χρησιμοποιήσει τις προσωπικές σας πληροφορίες, συμπεριλαμβανομένων των εμπορικών και οικονομικών πληροφοριών, ειδικά για την επεξεργασία πληρωμών και προμηθειών συναλλαγής που σχετίζονται με ένα προϊόν ή μια υπηρεσία που ζητήσατε.

Για οποιαδήποτε χρήση των δεδομένων σας από αυτές που περιγράφονται ανωτέρω και απαιτούν την προηγούμενη ρητή συγκατάθεσή σας βάσει της ισχύουσας νομοθεσίας, επισημαίνεται ότι μπορείτε να ανακαλέσετε τη συγκατάθεσή σας επικοινωνώντας μαζί μας μέσω της διαδικτυακής φόρμας.

Ως παγκόσμια εταιρεία, η Company έχει αρκετές συγγενείς εταιρείες σε διαφορετικές χώρες. Κάθε συγγενής εταιρεία συλλέγει, επεξεργάζεται και καθορίζει τον τρόπο επεξεργασίας των προσωπικών πληροφοριών σας ως υπεύθυνος επεξεργασίας για να βοηθήσει στην παροχή των προϊόντων και των υπηρεσιών που ζητάτε.

Χρησιμοποιούμε και έχουμε χρησιμοποιήσει cookies και παρόμοιες τεχνολογίες κατά τους τελευταίους 12 μήνες για την παροχή, την προστασία και τη βελτίωση των προϊόντων και υπηρεσιών μας, όπως για παράδειγμα με την εξατομίκευση περιεχομένου, την κατανόηση της συμπεριφοράς των χρηστών και την παροχή ασφαλέστερης εμπειρίας. Χρησιμοποιούμε επίσης αυτές τις τεχνολογίες για να σας παρέχουμε εξατομικευμένες διαφημίσεις, ακόμα και σε ιστότοπους και εφαρμογές τρίτων, αλλά και για να διαπιστώσουμε την αποτελεσματικότητα των διαφημιστικών εκστρατειών μας.

Διαβάστε τη Δήλωση Cookies για να μάθετε περισσότερα για το πώς χρησιμοποιούμε τα cookies και τις τεχνολογίες παρακολούθησης ιστού, και τις επιλογές που έχετε.

Διαθέτουμε ορισμένες προσωπικές πληροφορίες σε στρατηγικούς συνεργάτες και άλλους παραλήπτες που παρουσιάζονται παρακάτω για τους σκοπούς που περιγράφονται στην παρούσα Δήλωση Ιδιωτικού Απορρήτου.

Πάροχοι υπηρεσιών και άλλες εταιρείες

Ενδέχεται να γνωστοποιήσουμε προσωπικές πληροφορίες σε παρόχους υπηρεσιών και άλλες εταιρείες που παρέχουν υπηρεσίες για λογαριασμό μας, όπως η φιλοξενία ιστοτόπων, υπηρεσίες ηλεκτρονικού ταχυδρομείου, μάρκετινγκ, διαφήμιση, χορηγία σε κληρώσεις, διαγωνισμούς και άλλες προωθητικές ενέργειες, οικονομικός έλεγχος, επεξεργασία πληρωμών, εκτέλεση παραγγελιών πελατών, ανάλυση δεδομένων, παροχή υποστήριξης πελατών, διενέργεια έρευνας σε πελάτες και έρευνας ικανοποίησης, υπηρεσίες αποθήκευσης σε υπολογιστικό νέφος και άλλες υπηρεσίες που βοηθούν στην παροχή ή την πώληση των προϊόντων και υπηρεσιών μας. Κοινοποιούμε επίσης τις προσωπικές σας πληροφορίες σε διαφημιστές, παρόχους υπηρεσιών ανάλυσης δεδομένων και μέσα κοινωνικής δικτύωσης, τα οποία μας βοηθούν να προβαίνουμε σε προτάσεις προϊόντων, μηνύματα μάρκετινγκ και να σας αποστέλλουμε σχετικό περιεχόμενο. Αυτές οι εταιρείες υποχρεούνται να προστατεύουν τις πληροφορίες σας και μπορεί να βρίσκονται οπουδήποτε δραστηριοποιούμαστε.

Συγγενείς εταιρείες και εταιρικές επιχειρηματικές συναλλαγές

Ενδέχεται να διαβιβάσουμε προσωπικές πληροφορίες σε όλες τις συγγενείς εταιρείες της Company. Σε περίπτωση συγχώνευσης, αναδιοργάνωσης, εξαγοράς, κοινοπραξίας, εκχώρησης, απόσχισης, μεταβίβασης ή πώλησης ή διάθεσης του συνόλου ή μέρους της επιχείρησής μας, ακόμα και σε σχέση με τυχόν πτώχευση ή παρόμοια διαδικασία, ενδέχεται να διαβιβάσουμε το σύνολο ή μέρος των προσωπικών πληροφοριών σας στο σχετικό τρίτο μέρος.

Νομική συμμόρφωση και ασφάλεια

Μπορεί να είναι απαραίτητη η από μέρους μας γνωστοποίηση προσωπικών πληροφοριών βάσει νόμου ή συνεπεία νομικής διαδικασίας, αντιδικίας ή αιτήματος από δημόσιες ή κρατικές αρχές εντός ή εκτός της χώρας διαμονής σας. Μπορεί επίσης να γνωστοποιήσουμε προσωπικές πληροφορίες εάν κρίνουμε ότι η γνωστοποίηση είναι απαραίτητη ή πρόσφορη για σκοπούς εθνικής ασφάλειας, επιβολής του νόμου ή για άλλους λόγους δημοσίου συμφέροντος.  Ενδέχεται επίσης να γνωστοποιήσουμε προσωπικές πληροφορίες εάν διαπιστώσουμε καλή τη πίστει ότι η γνωστοποίηση είναι εύλογα απαραίτητη για την προστασία των δικαιωμάτων μας και την επιδίωξη των διαθέσιμων διορθωτικών μέτρων, την επιβολή των όρων και προϋποθέσεών μας, τη διερεύνηση περιπτώσεων απάτης ή την προστασία των εργασιών ή των χρηστών μας.

Λαμβάνουμε εύλογα μέτρα για να διασφαλίσουμε ότι οι προσωπικές πληροφορίες σας είναι ακριβείς, πλήρεις και επικαιροποιημένες. Ανάλογα με τη χώρα κατοικίας σας, ενδέχεται να έχετε τα δικαιώματα που περιγράφονται ακολούθως.

• Δικαίωμα ενημέρωσης όσον αφορά τις προσωπικές πληροφορίες που συλλέγουμε, συμπεριλαμβανομένων των πηγών από τις οποίες συλλέγονται οι προσωπικές πληροφορίες, των σκοπών συλλογής και των κατηγοριών των παραληπτών στους οποίους κοινοποιήσαμε τις προσωπικές σας πληροφορίες, συμπεριλαμβανομένης τυχόν κοινοποίησης σε τρίτα μέρη για τους δικούς τους σκοπούς μάρκετινγκ
• Δικαίωμα πρόσβασης –σε δομημένη και τυποποιημένη μορφή– στις προσωπικές πληροφορίες που επεξεργαζόμαστε σχετικά με εσάς
• Δικαίωμα διαγραφής των προσωπικών σας πληροφοριών
• Δικαίωμα εξαίρεσης από την πώληση ή την κοινοποίηση των προσωπικών σας πληροφοριών σε τρίτα μέρη
• Δικαίωμα εξαίρεσης από στοχευμένη διαφήμιση , συμπεριλαμβανομένης της κοινοποίησης των προσωπικών σας πληροφοριών σε τρίτα μέρη για διασταυρούμενη συμπεριφορική διαφήμιση
• Δικαίωμα εξαίρεσης από ορισμένες αυτοματοποιημένες διαδικασίες λήψης αποφάσεων
• Δικαίωμα διόρθωσης τυχόν ανακριβών πληροφοριών σχετικά με εσάς

Μπορείτε να συμπληρώσετε τη διαδικτυακή φόρμα μας για να ασκήσετε τα δικαιώματά σας. Θα απαντήσουμε στο αίτημά σας εντός του χρονικού πλαισίου που απαιτείται από τον νόμο (και γενικώς εντός 30 ημερών).

Βάσει νόμου και προκειμένου να προστατεύσουμε το ιδιωτικό απόρρητο και την ασφάλεια των προσωπικών πληροφοριών σας, ενδέχεται να σας ζητήσουμε πληροφορίες ώστε να είμαστε σε θέση να επαληθεύσουμε την ταυτότητά σας και το δικαίωμα πρόσβασης στις εν λόγω πληροφορίες, καθώς και να αναζητήσουμε και να σας παρέχουμε τις προσωπικές πληροφορίες που διατηρούμε. Ανακύπτουν περιπτώσεις όπου η ισχύουσα νομοθεσία ή οι κανονιστικές απαιτήσεις μάς επιτρέπουν ή απαιτούν από εμάς να αρνηθούμε το αίτημά σας.

Αν κατοικείτε στην Καλιφόρνια ή άλλη πολιτεία, περιοχή, ή δικαιοδοσία που παρέχει το εν λόγω δικαίωμα, για να εξαιρεθείτε από την πώληση ή κοινοποίηση των προσωπικών σας πληροφοριών από εμάς σε τρίτα μέρη για τη χρήση των δεδομένων σας όπως περιγράφηκε παραπάνω, συμπεριλαμβανομένης της διασταυρούμενης συμπεριφορικής διαφήμισης:

• υποβάλετε ένα αίτημα μέσω της φόρμας Do Not Sell or Share My Personal Information (Απαγόρευση πώλησης των προσωπικών πληροφοριών μου) που θα βρείτε εδώ, δηλώνοντας ότι επιθυμείτε να εξαιρεθείτε από τις πωλήσεις [όπως η διαβίβαση των πληροφοριών σας στους συνεργάτες μας για σκοπούς αντιστοίχισης κοινού με άλλα μέσα εκτός από τα cookies ή τις τεχνολογίες παρακολούθησης ιστού που αναφέρονται στην παράγραφο (2) κατωτέρω] και 
• πατήστε Προτιμήσεις Cookies στο υποσέλιδο παρακάτω και επιλέξτε «Όχι» στις επιλογές για τα cookies «Απόδοσης και λειτουργικότητας» και «Διαφήμισης», και στη συνέχεια πατήστε «Υποβολή προτιμήσεων». Έτσι θα απενεργοποιηθούν τα cookies απόδοσης, λειτουργικότητας και διαφήμισης και οι τεχνολογίες παρακολούθησης ιστού στον ιστότοπό μας, συμπεριλαμβανομένων όσων χρησιμοποιούνται για σκοπούς αντιστοίχισης κοινού και εξατομικευμένων διαφημίσεων. Η απενεργοποίηση αυτών των cookies και των τεχνολογιών παρακολούθησης ιστού μπορεί να ισχύει μόνο για το συγκεκριμένο πρόγραμμα περιήγησης από το οποίο πατήσατε τον σύνδεσμο και οι προτιμήσεις σας μπορούν να επανέλθουν αν αλλάξετε τις ρυθμίσεις σας.

Εξουσιοδοτημένος εκπρόσωπος: Μπορείτε να εξουσιοδοτήσετε έναν εκπρόσωπο να υποβάλει ένα αίτημα για λογαριασμό σας. Επομένως, αρκεί να χορηγήσετε στον εξουσιοδοτημένο εκπρόσωπό σας ρητή και υπογεγραμμένη άδεια για την υποβολή αιτήματος εκ μέρους σας, και να είναι δυνατή η επαλήθευση της ταυτότητάς του.  Εάν κατοικείτε στην Καλιφόρνια και θέλετε να ορίσετε έναν εκπρόσωπο για τους σκοπούς της υποβολής ενός αιτήματος, ο εκπρόσωπός σας πρέπει να εγγραφεί στο Υπουργείο Εσωτερικών της Καλιφόρνια και να προσκομίσει ένα αντίγραφο της εν λόγω εγγραφής μαζί με το σχετικό επαληθευμένο αίτημα του καταναλωτή. Φροντίστε να διασφαλίσετε ότι ο εξουσιοδοτημένος εκπρόσωπός σας θα ακολουθήσει τις παραπάνω οδηγίες για την υποβολή του αιτήματος, και να αποστείλετε τη γραπτή δήλωση που εξουσιοδοτεί τον εκπρόσωπο να δράσει εκ μέρους σας, επικυρωμένη από έναν συμβολαιογράφο, στην ακόλουθη διεύθυνση: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. Εάν ο εξουσιοδοτημένος εκπρόσωπός σας διαθέτει πληρεξούσιο, ενδεχομένως να μην χρειάζεται να προβεί στα παραπάνω βήματα.

Μπορείτε επίσης να επικοινωνήσετε μαζί μας τηλεφωνικά στον αριθμό 844-441-9869 (PIN: 892274) για να ασκήσετε τα ισχύοντα δικαιώματά σας και μπορείτε να υποβάλετε καταγγελία στην αρμόδια αρχή προστασίας δεδομένων σχετικά με την επεξεργασία των προσωπικών πληροφοριών σας. Μπορείτε επίσης να αντιταχθείτε ή να περιορίσετε την περαιτέρω επεξεργασία των προσωπικών σας πληροφοριών και να ασκήσετε έφεση κατά οποιωνδήποτε αποφάσεων που αφορούν την άσκηση των ισχυόντων δικαιωμάτων σας. Δεν θα προβούμε σε διακρίσεις εις βάρος σας για την άσκηση των ισχυόντων δικαιωμάτων σας.

Αν ζητήσετε τη διαγραφή των δεδομένων σας, η πραγματοποίησή της σημαίνει και αφαίρεση της δυνατότητας να έχετε πρόσβαση σε οποιονδήποτε λογαριασμό σας στη Company. Δεν έχουμε καμία υποχρέωση να διατηρήσουμε τις πληροφορίες σας και ενδέχεται να διαγράψουμε το σύνολο ή μέρος των πληροφοριών σας χωρίς καμία ευθύνη. Ενδέχεται, ωστόσο, να διατηρήσουμε πληροφορίες που σας αφορούν εάν πιστεύουμε ότι μπορεί να είναι απαραίτητες για την αποτροπή απάτης ή μελλοντικής κατάχρησης, εάν απαιτείται βάσει νόμου ή για νόμιμους σκοπούς, κατά περίπτωση, όπως η ανάλυση μη προσωπικών πληροφοριών, η ανάκτηση λογαριασμού, η διατήρηση της λειτουργικότητας ή της ασφάλειας των συστημάτων μας, ο έλεγχος των αρχείων μας ή η επιβολή των δικαιωμάτων και των υποχρεώσεών μας στο πλαίσιο των συμβάσεών μας.

Τα προϊόντα και οι υπηρεσίες μας, συμπεριλαμβανομένων των ιστοτόπων μας και των ιδιόκτητων ψηφιακών μέσων, ενδέχεται να περιέχουν συνδέσμους προς ή να σας παρέχουν τη δυνατότητα πρόσβασης σε ιστότοπους, προϊόντα και υπηρεσίες τρίτων. Δεν είμαστε υπεύθυνοι για τις πρακτικές προστασίας απορρήτου που χρησιμοποιούν οι εν λόγω τρίτοι, ούτε φέρουμε ευθύνη για τις πληροφορίες ή το περιεχόμενο που περιέχουν τα προϊόντα και οι υπηρεσίες τους. Η παρούσα Δήλωση Ιδιωτικού Απορρήτου ισχύει αποκλειστικά για τις πληροφορίες που συλλέγουμε εμείς. Σας προτρέπουμε να διαβάσετε τις πολιτικές απορρήτου οποιωνδήποτε τρίτων μερών προτού προχωρήσετε στη χρήση των ιστοτόπων, των προϊόντων ή των υπηρεσιών τους.

Είναι σημαντικό να λαμβάνετε μέτρα για την προστασία από κάθε μη εξουσιοδοτημένη πρόσβαση στα προϊόντα της Company που έχετε στην κατοχή σας, στα διαπιστευτήρια του λογαριασμού σας και στους υπολογιστές ή τις συσκευές σας. Εάν πιστεύετε ότι έχει διακυβευθεί η ασφάλεια του λογαριασμού ή των προσωπικών πληροφοριών σας, Επικοινωνήστε μαζί μας. Λάβετε υπόψη ότι, παρά τις προσπάθειές μας να διατηρήσουμε εύλογα και κατάλληλα φυσικά, ηλεκτρονικά, και διαδικαστικά μέτρα ασφαλείας, δεν υπάρχει σύστημα ασφαλείας που δεν μπορεί να παραβιαστεί. Σε περίπτωση παραβίασης της ασφάλειας, θα ειδοποιήσουμε αμέσως τόσο εσάς όσο και τις αρμόδιες αρχές, όπως απαιτεί ο νόμος.

Θα αποθηκεύσουμε τις προσωπικές σας πληροφορίες σύμφωνα με την ισχύουσα νομοθεσία για την προστασία των δεδομένων, θα διατηρήσουμε τέτοιες πληροφορίες σύμφωνα με την πολιτική μας για τη διατήρηση των δεδομένων για όσο καιρό απαιτείται ώστε να εκπληρωθούν οι στόχοι που περιγράφονται στην παρούσα Δήλωση Ιδιωτικού Απορρήτου και θα διαγράψουμε τέτοιες πληροφορίες σύμφωνα με την πολιτική μας για τη διαγραφή, εκτός κι αν απαιτείται ή επιτρέπεται βάσει νόμου μια μεγαλύτερη περίοδος διακράτησης. Οι ευαίσθητες πληροφορίες θα χρησιμοποιούνται για τη συγκεκριμένη συναλλαγή για την οποία προορίζονταν και θα διατηρούνται από εμάς μόνο για τη χρονική περίοδο που απαιτείται για την ολοκλήρωση της συναλλαγής ή όπως άλλως επιτρέπεται από τον χρήστη.

Δεν συλλέγουμε εν γνώσει μας ούτε χρησιμοποιούμε ή γνωστοποιούμε πληροφορίες από παιδιά ηλικίας κάτω των 16 ετών. Εάν διαπιστώσουμε ότι έχουμε συλλέξει τις προσωπικές πληροφορίες ενός παιδιού ηλικίας κάτω των 16 ετών —ή το αντίστοιχο ελάχιστο όριο ηλικίας που ισχύει στην εκάστοτε χώρα, όπως είναι η ηλικία των 13 ετών στις Ηνωμένες Πολιτείες ή των 14 ετών στη Λαϊκή Δημοκρατία της Κίνας (η οποία, για τους σκοπούς της παρούσας Δήλωσης Ιδιωτικού Απορρήτου, δεν περιλαμβάνει την Ειδική Διοικητική Περιοχή του Χονγκ Κονγκ, την Ειδική Διοικητική Περιοχή του Μακάο και την περιοχή της Ταϊβάν) — θα λάβουμε μέτρα για τη διαγραφή των πληροφοριών το συντομότερο δυνατό. Παρακαλούμε Επικοινωνήστε μαζί μας αμέσως μόλις λάβετε γνώση ότι ένα παιδί κάτω των 16 ετών μάς έχει παράσχει προσωπικές πληροφορίες.

Εάν είστε κάτοικος της Καλιφόρνια κάτω των 18 ετών και είστε εγγεγραμμένος χρήστης των προϊόντων ή των υπηρεσιών μας, η νομοθεσία της Καλιφόρνια σάς επιτρέπει να ζητήσετε την αφαίρεση περιεχομένου ή πληροφοριών που έχετε αναρτήσει δημοσίως. Για να υποβάλετε το σχετικό αίτημα Επικοινωνήστε μαζί μας με συγκεκριμένα στοιχεία για το πού έχει αναρτηθεί το περιεχόμενο ή οι πληροφορίες, βεβαιώνοντας ότι πράγματι έχετε προβεί στη σχετική ανάρτηση. Στη συνέχεια, θα καταβάλλουμε εύλογες, καλόπιστες προσπάθειες για να αφαιρέσουμε την ανάρτηση από ενδεχόμενη δημόσια προβολή ή να την ανωνυμοποιήσουμε ούτως ώστε να μην είναι δυνατή η ταυτοποίησή σας, στον βαθμό που απαιτείται από την ισχύουσα νομοθεσία. Επισημαίνεται ότι το σχετικό αίτημα δεν διασφαλίζει την πλήρη ή ολοκληρωμένη διαγραφή του περιεχομένου ή των πληροφοριών που έχετε αναρτήσει και ότι ενδέχεται να υπάρχουν περιστάσεις στις οποίες ο νόμος δεν απαιτεί ή δεν επιτρέπει τη διαγραφή ακόμα και αν υπάρξει σχετικό αίτημα.

Όταν γνωστοποιούμε τις προσωπικές πληροφορίες σας στους συνεργάτες μας, σε συνδεδεμένες εταιρείες της Company και σε παρόχους υπηρεσιών, οι προσωπικές πληροφορίες σας ενδέχεται να διαβιβαστούν ή/και να καταστούν προσβάσιμες από χώρες εκτός του Ευρωπαϊκού Οικονομικού Χώρου ή της Λαϊκής Δημοκρατίας της Κίνας. Σε αυτές τις περιπτώσεις, θα συνάψουμε πρότυπες συμβατικές ρήτρες όπως αυτές που έχει εγκρίνει η Ευρωπαϊκή Επιτροπή ή η Διοίκηση Κυβερνοχώρου της Κίνας, κατά περίπτωση, ή θα βασιστούμε σε εναλλακτικές νομικές βάσεις και θα εφαρμόσουμε υποχρεωτικά μέτρα προκειμένου να ενεργούμε σύμφωνα με την ισχύουσα νομοθεσία (για παράδειγμα, δημιουργώντας μια διαδικασία για τη γνωστοποίηση πρόσθετων απαιτούμενων πληροφοριών σε εσάς όταν διαβιβάζουμε τις προσωπικές πληροφορίες σας εκτός της Λαϊκής Δημοκρατίας της Κίνας). Για ορισμένες υπηρεσίες μας, οι προσωπικές πληροφορίες σας ενδέχεται να διαβιβαστούν ή/και να αποθηκευτούν και να υποβληθούν σε επεξεργασία σε διακομιστές που βρίσκονται στις Ηνωμένες Πολιτείες ή σε άλλες τοποθεσίες εκτός της χώρας όπου διαμένετε, με σκοπό την παροχή των υπηρεσιών σε εσάς.

Ενδέχεται κατά περιόδους να τροποποιούμε την παρούσα Δήλωση Ιδιωτικού Απορρήτου, μεταξύ άλλων για να συμβαδίζουμε με τις νέες τεχνολογίες, τις πρακτικές του κλάδου και τις κανονιστικές απαιτήσεις. Οι εν λόγω τροποποιήσεις θα είναι πιθανότατα μικρής σημασίας. Κάθε μη ουσιαστική αλλαγή θα ισχύει αμέσως μετά τη δημοσίευση της επικαιροποιημένης Δήλωσης Ιδιωτικού Απορρήτου, και θα φροντίζουμε να αναφέρουμε την ημερομηνία τελευταίας τροποποίησης στην αρχή του παρόντος εγγράφου. Ωστόσο, ενδέχεται σε ορισμένες περιπτώσεις να υπάρχουν πιο σημαντικές τροποποιήσεις στη Δήλωση Ιδιωτικού Απορρήτου. Σε αυτές τις περιπτώσεις, θα σας παρέχουμε σαφή ενημέρωση για τις εν λόγω τροποποιήσεις στον ιστότοπό μας ή θα σας αποστέλλουμε απευθείας σχετική ειδοποίηση. 

Η συνέχιση της χρήσης των προϊόντων και των υπηρεσιών μας μετά την ημερομηνία έναρξης ισχύος της Δήλωσης Ιδιωτικού Απορρήτου ισοδυναμεί με αποδοχή της αναθεωρημένης έκδοσης της Δήλωσης Ιδιωτικού Απορρήτου. Εάν δεν συμφωνείτε με την αναθεωρημένη έκδοση της Δήλωσης Ιδιωτικού Απορρήτου, παρακαλούμε να διακόψετε τη χρήση των προϊόντων και των υπηρεσιών μας και να Επικοινωνήσετε μαζί μας για την κατάργηση οποιωνδήποτε λογαριασμών έχετε δημιουργήσει.

Για οποιαδήποτε ερώτηση σχετικά με την παρούσα Δήλωση Ιδιωτικού Απορρήτου ή την εφαρμογή της, μπορείτε να στείλετε e-mail στον Υπεύθυνο Προστασίας Δεδομένων (ΥΠΔ) της εταιρείας μας στο DPO@sandisk.com. Μπορείτε επίσης να επικοινωνήσετε μαζί μας μέσω της διαδικτυακής φόρμας ή να μας στείλετε μια επιστολή μέσω ταχυδρομείου στην πλησιέστερη σε εσάς τοποθεσία στη διεύθυνση: Υπόψη: Νομικού τμήματος: Ερώτημα σχετικά με τη Δήλωση Ιδιωτικού Απορρήτου.

Για πελάτες στην Ευρωπαϊκή Ένωση, έχουμε καταχωρήσει τον ΥΠΔ μας στην Ιρλανδική Επιτροπή Προστασίας Δεδομένων. Εάν έχετε οποιαδήποτε απορία ή προβληματισμό σχετικά με τις πρακτικές ιδιωτικού απορρήτου μας, σας προτρέπουμε να επικοινωνήσετε με τον ΥΠΔ της εταιρείας μας στην παραπάνω διεύθυνση e-mail.

Personenbezogene Daten sind sämtliche Daten, die dazu verwendet werden können, Sie direkt oder indirekt zu identifizieren. Personenbezogene Daten umfassen auch Daten, die mit anderen Daten verknüpft sind, die dazu verwendet werden können, Sie direkt oder indirekt zu identifizieren. Personenbezogene Daten umfassen keine Daten, die unwiderruflich anonymisiert oder aggregiert wurden, sodass wir nicht mehr in der Lage sind, Sie in Verbindung mit anderen Daten oder anderweitig zu identifizieren. Wenn wir anonymisierte Daten verarbeiten, werden diese auch weiterhin in anonymisierter Form aufbewahrt und verwendet.

Nachfolgend finden Sie eine Beschreibung der Arten von personenbezogenen Daten, die wir möglicherweise erfassen, und wie wir sie verarbeiten:

Welche personenbezogenen Daten wir erfassen

Je nach den von Ihnen in Anspruch genommenen Produkten und Diensten erfassen wir, so wie auch in den vergangenen 12 Monaten, verschiedene Arten von personenbezogenen Daten über Sie:

• Persönliche Identifikationsmerkmale, einschließlich Name, Benutzername, E-Mail-Adresse, Telefonnummer sowie Postanschrift.
• Geschäftsdaten, einschließlich der von Kunden gekauften oder in Betracht gezogenen Produkte oder Dienstleistungen, Daten über Ihr Company Konto sowie Ihre Authentifizierungsdaten, Rechnungsadresse, Lieferadresse und Kontaktdaten.
• Finanzdaten, einschließlich bestimmter eingeschränkter Daten zu Kredit- oder Debitkarten.
• Persönliche Merkmale, z. B. demografische Daten, einschließlich Ihres Standorts, Alters, Geschlechts, Höhe des Einkommens, Ihrer Beschäftigung oder Ihres Bildungsniveaus.
• Allgemeine Standortdaten: Sofern verfügbar, können unsere Dienste GPS, den aus Ihrer IP-Adresse abgeleiteten Standort und andere Technologien verwenden, um den ungefähren Standort von Computern, Telefonen oder anderen Geräten zu bestimmen, auf denen Sie unsere Produkte oder Dienste installieren bzw. darauf zugreifen.
• Daten über Internet- oder andere elektronische Netzaktivitäten, einschließlich Browserverlauf, Suchverlauf und Daten über die Nutzung unserer Produkte und Dienste, wie z. B. das von Ihnen verwendete Gerät, Ihre Geräteeinstellungen, die eindeutigen Identifikationsmerkmale sowie die IP-Adresse Ihres Geräts, Ihr Betriebssystem, der von Ihnen verwendete Internetbrowser, Nutzungsdaten, Diagnosedaten, Browsingdaten, Sitzungszusammenfassungsdaten, CPU- und andere Nutzungsstatistiken, API-Aufrufe, Dienstabsturzdaten, Netzwerkstatus, Speicherverwendung, Suchbegriffe und Dateieigenschaften (einschließlich Eigenschaften von Fotos, Videos, Musikdateien und Dokumenten).
• Berufs- oder beschäftigungsbezogene Daten, wie z. B. Position, Rolle, Beruf, bisherige Berufserfahrung sowie aktueller oder ehemaliger Arbeitgeber.
• Rückschlüsse auf personenbezogene Daten, z. B. Daten über Ihre Interessen oder Ihr Kaufverhalten.
• Sensible personenbezogene Daten, insbesondere Daten zu Kredit- oder Debitkarten, die bei unserer Zahlungsverarbeitung zur Ausführung einer von Ihnen angeforderten Transaktion verwendet werden.

Zusätzlich zu den oben genannten Kategorien personenbezogener Daten können Sie uns weitere personenbezogene Daten zur Verfügung stellen, z. B. wenn Sie ein Konto erstellen, ein Formular ausfüllen, uns ein Foto zukommen lassen oder eine Bewerbung einreichen.

So erfassen wir personenbezogene Daten

• Daten, die Sie uns gegenüber angeben: Wir können personenbezogene Daten erfassen, die Sie uns gegenüber angeben, wenn Sie unsere Produkte und Dienstleistungen in Anspruch nehmen, ein Konto erstellen, uns kontaktieren, an einer Umfrage teilnehmen, sich an Diskussionen in der Community oder in Chatrooms beteiligen, sich um eine Stelle bewerben, sich für den Erhalt unserer Marketingmitteilungen anmelden oder bei Veranstaltungen persönlich oder anderweitig mit uns in Kontakt treten. Zahlungsrelevante Daten: Wenn Sie eine Bestellung aufgeben, können wir personenbezogene Daten in Zusammenhang mit der Bestellung erfassen. 
• Informationen über die Verwendung unserer Produkte und Dienste: Wenn Sie unsere Produkte und Dienstleistungen, einschließlich unserer Websites und Web-, Mobil- sowie Desktop-Anwendungen, nutzen oder unsere E-Mails oder Werbung ansehen, erfassen wir möglicherweise Daten von oder über die Computer, Telefone oder anderen Geräte, auf denen Sie unsere Produkte oder Dienstleistungen installieren bzw. darauf zugreifen. Einige dieser Daten erfassen wir möglicherweise automatisch. Für mehr Informationen dazu, wie wir Webtracking-Technologien einsetzen und welche Möglichkeiten Sie diesbezüglich haben, lesen Sie bitte unsere Cookie-Hinweise.
• Daten von Drittanbietern: Wir erfassen möglicherweise Daten von Drittanbietern wie Geschäftspartnern, Marketingagenturen und Dienstleistungsunternehmen. Dazu zählen Ihre Kontaktdaten von Marketingpartnern, wenn wir gemeinsame Marketing- und Co-Branding-Aktivitäten durchführen, Ihre IP-Adresse oder Standortdaten von Dienstleistungsunternehmen, um Ihnen bestimmte Produkte oder Dienste anzubieten, die für Ihren Standort relevant sind, sowie Daten aus Ihren sozialen Netzwerken, um Ihre Produktnutzung zu authentifizieren, oder wenn Sie unseren Produkten und Diensten die Zugriffsrechte einräumen.
• Daten aus öffentlichen Quellen: Wir können Daten aus staatlichen Quellen und Aufzeichnungen und anderen öffentlich zugänglichen Daten sammeln.

Wie wir Ihre personenbezogenen Daten nutzen

Wir können Ihre personenbezogenen Daten für die Zwecke nutzen, die in dieser Datenschutzerklärung beschrieben werden. Grundsätzlich nutzen wir personenbezogene Daten, um Ihre Verwendung unserer Produkte und Dienste zu ermöglichen, zu verbessern, weiterzuentwickeln und zu personalisieren, um mit Ihnen zu kommunizieren, um Ihnen zielgerichtete Werbeanzeigen und Dienste bereitzustellen sowie um uns und unsere Benutzer zu schützen. Wir können Ihre Daten mit Ihrem Einverständnis zur Erfüllung einer gesetzlichen Pflicht, zur Ausübung eines Vertrags mit Ihnen oder aus unseren legitimen Interessen im gesetzlich vorgeschriebenen Rahmen nutzen. Company ist der Datenverantwortliche und sammelt, verarbeitet und entscheidet über die Verarbeitung Ihrer personenbezogenen Daten für die folgenden Zwecke:

• Ihre Verwendung unserer Produkte und Dienste ermöglichen, verbessern, weiterentwickeln und personalisieren: Wir können personenbezogene Daten nutzen, wenn sie uns helfen, Ihre Verwendung unserer Produkte und Dienste zu ermögliche, zu verbessern, weiterzuentwickeln und zu personalisieren. Dies umfasst die Nutzung Ihrer personenbezogenen Daten für Zwecke wie Datenanalyse, Marktforschung und Prüfungen. Wir führen eine solche Verarbeitung entsprechend Ihrem Einverständnis oder aus unserem legitimen Interesse durch, Ihnen Produkte und Dienste bereitzustellen und für Geschäftskontinuität zu sorgen. Wenn Sie an einem Gewinnspiel, Wettbewerb oder einer anderen Aktion teilnehmen, können wir die personenbezogenen Daten, die Sie uns gegenüber angeben, zur Durchführung solcher Aktionen nutzen. Einige dieser Aktivitäten können zusätzliche Regeln haben, die möglicherweise näher bestimmen, wie wir personenbezogene Daten nutzen. Wir raten Ihnen daher, diese Regeln sorgfältig durchzulesen, bevor Sie an einer solchen Aktion teilnehmen.
• Kommunikation mit Ihnen: Wir können Ihre personenbezogenen Daten nutzen, um auf Ihre Anfragen zu antworten, Ihnen wichtige Mitteilungen zu senden, z. B. zu Ihrem Konto oder zu Produkten, Diensten und Transaktionen oder Änderungen an unseren Richtlinien und Geschäftsbedingungen. Eine derartige Verarbeitung erfolgt, da dies zur Ausübung eines Vertrags mit Ihnen oder aus unseren legitimen Interessen bei der Interaktion mit Ihnen erforderlich ist, um unsere Produkte und Dienste bereitzustellen. Wir können Ihre personenbezogenen Daten auch nutzen, um Ihnen Mitteilungen in Bezug auf Stellenbewerbungen zu senden. Unsere Datenschutzhinweise für Bewerber und Mitarbeiter enthalten weitere Informationen bezüglich der personenbezogenen Daten, die wir sammeln, sowie dazu, wie wir personenbezogene Daten im Rahmen von Stellenbewerbungen nutzen. Abhängig von Ihrem vorherigen ausdrücklichen Einverständnis können wir personenbezogene Daten nutzen, um Ihnen Marketingmitteilungen in Bezug auf Company eigene Produkte und Dienste zu senden. Wir können Ihre personenbezogenen Daten auch an Drittpartner weitergeben, die Ihnen möglicherweise Marketingmitteilungen in Bezug auf ihre Produkte und Dienste senden. Wenn Sie keine E-Mail-Mitteilungen zu Marketingzwecken mehr erhalten möchten, kontaktieren Sie uns bitte. Wir können Ihre personenbezogenen Daten nutzen, um Ihre Anfragen zu bearbeiten und zu beantworten, wenn Sie uns kontaktieren.
• Zielgerichtete Werbung und Dienste anbieten und messen: Wir können personenbezogene Daten auch nutzen, um Ihnen personalisierte Werbung anzuzeigen, z. B. auf Drittanbieter-Websites und in Drittanwendungen, und um die Wirksamkeit unserer Werbekampagnen zu messen. Weitere Informationen dazu, wie wir Webtracking-Technologien für personalisierte Werbung einsetzen und welche Möglichkeiten Sie diesbezüglich haben, finden Sie in unseren Cookie-Hinweisen. Wir können auch einen Zielgruppenabgleich durchführen, um Personen zu erreichen, die unsere Produkte und Dienste verwendet haben oder in einer oder mehrerer unserer Datenbanken stehen (bzw. Personen, die solchen Personen ähneln). Dazu liefern wir eine Liste verschlüsselter E-Mail-Adressen an einen Werbepartner oder bauen den Tracking-Pixel eines Werbepartners in unsere Produkte und Dienste ein. Der Werbepartner gleicht anschließend übereinstimmende Faktoren zwischen unseren und seinen Daten ab.
• Sicherheit und Schutz gewährleisten: Wir können personenbezogene Daten nutzen, um Konten und Benutzeraktivitäten zu verifizieren sowie um Sicherheit und Schutz zu gewährleisten. Dazu überwachen wir betrügerisches Verhalten und untersuchen verdächtige oder mutmaßlich illegale Handlungen sowie Verstöße gegen unsere Geschäftsbedingungen oder Richtlinien. Eine derartige Verarbeitung erfolgt, da dies zur Ausübung eines Vertrags mit Ihnen oder aus unseren legitimen Interessen erforderlich ist, um die Sicherheit unserer Produkte und Dienste sicherzustellen.
• Zahlungsabwicklung: Unsere Zahlungsverarbeitung kann Ihre personenbezogenen Daten, einschließlich der Geschäfts- und Finanzdaten, insbesondere für die Bearbeitung von Zahlungen und Transaktionsgebühren im Zusammenhang mit einem von Ihnen angeforderten Produkt oder einer von Ihnen angeforderten Dienstleistung verwenden.

Für sämtliche oben beschriebene Verwendungen Ihrer Daten, die laut geltendem Recht Ihr ausdrückliches vorheriges Einverständnis voraussetzen, können Sie dieses Einverständnis widerrufen, indem Sie uns über unser Onlineformular kontaktieren.

Als globales Unternehmen hat die Company eine Reihe von verbundenen Unternehmen in verschiedenen Jurisdiktionen. Alle diese verbundenen Unternehmen sind Datenverantwortliche und sammeln, verarbeiten und entscheiden über die Verarbeitung Ihrer personenbezogenen Daten, um Ihnen die gewünschten Produkte und Dienste bereitzustellen.

Wir nutzen Cookies und ähnliche Technologien (und haben sie in den vergangenen 12 Monaten genutzt), um unsere Produkte und Dienste bereitzustellen, zu schützen und zu verbessern, etwa indem wir Inhalte personalisieren, das Nutzerverhalten nachvollziehen und ein sichereres Benutzererlebnis bereitstellen. Wir nutzen diese Technologien auch, um Ihnen personalisierte Werbung anzuzeigen, einschließlich auf Drittanbieter-Websites und in Drittanwendungen, und um die Wirksamkeit unserer Werbekampagnen zu messen.

Für mehr Informationen dazu, wie wir Cookies und Webtracking-Technologien einsetzen und welche Wahlmöglichkeiten Sie diesbezüglich haben, lesen Sie bitte unsere Cookie-Hinweise.

Wir stellen den unten beschriebenen strategischen Partnern und anderen Empfängern bestimmte personenbezogene Daten für die in dieser Datenschutzerklärung beschriebenen Zwecke zur Verfügung.

Dienstleistungsunternehmen und andere Unternehmen

Wir können personenbezogene Daten an Unternehmen weitergeben, die in unserem Auftrag Dienste anbieten, etwa Website-Hosting, E-Mail-Dienste, Marketing, Werbung, Sponsoring von Gewinnspielen, Wettbewerben und andere Werbeaktionen, Wirtschaftsprüfungen, Zahlungsabwicklung, Ausführung von Kundenbestellungen, Datenanalyse, Kundenservice, Marktforschung und Kundenzufriedenheitsumfragen, Cloudspeicherdienste und andere Dienste, die bei der Bereitstellung oder dem Verkauf unserer Produkte und Dienste helfen. Wir können Ihre personenbezogenen Daten auch an Werbetreibende, Datenanalyseanbieter und soziale Netzwerke weitergeben, die uns dabei helfen, Produktempfehlungen abzugeben und Ihnen Marketingnachrichten und relevante Inhalte zu senden. Diese Unternehmen sind verpflichtet, Ihre Daten zu schützen, und können sich in allen Regionen befinden, in denen wir tätig sind.

Verbundene Unternehmen und Geschäftstransaktionen

Wir können personenbezogene Daten mit allen verbundenen Unternehmen der Company teilen. Im Falle einer Fusion, Neuorganisation, Ausgliederung, Übertragung, Akquisition, Veräußerung, Beauftragung, eines Verkaufs oder Joint-Ventures von jeglichen oder sämtlichen Teilen unseres Unternehmens, einschließlich in Zusammenhang mit einer Insolvenz oder ähnlichen Verfahren, übertragen wir möglicherweise sämtliche personenbezogenen Daten an das entsprechende Drittunternehmen.

Einhaltung der gesetzlichen Pflichten und Sicherheit

Unter Umständen sind wir gesetzlich oder in Folge eines Rechtsverfahrens, Rechtsstreits oder einer offiziellen Anfrage von öffentlichen oder staatlichen Behörden in oder außerhalb Ihres Wohnortlandes verpflichtet, personenbezogene Daten offenzulegen. Wir können personenbezogene Daten auch offenlegen, wenn wir die Offenlegung im Interesse der öffentlichen Sicherheit, der Strafverfolgung oder anderer wichtiger öffentlicher Anliegen als notwendig oder angemessen erachten.  Wir können personenbezogene Daten auch offenlegen, wenn wir in gutem Glauben der Meinung sind, dass die Offenlegung in angemessenem Maße nötig ist, um unsere Rechte zu schützen und verfügbare Rechtsmittel auszuschöpfen, unsere Geschäftsbedingungen durchzusetzen, Betrugsfälle zu untersuchen oder unseren Betrieb oder unsere Benutzer zu schützen.

Wir unternehmen angemessene Schritte, um sicherzustellen, dass Ihre personenbezogenen Daten korrekt, vollständig und aktuell sind. Je nach Ihrem Wohnort haben Sie möglicherweise die unten beschriebenen Rechte.

• Auskunftsrecht über die von uns erfassten personenbezogenen Daten, einschließlich der Quellen, aus denen die personenbezogenen Daten erfasst werden, unserer Zwecke zur Erfassung und der Kategorien von Empfängern, an die wir Ihre personenbezogenen Daten weitergegeben haben, einschließlich der Weitergabe an Dritte zu eigenen Marketingzwecken
• Recht auf Zugriffauf die personenbezogenen Daten, die wir über Sie verarbeiten, in einem strukturierten und standardisierten Format
• Recht auf Löschung Ihrer personenbezogenen Daten
• Recht auf Ablehnung des Verkaufs oder der Weitergabe Ihrer personenbezogenen Daten an Dritte
• Recht auf Abbestellung zielgerichteter Werbung, einschließlich der Weitergabe Ihrer personenbezogenen Daten an Dritte für kontextübergreifende verhaltensbezogene Werbung
• Recht auf Ablehnung bestimmter automatisierter Entscheidungsprozesse
• Recht auf Korrektur oder Berichtigung falscher Daten über Sie

Um Ihre geltenden Rechte auszuüben, füllen Sie bitte unser Onlineformular aus. Wir werden Ihre Anfrage innerhalb des gesetzlich vorgeschriebenen Zeitrahmens (in der Regel innerhalb von 30 Tagen) beantworten.

Wie gesetzlich vorgeschrieben und zum Schutz der Daten und der Sicherheit Ihrer personenbezogenen Daten verlangen wir möglicherweise Angaben von Ihnen, um Ihre Identität und Ihr Recht auf Zugang zu solchen Daten zu bestätigen, sowie um die von uns verwalteten, personenbezogenen Daten zu finden und sie Ihnen zur Verfügung zu stellen. Es gibt Fälle, in denen das geltende Recht oder behördliche Vorgaben es erlauben oder sogar verlangen, dass wir eine Anfrage ablehnen.

Wenn Sie in Kalifornien oder einem anderen Staat oder einer anderen Gerichtsbarkeit ansässig sind, wo dieses Recht vorgesehen ist, können Sie dem Verkauf oder der Weitergabe Ihrer personenbezogenen Daten durch uns an Dritte für die Nutzung Ihrer oben beschriebenen Daten, einschließlich kontextübergreifender, verhaltensbezogener Werbung, widersprechen:

• Reichen Sie einen entsprechenden Antrag über das Formular „Widerspruch zum Verkauf oder zur Weitergabe meiner personenbezogenen Daten“ ein, das Sie hierfinden. Erklären Sie dabei, dass Sie dem Verkauf widersprechen möchten (etwa der Weitergabe Ihrer Daten an unsere Partner zum Zwecke des Zielgruppenabgleichs mithilfe anderer Technologien als Cookies oder Webtracking, wie unter (2) erwähnt). 
• Klicken Sie dann in der Fußzeile auf Cookie-Einstellungen und schalten Sie die Cookie-Optionen „Leistung und Funktionalität“ sowie „Werbung“ beide auf „Nein“ und klicken Sie auf „Auswahl speichern“. Damit werden Leistungs-, Funktionalitäts- und Werbe-Cookies sowie Webtracking-Technologien auf unserer Website deaktiviert, einschließlich Technologien zum Zielgruppenabgleich und personalisierte Werbung. Die Deaktivierung dieser Cookies und Webtracking-Technologien greift möglicherweise nur für den Browser, in dem Sie den Link anklicken. Möglicherweise wird Ihre Auswahl auch zurückgesetzt, wenn Sie Ihre Einstellungen ändern.

Bevollmächtigter Vertreter: Sie können auch einen Vertreter bevollmächtigen, eine Anfrage in Ihrem Namen zu senden. Der bevollmächtigte Vertreter benötigt jedoch eine schriftliche und von Ihnen unterzeichnete Erlaubnis, in Ihrem Namen eine Anfrage stellen zu dürfen. Zudem muss uns Ihr bevollmächtigter Vertreter seine Identität nachweisen können.  Wenn Sie in Kalifornien ansässig sind und einen Vertreter für die Antragstellung benennen möchten, muss sich Ihr Vertreter als solcher beim kalifornischen Außenministerium registrieren lassen und eine Kopie dieser Registrierung zusammen mit Ihrem überprüften Verbraucherantrag einreichen. Ihr bevollmächtigter Vertreter muss die obigen Anweisungen befolgen, um einen Antrag zu stellen. Zudem bitten wir Sie um Zusendung Ihrer durch einen Notar beglaubigten schriftlichen Erklärung, die den Vertreter ermächtigt, in Ihrem Namen zu handeln, an folgende Anschrift: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. Wenn Ihr bevollmächtigter Vertreter eine Vollmacht besitzt, sind diese Schritte möglicherweise nicht erforderlich.

Sie können uns auch telefonisch erreichen unter 844-441-9869 (PIN: 892274), um Ihre geltenden Rechte auszuüben. Des Weiteren können Sie bei der zuständigen Datenschutzbehörde eine Beschwerde bezüglich der Verarbeitung Ihrer personenbezogenen Daten einreichen. Sie können auch der weiteren Verarbeitung Ihrer personenbezogenen Daten widersprechen oder diese einschränken und gegen jegliche Entscheidungen, die die Ausübung Ihrer geltenden Rechte betreffen, Widerspruch einlegen. Wir werden Sie nicht wegen der Ausübung Ihrer geltenden Rechte anders behandeln.

Wenn Sie die Löschung Ihrer Daten beantragen, würde Ihnen dies den Zugriff auf jegliche Company Konten verwehren. In diesem Falle sind wir nicht verpflichtet, Ihre Daten aufzubewahren und können einige oder all Ihre Daten ohne Haftbarkeitsansprüche löschen. Wir können jedoch Daten von Ihnen aufbewahren, wenn wir der Meinung sind, dass dies notwendig ist, um Betrug oder künftigen Missbrauch zu verhindern. Dies geschieht jedoch nur, wenn wir gesetzlich dazu verpflichtet sind oder ggf. für legitime Zwecke, wie z. B. zur Analyse nicht personenbezogener Daten, zur Kontowiederherstellung, zur Gewährleistung der Funktionalität oder Sicherheit unserer Systeme, zur Prüfung unserer Aufzeichnungen oder zur Durchsetzung unserer Rechte und Pflichten im Rahmen unserer Vereinbarungen.

Unsere Produkte und Dienste, einschließlich unsere Websites und digitalen Medieninhalte, können Links zu oder die Möglichkeit zum Zugriff auf Drittanbieter-Websites, -Produkte und -Dienste beinhalten. Wir tragen keine Verantwortung für die Datenschutzverfahren dieser Drittanbieter oder die Daten oder Inhalte, die deren Produkte und Dienste enthalten. Diese Datenschutzerklärung gilt ausschließlich für die Daten, die wir erfassen. Wir empfehlen Ihnen, die Datenschutzerklärungen jeglicher Drittanbieter zu lesen, bevor Sie deren Websites, Produkte oder Dienste nutzen.

Wenn wir personenbezogene Daten an unsere Partner, verbundene Unternehmen von Company oder Dienstleistungsunternehmen weitergeben, können Ihre personenbezogenen Daten in Länder außerhalb des Europäischen Wirtschaftsraums oder der Volksrepublik China übertragen und/oder von dort aus zugänglich gemacht werden. Unter diesen Umständen werden wir die von der Europäischen Kommission bzw. den chinesischen Cyberspace-Behörden übernommenen Standardvertragsklauseln verwenden oder uns auf andere Rechtsgrundlagen stützen. Zudem werden wir verbindliche Maßnahmen ergreifen, die dafür sorgen, dass gemäß geltendem Recht gehandelt wird (z. B. ein Verfahren einrichten, um Ihnen bei der Übermittlung Ihrer personenbezogenen Daten aus der Volksrepublik China heraus zusätzliche erforderliche Daten mitzuteilen). Für einige unserer Dienste können Ihre personenbezogenen Daten auf Server in den USA oder anderen Standorten außerhalb des Landes, in dem Sie wohnen, übertragen oder dort gespeichert werden, um Ihnen die Dienste anbieten zu können.

Wir erfassen, verwenden oder teilen wissentlich keine Daten von Minderjährigen unter 16 Jahren. Wenn wir erfahren, dass wir personenbezogene Daten von Minderjährigen unter 16 Jahren erfasst haben – oder je nach Gerichtsbarkeit einem vergleichbaren Mindestalter, z. B. 13 Jahre in den USA oder 14 Jahre in der Volksrepublik China (was in dieser Datenschutzerklärung die SVR Hongkong, SVR Macao und Region Taiwan ausschließt) –, werden wir alle notwendigen Maßnahmen ergreifen, um diese Daten so schnell wie möglich zu löschen. Wenn Sie erfahren, dass Minderjährige unter 16 Jahren uns gegenüber personenbezogene Daten angegeben haben, kontaktieren Sie uns bitte umgehend.

Wenn Sie Einwohner Kaliforniens sowie unter 18 Jahre alt sind und ein registrierter Benutzer unserer Produkte und Dienste sind, haben Sie laut kalifornischen Gesetzen das Recht, die Löschung von Inhalten oder Informationen, die Sie veröffentlicht haben, zu erwirken. Um einen solchen Antrag zu stellen, kontaktieren Sie uns bitte und teilen Sie uns mit, wo die Inhalte oder Daten veröffentlicht wurden, und bestätigen Sie, dass Sie sie veröffentlicht haben. Wir unternehmen dann im gesetzlich vorgeschriebenen Rahmen angemessene Bemühungen, um den Beitrag aus der Öffentlichkeit zu entfernen oder so zu anonymisieren, dass er nicht auf eine einzelne Person zurückgeführt werden kann. Bitte beachten Sie, dass eine solche Anfrage nicht die vollständige oder umfassende Entfernung der Inhalte oder Informationen sicherstellt, die Sie veröffentlicht haben. Es kann Umstände geben, in denen die Löschung auch auf Anfrage hin gesetzlich nicht vorgeschrieben oder zulässig ist.

Wenn wir personenbezogene Daten an unsere Partner, verbundene Unternehmen von Company oder Dienstleistungsunternehmen weitergeben, können Ihre personenbezogenen Daten in Länder außerhalb des Europäischen Wirtschaftsraums oder der Volksrepublik China übertragen und/oder von dort aus zugänglich gemacht werden. Unter diesen Umständen werden wir die von der Europäischen Kommission bzw. den chinesischen Cyberspace-Behörden übernommenen Standardvertragsklauseln verwenden oder uns auf andere Rechtsgrundlagen stützen. Zudem werden wir verbindliche Maßnahmen ergreifen, die dafür sorgen, dass gemäß geltendem Recht gehandelt wird (z. B. ein Verfahren einrichten, um Ihnen bei der Übermittlung Ihrer personenbezogenen Daten aus der Volksrepublik China heraus zusätzliche erforderliche Daten mitzuteilen). Für einige unserer Dienste können Ihre personenbezogenen Daten auf Server in den USA oder anderen Standorten außerhalb des Landes, in dem Sie wohnen, übertragen oder dort gespeichert werden, um Ihnen die Dienste anbieten zu können.

Wir ändern diese Datenschutzerklärung möglicherweise von Zeit zu Zeit, um unter anderem neue Technologien und Verfahren der Branche sowie aufsichtsbehördliche Vorgaben mit einzubeziehen. Wir gehen davon aus, dass der Großteil dieser Änderungen geringfügig sein wird. Alle unwesentlichen Änderungen werden unmittelbar nach Veröffentlichung einer aktualisierten Datenschutzerklärung wirksam, wobei das Datum der letzten Änderung dieses Dokuments oben angegeben wird. Es kann jedoch Fälle geben, in denen wir wesentliche Änderungen an dieser Datenschutzerklärung vornehmen. In solchen Fällen werden wir Sie auf unserer Website deutlich auf solche Änderungen hinweisen oder Ihnen direkt eine Mitteilung senden. 

Bei Weiterverwendung unserer Produkte und Dienste nach dem Inkrafttreten der Datenschutzerklärung erklären Sie sich automatisch mit der geänderten Datenschutzerklärung einverstanden. Wenn Sie mit der geänderten Datenschutzerklärung nicht einverstanden sind, verzichten Sie bitte auf die Weiterverwendung unserer Produkte oder Dienste und kontaktieren Sie uns, um jegliche von Ihnen erstellte Konten zu schließen.

Falls Sie Fragen zu dieser Datenschutzerklärung oder ihrer Umsetzung haben, können Sie sich unter DPO@sandisk.com an unseren Datenschutzbeauftragen (DPO) wenden. Sie können uns auch über unser Webformular erreichen oder uns an folgende Adresse einen Brief an einen Standort in Ihrer Nähe schreiben: Z. Hd.: Rechtsabteilung – Frage Zur Datenschutzerklärung.

Für Kunden innerhalb der Europäischen Union haben wir unseren Datenschutzbeauftragen bei der irischen Datenschutzkommission registriert. Falls Sie Fragen oder Bedenken zu unseren Datenschutzverfahren haben, wenden Sie sich unter der oben genannten E-Mail-Adresse an unseren Datenschutzbeauftragten.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Laatst gewijzigd op 27 september 2024

PDF

In deze Privacyverklaring wordt uitgelegd hoe SanDisk ('Company', 'we', 'wij', 'ons' of 'onze') uw gegevens verzamelt, gebruikt en vrijgeeft. De Privacyverklaring is van toepassingen op alle producten en diensten van Company, behalve voor producten en diensten met een aparte privacyverklaring.

Waar van toepassing, geeft u toestemming voor het gebruik van uw gegevens zoals beschreven in deze Privacyverklaring telkens wanneer u gebruikmaakt van onze producten of diensten. We adviseren u daarom dit document volledig door te lezen en contact met ons op te nemen als u vragen hebt.

Persoonsgegevens zijn gegevens die kunnen worden gebruikt om u direct of indirect te identificeren. Persoonsgegevens bevatten tevens gegevens die zijn gekoppeld aan gegevens die kunnen worden gebruikt om u direct of indirect te identificeren. Persoonsgegevens omvatten geen gegevens die onomkeerbaar geanonimiseerd of samengevoegd zijn zodat zij ons niet langer in staat stellen, in combinatie met andere gegevens of anderszins, om u te identificeren. Voor zover wij geanonimiseerde gegevens verwerken, bewaren en gebruiken wij de gegevens in geanonimiseerde vorm.

Hier volgt een beschrijving van de typen persoonsgegevens die we mogelijk over u verzamelen en hoe we deze mogelijk verwerken:

Welke persoonsgegevens door ons worden verzameld

Afhankelijk van de producten en diensten die u gebruikt, kunnen we verschillende soorten persoonsgegevens van en over u verzamelen en hebben wij dit de afgelopen 12 maanden gedaan:

• Persoonlijke identificatoren, waaronder naam, gebruikersnaam, e-mailadres, telefoonnummer, en postadres of verzendadres.
• Commerciële informatie, waaronder de producten of diensten die door klanten zijn aangeschaft of in overweging worden genomen, informatie over uw Company-account en verificatiegegevens, factuuradres, verzendadres en contactgegevens.
• Financiële informatie, waaronder bepaalde beperkte creditcard- of betaalkaartgegevens.
• Persoonlijke kenmerken, zoals demografische gegevens, waaronder uw locatie, leeftijd, geslacht, inkomensniveau, beroep of opleidingsniveau.
• Algemene locatiegegevens Indien beschikbaar, kunnen onze diensten gebruikmaken van GPS, de locatie die is afgeleid van uw IP-adres en andere technologieën om de geschatte locatie te bepalen van de computers, telefoons of andere apparaten waarop u onze producten of diensten installeert of gebruikt.
• Gegevens over activiteiten op internet of andere elektronische netwerken, waaronder de browsergeschiedenis, zoekgeschiedenis en informatie over uw interactie met onze producten en diensten, zoals het type apparaat dat u gebruikt, uw apparaatconfiguratie, de unieke id van uw apparaat, het IP-adres van uw apparaat, het besturingssysteem, het type internetbrowser dat u gebruikt, gebruiksgegevens, diagnostische gegevens, browsegegevens, sessieoverzichtsgegevens, CPU- en overige gebruiksstatistieken, API-oproepen, informatie over het crashen van diensten, netwerkstatus, gebruik van opslagruimte, zoektermen en bestandskenmerken (inclusief kenmerken voor foto's, video's, muziek en documenten).
• Professionele of werkgerelateerde informatie, zoals functie, rol, beroep, eerdere werkervaring of huidige of voormalige werkgever.
• Gevolgtrekkingen uit persoonsgegevens, zoals informatie over uw interesses of aankoopvoorkeuren.
• Gevoelige persoonsgegevens, met name creditcard- of betaalkaartgegevens die door onze betalingsverwerker worden gebruikt om een door u aangevraagde transactie te kunnen uitvoeren.

Naast de bovenstaande categorieën persoonsgegevens kunt u ervoor kiezen ons aanvullende persoonsgegevens te verstrekken, zoals wanneer u een account maakt, een formulier invult, een foto aan ons verstrekt, of wanneer u solliciteert voor een dienstverband.

Hoe we persoonsgegevens verzamelen

• Gegevens die u verstrekt: We kunnen de persoonsgegevens die u verstrekt, verzamelen als u onze producten en diensten gebruikt, een account maakt, contact met ons opneemt, deelneemt aan een enquête, deelneemt aan communitygesprekken of chatrooms, solliciteert naar een baan, u aanmeldt voor onze marketingcommunicatie, interacties met ons hebt tijdens persoonlijke evenementen of anderszins met ons communiceert. Gegevens over betalingen: Als u een aankoop doet, kunnen we persoonsgegevens in verband met die aankoop verzamelen. 
• Informatie over het gebruik van onze producten en diensten: Wanneer u gebruikmaakt van onze producten en diensten, waaronder onze websites en web-, mobiele en desktoptoepassingen, of onze e-mails of advertenties bekijkt, verzamelen we mogelijk informatie van of over de computers, telefoons of andere apparaten waarop u onze producten of diensten installeert of gebruikt. Sommige van deze gegevens kunnen automatisch worden verzameld. Lees onze Verklaring inzake Cookies voor meer informatie over hoe we webtrackingtechnologieën gebruiken en over de keuzes die u hierbij hebt.
• Informatie van derden: We verzamelen informatie van derden, met inbegrip van zakelijke partners, marketingbureaus en serviceproviders. Dit kan tevens uw contactgegevens van marketingpartners omvatten, wanneer we gezamenlijke marketing of co-brandingactiviteiten uitvoeren, uw IP-adres of locatiegegevens van serviceproviders om bepaalde producten en diensten te bieden die relevant zijn voor uw locatie, en gegevens van uw sociale netwerken ter verificatie van uw productgebruik bij ons of om aan te geven dat u toestemming verleent voor het gebruik van onze producten of diensten.
• Informatie uit openbare bronnen: We kunnen informatie verzamelen uit overheidsbronnen en -records, en andere openbaar beschikbare informatie.

Hoe we uw persoonsgegevens gebruiken

Wij kunnen uw persoonlijke informatie gebruiken voor de doeleinden die in deze Privacyverklaring vermeld staan. In het algemeen gebruiken we persoonsgegevens om onze producten en diensten te leveren, verbeteren en ontwikkelen en uw ervaring daarmee persoonlijk te maken, om met u te communiceren, om u gerichte advertenties en diensten te bieden en om onszelf en onze gebruikers te beschermen. Wij kunnen dit doen op basis van uw toestemming, om een wettelijke verplichting na te komen, om een contract met u uit te voeren of om aan onze gerechtvaardigde belangen te voldoen, voor zover dit door de toepasselijke wetgeving is toegestaan. Company verzamelt, verwerkt en bepaalt als verwerkingsverantwoordelijke hoe uw persoonsgegevens worden verwerkt voor de volgende doeleinden:

• Het leveren, verbeteren en ontwikkelen van en het persoonlijk maken van uw ervaring met van onze producten en diensten: We kunnen persoonsgegevens gebruiken om ons te helpen onze producten en diensten te leveren, verbeteren en ontwikkelen. Dit omvat tevens het gebruik van persoonsgegevens voor doeleinden zoals gegevensanalyse, onderzoek en audits. Wij kunnen deze verwerking uitvoeren op basis van uw toestemming of onze gerechtvaardigde belangen bij het aanbieden van producten en diensten aan u, alsook om de bedrijfscontinuïteit te waarborgen. Als u deelneemt aan een loterij, prijsvraag of andere promotie, kunnen we gebruik maken van de persoonsgegevens die u verstrekt om deze programma’s te organiseren. Voor sommige van deze activiteiten gelden extra regels, die aanvullende informatie kunnen bevatten over hoe we persoonsgegevens gebruiken, dus moedigen we u aan deze regels zorgvuldig door te lezen alvorens deel te nemen.
• Communicatie met u: Wij kunnen persoonsgegevens gebruiken om te reageren op uw vragen en om met u te communiceren over belangrijke kennisgevingen, waaronder kennisgevingen met betrekking tot uw account, producten, diensten, transacties of wijzigingen in onze beleidsregels en voorwaarden. Dergelijke verwerking wordt uitgevoerd om aan een contract met u te voldoen, of is gebaseerd op onze gerechtvaardigde belangen bij interactie met u, zodat we u kunnen voorzien van producten en diensten. Wij kunnen ook persoonlijke informatie gebruiken om met u over uw sollicitaties te communiceren. Onze privacykennisgevingen voor sollicitanten en werknemers bevatten aanvullende informatie over de persoonlijke informatie die wij verzamelen en de manier waarop wij persoonlijke informatie gebruiken in verband met uw sollicitatie. Mits u vooraf uitdrukkelijk toestemming heeft gegeven, kunnen we persoonsgegevens gebruiken om u marketingberichten over de eigen producten en diensten van Company toe te sturen en kunnen we uw persoonsgegevens met externe partners delen, die u wellicht marketingberichten over hun producten en diensten zullen toesturen. Als u niet langer marketingberichten per e-mail wilt ontvangen, neem dan contact met ons op om u hiervoor af te melden. We kunnen uw gegevens gebruiken voor het verwerken van en het reageren op uw aanvragen, wanneer u contact met ons opneemt.
• Aanbieden en beoordelen van gerichte advertenties en diensten: We kunnen persoonsgegevens gebruiken om u te voorzien van persoonlijke advertenties, waaronder die op websites en in toepassingen van derden, en om de effectiviteit van onze promotiecampagnes vast te stellen. Lees onze Verklaring inzake Cookies voor meer informatie over hoe we webtrackingtechnologieën gebruiken voor gepersonaliseerde advertenties en over de keuzes die u hierbij hebt. We kunnen ook doelgroepmatching gebruiken om klanten (of andere vergelijkbare personen) te bereiken die onze producten en diensten hebben gebruikt of die zijn geïdentificeerd in een of meer van onze databases. Dit doen we door een lijst met gehashte e-mailadressen aan een advertentiepartner te verstrekken of door een pixel van een advertentiepartner in onze eigen producten en diensten op te nemen. Op die manier kan de advertentiepartner gemeenschappelijke factoren tussen onze en zijn gegevens matchen.
• Het bevorderen van de veiligheid: We kunnen persoonsgegevens gebruiken om accounts en gebruikersactiviteiten te helpen verifiëren en de veiligheid te bevorderen, bijvoorbeeld door te waken tegen fraude en door onderzoek te doen naar verdachte of mogelijk illegale activiteiten of schendingen van onze voorwaarden of beleidsrichtlijnen. Dergelijke verwerking wordt uitgevoerd omdat het noodzakelijk is om aan een contract met u te voldoen, of gebaseerd is op onze gerechtvaardigde belangen bij het zorgen voor de veiligheid van onze producten en diensten.
• Betalingsverwerking: Onze betalingsverwerker kan uw persoonsgegevens, waaronder commerciële en financiële gegevens, gebruiken voor het verwerken van betalingen en transactiekosten met betrekking tot een product dat of dienst die u hebt aangevraagd.

Voor elke van de hierboven beschreven manieren van gebruik van uw gegevens die volgens de toepasselijke wetgeving uw voorafgaande uitdrukkelijke toestemming vereisen, kunt u uw toestemming intrekken door contact met ons op te nemen via ons webformulier.

Als wereldwijd bedrijf, beschikt Company over een aantal dochterondernemingen in verschillende rechtsgebieden. Elk van deze dochterondernemingen verzamelt, verwerkt en bepaalt hoe uw persoonsgegevens moeten worden verwerkt als verwerkingsverantwoordelijke om te helpen u de producten en diensten te leveren waarom u vraagt.

We gebruiken cookies en vergelijkbare technologieën en hebben dit in de afgelopen 12 maanden gedaan om onze producten en diensten te leveren, beschermen en verbeteren, bijvoorbeeld door het personaliseren van inhoud, het onderzoeken van gebruikersgedrag en het bieden van een veiligere gebruikservaring. We gebruiken deze technologieën ook om u te voorzien van persoonlijke advertenties, waaronder die op websites en in toepassingen van derden, en om de effectiviteit van onze promotiecampagnes vast te stellen.

Lees onze Verklaring inzake Cookies door om meer te weten te komen over hoe we cookies en webtrackingtechnologieën gebruiken en over de keuzes die u hebt.

Wij stellen bepaalde persoonsgegevens beschikbaar aan de strategische partners en andere ontvangers die hieronder worden beschreven voor de doeleinden die worden beschreven in deze Privacyverklaring.

Serviceproviders en andere bedrijven

We kunnen persoonsgegevens delen met serviceproviders en andere bedrijven die namens ons diensten verlenen, zoals hosting van websites; e-maildiensten; marketingadvertenties; sponsoring van loterijen, prijsvragen en andere promoties; auditing; betalingsverwerking; het uitvoeren van orders van klanten; gegevensanalyse; het bieden van klantondersteuning; het uitvoeren van klantenonderzoek en klanttevredenheidsonderzoeken, opslagdiensten in de cloud en andere diensten die helpen bij het leveren of verkopen van onze producten en diensten. We kunnen uw persoonsgegevens ook delen met adverteerders, gegevensanalysebureaus en socialemedianetwerken, die ons helpen bij het doen van productaanbevelingen, het verzenden van marketingberichten en het sturen van relevante content. Deze bedrijven zijn verplicht uw gegevens te beschermen en kunnen zich overal waar we actief zijn bevinden.

Transacties tussen dochterondernemingen en moederbedrijf

Mogelijk delen we persoonsgegevens met alle aan Company gelieerde bedrijven. In geval van een fusie, reorganisatie, overname, joint venture, toewijzing, spin-off, overdracht of verkoop of dispositie van het volledige bedrijf of een deel daarvan, inclusief in relatie tot enig faillissement of tot een soortgelijke situatie, dragen we mogelijk persoonsgegevens in hun geheel over aan de relevante derde.

Juridische conformiteit en beveiliging

Vanwege de wet of ten gevolge van juridische processen, procedures of verzoeken van openbare of overheidsinstanties binnen of buiten uw woonland kan het noodzakelijk zijn dat we persoonsgegevens vrijgeven. Ook geven we mogelijk persoonsgegevens vrij als we vaststellen dat openbaarmaking noodzakelijk of dienstig is ten behoeve van de nationale veiligheid, rechtshandhaving en andere kwesties van openbaar belang.  We kunnen ook persoonsgegevens vrijgeven als we te goeder trouw vaststellen dat openbaarmaking redelijkerwijs noodzakelijk is om onze rechten te beschermen en gebruik te maken van de beschikbare rechtsmiddelen, naleving van onze algemene voorwaarden af te dwingen, fraude te onderzoeken of onze activiteiten of gebruikers te beschermen.

We nemen redelijke stappen om ervoor te zorgen dat uw persoonsgegevens accuraat, volledig en up-to-date zijn. Afhankelijk van waar u woont, beschikt u mogelijk over de rechten die hieronder worden beschreven.

• Het recht om te weten welke persoonsgegevens we verzamelen, inclusief de bronnen waaruit de persoonsgegevens worden verzameld, ons doel of onze doelen voor verzameling en de categorieën ontvangers met wie we uw persoonsgegevens hebben gedeeld, inclusief het delen met derden voor hun eigen marketingdoeleinden
• Recht op toegang, in een gestructureerde en gangbare indeling, tot de persoonsgegevens die wij over u verwerken
• Recht op verwijderen van uw persoonsgegevens
• Recht om u af te melden voor de verkoop of het delen van uw persoonsgegevens aan derden
• Recht om u af te melden voor gerichte reclame, inclusief het delen van uw persoonsgegevens met derden voor cross-context gedragsreclame
• Recht om u af te melden voor bepaalde geautomatiseerde besluitvorming
• Recht op correctie of rectificatie van onjuiste gegevens over u

U kunt ons webformulier invullen om uw rechten uit te oefenen. Wij reageren binnen het volgens de toepasselijke wetgeving vereiste tijdsbestek op uw verzoek (en in het algemeen binnen 30 dagen).

Zoals wettelijk vereist, en ter bescherming van de privacy en de veiligheid van uw persoonsgegevens, kunnen we gegevens bij u opvragen om uw identiteit en recht op toegang tot dergelijke gegevens te bevestigen, alsmede om te zoeken naar de persoonsgegevens die we aanhouden en deze aan u te verstrekken. Er zijn gevallen waarin toepasselijke wetten of wettelijke vereisten ons toestaan of verplichten een verzoek te weigeren.

Bent u een inwoner van Californië of een andere staat of jurisdictie die u het recht verschaft om u af te melden voor de verkoop of het delen van uw persoonsgegevens door ons aan derden voor het gebruik van uw gegevens zoals hierboven beschreven, inclusief cross-context gedragsreclame:

• dien een verzoek in via het formulier Verkoop mijn persoonsgegevens niet dat hier beschikbaar is met vermelding van uw wens om u af te melden voor verkoop (zoals het delen van uw gegevens met onze partners ten behoeve van doelgroepmatching via andere middelen dan cookies of webtrackingtechnologieën waar in (2) hieronder naar wordt verwezen); en 
• klik op Cookie Voorkeursinstellingen in de onderstaande voettekst en schakel de opties in op 'Nee' voor zowel de cookieopties 'Prestaties en functionaliteit' als 'Reclame' en klik op 'Voorkeuren verzenden'. Hierdoor deactiveert u prestatie-, functionaliteits- en reclamecookies en webtrackingtechnologieën op onze site, inclusief cookies die worden gebruikt voor doelgroepmatchingdoeleinden en gepersonaliseerde advertenties. Het deactiveren van deze cookies en webtrackingtechnologieën is mogelijk alleen van toepassing op de specifieke browser van waaruit u op de link klikt en uw voorkeuren kunnen worden gereset als u uw instellingen wijzigt.

Gemachtigde agent: U kunt een agent machtigen om namens u een verzoek in te dienen, mits u de gemachtigde agent daarvoor schriftelijk toestemming hebt gegeven, voorzien van uw handtekening, en mits deze agent zijn of haar identiteit tegenover ons kan bewijzen.  Als u inwoner bent van Californië en een agent wilt aanwijzen om een verzoek in te dienen, moet uw agent zich als zodanig registreren bij de minister van Buitenlandse Zaken van Californië en een kopie van deze registratie indienen, samen met uw geverifieerde consumentenverzoek. Laat uw gemachtigde agent de bovenstaande instructies volgen om een verzoek in te dienen en stuur uw schriftelijke verklaring waarin u de agent machtigt om namens u te handelen, gecertificeerd door een notaris, naar het volgende adres: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA Als uw gemachtigde agent een volmacht heeft, hoeven deze stappen mogelijk niet te worden uitgevoerd.

U kunt ook telefonisch contact met ons opnemen via 844-441-9869 (PIN: 892274) om de aan u toegekende rechten uit te oefenen, en u kunt een klacht indienen bij de bevoegde autoriteit voor de bescherming van persoonsgegevens met betrekking tot de verwerking van uw persoonsgegevens. U kunt ook bezwaar maken tegen de verdere verwerking van uw persoonsgegevens, of deze verwerking beperken, en u kunt bezwaar maken tegen beslissingen die betrekking hebben op de uitoefening van uw toepasselijke rechten. Wij zullen u niet discrimineren wegens de uitoefening van uw toepasselijke rechten.

Als u ons verzoekt uw gegevens te verwijderen, hebt u geen toegang meer tot Company-accounts. We hebben geen verplichting om uw gegevens te bewaren en kunnen we deze geheel of gedeeltelijk verwijderen zonder enige aansprakelijkheid. We kunnen echter informatie die op u van toepassing is, bewaren als wij van mening zijn dat dit noodzakelijk is om fraude of toekomstig misbruik te voorkomen of als wij hiertoe door de wet verplicht zijn, danwel voor legitieme doeleinden, waar van toepassing, zoals analyse van niet-persoonsgegevens, accountherstel, onderhoud van functionaliteiten of veiligheid van onze systemen, audit van onze gegevens of het doen gelden van onze rechten en verplichtingen die voortvloeien uit onze overeenkomsten.

Onze producten en diensten, inclusief onze websites en digitale media, kunnen links bevatten naar of u de mogelijkheid bieden om toegang te krijgen tot websites, producten en diensten van derden. We zijn niet verantwoordelijk voor de privacyregels van deze derden, noch zijn we verantwoordelijk voor de gegevens of inhoud die hun producten en diensten bevatten. Deze Privacyverklaring heeft uitsluitend betrekking op gegevens die door ons zijn verzameld. We raden u aan het privacybeleid van derden te lezen alvorens gebruik te maken van hun websites, producten of diensten.

Het is belangrijk dat u voorzorgsmaatregelen neemt om u te beschermen tegen ongeoorloofde toegang tot uw Company-producten, uw computers, uw andere apparaten en de aanmeldgegevens voor uw account. Als u van mening bent dat inbreuk is gemaakt op de veiligheid van uw account of persoonsgegevens, neem dan onmiddellijk contact met ons op. Houd er rekening mee dat geen beveiligingssysteem ondoordringbaar is, hoezeer wij ons ook inspannen om redelijke en passende fysieke, elektronische en procedurele veiligheidsmaatregelen te handhaven. In geval van een inbreuk op de beveiliging zullen wij u en de bevoegde autoriteiten onmiddellijk op de hoogte brengen indien wij daartoe wettelijk verplicht zijn.

Wij bewaren uw persoonsgegevens in overeenstemming met de toepasselijke wetgeving inzake gegevensbescherming, bewaren deze gegevens in overeenstemming met ons beleid voor het bewaren van gegevens zolang dit nodig is om te voldoen aan de doeleinden die in deze Privacyverklaring worden beschreven, en verwijderen deze gegevens in overeenstemming met ons verwijderingsbeleid, tenzij een langere bewaartermijn wettelijk vereist of toegestaan is. Gevoelige informatie wordt gebruikt voor de specifieke transactie waarvoor deze was bedoeld en wordt alleen door ons bewaard gedurende de periode die nodig is om de transactie te voltooien of zoals anderszins toegestaan door de gebruiker.

We verzamelen, gebruiken of verstrekken geen gegevens van kinderen van wie wij weten dat ze jonger zijn dan 16 jaar. Als we erachter komen dat we persoonsgegevens van een kind jonger dan 16 jaar hebben verzameld, dan wel een kind dat jonger is dan de toepasselijke minimumleeftijd in de betreffende jurisdictie, zoals 13 in de Verenigde Staten of 14 in de Volksrepubliek China (voor de doeleinden van deze Privacyverklaring omvat de Volksrepubliek China ook de speciale bestuurlijke regio's van Hongkong en Macao, en de regio Taiwan), ondernemen we stappen om de gegevens zo spoedig mogelijk te verwijderen. Neem onmiddellijk contact met ons op als u merkt dat een kind jonger dan 16 jaar persoonsgegevens aan ons heeft verstrekt.

Als u inwoner van Californië bent en jonger dan 18 jaar, en als u een geregistreerde gebruiker van onze producten of services bent, staat de wet in Californië u toe de verwijdering van inhoud of informatie die u in het openbaar heeft geplaatst aan te vragen en te verkrijgen. Als u een dergelijke aanvraag wilt indienen, neemt u dan contact met ons op met vermelding van specifieke informatie over waar de inhoud of informatie is geplaatst, en met een verklaring waaruit blijkt dat u degene bent die deze heeft geplaatst. We zullen dan te goeder trouw redelijke inspanningen doen om het bericht te verwijderen uit mogelijke openbare publicaties of om dit te anonimiseren zodat u niet als persoon kunt worden geïdentificeerd, voor zover de toepasselijke wetgeving dit vereist. Houd er rekening mee dat een dergelijk verzoek geen garantie vormt voor een volledige of alomvattende verwijdering van de inhoud of informatie die u heeft geplaatst, en dat er omstandigheden kunnen zijn waarin de wet de verwijdering niet vereist of toestaat, zelfs als daarom wordt gevraagd.

Wanneer we uw persoonsgegevens met onze partners, aan Company gelieerde bedrijven en serviceproviders delen, kunnen uw persoonsgegevens worden doorgestuurd naar en/of toegankelijk gemaakt worden vanuit landen buiten de Europese Economische Ruimte of de Volksrepubliek China. In dergelijke gevallen zullen we gebruikmaken van modelcontractbepalingen, goedgekeurd door de Europese Commissie of de Cyberspace Administration of China, zoals van toepassing, of ons op alternatieve rechtsgronden baseren. We zullen ook verplichte middelen inzetten om te voldoen aan de toepasselijke wetgeving, zoals een proces opzetten om aanvullende vereiste informatie aan u te verstrekken wanneer uw persoonsgegevens naar de Volksrepubliek China worden verzonden. Voor sommige van onze diensten kunnen uw persoonsgegevens worden overgedragen naar en/of worden opgeslagen en verwerkt op servers in de Verenigde Staten, of op andere locaties buiten het land waarin u woonachtig bent om u te kunnen voorzien van de diensten.

We kunnen deze Privacyverklaring periodiek wijzigen, onder andere om gelijke tred te houden met nieuwe technologieën, branchepraktijken en wettelijke voorschriften. Wij verwachten dat het in de meeste gevallen om kleine wijzigingen zal gaan. Alle niet-materiële wijzigingen worden onmiddellijk van kracht na publicatie van een bijgewerkte Privacyverklaring. De datum van laatste wijziging wordt bovenaan dit document vermeld. Er kunnen echter gevallen zijn waarin wijzigingen in de Privacyverklaring van meer betekenis kan zijn. In dergelijke gevallen zullen we een prominente kennisgeving van dergelijke wijzigingen doen op onze website of u rechtstreeks een bericht sturen. 

Als u na de ingangsdatum van de Privacyverklaring gebruik blijft maken van onze producten en diensten, betekent dit dat u akkoord gaat met de gewijzigde Privacyverklaring. Als u niet akkoord gaat met de herziene Privacyverklaring, verzoeken wij u om geen gebruik meer te maken van onze producten en diensten en contact met ons op te nemen om door u gemaakte accounts te sluiten.

Als u vragen hebt over deze Privacyverklaring of de implementatie hiervan, kunt u een e-mail sturen naar onze functionaris voor gegevensbescherming (FG) op DPO@sandisk.com. U kunt ons ook bereiken via ons webformulier of een e-mail schrijven naar een vestiging: T.a.v.: Juridische afdeling - Vraag over Privacyverklaring.

Voor klanten in de Europese Unie hebben we onze FG geregistreerd bij de Ierse privacycommissie (Data Protection Commission). Als u vragen of punten van zorg hebt over onze privacypraktijken, moedigen wij u aan contact op te nemen met onze FG op het bovenstaande e-mailadres.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Naposledy upraveno 27. září 2024

PDF

Toto prohlášení o ochraně osobních údajů vysvětluje, jak společnost SanDisk (dále jen „Company“, „my“, „nás“, „naše“ apod.) shromažďuje, používá a zpřístupňuje informace o vás. Toto prohlášení o ochraně osobních údajů se týká všech produktů a služeb společnosti Company, vyjma produktů a služeb s vlastním prohlášením o ochraně osobních údajů.

Souhlasíte s tím, že v relevantních případech budete své údaje při každém použití našeho produktu či služeb používat tak, jak je to popsáno v tomto prohlášení o ochraně osobních údajů. Důrazně vás tedy žádáme o přečtení celého tohoto dokumentu. V případě jakýchkoli dotazů nás kontaktujte.

Osobní údaje jsou takové údaje, pomocí kterých vás lze přímo či nepřímo identifikovat. Osobní údaje také zahrnují údaje, které jsou propojené s údaji, pomocí kterých vás lze přímo či nepřímo identifikovat. Mezi osobní údaje nepatří údaje, které byly nevratně anonymizovány nebo seskupeny tak, že z nich již nejsme schopni vás identifikovat, ať už v kombinaci s dalšími údaji či jinak. Pokud zpracováváme deidentifikované informace, budeme je uchovávat a používat v deidentifikované podobě.

Zde uvádíme popis různých druhů osobních údajů, které můžeme shromažďovat, a také způsob, kterým je můžeme zpracovávat:

Které osobní údaje shromažďujeme

V závislosti na tom, které produkty a služby používáte, můžeme shromažďovat a shromáždili jsme, včetně období předchozích 12 měsíců, od vás nebo o vás různé druhy osobních údajů:

• Osobní identifikátory, včetně jména, uživatelského jména, e-mailové adresy, telefonního čísla a poštovní nebo dodací adresy.
• Obchodní informace, včetně produktů nebo služeb zakoupených nebo zvažovaných zákazníky, informace o vašem účtu Company a ověřovací údaje, fakturační adresy, dodací adresy a kontaktní údaje.
• Finanční informace, včetně některých omezených informací o kreditních nebo debetních kartách.
• Osobní charakteristiky, jako jsou demografické údaje, včetně vaší polohy, věku, pohlaví, výše příjmu, zaměstnání nebo úrovně vzdělání.
• Obecné informace o poloze. Pokud je to možné, mohou naše služby používat GPS, polohu odvozenou z vaší IP adresy a další technologie k určení přibližné polohy počítačů, telefonů nebo jiných zařízení, na která instalujete naše produkty nebo služby nebo pomocí kterých k nim přistupujete.
• Informace o činnosti na internetu nebo jiné elektronické síti, včetně historie prohlížení, historie vyhledávání a informací o vaší interakci s našimi produkty a službami, jako je typ používaného zařízení, konfigurace zařízení, jedinečný identifikátor zařízení, IP adresa zařízení, operační systém, typ používaného internetového prohlížeče, informace o používání, diagnostické informace, informace o prohlížení, souhrnné informace o relaci, statistiky využití procesoru a další statistiky využití, volání API, informace o selhání služby, stav sítě, využití úložiště, vyhledávané výrazy a atributy souborů (včetně atributů fotografií, videí, hudby a dokumentů).
• Informace týkající se profese nebo zaměstnání, jako je pozice, funkce, povolání, předchozí pracovní zkušenosti nebo současný či bývalý zaměstnavatel.
• Závěry vyvozené z osobních údajů, jako jsou informace o vašich zájmech nebo nákupních preferencích.
• Citlivé osobní údaje, zejména údaje o kreditní nebo debetní kartě, které používá náš zpracovatel plateb, aby mohl provést požadovanou transakci.

Kromě výše uvedených kategorií osobních údajů se můžete rozhodnout poskytnout nám další osobní údaje, například když si vytvoříte účet, vyplníte formulář, poskytnete nám fotografii nebo podáte žádost o zaměstnání.

Jak shromažďujeme osobní údaje

• Údaje, které poskytnete: Můžeme shromažďovat osobní údaje, které poskytujete při používání našich produktů a služeb, když si vytváříte účet, když nás kontaktujete, účastníte se dotazníků, zapojujete se do diskuzí v rámci komunity uživatelů nebo na chatu, žádáte o zaměstnání, přihlásíte se k odebírání našich obchodních sdělení, komunikujete s námi při osobních setkáních nebo s námi navazujete jiný druh kontaktu. Informace o platbách: Když u nás pořídíte nákup, můžeme shromažďovat osobní údaje související s daným nákupem. 
• Informace o používání našich produktů a služeb: Když používáte naše produkty a služby, včetně našich webových stránek a webových, mobilních a desktopových aplikací, nebo si prohlížíte naše e-maily či reklamy, můžeme shromažďovat informace o počítačích, telefonech nebo jiných zařízeních, na která si naše produkty nebo služby instalujete nebo pomocí kterých k nim přistupujete. Některé tyto údaje můžeme shromažďovat automaticky. Více informací o tom, jak používáme webové sledovací technologie, a o svých možnostech najdete v našem prohlášení o používání souborů cookie.
• Informace od třetích stran: Shromažďujeme také informace od třetích stran, mezi které patří obchodní partneři, marketingové agentury a poskytovatelé služeb. Ty mohou zahrnovat vaše kontaktní údaje od marketingových partnerů, se kterými spolupracujeme na marketingu či co-brandingu, dále vaši IP adresu či informace o poloze od poskytovatelů služeb v zájmu nabízení určitých produktů a služeb pro vaši konkrétní polohu, stejně jako údaje ze sociálních sítí v zájmu ověření používání našeho produktu nebo také údaje související s udělením oprávnění pro přístup k našim produktům či službám.
• Informace z veřejných zdrojů: Můžeme shromažďovat informace z vládních zdrojů a záznamů a dalších veřejně dostupných informací.

Jak vaše osobní údaje používáme

Vaše osobní údaje můžeme používat pro účely popsané v tomto prohlášení o ochraně osobních údajů. Obecně osobní údaje používáme k poskytování, zlepšování, vyvíjení a přizpůsobení vašeho zážitku s našimi produkty a službami, pro účely komunikace s vámi, k nabízení cílené reklamy a služeb a k ochraně nás i našich uživatelů. Tak můžeme činit na základě vašeho souhlasu, za účelem plnění zákonných povinností, k plnění smlouvy s vaší osobou nebo na základě našich oprávněných zájmů v rozsahu povoleném platnými právními předpisy. Společnost Company shromažďuje vaše osobní údaje, zpracovává je a stanoví, jakým způsobem budou zpracovávány, v postavení správce údajů pro následující účely:

• Poskytování, zlepšování, vývoj a přizpůsobení vašeho zážitku s našimi produkty a službami: Osobní údaje můžeme používat k tomu, aby nám pomohly poskytovat, zlepšovat, vyvíjet a přizpůsobovat váš zážitek s našimi produkty a službami. Patří sem využívání osobních údajů pro účely analýzy dat, výzkumu a auditů. Takové zpracování můžeme provádět na základě vašeho souhlasu nebo našeho oprávněného zájmu nabízet vám produkty a služby a také pro účely zajištění kontinuity činností. Pokud se účastníte loterie, soutěže nebo jiné propagační akce, můžeme vaše osobní údaje použít ke správě takových programů. Na některé tyto aktivity se vztahují doplňková pravidla, která mohou obsahovat další informace o tom, jak používáme osobní údaje. Doporučujeme vám proto si vždy před účastí příslušná pravidla pečlivě pročíst.
• Komunikace s vámi: Osobní údaje můžeme používat k odpovědím na vaše dotazy a ke komunikaci s vámi ohledně důležitých oznámení, včetně oznámení týkajících se vašeho účtu, produktů, služeb, transakcí nebo změn našich zásad a podmínek. Takové zpracování je prováděno, protože je nezbytné pro plnění smlouvy uzavřené s vámi nebo je založeno na našem oprávněném zájmu komunikovat s vámi a poskytovat vám naše produkty a služby. Osobní údaje můžeme také použít pro komunikaci s vámi ohledně vašich žádostí o zaměstnání. Naše prohlášení o ochraně osobních údajů pro uchazeče o práci a zaměstnance uvádějí další informace týkající se osobních údajů, které shromažďujeme, a způsobu, jakým využíváme osobní údaje v souvislosti s vašimi žádostmi o zaměstnání. Na základě vašeho předchozího výslovného souhlasu můžeme vaše osobní údaje použít k zasílání marketingových sdělení souvisejících s vlastními produkty a službami společnosti Company a vaše osobní údaje můžeme také předávat třetím stranám, které jsou našimi partnery a které vám mohou zasílat marketingová sdělení související s jejich produkty a službami. Pokud si již nepřejete dostávat marketingová e-mailová sdělení, kontaktujte nás za účelem zrušení jejich odběru. Vaše údaje můžeme používat ke zpracování vašich požadavků a při odpovídání na ně.
• Nabízení a měření cílené reklamy a služeb: Vaše osobní údaje můžeme používat k poskytování personalizované reklamy, včetně reklamy na webech a v aplikacích třetích stran nebo k určení efektivity našich propagačních kampaní. Více informací o tom, jak používáme webové sledovací technologie pro personalizovanou reklamu, a o svých možnostech najdete v našem prohlášení o používání souborů cookie. Využívat můžeme také cílení na konkrétní publikum (nebo osoby podobné jiným osobám), abychom oslovili lidi, kteří použili naše produkty a služby nebo jsou uvedeni v některé/některých z našich databází. To realizujeme poskytnutím seznamu hashovaných e-mailových adres partnerovi v oblasti reklamy nebo začleněním pixelu z reklamy partnera do našich vlastních produktů a služeb, přičemž reklamní partner vyhledá shody běžných faktorů mezi našimi a jeho daty.
• Prosazování bezpečnosti a zabezpečení: Osobní údaje nám pomáhají ověřovat účty a aktivitu uživatelů, stejně jako podporovat bezpečnost a zabezpečení, například formou monitorování podvodů a vyšetřováním podezřelé či potenciálně nezákonné činnosti, případně i porušení našich podmínek a zásad. Takové zpracování je prováděno, protože je nezbytné pro plnění smlouvy uzavřené s vámi nebo je založeno na našem oprávněném zájmu pomoci zajistit bezpečnost našich produktů a služeb.
• Zpracování plateb: Náš zpracovatel plateb může používat vaše osobní údaje, včetně obchodních a finančních informací, zejména pro zpracování plateb a transakčních poplatků souvisejících s produktem nebo službou, které jste si vyžádali.

Ve vztahu k výše uvedenému použití vašich údajů, které vyžaduje váš předchozí výslovný souhlas, platí, že svůj souhlas můžete kdykoli odvolat. Chcete-li tak učinit, kontaktujte nás prostřednictvím webového formuláře.

Company je globální společnost s celou řadou přidružených společností v různých jurisdikcích. Každá z těchto přidružených společností je správce údajů, který v zájmu poskytování požadovaných produktů a služeb shromažďuje vaše osobní údaje, zpracovává je a určuje způsob jejich zpracování.

Soubory cookie a podobné technologie používáme a v předchozích 12 měsících jsme je používali k poskytování, ochraně a vylepšování našich produktů a služeb, a to například k personalizaci obsahu, pochopení uživatelského chování a poskytování vyššího zabezpečení. Tyto technologie můžeme také používat k poskytování personalizované reklamy, včetně reklamy na webech a v aplikacích třetích stran, nebo k určení efektivity našich propagačních kampaní.

Více informací o tom, jak používáme webové sledovací technologie a soubory cookie, a o svých možnostech najdete v našem prohlášení o používání souborů cookie.

Určité osobní údaje zpřístupňujeme strategickým partnerům a dalším příjemcům popsaným níže pro účely popsané v tomto prohlášení o ochraně osobních údajů.

Poskytovatelé služeb a další společnosti

Osobní údaje můžeme sdílet s poskytovateli služeb a dalšími společnostmi, které poskytují služby naším jménem, jako např. hostování webových stránek, e-mailové služby, marketing, reklama, sponzorování loterií, soutěží a dalších propagačních akcí, audity, zpracování plateb, vyřizování zákaznických objednávek, analýza dat, poskytování zákaznické podpory, provádění zákaznického průzkumu a dotazníků spokojenosti, služby cloudových úložišť a další služby v součinnosti s poskytováním nebo prodejem našich produktů a služeb. Vaše osobní údaje můžeme také sdílet s inzerenty, poskytovateli datových analýz a provozovateli sociálních sítí, kteří nám pomáhají s doporučováním produktů, marketingovými sděleními a zasíláním relevantního obsahu. Tyto společnosti se zavázaly chránit vaše údaje a mohou mít sídlo kdekoli, kde působíme.

Transakce přidružených společností a obchodních partnerů

Osobní údaje můžeme sdílet se všemi společnostmi přidruženými ke společnosti Company. V případě fúze, reorganizace, akvizice, vytvoření společného podniku, postoupení, oddělení, převodu, prodeje či jiného nakládání s libovolnou součástí naší firmy, a to i ve spojení s jakýmkoli řízením ve věci konkurzu či podobné záležitosti, můžeme libovolné a veškeré osobní údaje předat příslušné třetí straně.

Dodržování právních předpisů a zabezpečení

Zpřístupnění osobních údajů může být nezbytné ze zákonných důvodů nebo v důsledku soudního procesu či sporu nebo na základě požadavku státních úřadů v rámci vaší země trvalého pobytu i mimo ni. Osobní údaje můžeme zpřístupnit také tehdy, pokud zjistíme, že je jejich zpřístupnění nezbytné nebo vhodné z hlediska zajištění národní bezpečnosti, prosazování práva či jiných veřejně důležitých záležitostí.  Osobní údaje můžeme také zveřejnit tehdy, pokud v dobré víře zjistíme, že je takové zveřejnění důvodné a nezbytné pro ochranu našich práv a zajištění dostupných opravných prostředků, k prosazování našich obchodních podmínek, vyšetřování podvodu či ochraně našich činností či uživatelů.

Uplatňujeme přiměřená opatření, abychom zajistili přesnost, úplnost a aktuálnost vašich osobních údajů. V závislosti na tom, kde žijete, můžete disponovat níže popsanými právy.

• Právo vědět, které osobní údaje shromažďujeme, včetně zdrojů, ze kterých jsou osobní údaje shromažďovány, účelů shromažďování a kategorií příjemců, s nimiž jsme vaše osobní údaje sdíleli, včetně případného sdílení s třetími stranami pro jejich vlastní marketingové účely.
• Právo na přístup k osobním údajům, které o vás zpracováváme, ve strukturovaném a standardním formátu.
• Právo na výmaz osobních údajů.
• Právo odmítnout prodej nebo sdílení svých osobních údajů třetím stranám.
• Právo odmítnout cílenou reklamu, včetně sdílení svých osobních údajů se třetími stranami pro kontextovou behaviorální reklamu.
• Právo odmítnout určité automatizované rozhodování.
• Právo na opravu nebo doplnění nepřesných údajů, které se vás týkají.

Chcete-li uplatnit svá příslušná práva, můžete tak učinit vyplněním našeho webového formuláře. Na vaši žádost odpovíme ve lhůtě vyžadované příslušnými právními předpisy (obecně do 30 dnů).

V souladu se zákonnými požadavky a v zájmu ochrany soukromí a zabezpečení vašich osobních údajů od vás můžeme požadovat informace, které nám pomohou ověřit vaši totožnost a právo na přístup k těmto informacím nebo které nám umožní vyhledat a poskytnout vám osobní údaje, které o vás spravujeme. V některých případech platné zákony nebo regulační požadavky umožňují nebo vyžadují, abychom žádost odmítli.

Pokud jste obyvatelem Kalifornie nebo jiného státu či jurisdikce, která toto právo poskytuje, můžete odmítnout prodej nebo sdílení svých osobních údajů třetím stranám za účelem výše popsaného využití vašich údajů, včetně křížové behaviorální reklamy:

• odešlete žádost odesláním formuláře „Neprodávejte ani nesdílejte moje údaje“ zde, uveďte svoje přání nechat se vyřadit z prodeje (jako např. předávání vašich údajů našim partnerům pro účely cílení dle publika pomocí prostředků nad rámec souborů cookie nebo webových sledovacích technologií uvedených v bodu (2) níže) a 
• klikněte na možnost Nastavení cookies v patičce níže a přepínače přepněte na „Ne“ u možností souborů cookie „Výkonnost a funkce“ a „Reklama“ a poté klikněte na možnost „Odeslat předvolby“. Tím dojde k vypnutí výkonnostních, funkčních a reklamních souborů cookie a webových sledovacích technologií na našich stránkách, což zahrnuje také technologie sloužící k účelům cílení dle publika a personalizovanou reklamu. Vypnutí těchto souborů cookie a webových sledovacích technologií se může vztahovat pouze na konkrétní prohlížeč, ve kterém jste na odkaz klikli. Preference se mohou změnit, pokud změníte nastavení.

Pověřený zástupce: K podání žádosti vaším jménem můžete pověřit zástupce, a to v případě, že vybavíte pověřeného zástupce písemným pověřením, které je opatřeno vaším podpisem, k podání žádosti vaším jménem a bude-li pověřený zástupce schopen prokázat svoji totožnost.  Pokud jste obyvatelem státu Kalifornie a chtěli byste určit zástupce pro účely podání žádosti, musí se váš zástupce jako takový zaregistrovat u tajemníka státu Kalifornie a předložit kopii této registrace spolu s vaší ověřenou žádostí spotřebitele. Pověřeného zástupce požádejte, aby při podání žádosti postupoval dle výše uvedených pokynů. Své písemné prohlášení s pověřením zástupce, aby jednal vaším jménem, zašlete ověřené notářem na adresu: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. Pokud má váš pověřený zástupce plnou moc, možná nebude nutné tyto kroky provádět.

Můžete nás také kontaktovat telefonicky na čísle 844-441-9869 (PIN: 892274), abyste uplatnili svá příslušná práva, a můžete podat stížnost na zpracování svých osobních údajů u příslušného úřadu pro ochranu osobních údajů. Můžete také vznést námitku nebo omezit další zpracování svých osobních údajů a odvolat se proti jakémukoli rozhodnutí týkajícímu se výkonu svých příslušných práv. Nebudeme vás za uplatnění svých práv diskriminovat.

Pokud požádáte o odstranění svých dat, zrušíte tím možnost přístupu ke všem účtům společnosti Company. Nejsme povinni vaše údaje uchovávat a bez jakékoli odpovědnosti můžeme jakékoli nebo všechny vaše údaje smazat. Informace, které se vás týkají, však můžeme uchovávat, pokud se domníváme, že to je nezbytné pro prevenci podvodů nebo budoucího zneužití, pokud to vyžaduje zákon nebo případně pro legitimní účely, jakými jsou např. analýza neosobních informací, obnovení účtu, zajištění funkce nebo zabezpečení našich systémů, provádění auditu našich záznamů nebo prosazování našich smluvních práv a závazků.

Naše produkty a služby, což zahrnuje také naše webové stránky a majetek ve formě digitálního multimediálního obsahu, mohou obsahovat odkazy na weby, produkty a služby třetích stran nebo vám mohou umožnit k nim přistupovat. Za postupy ochrany soukromí těchto třetích stran neneseme odpovědnost a nezodpovídáme ani za informace či obsah poskytovaný v rámci jejich produktů a služeb. Toto prohlášení o ochraně osobních údajů se vztahuje výlučně na informace, které shromažďujeme my. Doporučujeme vám, abyste si přečetli zásady ochrany osobních údajů třetích stran ještě předtím, než začnete jejich weby, produkty či služby používat.

Je důležité, abyste předcházeli neoprávněnému přístupu k vašim produktům společnosti Company, k přihlašovacím údajům, počítačům a dalším zařízením. Domníváte-li se, že došlo k narušení ochrany vašeho účtu nebo osobních údajů, neprodleně nás kontaktujte. Pamatujte prosím, že i přes naše úsilí o přiměřená a vhodná fyzická, elektronická a procedurální bezpečnostní opatření není žádný bezpečnostní systém neproniknutelný. V případě narušení bezpečnosti budeme vás i kompetentní orgány, vyžaduje-li to zákon, neprodleně informovat.

Vaše osobní údaje budeme uchovávat v souladu s platnými zákony o ochraně osobních údajů, uchovávat je v souladu s našimi zásadami uchovávání údajů po dobu nezbytnou k naplnění účelů uvedených v tomto prohlášení o ochraně osobních údajů a mazat je v souladu s našimi zásadami mazání, pokud zákon nevyžaduje nebo nepovoluje delší dobu uchovávání. Citlivé údaje budou použity pro konkrétní transakci, pro kterou byly určeny, a budeme je uchovávat pouze po dobu nezbytnou k dokončení transakce nebo podle jiného povolení uživatele.

Vědomě neshromažďujeme, nepoužíváme ani nezpřístupňujeme informace o dětech mladších 16 let. Pokud zjistíme, že jsme shromáždili osobní údaje dítěte mladšího 16 let – nebo odpovídajícího minimálního věku v závislosti na jurisdikci, například 13 let ve Spojených státech nebo 14 let v Čínské lidové republice (což pro účely tohoto prohlášení o ochraně osobních údajů nezahrnuje zvláštní správní oblast Hongkong, zvláštní správní oblast Macao a oblast Tchaj-wanu) – podnikneme kroky k co nejrychlejšímu odstranění těchto údajů. Zjistíte-li, že nám své osobní údaje poskytlo dítě mladší 16 let, okamžitě nás prosím kontaktujte.

Pokud jste občanem státu Kalifornie, je vám méně než 18 let a jste registrovaným uživatelem našich produktů a služeb, kalifornské zákony vám umožňují požadovat a dosáhnout odstranění obsahu či informací, které jste uveřejnili. V případě takového požadavku nás kontaktujte a uveďte konkrétní informace o tom, kde jsou daný obsah či informace zveřejněny s prohlášením, že jste je osobně zveřejnili. My potom v dobré víře vyvineme náležité úsilí, abychom příspěvek odstranili z veřejného zobrazení nebo jej anonymizujeme tak, aby vás nebylo možné osobně identifikovat, a to v rozsahu požadovaném platnými právními předpisy. Upozorňujeme, že takový požadavek nezajistí kompletní nebo komplexní odstranění daného obsahu či zveřejněných informací a že mohou nastat okolnosti, při kterých po nás zákon nevyžaduje nebo nám neumožňuje takové odstranění, i když jste o něj požádali.

Když vaše osobní údaje sdílíme s našimi partnery, společnostmi přidruženými ke společnosti Company a s poskytovateli služeb, mohou být tyto údaje přenášeny do zemí mimo Evropský hospodářský prostor či Čínskou lidovou republiku nebo z nich zpřístupněny. Za takových okolností uzavřeme vzorové smluvní doložky schválené Evropskou komisí nebo Čínskou správou kybernetického prostoru (dle relevance) nebo se budeme spoléhat na alternativní právní základy a zavedeme povinná opatření, abychom jednali v souladu s platnými právními předpisy (například vytvoříme proces, který vám při přenosu vašich osobních údajů z Čínské lidové republiky sdělí další požadované informace). U některých našich služeb mohou být za účelem poskytování těchto služeb vaše osobní údaje přenášeny nebo ukládány a zpracovávány na serverech umístěných ve Spojených státech amerických nebo v jiných lokalitách mimo zemi, ve které sídlíte.

Toto prohlášení o ochraně osobních údajů můžeme pravidelně měnit, abychom mimo jiné udržovali krok s novými technologiemi, oborovou praxí a regulačními požadavky. Předpokládáme, že většina těchto změn bude okrajové povahy. Všechny změny, které nejsou zásadní, budou platné okamžitě od zveřejnění aktualizované verze prohlášení o ochraně osobních údajů, přičemž v horní části dokumentu bude uvedeno datum poslední úpravy. Mohou ovšem nastat případy, kdy budou mít změny v tomto prohlášení o ochraně osobních údajů zásadní charakter. V takových případech vás budeme o těchto změnách informovat výrazným způsobem na našich webových stránkách nebo vám zašleme oznámení přímo. 

Pokud budete naše produkty a služby nadále používat i po datu účinnosti nové verze prohlášení o ochraně osobních údajů, rozumí se tím, že jeho upravenou verzi přijímáte. Pokud s upravenou verzí prohlášení o ochraně osobních údajů nesouhlasíte, přestaňte naše produkty a služby používat a kontaktujte nás, abychom případně zrušili účet, který jste vytvořili.

Pokud máte jakékoli dotazy k tomuto prohlášení o ochraně osobních údajů nebo jeho uplatňování, zašlete e-mail našemu pověřenci pro ochranu osobních údajů na adresu DPO@sandisk.com. Můžete nás také kontaktovat prostřednictvím našeho webového formuláře nebo nám napsat na vaši nejbližší pobočku: ATTN: Právní oddělení – Otázka k prohlášení o ochraně osobních údajů.

Pro zákazníky z Evropské unie jsme jmenovali pověřence pro ochranu osobních údajů u irské komise pro ochranu osobních údajů. V případě jakýchkoli dotazů či nejasností ohledně našich postupů ochrany osobních údajů doporučujeme kontaktovat našeho pověřence pro ochranu osobních údajů prostřednictvím výše uvedené e-mailové adresy.

最終更新日：2024 年 9 月 27 日

PDF

本プライバシー規約は、SanDisk（以下、「Company」、「私たち」、「当社」または「当社の」）がどのようにお客様の情報を収集、使用、および開示するかを説明するものです。本プライバシー規約は、別途プライバシー規約が定められている製品およびサービスを除き、Company の全ての製品およびサービスに適用されます。

必要に応じて、お客様は、当社の製品・サービスを利用するたびに、本プライバシー規約に記載されているお客様の情報の使用に同意することになりますので、本書をご一読いただき、ご質問がある場合は、当社にご連絡ください。

個人情報とは、直接的または間接的にお客様を識別できる情報のことです。また、個人情報には、お客様を直接または間接的に識別できる情報にリンクしている情報も含まれます。個人情報には、不可逆的に匿名化または集計された情報は含まれませんので、他の情報との組み合わせかどうかにかかわらず、お客様を特定することができなくなります。匿名化された情報を処理する場合、匿名化された形式で情報を維持・利用します。

ここでは、当社が収集する可能性のある個人情報の種類と、その処理方法について説明します。

当社が収集する個人情報について

お客様がご利用になる製品およびサービスに応じて、当社はお客様から、またはお客様に関して、以下の内容を含むさまざまな種類の個人情報を収集することがあり、過去 12 ヵ月以内に収集したことがあります。

• 個人を識別する情報：氏名、ユーザー名、メールアドレス、電話番号、郵送先住所または配送先住所など。
• 商業情報：お客様が購入または検討した製品またはサービス、お客様の Company アカウントおよび認証情報に関する情報、請求先住所、配送先住所、連絡先情報など。
• 財務情報：特定の限定的なクレジットカード情報またはデビットカード情報など。
• 個人の特性：お客様の位置情報、年齢、性別、収入レベル、雇用、または教育レベルなどの、デモグラフィック（人工統計学的属性）データなど。
• 一般的な位置情報：当社のサービスでは、GPS、お客様の IP アドレスから推測される位置、およびその他の技術を使用して、お客様が当社の製品またはサービスをインストールしたり、それらにアクセスしたりするコンピューター、電話、またはその他のデバイスのおおよその位置を決定する場合があります。
• インターネットまたはその他の電子ネットワーク活動に関する情報：閲覧履歴、検索履歴、およびお客様が使用するデバイスの種類、デバイスの構成、デバイスの固有識別子、デバイスの IP アドレス、お客様のオペレーティングシステム、お客様が使用するインターネットブラウザの種類、使用情報、診断情報、閲覧情報、セッションサマリー情報、CPU およびその他の使用統計、API コール、サービスクラッシュ情報、ネットワークの状態、ストレージの使用状況、検索語、ファイル属性（写真、ビデオ、音楽、ドキュメントの属性を含む）などのお客様による当社の製品およびサービスの利用に関する情報など。
• 職業または雇用関連の情報：職位、職務、職業、過去の職歴、現在または以前の勤務先など。
• 個人情報から推測される情報：お客様の興味や購入の好みに関する情報など。
• 要配慮個人情報：具体的には、お客様が要求した取引を履行するために、当社の支払処理業者が使用するクレジットカード情報またはデビットカード情報など。

上記のカテゴリの個人情報に加えて、お客様には、アカウントの作成、フォームへの入力、写真の提供、採用への応募などの際に、追加の個人情報を当社に提供することを選択していただく場合があります。

当社による個人情報の収集方法

• お客様が提供する情報：当社は、お客様が当社の製品およびサービスを利用する、アカウントを作成する、当社に連絡する、調査に参加する、コミュニティのディスカッションやチャットルームに参加する、採用に応募する、当社のマーケティングコミュニケーションを受け取るためにサインアップする、対面式のイベントで当社と交流する、またはその他当社と交流する際に、お客様が提供する個人情報を収集することがあります。支払いに関する情報：お客様が購入される場合、当社は購入に関連して個人情報を収集することがあります。 
• 当社製品およびサービスの利用に関する情報：お客様が当社のウェブサイト、ウェブアプリケーション、モバイルアプリケーション、デスクトップアプリケーションを含む当社の製品やサービスを利用する場合、または当社の電子メールや広告を閲覧する場合、当社は、お客様が当社の製品またはサービスをインストールしたり、それらにアクセスしたりするコンピューター、電話、またはその他のデバイスから、またはそのようなデバイスに関して、情報を収集することがあります。当社は、これらの情報の一部を自動的に収集することがあります。当社がウェブトラッキング技術をどのように使用しているか、またお客様がどのような選択肢を持っているかの詳細については、当社の Cookie 規約をお読みください。
• 第三者からの情報：当社は、ビジネスパートナー、マーケティング会社、サービスプロバイダなどの第三者から情報を収集することがあります。これには、ジョイントマーケティングや共同ブランド活動を行う際にマーケティングパートナーが提供するお客様の連絡先情報、お客様の所在地に関連する特定の製品やサービスを提供するためにサービスプロバイダが提供するお客様の IP アドレスや位置情報、お客様のソーシャルネットワークからのデータが含まれることがあり、お客様の当社製品の使用を認証したり、お客様が当社の製品やサービスにアクセスする許可を与えたりします。
• 公開情報源からの情報：当社は、政府の情報源および記録、その他の一般に入手可能な情報から情報を収集する場合があります。

当社によるお客様の個人情報の利用について

当社は、本プライバシー規約に記載されている目的のために個人情報を使用することがあります。一般的に言えば、当社は、当社製品およびサービスの提供、改善、開発、およびお客様の体験のパーソナライズ、お客様とのコミュニケーション、ターゲットを絞った広告およびサービスの提供、ならびに当社および当社ユーザーの保護のために、個人情報を使用します。当社は、適用法で許可されている範囲で、お客様の同意を得て、法的義務の遵守のために、お客様との契約の履行、または当社の正当な利益のためにこれを行う場合があります。Company は、以下の目的のために、データ管理者としてお客様の個人情報を収集、処理、および処理方法を決定します。

• 当社の製品およびサービスに関するお客様の体験の提供、改善、開発、およびパーソナライズ：当社は、当社の製品およびサービスに関するお客様の体験を提供、改善、開発、およびパーソナライズするために、個人情報を使用することがあります。これには、データ分析、調査、監査などの目的での個人情報の使用が含まれます。当社は、お客様の同意またはお客様に製品やサービスを提供するという当社の正当な利益に基づき、また事業継続のために、このような処理を行うことがあります。お客様が懸賞、コンテスト、その他のプロモーションに参加される場合、当社はこれらのプログラムを管理するために、お客様から提供された個人情報を使用することがあります。これらの活動の中には、当社による個人情報の使用方法に関する詳細な情報を含む追加規定が設けられているものもありますので、参加される前にそれらの規定をよくお読みになることをお勧めします。
• お客様とのコミュニケーション：当社は、お客様のアカウント、製品、サービス、取引、または当社のポリシーや条件の変更に関連する通知など、重要な通知についてお客様のお問い合わせに回答したり、お客様に連絡したりするために個人情報を使用することがあります。このような処理は、お客様との契約の履行に必要であるため、またはお客様とのやり取りを通して当社の製品およびサービスを提供するという当社の正当な利益に基づいているために行われます。また、当社は、お客様の採用希望について連絡するために、個人情報を使用することがあります。応募者および従業員に対する当社のプライバシーに関する通知では、当社が収集する個人情報およびお客様の雇用要求に関連して当社が個人情報をどのように使用するかに関する追加情報を提供しています。お客様の事前の同意を得た上で、Company の製品およびサービスに関連するマーケティングコミュニケーションをお送りするために個人情報を使用することがあります。また、Company は、第三者の製品やサービスに関連するマーケティングコミュニケーションをお送りするために、お客様の個人情報を第三者のパートナーと共有することがあります。マーケティング目的でのメールの受信を希望されない場合は、当社に連絡し、オプトアウトしてください。当社は、お客様が当社にご連絡いただいた際に、お客様のご要望を処理し、対応するためにお客様の情報を使用することがあります。
• ターゲットを絞った広告およびサービスの提供と測定：当社は、第三者のウェブサイトやアプリケーションを含め、お客様にパーソナライズ広告を提供するため、および当社の販売促進キャンペーンの効果を判断するために、個人情報を使用することがあります。当社がパーソナライズ広告のためにウェブトラッキング技術をどのように使用しているか、またはお客様がどのような選択肢を持っているかの詳細については、当社の Cookie 規約をお読みください。また、当社は、当社の製品およびサービスを利用した人、または当社の 1 つ以上のデータベースで特定された人（またはそのような人に類似した人）にリーチするために、オーディエンスマッチングを使用することがあります。これは、当社がハッシュ化されたメールアドレスのリストを広告パートナーに提供したり、広告パートナーのピクセルを当社の製品およびサービスに組み込んだりして、広告パートナーが当社のデータと広告パートナーのデータとの間の共通要素をマッチングすることにより行われます。
• 安全性とセキュリティの促進：当社は、アカウントおよびユーザーの活動を確認するために、また、不正行為を監視し、疑わしいまたは違法の可能性のある活動や当社の規約またはポリシーに対する違反を調査するなど、安全性とセキュリティを促進するために、個人情報を使用することがあります。このような処理は、お客様との契約の履行に必要であるため、または当社の製品およびサービスを提供するという当社の正当な利益に基づいているために行われます。
• 支払処理：当社の支払処理業者は、お客様が要求した製品またはサービスに関連する支払・取引手数料を処理するために、商業情報や財務情報を含むお客様の個人情報を使用する場合があります。

上記のお客様のデータの使用のうち、適用される法律の下でお客様の事前の明示的な同意を必要とするものについては、お客様は当社のウェブフォームから当社に連絡することにより、同意を撤回することができます。

グローバル企業として、Company は、異なる管轄区域に多数の法人関連会社を有しています。これらの関連会社の各々は、データ管理者としてお客様の個人情報を収集、処理、および処理方法を決定し、お客様が要求する製品およびサービスの提供に役立てています。

当社は、コンテンツのパーソナライズ化、ユーザー行動の把握、より安全な体験の提供など、当社の製品およびサービスの提供、保護や改善のために、Cookie および類似の技術を使用し、また過去 12 ヵ月以内に使用したことがあります。当社は、第三者のウェブサイトやアプリケーションを含むパーソナライズ広告をお客様に提供するため、および当社の販売促進キャンペーンの効果を判断するためにも、これらの技術を使用しています。

当社がどのように Cookie やウェブトラッキング技術を使用しているか、またお客様がどのような選択肢を持っているかについては、当社の Cookie 規約をお読みください。

当社は、本プライバシー規約に記載されている目的で、以下に記載する戦略的パートナーおよびその他の受領者に、特定の個人情報を提供しています。

サービスプロバイダおよびその他の企業

当社は、当社に代わってサービスを提供するサービスプロバイダおよびその他の企業と個人情報を共有することがあります。例えば、ウェブサイトのホスティング、メールサービス、マーケティング、広告、懸賞、コンテスト、その他のプロモーションのスポンサー、監査、支払処理、顧客注文の履行、データ分析、カスタマーサポートの提供、顧客調査および満足度調査の実施、クラウドストレージサービス、および当社の製品やサービスの提供または販売を支援するその他のサービスなどです。また、当社は、広告主、データ分析プロバイダ、ソーシャルメディアネットワークとお客様の個人情報を共有する場合があります。これらは、当社による製品の推奨、マーケティングメッセージの発信、関連コンテンツの送信に役立ちます。これらの企業は、お客様の情報を保護する義務を負っており、当社が事業を展開しているあらゆる場所に存在する可能性があります。

企業の関連会社と企業間取引

当社は、個人情報を Company の関連会社すべてと共有することがあります。合併、再編、買収、合弁事業、譲渡、スピンオフ、移転、または破産もしくは類似の手続きに関連してを含む当社の事業のすべてまたは一部の販売または処分の場合、当社はすべての個人情報を関連する第三者に譲渡することがあります。

法令遵守とセキュリティ

法律または法的手続き、訴訟、あるいは居住国内外の公的または政府機関からの要請により、当社が個人情報を開示することが必要になる場合があります。また、国家安全保障、法執行、またはその他の公共の重要な問題のために、開示が必要または適切であると当社が判断した場合にも、個人情報を開示することがあります。  また、当社は、当社の権利を保護し、利用可能な救済策を追求し、当社の規約を執行し、不正を調査し、または当社の運営もしくはユーザーを保護するために、開示が合理的に必要であると善意で判断した場合、個人情報を開示することがあります。

当社は、お客様の個人情報が正確、完全、かつ最新であることを確認するための合理的な措置を講じています。お客様がお住まいの地域によっては、以下のような権利があります。

• 知る権利：当社が収集する個人情報を知る権利。これには、個人情報の収集元、収集目的、および当社がお客様の個人情報を共有した受領者のカテゴリ（第三者とのマーケティング目的での共有を含む）も含まれます。
• アクセスする権利：当社が処理するお客様の個人情報に体系的かつ標準的な形式でアクセスする権利。
• 削除する権利：お客様の個人情報を削除する権利。
• 販売または共有をオプトアウトする権利：お客様の個人情報の第三者への販売または共有をオプトアウトする権利。
• ターゲットを絞った広告をオプトアウトする権利：クロスコンテキスト行動広告を目的とした第三者との個人情報の共有などをオプトアウトする権利。
• 特定の自動化された意思決定をオプトアウトする権利
• 訂正または修正する権利：お客様に関する不正確な情報を訂正または修正する権利。

お客様は、当社のウェブフォームに必要事項を記入して、適用可能な権利を行使することができます。当社は、適用法で要求される期間内（および一般的には 30 日以内）にお客様の要求に対応します。

法律で定められた義務に従い、またお客様の個人情報のプライバシーおよびセキュリティを保護することを目的として、当社は、お客様の身元および当該情報にアクセスする権利を確認するため、また、当社が保持する個人情報を検索してお客様に提供するために、お客様に情報の提供をお願いすることがあります。適用される法律または規制要件により、当社が要求を拒否することが許可される、または義務付けられる場合があります。

お客様がカリフォルニア州またはこの権利を提供する別の州または管轄区域に居住している場合、クロスコンテキスト行動広告を含む、前述したお客様のデータの使用を目的とした当社によるお客様の個人情報の販売または第三者との共有を停止するには、以下の手順に従ってください。

• （1）こちらで入手可能な「個人情報を販売・共有しない」フォームから、販売（下記（2）に記載されている Cookie やウェブトラッキング技術以外の方法で、オーディエンスマッチングを目的としてお客様の情報を当社のパートナーと共有することなど）の停止を希望する旨を明記したリクエストを提出してください。また、 
• （2）フッターにある Cookie の設定をクリックして、「パフォーマンスと機能」および「広告」Cookie のオプションを両方とも「いいえ」に切り替えて、「設定の送信」をクリックします。これにより、オーディエンスマッチングやパーソナライズ広告に使用されるものを含む、当社サイトのパフォーマンス、機能、広告 Cookie およびウェブトラッキング技術が無効になります。これらの Cookie およびウェブトラッキング技術の無効化は、お客様がリンクをクリックした特定のブラウザにのみ適用される場合があり、設定を変更した場合には設定がリセットされることがあります。

許可された代理人：お客様の代理でリクエストを提出する代理人を許可することができます。ただし、許可された代理人に、代理でリクエストを行うためにお客様によって署名された許可書を提供し、さらに当社が許可された代理人の身元確認をできることを条件とします。  お客様がカリフォルニア州にお住まいの方で、リクエストを行う目的で代理人を指名したい場合は、お客様の代理人はカリフォルニア州州務長官の場合と同様に登録し、この登録書のコピーを検証された消費者リクエストとともに提出する必要があります。許可された代理人が上記の指示に従って、リクエストを行うことを徹底し、さらに当該代理人にお客様の代理で行動することを許可する宣言書（公証人による証明が付されたもの）を以下の住所に郵送してください。Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA。許可された代理人が委任状を所持している場合、これらの手順を実行する必要がない場合があります。

お客様は、当社に電話 844-441-9869 (PIN: 892274）でご連絡いただき適用可能な権利を行使すること、およびご自身の個人情報の処理に関して管轄のデータ保護当局に苦情を申し立てることもできます。お客様は、ご自身の個人情報のさらなる処理に異議を申し立てたり、処理を制限したりすることもできます。また、ご自身の適用可能な権利の行使に関わる意思決定に対して異議を申し立てることができます。当社は、お客様が適用可能な権利を行使することを理由に、お客様を差別することはありません。

データの削除を要求した場合、お客様は、Company アカウントにアクセスできなくなります。当社はお客様の情報を保持する義務を負わず、責任を負うことなくお客様の情報の一部または全部を削除できます。ただし、当社は、詐欺行為や将来の不正行為を防止するために必要があると思われる場合、法律で要求された場合、または非個人情報の分析、アカウントの回復、当社システムの機能やセキュリティの維持、当社記録の監査、契約に基づく当社の権利および義務の履行などの正当な目的のために、お客様に関する情報を保持することがあります。

当社のウェブサイトやデジタルメディアを含む当社の製品およびサービスには、第三者のウェブサイト、製品およびサービスへのリンクが含まれていたり、お客様が第三者のウェブサイト、製品およびサービスにアクセスできる機能が含まれている場合があります。当社は、これらの第三者が採用しているプライバシー慣行について責任を負うものではなく、また、第三者の製品およびサービスに含まれる情報またはコンテンツについて責任を負うものでもありません。本プライバシー規約は、当社が収集した情報にのみ適用されます。お客様におかれましては、第三者のウェブサイト、製品、サービスをご利用になる前に、当該第三者のプライバシーポリシーをお読みになることをお勧めいたします。

お客様がご使用の Company 製品、アカウント認証情報、およびコンピューターまたはその他のデバイスを、不正なアクセスから保護するための予防策を講じることが重要です。お客様のアカウントまたは個人情報のセキュリティが危険にさらされていると考える場合は、直ちに当社にご連絡ください。当社は合理的かつ適切な物理的、電子的、および手続き上のセキュリティ対策を維持するように努めていますが、いかなるセキュリティシステムも完全ではないことをご承知おきください。セキュリティ侵害が発生した場合、当社は、お客様と、法律により義務付けられている場合、適切な当局に速やかに通知します。

当社は、適用されるデータ保護法に従ってお客様の個人情報を保管し、本プライバシー規約に記載された目的を達成するために必要な期間、当社のデータ保持方針に従って当該情報を保持し、より長い保持期間が法律で義務付けられているか、許可されている場合を除き、当社の削除方針に従って当該情報を削除します。要配慮情報は、その意図された特定の取引に使用され、取引の完了に必要な期間、またはユーザーが別途認めた期間に限り保持されるものとします。

当社は、16 歳未満の児童から意図的に情報を収集、使用、開示することはありません。16 歳未満、または管轄によっては同等の最低年齢（米国では 13 歳、中華人民共和国では 14 歳）の児童の個人情報を収集したことが判明した場合、（本プライバシー規約においては、香港特別行政区、マカオ特別行政区、および台湾地域は除外されます）早急に情報を削除するための措置を講じます。16 歳未満のお子様が当社に個人情報を提供したことに気づいた場合は、直ちに当社にご連絡ください。

お客様がカリフォルニア州にお住まいの 18 歳未満の方で、当社製品またはサービスの登録ユーザーである場合、カリフォルニア州の法律では、お客様が公に投稿したコンテンツまたは情報の削除を要求し、入手することが認められています。そのような要求をするためには、コンテンツまたは情報がどこに掲載されているかについての具体的な情報と、お客様がそのコンテンツまたは情報を掲載したことを証明するものを添えて、当社にご連絡ください。その後、当社は、適用される法律で要求される範囲内で、当該投稿を見込みのある公衆の目に触れないように削除するか、またはお客様を個別に識別できないように匿名化するための合理的かつ誠実な努力を行います。このような要請は、お客様が投稿したコンテンツまたは情報の完全または包括的な削除を保証するものではなく、また、要請されても法律が削除を要求しない、または許可しない状況もあり得ることにご留意ください。

お客様の個人情報を当社のパートナー、Company の関連会社、およびサービスプロバイダと共有する場合、お客様の個人情報は、欧州経済地域または中華人民共和国外の国に転送されたり、欧州経済地域外の国からアクセスできるようになったりすることがあります。このような状況では、欧州委員会または中国のサイバースペース管理局が採用したモデル契約条項を必要に応じて締結するか、代替の法的根拠に依存し、適用法に従って行動するための強制的な措置を実施します（たとえば、中華人民共和国から個人情報を転送する場合に、追加の必要な情報を開示するプロセスを作成します）。当社の一部のサービスでは、お客様にサービスを提供する目的で、お客様の個人情報が米国またはお客様の居住国以外の国にあるサーバーに転送されたり、サーバー上で保存および処理されたりする場合があります。

当社は、新しい技術、業界の慣行、規制要件などに対応するために、本プライバシー規約を定期的に変更することがあります。当社では、このような変更のほとんどが軽微であると予想しています。重大な変更以外の変更は、更新されたプライバシー規約が掲載された時点で直ちに発効し、当社は、本文書の冒頭で最終更新日を示します。ただし、このプライバシー規約への変更がより重大である場合があります。このような場合、当社は、当社ウェブサイト上で当該変更の目立つ通知をお客様に提供するか、またはお客様に直接通知を送信します。 

お客様は、プライバシー規約の発効日の後、当社の製品およびサービスを継続して使用することにより、改定後のプライバシー規約に同意したとみなされます。お客様が改定後のプライバシー規約に同意されない場合、当社の製品およびサービスの使用を止めて、お客様が作成された可能性があるアカウントを削除するために当社にご連絡ください。

本プライバシー規約またはその実施に関してご質問がある場合は、当社のデータ保護責任者（DPO）にメール（DPO@sandisk.com）でお問い合わせください。また、当社のウェブフォームをご利用いただくか、お客様の最寄りの当社オフィスの以下の部門宛てに、郵送でお問い合わせいただくことも可能です。宛先：法務部門　-　プライバシー規約に関する質問。

EU のお客様向けに、当社はアイルランドのデータ保護委員会に DPO を登録しています。当社の個人情報保護の取り組みについてご質問やご懸念がある場合は、上記のメールアドレスで当社の DPO に連絡することをお勧めします。

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personenbezogene Daten sind sämtliche Daten, die dazu verwendet werden können, Sie direkt oder indirekt zu identifizieren. Personenbezogene Daten umfassen auch Daten, die mit anderen Daten verknüpft sind, die dazu verwendet werden können, Sie direkt oder indirekt zu identifizieren. Personenbezogene Daten umfassen keine Daten, die unwiderruflich anonymisiert oder aggregiert wurden, sodass wir nicht mehr in der Lage sind, Sie in Verbindung mit anderen Daten oder anderweitig zu identifizieren. Wenn wir anonymisierte Daten verarbeiten, werden diese auch weiterhin in anonymisierter Form aufbewahrt und verwendet.

Nachfolgend finden Sie eine Beschreibung der Arten von personenbezogenen Daten, die wir möglicherweise erfassen, und wie wir sie verarbeiten:

Welche personenbezogenen Daten wir erfassen

Je nach den von Ihnen in Anspruch genommenen Produkten und Diensten erfassen wir, so wie auch in den vergangenen 12 Monaten, verschiedene Arten von personenbezogenen Daten über Sie:

• Persönliche Identifikationsmerkmale, einschließlich Name, Benutzername, E-Mail-Adresse, Telefonnummer sowie Postanschrift.
• Geschäftsdaten, einschließlich der von Kunden gekauften oder in Betracht gezogenen Produkte oder Dienstleistungen, Daten über Ihr Company Konto sowie Ihre Authentifizierungsdaten, Rechnungsadresse, Lieferadresse und Kontaktdaten.
• Finanzdaten, einschließlich bestimmter eingeschränkter Daten zu Kredit- oder Debitkarten.
• Persönliche Merkmale, z. B. demografische Daten, einschließlich Ihres Standorts, Alters, Geschlechts, Höhe des Einkommens, Ihrer Beschäftigung oder Ihres Bildungsniveaus.
• Allgemeine Standortdaten: Sofern verfügbar, können unsere Dienste GPS, den aus Ihrer IP-Adresse abgeleiteten Standort und andere Technologien verwenden, um den ungefähren Standort von Computern, Telefonen oder anderen Geräten zu bestimmen, auf denen Sie unsere Produkte oder Dienste installieren bzw. darauf zugreifen.
• Daten über Internet- oder andere elektronische Netzaktivitäten, einschließlich Browserverlauf, Suchverlauf und Daten über die Nutzung unserer Produkte und Dienste, wie z. B. das von Ihnen verwendete Gerät, Ihre Geräteeinstellungen, die eindeutigen Identifikationsmerkmale sowie die IP-Adresse Ihres Geräts, Ihr Betriebssystem, der von Ihnen verwendete Internetbrowser, Nutzungsdaten, Diagnosedaten, Browsingdaten, Sitzungszusammenfassungsdaten, CPU- und andere Nutzungsstatistiken, API-Aufrufe, Dienstabsturzdaten, Netzwerkstatus, Speicherverwendung, Suchbegriffe und Dateieigenschaften (einschließlich Eigenschaften von Fotos, Videos, Musikdateien und Dokumenten).
• Berufs- oder beschäftigungsbezogene Daten, wie z. B. Position, Rolle, Beruf, bisherige Berufserfahrung sowie aktueller oder ehemaliger Arbeitgeber.
• Rückschlüsse auf personenbezogene Daten, z. B. Daten über Ihre Interessen oder Ihr Kaufverhalten.
• Sensible personenbezogene Daten, insbesondere Daten zu Kredit- oder Debitkarten, die bei unserer Zahlungsverarbeitung zur Ausführung einer von Ihnen angeforderten Transaktion verwendet werden.

Zusätzlich zu den oben genannten Kategorien personenbezogener Daten können Sie uns weitere personenbezogene Daten zur Verfügung stellen, z. B. wenn Sie ein Konto erstellen, ein Formular ausfüllen, uns ein Foto zukommen lassen oder eine Bewerbung einreichen.

So erfassen wir personenbezogene Daten

• Daten, die Sie uns gegenüber angeben: Wir können personenbezogene Daten erfassen, die Sie uns gegenüber angeben, wenn Sie unsere Produkte und Dienstleistungen in Anspruch nehmen, ein Konto erstellen, uns kontaktieren, an einer Umfrage teilnehmen, sich an Diskussionen in der Community oder in Chatrooms beteiligen, sich um eine Stelle bewerben, sich für den Erhalt unserer Marketingmitteilungen anmelden oder bei Veranstaltungen persönlich oder anderweitig mit uns in Kontakt treten. Zahlungsrelevante Daten: Wenn Sie eine Bestellung aufgeben, können wir personenbezogene Daten in Zusammenhang mit der Bestellung erfassen. 
• Informationen über die Verwendung unserer Produkte und Dienste: Wenn Sie unsere Produkte und Dienstleistungen, einschließlich unserer Websites und Web-, Mobil- sowie Desktop-Anwendungen, nutzen oder unsere E-Mails oder Werbung ansehen, erfassen wir möglicherweise Daten von oder über die Computer, Telefone oder anderen Geräte, auf denen Sie unsere Produkte oder Dienstleistungen installieren bzw. darauf zugreifen. Einige dieser Daten erfassen wir möglicherweise automatisch. Für mehr Informationen dazu, wie wir Webtracking-Technologien einsetzen und welche Möglichkeiten Sie diesbezüglich haben, lesen Sie bitte unsere Cookie-Hinweise.
• Daten von Drittanbietern: Wir erfassen möglicherweise Daten von Drittanbietern wie Geschäftspartnern, Marketingagenturen und Dienstleistungsunternehmen. Dazu zählen Ihre Kontaktdaten von Marketingpartnern, wenn wir gemeinsame Marketing- und Co-Branding-Aktivitäten durchführen, Ihre IP-Adresse oder Standortdaten von Dienstleistungsunternehmen, um Ihnen bestimmte Produkte oder Dienste anzubieten, die für Ihren Standort relevant sind, sowie Daten aus Ihren sozialen Netzwerken, um Ihre Produktnutzung zu authentifizieren, oder wenn Sie unseren Produkten und Diensten die Zugriffsrechte einräumen.
• Daten aus öffentlichen Quellen: Wir können Daten aus staatlichen Quellen und Aufzeichnungen und anderen öffentlich zugänglichen Daten sammeln.

Wie wir Ihre personenbezogenen Daten nutzen

Wir können Ihre personenbezogenen Daten für die Zwecke nutzen, die in dieser Datenschutzerklärung beschrieben werden. Grundsätzlich nutzen wir personenbezogene Daten, um Ihre Verwendung unserer Produkte und Dienste zu ermöglichen, zu verbessern, weiterzuentwickeln und zu personalisieren, um mit Ihnen zu kommunizieren, um Ihnen zielgerichtete Werbeanzeigen und Dienste bereitzustellen sowie um uns und unsere Benutzer zu schützen. Wir können Ihre Daten mit Ihrem Einverständnis zur Erfüllung einer gesetzlichen Pflicht, zur Ausübung eines Vertrags mit Ihnen oder aus unseren legitimen Interessen im gesetzlich vorgeschriebenen Rahmen nutzen. Company ist der Datenverantwortliche und sammelt, verarbeitet und entscheidet über die Verarbeitung Ihrer personenbezogenen Daten für die folgenden Zwecke:

• Ihre Verwendung unserer Produkte und Dienste ermöglichen, verbessern, weiterentwickeln und personalisieren: Wir können personenbezogene Daten nutzen, wenn sie uns helfen, Ihre Verwendung unserer Produkte und Dienste zu ermögliche, zu verbessern, weiterzuentwickeln und zu personalisieren. Dies umfasst die Nutzung Ihrer personenbezogenen Daten für Zwecke wie Datenanalyse, Marktforschung und Prüfungen. Wir führen eine solche Verarbeitung entsprechend Ihrem Einverständnis oder aus unserem legitimen Interesse durch, Ihnen Produkte und Dienste bereitzustellen und für Geschäftskontinuität zu sorgen. Wenn Sie an einem Gewinnspiel, Wettbewerb oder einer anderen Aktion teilnehmen, können wir die personenbezogenen Daten, die Sie uns gegenüber angeben, zur Durchführung solcher Aktionen nutzen. Einige dieser Aktivitäten können zusätzliche Regeln haben, die möglicherweise näher bestimmen, wie wir personenbezogene Daten nutzen. Wir raten Ihnen daher, diese Regeln sorgfältig durchzulesen, bevor Sie an einer solchen Aktion teilnehmen.
• Kommunikation mit Ihnen: Wir können Ihre personenbezogenen Daten nutzen, um auf Ihre Anfragen zu antworten, Ihnen wichtige Mitteilungen zu senden, z. B. zu Ihrem Konto oder zu Produkten, Diensten und Transaktionen oder Änderungen an unseren Richtlinien und Geschäftsbedingungen. Eine derartige Verarbeitung erfolgt, da dies zur Ausübung eines Vertrags mit Ihnen oder aus unseren legitimen Interessen bei der Interaktion mit Ihnen erforderlich ist, um unsere Produkte und Dienste bereitzustellen. Wir können Ihre personenbezogenen Daten auch nutzen, um Ihnen Mitteilungen in Bezug auf Stellenbewerbungen zu senden. Unsere Datenschutzhinweise für Bewerber und Mitarbeiter enthalten weitere Informationen bezüglich der personenbezogenen Daten, die wir sammeln, sowie dazu, wie wir personenbezogene Daten im Rahmen von Stellenbewerbungen nutzen. Abhängig von Ihrem vorherigen ausdrücklichen Einverständnis können wir personenbezogene Daten nutzen, um Ihnen Marketingmitteilungen in Bezug auf Company eigene Produkte und Dienste zu senden. Wir können Ihre personenbezogenen Daten auch an Drittpartner weitergeben, die Ihnen möglicherweise Marketingmitteilungen in Bezug auf ihre Produkte und Dienste senden. Wenn Sie keine E-Mail-Mitteilungen zu Marketingzwecken mehr erhalten möchten, kontaktieren Sie uns bitte. Wir können Ihre personenbezogenen Daten nutzen, um Ihre Anfragen zu bearbeiten und zu beantworten, wenn Sie uns kontaktieren.
• Zielgerichtete Werbung und Dienste anbieten und messen: Wir können personenbezogene Daten auch nutzen, um Ihnen personalisierte Werbung anzuzeigen, z. B. auf Drittanbieter-Websites und in Drittanwendungen, und um die Wirksamkeit unserer Werbekampagnen zu messen. Weitere Informationen dazu, wie wir Webtracking-Technologien für personalisierte Werbung einsetzen und welche Möglichkeiten Sie diesbezüglich haben, finden Sie in unseren Cookie-Hinweisen. Wir können auch einen Zielgruppenabgleich durchführen, um Personen zu erreichen, die unsere Produkte und Dienste verwendet haben oder in einer oder mehrerer unserer Datenbanken stehen (bzw. Personen, die solchen Personen ähneln). Dazu liefern wir eine Liste verschlüsselter E-Mail-Adressen an einen Werbepartner oder bauen den Tracking-Pixel eines Werbepartners in unsere Produkte und Dienste ein. Der Werbepartner gleicht anschließend übereinstimmende Faktoren zwischen unseren und seinen Daten ab.
• Sicherheit und Schutz gewährleisten: Wir können personenbezogene Daten nutzen, um Konten und Benutzeraktivitäten zu verifizieren sowie um Sicherheit und Schutz zu gewährleisten. Dazu überwachen wir betrügerisches Verhalten und untersuchen verdächtige oder mutmaßlich illegale Handlungen sowie Verstöße gegen unsere Geschäftsbedingungen oder Richtlinien. Eine derartige Verarbeitung erfolgt, da dies zur Ausübung eines Vertrags mit Ihnen oder aus unseren legitimen Interessen erforderlich ist, um die Sicherheit unserer Produkte und Dienste sicherzustellen.
• Zahlungsabwicklung: Unsere Zahlungsverarbeitung kann Ihre personenbezogenen Daten, einschließlich der Geschäfts- und Finanzdaten, insbesondere für die Bearbeitung von Zahlungen und Transaktionsgebühren im Zusammenhang mit einem von Ihnen angeforderten Produkt oder einer von Ihnen angeforderten Dienstleistung verwenden.

Für sämtliche oben beschriebene Verwendungen Ihrer Daten, die laut geltendem Recht Ihr ausdrückliches vorheriges Einverständnis voraussetzen, können Sie dieses Einverständnis widerrufen, indem Sie uns über unser Onlineformular kontaktieren.

Als globales Unternehmen hat die Company eine Reihe von verbundenen Unternehmen in verschiedenen Jurisdiktionen. Alle diese verbundenen Unternehmen sind Datenverantwortliche und sammeln, verarbeiten und entscheiden über die Verarbeitung Ihrer personenbezogenen Daten, um Ihnen die gewünschten Produkte und Dienste bereitzustellen.

Wir nutzen Cookies und ähnliche Technologien (und haben sie in den vergangenen 12 Monaten genutzt), um unsere Produkte und Dienste bereitzustellen, zu schützen und zu verbessern, etwa indem wir Inhalte personalisieren, das Nutzerverhalten nachvollziehen und ein sichereres Benutzererlebnis bereitstellen. Wir nutzen diese Technologien auch, um Ihnen personalisierte Werbung anzuzeigen, einschließlich auf Drittanbieter-Websites und in Drittanwendungen, und um die Wirksamkeit unserer Werbekampagnen zu messen.

Für mehr Informationen dazu, wie wir Cookies und Webtracking-Technologien einsetzen und welche Wahlmöglichkeiten Sie diesbezüglich haben, lesen Sie bitte unsere Cookie-Hinweise.

Wir stellen den unten beschriebenen strategischen Partnern und anderen Empfängern bestimmte personenbezogene Daten für die in dieser Datenschutzerklärung beschriebenen Zwecke zur Verfügung.

Dienstleistungsunternehmen und andere Unternehmen

Wir können personenbezogene Daten an Unternehmen weitergeben, die in unserem Auftrag Dienste anbieten, etwa Website-Hosting, E-Mail-Dienste, Marketing, Werbung, Sponsoring von Gewinnspielen, Wettbewerben und andere Werbeaktionen, Wirtschaftsprüfungen, Zahlungsabwicklung, Ausführung von Kundenbestellungen, Datenanalyse, Kundenservice, Marktforschung und Kundenzufriedenheitsumfragen, Cloudspeicherdienste und andere Dienste, die bei der Bereitstellung oder dem Verkauf unserer Produkte und Dienste helfen. Wir können Ihre personenbezogenen Daten auch an Werbetreibende, Datenanalyseanbieter und soziale Netzwerke weitergeben, die uns dabei helfen, Produktempfehlungen abzugeben und Ihnen Marketingnachrichten und relevante Inhalte zu senden. Diese Unternehmen sind verpflichtet, Ihre Daten zu schützen, und können sich in allen Regionen befinden, in denen wir tätig sind.

Verbundene Unternehmen und Geschäftstransaktionen

Wir können personenbezogene Daten mit allen verbundenen Unternehmen der Company teilen. Im Falle einer Fusion, Neuorganisation, Ausgliederung, Übertragung, Akquisition, Veräußerung, Beauftragung, eines Verkaufs oder Joint-Ventures von jeglichen oder sämtlichen Teilen unseres Unternehmens, einschließlich in Zusammenhang mit einer Insolvenz oder ähnlichen Verfahren, übertragen wir möglicherweise sämtliche personenbezogenen Daten an das entsprechende Drittunternehmen.

Einhaltung der gesetzlichen Pflichten und Sicherheit

Unter Umständen sind wir gesetzlich oder in Folge eines Rechtsverfahrens, Rechtsstreits oder einer offiziellen Anfrage von öffentlichen oder staatlichen Behörden in oder außerhalb Ihres Wohnortlandes verpflichtet, personenbezogene Daten offenzulegen. Wir können personenbezogene Daten auch offenlegen, wenn wir die Offenlegung im Interesse der öffentlichen Sicherheit, der Strafverfolgung oder anderer wichtiger öffentlicher Anliegen als notwendig oder angemessen erachten.  Wir können personenbezogene Daten auch offenlegen, wenn wir in gutem Glauben der Meinung sind, dass die Offenlegung in angemessenem Maße nötig ist, um unsere Rechte zu schützen und verfügbare Rechtsmittel auszuschöpfen, unsere Geschäftsbedingungen durchzusetzen, Betrugsfälle zu untersuchen oder unseren Betrieb oder unsere Benutzer zu schützen.

Wir unternehmen angemessene Schritte, um sicherzustellen, dass Ihre personenbezogenen Daten korrekt, vollständig und aktuell sind. Je nach Ihrem Wohnort haben Sie möglicherweise die unten beschriebenen Rechte.

• Auskunftsrecht über die von uns erfassten personenbezogenen Daten, einschließlich der Quellen, aus denen die personenbezogenen Daten erfasst werden, unserer Zwecke zur Erfassung und der Kategorien von Empfängern, an die wir Ihre personenbezogenen Daten weitergegeben haben, einschließlich der Weitergabe an Dritte zu eigenen Marketingzwecken
• Recht auf Zugriffauf die personenbezogenen Daten, die wir über Sie verarbeiten, in einem strukturierten und standardisierten Format
• Recht auf Löschung Ihrer personenbezogenen Daten
• Recht auf Ablehnung des Verkaufs oder der Weitergabe Ihrer personenbezogenen Daten an Dritte
• Recht auf Abbestellung zielgerichteter Werbung, einschließlich der Weitergabe Ihrer personenbezogenen Daten an Dritte für kontextübergreifende verhaltensbezogene Werbung
• Recht auf Ablehnung bestimmter automatisierter Entscheidungsprozesse
• Recht auf Korrektur oder Berichtigung falscher Daten über Sie

Um Ihre geltenden Rechte auszuüben, füllen Sie bitte unser Onlineformular aus. Wir werden Ihre Anfrage innerhalb des gesetzlich vorgeschriebenen Zeitrahmens (in der Regel innerhalb von 30 Tagen) beantworten.

Wie gesetzlich vorgeschrieben und zum Schutz der Daten und der Sicherheit Ihrer personenbezogenen Daten verlangen wir möglicherweise Angaben von Ihnen, um Ihre Identität und Ihr Recht auf Zugang zu solchen Daten zu bestätigen, sowie um die von uns verwalteten, personenbezogenen Daten zu finden und sie Ihnen zur Verfügung zu stellen. Es gibt Fälle, in denen das geltende Recht oder behördliche Vorgaben es erlauben oder sogar verlangen, dass wir eine Anfrage ablehnen.

Wenn Sie in Kalifornien oder einem anderen Staat oder einer anderen Gerichtsbarkeit ansässig sind, wo dieses Recht vorgesehen ist, können Sie dem Verkauf oder der Weitergabe Ihrer personenbezogenen Daten durch uns an Dritte für die Nutzung Ihrer oben beschriebenen Daten, einschließlich kontextübergreifender, verhaltensbezogener Werbung, widersprechen:

• Reichen Sie einen entsprechenden Antrag über das Formular „Widerspruch zum Verkauf oder zur Weitergabe meiner personenbezogenen Daten“ ein, das Sie hierfinden. Erklären Sie dabei, dass Sie dem Verkauf widersprechen möchten (etwa der Weitergabe Ihrer Daten an unsere Partner zum Zwecke des Zielgruppenabgleichs mithilfe anderer Technologien als Cookies oder Webtracking, wie unter (2) erwähnt). 
• Klicken Sie dann in der Fußzeile auf Cookie-Einstellungen und schalten Sie die Cookie-Optionen „Leistung und Funktionalität“ sowie „Werbung“ beide auf „Nein“ und klicken Sie auf „Auswahl speichern“. Damit werden Leistungs-, Funktionalitäts- und Werbe-Cookies sowie Webtracking-Technologien auf unserer Website deaktiviert, einschließlich Technologien zum Zielgruppenabgleich und personalisierte Werbung. Die Deaktivierung dieser Cookies und Webtracking-Technologien greift möglicherweise nur für den Browser, in dem Sie den Link anklicken. Möglicherweise wird Ihre Auswahl auch zurückgesetzt, wenn Sie Ihre Einstellungen ändern.

Bevollmächtigter Vertreter: Sie können auch einen Vertreter bevollmächtigen, eine Anfrage in Ihrem Namen zu senden. Der bevollmächtigte Vertreter benötigt jedoch eine schriftliche und von Ihnen unterzeichnete Erlaubnis, in Ihrem Namen eine Anfrage stellen zu dürfen. Zudem muss uns Ihr bevollmächtigter Vertreter seine Identität nachweisen können.  Wenn Sie in Kalifornien ansässig sind und einen Vertreter für die Antragstellung benennen möchten, muss sich Ihr Vertreter als solcher beim kalifornischen Außenministerium registrieren lassen und eine Kopie dieser Registrierung zusammen mit Ihrem überprüften Verbraucherantrag einreichen. Ihr bevollmächtigter Vertreter muss die obigen Anweisungen befolgen, um einen Antrag zu stellen. Zudem bitten wir Sie um Zusendung Ihrer durch einen Notar beglaubigten schriftlichen Erklärung, die den Vertreter ermächtigt, in Ihrem Namen zu handeln, an folgende Anschrift: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. Wenn Ihr bevollmächtigter Vertreter eine Vollmacht besitzt, sind diese Schritte möglicherweise nicht erforderlich.

Sie können uns auch telefonisch erreichen unter 844-441-9869 (PIN: 892274), um Ihre geltenden Rechte auszuüben. Des Weiteren können Sie bei der zuständigen Datenschutzbehörde eine Beschwerde bezüglich der Verarbeitung Ihrer personenbezogenen Daten einreichen. Sie können auch der weiteren Verarbeitung Ihrer personenbezogenen Daten widersprechen oder diese einschränken und gegen jegliche Entscheidungen, die die Ausübung Ihrer geltenden Rechte betreffen, Widerspruch einlegen. Wir werden Sie nicht wegen der Ausübung Ihrer geltenden Rechte anders behandeln.

Wenn Sie die Löschung Ihrer Daten beantragen, würde Ihnen dies den Zugriff auf jegliche Company Konten verwehren. In diesem Falle sind wir nicht verpflichtet, Ihre Daten aufzubewahren und können einige oder all Ihre Daten ohne Haftbarkeitsansprüche löschen. Wir können jedoch Daten von Ihnen aufbewahren, wenn wir der Meinung sind, dass dies notwendig ist, um Betrug oder künftigen Missbrauch zu verhindern. Dies geschieht jedoch nur, wenn wir gesetzlich dazu verpflichtet sind oder ggf. für legitime Zwecke, wie z. B. zur Analyse nicht personenbezogener Daten, zur Kontowiederherstellung, zur Gewährleistung der Funktionalität oder Sicherheit unserer Systeme, zur Prüfung unserer Aufzeichnungen oder zur Durchsetzung unserer Rechte und Pflichten im Rahmen unserer Vereinbarungen.

Unsere Produkte und Dienste, einschließlich unsere Websites und digitalen Medieninhalte, können Links zu oder die Möglichkeit zum Zugriff auf Drittanbieter-Websites, -Produkte und -Dienste beinhalten. Wir tragen keine Verantwortung für die Datenschutzverfahren dieser Drittanbieter oder die Daten oder Inhalte, die deren Produkte und Dienste enthalten. Diese Datenschutzerklärung gilt ausschließlich für die Daten, die wir erfassen. Wir empfehlen Ihnen, die Datenschutzerklärungen jeglicher Drittanbieter zu lesen, bevor Sie deren Websites, Produkte oder Dienste nutzen.

Wenn wir personenbezogene Daten an unsere Partner, verbundene Unternehmen von Company oder Dienstleistungsunternehmen weitergeben, können Ihre personenbezogenen Daten in Länder außerhalb des Europäischen Wirtschaftsraums oder der Volksrepublik China übertragen und/oder von dort aus zugänglich gemacht werden. Unter diesen Umständen werden wir die von der Europäischen Kommission bzw. den chinesischen Cyberspace-Behörden übernommenen Standardvertragsklauseln verwenden oder uns auf andere Rechtsgrundlagen stützen. Zudem werden wir verbindliche Maßnahmen ergreifen, die dafür sorgen, dass gemäß geltendem Recht gehandelt wird (z. B. ein Verfahren einrichten, um Ihnen bei der Übermittlung Ihrer personenbezogenen Daten aus der Volksrepublik China heraus zusätzliche erforderliche Daten mitzuteilen). Für einige unserer Dienste können Ihre personenbezogenen Daten auf Server in den USA oder anderen Standorten außerhalb des Landes, in dem Sie wohnen, übertragen oder dort gespeichert werden, um Ihnen die Dienste anbieten zu können.

Wir erfassen, verwenden oder teilen wissentlich keine Daten von Minderjährigen unter 16 Jahren. Wenn wir erfahren, dass wir personenbezogene Daten von Minderjährigen unter 16 Jahren erfasst haben – oder je nach Gerichtsbarkeit einem vergleichbaren Mindestalter, z. B. 13 Jahre in den USA oder 14 Jahre in der Volksrepublik China (was in dieser Datenschutzerklärung die SVR Hongkong, SVR Macao und Region Taiwan ausschließt) –, werden wir alle notwendigen Maßnahmen ergreifen, um diese Daten so schnell wie möglich zu löschen. Wenn Sie erfahren, dass Minderjährige unter 16 Jahren uns gegenüber personenbezogene Daten angegeben haben, kontaktieren Sie uns bitte umgehend.

Wenn Sie Einwohner Kaliforniens sowie unter 18 Jahre alt sind und ein registrierter Benutzer unserer Produkte und Dienste sind, haben Sie laut kalifornischen Gesetzen das Recht, die Löschung von Inhalten oder Informationen, die Sie veröffentlicht haben, zu erwirken. Um einen solchen Antrag zu stellen, kontaktieren Sie uns bitte und teilen Sie uns mit, wo die Inhalte oder Daten veröffentlicht wurden, und bestätigen Sie, dass Sie sie veröffentlicht haben. Wir unternehmen dann im gesetzlich vorgeschriebenen Rahmen angemessene Bemühungen, um den Beitrag aus der Öffentlichkeit zu entfernen oder so zu anonymisieren, dass er nicht auf eine einzelne Person zurückgeführt werden kann. Bitte beachten Sie, dass eine solche Anfrage nicht die vollständige oder umfassende Entfernung der Inhalte oder Informationen sicherstellt, die Sie veröffentlicht haben. Es kann Umstände geben, in denen die Löschung auch auf Anfrage hin gesetzlich nicht vorgeschrieben oder zulässig ist.

Wenn wir personenbezogene Daten an unsere Partner, verbundene Unternehmen von Company oder Dienstleistungsunternehmen weitergeben, können Ihre personenbezogenen Daten in Länder außerhalb des Europäischen Wirtschaftsraums oder der Volksrepublik China übertragen und/oder von dort aus zugänglich gemacht werden. Unter diesen Umständen werden wir die von der Europäischen Kommission bzw. den chinesischen Cyberspace-Behörden übernommenen Standardvertragsklauseln verwenden oder uns auf andere Rechtsgrundlagen stützen. Zudem werden wir verbindliche Maßnahmen ergreifen, die dafür sorgen, dass gemäß geltendem Recht gehandelt wird (z. B. ein Verfahren einrichten, um Ihnen bei der Übermittlung Ihrer personenbezogenen Daten aus der Volksrepublik China heraus zusätzliche erforderliche Daten mitzuteilen). Für einige unserer Dienste können Ihre personenbezogenen Daten auf Server in den USA oder anderen Standorten außerhalb des Landes, in dem Sie wohnen, übertragen oder dort gespeichert werden, um Ihnen die Dienste anbieten zu können.

Wir ändern diese Datenschutzerklärung möglicherweise von Zeit zu Zeit, um unter anderem neue Technologien und Verfahren der Branche sowie aufsichtsbehördliche Vorgaben mit einzubeziehen. Wir gehen davon aus, dass der Großteil dieser Änderungen geringfügig sein wird. Alle unwesentlichen Änderungen werden unmittelbar nach Veröffentlichung einer aktualisierten Datenschutzerklärung wirksam, wobei das Datum der letzten Änderung dieses Dokuments oben angegeben wird. Es kann jedoch Fälle geben, in denen wir wesentliche Änderungen an dieser Datenschutzerklärung vornehmen. In solchen Fällen werden wir Sie auf unserer Website deutlich auf solche Änderungen hinweisen oder Ihnen direkt eine Mitteilung senden. 

Bei Weiterverwendung unserer Produkte und Dienste nach dem Inkrafttreten der Datenschutzerklärung erklären Sie sich automatisch mit der geänderten Datenschutzerklärung einverstanden. Wenn Sie mit der geänderten Datenschutzerklärung nicht einverstanden sind, verzichten Sie bitte auf die Weiterverwendung unserer Produkte oder Dienste und kontaktieren Sie uns, um jegliche von Ihnen erstellte Konten zu schließen.

Falls Sie Fragen zu dieser Datenschutzerklärung oder ihrer Umsetzung haben, können Sie sich unter DPO@sandisk.com an unseren Datenschutzbeauftragen (DPO) wenden. Sie können uns auch über unser Webformular erreichen oder uns an folgende Adresse einen Brief an einen Standort in Ihrer Nähe schreiben: Z. Hd.: Rechtsabteilung – Frage Zur Datenschutzerklärung.

Für Kunden innerhalb der Europäischen Union haben wir unseren Datenschutzbeauftragen bei der irischen Datenschutzkommission registriert. Falls Sie Fragen oder Bedenken zu unseren Datenschutzverfahren haben, wenden Sie sich unter der oben genannten E-Mail-Adresse an unseren Datenschutzbeauftragten.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Última modificación: 27 de septiembre de 2024

PDF

Esta Declaración de Privacidad explica cómo SanDisk (“Company”, “nosotros”, “nuestro(a)(s)” o “a nosotros”) recoge, utiliza y divulga su información. La Declaración de Privacidad se aplica a todos los productos y servicios de Company, excepto aquellos productos y servicios que tienen una Declaración de Privacidad específica.

Cuando corresponda, usted da su consentimiento para utilizar su información como se describe en esta Declaración de Privacidad cada vez que utiliza nuestros productos o servicios, por lo que le recomendamos leer todo el documento y ponerse en contacto con nosotros si tiene alguna pregunta.

La información personal es información que puede utilizarse para identificarlo directa o indirectamente. La información personal también incluye información que está relacionada a la información que puede utilizarse para identificarlo directa o indirectamente. La información personal no incluye información que se haya anonimizado o agregado de forma irreversible de modo que ya no nos permita identificarlo, ya sea en combinación con otra información o de otro modo. En la medida en que procesemos información anonimizada, mantendremos y utilizaremos la información de forma anónima.

A continuación se incluye una descripción de los tipos de información personal que podemos recopilar y cómo podemos tratarla:

Tipos de información personal que recopilamos

Según los productos y servicios que utiliza, podemos recopilar y hemos recopilado, incluidos los últimos 12 meses, diferentes tipos de información personal de usted o sobre usted:

• Identificadores personales, incluidos el nombre, el nombre de usuario, la dirección de correo electrónico, el número de teléfono y la dirección postal o de envío.
• Información comercial, incluidos los productos o servicios que los clientes han adquirido o han pensado adquirir, información sobre su cuenta de Company e información de autenticación, dirección de facturación, dirección de envío y datos de contacto.
• Información financiera, incluida determinada información de acceso limitado sobre tarjetas de crédito o débito.
• Características personales, como datos demográficos, incluida la ubicación, la edad, el sexo, el nivel de ingresos, el empleo o el nivel educativo.
• Información general de ubicación. Cuando estén disponibles, nuestros servicios pueden utilizar el GPS, la ubicación obtenida de la dirección IP y otras tecnologías para determinar la ubicación aproximada de los ordenadores, teléfonos u otros dispositivos en los que usted instale nuestros productos o servicios, o desde los que acceda a ellos.
• Información sobre la actividad en Internet u otras redes electrónicas, incluido el historial de navegación, el historial de búsqueda y la información relativa a su interacción con nuestros productos y servicios, como el tipo de dispositivo que utiliza, la configuración de su dispositivo, su identificador único del dispositivo, la dirección IP de su dispositivo, su sistema operativo, el tipo de navegador de Internet que utiliza, la información de uso, la información de diagnóstico, la información de navegación, la información de resumen de la sesión, la CPU y otras estadísticas de uso, las llamadas de API, la información sobre caída del servicio, el estado de la red, la utilización de almacenamiento, los términos de búsqueda y los atributos de archivos (incluidos los atributos de fotos, vídeos, música y documentos).
• Información profesional o relacionada con el empleo, como el cargo, la función, la ocupación, la experiencia laboral previa o el empleador actual o anterior.
• Datos personales obtenidos a partir de la información personal, como información sobre sus intereses o preferencias de compra.
• Información personal confidencial, en concreto, la información de la tarjeta de crédito o débito que utiliza nuestro procesador de pagos para completar las transacciones que usted haya solicitado.

Además de las categorías de información personal mencionadas anteriormente, puede optar por proporcionarnos información personal adicional, como cuando crea una cuenta, rellena un formulario, nos envía una fotografía o presenta una solicitud de empleo.

Cómo recopilamos la información personal

• Información que proporciona: podemos recopilar la información personal que proporciona cuando utiliza nuestros productos y servicios, crea una cuenta, se pone en contacto con nosotros, participa en una encuesta, participa en salas de chat o conversaciones de la comunidad, solicita un empleo, se registra para recibir nuestras comunicaciones de marketing, interactúa con nosotros en eventos presenciales o interactúa de otra forma con nosotros. Información sobre pagos: si realiza una compra, podemos recopilar información personal en relación con dicha compra. 
• Información sobre el uso de nuestros productos y servicios: cuando usa nuestros productos y servicios, incluidos nuestros sitios y aplicaciones web, móviles y de escritorio, o ve nuestros correos electrónicos o anuncios, podemos recopilar información sobre los ordenadores, teléfonos u otros dispositivos en los que instale nuestros productos o servicios, o desde los que acceda a ellos. Podemos recopilar parte de esta información de manera automática. Lea nuestra Declaración sobre cookies para obtener más información sobre cómo usamos las tecnologías de seguimiento web y las opciones que usted tiene.
• Información de terceros: podemos recopilar información de terceros, como socios comerciales, agencias de marketing y proveedores de servicios. Entre esta información pueden estar incluidas su información de contacto de socios de marketing cuando participamos en actividades de marca compartida o de marketing conjunto, su dirección IP o información de ubicación de proveedores de servicios para ofrecer determinados productos y servicios pertinentes a su ubicación, y la información de sus redes sociales para autenticar el uso de su producto con nosotros, o para conceder permiso y acceder a nuestros productos o servicios.
• Información de fuentes públicas: podemos recopilar información de fuentes y registros gubernamentales y otra información disponible de manera pública.

Cómo utilizamos su información personal

Podemos utilizar información personal con los fines descritos en esta Declaración de Privacidad. En términos generales, utilizamos información personal para ofrecer, mejorar, desarrollar y personalizar su experiencia con nuestros productos y servicios, para comunicarnos con usted, para ofrecerle anuncios publicitarios y servicios específicos, y para protegernos tanto a nosotros como a nuestros usuarios. Podemos hacerlo con su consentimiento, para el cumplimiento de una obligación legal, para la ejecución de un contrato con usted, o para nuestros intereses legítimos, en la medida permitida por las leyes aplicables. Company recopila, procesa y determina cómo procesar su información personal como responsable del tratamiento de datos para los siguientes fines:

• Ofrecer, mejorar, desarrollar y personalizar su experiencia con nuestros productos y servicios: podemos utilizar información personal para que nos ayude a ofrecer, mejorar, desarrollar y personalizar su experiencia con nuestros productos y servicios. Esto incluye utilizar información personal para fines tales como el análisis de información, la investigación y las auditorías. Podemos realizar dicho procesamiento basándonos en su consentimiento o en nuestro interés legítimo para ofrecerle productos y servicios y para la continuidad del negocio. Si participa en un sorteo, un concurso u otra promoción, podemos utilizar la información personal que nos proporcione para administrar esos programas. Algunas de estas actividades tienen reglas adicionales, que pueden contener más información sobre cómo utilizamos la información personal, por lo que le recomendamos leer esas normas atentamente antes de participar.
• Comunicarse con usted: podemos utilizar información personal para responder a sus preguntas y comunicarnos con usted en relación con avisos importantes, como avisos relacionados con su cuenta, productos, servicios, transacciones o cambios en nuestras políticas y términos. Dicho procesamiento se realiza porque es necesario para la ejecución de un contrato con usted o se basa en nuestro interés legítimo de interactuar con usted para ofrecerle nuestros productos y servicios. También podemos usar información personal para comunicarnos con usted acerca de sus solicitudes de empleo. Nuestros avisos de privacidad a candidatos y empleados ofrecen información adicional relacionada con la información personal que recopilamos y cómo la usamos en relación con sus solicitudes de empleo. Sujeto a su previo consentimiento expreso, es posible que utilicemos su información personal para enviarle comunicaciones de marketing relacionadas con los propios productos y servicios de Company, y es posible que compartamos su información personal con socios de otras empresas que pueden enviarle comunicaciones de marketing relacionadas con sus productos y servicios. Si ya no desea recibir comunicaciones con fines de marketing por correo electrónico, póngase en contacto con nosotros para darse de baja. Podemos usar su información para procesar sus solicitudes y responder a ellas cuando se comunique con nosotros.
• Ofrecer y medir anuncios publicitarios y servicios específicos: es posible que usemos información personal para proporcionarle anuncios personalizados, incluso en aplicaciones y sitios web de terceros, y para determinar la eficacia de nuestras campañas promocionales. Lea nuestra Declaración sobre cookies para obtener más información sobre cómo usamos las tecnologías de seguimiento web para anuncios personalizados y las opciones que usted tiene. También es posible que usemos compatibilidad con el público para llegar a las personas (o a las personas similares a las personas) que usaron nuestros productos y servicios, o que están identificadas en una o más de nuestras bases de datos. Para esto proporcionamos una lista de direcciones de correo electrónico con hash a un socio de publicidad o incorporamos un píxel de un socio de publicidad en nuestros propios productos y servicios, y el socio de publicidad compatibiliza factores comunes entre nuestros datos y sus datos.
• Promover la seguridad: podemos utilizar la información personal para ayudar a verificar cuentas y la actividad de los usuarios, además de promover la seguridad y la protección, por ejemplo, mediante el control del fraude y la investigación de actividades o violaciones sospechosas o potencialmente ilegales de nuestros términos o políticas. Dicho procesamiento se realiza porque es necesario para la ejecución de un contrato con usted o se basa en nuestro interés legítimo de ayudar a garantizar la seguridad de nuestros productos y servicios.
• Procesamiento de pagos: nuestro procesador de pagos puede utilizar su información personal, incluida la información comercial y financiera, específicamente para procesar pagos y comisiones por transacción relacionados con un producto o servicio que haya solicitado.

Para cualquiera de los usos de sus datos descritos anteriormente que requieran su previo consentimiento expreso en virtud de las leyes aplicables, tenga en cuenta que puede revocar su consentimiento poniéndose en contacto con nosotros a través de nuestro formulario web.

Como compañía global, Company cuenta con un número de empresas afiliadas en diferentes jurisdicciones. Cada una de estas empresas afiliadas recopila, procesa y determina cómo procesar su información personal como responsable del tratamiento de datos para ayudar a ofrecerle los productos y servicios que solicita.

Utilizamos, y hemos utilizado en los últimos 12 meses, cookies y tecnologías similares para ofrecer, proteger y mejorar nuestros productos y servicios, por ejemplo, personalizando el contenido, entendiendo el comportamiento de los usuarios y proporcionando una experiencia más segura. También usamos estas tecnologías para ofrecerle anuncios personalizados, incluso en aplicaciones y sitios web de terceros, y para determinar la eficacia de nuestras campañas promocionales.

Lea nuestra Declaración sobre cookies para obtener más información sobre cómo usamos las cookies y las tecnologías de seguimiento web, y para saber cuáles son las opciones con las que usted cuenta.

Ponemos cierta información personal a disposición de los socios estratégicos y otros destinatarios descritos a continuación para los fines descritos en esta Declaración de Privacidad.

Proveedores de servicios y otras empresas

Podemos compartir información personal con proveedores de servicios y otras compañías que ofrecen servicios en nuestro nombre, como alojamiento de sitios web, servicios de correo electrónico, marketing, publicidad; patrocinio de sorteos, concursos y otras promociones; auditorías, procesamiento de pagos, despacho de pedidos del cliente, análisis de datos, asistencia al cliente, realización de encuestas de satisfacción e investigación del cliente, servicios de almacenamiento en la nube y otros servicios que ayudan a ofrecer o vender nuestros productos y servicios. También podemos compartir su información personal con anunciantes, proveedores de análisis de datos y redes sociales, que nos ayudan a recomendarle productos y a enviarle mensajes de marketing y contenido relevante. Estas compañías están obligadas a proteger su información y pueden estar ubicadas en cualquier lugar donde operemos.

Empresas afiliadas corporativas y transacciones comerciales corporativas

Es posible que compartamos información personal con todas las compañías afiliadas a Company. En el caso de una fusión, reorganización, adquisición, sociedad conjunta, asignación, escisión, transferencia o venta, o disposición de la totalidad o parte de nuestra empresa, lo que incluye la relación con cualquier quiebra o proceso judicial similar, podemos transferir cualquier información personal al tercero correspondiente.

Seguridad y cumplimiento legal

Podría ser necesario, por ley o como resultado de un procedimiento judicial, un litigio o una solicitud por parte de las autoridades públicas o gubernamentales dentro o fuera de su país de residencia, que divulguemos información personal. También es posible que divulguemos información personal si determinamos que, para fines de seguridad nacional, cumplimiento de la ley u otros asuntos de importancia pública, la divulgación es necesaria o apropiada.  También podemos divulgar información personal si determinamos de buena fe que la divulgación es razonablemente necesaria para proteger nuestros derechos y buscar soluciones disponibles, hacer cumplir nuestros términos y condiciones, investigar casos de fraude o proteger nuestras actividades o a nuestros usuarios.

Tomamos medidas razonables para asegurarnos de que su información personal sea precisa y esté completa y actualizada. Según el lugar donde viva, puede disfrutar de los derechos que se describen a continuación.

• Derecho a conocer la información personal que recopilamos, incluidas las fuentes de las que esta se recopila, los fines por los que se recopila y las categorías de destinatarios con los que hemos compartido la información personal, incluido cualquier uso compartido con terceros para sus propios fines de marketing.
• Derecho de acceso, en un formato estructurado y estándar, a la información personal que tratamos sobre usted.
• Derecho de supresión de su información personal.
• Derecho a rechazar vender o compartir de su información personal a terceros.
• Derecho a rechazar la publicidad dirigida, incluida la cesión de sus datos personales a terceros con fines de publicidad conductual cruzada.
• Derecho a no ser objeto de decisiones individuales automatizadas.
• Derecho de rectificación de cualquier información inexacta sobre usted.

Puede completar nuestro formulario web para ejercer los derechos que le sean aplicables. Responderemos a su solicitud en el plazo requerido por la legislación aplicable (en general, en un plazo de 30 días).

De acuerdo con la ley, para proteger la privacidad y la seguridad de su información personal, podemos solicitarle información que nos permita confirmar su identidad y el derecho de acceder a dicha información, así como buscar y proporcionarle la información personal que mantenemos. Hay casos en los que las leyes o los requisitos normativos aplicables nos permiten o nos exigen denegar una solicitud.

Si reside en California o en otro estado o jurisdicción que otorgue este derecho, puede optar por no vender ni compartir su información personal con terceros para los usos descritos anteriormente, incluida la publicidad conductual cruzada, de las siguientes maneras:

• enviando una solicitud mediante el formulario No vender mi información personal, disponible aquí, especificando que desea no participar en las ventas (tales como compartir su información con nuestros socios con fines de compatibilidad con el público a través de otros medios que no sean las cookies o las tecnologías de seguimiento web indicadas en el párrafo a continuación); y 
• haciendo clic en Preferencias sobre cookies en el pie de página y cambiando las opciones a “No” tanto para las opciones de cookies de “Rendimiento y funcionalidad” como de “Publicidad”, y haciendo clic en “Enviar preferencias”. Así, se desactivarán las cookies de rendimiento, funcionalidad y publicidad, así como las tecnologías de seguimiento web en nuestro sitio, incluidas las utilizadas con fines de compatibilidad con el público y de publicidad personalizada. La desactivación de estas cookies y tecnologías de seguimiento de la web puede aplicarse únicamente al navegador específico desde el que se hace clic en el enlace, y sus preferencias pueden restablecerse si cambia su configuración.

Agente autorizado: puede autorizar a un agente para que presente una solicitud en su nombre, siempre que le otorgue al agente autorizado un permiso por escrito firmado por usted para realizar una solicitud en su nombre, y su agente autorizado también pueda verificar su propia identidad ante nosotros.  Si reside en California y desea designar un agente con el fin de realizar una solicitud, su agente deberá estar registrado como tal ante el secretario de Estado de California y presentar una copia de este registro junto con su solicitud de consumidor verificada. Su agente autorizado debe seguir las instrucciones anteriores para realizar una solicitud y, además, enviar por correo su declaración por escrito autorizando al agente a que actúe en su nombre, certificada por un fedatario público, a: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. Si su agente autorizado tiene un poder notarial, es posible que no sea necesario seguir estos pasos.

También puede ponerse en contacto con nosotros a través del teléfono 844-441-9869 (PIN: 892274) para ejercer los derechos que le sean aplicables. Asimismo, puede presentar una reclamación ante la autoridad competente en materia de protección de datos en relación con el tratamiento de su información personal. También puede oponerse al tratamiento posterior de sus datos personales, o restringirlo, y recurrir cualquier decisión que implique el ejercicio de los derechos que le sean aplicables. No le trataremos de forma discriminatoria por ejercer los derechos que le sean aplicables.

Si solicita la eliminación de sus datos, no podrá acceder a ninguna cuenta de Company. No tenemos la obligación de conservar su información y es posible que eliminemos toda su información o parte de ella sin asumir ninguna responsabilidad por ello. Sin embargo, podemos conservar la información relacionada con usted si creemos que puede ser necesaria para prevenir el fraude o futuros abusos, si así lo exige la ley, o para fines legítimos, en su caso, como el análisis de la información no personal, la recuperación de cuentas, el mantenimiento de la funcionalidad o la seguridad de nuestros sistemas, la auditoría de nuestros registros o el cumplimiento de nuestros derechos y obligaciones en virtud de nuestros acuerdos.

Es posible que nuestros productos y servicios, incluidos nuestros sitios web y las propiedades de los medios digitales, contengan enlaces o le den la posibilidad de acceder a los sitios web, productos y servicios de terceros. No somos responsables de las prácticas de privacidad que empleen dichos terceros, ni somos responsables de la información o contenido que incluyan sus productos y servicios. Esta Declaración de Privacidad se aplica únicamente a la información que recopilemos nosotros. Le recomendamos leer las políticas de privacidad de terceros antes de proceder a utilizar sus sitios web, productos o servicios.

Es importante que tome precauciones para protegerse contra el acceso no autorizado a sus productos, credenciales de cuenta y ordenadores u otros dispositivos de Company. Si considera que la seguridad de su cuenta o su información personal se ha visto comprometida, póngase en contacto con nosotros inmediatamente. Tenga en cuenta que, a pesar de nuestros esfuerzos por mantener medidas de seguridad físicas, electrónicas y de procedimiento razonables y adecuadas, ningún sistema de seguridad es impenetrable. Ante una infracción de seguridad, le notificaremos de manera oportuna a usted y a las autoridades si así lo requiere la ley.

Almacenaremos su información personal de acuerdo con la ley de protección de datos aplicable, conservaremos dicha información de acuerdo con nuestra política de retención de datos durante el tiempo que sea necesario para cumplir los fines descritos en esta Declaración de Privacidad, y eliminaremos tal información de acuerdo con nuestra política de eliminación, a menos que la ley exija o permita un periodo de retención más largo. La información confidencial se utilizará en la transacción específica para la que fue destinada y solo la conservaremos durante el periodo de tiempo necesario para completar la transacción o según lo permita el usuario.

No recopilamos, utilizamos ni divulgamos información de niños menores de 16 años de edad de manera intencional. Si tenemos conocimiento de que hemos recopilado información personal de una persona menor de 16 años –o la edad mínima equivalente según la jurisdicción, por ejemplo, 13 años en Estados Unidos o 14 en la República Popular China (que, a efectos de esta Declaración de Privacidad, excluye la RAE de Hong Kong, la RAE de Macao y la región de Taiwán)– tomaremos medidas para eliminar la información lo antes posible. Póngase en contacto con nosotros de inmediato si tiene conocimiento de que una persona menor de 16 años nos ha proporcionado información personal.

Si es un residente de California menor de 18 años y es un usuario registrado de nuestros productos o servicios, las leyes de California le permiten solicitar y obtener la eliminación del contenido o de la información que haya dado a conocer públicamente. Para presentar dicha solicitud, póngase en contacto con nosotros con información específica que indique dónde se publicó el contenido o la información y dé fe de que usted la publicó. Haremos esfuerzos razonables y de buena fe para eliminar la publicación de la posible vista pública o anonimizarla para que no pueda ser identificado de manera individual, en la medida en que lo exijan las leyes aplicables. Tenga en cuenta que dicha solicitud no garantiza la eliminación completa o exhaustiva del contenido o la información que ha publicado y que puede haber circunstancias en las que la ley no exija o permita la eliminación, incluso si se solicita.

Cuando compartimos su información personal con nuestros socios, empresas afiliadas a Company y proveedores de servicios, su información personal puede ser transferida a países fuera del Espacio Económico Europeo o la República Popular China, o hacerse accesible desde estas regiones. En tales circunstancias, suscribiremos cláusulas contractuales modelo adoptadas por la Comisión Europea o la Administración del Ciberespacio de China, según corresponda, o nos basaremos en bases legales alternativas, y aplicaremos medidas obligatorias para actuar de acuerdo con las leyes aplicables (por ejemplo, creando un proceso para revelarle la información adicional requerida al transferir su información personal fuera de la República Popular China). Para algunos de nuestros servicios, su información personal puede transferirse a servidores localizados en los Estados Unidos o en otras ubicaciones fuera del país en el que usted reside, o almacenarse y procesarse en tales servidores, con el objetivo de proporcionarle servicios.

Podemos cambiar periódicamente esta Declaración de Privacidad para mantenernos al día con las nuevas tecnologías, las prácticas del sector y los requisitos normativos, entre otras razones. Esperamos que tales cambios sean menores. Los cambios no sustanciales entrarán en vigor inmediatamente después de la publicación de la versión actualizada de la Declaración de Privacidad e indicaremos la fecha de última modificación en la parte superior de este documento. Sin embargo, puede haber casos en los que los cambios a esta Declaración de Privacidad puedan ser más significativos. En tales casos, le proporcionaremos un aviso destacado de esos cambios en nuestro sitio web o le enviaremos directamente una notificación. 

El uso continuado de nuestros productos y servicios después de la fecha de entrada en vigor de la Declaración de Privacidad significa que acepta su versión revisada. Si no está de acuerdo con la versión revisada de la Declaración de Privacidad, debe abstenerse de usar nuestros productos y servicios y ponerse en contacto con nosotros para cerrar cualquier cuenta que pueda haber creado.

Si tiene preguntas acerca de esta Declaración de Privacidad o sobre su aplicación, puede enviar un correo electrónico a nuestro responsable de protección de datos (DPO) a DPO@sandisk.com. También puede ponerse en contacto con nosotros a través de nuestro formulario web o escribirnos a la dirección de correo postal más cercana: A LA ATENCIÓN DE: Legal Department - Privacy Statement Question.

Para nuestros clientes de la Unión Europea, hemos registrado a nuestro DPO en la Comisión de Protección de Datos de Irlanda (Data Protection Commission). Si tiene alguna duda o preocupación acerca de nuestras prácticas de privacidad, le invitamos a contactar a nuestro DPO en la dirección de correo electrónico indicada anteriormente.

Dernière modification le 27 septembre 2024

PDF

La présente Déclaration de confidentialité énonce la façon dont SanDisk (ci-après « Company », « nous », « notre » ou « nos ») collecte, utilise et divulgue vos informations. La Déclaration de confidentialité s’applique à l’ensemble des produits et services Company, à l’exception de ceux qui sont soumis à une Déclaration de confidentialité spécifique.

Le cas échéant, à chaque fois que vous recourez à nos produits ou services, vous consentez à l’utilisation de vos informations de la manière énoncée dans la présente Déclaration de confidentialité. Nous vous encourageons donc à lire ce document intégralement et à nous contacter si vous avez des questions.

Les informations personnelles sont des informations qui peuvent servir à vous identifier directement ou indirectement. Les informations personnelles comprennent également des informations associées aux informations pouvant servir à vous identifier directement ou indirectement. Les informations personnelles ne comprennent pas les informations rendues anonymes de manière irréversible ou regroupées d’une façon qui ne nous permette plus, en association avec d’autres informations ou d’une autre manière, de vous identifier. Dans la mesure où nous traitons des informations anonymisées, nous les conservons et les utilisons sous une forme anonymisée.

Vous trouverez ci-après la description des types d’informations personnelles que nous pouvons collecter ainsi que la façon dont nous pouvons les traiter :

Les informations personnelles que nous collectons

En fonction des produits et des services que vous utilisez, nous pouvons collecter et avons collecté, y compris au cours des 12 derniers mois, différents types d’informations personnelles auprès de vous ou à propos de vous.

• Identifiants personnels, notamment le nom, le nom d’utilisateur, l’adresse électronique, le numéro de téléphone et l’adresse postale ou de livraison.
• Informations commerciales, notamment les produits ou services achetés ou envisagés par les clients, les informations sur votre compte Company et les informations d’authentification, l’adresse de facturation, l’adresse de livraison et les coordonnées.
• Informations financières, notamment certaines informations limitées sur les cartes de crédit ou de débit.
• Caractéristiques personnelles, telles que les données démographiques, notamment votre localisation, votre âge, votre sexe, votre niveau de revenu, votre emploi ou votre niveau d’études.
• Informations générales de localisation. Lorsqu’ils sont disponibles, nos services peuvent utiliser le GPS, la localisation déduite de votre adresse IP et d’autres technologies pour déterminer la localisation approximative des ordinateurs, téléphones ou autres appareils sur lesquels vous installez ou accédez à nos produits ou services.
• Informations relatives à l’activité sur Internet ou sur d’autres réseaux électroniques, notamment l’historique de navigation, l’historique de recherche et les informations concernant votre interaction avec nos produits et services, telles que le type d’appareil que vous utilisez, sa configuration, son identifiant unique, son adresse IP, votre système d’exploitation, le type de navigateur Internet, des informations sur l’utilisation, des informations de diagnostic, des informations de navigation, des informations récapitulatives de session, des statistiques liées à l’unité centrale et à d’autres usages, des appels API, des informations sur les défaillances de service, l’état du réseau, l’utilisation du stockage, les mots-clés et les attributs de fichier (y compris les attributs des photos, vidéos, musiques et documents).
• Informations professionnelles ou liées à l’emploi, telles que le poste, le rôle, la profession, l’expérience professionnelle antérieure ou l’employeur actuel ou précédent.
• Déductions tirées d’informations personnelles, telles que des informations sur vos intérêts ou vos préférences d’achat.
• Informations personnelles sensibles, notamment les informations de carte de crédit ou de débit utilisées par notre organisme de traitement des paiements pour vous aider à effectuer une transaction que vous avez demandée.

Outre les catégories d’informations personnelles susmentionnées, vous pouvez choisir de nous fournir des informations personnelles supplémentaires, par exemple lorsque vous créez un compte, remplissez un formulaire, nous fournissez une photographie ou soumettez une demande d’emploi.

Comment nous collectons les informations personnelles

• Les informations que vous fournissez : Nous pouvons collecter les informations personnelles que vous fournissez lorsque vous utilisez nos produits et services, créez un compte, nous contactez, participez à un sondage, participez à des discussions de la communauté ou à des chats, postulez pour un poste, vous inscrivez pour recevoir nos communiqués marketing, entrez en relation avec nous lors d’événements en personne ou interagissez avec nous d’une autre manière. Les informations relatives aux paiements : Si vous effectuez un achat, nous pouvons collecter les informations personnelles relatives à cet achat. 
• Les informations relatives à l’utilisation de nos produits et services : Lorsque vous utilisez nos produits et services, notamment nos sites Web et nos applications Web, mobiles et de bureau, ou que vous lisez nos courriers électroniques ou nos publicités, nous pouvons collecter des informations depuis ou sur les ordinateurs, téléphones ou autres appareils sur lesquels vous installez ou accédez à nos produits ou services. Nous pouvons collecter certaines de ces informations automatiquement. Veuillez lire notre Déclaration relative aux cookies (https://www.sandisk.com/fr-ca/legal/cookie-statement) pour en savoir plus sur notre utilisation de technologies de suivi Web et les options dont vous disposez.
• Les informations provenant de tiers : Nous collectons des informations provenant de tiers, notamment des partenaires commerciaux, des agences de marketing et des prestataires de services. Cela peut inclure vos coordonnées reçues de partenaires commerciaux lorsque nous participons à des activités conjointes de marketing ou de co-dénomination, votre adresse IP ou vos informations de localisation reçues de prestataires de services et qui permettent de vous proposer des produits et services adaptés à votre lieu, et des données provenant de vos réseaux sociaux, afin d’authentifier votre utilisation des produits ou votre autorisation d’accès donnée à nos produits ou services.
• Informations provenant de sources publiques : Nous pouvons collecter des informations provenant de sources et de registres gouvernementaux et d’autres informations accessibles au public.

La façon dont nous utilisons vos informations personnelles

Nous pouvons utiliser des informations personnelles aux fins énoncées dans la présente Déclaration de confidentialité. En règle générale, les informations personnelles nous servent à offrir, améliorer, développer et personnaliser votre expérience de nos produits et services, à communiquer avec vous, à vous proposer des publicités et des services ciblés, et à nous protéger ainsi que nos utilisateurs. Nous pouvons agir de la sorte avec votre consentement afin de remplir une obligation légale, pour l’exécution d’un contrat conclu avec vous ou aux fins de nos intérêts légitimes, dans les limites autorisées par la législation applicable. Company collecte, traite et détermine la façon de traiter vos informations personnelles en tant que responsable du traitement pour les finalités ci-après :

• Offrir, améliorer, développer et personnaliser votre expérience de nos produits et services : Nous pouvons utiliser les informations personnelles dans le but de nous aider à offrir, améliorer, développer et personnaliser votre expérience de nos produits et services, y compris l’utilisation d’informations personnelles à des fins telles que l’analyse des données, la recherche et les audits. Nous pouvons effectuer ce traitement sur la base de votre consentement ou en fonction de l’intérêt légitime que nous avons à vous proposer des produits et services et pour la continuité de nos activités. En cas de participation à un tirage, un concours ou une autre promotion, nous pouvons utiliser les informations personnelles que vous fournissez pour gérer ces programmes. Certaines de ces activités sont soumises à des règles supplémentaires qui peuvent comporter d’autres informations sur la façon dont nous utilisons les informations personnelles, c’est pourquoi nous vous encourageons à lire ces règles avec attention avant de participer.
• Communiquer avec vous : Nous pouvons utiliser des informations personnelles pour répondre à vos demandes et communiquer avec vous au sujet d’importantes notifications, notamment des notifications liées à votre compte, aux produits, services, transactions ou à des modifications apportées à nos politiques et conditions. Ce traitement est entrepris car il est nécessaire à l’exécution d’un contrat conclu avec vous ou est fondé sur l’intérêt légitime que nous avons à dialoguer avec vous pour vous fournir nos produits et services. Nous pouvons également utiliser des informations personnelles pour communiquer avec vous au sujet de vos demandes d’emploi. Nos notifications de confidentialité à l’intention des candidats et salariés donnent des renseignements supplémentaires au sujet des informations personnelles que nous collectons et sur la manière dont nous les utilisons dans le cadre de vos demandes d’emploi. Sous réserve de votre autorisation expresse préalable, nous pouvons nous servir d’informations personnelles pour vous envoyer des communications commerciales en rapport avec les produits et services de Company ; en outre, nous pouvons communiquer vos informations personnelles à des partenaires tiers, qui peuvent vous envoyer des communications commerciales en rapport avec leurs produits et services. Si vous ne souhaitez plus recevoir de communications électroniques à des fins marketing, veuillez nous contacter pour les refuser. Nous pouvons utiliser vos informations pour traiter vos demandes et y répondre lorsque vous nous contactez.
• Fournir et évaluer des publicités et des services ciblés : Nous pouvons utiliser des informations personnelles pour vous afficher des publicités personnalisées, y compris sur des sites Web et applications de tiers, et pour déterminer l’efficacité de nos campagnes promotionnelles. Veuillez lire notre Déclaration relative aux cookies (https://www.sandisk.com/fr-ca/legal/cookie-statement) pour en savoir plus sur notre utilisation de technologies de suivi Web en matière de publicités personnalisées et les options dont vous disposez. En outre, nous pouvons nous servir de la correspondance d’audience pour atteindre des personnes (ou des personnes similaires à des personnes) qui ont utilisé nos produits et services ou qui sont identifiées dans une ou plusieurs de nos bases de données. Pour ce faire, nous donnons une liste d’adresses électroniques hachées à un partenaire publicitaire ou nous incorporons un pixel de partenaire publicitaire dans nos propres produits et services, et le partenaire publicitaire fait correspondre les facteurs communs entre nos données et les siennes.
• Promouvoir la sécurité : Nous pouvons utiliser les informations personnelles pour vérifier les comptes et l’activité des utilisateurs ainsi que pour promouvoir la sécurité, par exemple en surveillant la fraude et en enquêtant sur les activités suspectes ou potentiellement illégales, ou les violations de nos conditions ou politiques. Ce traitement est entrepris car il est nécessaire à l’exécution d’un contrat conclu avec vous ou est fondé sur l’intérêt légitime que nous avons à contribuer à la sécurité de nos produits et services.
• Traitement des paiements : Notre organisme de traitement des paiements peut utiliser vos informations personnelles, y compris les informations commerciales et financières, spécifiquement pour le traitement des paiements et des frais de transaction liés à un produit ou un service que vous avez demandé.

Pour chacune des utilisations précitées de vos données qui nécessitent votre consentement exprès préalable en vertu du droit applicable, notez que vous pouvez refuser cette autorisation en nous contactant au moyen de notre formulaire Web.

En tant que société internationale, Company possède un certain nombre de sociétés affiliées dans différents territoires. Chacune de ces sociétés affiliées collecte, traite et détermine la façon de traiter vos informations personnelles en tant que responsable du traitement pour vous apporter les produits et les services que vous demandez.

Nous utilisons et avons utilisé au cours des 12 derniers mois des cookies et des technologies similaires pour offrir, protéger et améliorer nos produits et services, par exemple en personnalisant le contenu, en comprenant le comportement des utilisateurs et en proposant une expérience plus sûre. Nous utilisons également ces technologies pour vous afficher des publicités personnalisées, y compris sur des sites Web et applications de tiers, et pour déterminer l’efficacité de nos campagnes promotionnelles.

Veuillez lire notre Déclaration relative aux cookies (https://www.sandisk.com/fr-ca/legal/cookie-statement) pour en savoir plus sur la façon dont nous utilisons les cookies et les technologies de suivi Web ainsi que sur les options dont vous disposez.

Nous mettons certaines informations personnelles à la disposition des partenaires stratégiques et des autres destinataires décrits ci-dessous aux fins décrites dans la présente Déclaration de confidentialité.

Fournisseurs de services et autres sociétés

Nous pouvons partager les informations personnelles avec des prestataires de services et d’autres entreprises qui fournissent des services pour notre compte, tels que l’hébergement de site Web ; les services de messagerie électronique ; le marketing ; la publicité ; la sponsorisation de tirages au sort, concours et autres promotions ; les audits ; le traitement de paiements ; l’exécution des commandes des clients ; l’analyse de données ; l’assistance à la clientèle ; la mise en œuvre d’études de marché et d’enquêtes de satisfaction auprès des clients ; les services de stockage dans le cloud et d’autres services qui permettent d’offrir ou de vendre nos produits et services. Nous pouvons également partager vos informations personnelles avec des annonceurs, des fournisseurs d’analyse de données et des réseaux sociaux, qui nous aident à formuler des recommandations de produits, des messages marketing et à vous envoyer du contenu pertinent. Ces entreprises ont l’obligation de protéger vos informations et peuvent se trouver à tout endroit où nous exerçons nos activités.

Sociétés affiliées et transactions commerciales d’entreprise

Nous pouvons partager des informations personnelles avec toutes les sociétés affiliées à Company. En cas de fusion, de réorganisation, d’acquisition, de co-entreprise, de cession, d’essaimage, de transfert ou de vente, ou encore de disposition de notre société, en tout ou en partie, y compris en rapport avec toute faillite ou procédure similaire, nous pouvons transférer toute information personnelle au tiers concerné.

Conformité avec la loi et sécurité

Nous serons peut-être contraints de divulguer des informations personnelles par la loi ou encore dans le cadre d’une procédure légale, d’un contentieux ou de demandes des autorités publiques de votre pays de résidence ou non. Nous pouvons également divulguer des informations personnelles si nous déterminons que la divulgation est nécessaire ou appropriée à des fins de sécurité nationale, de maintien de l’ordre ou d’autres questions d’importance publique.  Nous pouvons également divulguer des informations personnelles si nous déterminons, de bonne foi, que la divulgation est raisonnablement nécessaire pour protéger nos droits et exercer les recours disponibles, faire appliquer nos conditions générales, enquêter sur des fraudes ou encore protéger nos opérations ou nos utilisateurs.

Nous prenons les mesures nécessaires pour veiller à ce que vos informations personnelles soient exactes, complètes et à jour. En fonction du lieu où vous vivez, vous pouvez bénéficier des droits décrits ci-dessous.

• Droit de connaître les informations personnelles que nous collectons, notamment les sources à partir desquelles les informations personnelles sont collectées, le(s) but(s) de la collecte, et les catégories de destinataires avec lesquels nous avons partagé vos informations personnelles, notamment tout partage avec des tiers à des fins de marketing
• Droit d’accès, dans un format structuré et standard, aux informations personnelles que nous traitons à votre sujet
• Droit d’effacer vos informations personnelles
• Droit de refuser la vente ou le partage de vos informations personnelles à des tiers
• Droit de refuser la publicité ciblée, notamment le partage de vos informations personnelles avec des tiers pour la publicité comportementale intercontexte
• Droit de vous désinscrire de certaines prises de décision automatisées
• Droit de corriger ou de rectifier toute information inexacte vous concernant

Vous pouvez remplir notre formulaire Web pour exercer vos droits applicables. Nous répondrons à votre demande dans le délai requis par le droit applicable (et en général dans un délai de 30 jours).

Comme l’exige la loi, et afin de préserver la confidentialité et la sécurité de vos informations personnelles, nous pouvons vous demander des données nous permettant de confirmer votre identité et votre droit d’accès à ces informations ainsi que de rechercher et de vous fournir les informations personnelles que nous gérons. Dans certains cas, le droit applicable ou les exigences réglementaires nous autorisent ou nous obligent à refuser une demande.

Si vous résidez en Californie ou dans un autre État ou une autre juridiction qui accorde ce droit, pour refuser la vente ou le partage de vos informations personnelles à des tiers pour les utilisations de vos données décrites ci-dessus, y compris la publicité comportementale intercontexte :

• transmettez une demande à l’aide du formulaire NE PAS VENDRE OU PARTAGER MES INFORMATIONS PERSONNELLES accessible ici, en précisant que vous souhaitez refuser les ventes (comme la communication de vos informations à nos partenaires à des fins de correspondance d’audience à l’aide de moyens autres que les cookies ou les technologies de suivi Web référencés à l’alinéa 2) ci-après) ; et 
• cliquez ici pour basculer les options de cookies « Performances et fonctionnement » et « Publicité » sur « Non », puis cliquez sur « Envoyer les préférences ». Cette action désactivera les cookies de performance, de fonctionnement et de publicité et les technologies de suivi Web sur notre site, y compris ceux utilisés à des fins de correspondance d’audience et de publicités personnalisées. La désactivation de ces cookies et technologies de suivi Web peut uniquement s’appliquer au navigateur avec lequel vous cliquez sur le lien ; vos préférences peuvent être réinitialisées si vous changez vos paramètres.

Mandataire habilité : Vous pouvez habiliter un mandataire à transmettre une demande en votre nom, sous réserve de remettre à celui-ci une autorisation écrite signée par vous l’autorisant à faire une demande en votre nom ; en outre, votre mandataire habilité doit être en mesure de faire contrôler son identité par nous.  Si vous êtes résident de la Californie et que vous souhaitez désigner un mandataire aux fins de faire une demande, celui-ci doit s’inscrire en tant que tel auprès du secrétaire d’État de la Californie et transmettre une copie de cet enregistrement avec votre demande de consommateur vérifiée. Veuillez demander à votre mandataire habilité de suivre les instructions précitées pour faire une demande ; veuillez également nous transmettre une déclaration écrite certifiée par un notaire autorisant ledit mandataire à agir en votre nom à l’adresse : Legal Department, 951 Sandisk Drive, Milpitas, Californie 95035 États-Unis. Si votre mandataire habilité dispose d’une procuration, il ne sera peut-être pas nécessaire d’effectuer ces démarches.

Vous pouvez également nous contacter par téléphone au 844-441-9869 (PIN: 892274) pour exercer vos droits applicables, et vous pouvez déposer une plainte auprès de l’autorité de protection des données compétente en ce qui concerne le traitement de vos informations personnelles. Vous pouvez également vous opposer au traitement ultérieur de vos informations personnelles, ou le restreindre, et faire appel de toute décision impliquant l’exercice de vos droits applicables. Nous ne ferons pas de discrimination à votre encontre pour l’exercice de vos droits applicables.

Si vous demandez la suppression de vos données, vous ne pourrez plus accéder à aucun compte Company. Nous n’avons aucune obligation de conserver vos informations ; nous pouvons les supprimer, en tout ou en partie, sans engager notre responsabilité. Cependant, nous pouvons conserver les informations qui vous concernent si nous les jugeons nécessaires à la prévention de fraudes ou d’abus ultérieurs, si la loi l’exige ou encore à des fins légitimes, le cas échéant, telles que l’analyse des informations non personnelles, la récupération de compte, la gestion du fonctionnement ou de la sécurité de nos systèmes, l’audit de nos dossiers ou l’exécution de nos droits et obligations en vertu de nos contrats.

Nos produits et services, y compris nos sites Web et contenus numériques médiatiques, peuvent comporter des liens ou des moyens pour accéder à des sites Web, produits et services tiers. Nous ne sommes pas responsables des pratiques de respect de la vie privée mises en œuvre par ces tiers, ni des informations ou du contenu de leurs produits et services. La présente Déclaration de confidentialité s’applique uniquement aux informations que nous collectons. Nous vous encourageons à lire les politiques de confidentialité de tous les tiers avant de recourir à leurs sites Web, produits ou services.

Il est important de prendre des précautions pour vous protéger contre les accès non autorisés à vos produits Company, à vos identifiants de compte, et à vos ordinateurs et autres appareils. Si vous estimez que la sécurité de votre compte ou de vos informations personnelles a été compromise, veuillez immédiatement nous contacter. Veuillez noter que, malgré nos efforts pour maintenir des mesures de sécurité physiques, électroniques et procédurales raisonnables et appropriées, aucun système de sécurité n’est impénétrable. En cas d’infraction à la sécurité, nous vous informerons rapidement ainsi que les autorités concernées si la loi l’exige.

Nous stockerons vos informations personnelles conformément à la législation applicable en matière de protection des données, conserverons ces informations conformément à notre politique de conservation des données aussi longtemps que nécessaire pour atteindre les finalités décrites dans la présente Déclaration de confidentialité, et supprimerons ces informations conformément à notre politique de suppression, à moins qu’une période de conservation plus longue ne soit requise ou autorisée par la loi. Les informations sensibles seront utilisées pour la transaction spécifique à laquelle elles étaient destinées et ne seront conservées par nous que pendant la durée nécessaire à la réalisation de la transaction ou dans les limites autorisées par l’utilisateur.

Nous ne collectons pas, n’utilisons pas et ne divulguons pas sciemment des informations d’enfants de moins de 16 ans. Si nous apprenons que nous avons collecté les informations personnelles d’un enfant de moins de 16 ans, ou l’âge minimal équivalent en fonction du territoire, par exemple, 13 ans aux États-Unis ou 14 ans en République populaire de Chine (qui exclut, aux fins de la présente Déclaration de confidentialité, la RAS de Hong Kong, la RAS de Macao et la région de Taïwan), nous prendrons des mesures pour supprimer ces informations dès que possible. Veuillez immédiatement nous contacter si vous apprenez qu’un enfant de moins de 16 ans nous a fourni des informations personnelles.

Si vous êtes résident de Californie, âgé de moins de 18 ans, et utilisateur enregistré de nos produits ou services, le droit de la Californie vous autorise à demander et à obtenir la suppression du contenu ou des informations que vous avez publiées publiquement. Pour ce faire, veuillez nous contacter et nous transmettre des renseignements spécifiques sur l’endroit où le contenu ou les informations ont été publiés, en attestant que vous êtes la personne à l’origine de la publication. Ensuite, nous ferons preuve d’une diligence raisonnable en toute bonne foi pour qu’à l’avenir, cette publication ne puisse plus être publique ou pour la rendre anonyme, afin que vous ne puissiez plus être identifié individuellement, dans la mesure exigée par le droit applicable. Veuillez noter que cette demande ne garantit pas la suppression complète ou exhaustive du contenu ou des informations que vous avez publiés, et qu’il existe certains cas où la loi n’exige pas ni ne permet la suppression même lorsqu’elle est demandée.

Lorsque nous communiquons vos informations personnelles à nos partenaires, sociétés affiliées à Company et prestataires de services, vos informations personnelles peuvent être transférées à des pays situés en dehors de l’Espace économique européen ou de la République populaire de Chine et/ou rendues accessibles depuis ceux-ci. Dans de telles circonstances, nous conclurons des clauses contractuelles types telles qu’adoptées par la Commission européenne ou par l’Administration du cyberespace de Chine, le cas échéant, ou nous nous fonderons sur d’autres bases juridiques, et nous appliquerons les mesures obligatoires pour agir dans le respect de la législation applicable (par exemple, la création d’un processus visant à vous divulguer les informations supplémentaires nécessaires lors du transfert de vos informations personnelles hors de la République populaire de Chine). Pour certains de nos services, vos informations personnelles peuvent être transférées à des serveurs situés aux États-Unis ou dans d’autres lieux à l’extérieur du pays où vous résidez, et/ou y être stockées et traitées aux fins de vous fournir les services.

Nous pouvons apporter régulièrement des modifications à la présente Déclaration de confidentialité pour nous adapter à de nouvelles technologies, des pratiques du secteur et des exigences réglementaires, entre autres. Nous estimons que la plupart de ces modifications seront mineures. Toute modification peu importante prend effet immédiatement sur publication de la Déclaration de confidentialité mise à jour ; nous indiquerons la date de la dernière modification en haut du présent document. Toutefois, il peut arriver que des modifications apportées à la présente Déclaration de confidentialité soient plus importantes. Dans ce cas, nous placerons à votre attention et bien en évidence une notification relative à ces modifications ou nous vous enverrons directement une notification. 

La poursuite de l’utilisation de nos produits et services après la date d’effet de la Déclaration de confidentialité vaut acceptation de la Déclaration de confidentialité révisée. Si vous n’acceptez pas la Déclaration de confidentialité révisée, veuillez ne pas utiliser nos produits ou services et nous contacter pour clore le compte que vous avez éventuellement créé.

Si vous avez des questions concernant la présente Déclaration de confidentialité ou sa mise en œuvre, vous pouvez envoyer un courrier électronique au délégué à la protection des données à l’adresse DPO@sandisk.com. Vous pouvez également nous joindre par le biais de notre formulaire Web ou nous écrire à l’adresse la plus proche de chez vous par courrier adressé à : À L’ATTENTION DE : Service juridique - Question relative à la Déclaration de confidentialité.

Pour les clients de l’Union européenne, nous avons enregistré notre DPD auprès de la Data Protection Commission d’Irlande. Si vous avez des questions ou des inquiétudes concernant nos pratiques en matière de respect de la vie privée, nous vous invitons à contacter notre DPD à l’adresse électronique précitée.

Ultima modifica: 27 settembre 2024

PDF

La presente Normativa sulla privacy descrive il modo in cui SanDisk ("Company", "noi", "ci", "nostro") raccoglie, utilizza e trasmette i dati personali degli utenti. Questa Normativa sulla privacy si applica a tutti i prodotti e i servizi di Company, ad eccezione di quei prodotti e servizi con una normativa sulla privacy separata.

Ove applicabile, l'utente acconsente all'uso dei propri dati, come descritto nella presente Normativa sulla privacy, ogni volta che utilizza uno dei nostri prodotti o servizi; raccomandiamo pertanto di leggere interamente questo documento e di rivolgersi a Company mediante i Contatti per eventuali chiarimenti.

I dati personali sono informazioni che possono essere utilizzate per identificare direttamente o indirettamente l'utente. I dati personali includono anche informazioni collegate alle informazioni utilizzabili per identificare direttamente o indirettamente l'utente. I dati personali non includono informazioni che possono essere rese anonime in modo irreversibile o raggruppate in modo tale da impedirci di identificare, direttamente o indirettamente, l'utente. Qualora il trattamento riguardi dati anonimizzati, manterremo e utilizzeremo i dati in forma anonimizzata.

Riportiamo di seguito una descrizione dei tipi di dati personali che possiamo raccogliere e del modo in cui possiamo trattarli.

Dati personali che raccogliamo

A seconda dei prodotti e dei servizi utilizzati, possiamo raccogliere, e abbiamo raccolto nei ultimi 12 mesi, diversi tipi di dati personali da o sull'utente:

• Identificativi personali, tra cui nome, nome utente, indirizzo e-mail, numero di telefono e indirizzo postale o di spedizione.
• Informazioni commerciali, tra cui prodotti o servizi acquistati o considerati dai clienti, informazioni sull'account Company e sull'autenticazione, indirizzo di fatturazione, indirizzo di spedizione e informazioni di contatto.
• Informazioni finanziarie, tra cui determinate e limitate informazioni sulla carta di credito o debito.
• Caratteristiche personali, quali dati demografici, tra cui residenza, età, genere, livello di reddito, occupazione o livello di istruzione.
• Informazioni generali sulla posizione. Ove disponibili, i nostri servizi possono utilizzare il GPS, la posizione ricavata dall'indirizzo IP e altri tipi di tecnologia per determinare la posizione approssimativa di computer, telefoni o altri dispositivi sui quali l'utente installa o accede ai nostri prodotti e servizi.
• Informazioni sulle attività Internet e altre reti elettroniche, tra cui cronologia di navigazione e di ricerca e informazioni riguardanti l'interazione dell'utente con i nostri prodotti e servizi, quali tipo e configurazione del dispositivo utilizzato, numero identificativo del dispositivo, indirizzo IP del dispositivo, sistema operativo, tipo di browser Internet utilizzato, informazioni sull'uso, informazioni diagnostiche, dati di navigazione, informazioni sul riepilogo della sessione, informazioni sulla CPU e altre statistiche sull'uso, chiamate API, informazioni su interruzioni del servizio, stato della rete, utilizzo della memoria, termini di ricerca, attributi dei file (inclusi attributi per foto, video, musica e documenti).
• Informazioni professionali o relative al lavoro, tra cui posizione, ruolo, professione, esperienza lavorativa precedente, datore di lavoro precedente o attuale.
• Deduzioni tratte da informazioni personali, tra cui informazioni sugli interessi o le preferenze di acquisto.
• Dati personali sensibili, in particolare informazioni sulla carta di credito o debito utilizzate dal nostro processore di pagamento per completare una transazione richiesta dall'utente.

Oltre alle suddette categorie di dati personali, l'utente può scegliere di fornire altre informazioni, ad esempio quando crea un account, compila un modulo, fornisce una fotografia o presenta una domanda di impiego.

Come vengono raccolti i dati personali

• Informazioni fornite dall'utente: Possiamo raccogliere i dati personali che l'utente fornisce quando utilizza i nostri prodotti e servizi, crea un account, ci contatta, partecipa a un sondaggio, partecipa a una community o una chat, si candida per un posto di lavoro, chiede di ricevere le nostre comunicazioni di marketing, interagisce con noi di persona ad un evento o in qualsiasi altro modo. Informazioni sui pagamenti: Possiamo raccogliere i dati personali collegati all'acquisto da parte di un utente. 
• Informazioni sull'uso dei nostri prodotti e servizi: Quando l'utente utilizza i nostri prodotti e servizi, compresi i nostri siti web e le nostre applicazioni per web, dispositivi mobili e desktop, o visualizza le nostre e-mail o i nostri annunci pubblicitari, possiamo raccogliere informazioni da computer, telefoni o altri dispositivi sui quali l'utente installa o accede ai nostri prodotti o servizi. Alcune di queste informazioni potrebbero essere acquisite automaticamente. Si prega di leggere la nostra Normativa in materia di cookie per maggiori informazioni su come utilizziamo le tecnologie di tracciamento web e sulle possibilità di cui può avvalersi l'utente.
• Informazioni da parti terze: Raccogliamo informazioni da parti terze, inclusi partner aziendali o agenzie di marketing e fornitori di servizi. Tali informazioni possono includere le informazioni di contatto dell'utente provenienti dai partner di marketing con cui intraprendiamo attività di marketing congiunto o di co-branding, indirizzo IP o informazioni sulla posizione provenienti dai fornitori di servizi che offrono determinati prodotti e servizi rilevanti per l'area geografica dell'utente e dati provenienti dai social media per autenticare l'utilizzo dei prodotti o autorizzare l'accesso a prodotti e servizi.
• Informazioni provenienti da fonti pubbliche: Possiamo raccogliere informazioni da fonti e documenti governativi e altre informazioni accessibili al pubblico.

Come vengono utilizzati i dati personali dell'utente

Possiamo utilizzare i dati personali per gli scopi previsti nella presente Normativa sulla privacy. In linea generale, utilizziamo i dati personali per fornire, migliorare, sviluppare e personalizzare l'esperienza dell'utente relativamente ai nostri prodotti e servizi, per comunicare con l'utente, per offrirgli messaggi pubblicitari e servizi mirati, e per proteggere noi e l'utente stesso. Possiamo farlo con il consenso dell'utente, per ottemperare a un obbligo di legge, per applicare un contratto con l'utente o per perseguire i nostri legittimi interessi nella misura consentita dalla legislazione applicabile. In qualità di data controller, Company raccoglie, tratta e determina come trattare i dati personali dell'utente per i seguenti scopi:

• Fornitura, miglioramento, sviluppo e personalizzazione dell'esperienza utente relativamente ai nostri prodotti e servizi: Possiamo utilizzare i dati personali per poter fornire, migliorare, sviluppare e personalizzare la user experience relativamente ai nostri prodotti e servizi. Ciò include l'utilizzo di dati personali a fini interni quali analisi dei dati, ricerche e verifiche. Tale eventuale trattamento si basa sul consenso dell’utente o sul nostro legittimo interesse a offrire prodotti e servizi all'utente e a garantire la continuità aziendale. Qualora l'utente partecipi a un gioco a premi, a un concorso o ad altre promozioni, possiamo usare i dati personali che questi ci ha fornito a scopo amministrativo. Alcune di queste attività hanno regole supplementari che possono contenere ulteriori informazioni sul modo in cui vengono utilizzati i dati personali. Invitiamo pertanto l'utente a leggere tali norme attentamente prima di partecipare all'attività.
• Comunicazioni con l'utente: Possiamo utilizzare i dati personali per rispondere alle richieste dell'utente e comunicare avvisi importanti, comprese comunicazioni relative ad account, prodotti, servizi, transazioni o modifiche alle nostre normative e condizioni. Tale trattamento è necessario per l’esecuzione del contratto oppure è basato sul nostro legittimo interesse a interagire con l’utente per fornirgli i nostri prodotti e servizi. Possiamo utilizzare i dati personali anche per inviare comunicazioni all'utente relative alle sue candidature per un posto di lavoro. Le nostre comunicazioni in materia di privacy ai candidati e ai dipendenti forniscono ulteriori informazioni sui dati personali che raccogliamo e su come li utilizziamo in relazione alle candidature dell'utente. Previo esplicito consenso dell'utente, possiamo utilizzare i suoi dati personali per inviargli comunicazioni di marketing relative a prodotti e servizi propri di Company e possiamo altresì condividere i suoi dati personali con partner terzi che potranno inviargli comunicazioni in relazione ai propri prodotti e servizi. Qualora l'utente non desideri più ricevere comunicazioni via e-mail a scopi di marketing, può richiedere il recesso mediante i Contatti. Possiamo utilizzare le informazioni dell'utente per processare e rispondere alle sue richieste di contatto.
• Offerta e valutazione di annunci e servizi personalizzati: Utilizziamo i dati personali per inviare all'utente annunci pubblicitari personalizzati, anche sui siti web e sulle applicazioni di terze parti e per determinare l'efficacia delle nostre campagne promozionali. Si prega di leggere la nostra Normativa in materia di cookie per maggiori informazioni su come utilizziamo le tecnologie di tracciamento web per inviare annunci pubblicitari personalizzati e sulle possibilità di cui può avvalersi l'utente. Possiamo inoltre utilizzare l'audience matching per raggiungere persone (o soggetti simili a tali persone) che hanno usato i nostri prodotti e servizi o sono identificate in uno o più dei nostri database. Realizziamo ciò fornendo una lista di indirizzi e-mail crittografati a un partner pubblicitario o incorporando un pixel di un partner pubblicitario nei nostri prodotti e servizi, e il partner pubblicitario abbina i fattori comuni tra i nostri dati e i propri dati.
• Promozione della sicurezza: Possiamo utilizzare i dati personali dell'utente per contribuire a verificare account e attività dell'utente, nonché a promuovere la sicurezza, ad esempio controllando tentativi di frode e indagando su attività sospette o potenzialmente illegali o su violazioni delle nostre polizze o condizioni. Tale trattamento è necessario per l’esecuzione del contratto oppure è basato sul nostro legittimo interesse a garantire la sicurezza dei nostri prodotti e servizi.
• Elaborazione dei pagamenti: Il nostro processore di pagamento può utilizzare i dati personali dell'utente, incluse le informazioni commerciali e finanziarie, specificamente per l'elaborazione di pagamenti e costi di transazione collegati a un prodotto o servizio richiesto dall'utente.

Per tutti gli utilizzi dei dati finora descritti, che richiedono il consenso preliminare dell'utente ai sensi delle leggi applicabili, l'utente può revocare il proprio consenso contattando Company tramite il modulo web.

In quanto azienda globale, Company ha una serie di affiliate in diverse giurisdizioni. Ciascuna di queste affiliate, in qualità di data controller, raccoglie, tratta e determina come trattare i dati personali dell'utente per contribuire a fornire i prodotti e i servizi richiesti dall'utente.

Utilizziamo e abbiamo utilizzato negli ultimi 12 mesi cookie e tecnologie similari per fornire, proteggere e migliorare i nostri prodotti e servizi, ad esempio per personalizzare i contenuti, comprendere i comportamenti dell'utente e offrire un'esperienza più sicura. Utilizziamo inoltre queste tecnologie per inviare all'utente annunci pubblicitari personalizzati anche tramite siti web e applicazioni di parti terze e per rendere efficaci le nostre campagne promozionali.

Si invita l'utente a leggere la nostra Normativa in materia di cookie per ricevere maggiori informazioni sull'utilizzo dei cookie e sulle possibilità di cui può avvalersi.

Condividiamo alcuni dati personali con i nostri partner strategici e altri destinatari descritti di seguito, per gli scopi indicati nella presente Normativa sulla privacy.

Fornitori di servizi e altre aziende

Possiamo condividere i dati personali con fornitori di servizi e altre aziende che forniscono servizi per nostro conto, quali hosting di siti web, servizi e-mail, marketing, pubblicità, sponsorizzazione di giochi a premi, concorsi e altre promozioni, verifiche, processi di pagamento, evasione di ordini dei clienti, analisi dei dati, assistenza ai clienti, ricerche di mercato e sondaggi sulla soddisfazione dei clienti, servizi di archiviazione sul cloud e altri servizi correlati alla fornitura o vendita dei nostri prodotti e servizi. Possiamo inoltre condividere i dati personali dell'utente con inserzionisti, fornitori di analisi dei dati e social network che ci aiutano a fornire consigli sui prodotti, gestire i messaggi di marketing e inviare contenuti pertinenti. Queste società sono tenute a proteggere i dati dell'utente e a localizzarli ovunque si trovino ad operare.

Affiliate e operazioni commerciali nel gruppo

Possiamo condividere i dati personali con tutte le società collegate a Company. Nel caso di fusione, riorganizzazione societaria, acquisizione, joint venture, assegnazione, scissione, trasferimento o vendita o altre forme di disposizione di tutta o parte dell'impresa, anche in connessione con procedure fallimentari o altre procedure simili, possiamo trasferire qualunque dato personale a ogni parte terza rilevante.

Conformità giuridica e sicurezza

Per legge, procedimento giudiziario, contenzioso o richiesta da parte di autorità pubbliche o governative all'interno o al di fuori del Paese di residenza dell'utente, è possibile che Company debba trasmettere i dati personali dell'utente. Gli stessi dati personali saranno trasmetti qualora dovessimo ritenere che, per finalità di sicurezza nazionale, rispetto della legge o altre questioni di importanza pubblica, sia necessario o opportuno divulgarli.  Possiamo inoltre divulgare i dati personali qualora ritenessimo in buona fede che la divulgazione sia ragionevolmente necessaria per proteggere i nostri diritti e attuare i rimedi disponibili per limitare i danni, applicare i nostri termini e condizioni, accertare eventuali frodi e proteggere le nostre attività o i nostri utenti.

Prendiamo le dovute precauzioni per assicurare che i dati personali dell'utente siano accurati, completi e aggiornati. A seconda del luogo di residenza, l'utente potrebbe beneficiare dei diritti descritti qui sotto.

• Diritto di sapere quali sono i dati personali che raccogliamo, incluse le fonti di provenienza, lo scopo della raccolta e le categorie di destinatari con cui condividiamo i dati personali dell'utente, incluse eventuali parti terze per i propri scopi di marketing
• Diritto di accedere, in un formato standard e strutturato, ai dati personali dell'utente da noi trattati.
• Diritto di eliminare i propri dati personali
• Diritto di opporsi alla cessione o alla condivisione dei dati personali a parti terze.
• Diritto di opporsi alla pubblicità mirata, inclusa la condivisione dei dati personali dell'utente con parti terze per a pubblicità comportamentale contestuale
• Diritto di opporsi a determinati processi decisionali automatizzati
• Diritto di correggere o rettificare eventuali informazioni inesatte che riguardano l'utente

L'utente può compilare il nostro modulo web per esercitare i propri diritti. Risponderemo alla richiesta entro i termini previsti dalla legge applicabile (e in generale entro 30 giorni).

Come richiesto dalla legge e per proteggere la privacy e la sicurezza dei dati personali, possiamo richiedere all'utente altre informazioni che ci permettono di confermarne l'identità e riconoscere il diritto di accedere a tali informazioni, nonché a ricercare e fornire all'utente i dati personali da noi conservati. In alcuni casi, la legge o le normative vigenti ci permettono o ci richiedono di rifiutare una richiesta.

Qualora l'utente risieda in California o in un altro stato o giurisdizione che prevede il diritto di opporsi alla cessione o alla condivisione da parte di Company dei dati personali a parti terze per gli utilizzi descritti in alto, inclusa la pubblicità comportamentale contestuale:

• inviare la richiesta utilizzando il modulo Do Not Sell My Personal Information (Non Cedere I Miei Dati Personali) disponibile qui, specificando l'intenzione di opporsi alla cessione (inclusa la condivisione dei dati personali con i nostri partner per scopi di audience matching mediante sistemi diversi dai cookie o dalle tecnologie di web tracking di cui al paragrafo (2) seguente); e 
• fare clic su Cookie Preferenze a fine pagina e impostare le opzioni dei cookie su "No" sia per "Prestazioni e funzionalità" che per "Pubblicità", quindi fare clic su "Invia preferenze". In questo modo si disattivano i cookie relativi a prestazioni, funzionalità e pubblicità e le tecnologie di tracciamento web sul nostro sito, comprese quelle utilizzate per scopi di audience matching e pubblicità personalizzata. La disattivazione di questi cookie e delle tecnologie di tracciamento web può essere applicata solo al browser specifico dal quale si clicca sul link, e le preferenze possono essere ripristinate se si cambiano le impostazioni.

Agente autorizzato: L'utente può autorizzare un agente a inviare una richiesta per suo conto mediante relativa autorizzazione scritta e firmata e l'agente può consentire a Company di identificare la sua identità.  Qualora l'utente risieda in California e intenda incaricare un agente di inoltrare una richiesta, tale agente dovrà registrarsi come tale presso il California Secretary of State e presentare una copia di tale registrazione unitamente alla richiesta del consumatore verificata. Per presentare la richiesta, l'agente autorizzato dovrà seguire le istruzioni indicate in alto e spedire la dichiarazione scritta che lo autorizza ad agire per suo conto, certificata da un notaio della California, al seguente indirizzo: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. Se l'agente autorizzato è dotato di procura, non è necessario eseguire questi passaggi.

L'utente può anche contattarci telefonicamente al numero 844-441-9869 (PIN: 892274) per esercitare i diritti applicabili e presentare ricorso all'autorità garante della protezione dei dati in relazione al trattamento dei propri dati personali. L'utente può inoltre opporsi o limitare il trattamento ulteriore dei propri dati personali e presentare ricorso contro qualsiasi decisione presa riguardo all'esercizio dei diritti applicabili. Company non adotterà comportamenti discriminatori contro l'utente che esercita i propri diritti applicabili.

Se l'utente richiede di eliminare i propri dati, non potrà più accedere agli account Company. Non saremo più tenuti a conservare i suoi dati, che potranno essere cancellati, in parte o per intero, senza alcuna responsabilità. Tuttavia, abbiamo il diritto di conservare le informazioni riguardanti l'utente qualora ritenessimo tale informazioni necessarie per prevenire tentativi di frode o abusi futuri, se richiesto dalla legge o per scopi commerciali legittimi, ove applicabile, quali analisi di dati non personali, recupero dell'account, mantenimento dell'operatività o della sicurezza dei nostri sistemi, verifica dei nostri archivi o esercizio dei nostri diritti e doveri previsti dai nostri accordi.

I nostri prodotti e servizi, inclusi i nostri siti web e le nostre proprietà multimediali digitali, possono contenere collegamenti o dare la possibilità all'utente di accedere a siti web, prodotti e servizi di parti terze. Non siamo responsabili per le pratiche in materia di privacy impiegate da tali parti terze, né siamo responsabili per le informazioni o i contenuti presenti nei loro prodotti e servizi. La presente Normativa sulla privacy si applica solamente ai dati da noi raccolti. Invitiamo l'utente a leggere le normative sulla privacy di eventuali parti terze prima di iniziare a utilizzare i loro siti web, prodotti o servizi.

È importante che l'utente adotti tutte le precauzioni necessarie per tutelarsi contro accessi non autorizzati ai propri prodotti Company, alle proprie credenziali, ai propri computer e ad altri dispositivi. Qualora l'utente sospetti che la sicurezza del proprio account o dei dati personali sia compromessa, può rivolgersi immediatamente a Company tramite i Contatti. È importante ricordare che, nonostante gli sforzi da noi attuati per mantenere misure di sicurezza fisiche, elettroniche e procedurali adeguate e ragionevoli, nessun sistema di sicurezza è impenetrabile. In caso di violazione della sicurezza, Company invierà tempestivamente debita comunicazione all'utente e alle autorità competenti, se previsto dalla legge.

Manterremo i dati personali dell'utente in conformità con la legge applicabile sulla protezione dei dati e conserveremo tali dati in conformità con la nostra politica di conservazione dei dati per tutto il tempo necessario per soddisfare gli scopi descritti nella presente Normativa sulla privacy, e li elimineremo secondo quanto previsto dalla nostra politica di cancellazione, a meno che un periodo di conservazione più lungo non sia richiesto o permesso dalla legge. I dati sensibili saranno utilizzati per la transazione specifica per cui sono stati destinati e saranno conservati solo per il tempo necessario per completare la transazione o come altrimenti consentito dall'utente.

Non raccogliamo, usiamo o trasmettiamo consapevolmente i dati personali di minori di 16 anni. Qualora Company si renda conto di avere raccolto i dati personali di minori di 16 anni o età equivalente in base alla giurisdizione, ad esempio 13 anni negli Stati Uniti o 14 anni nella Repubblica Popolare Cinese (che, ai fini della presente Normativa sulla privacy, esclude Hong Kong SAR, Macao SAR e la regione di Taiwan), elimineremo le relative informazioni non appena possibile. Qualora l'utente venga a conoscenza del fatto che un minore di 16 anni ci ha fornito i propri dati personali, deve contattarci immediatamente.

Se l'utente è residente nello stato della California, è minore di 18 anni ed è un utente registrato dei nostri prodotti e servizi, la legge vigente in California permette di richiedere e ottenere la rimozione di contenuti o informazioni che l'utente ha reso pubblici. Per formulare tale richiesta, l'utente può rivolgersi a Company mediante i Contatti per indicare la posizione esatta dei contenuti e comprovandone la pubblicazione. Agiremo in buona fede e compiremo ogni sforzo possibile per rimuovere tale pubblicazione visibile al pubblico o per renderla anonima in modo tale da non poter identificare individualmente l'utente, nella misura prevista dalla legislazione applicabile. Si segnala, tuttavia, che tali richieste non assicurano la completa rimozione di un contenuto o di un'informazione pubblicata e che, in alcuni casi, la legge non richiede o permette la rimozione, nemmeno previa richiesta.

Quando condividiamo i dati personali dell'utente con i nostri partner, le affiliate Company e i fornitori di servizi, tali dati vengono trasferiti e/o resi accessibili a Paesi al di fuori dello Spazio economico europeo (SEE) o della Repubblica Popolare Cinese. In tali circostanze, utilizzeremo le clausole contrattuali modello adottate dalla Commissione europea o dalla Cyberspace Administration of China, come pertinente, oppure altri modelli legali. Applicheremo inoltre i provvedimenti obbligatori per agire in conformità con le leggi applicabili (ad esempio, creando una procedura per comunicare all’utente ulteriori informazioni necessarie per il trasferimento dei suoi dati personali al di fuori della Repubblica Popolare Cinese). Per alcuni dei nostri servizi, i dati personali dell'utente possono essere trasferiti e/o archiviati e trattati su server situati negli Stati Uniti o in altre località al di fuori del Paese di residenza dell'utente al solo scopo di fornire all'utente tali servizi.

Ci riserviamo la facoltà di apportare modifiche periodiche alla presente Normativa sulla privacy per tenerla aggiornata, tra l'altro, in base a nuove tecnologie, nuove prassi del settore e nuovi requisiti giuridici. La maggior parte delle modifiche dovrebbe essere di minore entità. Qualsiasi modifica non sostanziale entra in vigore immediatamente dopo la pubblicazione della Normativa sulla privacy aggiornata (la data dell'ultima modifica sarà indicata all'inizio del documento). In alcuni casi, tuttavia, le modifiche alla presente Normativa sulla privacy potrebbero essere significative. In tali casi, Company fornirà all'utente una notifica evidente riguardo alle modifiche sul proprio sito web oppure invierà una comunicazione direttamente all'utente. 

L'uso reiterato dei nostri prodotti e servizi successivamente alla data effettiva di entrata in vigore della Normativa sulla privacy corrisponde all'accettazione da parte dell'utente della stessa. Se l'utente non accetta la Normativa sulla privacy aggiornata, è tenuto a interrompere l'utilizzo dei nostri prodotti e servizi e a rivolgersi a Company tramite i Contatti per chiudere tutti gli account creati.

Per eventuali domande sulla Normativa sulla privacy o le relative modifiche, l'utente può inviare un'e-mail al Responsabile della protezione dei dati (DPO) all'indirizzo DPO@sandisk.com. Può inoltre contattarci utilizzando il modulo web o scriverci all'indirizzo di uno dei nostri uffici più vicini indicando: Alla C. Att.ne di: Ufficio Legale - Domanda sulla Normativa sulla privacy.

Per i clienti ubicati all'interno dell'Unione Europea, il nostro Responsabile della protezione dei dati è stato registrato presso la Data Protection Commission irlandese. Per domande o dubbi relativi alla nostra politica sulla privacy, invitiamo l'utente a contattare il nostro Responsabile della protezione dei dati all'indirizzo e-mail sopra indicato.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Data ostatniej modyfikacji: 27 września 2024

PDF

Niniejsza Polityka prywatności wyjaśnia, w jaki sposób SanDisk („Company”, „my”, „nas”, „nasze”) gromadzi, wykorzystuje i ujawnia informacje o użytkownikach. Wspomniana Polityka prywatności dotyczy wszystkich produktów i usług Company, za wyjątkiem tych, które są objęte oddzielną polityką prywatności.

W stosownych przypadkach użytkownik wyraża zgodę na wykorzystywanie swoich danych zgodnie z postanowieniami niniejszej Polityki prywatności za każdym razem, gdy korzysta z naszych produktów lub usług. W związku z tym prosimy o zapoznanie się z pełną treścią niniejszego dokumentu oraz kontakt z nami w przypadku pytań.

Dane osobowe to informacje, których można użyć w celu bezpośredniej lub pośredniej identyfikacji użytkownika. Dane osobowe obejmują również informacje powiązane z danymi, których można użyć w celu identyfikacji bezpośredniej lub pośredniej. Dane osobowe nie obejmują informacji, którym nieodwracalnie nadano charakter anonimowy lub zbiorczy, uniemożliwiając tym samym identyfikację użytkownika, również w połączeniu z innymi danymi. Przetwarzane przez nas informacje pozbawione danych identyfikacyjnych będziemy przechowywać i wykorzystywać w takiej samej formie.

Poniżej przedstawiamy rodzaje danych osobowych, które możemy gromadzić, a także możliwe sposoby ich wykorzystywania:

Jakie dane osobowe gromadzimy?

W zależności od użytkowanych produktów i usług możemy gromadzić i gromadziliśmy, w tym w ciągu ostatnich 12 miesięcy, różne rodzaje danych osobowych przekazywanych nam przez użytkowników lub dotyczących użytkowników:

• Osobiste numery identyfikacyjne, w tym imię i nazwisko, nazwa użytkownika, adres e-mail, numer telefonu, adres korespondencyjny lub adres wysyłki.
• Informacje handlowe, w tym produkty lub usługi zakupione bądź rozpatrywane przez klientów, informacje o koncie Company, a także informacje uwierzytelniające, adres rozliczeniowy, adres wysyłki i dane kontaktowe.
• Informacje finansowe, w tym pewne ograniczone informacje o karcie kredytowej lub debetowej.
• Cechy osobiste, takie jak dane demograficzne, w tym lokalizacja, wiek, płeć, wysokość dochodów, zatrudnienie lub poziom wykształcenia.
• Ogólne informacje o lokalizacji. W miarę dostępności nasze usługi mogą korzystać z GPS, lokalizacji uzyskanej na podstawie adresu IP użytkownika i innych technologii w celu określenia przybliżonej lokalizacji komputerów, telefonów lub innych urządzeń, na których użytkownik instaluje lub uzyskuje dostęp do naszych produktów lub usług.
• Informacje dotyczące aktywności w internecie lub innej sieci elektronicznej, w tym historia przeglądania, historia wyszukiwania, informacje dotyczące obsługi naszych produktów i usług, np. rodzaj urządzenia, z którego korzysta użytkownik, konfiguracja tego urządzenia, niepowtarzalny numer identyfikacyjny tego urządzenia, jego adres IP, system operacyjny użytkownika, rodzaj przeglądarki internetowej, z której korzysta użytkownik, informacje na temat użytkowania i przeglądania stron, informacje diagnostyczne i podsumowujące sesję, statystyki użycia procesora i inne statystyki, informacje o połączeniach API, informacje o awarii usługi, status sieci, informacje o wykorzystaniu pamięci, wyszukiwane hasła, dane o atrybutach plików (włączając w to atrybuty zdjęć, filmów, plików muzycznych i dokumentów).
• Informacje zawodowe lub związane z zatrudnieniem, takie jak stanowisko, funkcja, zawód, poprzednie doświadczenie zawodowe lub obecny bądź były pracodawca.
• Wnioski wyciągnięte na podstawie danych osobowych, takie jak informacje o zainteresowaniach lub preferencjach zakupowych.
• Wrażliwe dane osobowe, w szczególności informacje o karcie kredytowej lub debetowej, które są wykorzystywane przez nasz system przetwarzający płatności w celu realizacji żądanej transakcji.

Oprócz powyższych kategorii danych osobowych użytkownik może zdecydować się na przekazywanie dodatkowych danych osobowych, gdy tworzy konto, wypełnia formularz, dostarcza nam zdjęcie lub składa wniosek o zatrudnienie.

W jaki sposób gromadzimy dane osobowe?

• Informacje przekazywane przez użytkowników: Możemy gromadzić dane osobowe dostarczane nam przez użytkowników, gdy korzystają oni z naszych produktów i usług, zakładają konta, kontaktują się z nami, biorą udział w ankietach, uczestniczą w dyskusjach na forach lub czatach internetowych, aplikują do pracy, zapisują się do naszego newslettera lub nawiązują z nami kontakt podczas organizowanych spotkań bądź w inny sposób. Informacje o płatnościach: gdy użytkownik dokonuje płatności, możemy gromadzić jego dane osobowe w związku z dokonanym zakupem. 
• Informacje dotyczące korzystania z naszych produktów i usług: Gdy użytkownik korzysta z naszych produktów i usług, w tym naszej strony internetowej oraz aplikacji mobilnych i komputerowych, lub przegląda nasze wiadomości e-mail czy reklamy, możemy gromadzić informacje pozyskiwane z lub dotyczące komputerów, telefonów lub innych urządzeń, na których instalowane są nasze produkty lub usługi bądź które zapewniają użytkownikowi dostęp do tych produktów lub usług. Część z tych informacji może być gromadzona przez nas automatycznie. Aby dowiedzieć się więcej o tym, w jaki sposób używamy technologii śledzenia sieci Web oraz jakie możliwości wyboru ma użytkownik, prosimy zapoznać się z naszą Polityką plików cookie.
• Informacje od stron trzecich: Możemy zbierać informacje od stron trzecich, w tym partnerów biznesowych, agencje marketingowe i usługodawców. Mogą to być dane kontaktowe użytkowników pozyskane od naszych partnerów marketingowych, z którymi prowadzimy wspólne działania marketingowe lub wizerunkowe, adresy IP użytkowników lub informacje o lokalizacji pozyskane od usługodawców w celu oferowania określonych produktów i usług według lokalizacji użytkownika, informacje z serwisów społecznościowych w celu uwierzytelnienia użytkowania produktu bądź informacje, do których dostęp nasze produkty lub usługi uzyskały za zgodą użytkownika.
• Informacje ze źródeł publicznych: Możemy gromadzić informacje ze źródeł i dokumentów rządowych oraz innych publicznie dostępnych informacji.

Jak wykorzystujemy zebrane dane osobowe?

Możemy wykorzystywać dane osobowe do celów opisanych w niniejszej Polityce prywatności. Ogólnie rzecz biorąc, wykorzystujemy dane osobowe, aby dostarczać, udoskonalać, rozwijać i personalizować doświadczenia konsumenckie użytkownika w odniesieniu do naszych produktów i usług, kontaktować się z użytkownikami, oferować im ukierunkowane reklamy i usługi, a także chronić naszą firmę i naszych użytkowników. Możemy to robić na podstawie zgody użytkownika w celu realizacji obowiązku prawnego, w celu realizacji umowy zawartej z użytkownikiem lub dla naszych uzasadnionych interesów – w zakresie dozwolonym przez obowiązujące prawo. Firma Company zbiera i przetwarza dane osobowe oraz decyduje o sposobie przetwarzania danych osobowych użytkowników jako administrator tych danych w następujących celach:

• Dostarczanie, udoskonalanie, rozwijanie i personalizowanie doświadczeń konsumenckich użytkownika w odniesieniu do naszych produktów i usług: możemy wykorzystywać dane osobowe, aby pomóc nam dostarczać, udoskonalać, rozwijać i personalizować doświadczenia konsumenckie użytkownika w odniesieniu do naszych produktów i usług. Obejmuje to posługiwanie się danymi osobowymi w celach takich jak analiza danych, badania i audyty. Możemy realizować tego rodzaju przetwarzanie informacji na podstawie zgody użytkownika lub w naszym uzasadnionym interesie, w którym leży oferowanie użytkownikom naszych produktów i usług, a także w celu zapewnienia ciągłości naszej działalności biznesowej. W przypadku gdy użytkownik bierze udział w loterii, konkursie lub innej promocji, podane przez niego dane osobowe mogą zostać wykorzystane do administrowania takimi programami. Niektóre z tych programów są objęte dodatkowym regulaminem, w którego treści mogą znajdować się dalsze informacje dotyczące wykorzystywania przez nas danych osobowych. W związku z tym zalecamy, aby przed przystąpieniem do programu dokładnie zapoznać się z jego regulaminem.
• Kontaktowanie się z użytkownikami: Możemy wykorzystywać dane osobowe w celu odpowiadania na pytania użytkownika i kontaktowania się z nim w sprawie ważnych powiadomień, w tym powiadomień związanych z kontem użytkownika, produktami, usługami, transakcjami lub zmianami naszych polityk i warunków. Takie przetwarzanie jest stosowane, ponieważ jest niezbędne do realizacji umowy zawartej z użytkownikiem lub opiera się na naszym uzasadnionym interesie w kontakcie z użytkownikiem w celu dostarczenia mu naszych produktów i usług. Możemy również wykorzystywać dane osobowe do komunikowania się z użytkownikiem w sprawie jego podań o pracę. Nasze powiadomienia o prywatności dla osób składających podanie o pracę i pracowników zawierają dodatkowe informacje dotyczące gromadzonych przez nas danych osobowych oraz sposobu, w jaki wykorzystujemy dane osobowe w związku z podaniami o pracę. Za uprzednią wyraźną zgodą użytkownika możemy używać jego danych osobowych do przesyłania korespondencji marketingowej związanej z produktami i usługami Company oraz możemy udostępniać dane osobowe użytkownika partnerom zewnętrznym, którzy mogą wysyłać do niego korespondencję marketingową związaną z oferowanymi przez nich produktami i usługami. W sytuacji, gdy użytkownik chce zrezygnować z otrzymywania drogą elektroniczną korespondencji marketingowej, prosimy o kontakt z nami w celu wycofania udzielonej zgody. Przekazane przez użytkownika informacje mogą być przez nas używane do przetwarzania i udzielania odpowiedzi na przesyłane przez niego zgłoszenia.
• Oferowanie i ocena ukierunkowanych reklam i usług: możemy posługiwać się danymi osobowymi w celu przekazywania użytkownikowi spersonalizowanych reklam, również na stronach internetowych i w aplikacjach podmiotów zewnętrznych, a także w celu oceny skuteczności naszych kampanii promocyjnych. Aby dowiedzieć się więcej o tym, w jaki sposób używamy technologii śledzenia sieci Web do przekazywania spersonalizowanych reklam, prosimy zapoznać się z naszą Polityką plików cookie. Możemy również posługiwać się dopasowywaniem odbiorców, aby dotrzeć do osób (lub osób podobnych do innych osób), które korzystały z naszych produktów i usług lub które znajdują się w przynajmniej jednej spośród naszych baz danych. Jest to realizowane przez nas poprzez przekazanie listy haszowanych adresów e-mail partnerowi reklamowemu lub dołączenie piksela od partnera reklamowego do naszych własnych produktów i usług oraz przez dopasowanie wspólnych czynników naszych danych i danych partnera reklamowego przez partnera reklamowego.
• Wspieranie bezpieczeństwa: możemy wykorzystywać dane osobowe w celu weryfikacji kont i aktywności użytkowników oraz w celu wspierania bezpieczeństwa, na przykład poprzez monitorowanie nadużyć i prowadzenie dochodzeń w związku z podejrzaną lub potencjalnie nielegalną działalnością bądź naruszeniem naszych warunków lub polityki. Takie przetwarzanie jest stosowane, ponieważ jest niezbędne do realizacji umowy zawartej z użytkownikiem lub opiera się na naszym uzasadnionym interesie, w którym leży zapewnianie bezpieczeństwa naszych produktów i usług.
• Przetwarzanie płatności: Nasz system przetwarzający płatności może wykorzystywać dane osobowe użytkownika, w tym informacje handlowe i finansowe, w szczególności do przetwarzania płatności i opłat transakcyjnych związanych z produktem lub usługą, które zamawia.

W przypadku każdego opisanego powyżej sposobu wykorzystywania danych osobowych wymagającego uprzedniej wyraźnej zgody użytkownika zgodnie z obowiązującym prawem, użytkownik może wycofać swoją zgodę, kontaktując się z nami przez formularz internetowy.

Jako firma o zasięgu globalnym Company posiada szereg podmiotów zależnych działających w różnych systemach prawnych. Każdy z nich gromadzi, przetwarza i decyduje o sposobie przetwarzania danych osobowych jako administrator tych danych, aby dostarczać użytkownikom zamówione przez nich produkty i usługi.

Wykorzystujemy i w ciągu ostatnich 12 miesięcy wykorzystywaliśmy pliki cookie i podobne technologie, aby dostarczać, chronić i udoskonalać nasze produkty i usługi, w tym poprzez personalizację treści, zdobywanie wiedzy o zachowaniach użytkowników i zwiększanie poziomu bezpieczeństwa użytkowania naszych rozwiązań. Oprócz tego wykorzystujemy te technologie w celu przekazywania użytkownikom spersonalizowanych reklam, również na stronach internetowych i w aplikacjach podmiotów zewnętrznych, a także w celu oceny skuteczności naszych kampanii promocyjnych.

Aby dowiedzieć się więcej o tym, w jaki sposób używamy plików cookie i technologii śledzenia sieci Web oraz jakie możliwości wyboru ma w związku z tym użytkownik, prosimy zapoznać się z naszą Polityką plików cookie.

Udostępniamy określone dane osobowe partnerom strategicznym i innym odbiorcom opisanym poniżej do celów opisanych w niniejszej Polityce prywatności.

Usługodawcy i inne firmy

Możemy udostępniać dane osobowe usługodawcom i innym firmom, które świadczą w naszym imieniu usługi, takie jak hosting stron internetowych; usługi związane z pocztą elektroniczną; marketing; reklamę; sponsorowanie loterii, konkursów i innych promocji; przeprowadzanie audytów; przetwarzanie płatności; realizacja zamówień; analiza danych; obsługa klienta; prowadzenie badań rynkowych i badań poziomu satysfakcji klientów; usługi przechowywania danych w chmurze; a także inne usługi wspierające dostarczanie lub sprzedaż naszych produktów i usług. Możemy również udostępniać dane osobowe użytkownika reklamodawcom, dostawcom analiz danych i serwisom społecznościowym, które pomagają nam w formułowaniu rekomendacji produktowych, komunikacji marketingowej i wysyłaniu odpowiednich treści. Wspomniane firmy mają obowiązek ochrony danych użytkowników i mogą być zlokalizowane w dowolnym miejscu na świecie, w którym prowadzimy działalność.

Podmioty zależne i korporacyjne transakcje biznesowe

Zastrzegamy sobie prawo do udostępniania danych osobowych wszystkim podmiotom zależnym od Company. W przypadku fuzji, reorganizacji, przejęcia, powstania przedsiębiorstwa joint venture, przeniesienia, wydzielenia, transferu, sprzedaży lub rozdysponowania naszej firmy w części lub w całości, w tym w ramach postępowania upadłościowego lub podobnego, wszelkie zgromadzone dane osobowe mogą zostać przekazane właściwej stronie trzeciej.

Zgodność z przepisami prawa i bezpieczeństwo

Istnieją sytuacje, w których może wystąpić konieczność ujawnienia przez nas danych osobowych – w związku z wymogami prawa, w wyniku przeprowadzonej procedury prawnej lub postępowania sądowego bądź w odpowiedzi na wniosek organów administracji publicznej lub rządowej działających w kraju zamieszkania użytkownika lub poza jego granicami. Informacje te możemy ujawnić również, jeśli uznamy, że jest to niezbędne lub właściwe ze względu na bezpieczeństwo narodowe, egzekwowanie prawa lub inny ważny interes społeczny.  Ponadto możemy ujawnić dane osobowe także, gdy w dobrej wierze stwierdzimy, że jest to w uzasadniony sposób niezbędne do ochrony naszych praw i zastosowania dostępnych środków naprawczych, egzekwowania naszych warunków i postanowień, wszczęcia dochodzenia w sprawie oszustwa bądź ochrony naszej działalności lub użytkowników.

Podejmujemy należyte kroki, aby dane osobowe użytkowników były dokładne, kompletne i aktualne. W zależności od miejsca zamieszkania użytkownicy mogą posiadać opisane poniżej prawa.

• Prawo do informacji o gromadzonych przez nas danych osobowych, w tym źródeł, z których zbierane są dane osobowe, naszych celach ich gromadzenia oraz kategorii odbiorców, którym udostępniliśmy dane osobowe użytkownika, w tym wszelkich informacji udostępnianych stronom trzecim w ich celach marketingowych
• Prawo dostępu do przetwarzanych przez nas danych osobowych w ustrukturyzowanej i ustandaryzowanej formie
• Prawo do usunięcia danych osobowych
• Prawo do rezygnacji ze sprzedaży lub udostępniania danych osobowych stronom trzecim
• Prawo do rezygnacji z reklamy ukierunkowanej, w tym udostępniania danych osobowych stronom trzecim na potrzeby szeroko rozumianego kontekstu reklamy behawioralnej
• Prawo do rezygnacji z podejmowania niektórych zautomatyzowanych decyzji
• Prawo do poprawiania lub sprostowania wszelkich niedokładnych informacji dotyczących użytkownika

Aby skorzystać ze swoich praw, użytkownik może użyć formularza internetowego. Na prośbę użytkownika odpowiemy w terminie wymaganym przez obowiązujące prawo (zasadniczo w ciągu 30 dni).

Zgodnie z wymogami prawa i mając na celu ochronę prywatności oraz zagwarantowanie bezpieczeństwa danych osobowych, możemy zwrócić się do użytkownika z prośbą o udzielenie informacji, które pozwolą nam potwierdzić jego tożsamość i uprawnienia dostępu do tych danych oraz umożliwią nam wyszukanie i dostarczenie użytkownikowi przechowywanych przez nas danych osobowych. Zdarzają się sytuacje, w których obowiązujące prawo lub wymogi prawne zezwalają na odrzucenie wniosku lub nakładają na nas taki obowiązek.

Jeśli użytkownik jest mieszkańcem Kalifornii lub innego stanu bądź jurysdykcji, w której zapewnione jest prawo do rezygnacji ze sprzedaży lub udostępniania przez nas danych osobowych stronom trzecim w celu wykorzystania danych użytkownika opisanych powyżej, w tym w szeroko rozumianym kontekście reklamy behawioralnej, powinien:

• złożyć wniosek, uzupełniając formularz Rezygnacja ze sprzedaży i udostępniania danych osobowych dostępny tutaj i wskazując chęć rezygnacji ze sprzedaży (np. udostępniania danych naszym partnerom do potrzeb dopasowywania odbiorców innymi środkami niż pliki cookie czy technologie śledzenia sieci Web, o których mowa w punkcie (2) poniżej), oraz 
• kliknąć Preferencje dotyczące ciasteczek w poniższej stopce i wybrać pozycję „Nie” w opcjach plików cookie związanych z wydajnością i funkcjonalnością oraz reklamami, a następnie kliknąć przycisk „Potwierdź preferencje”. Spowoduje to dezaktywację plików cookie związanych z wydajnością, funkcjonalnością i reklamami oraz technologii śledzenia sieci Web na naszej stronie. Obejmuje to również technologie wykorzystywane do celów dopasowywania odbiorców i personalizacji reklam. Dezaktywacja tych plików cookie i technologii śledzenia sieci Web może mieć zastosowanie wyłącznie do konkretnej przeglądarki internetowej, z poziomu której kliknięto łącze. W przypadku zmiany ustawień preferencje mogą ulec zresetowaniu.

Upoważniony przedstawiciel: Użytkownik może upoważnić przedstawiciela do złożenia wniosku w jego imieniu, pod warunkiem że zostanie mu przekazana pisemna, podpisana przez użytkownika zgoda na złożenie wniosku, a przedstawiciel dodatkowo będzie w stanie potwierdzić nam swoją tożsamość.  Jeśli użytkownik zamieszkujący w Kalifornii chce wyznaczyć przedstawiciela do celów złożenia wniosku, przedstawiciel musi zgłosić ten fakt w biurze Sekretarza Stanu Kalifornia i przesłać nam egzemplarz zgłoszenia rejestracyjnego razem ze zweryfikowanym wnioskiem konsumenckim użytkownika. W celu złożenia wniosku upoważniony przedstawiciel powinien postępować zgodnie z powyższymi instrukcjami, a dodatkowo przesłać pisemną, notarialnie poświadczoną deklarację upoważniającą go do działania w imieniu użytkownika, na poniższy adres: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. Jeśli upoważniony przedstawiciel użytkownika ma pełnomocnictwo, wykonanie tych czynności może nie być konieczne.

Aby skorzystać ze swoich praw, można również skontaktować się z nami telefonicznie, dzwoniąc pod numer 844-441-9869 (PIN: 892274). Użytkownik ma także prawo do złożenia przed właściwym organem ochrony danych skargi dotyczącej przetwarzania swoich danych osobowych. Użytkownik może również sprzeciwić się dalszemu przetwarzaniu danych osobowych lub ograniczyć ich przetwarzanie, a także odwołać się od wszelkich decyzji w ramach korzystania z przysługujących mu praw. Korzystając z przysługujących mu praw, użytkownik nie spotka się z żadnymi reperkusjami z naszej strony.

Jeśli użytkownik zażąda usunięcia swoich danych, straci on dostęp do wszystkich kont Company. Nie jesteśmy zobowiązani do przechowywania danych użytkownika, w związku z czym możemy usunąć je bez ponoszenia jakiejkolwiek odpowiedzialności. W stosownych przypadkach zastrzegamy sobie jednak prawo do zachowania informacji dotyczących użytkownika, jeśli uznamy, że mogą one być niezbędne do zapobiegania oszustwom lub przyszłym nadużyciom, jeśli jest to wymagane prawem lub w uzasadnionych celach, takich jak analiza informacji niebędących danymi osobowymi, odzyskiwanie konta, utrzymywanie funkcjonalności lub bezpieczeństwa naszych systemów, przeprowadzanie audytów naszych raportów lub egzekwowanie naszych praw i obowiązków wynikających z podpisanych przez nas umów.

Oferowane przez nas produkty i usługi, włączając w to nasze strony internetowe i media cyfrowe, mogą zawierać łącza lub oferować dostęp do stron internetowych, produktów i usług podmiotów zewnętrznych. Nie ponosimy odpowiedzialności za praktyki w zakresie ochrony prywatności stosowane przez te podmioty ani za informacje lub treści zawarte w ich produktach i usługach. Niniejsza Polityka prywatności dotyczy wyłącznie informacji, które są gromadzone przez nas. Zachęcamy do zapoznania się z polityką prywatności stosownych podmiotów zewnętrznych przed rozpoczęciem korzystania z ich stron internetowych, produktów lub usług.

Ważne jest, aby każdy użytkownik w odpowiedni sposób zabezpieczył swoje produkty Company, dane uwierzytelniające konta oraz komputery lub inne urządzenia przed dostępem osób niepowołanych. W przypadku podejrzenia naruszenia bezpieczeństwa konta lub danych osobowych prosimy o jak najszybszy kontakt z nami. Należy pamiętać, że pomimo naszych starań na rzecz zapewnienia uzasadnionych i odpowiednich (w tym elektronicznych, fizycznych i proceduralnych) środków bezpieczeństwa żaden system bezpieczeństwa nie jest nieprzenikniony. W razie naruszenia bezpieczeństwa niezwłocznie powiadomimy o tym użytkownika oraz odpowiednie organy, jeżeli wymaga tego prawo.

Przechowujemy dane osobowe użytkownika zgodnie z obowiązującym prawem o ochronie danych. Czynimy to zgodnie z naszą polityką przechowywania danych tak długo, jak jest to konieczne do realizacji celów określonych w niniejszej Polityce prywatności. Zgodnie z naszą polityką dotyczącą usuwania danych osobowych wdrożymy procedurę ich usunięcia, chyba że dłuższy okres przechowywania jest wymagany lub dozwolony przez prawo. Poufne informacje będą wykorzystywane w odniesieniu do konkretnej transakcji, do której miały zostać użyte i będą przechowywane przez nas wyłącznie przez okres niezbędny do realizacji transakcji lub w inny sposób dozwolony przez użytkownika.

Nie zbieramy, nie wykorzystujemy ani nie ujawniamy rozmyślnie danych osobowych dzieci w wieku poniżej 16 lat. Jeśli ustalimy, że zostały przez nas zgromadzone dane osobowe osoby, która nie ukończyła 16 lat – lub równoważnego minimalnego wieku obowiązującego w danym systemie prawnym, a więc przykładowo 13 lat w Stanach Zjednoczonych lub 14 lat w Chińskiej Republice Ludowej (przy czym państwo to, do celów niniejszej Polityki prywatności, nie obejmuje Specjalnego Regionu Administracyjnego Hongkong, Specjalnego Regionu Administracyjnego Makau oraz regionu Tajwanu) – podejmiemy kroki mające na celu jak najszybsze usunięcie tych danych. W przypadku posiadania informacji o przekazaniu nam danych osobowych przez osobę poniżej 16. roku życia, prosimy o jak najszybszy kontakt z nami.

Osoby poniżej 18. roku życia, które są mieszkańcami Kalifornii i będące zarejestrowanymi użytkownikami naszych produktów lub usług mogą – zgodnie z prawem stanu Kalifornia – zwrócić się z prośbą o usunięcie treści lub informacji opublikowanych przez siebie publicznie i uzyskać pozytywne rozpatrzenie wniosku. Aby wystąpić z takim wnioskiem, prosimy o kontakt z nami oraz dostarczenie szczegółowych informacji dotyczących miejsca, w którym opublikowane zostały wspomniane treści lub informacje, i potwierdzenie, że jest się autorem posta. W zakresie dozwolonym przez obowiązujące prawo dołożymy wszelkich starań, aby usunąć post z publicznie dostępnych stron bądź nadać mu anonimowy charakter uniemożliwiający identyfikację użytkownika. Należy pamiętać, że złożenie wniosku nie gwarantuje całkowitego ani pełnego usunięcia opublikowanych treści bądź informacji oraz że w pewnych okolicznościach prawo nie wymaga ich usunięcia lub nie zezwala na nie nawet po wystosowaniu odpowiedniej prośby.

Gdy udostępniamy dane osobowe użytkowników naszym partnerom, podmiotom zależnym od Company i usługodawcom, informacje te mogą zostać przesłane do państw spoza Europejskiego Obszaru Gospodarczego lub Chińskiej Republiki Ludowej i/lub tam udostępnione. W takiej sytuacji posłużymy się modelowymi klauzulami umownymi przyjętymi przez Komisję Europejską lub Chińską Administrację Cyberprzestrzeni albo będziemy opierać się na alternatywnych podstawach prawnych i wdrożymy obowiązkowe środki, aby działać zgodnie z obowiązującym prawem (np. poprzez stworzenie procesu ujawniania użytkownikowi dodatkowych wymaganych informacji podczas przesyłania danych osobowych użytkownika poza Chińską Republikę Ludową). W przypadku niektórych naszych usług dane osobowe użytkownika mogą być przekazywane na serwery i/lub przechowywane i przetwarzane na serwerach w Stanach Zjednoczonych lub w innych miejscach poza krajem będącym miejscem zamieszkania użytkownika w celu świadczenia usług dla użytkownika.

Zastrzegamy sobie prawo do okresowego modyfikowania niniejszej Polityki prywatności, aby uwzględnić między innymi możliwości nowych technologii, praktyki branżowe i wymogi prawne. Spodziewamy się, że w większości będą to niewielkie zmiany. Wszelkie mniej istotne zmiany wejdą w życie z chwilą opublikowania zaktualizowanej Polityki prywatności – datę ostatniej modyfikacji wskażemy na górze tego dokumentu. Może się jednak zdarzyć, że zmiany w niniejszej Polityce prywatności będą miały bardziej istotny charakter. W takich przypadkach poinformujemy o takich zmianach na naszej stronie internetowej zanim wejdą one w życie lub wyślemy bezpośrednio powiadomienie o nich. 

Dalsze korzystanie z naszych produktów i usług po wejściu w życie Polityki prywatności będzie oznaczać, że użytkownik akceptuje jej nową wersję. W sytuacji, gdy użytkownik nie wyraża zgody na uaktualnioną Politykę prywatności, prosimy o zaprzestanie korzystania z naszych produktów i usług i kontakt z nami w celu zamknięcia wszelkich utworzonych kont.

W przypadku pytań dotyczących niniejszej Polityki prywatności lub jej wdrażania prosimy o kontakt z naszym inspektorem ochrony danych (DPO) pod adresem DPO@sandisk.com. Możesz również skontaktować się z nami za pośrednictwem naszego formularza internetowego lub wysłać do nas list z najbliższej lokalizacji na adres: Do wiadomości [ATTN]: Dział prawny – pytanie dotyczące Polityki prywatności [Legal Department – Privacy Statement Question].

Dla klientów z Unii Europejskiej zarejestrowaliśmy naszego inspektora ochrony danych (DPO) w państwowej komisji ds. ochrony danych w Irlandii. W przypadku jakichkolwiek pytań lub wątpliwości dotyczących naszych praktyk w zakresie ochrony prywatności zachęcamy do kontaktu z inspektorem ochrony danych za pośrednictwem adresu e-mail podanego powyżej.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Dernière modification le 27 septembre 2024

PDF

La présente Déclaration de confidentialité énonce la façon dont SanDisk (ci-après « Company », « nous », « notre » ou « nos ») collecte, utilise et divulgue vos informations. La Déclaration de confidentialité s’applique à l’ensemble des produits et services Company, à l’exception de ceux qui sont soumis à une Déclaration de confidentialité spécifique.

Le cas échéant, à chaque fois que vous recourez à nos produits ou services, vous consentez à l’utilisation de vos informations de la manière énoncée dans la présente Déclaration de confidentialité. Nous vous encourageons donc à lire ce document intégralement et à nous contacter si vous avez des questions.

Les informations personnelles sont des informations qui peuvent servir à vous identifier directement ou indirectement. Les informations personnelles comprennent également des informations associées aux informations pouvant servir à vous identifier directement ou indirectement. Les informations personnelles ne comprennent pas les informations rendues anonymes de manière irréversible ou regroupées d’une façon qui ne nous permette plus, en association avec d’autres informations ou d’une autre manière, de vous identifier. Dans la mesure où nous traitons des informations anonymisées, nous les conservons et les utilisons sous une forme anonymisée.

Vous trouverez ci-après la description des types d’informations personnelles que nous pouvons collecter ainsi que la façon dont nous pouvons les traiter :

Les informations personnelles que nous collectons

En fonction des produits et des services que vous utilisez, nous pouvons collecter et avons collecté, y compris au cours des 12 derniers mois, différents types d’informations personnelles auprès de vous ou à propos de vous.

• Identifiants personnels, notamment le nom, le nom d’utilisateur, l’adresse électronique, le numéro de téléphone et l’adresse postale ou de livraison.
• Informations commerciales, notamment les produits ou services achetés ou envisagés par les clients, les informations sur votre compte Company et les informations d’authentification, l’adresse de facturation, l’adresse de livraison et les coordonnées.
• Informations financières, notamment certaines informations limitées sur les cartes de crédit ou de débit.
• Caractéristiques personnelles, telles que les données démographiques, notamment votre localisation, votre âge, votre sexe, votre niveau de revenu, votre emploi ou votre niveau d’études.
• Informations générales de localisation. Lorsqu’ils sont disponibles, nos services peuvent utiliser le GPS, la localisation déduite de votre adresse IP et d’autres technologies pour déterminer la localisation approximative des ordinateurs, téléphones ou autres appareils sur lesquels vous installez ou accédez à nos produits ou services.
• Informations relatives à l’activité sur Internet ou sur d’autres réseaux électroniques, notamment l’historique de navigation, l’historique de recherche et les informations concernant votre interaction avec nos produits et services, telles que le type d’appareil que vous utilisez, sa configuration, son identifiant unique, son adresse IP, votre système d’exploitation, le type de navigateur Internet, des informations sur l’utilisation, des informations de diagnostic, des informations de navigation, des informations récapitulatives de session, des statistiques liées à l’unité centrale et à d’autres usages, des appels API, des informations sur les défaillances de service, l’état du réseau, l’utilisation du stockage, les mots-clés et les attributs de fichier (y compris les attributs des photos, vidéos, musiques et documents).
• Informations professionnelles ou liées à l’emploi, telles que le poste, le rôle, la profession, l’expérience professionnelle antérieure ou l’employeur actuel ou précédent.
• Déductions tirées d’informations personnelles, telles que des informations sur vos intérêts ou vos préférences d’achat.
• Informations personnelles sensibles, notamment les informations de carte de crédit ou de débit utilisées par notre organisme de traitement des paiements pour vous aider à effectuer une transaction que vous avez demandée.

Outre les catégories d’informations personnelles susmentionnées, vous pouvez choisir de nous fournir des informations personnelles supplémentaires, par exemple lorsque vous créez un compte, remplissez un formulaire, nous fournissez une photographie ou soumettez une demande d’emploi.

Comment nous collectons les informations personnelles

• Les informations que vous fournissez : Nous pouvons collecter les informations personnelles que vous fournissez lorsque vous utilisez nos produits et services, créez un compte, nous contactez, participez à un sondage, participez à des discussions de la communauté ou à des chats, postulez pour un poste, vous inscrivez pour recevoir nos communiqués marketing, entrez en relation avec nous lors d’événements en personne ou interagissez avec nous d’une autre manière. Les informations relatives aux paiements : Si vous effectuez un achat, nous pouvons collecter les informations personnelles relatives à cet achat. 
• Les informations relatives à l’utilisation de nos produits et services : Lorsque vous utilisez nos produits et services, notamment nos sites Web et nos applications Web, mobiles et de bureau, ou que vous lisez nos courriers électroniques ou nos publicités, nous pouvons collecter des informations depuis ou sur les ordinateurs, téléphones ou autres appareils sur lesquels vous installez ou accédez à nos produits ou services. Nous pouvons collecter certaines de ces informations automatiquement. Veuillez lire notre Déclaration relative aux cookies (https://www.sandisk.com/fr-fr/legal/cookie-statement.html) pour en savoir plus sur notre utilisation de technologies de suivi Web et les options dont vous disposez.
• Les informations provenant de tiers : Nous collectons des informations provenant de tiers, notamment des partenaires commerciaux, des agences de marketing et des prestataires de services. Cela peut inclure vos coordonnées reçues de partenaires commerciaux lorsque nous participons à des activités conjointes de marketing ou de co-dénomination, votre adresse IP ou vos informations de localisation reçues de prestataires de services et qui permettent de vous proposer des produits et services adaptés à votre lieu, et des données provenant de vos réseaux sociaux, afin d’authentifier votre utilisation des produits ou votre autorisation d’accès donnée à nos produits ou services.
• Informations provenant de sources publiques : Nous pouvons collecter des informations provenant de sources et de registres gouvernementaux et d’autres informations accessibles au public.

La façon dont nous utilisons vos informations personnelles

Nous pouvons utiliser des informations personnelles aux fins énoncées dans la présente Déclaration de confidentialité. En règle générale, les informations personnelles nous servent à offrir, améliorer, développer et personnaliser votre expérience de nos produits et services, à communiquer avec vous, à vous proposer des publicités et des services ciblés, et à nous protéger ainsi que nos utilisateurs. Nous pouvons agir de la sorte avec votre consentement afin de remplir une obligation légale, pour l’exécution d’un contrat conclu avec vous ou aux fins de nos intérêts légitimes, dans les limites autorisées par la législation applicable. Company collecte, traite et détermine la façon de traiter vos informations personnelles en tant que responsable du traitement pour les finalités ci-après :

• Offrir, améliorer, développer et personnaliser votre expérience de nos produits et services : Nous pouvons utiliser les informations personnelles dans le but de nous aider à offrir, améliorer, développer et personnaliser votre expérience de nos produits et services, y compris l’utilisation d’informations personnelles à des fins telles que l’analyse des données, la recherche et les audits. Nous pouvons effectuer ce traitement sur la base de votre consentement ou en fonction de l’intérêt légitime que nous avons à vous proposer des produits et services et pour la continuité de nos activités. En cas de participation à un tirage, un concours ou une autre promotion, nous pouvons utiliser les informations personnelles que vous fournissez pour gérer ces programmes. Certaines de ces activités sont soumises à des règles supplémentaires qui peuvent comporter d’autres informations sur la façon dont nous utilisons les informations personnelles, c’est pourquoi nous vous encourageons à lire ces règles avec attention avant de participer.
• Communiquer avec vous : Nous pouvons utiliser des informations personnelles pour répondre à vos demandes et communiquer avec vous au sujet d’importantes notifications, notamment des notifications liées à votre compte, aux produits, services, transactions ou à des modifications apportées à nos politiques et conditions. Ce traitement est entrepris car il est nécessaire à l’exécution d’un contrat conclu avec vous ou est fondé sur l’intérêt légitime que nous avons à dialoguer avec vous pour vous fournir nos produits et services. Nous pouvons également utiliser des informations personnelles pour communiquer avec vous au sujet de vos demandes d’emploi. Nos notifications de confidentialité à l’intention des candidats et salariés donnent des renseignements supplémentaires au sujet des informations personnelles que nous collectons et sur la manière dont nous les utilisons dans le cadre de vos demandes d’emploi. Sous réserve de votre autorisation expresse préalable, nous pouvons nous servir d’informations personnelles pour vous envoyer des communications commerciales en rapport avec les produits et services de Company ; en outre, nous pouvons communiquer vos informations personnelles à des partenaires tiers, qui peuvent vous envoyer des communications commerciales en rapport avec leurs produits et services. Si vous ne souhaitez plus recevoir de communications électroniques à des fins marketing, veuillez nous contacter pour les refuser. Nous pouvons utiliser vos informations pour traiter vos demandes et y répondre lorsque vous nous contactez.
• Fournir et évaluer des publicités et des services ciblés : Nous pouvons utiliser des informations personnelles pour vous afficher des publicités personnalisées, y compris sur des sites Web et applications de tiers, et pour déterminer l’efficacité de nos campagnes promotionnelles. Veuillez lire notre Déclaration relative aux cookies (https://www.sandisk.com/fr-fr/legal/cookie-statement) pour en savoir plus sur notre utilisation de technologies de suivi Web en matière de publicités personnalisées et les options dont vous disposez. En outre, nous pouvons nous servir de la correspondance d’audience pour atteindre des personnes (ou des personnes similaires à des personnes) qui ont utilisé nos produits et services ou qui sont identifiées dans une ou plusieurs de nos bases de données. Pour ce faire, nous donnons une liste d’adresses électroniques hachées à un partenaire publicitaire ou nous incorporons un pixel de partenaire publicitaire dans nos propres produits et services, et le partenaire publicitaire fait correspondre les facteurs communs entre nos données et les siennes.
• Promouvoir la sécurité : Nous pouvons utiliser les informations personnelles pour vérifier les comptes et l’activité des utilisateurs ainsi que pour promouvoir la sécurité, par exemple en surveillant la fraude et en enquêtant sur les activités suspectes ou potentiellement illégales, ou les violations de nos conditions ou politiques. Ce traitement est entrepris car il est nécessaire à l’exécution d’un contrat conclu avec vous ou est fondé sur l’intérêt légitime que nous avons à contribuer à la sécurité de nos produits et services.
• Traitement des paiements : Notre organisme de traitement des paiements peut utiliser vos informations personnelles, y compris les informations commerciales et financières, spécifiquement pour le traitement des paiements et des frais de transaction liés à un produit ou un service que vous avez demandé.

Pour chacune des utilisations précitées de vos données qui nécessitent votre consentement exprès préalable en vertu du droit applicable, notez que vous pouvez refuser cette autorisation en nous contactant au moyen de notre formulaire Web.

En tant que société internationale, Company possède un certain nombre de sociétés affiliées dans différents territoires. Chacune de ces sociétés affiliées collecte, traite et détermine la façon de traiter vos informations personnelles en tant que responsable du traitement pour vous apporter les produits et les services que vous demandez.

Nous utilisons et avons utilisé au cours des 12 derniers mois des cookies et des technologies similaires pour offrir, protéger et améliorer nos produits et services, par exemple en personnalisant le contenu, en comprenant le comportement des utilisateurs et en proposant une expérience plus sûre. Nous utilisons également ces technologies pour vous afficher des publicités personnalisées, y compris sur des sites Web et applications de tiers, et pour déterminer l’efficacité de nos campagnes promotionnelles.

Veuillez lire notre Déclaration relative aux cookies (https://www.sandisk.com/fr-fr/legal/cookie-statement.html) pour en savoir plus sur la façon dont nous utilisons les cookies et les technologies de suivi Web ainsi que sur les options dont vous disposez.

Nous mettons certaines informations personnelles à la disposition des partenaires stratégiques et des autres destinataires décrits ci-dessous aux fins décrites dans la présente Déclaration de confidentialité.

Fournisseurs de services et autres sociétés

Nous pouvons partager les informations personnelles avec des prestataires de services et d’autres entreprises qui fournissent des services pour notre compte, tels que l’hébergement de site Web ; les services de messagerie électronique ; le marketing ; la publicité ; la sponsorisation de tirages au sort, concours et autres promotions ; les audits ; le traitement de paiements ; l’exécution des commandes des clients ; l’analyse de données ; l’assistance à la clientèle ; la mise en œuvre d’études de marché et d’enquêtes de satisfaction auprès des clients ; les services de stockage dans le cloud et d’autres services qui permettent d’offrir ou de vendre nos produits et services. Nous pouvons également partager vos informations personnelles avec des annonceurs, des fournisseurs d’analyse de données et des réseaux sociaux, qui nous aident à formuler des recommandations de produits, des messages marketing et à vous envoyer du contenu pertinent. Ces entreprises ont l’obligation de protéger vos informations et peuvent se trouver à tout endroit où nous exerçons nos activités.

Sociétés affiliées et transactions commerciales d’entreprise

Nous pouvons partager des informations personnelles avec toutes les sociétés affiliées à Company. En cas de fusion, de réorganisation, d’acquisition, de co-entreprise, de cession, d’essaimage, de transfert ou de vente, ou encore de disposition de notre société, en tout ou en partie, y compris en rapport avec toute faillite ou procédure similaire, nous pouvons transférer toute information personnelle au tiers concerné.

Conformité avec la loi et sécurité

Nous serons peut-être contraints de divulguer des informations personnelles par la loi ou encore dans le cadre d’une procédure légale, d’un contentieux ou de demandes des autorités publiques de votre pays de résidence ou non. Nous pouvons également divulguer des informations personnelles si nous déterminons que la divulgation est nécessaire ou appropriée à des fins de sécurité nationale, de maintien de l’ordre ou d’autres questions d’importance publique.  Nous pouvons également divulguer des informations personnelles si nous déterminons, de bonne foi, que la divulgation est raisonnablement nécessaire pour protéger nos droits et exercer les recours disponibles, faire appliquer nos conditions générales, enquêter sur des fraudes ou encore protéger nos opérations ou nos utilisateurs.

Nous prenons les mesures nécessaires pour veiller à ce que vos informations personnelles soient exactes, complètes et à jour. En fonction du lieu où vous vivez, vous pouvez bénéficier des droits décrits ci-dessous.

• Droit de connaître les informations personnelles que nous collectons, notamment les sources à partir desquelles les informations personnelles sont collectées, le(s) but(s) de la collecte, et les catégories de destinataires avec lesquels nous avons partagé vos informations personnelles, notamment tout partage avec des tiers à des fins de marketing
• Droit d’accès, dans un format structuré et standard, aux informations personnelles que nous traitons à votre sujet
• Droit d’effacer vos informations personnelles
• Droit de refuser la vente ou le partage de vos informations personnelles à des tiers
• Droit de refuser la publicité ciblée, notamment le partage de vos informations personnelles avec des tiers pour la publicité comportementale intercontexte
• Droit de vous désinscrire de certaines prises de décision automatisées
• Droit de corriger ou de rectifier toute information inexacte vous concernant

Vous pouvez remplir notre formulaire Web pour exercer vos droits applicables. Nous répondrons à votre demande dans le délai requis par le droit applicable (et en général dans un délai de 30 jours).

Comme l’exige la loi, et afin de préserver la confidentialité et la sécurité de vos informations personnelles, nous pouvons vous demander des données nous permettant de confirmer votre identité et votre droit d’accès à ces informations ainsi que de rechercher et de vous fournir les informations personnelles que nous gérons. Dans certains cas, le droit applicable ou les exigences réglementaires nous autorisent ou nous obligent à refuser une demande.

Si vous résidez en Californie ou dans un autre État ou une autre juridiction qui accorde ce droit, pour refuser la vente ou le partage de vos informations personnelles à des tiers pour les utilisations de vos données décrites ci-dessus, y compris la publicité comportementale intercontexte :

• transmettez une demande à l’aide du formulaire NE PAS VENDRE OU PARTAGER MES INFORMATIONS PERSONNELLES accessible ici, en précisant que vous souhaitez refuser les ventes (comme la communication de vos informations à nos partenaires à des fins de correspondance d’audience à l’aide de moyens autres que les cookies ou les technologies de suivi Web référencés à l’alinéa 2) ci-après) ; et 
• cliquez ici pour basculer les options de cookies « Performances et fonctionnement » et « Publicité » sur « Non », puis cliquez sur « Envoyer les préférences ». Cette action désactivera les cookies de performance, de fonctionnement et de publicité et les technologies de suivi Web sur notre site, y compris ceux utilisés à des fins de correspondance d’audience et de publicités personnalisées. La désactivation de ces cookies et technologies de suivi Web peut uniquement s’appliquer au navigateur avec lequel vous cliquez sur le lien ; vos préférences peuvent être réinitialisées si vous changez vos paramètres.

Mandataire habilité : Vous pouvez habiliter un mandataire à transmettre une demande en votre nom, sous réserve de remettre à celui-ci une autorisation écrite signée par vous l’autorisant à faire une demande en votre nom ; en outre, votre mandataire habilité doit être en mesure de faire contrôler son identité par nous.  Si vous êtes résident de la Californie et que vous souhaitez désigner un mandataire aux fins de faire une demande, celui-ci doit s’inscrire en tant que tel auprès du secrétaire d’État de la Californie et transmettre une copie de cet enregistrement avec votre demande de consommateur vérifiée. Veuillez demander à votre mandataire habilité de suivre les instructions précitées pour faire une demande ; veuillez également nous transmettre une déclaration écrite certifiée par un notaire autorisant ledit mandataire à agir en votre nom à l’adresse : Legal Department, 951 Sandisk Drive, Milpitas, Californie 95035 États-Unis. Si votre mandataire habilité dispose d’une procuration, il ne sera peut-être pas nécessaire d’effectuer ces démarches.

Vous pouvez également nous contacter par téléphone au 844-441-9869 (PIN: 892274) pour exercer vos droits applicables, et vous pouvez déposer une plainte auprès de l’autorité de protection des données compétente en ce qui concerne le traitement de vos informations personnelles. Vous pouvez également vous opposer au traitement ultérieur de vos informations personnelles, ou le restreindre, et faire appel de toute décision impliquant l’exercice de vos droits applicables. Nous ne ferons pas de discrimination à votre encontre pour l’exercice de vos droits applicables.

Si vous demandez la suppression de vos données, vous ne pourrez plus accéder à aucun compte Company. Nous n’avons aucune obligation de conserver vos informations ; nous pouvons les supprimer, en tout ou en partie, sans engager notre responsabilité. Cependant, nous pouvons conserver les informations qui vous concernent si nous les jugeons nécessaires à la prévention de fraudes ou d’abus ultérieurs, si la loi l’exige ou encore à des fins légitimes, le cas échéant, telles que l’analyse des informations non personnelles, la récupération de compte, la gestion du fonctionnement ou de la sécurité de nos systèmes, l’audit de nos dossiers ou l’exécution de nos droits et obligations en vertu de nos contrats.

Nos produits et services, y compris nos sites Web et contenus numériques médiatiques, peuvent comporter des liens ou des moyens pour accéder à des sites Web, produits et services tiers. Nous ne sommes pas responsables des pratiques de respect de la vie privée mises en œuvre par ces tiers, ni des informations ou du contenu de leurs produits et services. La présente Déclaration de confidentialité s’applique uniquement aux informations que nous collectons. Nous vous encourageons à lire les politiques de confidentialité de tous les tiers avant de recourir à leurs sites Web, produits ou services.

Il est important de prendre des précautions pour vous protéger contre les accès non autorisés à vos produits Company, à vos identifiants de compte, et à vos ordinateurs et autres appareils. Si vous estimez que la sécurité de votre compte ou de vos informations personnelles a été compromise, veuillez immédiatement nous contacter. Veuillez noter que, malgré nos efforts pour maintenir des mesures de sécurité physiques, électroniques et procédurales raisonnables et appropriées, aucun système de sécurité n’est impénétrable. En cas d’infraction à la sécurité, nous vous informerons rapidement ainsi que les autorités concernées si la loi l’exige.

Nous stockerons vos informations personnelles conformément à la législation applicable en matière de protection des données, conserverons ces informations conformément à notre politique de conservation des données aussi longtemps que nécessaire pour atteindre les finalités décrites dans la présente Déclaration de confidentialité, et supprimerons ces informations conformément à notre politique de suppression, à moins qu’une période de conservation plus longue ne soit requise ou autorisée par la loi. Les informations sensibles seront utilisées pour la transaction spécifique à laquelle elles étaient destinées et ne seront conservées par nous que pendant la durée nécessaire à la réalisation de la transaction ou dans les limites autorisées par l’utilisateur.

Nous ne collectons pas, n’utilisons pas et ne divulguons pas sciemment des informations d’enfants de moins de 16 ans. Si nous apprenons que nous avons collecté les informations personnelles d’un enfant de moins de 16 ans, ou l’âge minimal équivalent en fonction du territoire, par exemple, 13 ans aux États-Unis ou 14 ans en République populaire de Chine (qui exclut, aux fins de la présente Déclaration de confidentialité, la RAS de Hong Kong, la RAS de Macao et la région de Taïwan), nous prendrons des mesures pour supprimer ces informations dès que possible. Veuillez immédiatement nous contacter si vous apprenez qu’un enfant de moins de 16 ans nous a fourni des informations personnelles.

Si vous êtes résident de Californie, âgé de moins de 18 ans, et utilisateur enregistré de nos produits ou services, le droit de la Californie vous autorise à demander et à obtenir la suppression du contenu ou des informations que vous avez publiées publiquement. Pour ce faire, veuillez nous contacter et nous transmettre des renseignements spécifiques sur l’endroit où le contenu ou les informations ont été publiés, en attestant que vous êtes la personne à l’origine de la publication. Ensuite, nous ferons preuve d’une diligence raisonnable en toute bonne foi pour qu’à l’avenir, cette publication ne puisse plus être publique ou pour la rendre anonyme, afin que vous ne puissiez plus être identifié individuellement, dans la mesure exigée par le droit applicable. Veuillez noter que cette demande ne garantit pas la suppression complète ou exhaustive du contenu ou des informations que vous avez publiés, et qu’il existe certains cas où la loi n’exige pas ni ne permet la suppression même lorsqu’elle est demandée.

Lorsque nous communiquons vos informations personnelles à nos partenaires, sociétés affiliées à Company et prestataires de services, vos informations personnelles peuvent être transférées à des pays situés en dehors de l’Espace économique européen ou de la République populaire de Chine et/ou rendues accessibles depuis ceux-ci. Dans de telles circonstances, nous conclurons des clauses contractuelles types telles qu’adoptées par la Commission européenne ou par l’Administration du cyberespace de Chine, le cas échéant, ou nous nous fonderons sur d’autres bases juridiques, et nous appliquerons les mesures obligatoires pour agir dans le respect de la législation applicable (par exemple, la création d’un processus visant à vous divulguer les informations supplémentaires nécessaires lors du transfert de vos informations personnelles hors de la République populaire de Chine). Pour certains de nos services, vos informations personnelles peuvent être transférées à des serveurs situés aux États-Unis ou dans d’autres lieux à l’extérieur du pays où vous résidez, et/ou y être stockées et traitées aux fins de vous fournir les services.

Nous pouvons apporter régulièrement des modifications à la présente Déclaration de confidentialité pour nous adapter à de nouvelles technologies, des pratiques du secteur et des exigences réglementaires, entre autres. Nous estimons que la plupart de ces modifications seront mineures. Toute modification peu importante prend effet immédiatement sur publication de la Déclaration de confidentialité mise à jour ; nous indiquerons la date de la dernière modification en haut du présent document. Toutefois, il peut arriver que des modifications apportées à la présente Déclaration de confidentialité soient plus importantes. Dans ce cas, nous placerons à votre attention et bien en évidence une notification relative à ces modifications ou nous vous enverrons directement une notification. 

La poursuite de l’utilisation de nos produits et services après la date d’effet de la Déclaration de confidentialité vaut acceptation de la Déclaration de confidentialité révisée. Si vous n’acceptez pas la Déclaration de confidentialité révisée, veuillez ne pas utiliser nos produits ou services et nous contacter pour clore le compte que vous avez éventuellement créé.

Si vous avez des questions concernant la présente Déclaration de confidentialité ou sa mise en œuvre, vous pouvez envoyer un courrier électronique au délégué à la protection des données à l’adresse DPO@sandisk.com. Vous pouvez également nous joindre par le biais de notre formulaire Web ou nous écrire à l’adresse la plus proche de chez vous par courrier adressé à : À L’ATTENTION DE : Service juridique - Question relative à la Déclaration de confidentialité.

Pour les clients de l’Union européenne, nous avons enregistré notre DPD auprès de la Data Protection Commission d’Irlande. Si vous avez des questions ou des inquiétudes concernant nos pratiques en matière de respect de la vie privée, nous vous invitons à contacter notre DPD à l’adresse électronique précitée.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you. To the extent we process de-identified information, we will maintain and use the information in de-identified form.

Here is a description of the types of personal information we may collect and how we may process it:

What Personal Information We Collect

Depending on the products and services you use, we may collect and have collected, including within the preceding 12 months, different kinds of personal information from or about you:

• Personal identifiers, including name, username, email address, phone number, and mailing or shipping address.
• Commercial information, including the products or services purchased or considered by customers, information about your SanDisk account and authentication information; billing address, shipping address, and contact details.
• Financial information, including certain limited credit or debit card information.
• Personal characteristics, such as demographic data, including your location, age, gender, income level, employment, or level of education.
• General location information. Where available, our services may use GPS, the location inferred from your IP address, and other technologies to determine the approximate, location of the computers, phones, or other devices on which you install or access our products or services.
• Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our products and services, such as the type of device you use, your device configuration, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, browsing information, session summary information, CPU and other usage statistics, API calls, service crash information, network status, storage utilization, search terms, and file attributes (including attributes for photos, videos, music, and documents).
• Professional or employment-related information, such as position, role, occupation, previous work experience or current or former employer.
• Inferences drawn from personal information, such as information about your interests or purchase preferences.
• Sensitive Personal Information, specifically credit or debit card information that is used by our payment processor to help fulfill a transaction you have requested.

In addition to the above categories of personal information, you may choose to provide us with additional personal information, such as when you create an account, fill in a form, provide us a photograph, or submit an application for employment.

How We Collect Personal Information

• Information you provide: We may collect the personal information you provide when you use our products and services, create an account, contact us, participate in a survey, participate in community discussions or chat rooms, apply for employment, sign-up to receive our marketing communications, interact with us at in-person events, or otherwise interact with us. 
• Information about payments: If you make a purchase, we may collect personal information in connection with the purchase. 
• Information about use of our products and services: When you use our products and services, including our websites and web, mobile, and desktop applications, or view our emails or advertisements, we may collect information from or about the computers,  phones, or other devices on which you install or access our products or services. We may gather some of this information automatically. Please read our Cookie Statement for more information on how we use web tracking technologies and the choices you have.
• Information from third parties: We collect information from third parties, including business partners, marketing agencies, and service providers. This may include your contact information from marketing partners when we engage in joint marketing or co-branding activities, your IP address or location information from service providers to offer certain products and services relevant to your location, and data from your social networks to authenticate your product use with us, or that you grant permission to our products or services to access.
• Information from public sources: We may collect information from government sources and records and other publicly available information.

How We Use Your Personal Information

We may use personal information for the purposes described in this Privacy Statement. Generally speaking, we use personal information to provide, improve, develop, and personalize your experience with our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users. We may do so with your consent, for compliance with a legal obligation, for the performance of a contract with you, or for our legitimate interests, to the extent permitted by applicable laws. SanDisk Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:

• Providing, improving, developing, and personalizing your experience with our products and services: We may use personal information to help us provide, improve, develop, and personalize your experience with our products and services. This includes using personal information for purposes such as data analysis, research, and audits. We may perform such processing based on your consent or our legitimate interest in offering you products and services and for business continuity. If you enter a sweepstakes, contest, or other promotion, we may use the personal information you provide to administer those programs. Some of these activities have additional rules, which may contain further information about how we use personal information, so we encourage you to read those rules carefully before participating.
• Communicating with you: We may use personal information to respond to your inquiries and communicate with you about important notices, including notices related to your account, products, services, transactions, or changes to our policies and terms. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in interacting with you to provide you with our products and services. We may also use personal information to communicate with you about your employment requests. Our privacy notices to applicants and employees provide additional information concerning the personal information we collect and how we use personal information in connection with your employment requests. Subject to your prior express consent, we may use personal information to send you marketing communications in relation to SanDisk’s own products and services, and we may share your personal information with third-party partners who may send you marketing communications in relation to their products and services. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out. We may use your information to process and respond to your requests when you contact us.
• Offering and measuring targeted advertisements and services: We may use personal information to provide you with personalized advertisements, including on third-party websites and applications, and to determine the effectiveness of our promotional campaigns. Please read our Cookie Statement for more information on how we use web tracking technologies for personalized advertisements and the choices you have. We may also use audience matching to reach people (or people similar to people) who used our products and services or are identified in one or more of our databases. This is done by us providing a list of hashed email addresses to an ad partner or incorporating a pixel from an ad partner into our own products and services, and the ad partner matching common factors between our data and their data.
• Promoting safety and security: We may use personal information to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is undertaken because it is necessary for the performance of a contract with you or is based on our legitimate interest in helping to ensure the safety of our products and services.
• Payment processing: Our payment processor may use your personal information, including commercial, and financial information, specifically for processing payments and transaction fees related to a product or service you have requested.

For any of the uses of your data described above that require your prior express consent under applicable law, note that you may withdraw your consent by contacting us via our webform.

As a global company, SanDisk Technologies, Inc. has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes, and determines how to process your personal information as a data controller to help provide you with the products and services you request.

We use and have used within the preceding 12 months cookies and similar technologies to provide, protect, and improve our products and services, such as by personalizing content, understanding user behavior, and providing a safer  experience. We also use these technologies to provide you with personalized advertisements, including on third-party  websites and applications, and to determine the effectiveness of our promotional campaigns.

Please read our Cookie Statement to learn more about how we use cookies and web tracking technologies and the choices you have.

We make certain personal information available to the strategic partners and other recipients described below for the purposes described in this Privacy Statement.

Service Providers and Other Companies

We may share personal information with service providers and other companies that provide services on our behalf, such as website hosting; email services; marketing; advertising; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; cloud storage services; and other services that assist in providing or selling our products and services. We also may share your personal information with advertisers, data analytics providers, and social media networks, which assist us with making product recommendations, marketing messaging, and sending you relevant content. These companies are obligated to protect your information and may be located wherever we operate.

Corporate Affiliates and Corporate Business Transactions

We may share personal information with all SanDisk Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.

Legal Compliance and Security

It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.  We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to  protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.

• Right to know the personal information that we collect, including the sources from which the personal information is collected, our purpose(s) for collection, and the categories of recipients with whom we have shared your personal information, including any sharing with third parties for their own marketing purposes
• Right to access, in a structured and standard format, the personal information that we process about you
• Right to delete your personal information
• Right to opt-out of the sale or share of your personal information to third parties
• Right to opt-out of targeted advertising, including the sharing of your personal information to third parties for cross-context behavioral advertising
• Right to opt-out of certain automated decision making
• Right to correct or rectify any inaccurate information concerning you

You may fill out our webform to exercise your applicable rights. We will respond to your request in the timeframe required by applicable law (and in general within 30 days).  

As required by law, and to protect the privacy and security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to deny a request.

If you are a resident of California or another state or jurisdiction that provides this right, to opt-out of the sale or the sharing of your personal information by us to third parties for the uses of your data described above, including cross-context behavioral advertising:

• submit a request through the Do Not Sell or Share My Personal Information form available here, specifying you wish to opt-out of sales (such as sharing your information with our partners for audience matching purposes via means other than cookies or web tracking technologies referenced in (2) below); and 
• click Cookie Preferences in the footer below and toggle the options to “No” for both “Performance and Functionality” and “Advertising” Cookie options, and click “Submit Preferences”. This will deactivate performance, functionality, and advertising cookies and web tracking technologies on our site, including those used for audience matching purposes and personalized advertisements. Deactivating these cookies and web tracking technologies may only apply to the specific browser from which you click the link, and your preferences may reset if you change your settings.

Authorized Agent: You may authorize an agent to submit a request on your behalf, so long as you provide the authorized agent written permission signed by you to make a request on your behalf, and your authorized agent additionally is able to verify their identity with us.  If you are a resident of California, and would like to designate an agent for purposes of making a request, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request. Please have your authorized agent follow the instructions above to make a request, and additionally mail your written declaration authorizing the agent to act on your behalf, certified by a notary public, to: Legal Department, 951 Sandisk Drive, Milpitas, California 95035 USA. If your authorized agent has power of attorney, it may not be necessary to perform these steps.

You may also contact us via phone at 844-441-9869 (PIN: 892274) to exercise your applicable rights, and you may lodge a complaint with the competent data protection authority regarding the processing of your personal information. You also may object to, or restrict, the further processing of your personal information, and appeal any decisions involving the exercise of your applicable rights. We will not discriminate against you for the exercise of your applicable rights.

If you request to delete your data, this would remove your ability to access any SanDisk accounts. We have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, where applicable, such as analysis of non personal information, account recovery, maintaining the functionality or security of our systems, auditing our records, or  enforcing our rights and obligations under our agreements.

Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.

It is important that you take precautions to protect against unauthorized access to your SanDisk products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts to maintain reasonable and appropriate physical, electronic, and procedural security measures, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.

We will store your personal information in accordance with applicable data protection law, retain such information in accordance with our data retention policy for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, and delete such information in accordance with our deletion policy unless a longer retention period is required or permitted by law, Sensitive Information shall be used for the specific transaction in which it was intended and only retained by us for the period of time needed to complete the transaction or as otherwise permitted by the user.

We do not knowingly collect, use, or disclose information from children under the age of 16. If we learn that we have  collected the personal information of a child under the age of 16—or the equivalent minimum age depending on the  jurisdiction, such as 13 in the United States or 14 in the People’s Republic of China (which, for the purposes of this Privacy  Statement, excludes the Hong Kong SAR, Macao SAR and the Taiwan region)—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under the age of 16 has provided us with personal information.

If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a  request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

When we share your personal information with our partners, SanDisk Corporation-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area or the People’s Republic of China. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission or the Cyberspace Administration of China, as applicable, or rely on alternative legal bases, and implement mandatory measures to act in accordance with applicable laws (for example, creating a process to disclose additional required information to you when transferring your personal information out of the People’s Republic of China). For some of our services, your personal information may be transferred to and/or stored and processed on servers located in the United States, or in other locations outside of the country where you reside for the  purpose of providing the services to you.

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement, and we will indicate the Last Modified date at the top of this document. There may, however, be cases where changes to this Privacy Statement may be more significant. In such cases, we will provide you with a prominent notice of such changes on our website or will directly send you a notification. 

Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products and services and Contact Us to close any account you may have created.