| 231 | 232 | - Deletion. In some limited circumstances, you have the right to have personal data that we hold about you erased (the "right to be forgotten"). This right is not generally available where we still have a valid legal reason to keep the data (for example, because we are obliged to do so by law). |
| 232 | 233 | - Objection. You have the right to object to our processing of your personal data where we rely on "legitimate interests" as our legal basis for processing, but we may be able to continue processing if our interest outweighs your objection. |
| 233 | 234 | - Withdrawing consent. If we are processing your personal data on the basis of your consent, you have the right to withdraw that consent at any time, in which case we will stop that processing unless we have another legal basis on which to continue. |
| 234 | 235 | |
| 235 | 236 | ### 14.3 How to exercise your rights |
| 236 | 237 | |
| 237 | | To exercise your rights, email data-privacy@buzzfeed.com. In order to protect your privacy and that of others, we will ask you to prove your identity before we take any steps in response to a request you have made. If a third party is making a request on your behalf, we will ask them to prove that they have your permission to act for you. |
| 238 | To exercise your rights, email [data-privacy@buzzfeed.com](mailto:data-privacy@buzzfeed.com). In order to protect your privacy and that of others, we will ask you to prove your identity before we take any steps in response to a request you have made. If a third party is making a request on your behalf, we will ask them to prove that they have your permission to act for you. |
| 238 | 239 | |
| 239 | 240 | We may contact you to ask you for further information to help you exercise your legal rights or to speed up our response. We will try to respond to requests within one month and we will let you know if we need to take longer, for example because your request is complicated. We may have an overriding lawful basis for processing your personal data, or certain exemptions may apply. If we refuse your request, we will explain why. |
| 240 | 241 | |
| 241 | 242 | ### 14.4 Complaints |
| 242 | 243 | |
| 243 | 244 | You have the right to complain about data privacy matters to the Information Commissioner's Office ([www.ico.org.uk](https://www.buzzfeed.com/about/www.ico.org.uk)), or the relevant data protection regulator in your country of residence. You can contact the ICO on 0303 123 1113. We invite you to raise your concerns with us first, so that we can try to resolve them. |
| 244 | 245 | |
| 245 | 246 | ## 15\. Privacy Information for California Residents |
| 246 | 247 | |
| 247 | 248 | ### 15.1 California Privacy Rights |
| 248 | 249 | |
| 249 | | This section provides you with our practices regarding the collection, use, and disclosure of your personal data. It also explains your rights regarding your personal data that we collect (as set forth in the California Consumer Privacy Protection Act or the "CCPA"). The following chart summarizes our personal data collection, use, and sharing practices in the preceding 12 months since we last updated this Policy on January 1, 2020. |
| 250 | This section provides you with our practices regarding the collection, use, and disclosure of your personal data in the 12 months prior to our last update to this Policy (see the date at the top). It also explains your rights regarding your personal data that we collect (as set forth in the California Consumer Privacy Protection Act or the "CCPA"). |
| 250 | 251 | |
| 251 | | | Category of Information | Source of Information | Purposes of Collection | Vendors and Other Entities with Whom We Share this Information | Disclosed or Sold for a Business or Commercial Purpose | |
| 252 | | | --- | --- | --- | --- | --- | |
| 253 | | | A. Identifiers, e.g., your name, address, email address, and username | You | To process your requests for products/services and/or information, to communicate with you, to improve our Services, to enforce our User Agreement, to register your Account, for the administration and protection of our business, and to comply with applicable law, regulations, and legal and regulatory processes. If you opt-in to do so, we may use your name and email address for our marketing purposes and to help our business partners with their marketing. | Service providers who assist in providing services on our behalf If you opt-in to do so, our business partners. | Yes | |
| 254 | | | B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), e.g., your name and address | You | To process your requests for products/services and/or information, to communicate with you, to improve our Services, to enforce our User Agreement, to register your Account, for the administration and protection of our business, and to comply with applicable law, regulations, and legal and regulatory processes. If you opt-in to do so, we may use your name and email address for our marketing purposes and to help our business partners with their marketing. | Service providers who assist in providing services on our behalf If you opt-in to do so, our business partners. | Yes | |
| 255 | | | C. Protected Classification characteristics under California law, e.g., your racial or ethnic origin, religion, or sexual orientation | You | If you are in the U.S. ONLY and you opt-in to do so, to improve our Services, better understand our customer base, meet our diversity and inclusion goals; and to help our business partners do the same. | Service providers who assist in providing services on our behalf. If you are in the U.S. ONLY and you opt-in to do so, our business partners. | Yes | |
| 256 | | | D. Commercial Information, records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies | You and your device | To fulfil your requests for products or services, to improve our Services | Service providers who assist in providing services on our behalf. Our business partners. | Yes | |
| 257 | | | E. Internet or Electronic Network Activity Information, e.g., browsing history, search history, information on a consumer's interaction with a website, application, or advertisement, or questions and other messages you address to us directly through online forms or by email | You and your device | To process your requests for products/services and/or information, to communicate with you, to improve our Services, to enforce our Terms of Service, to register your Account, for the administration and protection of our business, and to comply with applicable law, regulations, and legal and regulatory processes. | Service providers who assist in providing services on our behalf. Our business partners. | Yes | |
| 258 | | | F. Other Identifiers and Internet Activity Information, e.g., IP address; similar information | You and your device | To process your requests for products/services and/or information, to communicate with you, to improve our Services, to enforce our Terms of Service, to register your Account, for the administration and protection of our business, and to comply with applicable law, regulations, and legal and regulatory processes. | Service providers who assist in providing services on our behalf. Our business partners. | Yes | |
| 259 | | | G. Inferences about personal preferences and attributes drawn from profiling | You and your device | To improve our Services, to help us better understand our customer base and to help our business partners improve their offerings. | Service providers who assist in providing services on our behalf. Our business partners. | Yes | |
| 252 | **Categories of Information We Collect:** |
| 260 | 253 | |
| 261 | | If you are a California resident, you have the right to know what personal data we collect, disclose, and "sell" about you (as that term is used in the CCPA). Additionally, you have the right to access, delete and opt out from the "sale" of your personal data. Specifically, California residents may request that we: |
| 254 | - **Your contact details** (e.g. your name, address, email address, telephone number and username). |
| 255 | - **Payment information** (e.g. bank account number, credit card number, debit card number, or any other financial information). |
| 256 | - **Demographic information** (e.g. race, ethnic origin, religion, or sexual orientation). |
| 257 | - **Purchase history & preferences** (e.g. records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies). |
| 258 | - **Internet activity information** (e.g., browsing history, search history, information on a consumer's interaction with a website, application, or advertisement, or questions and other messages you address to us directly through online forms or by email). |
| 259 | - **Inferences** (e.g. inferences about your about personal preferences and attributes drawn from profiling). |
| 260 | - **Online identifiers** (e.g. IP address, ADID/IDFA, cookie IDs, internal identification numbers). |
| 261 | - **Location data** (e.g. your city, state or country information). |
| 262 | - **Application information** (for job applicants) (e.g. your passport number, driver's license or other state identification card number, education, and employment information) |
| 262 | 263 | |
| 263 | | - Inform you about the categories of personal data we collect or disclose about you; the categories of sources of such data; the business or commercial purpose for collecting your personal data; and the categories of third parties with whom we share/disclose personal data. Such information is also set forth above in this Privacy Policy. |
| 264 | **Categories of Sources:** |
| 264 | 265 | |
| 265 | | - Inform you about the specific pieces of personal data we collected about you (also called a data portability request) |
| 266 | - You |
| 267 | - Your device |
| 268 | - Data partners. |
| 266 | 269 | |
| 267 | | - Provide you access to and/or a copy of certain personal data we hold about you. |
| 270 | **Purpose of Collection** |
| 271 | |
| 272 | - To communicate with you, including to process your requests for products/services and/or information. |
| 273 | - To register your Account. |
| 274 | - To improve our Service, including to better understand our customer base, meet our diversity and inclusion goals; and to help our business partners do the same. |
| 275 | - To enforce our User Agreement, and for the administration and protection of our business. |
| 276 | - To comply with applicable law, regulations, and legal and regulatory processes. |
| 277 | |
| 278 | If you opt-in to do so, we may use your name and email address for our marketing purposes and to help our business partners with their marketing. |
| 279 | |
| 280 | **Disclosure or Sale of Personal Information** |
| 281 | |
| 282 | | Categories of Information Disclosed or Sold: | Categories of Vendors or Other Entities We Share Information With: | |
| 283 | | --- | --- | |
| 284 | | Your contact details | Our email service vendors, sweepstakes/promotions partners, social network partners, other vendors who assist in providing services on our behalf, and our business partners. | |
| 285 | | Payment information | Our payment processing vendors. | |
| 286 | | Demographic information | Our research and survey vendors, and our advertisers and other business partners. | |
| 287 | | Purchase history & preferences | Our affiliate partners, and other vendors who assist in providing services on our behalf. | |
| 288 | | Internet activity information, inferences and online identifiers | Advertising networks, internet service providers, data analytics vendors, operating systems and platforms, and social networks. | |
| 289 | | Location data | Internet service providers, data analytics vendors, operating systems, and platforms. | |
| 290 | |
| 291 | We may share your personal data with government entities when required to do by law. |
| 292 | |
| 293 | If you are a California resident, you have the right to know what personal data we collect, disclose, and "sell" about you (as that term is used in the CCPA). Additionally, you have the right to access, delete and opt out from the "sale" of your personal data. Specifically, California residents may request that we: |
| 294 | |
| 295 | - Inform you about the categories of personal data we collect or disclose about you; the categories of sources of such data; the business or commercial purpose for collecting your personal data; and the categories of third parties with whom we share/disclose personal data. Such information is also set forth above in this Privacy Policy. |
| 296 | - Provide you access to and/or a copy of the specific pieces of personal data we collected about you (also called a data portability request) |
| 268 | 297 | - Delete certain personal data we have about you. |
| 269 | 298 | |
| 270 | 299 | The CCPA further provides you with the right to not be discriminated against (as provided for in applicable law) for exercising your rights. |
| 271 | 300 | |
| 272 | 301 | **Note for non-California residents:** We will seek to honor requests to exercise the above rights made by non-California residents to the extent required by applicable law. |
| 273 | 302 | |
| 274 | 303 | Please note that certain data may be exempt from such access, data portability, and deletion requests under California law. For example, we need to retain certain data in order to provide the Services to you. |
| 275 | 304 | |
| 276 | 305 | Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal data. You may also make a verifiable consumer request on behalf of your minor child. |
| 277 | 306 | |
| 278 | | You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must: |
| 307 | You may only make a verifiable consumer request for access or deletion twice within a 12-month period. |
| 279 | 308 | |
| 309 | If you have a registered account with us, you can submit your access or deletion request by signing into your account. You can find instructions on how to proceed at our [consent preferences center](https://www.buzzfeed.com/consent-preferences) |
| 310 | |
| 311 | If you do not have a registered account, please visit our [consent preferences center](https://www.buzzfeed.com/consent-preferences) or contact us at [data-privacy@buzzfeed.com](mailto:data-privacy@buzzfeed.com), and we will provide you with instructions on how to submit your request. |
| 312 | |
| 313 | Please note that the verifiable consumer request must: |
| 314 | |
| 280 | 315 | - Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal data or an authorized representative. |
| 281 | 316 | - Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. |
| 282 | 317 | |
| 283 | 318 | We cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data relates to you. Making a verifiable consumer request does not require you to create an Account with us. We will only use personal data provided in a verifiable consumer request to verify the requestor's identity or authority to make the request. |
| 284 | 319 | |
| 285 | 320 | ### 15.2 California Notice of Right to Opt-Out of "Sale" |
| 286 | 321 | |
| 287 | 322 | California residents may opt out of the "sale" of their personal data. California law broadly defines "sale" in a way that may include allowing third parties to receive certain data, such as cookies, IP address, and/or browsing behavior, to deliver targeted advertising on our Services or other sites and apps. Advertising, including targeted advertising, enables us to provide you certain content for free and allows us to provide you content relevant to you. |
| 288 | 323 | |
| 289 | 324 | Depending on what Services you use, we may sell (as defined by California law) the following categories of data for such advertising purposes: |
| 290 | 325 | |
| 291 | | - A. Identifiers |
| 292 | | - B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) |
| 293 | | - D. Commercial information |
| 294 | | - E. Internet or electronic network activity information |
| 295 | | - F. Other identifiers and internet activity information |
| 296 | | - G. Inferences about personal preferences and attributes drawn from profiling |
| 326 | - Online Identifiers and internet activity information |
| 327 | - Contact details |
| 328 | - Purchase history & preferences |
| 329 | - Demographic information |
| 330 | - Inferences about personal preferences and attributes drawn from profiling |
| 297 | 331 | |
| 298 | | If you would like to opt out of our use of your personal data for such purposes, you may do as outlined on the following page: ["Do Not Sell My Personal Information"](https://www.buzzfeed.com/) or by contacting us at [data-privacy@buzzfeed.com](mailto:data-privacy@buzzfeed.com). This will cause data to cease to be added to any cookies or other tracking technologies that have been set on our Services or block them entirely. Please note that you will need to opt out again if you visit one of our Services from a different device or browser of if you clear your cookies. Please note that we do not knowingly sell the personal data of minors under 16 years of age without legally-required affirmative authorization. |
| 332 | If you would like to opt out of our use of your personal data for such purposes, you may do as outlined on the following page: ["Do Not Sell My Personal Information"](https://www.buzzfeed.com/) or by contacting us at [data-privacy@buzzfeed.com](mailto:data-privacy@buzzfeed.com). This will cause data to cease to be added to any cookies or other tracking technologies that have been set on our Services or block them entirely. Please note that you will need to opt out again if you visit one of our Services from a different device or browser or if you clear your cookies. Please note that we do not knowingly sell the personal data of minors under 16 years of age without legally-required affirmative authorization. |
| 299 | 333 | |
| 300 | 334 | ### 15.3 California Shine the Light Disclosure |
| 301 | 335 | |
| 302 | 336 | Under California Civil Code sections 1798.83- 1798.84, California residents are entitled to ask for a notice identifying the categories of personal customer data which we share with our affiliates and/or third parties for their own direct marketing purposes, and providing contact information for such affiliates and/or third parties. If you are a California resident and would like a copy of this notice, please submit a written request to the following address: 111 E. 18th Street, New York, NY 10003, Attn: Office of the General Counsel. |
| 303 | 337 | |
| 304 | 338 | ## 16\. BuzzFeed legal entities |
| 305 | 339 | |
| 306 | 340 | - BuzzFeed, Inc. |
| 307 | 341 | - BuzzFeed Canada, Inc |
| 308 | 342 | - BuzzFeed UK Limited |
| 309 | | - BuzzFeed France SARL |
| 310 | 343 | - BuzzFeed GmbH (Germany) |
| 311 | | - BuzzFeed Spain, S.L. |
| 312 | 344 | - BuzzFeed India Private Limited |
| 313 | 345 | - BuzzFeed PTY, Ltd (Australia) |
| 314 | 346 | - BuzzFeed Japan Corporation |
| 315 | 347 | - BuzzFeed do Brasil Internet Ltda |
| 316 | 348 | - Entertainment Contents Online Mexico, S.A. de C.V. |
| 317 | 349 | - BuzzFeed Motion Pictures Inc. |
| 318 | 350 | - Product Labs, Inc. |
| 351 | - Torando Labs, Inc. |
| 352 | - BF Acquisition Holding Corp. |
| 353 | - BuzzFeed FC, Inc. |
| 354 | - BuzzFeed Holdings, LLC |
| 355 | - Lexland Studios, Inc (formerly known as BFMP Video, Inc.) |