AWS Privacy (Chromeless) (original) (raw)

These additional disclosures are required by certain state privacy laws to the extent they apply to your use of AWS Offerings, and serve as a Notice at Collection under the California Privacy Rights Act. Information about our customers is an important part of our business and we are not in the business of selling our customers’ personal information to others.

Categories of personal information collected. The personal information that we may collect, or may have collected from consumers in the preceding twelve months, falls into the following categories established by the California Privacy Rights Act and other state privacy laws, depending on how you engage with the AWS Offerings:

• identifiers, such as your name, alias, address, phone numbers, or IP address, your AWS account log-in information, or a government-issued identifier (such as a state-issued ID number, which may be required to verify your identity when completing certain AWS certification courses, or an ID you provide for identity verification, which in some cases may reflect citizenship or immigration status);
• personal information as described in subdivision (e) of Section 1798.80 of the California Civil Code, such as a credit card number or other payment information;
• characteristics of protected classifications under California or US federal law, such as age, race, or gender or gender identity, for example if we conduct user surveys or analysis;
• commercial information, such as purchase activity;
• internet or other electronic network activity information, including content interaction information, such as content downloads, streams, and playback details;
• information used to prevent and detect fraud or other unauthorized activity, including informing customers if such activity were to affect them;
• biometric information, such as your voice or appearance, for example if you choose to participate in a demonstration of a speech or image recognition service;
• geolocation data, which may in some cases constitute precise geolocation information, such as the location of your device or computer, for example if you enable location services to enhance your experience through event applications we offer;
• audio, visual, electronic or other similar information, including when you communicate with us by phone or otherwise;
• professional or employment-related information, for example data you may provide about your business;
• inference data, such as information about your preferences; and
• education information, such as information about enrollment status, fields of study, or degrees, honors, and awards received.

We collect this information from you, automatically through your interaction with the AWS Offerings, or from third parties. Learn more about the personal information we collect. We collect this information for the business and commercial purposes described in the “How We Use Personal Information” section above.

Categories of personal information disclosed for a business purpose. The personal information that we may have disclosed about consumers for a business purpose in the preceding twelve months falls into the following categories established by the California Privacy Rights Act and other state privacy laws, depending on how you engage with the AWS Offerings:

• Identifiers, such as your name, address, or phone numbers, for example if we use a third-party carrier to deliver AWS hardware, or government identifier or certain types of ID you provide for identity verification, which may in some cases reflect your citizenship or immigration status, for example if we use a third-party service to verify your identity;
• personal information as described in subdivision (e) of Section 1798.80 of the California Civil Code, such as a credit card number or other payment information, for example if we use a third-party payment processor;
• information that may reveal your age, gender or gender identity, race, or other protected classifications under California or US federal law, for example if we conduct user surveys or analyses using a third-party service provider;
• commercial information, such as the details of a product or service you purchased if a third-party service provider assists in providing that product or service to you;
• internet or other electronic network activity information, such as if we use a third-party service provider to help us gather reports for analyzing the health of our devices and services;
• information relating to our prevention and detection of unauthorized activity, such as attempted fraud;
• biometric information, for example if you choose to participate in a demonstration of certain AWS services facilitated by a third-party service provider;
• geolocation data, which may constitute precise geolocation data, for example if we enable transportation services from a third party in connection with an AWS event;
• audio, visual, electronic or other similar information, for example if a third-party service provider reviews recordings of customer support phone calls for quality assurance purposes;
• professional or employment-related information, for example if we provide information to a third-party service provider for verification or registration as part of the AWS Offerings;
• education information, for example if we facilitate employment or internship recruitment activities for participants in the AWS Educate program; and
• inference data, for example if we use a third-party service provider to store information about your preferences.

Learn more about the personal information we may disclose for a business purpose.

Advertising. To help ensure you receive more useful and relevant ads on other sites and services and to measure their effectiveness, AWS shares limited personal information with our advertising partners. We don’t share your name or other information that directly identifies you when we do this. Any personal information AWS may share for the purpose of cross-context behavioral advertising, as those terms are defined by the California Privacy Rights Act, or processes for the purposes of targeted advertising as that term is defined in other state privacy laws, above falls into the following categories:

• identifiers such as a cookie, or a hashed value derived from your contact information, such as your email address;
• internet or other electronic network activity information, such as web browser information, pages viewed, or links clicked, via cookies and similar technologies.
  AWS does not knowingly share personal information about consumers who are under the age of 18.

Your Data Rights. You may have certain data rights under state privacy laws, including to request information about the collection of your personal information by us, to access your personal information in a portable format, and to correct or delete your personal information. If you wish to do any of these things and you are an AWS customer, please contact us through your AWS Account. If you are not an AWS customer, or you are an authorized agent under applicable state law, please fill out a request form or send us a letter at Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109-5210, ATTN: AWS Legal. Additionally, you may have the right to opt out of the processing of your personal data for cross-context behavioral advertising (also referred to as targeted advertising under certain state privacy laws). To do so, please click on the Your Privacy Choices link in the footer of the AWS website that you’re visiting and follow the instructions presented. You can also opt out of such advertising based on cookies or similar technologies by visiting our websites with a legally recognized opt-out preference signal, such as the Global Privacy Control, enabled.

You may have the right to appeal the denial of any of these rights by submitting a form that will be provided to you if we deny a data request. Depending on your data choices, certain services may be limited or unavailable.

To ensure the security of your AWS account, we will generally ask you to verify your request using the contact information you have already provided. If you are an authorized agent making a request on behalf of a consumer pursuant to applicable state law, we may ask you to provide information verifying you have proper authority to make the request on behalf of the consumer or we may ask the consumer to verify their identity with us directly.

De-identified Data Disclosure. AWS may use de-identified data in some instances. AWS either maintains such data without attempting to re-identify it or treats such data as personal data subject to applicable law.

California Privacy Rights Act Sensitive Personal Information Disclosure. The categories of data that we collect and disclose for a business purpose include “sensitive personal information” as defined under the California Privacy Rights Act. We do not use or disclose sensitive personal information for any purpose not expressly permitted by the California Privacy Rights Act.

California Privacy Rights Act and Minnesota Consumer Data Privacy Act. To enable your continued use of AWS Services, we keep your personal information for as long as it is required in order to fulfill the relevant purposes described in this AWS Privacy Notice, as permitted or as may be required by law, or as otherwise communicated to you.

California Privacy Rights Act Non-Discrimination Statement. We will not discriminate against any consumer for exercising their rights under the California Privacy Rights Act.

Colorado Privacy Act and Oregon Privacy Act Profiling Disclosure. We do not engage in profiling of consumers in furtherance of automated decisions that produce legal or similarly significant effects, as those terms are defined under the Colorado Privacy Act or the Oregon Privacy Act.

New Jersey Notice of Material Change Disclosure. If we make material changes to our Privacy Notice, we will provide affected customers with advance notice of the change, such as by email, on our website or via their account.