6. Your Privacy Choices And Rights; Submitting Requests Under Applicable Local Laws

You may have certain rights regarding our processing of your personal information under applicable local law, including if you are a consumer in California, Colorado, Connecticut, Utah, or Virginia, or a data subject in the European Economic Area (EEA), United Kingdom (UK), and Switzerland. If our processing of your personal information is governed by such laws, this section provides you with additional information regarding your rights and our processing of your personal information under applicable local law.

Our processing of your personal information

 As may be required under applicable local law, below is a chart that describes our business and commercial purposes for processing your personal information, as well as the categories of third parties to whom we may disclose, “sell,” or “share” for cross-contextual behavioral advertising (as those terms are defined under applicable law) the categories of personal information described above for our business and commercial purposes.

To opt-out of our “sale” or “sharing” of your personal information under applicable local law, please see our section below on Your Privacy Choices and Rights; Submitting Requests for additional details.

Retention

Your personal information will be held for only so long as it is necessary for the purpose for which it was originally collected, and in accordance with applicable local law. We will retain your personal information for the period necessary to fulfill the purposes outlined in this Policy. When assessing retention periods, we first examine whether it is necessary to retain the personal information collected and, if retention is required, work to retain the personal information for the shortest possible period permissible under applicable law.

Your Privacy Choices and Rights; Submitting Requests Under Applicable Local Laws

Depending on the jurisdiction in which you live, including if you are a consumer in California, Colorado, Connecticut, Utah, or Virginia, or a data subject in the EEA, UK, or Switzerland, you may have the following rights under applicable local law:

• request information about our processing of your personal information (right to know);
• request a copy of your personal information (right to access)
• rectify, correct, or update the personal information we hold about you (collectively right to correct);
• request deletion of your personal information;
• opt-out of “sales” of personal information or “sharing” of personal information for cross- contextual behavioral advertising purposes (as these terms are defined under applicable law);
• opt-out of targeted advertising;
• restrict or limit our use of your personal information or your sensitive personal information (right to restrict);
• object to our use of your personal information;
• where you have provided consent, withdraw such consent to our processing of your personal information at any time;
• ask that we transfer the personal information we maintain about you to another organization, or to you, in certain circumstances (right to portability);
• not be unlawfully discriminated against for exercising your rights;
• lodge a complaint with your local data protection authority.

These rights may be limited or denied in some circumstances. For example, we may retain your personal information where required or permitted by applicable law.

We may “sell” or “share” for cross-contextual behavioral advertising your personal information (as these terms are defined under applicable local law). We do not have actual knowledge of selling or sharing the personal information of consumers that are at least 13 and less than 16 years of age. To the extent we have actual knowledge that a consumer is at least 13 and less than 16 years of age, we will request affirmative authorization from the individual before selling or sharing the personal information, to the extent required under applicable local law.

We use and disclose certain of your sensitive personal information for OBA and cross-contextual behavioral advertising. To learn more about your rights to limit our use and disclosure of sensitive personal information under applicable local law, please see the section below on Submitting Requests.

Submitting Requests

To exercise your rights under applicable local law or if you are an authorized agent or parent or guardian seeking to exercise rights on behalf of a minor in accordance with applicable local law (specifically, including California, Colorado, Connecticut, Utah, and Virginia) please follow the instructions provided below.

• To exercise your right to opt-out of our “sale” or “sharing” of your personal information, to opt out of the use of your personal information for targeted advertising purposes or to limit our use of your sensitive personal information (collectively "Opt-Out"), as may be available to you under applicable local law please see the below.
  • To Opt Out of such uses through online sales and shares on or in connection with the Services, go to the Your Privacy Choices button/link which can generally be found in the Service’s footer (if a website) or settings/about menu (if an application). You will need to flip a toggle or take other action, such as submitting a form, as described in the Your Privacy Choices webpage. Toggle settings are generally browser-, Service-, and device-specific and may reset if cookies are cleared. If you have any questions or need assistance exercising your rights, please contact our Privacy Policy Coordinator by email to [email protected] or as described at the end of this document.
    • You can also get to the Your Privacy Choices link to Opt Out of online sales and shares on or in connection with Condenast.com by clicking here or by going to the Your Privacy Choices link at the footer of this page. You will need to flip a toggle or take other action, such as submitting a form, as described in the instructions on the Your Privacy Choices webpage. Toggle settings are generally browser-, Service-, and device-specific and may reset if cookies are cleared. NOTE: If you accessed this Privacy Policy from a Service other than condenast.com (such as, for example, vogue.com or The New Yorker application), you must first return to that website, app or Service and follow the instructions found in that Service’s “Your Privacy Choices” link to make online Opt Out choices.
  • You may also Opt-Out of such uses through privacy preference signals recognized under applicable local law, such as the Global Privacy Control (GPC), but please note that this signal will be linked to your browser only. For more information on the GPC and how to use a browser or browser extension incorporating the GPC signal, see https://globalprivacycontrol.org/.
  • To Opt-Out of other “sales” or “shares” on or in connection with the Services such as by using your email address to identify you online for targeted advertising or by our sharing your name and mailing address with third parties for their marketing purposes, fill out this < form > or call 1-888-914-9661 and use PIN 867 610
• To exercise your rights to know, access, correct, delete, restrict, object, or portability, under applicable local law as described above, contact us at 1-888-914-9661, using the PIN 867 610, or submit a request by completing this < form >.
• If you are a resident of the EEA, Switzerland, or the United Kingdom, and wish to exercise your rights under applicable local law: You may contact our Data Protection Officer by email at [email protected] or as described in the “Contact Us” section of this Policy.

California residents may view metrics for California Consumer Privacy Act (“CCPA”)-related requests we have received during calendar year 2022, by clicking here.

Verification

We reserve the right to take reasonable steps to verify your identity before fulfilling your requests to know, correct, or delete. For example, we may seek to establish your identity to a reasonable or a reasonably high degree of certainty by matching information that you submit alongside your request with information that we have in our records. We may ask you or your authorized agent for supplemental information as needed to establish your identity. Authorized agents may also be required to provide a copy of the consumer’s signed permission authorizing the agent to submit requests on the consumer’s behalf under applicable local law.

Appeals

You may have a right to appeal a decision we make relating to requests to exercise your rights under applicable local law. To appeal a decision, please contact our Privacy Policy Coordinator by email at [email protected] or as described at the end of this document.

California Online Erasure. California’s "Online Erasure" law, Business and Professions Code §§ 22580-22582, requires operators of certain websites and online services to allow registered users who are under the age of 18 and residents of California to request removal of content they post. If you fit that description and posted content on a section of our Service that is directed to California residents at least 13 and younger than 18 years of age, you may request removal of the content by contacting our Privacy Policy Coordinator by email at [email protected] or as described at the end of this document. In response to your request, we may elect to make the content invisible to other users and the public (rather than deleting it entirely), in which case the content may remain on servers we control and/or may be publicly available elsewhere if a third party copied and reposted the content.

7. Opt-Out of Marketing Communications

If you do not wish to receive future marketing or other commercial messages from us, simply follow the unsubscribe instructions contained within the message you receive. Note, however, that you may continue to receive certain communications from us that are necessary for the Service, such as renewal notifications, invoices, technical notices, updates, security alerts, and support and administrative service bulletins.

8. Security of My Information

We implement physical, technical, and organizational security measures designed to safeguard personal information. These measures are aimed to protect the personal information we collect from loss, misuse, and unauthorized access, disclosure alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.

9. Third Party Links

Our Services may contain links to third-party websites and applications. Any access to and use of such linked websites and applications is not governed by this Policy, but is instead governed by the privacy policies of those third-party websites and applications. We are not responsible for the information practices of such third party websites and applications. We encourage you to review the privacy policies of any third-party websites or applications that you choose to visit.

10. Be Careful Publicly Posting Personal Information

Please be aware that content and personal information that you disclose in publicly accessible portions of the Service may be available to other users, and may also be made available outside the Service by third parties, so you should be mindful of all personal information, especially sensitive personal information, that you may wish to post. To the extent required by applicable local law, we may require that you obtain the consent of any individual whose personal information you post on our Services.

11. International Transfers

Your personal information may be processed, transferred to, and maintained on servers and databases located outside of the jurisdiction in which you are based and where the privacy laws may not be as protective as your jurisdiction. Where required by applicable law, we have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to ensure that your data is adequately protected. For more information on the appropriate safeguards in place, please contact us at the details below in the “Contact Us” section of this Policy.

12. Children

Our Services are not designed for children under the age of 13. If we discover that a child under the age of 13 has provided us with personal information, we will delete such information from our systems.

13. Contact Us

Condé Nast is the controller of your personal information. If you have any questions about the privacy aspects of our Services or would like to make a complaint, request, or have a question about your rights under this policy please contact our Privacy Policy Coordinator or our Data Protection Officer as follows:

For residents of the United States:

Privacy Policy Coordinator Condé Nast 1313 Market Street Wilmington, DE 198041 [email protected]

For residents of the EEA, UK and Switzerland: Data Protection Officer Condé Nast International Limited The Adelphi, 1-11 John Adam Street London, WC2N 6HT [email protected]

We have also appointed Edizioni Condé Nast S.p.A. as our data protection representative in the EEA. You can contact Edizioni Condé Nast S.p.A. at [email protected] or Piazza Cadorna 5,20121 Milan, Italy. Please mark all correspondence "CN EEA Representative".

14. Changes to this Policy

This Policy is current as of the Last Updated date set forth above. We may change this Policy from time to time, so please be sure to check back periodically. We will post any changes to this Policy on our Services. If we make any changes to this Policy that materially affect our practices with regard to the information we have previously collected about you, we will endeavor to provide you with notice in advance of such change by highlighting the change on the Service.