State Specific Privacy Rights

California Privacy Notice

California law requires us to disclose certain information related to our privacy practices. This California Privacy Notice (the “CA Notice”) supplements the information contained in the Bahlsen North America Inc. Privacy Policy (the “Privacy Policy”) and applies solely to all visitors, users, and others who reside in the State of California ("consumers" or "you"). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA), and California Privacy Rights Act of 2020 (CPRA) (together, the “CCPA”) and any terms defined under the CCPA have the same meaning when used in this CA Notice. Capitalized terms used but not defined herein shall have the respective meanings set forth in the Privacy Policy. As used in this CA Notice only, “personal information” has the meaning set forth in the CCPA. 

To understand our privacy practices, you should refer to our Privacy Policy in addition to this supplement applicable to California residents.

1. Categories of Personal Information Collected and Disclosed 

The CCPA provides California residents with the right to know what categories of personal information covered businesses have collected about them and whether such businesses have disclosed that personal information for a business purpose (e.g., to a service provider) in the preceding twelve (12) months. This information can be found in the table below: 

We may use any of the categories of information listed above for other business or operational purposes compatible with the context in which the personal information was collected. The categories of sources from which we collect personal information and our business and commercial purposes for using personal information are set forth in "Personal Information We Collect" and "How We Use Your Information" of the Privacy Policy, respectively.

We may share any of the information listed above with service providers, which are companies that we engage for business purposes to conduct activities on our behalf. Service providers are restricted from using personal information for any purpose that is not related to our engagement.

2. “Sales” or “Sharing” of Personal Information under the CCPA 

California residents have the right to opt out of the “sale” or “sharing” of their personal information to third parties. The CCPA defines “sale” to mean selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer’s personal information to a third party for monetary or other valuable consideration (which may be considered “sales” under the CCPA even if no money is exchanged). The CCPA defines “sharing” to mean sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer’s personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration. We have not "sold" or “shared” any personal information with third parties in the preceding twelve months. 

3. Other California Consumer Privacy Rights 

California residents have additional rights regarding their personal information. This section describes those additional rights and explains how to exercise those rights.

3.1. Authorized Agent. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child. To designate an authorized agent, please contact us as set forth in “Contact Information” in the Privacy Policy and provide written authorization signed by you and your designated agent.

3.2. California Shine the Light. The California "Shine the Light" law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties. If you are a California resident and would like to exercise any of your rights under the law, please contact us as set forth in the "Contact Information" section of the Privacy Policy. We will process such requests in accordance with applicable laws.

3.3. Opt-out of "Sales or Sharing". California residents may opt-out of the "sale or sharing" of their personal information by contacting us as set forth in the "Contact Information" section of the Privacy Policy. California residents (or their authorized agent) may also exercise your right to limit the disclosure of your sensitive personal information, by using our cookie banner to opt-out. 

Multi-State Privacy Notice

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana may have additional rights under relevant privacy laws, including under the Virginia Consumer Data Protection Act (“VCDPA”), Colorado Privacy Act (“CPA”), Connecticut Data Privacy Act (“CTDPA”), Utah Consumer Privacy Act (“UCPA”) Texas Data Privacy and Security Act (“TDPSA”), Oregon Consumer Privacy Act (“OCPA”) and Montana Consumer Data Privacy Act ("MTCDPA"), as applicable. The following additional information is required to be provided by covered businesses under applicable state laws. This Multi-State Privacy Notice (the “Multi-State Notice”) supplements the information contained in the Bahlsen North America Inc. Privacy Policy (the “Privacy Policy”) and applies solely to all visitors, users, and others who reside in the States of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana ("consumers" or "you"). We adopt this notice to comply with relevant privacy law. Capitalized terms used but not defined herein shall have the respective meanings set forth in the Privacy Policy.

To understand our privacy practices, you should refer to our Privacy Policy in addition to this supplement.

1. Sharing / Disclosing Personal Data

The VCDPA, CPA, CTPDA, UCPA, TDPSA, OCPA and MTCDPA requires covered businesses to provide residents of their respective states with the right to know the categories of “personal data” (as defined under applicable law) covered businesses shared with /disclosed to third parties and the categories of third parties with whom such personal data has been shared / disclosed. Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana can find this information below: 

2. “Sales” or Processing for Targeted Advertising

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana have the right to opt-out of the “sale” of their personal data to third parties or the processing of their personal data for targeted advertising (see the “Accessing and Correcting Your Information” section above). For purposes of this paragraph the definition of “targeted advertising”, “sale”, “sell” or “sold” has the meaning set forth in applicable privacy law. However, please note, in accordance with applicable privacy law certain specific exceptions to “sale” and/or “targeted advertising” may apply, including the disclosure of personal data to a processor that processes personal data on behalf of a controller. If a consumer wishes to exercise their right to opt-out of the sale of personal data or processing of personal data for targeted advertising, they may do so by following this link. We have not “sold” or processed for targeted advertising personal data in the preceding twelve months. 

3. State-Specific Rights to Opt-Out

3.1. Colorado, Connecticut, Montana, Oregon, Texas and Virginia. Residents of Colorado (or an authorized agent thereof), Connecticut (or an authorized agent thereof), Montana, Oregon, Texas and Virginia may request to opt-out of the processing of your personal data for the purpose(s) of: (i) targeted advertising; (ii) sale of personal data; or (iii) profiling to make decisions that have legal or other significant effects on you. If you would like to exercise this right, you may use our cookie banner to opt-out. We will process such requests in accordance with applicable law. Please note: You may broadcast an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal), however we do not currently honor such signals or similar mechanisms. 

3.2. Utah. Utah residents may request to opt-out of the processing of your personal data for the purpose(s) of: (i) targeted advertising; or (ii) sale of personal data. If you would like to exercise this right, you may use our cookie banner to opt-out. We will process such requests in accordance with applicable law.

4. Connecticut Right to Appeal a Denied Appeal

If you are a resident of the State of Connecticut and your request for reconsideration of Notable’s refusal to take action in accordance with the exercise of your rights in the “Accessing and Correcting Your Personal Information” section of the Privacy Policy is denied, you have the right to file a complaint with the Connecticut Office of the Attorney General by visiting the “File a Complaint” page here or contacting the Consumer Assistance Unit at 860-808-5420.

Nevada Privacy Notice

Nevada law requires us to provide all visitors, users, and others who reside in the State of Nevada ("you") certain additional privacy rights. This Nevada Privacy Notice (the “NV Notice”) supplements the information contained in the Bahlsen North America Inc. Privacy Policy (the “Privacy Policy”) and applies solely to you. If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Information to third parties who intend to sell or license that Personal Information, even if your Personal Information is not currently being sold. If you would like to exercise this right, please contact us via the information found in the “Contact Information” section of the Privacy Policy.