Location Specific Privacy Rights and Information Notice

Several states in the US have privacy laws that provide individuals in their state with certain rights. This Location Specific Privacy Rights and Information Notice (“Privacy Notice”) supplements our Privacy Policy by providing additional information about how we collect, use and disclose personal information.

You will also find information on the specific privacy rights that may apply to you depending on your location and how to exercise them:

• US Privacy Rights (except California)
• California Privacy Rights
• Privacy Rights Outside the United States
• How to exercise your privacy rights at Adobe

For additional information on “consumer health data” subject to the Washington My Health My Data Act (MHMDA), the Nevada Health Data Privacy Act (NHDPA) and other applicable state US consumer health privacy laws, please refer to our US Consumer Health Data Privacy Notice.

US Privacy Notice:

In addition to the information described in our Privacy Policy, certain US states require us to provide additional information related to how Adobe collects, uses, retains and discloses personal information as well as describe additional rights.

Personal Information We Collect:
We collect the following categories of personal information, each as further described in our Privacy Policy:

• Identifiers and Contact Information
• Commercial and Transaction information
• Professional, Education or other Demographic Information, which may include characteristics of protected classifications under California or federal law, such as military or veteran status, age, sex or gender
• Analytics or other Electronic Network Activity
• Inferred Information
• Biometric Information
• Sensitive Personal Information, which may include:
  • Government ID. Government identification such as state identification information
  • Account access information. Information such as account log-in in combination with any required security or access code, password or credentials allowing access to your Adobe account
  • Precise geolocation data. Data derived from a device and that is used or intended to be used to locate you within a geographic area that is equal to or less than the area of a circle with a radius of 1,850 feet
  • Sensitive demographic data. Information you provide to us, such as racial or ethnic origin, religious beliefs or information about sex life or sexual orientation
  • Contents of communications. Contents of your mail, email and text messages, where Adobe is not the intended recipient, for example if you send personal communications to Adobe personnel
  • Biometric information for identification, including biometric information used for the purpose of uniquely identifying a consumer
  • Health data, such as your dietary restrictions or preferences, health or other accommodations necessary for you to attend an Adobe-sponsored or managed event

Sources of Personal Information We Collect:
We collect personal information from the following categories of sources, which are more fully described in our Privacy Policy:

• Personal information you provide directly to us, such as on a form, via a browser or mobile-based chat session, via email or telephone etc.
• Personal information we automatically or programmatically collect or generate from your access to and use of Adobe websites, products or services
• Personal information we infer or generate from your access to and use of Adobe’s websites, products or services, such as your approximate location (such as your IP address), likely preferences or other characteristics
• Personal information we obtain or receive from other sources, including:
  • Data brokers and aggregators from which we obtain information to supplement the personal information we collect
  • Third party partners, such as third-party applications and services including social networks you choose to connect or interact with through our services
  • Co-branding or marketing partners, such as companies with which we offer co-branded services or events or engage in joint marketing activities
  • Service providers that collect or provide data in connection with the work they do on our behalf
  • Corporate transactions, such as mergers, acquisition and divestitures
  • Publicly available sources, such as open government databases.

Business or Commercial Purposes for Collecting Personal Information:
We use the personal information we collect for purposes further described in our Privacy Policy or otherwise disclosed to you. For example, we use personal information for the following purposes.

We combine personal information that we collect from different sources for these purposes and to give you a more seamless, consistent and personalised experience.

Categories of Personal Information Disclosed for a Business Purpose in the Preceding 12 Months:

• Identifiers and Contact Information
• Commercial and Transaction Information
• Professional, Education or other Demographic Information
• Analytics or other Electronic Network Activity
• Inferred Information
• Sensitive Personal Information

For more information on the categories of third parties with whom we disclose personal information and the specific business or commercial purposes for such disclosures, please review the “Does Adobe share my personal information” section of our Privacy Policy.

Categories of Personal Information Sold or Shared in the Preceding 12 Months:

Retention and Deletion

Please review the “How long does Adobe retain my information” section of our Privacy Policy for more information about how long Adobe retains personal information.

California Privacy Rights

What rights have I got regarding my data as a California resident?

If you are a California resident and the processing of personal information (also referred to as personal data in certain jurisdictions) about you is subject to the California Consumer Privacy Act (CCPA), you have certain rights with respect to that information, including:

Right to opt out of the “selling” or “sharing” of certain personal information

You have a right to opt out from future “sales” or “sharing” of personal information, each as defined in the CCPA. CCPA requires us to describe the categories of personal information we sell to or share with third parties and how to opt out of future sales or sharing. The CCPA defines personal information to include Internet or other electronic network activity information which includes identifiers, such as IP addresses, cookie IDs and mobile IDs. The law also defines a “sale” or “share” broadly to include simply making data available to third parties in some cases.

We do not knowingly sell or share the personal data of minors under 16 years of age.

Right to know or request categories of personal information

You have a right to request that we provide you details about the personal information we have collected about you. You also have a right to request additional data about our collection, use, disclosure or sale of personal information, such as a list of the categories of personal information collected about you and other related information for example the source of the information, categories of information shared or sold to third parties and the purpose for sharing.

Right to request correction

You have a right to request correction of inaccurate personal information.

Right to request deletion

You also have a right to request that we delete personal information under certain circumstances, subject to certain exceptions. For example, some information such as your purchase history and invoices, must be retained for tax and other business purposes.

Right to limit use and disclosure of sensitive personal information

You have a right to limit our use and disclosure of sensitive personal information for any purposes other than to provide the services or goods you request or as otherwise permitted by law.

Note that we do not use or disclose sensitive personal information for any such additional purposes.

Right to designate an authorised agent

You may designate an authorised agent to exercise some of your rights as further described below under “How to exercise your privacy rights at Adobe.”.

Right against discrimination

You have a right to not be discriminated against for exercising your rights set out in the CCPA.

Right to notice

You have a right to receive notice of our practices at or before collection of personal data.

If you wish to exercise one or more of these rights, please review the “Your privacy rights” section.

Consumer request metrics for calendar year 2024

Adobe believes transparency is important in maintaining a trusted relationship with our consumers. To that end, Adobe further enhances our transparency with respect to the choices our consumers make regarding personal information. In this privacy transparency disclosure, we are providing metrics on certain requests we received from consumers across the United States during the 2024 calendar year, in compliance with the California Consumer Privacy Act.

Adobe may offer financial incentives like rewards or premium services for personal information

We may offer you financial incentives in exchange for your personal information. For example, we may offer a rewards programme or provide a premium service to you in exchange for the opportunity to process your personal information to help us to improve our products or services, receive marketing communications, discounts or other incentives. Where we offer these programmes, your participation is optional.

Additional California Disclosures
Under California’s “Shine the Light” law, California customers who provided personal information to us may request information about whether we have disclosed personal information to any third parties for their direct marketing purposes. We comply with this law by offering you choices about our disclosure of personal data information to third parties. You can make or change your choices on the Your Privacy Choices page.

You may request further information about our compliance with this law by emailing Privacy@adobe.com. Please note we are required to respond to one request per customer every year and we only respond to requests sent to this email address.

California residents under the age of 18 who are registered users of online sites, services or applications have a right under California Business and Professions Code section 22581 to remove or request and obtain removal of, content or information they have publicly posted. To remove content or information you have publicly posted, you can sign in to the Adobe product or service where you store your content and delete it directly there. Alternatively, to request that we remove such content or information such as posts on Adobe discussion forums or blogs, please send a detailed description of the specific content or information you wish to have removed via the Adobe Privacy form or via email to DPO@ADOBE.COM. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

Privacy Rights Outside the United States

What rights have I got regarding my data outside the United States?
Depending on where you are located, you may have certain rights relating to the personal data we hold about you.

Your privacy rights under applicable local data protection laws
This includes, subject to local data protection laws, the right to ask us for a copy of your personal data; to correct, delete or restrict (stop any active) processing of your personal data and to ask us to share your data. In addition, you can object to the processing of your personal data in some circumstances (such as where we are using the data for direct marketing).

Filing a complaint with a supervisory authority
You also have the right to lodge a complaint with a supervisory authority. You may file a complaint in the country where you reside or where you work or where you believe is relevant. There are multiple different authorities depending on your location in the EEA or internationally. You may also have the right to lodge a complaint with Adobe Ireland's lead supervisory authority, the Irish Data Protection Commission. We encourage you to first contact us with any questions or concerns.

If you are a resident of the United Kingdom, you have the right to raise a data protection complaint directly with Adobe. You can do this by contacting us using the privacy enquiry form or by emailing our Data Protection Officer at DPO@ADOBE.COM. We will acknowledge your complaint within 30 days of receipt and will investigate it without undue delay, keeping you informed of progress and notifying you of the outcome. If you remain dissatisfied with Adobe's response, you may then escalate your complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection (ico.org.uk).

How to exercise your privacy rights at Adobe

To exercise any of these rights (including deleting your Adobe ID account), you can contact our Data Protection Officer at DPO@ADOBE.COM or submit a request via the privacy enquiry form.

Many of our products and services allow you to update your personal data by accessing the "my account," "my profile" or a similar feature of the service you are using. For instance, you can delete files or photos you have stored in our products and services by logging in and using the deletion options.

You can also exercise these rights by adjusting your privacy settings and preferences in Your Privacy Choices page, within your product or service settings or by submitting your request via our privacy enquiry form.

To opt out from sales of personal data for purposes of targeted advertising or the sharing and selling of cross contextual selling as part of targeted advertising you can: