Yummly Privacy Notice & Your Privacy Rights

Effective as of Jan 2023

Welcome! Yummly is an online platform that provides users with a collaborative space to find, discuss and share information about all things food, take advantage of other food- and cooking-related features, and apply for jobs, all through the Yummly website (the "Site"), a Yummly mobile application (the "App"), other products and accessories that we make or sell ("Products") and through other channels where this notice is posted (collectively, our "Services"). Yummly, Inc. ("Yummly"), part of the Whirlpool Corporation family of brands, provides this Privacy Notice to inform you of our policies and procedures regarding the collection, use and disclosure of your Personal Data and other data when you use our Services. For purposes of the European General Data Protection Regulation No. 679/2016 ("GDPR") and similar data protection laws, Yummly processes your Personal Data as a data controller. This Privacy Notice is not a contract and does not create any legal rights or obligations. If you are a California resident, see Section 1 and Section 7 "California Residents: Your California Privacy Rights" for our notice at collection and information provided pursuant to California law.

Please note that Yummly maintains a separate Privacy Notice for its Brazilian users, available here. For notices that apply to Whirlpool services, visit https://whirlpoolcorp.com/privacy-notice-united-states-and-canada/.

Unless otherwise defined in this Privacy Notice, terms used in this Privacy Notice have the same meanings as in our Terms of Use.

As used in this Privacy Notice, the terms "using" and "processing" information include using cookies on a computer, subjecting the information to statistical or other analysis, and using or handling information in any way, including, but not limited to collecting, storing, evaluating, modifying, deleting, using, combining, disclosing and transferring information within our organization or among our affiliates within the United States or internationally.

Summary

Information Collection, Use, and Sources

We collect (1) Personal Data that you have voluntarily shared with us; (2) data concerning your activity when using the Services; and (3) data that is received about you from other third parties or otherwise collected through other sources. For example, we may collect or receive your contact information, payment and billing information, Yummly account information, demographic information, preferences, purchase history, and general and precise geolocation. We may also collect or receive device, Internet, and network activity information, including your IP address, device IDs, the type of browser and operating system you use, your navigation through our Services, and other information about your use of our Services. We may also collect images, audio, and video you submit or allow the Services to capture. We, our vendors, and other parties may use cookies and other tracking technologies to recognize you and track your usage when you visit our Services. We use your information for our business purposes. For example, we use Personal Data to provide you with the Services, operate, maintain, and improve our Services, understand your interests, confirm and fulfill your orders, provide customer service, provide product maintenance and troubleshooting, respond to your requests or questions, for marketing purposes, communicate with ou, verify your requests, manage security, prevent fraud or criminal activity, enable you to interact with our Services, and for other purposes we may notify you of from time to time.

Legal Basis for Processing

We process your Personal Data to satisfy our contractual obligations to you; based on your consent; to protect the legitimate interests of Yummly or other parties; or to comply with legal obligations.

Data Retention

We retain your Personal Data in accordance with applicable retention policies and for as long as it is necessary to achieve the intended purpose, including the purposes for which the Personal Data was collected. We also retain information as otherwise required by law. The criteria used to determine our retention policies include the length of our relationship with you, your requests, ongoing obligations such as contracts and service offerings, and our legal obligations.

Information Shared with Others

Your data may be shared (1) with other users; (2) with service providers; (3) with our business and advertising partners, (4) with other third-party apps and services; (5) to comply with the law, protect ourselves, or enforce our rights; (6) with other Whirlpool brands and entities; or (7) in connection with a business transfer; or (8) in other situations where we provide you with notice. Cookies and tracking technologies are used on our Services, which allow us to improve your experience with the Services, understand your interests, and allows us, advertising networks, social media companies, and others to place or display ads relevant to you on our Services, as well as on other websites, apps, services, or devices you may use. We may share hashed contact information from our marketing database with social media and advertising companies (e.g., Facebook, Google, Pinterest, etc.), which — if you have an account with those companies or they are otherwise able to identify you — may be used to serve you and other people with ads.

International Transfers

We take measures to protect your data when we transfer it to another country.

Managing Your Data

You may opt-out of receiving marketing messages from us by contacting our Privacy Office or by opting out of email marketing using the unsubscribe link in our emails. You can access, integrate, update, amend, correct, and delete your Personal Data (all subject to certain legal exceptions). You may request to opt out of the "sale" of certain Personal Data and to opt out of certain types of "behavioral" or "targeted" advertising (as defined under applicable law) based on information collected about you on non-affiliated websites, applications, or services. Your requests will be processed and fulfilled in accordance with any applicable laws. You may be able to make these requests using your account, the settings on the Service, or by using the information provided in the "Contact Us" section below.

Your California Privacy Rights

California residents in particular have the right to request access, request correction, and request deletion of your Personal Data (subject to certain legal exceptions), as well as the right to opt-out of the "sale" or "sharing" of your Personal Data. You may be able to make these requests using your account, the settings on the Service, or by using the information provided in the "Contact Us" section below.

Interest-Based Advertising/Your Choices

We use cookies and other technologies to recognize you on unaffiliated party websites so that we can display targeted ads and other content that is tailored to your interests. We adhere to the DAA's Self-Regulatory Principles for Online Behavioral Advertising as managed by the Digital Advertising Alliance (DAA). You can opt-out of certain interest-based advertising by visiting optout.aboutads.info (U.S. residents). Our Site may also allow you to manage certain cookie preferences.

Security

We take reasonable steps designed to safeguard your Personal Data against loss, theft, and unauthorized use, disclosure or modification, but please be aware that no transmission of information over the Internet is 100% secure.

Links to Other Sites

We may link to other sites or apps owned by other companies, but we are not responsible for their practices.

Our Policy Toward Children

We do not knowingly collect data from individuals under age 16.

Amendments and Updates

We may update this Privacy Notice from time to time.

CONTACT US

You can contact us by sending us an email at [email protected], using the information provided in the "Contact Us" section below, or the information in the Contact Us portion of this Site.

1. Information Collection, Use, and Sources

"Personal Data" is information that relates to, describes, is capable of being associated with, or could reasonably be linked (directly or indirectly) with you or your household, and may include Usage Information (as defined below). "Usage Information" refers to device, Internet and network activity information that Yummly, our business partners, and our service providers collect, including information about how you interact with our Services, emails, advertising, and content. We may combine Usage Information with other Personal Information we have about you. We collect information directly from you and Usage Information. We may also receive information from other parties, as further described below.

Personal Data We May Collect Directly From You. We may collect Personal Data directly from you when you use the Services, contact us, sign up to receive communications from us, make a purchase, enter a sweepstakes or contest, or provide us feedback or survey responses. We may collect the following categories of Personal Data:

• Your identifiers and contact information, such as your first and last name, email address, mailing address, and phone number;
• Demographic information, such as your gender, birth date, and age;
• Your billing and payment information, such as your credit card number and billing address;
• Your Yummly account information, including your user name, account number, and your Yummly password;
• Product, ownership, and service information about your kitchen appliances and accessories, including those that are manufactured by Yummly as well as any that are capable of working with the Yummly app (for example, if you use the App to remotely control a kitchen appliance, we will collect information from the appliance manufacturer that we need to make the App work);
• Information you voluntarily provide about yourself, such as allergies, dietary restrictions, food preferences, and groceries that you want to purchase;
• Your preferences, such as product wish lists, food and recipe preferences, kitchen appliance or accessory preferences, order history, and marketing preferences;
• Inferences about you, based on your preferences and characteristics;
• Your user content (including audio and visual information, video, and images) you post or otherwise provide to use certain features, including recipes you submit, and information you provide so that we can help you manage your grocery inventory (such as photographs or video you provide to facilitate ingredient recognition features);
• Your Usage Information, as described further below;
• Your mobile device model and ID number, and user settings;
• Your general location, such as through your ZIP code or IP address;
• Your precise location (if you enable this feature);
• Information about your use of the App when applicable; and
• Employment-related and education information, if you apply for a job through the Services, including your resume; information from your application (work experience, education, employment eligibility, date of birth, gender, racial / ethnic origin, disability status, veteran status, trade union membership, skills, certifications, and qualifications); information from a credit check, background check, and employment verification check; and information provided during recruiting, interviews, surveys, tests, and hiring stages.

Some of this information may be considered "sensitive" under the laws of certain jurisdictions. Whether this information is considered "sensitive" will depend on the laws of your jurisdiction.

Your Personal Data is processed only to the extent necessary to pursue the purposes for which it was collected and for the purposes set out in this Privacy Notice. To learn about how long Yummly keeps your Personal Data, see Section 3, Data Retention.

Many of our services and features require some Personal Data. If you choose not to provide the necessary Personal Data, you may not be able to use certain services or features. If you choose not to share your Personal Data, features that require personalization will not work for you.

Personal Data We Receive From Others. Other parties may provide us with Personal Data. For example, if you create a Yummly account using your login from another party's service (including a social media network such as Facebook), we will access and collect the information about you that your privacy settings on that service permit so that we can create an account for you. Social media platforms and advertising partners may also give us other information about you. We may combine this information with other Personal Data that we have collected. Also, we may collect information that you make available to Whirlpool or other manufacturers of kitchen appliances and accessories (like information about your appliance to allow us to send cooking times and temperatures to the appliance) if this is related to providing the Services to you. We may offer device or operating system-based authentication such as fingerprint or face unlock as a log-in method of accessing certain Services. We are notified as to whether the authentication was successful, but we do not have access to the fingerprint or facial data.

Use of Personal Data. We use each of the categories of Personal Data described throughout this Section 1 for our business purposes. Our primary goals in collecting information are to provide, support, and improve our products and services; to operate, maintain, and improve the Services; and to enable our users to enjoy, use, and easily navigate our Services. For example, we use your Personal Data to provide our Services, communicate with you about your account, and administer your inquiries. For example, when you create an account through the Services and become a Registered User or when you choose to create your own profile, we may ask you for Personal Data so we can create your account or populate your profile (see "Registered Users" below). We may also use your Personal Data to update our Services or features, conduct surveys, troubleshoot, protect our Sites, Apps, and users, or provide support to you. We use Personal Data to administer and evaluate your eligibility for offers and promotions, for research and development; to verify requests made pursuant to this Privacy Notice; for safety and security purposes; and, if necessary, to prohibit or restrict access to our Services. To provide you with a consistent user experience and to recognize you as a user across our Services, we may collect and combine Personal Data For example, data collected when you visit the Site or the App from one browser or device may be combined or linked with data collected when you visit the Site or App from a different browser or device, which may also be combined or linked with product usage data.

We also use your Personal Data to improve and develop our products and services, personalize our products, better understand consumers' interests related to our products and services, make recommendations to you, and send you relevant offers. We may use information that you provide to draw inferences about you, such as your preferences and characteristics. We may also use your Personal Data to send you Yummly newsletters, marketing or promotional materials, or other information that may be of interest to you. Where required by applicable law, we will obtain your consent to send you these communications. If you decide at any time that you no longer wish to receive them, please follow the unsubscribe instructions provided in any of the communications or update your user preferences information.

We may use Personal Data to process, evaluate, and take steps to act on your application for employment. We will process your Personal Data to decide whether to contact you, invite you for an interview, or carry out any other recruitment and hiring activities. If we decide to further consider or offer you a role, we may send you follow-up communications and check references before confirming your appointment. We may use your Personal Data to conduct background and employment checks where permitted by law.

When we collect Sensitive Information, we will use it for reasonably expected purposes in connection with products or services you request; to process and evaluate job applications; and as authorized by law.

Registered Users. Once you become a Registered User, you will be able to create a profile page by submitting certain Personal Data. The profile page may be viewable by other Yummly users and will display your profile name as well as your profile picture, if you choose to upload one or agree to allow a Third-party service (like Facebook) to provide one for you. You can choose what other Personal Data you provide as part of your profile. Providing such information is voluntary and should correlate with the degree of interaction you want to have with Yummly and its users.

Other Information. Other Information will be considered Personal Data if it is combined with other data in such a way that enables you to be identified. However, where Other Information is taken alone or combined only with other non-identifying information, it will not be treated as Personal Data. We may use Other Information for any purpose, unless prohibited by law.

We may combine your Personal Data with Other Information and aggregate it with information collected from other users to attempt to provide you with a better experience, to improve the quality and value of the Services and to analyze and understand how our Services are used. We may also use the combined information without aggregating it to serve you specifically — for instance, to deliver information to you according to your preferences or restrictions.

Usage Information. When you visit or use the Services or use a Yummly website or mobile application that has Yummly features (like the Yum button), we may automatically record Usage Information. Usage Information we collect may include information about your online sessions, such as your Internet Protocol (IP) address, browser type or the webpage you were visiting before you came to our Site, pages of our Site or the App that you visit (or of the site you visited that had the Yummly feature), the time spent on those pages, information you search for, contact information or data you enter, products or content you view, links you click, access times and dates, mouse movements, screen captures, the model and device ID number of your mobile device, user settings, location (if you enable this feature), and statistics and information about your use of the Site and App. We may also track and collect App usage data, such as the date and time the App accesses our servers, your interactions with the App, what information has been downloaded to the App, information about where you downloaded the App, and how often you use it. We use Usage Information to provide and improve the Services, develop new products, and offer products and services that may be of interest to you. We also use Usage Information to monitor and analyze use of the Services, for technical administration, to secure the Site and App and protect those who visit the Site or App, to improve functionality and user-friendliness, and to better tailor our Services to our visitors' needs. For example, some Usage Information is collected so that when you revisit the Services, we will recognize you and can serve advertisements and other information appropriate to your interests. Some of the Usage Information (like your IP address) is treated as Personal Data.

Cookies and Other Tracking Technologies. Our Services use tracking technologies to collect Personal Information, including Usage Information. These tracking technologies include, by way of example, cookies, pixels, APIs and tags. While these technologies operate in different ways, in general, they allow us, our service providers, and other third parties to collect and combine information about your online activities over time and across different websites and apps. For example, they help us understand how you interact with the Site and use our Services and save information like your search preferences, your account settings and login information, so that we can remember you and your settings when you return to the Site or App, and personalize your experience. These tools allow us to determine how many people are visiting our Services and other analytics, whether visitors are new or repeat visitors, which pages visitors are viewing and for how long, how well certain online advertising campaigns are converting, and other similar usage data. When used in our e-mail communications, they can tell us information such as how you interact with the e-mail, when and whether an e-mail was opened, if and how many times it was forwarded, and what links users click within the e-mail. They support the way we serve our ads, measure the effectiveness of our ads, and to determine the content and advertising to offer you based on your interests. Based on tracking information, we, our service providers, and other third parties can adjust the content, products, services, advertisements, and promotions we provide to better meet your interests, and make you aware of Whirlpool products, services, and offers in which you may be interested.

To support these activities, we and our partners may use information about your visits, how you use our Services, how you engage with our emails or offers, your other interactions with us, and your interactions with other third parties and other websites.

In addition to the above-mentioned functions, cookies and other tracking technologies can also perform functions that are necessary to the operation of a website or important to the performance and functionality of the site. For example, we use cookies to improve your experience on our Services, such as to allow you to return to the Site more easily, hold your shopping cart, or save your language preferences.

The length of time that information about you is tracked depends on the type of cookie: we use both session cookies (which generally expire when you close your browser) and persistent cookies (which remain on your device for an extended period of time).

For more information on use of tracking technologies for ads and how to limit that use, see the "Interest-based Advertising" and "Your Privacy Rights" sections below. Most Internet browsers automatically accept cookies but you can instruct your browser, by changing its options, to block or delete cookies. If you limit or reject cookies, however, you may not be able to use all portions of or all functionality of our Services.

We may de-identify or aggregate Personal Data (including Usage Information). We keep and use such de-identified information in de-identified form, except as permitted by applicable law. We may use de-identified or aggregated data for any purpose unless prohibited by law, including to understand our customers and improve our products and services.

2. Legal Basis for Processing

Below is an explanation of the different legal grounds we have for processing your Personal Data:

• To satisfy our contractual obligations to you or for pre-contractual steps taken on your request. For example: allowing you to register for an account; providing the Services to you; assisting you with pairing a kitchen appliance or accessory through the Services; and fulfilling your product orders and providing additional services (for example, delivery, after-sale services, and the management of returns); and processing your application for a job with Yummly.
• With your consent. For example: processing health information, such as information about your allergies, so that we can customize our recommendations for you; processing your entry into a prize promotion/competition; sending you customized marketing communications related to our products and services electronically (including email, notifications from other party's services, and notifications from mobile applications); and sharing your Personal Data with our selected trusted partners to help us send customized marketing communications.
• When we have a legitimate business interest to do so. For example: managing the requests for information you send us, including handling complaints; preventing fraud; enforcing our rights before the courts; improving the performance and security of our products and our Services, including the App and the Site; sending you customer care communications concerning products or services you have used or which you showed interest in, and in order to carry out customer satisfaction surveys; unless you opt-out, contacting you for marketing purposes by phone (non-automated) and via paper mail; and carrying out activities useful for the transfers of business and business branches, takeovers, mergers, demergers or other transformations and for the execution of such transactions.
• For legal obligations. We may also use your Personal Data to the extent necessary to comply with our legal obligations.

If you do not want Yummly to use your electronic contact details for marketing purposes, you can always follow the instructions to "unsubscribe" in our emails; or contact us using the information in the Contact Us section below.

3. Data Retention

Yummly will retain your Personal Data in accordance with applicable retention policies, and for as long as it is reasonably necessary to achieve the intended purpose, including the purposes for which the Personal Data was collected and the purposes described above. We also retain information as otherwise required by law. The criteria used to determine our retention policies include the length of our relationship with you, your requests, ongoing obligations such as contracts and services, and our legal obligations. If you delete your account we have processes designed to delete or de-identify your Personal Data. If you do not use your account or receive emails from us for an extended period of time, we have processes designed to delete or de-identify your Personal Data.

Keep in mind that we will retain information to comply with the law, prevent fraud and protect Yummly and Whirlpool, collect fees, resolve disputes, troubleshoot problems, assist with investigations, enforce our agreements, and take other actions permitted by law.

We only share your Personal Data as described in this Privacy Notice. Through the Services, you are able to share your Personal Data when you share something through our Service (like when you use the Yum button), when you give us your consent to do so (like when we notify you that the information you provide will be shared in a particular manner and you provide us with such information), when you share Personal Data with another party's service (if you allow such sharing), or when you share Personal Data with your friends with whom you want to connect (according to the preferences you have set in your account).

We may share each of the above categories of Personal Data with:

Whirlpool Brands and Entities. Yummly is a subsidiary of Whirlpool Corporation. Any data, including Personal Data collected by Yummly, may also be shared with Whirlpool Corporation or its brands (including but not limited to Whirlpool®, Maytag®, KitchenAid®, Jenn-Air®, Amana®, EveryDrop®, and Affresh®) and subsidiaries located in the European Economic Area (EEA) and outside of the EEA, acting as autonomous controllers (e.g., Whirlpool Canada LP, Whirlpool EMEA S.p.A., Whirlpool UK Appliance Limited). A more complete list of Whirlpool Corporation's brands and subsidiaries can be found by browsing https://whirlpoolcorp.com. All of these brands and entities are referred to within this Notice collectively as "Whirlpool."

Other Users. When you post comments or content (such as reviews or recipes) on any Yummly message boards or blogs, or when you use other interactive features (such as when you connect with friends) made available through or in connection with the Services, any data you choose to include will be accessible to other users. We urge you to be very careful when deciding to make any of your Personal Data, or any Other Information, publicly available through the Services. If you choose to use any social network features such as the Facebook "Like" button and other widgets, such as a "share" button or interactive mini-programs that we may offer through the Services, these features may collect your IP address and information about which page you are visiting on our Services, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by another party or hosted directly on our Site. Your interactions with these features are governed by the privacy statements of the companies and social media networks providing them.

Service Providers. We may share any of your data with companies and individuals we engage to facilitate our Services, to market our Services, to provide services to us or on our behalf, to perform related services (e.g., without limitation, maintenance services, database management, web analytics, and improvement of our features) or to assist us in analyzing how our Services are used. We may also share information about your use of Yummly products with service providers that store this information to improve the Services.

Business and Advertising Partners. With your consent, we may share your Personal Data with other parties to allow them to send you marketing communications about their own products and services. As explained, cookies and tracking technologies may be used on our Services. These tools allow us and advertising networks, social media companies, and other providers to collect and share information, and place or display ads relevant to you on our Services, as well as on other websites, apps, services, and devices you may use. Your Internet browser may provide you with the ability to delete or limit such cookies. In addition, our US sites allow you to disable cookies used for targeted advertising purposes by clicking on the Do Not Sell Or Share My Personal Information link on those sites. We may share hashed contact information from our marketing database with social media or advertising companies (e.g., Facebook, Google, Pinterest, etc.). If you have an account with these companies or if those companies are otherwise able to identify you, this information may be used to serve you ads more likely to be relevant to you and to serve ads to other people that these companies believe are similar to you (sometimes known as "LookAlike Audiences" or "Similar Audiences"). Many social media and advertising platforms (including Google and Facebook) allow you to configure your ad settings through your account on their platforms. You may also complete the Do Not Sell or Share My Personal Information webform available at whirlpoolcorp.com/privacy to opt out of having Personal Information shared for these targeted advertising purposes.

Other Parties' Apps and Services. You can choose to integrate our App with a variety of other parties' apps and services. If you do, we will share information with, and receive information from, the relevant party to the extent necessary for the integration to work properly. For example:

• If you use our App with your compatible connected kitchen appliance or accessory, we may exchange information like cooking times and temperatures with the manufacturer.
• If you use our App with compatible services or retailers, such as grocery stores, grocery delivery, or food delivery services, we may exchange information about your geographic location, food preferences, and ingredient choices.
• If you authorize our App to connect with Apple Health or a similar app, we may share nutritional information about certain recipes with the app to help you accommodate food preferences or allergies.
• If you choose to log into your account through a social networking or authentication service, Yummly and that service may share certain information with each other about you and your activities.

Compliance with Laws, Security, Safety, and Law Enforcement. In certain situations, Yummly may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. Yummly cooperates with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including but not limited to subpoenas), to protect the property and rights of Yummly, Whirlpool, or a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, any illegal, unethical or legally actionable activity.

Business Transfers. Yummly may sell, transfer or otherwise share some or all of its assets, including disclosing and transferring your Personal Data, in connection with a merger, acquisition, reorganization or sale of assets or in the event of bankruptcy.

We may share information in other situations where we provide you with notice. We may share de-identified (including aggregated) information with other parties for any purpose, unless prohibited by law.

5. International Transfers

The Services are offered globally so it is necessary to transfer your information internationally. In particular, your information will be transferred to and processed in the United States where Yummly and our servers are located. The data protection and other laws of other countries, such as the United States, may not be as comprehensive as those in your country. The processing activities performed by Yummly may be regulated by data protection laws in your own country, in addition to U.S. privacy laws. We rely on legal bases to lawfully transfer Personal Data internationally, including your consent and EU Commission approved model contractual clauses (which require certain privacy and security protections).

6. Managing Your Data

We give you options to help you understand what Personal Data we use and to request that we change how we use it. At any time, you may contact us to:

• be informed on the purposes and methods of the processing of your Personal Data and confirm the processing of your Personal Data;
• ask for access to your Personal Data (commonly known as making a "data subject access request"). This enables you to receive a copy of the Personal Data we hold about you;
• ask for updating, or rectification, or correction of the Personal Data we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us;
• request erasure of your Personal Data. This enables you to ask us to delete or remove your Personal Data where there is no good reason for us continuing to process it (subject to certain exceptios that may apply under applicable law). You can also ask us to delete or remove your Personal Data where you have successfully objected to processing or where we are required to erase your Personal Data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for reasons which will be communicated to you, if applicable, at the time of your request;
• restrict the processing of your Personal Data. This enables you to ask us to suspend the processing of your Personal Data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where you allege that our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it;
• object to the processing, wholly or partly, of your Personal Data where we are relying on legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms;
• where we are relying on consent to process your Personal Data, you can revoke the consent to the processing of your Personal Data freely and at any time, and also opt-out of marketing communications by clicking on the unsubscribe option at the bottom of our marketing communications;
• make your Personal Data available to you or to a different provider in some circumstances. We will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that Personal Data we process based on our legitimate interests (or those of a third party) may not be portable; and
• opt out of the "sale" of Personal Data, as well as certain types of "behavioral" or "targeted" advertising based on information collected about you on non-affiliated websites, applications, or services (each as defined under applicable laws). To make a request, click the Do Not Sell or Share My Personal Information link in the side menu of our Site, use our webform available at whirlpoolcorp.com/privacy, or contact us using the information provided in the Contact Us section, below.

If you wish to manage your data as described above, or raise any questions about the Personal Data we hold about you, please contact us using the contact information below.

There is generally no charge for you to exercise any of the data management options described in this section, but we may charge a reasonable fee if you make excessive or unfounded requests. In some cases, depending on where you live, you have the right to lodge a complaint in front of the competent national data protection or judicial authority if you object to how we use your Personal Data. If you are a resident of Colorado, Connecticut, or Virginia, you may have the right to submit a formal appeal to us if you are not satisfied with the outcome of your request. Please send these appeals directly to the Privacy Office at [email protected], with "Appeal" in the subject line.

If you are a Nevada resident, you can request that we not "sell" your "covered information" (as defined in applicable Nevada law). To make a request, email us at [email protected]. Please use "Nevada Do Not Sell" in the subject line.

7. Your California Privacy Rights

If you are a California resident, California's Shine the Light law permits you to request and receive information about disclosure of certain of your Personal Data to other parties for their direct marketing purposes. To submit a Shine the Light request, contact us at [email protected].

California residents also have the right to make the following requests. You have the right not to receive discriminatory treatment by Whirlpool for exercising privacy rights, and we will not discriminate against you because you exercise any of these rights.

• Access / Disclosure — You can request that we disclose to you the categories of Personal Data we collected about you, the categories of sources from which we collected the Personal Data, the categories of Personal Data we sold or disclosed, our business or commercial purpose for collecting and selling your Personal Data, the categories of third parties with whom we shared your Personal Data, and the specific pieces of Personal Data we collected about you over the past 12 months.
• Deletion — You can request that we delete your Personal Data that we maintain about you as described in Section 7 above, subject to certain exceptions.
• Correction — You can request that we correct your Personal Data that we maintain about you.
• Opt-out — You can request to opt-out of the sale or sharing of your Personal Data by (1)clicking the Do Not Sell My Personal Information link available in the side menu of our Site, and (2) using our webform available at whirlpoolcorp.com/privacy or contacting us using the information in the Contact Us section, below. For purposes of this section, "sell" means the transfer of your Personal Data to a third party for monetary or other valuable consideration, and "sharing" means any disclosure of personal information (renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means) to third parties for cross-contextual behavioral advertising purposes, each subject to certain exceptions set forth in applicable California law. Whirlpool Corporation and Yummly — a part of the Whirlpool Corporation family of brands and Whirlpool Corporation subsidiary — are a common business for purposes of California law. Your opt-out of cookie-based tracking for certain advertising purposes is specific to the device, website, and browser you are using, and is deleted whenever you clear your browser's cache or cookies. Your opt-out of mobile app tracking is specific to the device you are using.

California residents can make an access or deletion request by contacting us using the information in the "Contact Us"" section of this Privacy Notice (below), by using the information in the Contact Us section, or by calling our parent company, Whirlpool, toll-free at 1-866-698-2538.

Where appropriate or required by law, we will take reasonable steps to verify your identity prior to responding to your requests. The verification steps may vary depending on the sensitivity of the Personal Data and whether you have an account with us. If you designate an authorized agent to make a request on your behalf please ensure the authorized agent is identified as your authorized agent. We may require written proof of the agent’s permission to make a request on your behalf, and we may need to verify your identity directly.

To view metrics on data subject requests made under the California Consumer Privacy Act that we have received, click here.

We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain Personal Data as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate customer requests. Employees and personnel should view our employee privacy notice, available with other Yummly employee policies.

We may collect California residents' Personal Data, like contact information, in connection with a financial incentive, such as a discount, special pricing or other promotional offer. Our offers and incentives generally reflect the value of the relationships that we have with the individuals who participate in these programs. Participation in these programs is voluntary and you may withdraw at any time by electing not to participate or contacting us using the information in the "Contact Us" section of this Privacy Notice.

We also want California residents to know the following regarding our data collection, use, and disclosure of Personal Data in the past twelve months:

• We collect and use the following categories of Personal Data for the business and commercial purposes described in this Privacy Notice: Identifiers; contact and payment information; characteristics of protected classifications under California or federal law (such as demographic information like age, gender, and disability); commercial information; internet or other electronic network activity information; geolocation data; audio, electronic or visual information; professional or employment information; education information; and inferences.
• We collect and use these categories of Personal Data for the business and commercial purposes described in Section 1 of this Privacy Notice.
• We collect these categories of Personal Data from the sources described in Section 1 of this Privacy Notice.
• We disclose each of these categories of Personal Data for our business and commercial purposes as described in this Privacy Notice to the categories of parties described in Section 4 of this Privacy Notice.
• We may "sell" or "share" (as defined under California law) the following categories of Personal Data based on our use of cookies and other tracking tools: Identifiers; commercial information; Internet or other electronic network activity; geolocation data; and inferences.

8. Interest-Based Advertising/Your Choices

As explained, we and certain third-party partners may place advertisements for our products and services on websites, apps, and platforms owned by others. We, our service providers, and other third parties may use cookies, pixels, tags, and other similar tracking technologies on your browser or device when you use our Services. We comply with the Digital Advertising Alliance (DAA) Self-Regulatory Principles for Online Behavioral Advertising. You can opt-out of certain interest-based advertising activities by visiting optout.aboutads.info, optout.privacyrights.info/, or optout.networkadvertising.org; to opt out for mobile apps, please visit aboutads.info/appchoices. You may also be able to configure your mobile device privacy or advertising settings to limit the collection or use of data for advertising via the "limit ad tracking" setting on an iOS device or "opt out of interest-based ads" on an Android device. Please note that even if you choose to remove your information (opt-out), you will still see advertisements while you're browsing online. However, the advertisements you see may be less relevant to you and your interests. Certain options you select and choices you make are browser, website and device specific. If you clear your cookies or your browser's cache, you will need to set your preferences again.

Do Not Track. Some web browsers may give you the ability to enable a "do not track" setting; however, our Services do not respond to "do not track" signals at this time.

9. Security

We employ administrative, physical and electronic measures designed to protect your information from unauthorized access; however, despite these efforts, no security measures are perfect or impenetrable and no method of data transmission can be guaranteed against any interception or other type of misuse.

If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us in accordance with the "Contact Us" section below.

10. Links to Other Sites

Our Services may contain links to other websites, apps, and platforms. If you click on an ad or another third party link, you will be directed to that third party's website, app, or platform. The fact that we link to a website or present a banner ad or other type of advertisement is not an endorsement, authorization or representation of our affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. We do not exercise control over third party websites. These other websites may place their own cookies or other files on your computer, collect data or solicit Personal Data from you. Other sites follow different rules regarding the use or disclosure of the Personal Data you submit to them. We encourage you to read the privacy policies or statements of the other websites you visit. This Privacy Notice does not address, and we are not responsible for, the privacy, information or other practices of any other parties.

11. Our Policy Toward Children

Our Service is not directed to children, and we do not seek or knowingly collect personally identifiable information from children under 16. We request that such individuals do not provide Personal Data through our Service.

12. Amendments and Updates

We may occasionally update this Privacy Notice. Please review the Effective Date at the top of this page to see when this Privacy Notice was last revised. If we make any material changes we will notify you as required by law, which may include by email (sent to the email address specified in your account) or by means of a notice on this website prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

Your use of the Services following these changes means that you accept the revised Privacy Notice.

If you have any questions about this Privacy Notice, please contact us via email at [email protected], call us toll-free at (866) 698-2538, or please write to us at the following address:

Data Management
Yummly, Inc.
883 E. San Carlos Ave.
San Carlos, CA 94070

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.