Intel Corporation Intel Privacy Notice changes — 20211203_rev01

199

#### [International Compliance]()

200

201

Intel is a global company with its headquarters in the United States. As such, we may transfer your personal information between the United States and our affiliates and subsidiaries in other countries. We may also transfer your personal information to our third party service providers, who may be located in a different country to you. We may also transfer your personal information to our major data centers for processing in the following countries: Argentina, Austria, Brazil, Canada, China, Costa Rica, Denmark, Egypt, Finland, France, Germany, Hong Kong, India, Ireland, Israel, Italy, Japan, Malaysia, Mexico, Netherlands, Philippines, Poland, Romania, Russian Federation, Singapore, South Korea, Sweden, Switzerland, Taiwan, Turkey, United Kingdom, United States, United Arab Emirates, and Vietnam.

202

203

These countries may change from time to time and Intel can provide a current list upon written request. We transfer information in order to operate efficiently, to improve performance, and to create redundancies in order to protect information in the event of an outage or other problem. We will process your personal information in a way that meets the commitments of this Notice and complies with the law wherever we transfer it.

204

205

Whenever Intel transfers personal information beyond the country of origin, we will do so in accordance with applicable laws. For personal information originating in the European Economic Area (EEA) that is transferred to an Intel entity outside the EEA that does not have an "adequate level of protection" as determined by the European Commission, it does so on the basis of its approved binding corporate rules known as the Intel Corporate Privacy Rules ("Intel's ICPR"). Intel's ICPRs establish adequate protection of personal information and are legally binding on the subsidiaries and affiliates identified in Intel's Deed Poll. Intel's ICPR can be accessed [here](https://intel.com/content/www/us/en/privacy/corporate-privacy-rules-deed-poll.html). Where Intel's ICPR do not apply, we rely on other lawful measures, such as contracts that include the EU standard contractual clauses. You can review the EU Standard Contractual Clauses on the European Commission's website [here](https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en).

205

Whenever Intel transfers personal information beyond the country of origin, we will do so in accordance with applicable laws. For personal information originating in the European Economic Area (EEA) that is transferred to an Intel entity outside the EEA that does not have an "adequate level of protection" as determined by the European Commission, it does so on the basis of its EEA Binding Corporate Rules ("EEA BCRs"). Intel's EEA BCRs establish adequate protection of personal information and are legally binding on the subsidiaries and affiliates identified in Appendix 1 to the EEA BCRs. Intel's EEA BCRs can be accessed [here](https://intel.com/content/www/us/en/privacy/eea-binding-corporate-rules.html). Where Intel's EEA BCRs do not apply, we rely on other lawful measures, such as contracts that include the EU standard contractual clauses.

206

207

Likewise, for personal information originating in the United Kingdom (UK) that is transferred to an Intel entity outside of the UK that does not have an "adequate level of protection" as determined by the competent UK authorities, it does so on the basis of its UK binding corporate rules known as Intel's UK Binding Corporate Rules ("UK BCRs"). Intel's UK BCRs establish adequate protection of personal information and are legally binding on the subsidiaries and affiliates identified in Appendix 1 to the UK BCRs. Intel's UK BCRs can be accessed [here](https://intel.com/content/www/us/en/privacy/uk-binding-corporate-rules.html). Where Intel's UK BCRs do not apply, we rely on other lawful measures, such as standard contractual clauses, to provide appropriate safeguards for the personal information we transfer.

208

207

209

#### [Retention]()

208

210

209

211

We retain personal information for the period necessary to: Provide requested Intel® Services, as needed to comply with legal obligations (e.g. maintaining opt-out lists to fulfill advertising and marketing choices or to comply mandatory record retention or legal hold requirements), as agreed in an individual consent, to resolve disputes, and to otherwise fulfill the purposes, rights and obligations outlined in this Privacy Notice. Retention periods can vary significantly based on the type of information and how it is used and our retention periods are based on criteria that include legally mandated retention periods, pending or potential litigation, our intellectual property or ownership rights, contract requirements, operational directives or needs, and historical archiving. When personal information is removed from our systems, it will be deleted or destroyed using appropriate security protocols so that it cannot be reconstructed or read.

210

212

211

213

#### [Third Party Sites & Services]()

212

214

5	5
6	6	- [Safari](https://support.apple.com/downloads/safari)
7	7	- [Chrome](https://support.google.com/chrome/answer/95346)
8	8	- [Edge](https://www.microsoft.com/en-us/edge)
9	9	- [Firefox](https://www.mozilla.org/en-US/firefox/new/)
10	10
11		Last Revised: January 1, 2020
	11	Last Revised: November 19, 2021
12	12
13	13	## Privacy and Your Information
14	14
15	15	Intel's business brings technology to businesses, consumers, and society in a way that makes amazing experiences possible but doesn't come at the expense of your privacy. We believe in innovation and performance that supports your privacy rights and in technology designed with those rights in mind.
16	16
17	17	This Privacy Notice describes how we use your personal information and respect your privacy rights.
117	117	We work through our affiliates to provide some of the Intel Services. We also work with authorized suppliers and business partners. When we share your personal information with these companies, we put in place appropriate measures to limit the use of your information only for legal and authorized purposes that are consistent with this Privacy Notice, as well as appropriate confidentiality and security measures. For example, we rely on affiliates and partners, such as our resellers, to complete a purchase transaction or provide Intel Services, such as support, that you have requested.
118	118
119	119	We also share information with third parties for advertising and marketing; when required by law or to respond to legal process; to protect our customers; to protect lives; to maintain the security of Intel Services; and to protect our legal rights.
120	120
121	121	#### [With Affiliates and Subsidiaries]()
122	122
123		For purposes limited to and consistent with this Privacy Notice. A list of the Affiliates and Subsidiaries we share personal information with is set out in the Deed Poll to Intel's Corporate Privacy Rules available [here](https://intel.com/content/www/us/en/privacy/corporate-privacy-rules-deed-poll.html).
	123	For purposes limited to and consistent with this Privacy Notice. For more information, Intel's European Economic Area (EEA) Binding Corporate Rules (BCRs) can be accessed [here](https://intel.com/content/www/us/en/privacy/eea-binding-corporate-rules.html) and Intel's United Kingdom (UK) BCRs can be accessed [here](https://cqpreview.intel.com/content/www/us/en/privacy/uk-binding-corporate-rules.html).
124	124
125	125	#### [With Suppliers]()
126	126
127	127	Our authorized vendors and suppliers may require personal information to provide services we have contracted for, such as product delivery, website hosting, data analysis, IT services, auditing, payment processing or customer service. We use a wide variety of software and tools at Intel and we process personal information using these tools as a regular course of business. Our contracts with suppliers and vendors include provisions to protect your information and limit its use.
128	128
129	129	We also share non-personally identifiable information, such as anonymized or aggregated information, with suppliers for purposes such as analysis, identifying trends in the areas of our products and to help research and develop new Intel® Services.
199	199	#### [International Compliance]()
200	200
201	201	Intel is a global company with its headquarters in the United States. As such, we may transfer your personal information between the United States and our affiliates and subsidiaries in other countries. We may also transfer your personal information to our third party service providers, who may be located in a different country to you. We may also transfer your personal information to our major data centers for processing in the following countries: Argentina, Austria, Brazil, Canada, China, Costa Rica, Denmark, Egypt, Finland, France, Germany, Hong Kong, India, Ireland, Israel, Italy, Japan, Malaysia, Mexico, Netherlands, Philippines, Poland, Romania, Russian Federation, Singapore, South Korea, Sweden, Switzerland, Taiwan, Turkey, United Kingdom, United States, United Arab Emirates, and Vietnam.
202	202
203	203	These countries may change from time to time and Intel can provide a current list upon written request. We transfer information in order to operate efficiently, to improve performance, and to create redundancies in order to protect information in the event of an outage or other problem. We will process your personal information in a way that meets the commitments of this Notice and complies with the law wherever we transfer it.
204	204
205		Whenever Intel transfers personal information beyond the country of origin, we will do so in accordance with applicable laws. For personal information originating in the European Economic Area (EEA) that is transferred to an Intel entity outside the EEA that does not have an "adequate level of protection" as determined by the European Commission, it does so on the basis of its approved binding corporate rules known as the Intel Corporate Privacy Rules ("Intel's ICPR"). Intel's ICPRs establish adequate protection of personal information and are legally binding on the subsidiaries and affiliates identified in Intel's Deed Poll. Intel's ICPR can be accessed [here](https://intel.com/content/www/us/en/privacy/corporate-privacy-rules-deed-poll.html). Where Intel's ICPR do not apply, we rely on other lawful measures, such as contracts that include the EU standard contractual clauses. You can review the EU Standard Contractual Clauses on the European Commission's website [here](https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en).
	205	Whenever Intel transfers personal information beyond the country of origin, we will do so in accordance with applicable laws. For personal information originating in the European Economic Area (EEA) that is transferred to an Intel entity outside the EEA that does not have an "adequate level of protection" as determined by the European Commission, it does so on the basis of its EEA Binding Corporate Rules ("EEA BCRs"). Intel's EEA BCRs establish adequate protection of personal information and are legally binding on the subsidiaries and affiliates identified in Appendix 1 to the EEA BCRs. Intel's EEA BCRs can be accessed [here](https://intel.com/content/www/us/en/privacy/eea-binding-corporate-rules.html). Where Intel's EEA BCRs do not apply, we rely on other lawful measures, such as contracts that include the EU standard contractual clauses.
206	206
	207	Likewise, for personal information originating in the United Kingdom (UK) that is transferred to an Intel entity outside of the UK that does not have an "adequate level of protection" as determined by the competent UK authorities, it does so on the basis of its UK binding corporate rules known as Intel's UK Binding Corporate Rules ("UK BCRs"). Intel's UK BCRs establish adequate protection of personal information and are legally binding on the subsidiaries and affiliates identified in Appendix 1 to the UK BCRs. Intel's UK BCRs can be accessed [here](https://intel.com/content/www/us/en/privacy/uk-binding-corporate-rules.html). Where Intel's UK BCRs do not apply, we rely on other lawful measures, such as standard contractual clauses, to provide appropriate safeguards for the personal information we transfer.
	208
207	209	#### [Retention]()
208	210
209	211	We retain personal information for the period necessary to: Provide requested Intel® Services, as needed to comply with legal obligations (e.g. maintaining opt-out lists to fulfill advertising and marketing choices or to comply mandatory record retention or legal hold requirements), as agreed in an individual consent, to resolve disputes, and to otherwise fulfill the purposes, rights and obligations outlined in this Privacy Notice. Retention periods can vary significantly based on the type of information and how it is used and our retention periods are based on criteria that include legally mandated retention periods, pending or potential litigation, our intellectual property or ownership rights, contract requirements, operational directives or needs, and historical archiving. When personal information is removed from our systems, it will be deleted or destroyed using appropriate security protocols so that it cannot be reconstructed or read.
210	212
211	213	#### [Third Party Sites & Services]()
212	214

Intel Privacy Notice

Full text changes — 20210610_rev01 to 20211203_rev01