=================================================================== --- 20201001_rev01 +++ 20201201_rev01 @@ -1,17 +1,18 @@ Privacy (2020) **Please click the following links to read our Privacy Policy in other languages:** **[Confidentialité](https://pcdn.sharethis.com/wp-content/uploads/2020/04/Privacy-Policy-3.30.20-French-v1.pdf) (Français), [Privacidad](https://pcdn.sharethis.com/wp-content/uploads/2020/04/Privacy-Policy-3.30.20-Spanish-v1.pdf) (Español), [Privacy](https://pcdn.sharethis.com/wp-content/uploads/2020/04/Privacy-Policy-3.30.20-Italian-v1.pdf) (Italiano), [Privacidade](https://pcdn.sharethis.com/wp-content/uploads/2020/04/Privacy-Policy-3.30.20-Portuguese-V1.pdf) (Português), [Datenschutz](https://pcdn.sharethis.com/wp-content/uploads/2020/04/Privacy-Policy-3.30.20-German-v1.pdf) (Deutsche), [プライバシー](https://pcdn.sharethis.com/wp-content/uploads/2020/04/Privacy-Policy-3.30.20-Japanese-V1.pdf) (日本語).** -### **Updated July 28, 2020** +### **Updated November 18, 2020** ShareThis takes privacy seriously. This Privacy Notice sets out what data we collect, how we collect it, why we process it, who we may share it with and, where the data we collect is personal data, your rights with respect to such personal data. ShareThis may change this Notice from time to time by updating this page. You should check this page from time to time to ensure that you are up to date with any changes. ShareThis is committed to processing information in accordance with applicable laws (including where applicable the European Union's General Data Protection Regulation ("**GDPR**") and the California Consumer Privacy Act ("CCPA") and as described in this Privacy Notice. For specific information about how ShareThis adheres to the GDPR and your rights as an EEA data subject please click **[here.]()** For information about how ShareThis adheres to the CCPA, please click **[here]().** To access information for Publishers, please visit the Publisher Information page [**here**](https://www.sharethis.com/publisher/)**.** +To access Publisher Terms of Use please click [here](https://sharethis.com/publisher-terms-of-use/). ### About ShareThis and its Tools ShareThis provides website operators ("Publishers") with customizable social sharing tools, which makes sharing online content simple. Any user of a website can easily share anything on the web with their friends on social sites, such as Facebook, Twitter, Email, Digg, Reddit and more through using one of our tools on that website ("**ShareThis Icon**"). ShareThis also collects data about internet users and how they interact with content, websites and adverts which enables ShareThis and our Publishers, advertisers, customers and data partners to facilitate the delivery of relevant, targeted advertising online to these groups. We also carry out analytics and provide insights to understand internet users' behaviour and improve the effectiveness of online content and advertising, based on such browsing, sharing, and what is considered to be the profile of that group. @@ -37,13 +38,13 @@ **1.1 Usage Data** We collect information about how _internet users_ browse the internet and interact with online content and advertisements through our ShareThis Icon, the ShareThis Publisher Applications and user interactions with advertisements on the internet. We call this "Usage Data". Usage Data includes: -- the unique IDs of the cookie(s) placed on your web browser (example: 37d387ca-f68a-11e5-b87d-0e58954c72b1) +- the unique IDs of the cookie(s) placed on your web browser (example: 37d387ca-f68a-11e5-b87d-0e58954c72b1) and/or a hashed version of an email address which help us recognize your browser or device over time. - Information about the user's browser and device - User agent string - Webpages viewed (including the URL addresses of such pages and search parameters, which may include search terms and key words) and the previous web pages that referred the user to that webpage - Time when webpages are viewed - Search queries from which users are directed to a webpage - Navigation from page to page @@ -62,17 +63,19 @@ We receive information about the content of the websites that you visit and information about the audience of those websites to enable us to infer and create groups of users who have similar characteristics, interests or behavioral patterns. We combine the Usage Data with data we receive from third party advertisers, analytics vendors and data partners to create categories of data that are helpful to advertisers seeking to deliver a more personalized advertising experience. For example, if a user regularly views or shares content about shopping for a car, our systems may infer that this user may be interested in purchasing an automobile. This practice is sometimes referred to as interest based advertising, and a segment titled "interested in automobile" is sometimes referred to as an audience segment or a "profile." When we group this data into profiles, we refer to it as **"Profile Information".** We can infer this Profile Information (by reference to browser identifiers, not actual names) using the information we obtain from third parties about the likely content and characteristics of the users and audiences of the websites which are visited. For example, users of a particular website may have an interest in cars and typically be within a certain age or income range. Where we are able to infer that two or more browsers or devices are the same user or household, we may use that information to bolster our Profile Information. The characteristics by which we group users relate to age ranges, income ranges, education, gender, ethnicity and family composition, on the basis of the typical audience of websites they visit and content viewed. +In certain cases where Publishers that we work with utilize the "Google Analytics By ShareThis WordPress" plug-in on their websites, ShareThis uses a Google Analytics feature currently known as Google Analytics Demographics, in order to better understand the audience demographics of those Publisher websites, and to provide insights about those demographics to the Publishers that own or operate those websites. Where Google Analytics Demographics is enabled, certain Usage Data and Profile Information will be shared with Google so that we may provide demographic reporting features to those Publishers. To learn more about Google Analytics' privacy practices, please click [here](https://support.google.com/analytics/answer/6004245). To opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, please click [here](https://tools.google.com/dlpage/gaoptout), or you may also visit the [NAI consumer choice page](https://optout.networkadvertising.org/). + If you would like to see a list of the types of Profile Information used by ShareThis, including any Profile Information that is health or political in nature (U.S. only), please [click here.](https://sharethis.com/privacy-audiences/) ShareThis does not create Profile Information based upon visits to adult entertainment websites. **1.3 How we obtain Usage Data and Profile Information** -We collect Usage Data when your device visits our website, uses or interacts with our services (including sharing content with the ShareThis Icon), when your device visits Publishers' websites that use ShareThis Publisher Applications, and when your device views or clicks advertisements that we serve or are served on our behalf. We do so by using cookies placed on your browser, pixel tags, and HTTP headers (or other communication protocols). +We collect Usage Data when your device visits our website, uses or interacts with our services (including sharing content with the ShareThis Icon), when your device visits Publishers' websites that use ShareThis Publisher Applications, and when your device views or clicks advertisements that we serve or are served on our behalf. We do so by using cookies placed on your browser, pixel tags, and HTTP headers (or other communication protocols) and the use of hashed email address.. _Our use of Cookies and other Tracking Technologies_ **Web Environment:** (desktop, tablet, and smartphone browsers) ShareThis uses browser cookies to "tag" visitors on the websites that use ShareThis Publisher Applications. These users are given a technical identifier, such as C62414AY9324FB5671069928026P0067. @@ -84,12 +87,14 @@

Cookie	Duration	Purpose
_stid	1 year	ShareThis cookie ID
_stidv	10 years	ShareThis cookie ID version
wordpress_test_cookie	Session	ShareThis cookie, tests if we have access to cookies
pubconsent	13 months	ShareThis cookie set to indicate user has made a declaration about GDPR data collection for IAB TCF v1 format
st_optout	10 years	ShareThis cookie set to indicate that user has opted out from data collection
_ga	2 years	Google Analytics cookie used by ShareThis to distinguish users
_gat	1 day	Google Analytics cookie used by ShareThis to throttle request rate
_gid	1 day	Google Analytics cookie used by ShareThis to distinguish users
visopt_s	3 months	VWO cookie to see the number of times the browser was closed and reopened
_vis_opt_test_cookie	Session	VWO session cookie to see if the cookies are enabled on the browser of the user or not. Helps in tracking the number of browser sessions of a visitor.
_vwo_uuid_v2	1 Year	VWO cookie calculates uniques traffic on a website
intercom-id-fe2c9dmj	10 months	Intercom: Anonymous visitor identifier cookie for site visitors
intercom-session-fe2c9dmj	7 days	Intercom: Identifer for each unique browser session. Session cookie is refreshed on each successful logged-in ping, extending it to 1 week from that moment. User can access their conversations and have data communicated on logged out pages for 1 week, as long as the session isn't intentionally terminated with 'Intercom ('shutdown'), which usually happens on logout.
pxcelBcnLcy	session	ShareThis Tag Management System cookie to track latency on reporting beacon.
pxcelAcc3PC	1 day	ShareThis Tag Management System cookie to check whether third party cookies are accepted by the browser. This is only set if there is no incoming cookie in the request.
pxcelPage_c010 and/or pxcelPage_c010_B and/or pxcelPage_c010_C and/or pxcelPage_c010_D	1 year	ShareThis Tag Management System cookie to track status of pixel rotation loading. ShareThis uses a different cookie for different groups of sites within the ShareThis network.
usprivacy	n/a	ShareThis reads if the usprivacy cookie is present in the publisher domain
fpestid	13 months	Fpestid is a ShareThis cookie ID set in the domain of the website operator

**Pixel tags:** These are small blocks of code on a webpage which read and place cookies. When you visit a webpage, ShareThis' pixel will see if your browser has a ShareThis cookie installed on it. If it doesn't, the pixel will install the cookie. If it does, the pixel will "read" the cookie and will send us information such as the time you viewed a webpage, the type of browser used and your IP address. This is how we learn about your interests and enable our customers to deliver targeted advertising to you. **HTTP headers:** These are transmitted whenever a webpage is viewed, and contain technical information required to connect your browser to the webpage. This information may include information about the browser and the requested webpage. ShareThis collects this information. +**Hashed emails:** Hashing an email is a cryptographic function. Hashing is a way of encrypting a piece of data, like an email address, into a hexadecimal string. By doing this, each email address becomes an unrecognizable jumble of numbers and letters. This technique doesn't allow us to send you an email message or to identify who you are. However, it does allow us to recognize your browser or device in the same way that cookies help us to recognize your browser or device. ShareThis may obtain hashed emails from our advertising partners to help provide our products and services. We may also receive and hash emails you provide to our Publishers. + **Other Environments:** (Mobile applications) To serve ads in mobile applications identifiers may be used, such as Google Advertising ID or Apple IDFA, depending on the operating system of your mobile device. The advertiser identifier identifies your device but not you directly and can be reset by you. See your device manufacturer for more information or visit NAI Mobile opt-out page at [https://www.networkadvertising.org/mobile-choice/](https://www.networkadvertising.org/mobile-choice). **Linking Environments**: (browsers and mobile apps used) @@ -140,75 +145,75 @@ There are a number of "general" reasons that ShareThis may process data on our systems. Many of them are required by applicable law and/or to help us ensure that the Internet remains a safe space. Some of them enable us to promote and grow our business. If you'd like additional information, please email privacy@sharethis.com. We may also process data for the following purposes: a) as required by applicable law; b) to cooperate with competent legal authorities such as data protection regulators, the police and the FBI; c) to enforce our terms and conditions, including by obtaining advice and conducting legal proceedings; d) to protect our operations, property and interests, and those of third parties; e) to sell and promote the sale of our business and/or assets. Finally, ShareThis may transfer information to a successor entity in connection with a corporate merger, consolidation, sale of assets, bankruptcy, or other corporate change. If ShareThis is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your information, as well as any choices you may have regarding your information. -### The GDPR and Your Rights as an EU Data Subject +### The GDPR, the LGPD, and Your Rights as an EU or Brazil Data Subject -If you are located in the European Economic Area (EEA), the General Data Protection Regulation (GDPR) applies to our processing of personal data. The GDPR grants those located in the EEA a set of clear privacy rights and imposes responsibilities on ShareThis as we process the personal data of data subjects located in the EEA. The ShareThis privacy policy outlines how and why ShareThis processes personal data. This EU privacy section is designed to provide more information on how ShareThis adheres to the GDPR and your rights as a data subject located in the EEA. +If you are located in the European Economic Area (EEA), the General Data Protection Regulation (GDPR) applies to our processing of personal data. If you are located in Brazil, then the Brazilian GeneralLaw for the Protection of Personal Data (LGPD) applies to our processing of personal data. The GDPR and LGPD each grant those located respectively in the EEA and Brazil a set of clear privacy rights and imposes responsibilities on ShareThis as we process the personal data of data subjects located in those places. The ShareThis privacy policy outlines how and why ShareThis processes personal data. This section is designed to provide more information on how ShareThis adheres to the GDPR and LGPD and your rights as a data subject located in Brazil or the EEA. Additional Information **Definition of Personal Data** -The GDPR defines personal data broadly. As such, where Usage Data and/or Profile Information relates to an individual in the EEA, we treat it as personal data and comply with the GDPR when processing such data. Similarly, nearly all of the data collected from EU data subjects in the context of our normal business operations is likely to be considered personal data. This includes: a) data collected via visits to ShareThis.com; b) data collected from Customers, Publishers and business partners; and c) data collected from employees and prospective employees. +Both the GDPR and LGPD define personal data broadly. As such, where Usage Data and/or Profile Information relates to an individual in the EEA or Brazil, we treat it as personal data. Similarly, nearly all of the data collected from EU and Brazil data subjects in the context of our normal business operations is likely to be considered personal data. This includes: a) data collected via visits to ShareThis.com; b) data collected from Customers, Publishers and business partners; and c) data collected from employees and prospective employees. **Special Categories of Personal Data** -ShareThis does not collect nor process any special categories of personal data with respect to EU data subjects, and we do not create Profile Information of audience segments of EU consumers based on special categories of personal data (i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health, or data concerning a natural person's sex life or sexual orientation). +ShareThis does not collect nor process any special categories of personal data with respect to Brazil or EU data subjects, and we do not create Profile Information of audience segments of such consumers based on special categories of personal data (i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health, or data concerning a natural person's sex life or sexual orientation). **Legal Basis for Processing** -The GDPR requires entities seeking to process EU personal data to have a valid legal basis for doing so. The legal basis utilized by ShareThis include: a) consent; b) legitimate interest (i.e., where we believe that our need to process the data and/or the value we deliver by processing such data is not outweighed by the rights of the data subject); c) where necessary for the performance of a contract; and d) where processing is necessary to comply with our legal obligations. We will endeavor to outline our legal basis for the most common types of processing conducted by ShareThis. +Both the LGPD and GDPR requires entities seeking to process personal data to have a valid legal basis for doing so. The legal basis utilized by ShareThis include: a) consent; b) legitimate interest (i.e., where we believe that our need to process the data and/or the value we deliver by processing such data is not outweighed by the rights of the data subject); c) where necessary for the performance of a contract; and d) where processing is necessary to comply with our legal obligations. We will endeavor to outline our legal basis for the most common types of processing conducted by ShareThis. -_Cookie and Similar Tracking Technologies_ - We endeavor to obtain consent for our placement of cookies, pixels and similar tracking technologies as required under the ePrivacy Directive as implemented throughout the EEA. As ShareThis does not have direct relationships with Internet users in many cases, we ask Publishers and other partners to obtain a consent on our behalf as described below. Where we directly place cookies (e.g., via ShareThis.com) we directly obtain the consent from data subjects we've identified as being from the EEA. +_Cookie and Similar Tracking Technologies_ - We endeavor to obtain consent for our placement of cookies, pixels and similar tracking technologies as required under the ePrivacy Directive as implemented throughout the EEA. As ShareThis does not have direct relationships with Internet users in many cases, we ask Publishers and other partners to obtain a consent on our behalf as described below. Where we directly place cookies (e.g., via ShareThis.com) we directly obtain the consent from data subjects we've identified as being from the EEA or other place where consent is required. _Usage Data and Profile Information_ - While we obtain a consent for our placement of cookies as described above, ShareThis processes Usage Data and Profile Information under our legitimate interest. For purposes of clarity, where this data is utilized for analytics, targeted advertising, measurement or reporting, we also process it via legitimate interest. To offer additional transparency, we endeavor to mention some of these use cases in the consents obtained for cookies and pixels. _Website Data_ - We collect personal data via ShareThis.com. Where that data is provided to ShareThis (e.g., via completing an online form), we consider it either Account Data and/or data collected pursuant to a Business Relationship which are described below. Where we place cookies via the website, we use consent. Where data is collected automatically (e.g., log files containing IP addresses), we process such data via our legitimate interest and in order to maintain the website and help us to a better job of personalizing the website to the interests of visitors. -_Account Data and Business Relationships_ - We require some Publishers to setup an Account with ShareThis. Similarly, we maintain accounts containing personal data with most of the vendors who provide services to ShareThis, our Customers, our employees and our business partners. If you are an employee of one of those entities, ShareThis may have your personal data including your name, your work email or your work telephone number. For data subjects located in the EEA, we process this data under the legal basis of contractual necessity. In other words, we need to process this data in order to honor the terms of the contract between ShareThis and the Publisher, Customer, vendor, Etc. This includes maintaining an account and login credentials, billing and payment purposes, communicating with the other party, and fulfilling requests. Where we are seeking to market additional products and services to these entities, we will do so via legitimate interest unless applicable law dictates that we use consent (e.g., for email marketing). +_Account Data and Business Relationships_ - We require some Publishers to setup an Account with ShareThis. Similarly, we maintain accounts containing personal data with most of the vendors who provide services to ShareThis, our Customers, our employees and our business partners. If you are an employee of one of those entities, ShareThis may have your personal data including your name, your work email or your work telephone number. For data subjects located in the EEA or Brazil, we process this data under the legal basis of contractual necessity. In other words, we need to process this data in order to honor the terms of the contract between ShareThis and the Publisher, Customer, vendor, Etc. This includes maintaining an account and login credentials, billing and payment purposes, communicating with the other party, and fulfilling requests. Where we are seeking to market additional products and services to these entities, we will do so via legitimate interest unless applicable law dictates that we use consent (e.g., for email marketing). _General Purposes_ - There are a number of instances where ShareThis processes personal data which are distinct from the descriptions provided above. For example: Legal and Regulatory Compliance - Like most companies, ShareThis will process data in order to comply with law, cooperate with requests from competent legal authorities such as the police, and to pay taxes. The legal basis for this type of processing is necessary for ShareThis to meet our legal and regulatory obligations. Enforcement of legal obligations - To enforce our terms and conditions, protect of our intellectual property and/or the rights of third parties, ShareThis processes personal data in these instances via our legitimate interest. This may include obtaining advice and conducting legal proceedings. Sell and Promote our Business - ShareThis may choose to conduct, evaluate and/or promote the sale of our business via our legitimate interest. -_Aggregated Data_ - Where we aggregate data and remove digital identifiers (e.g., cookie IDs), we may use this data for internal research, marketing, and statistical analysis purposes. Please note that this type of de-identified data is not restricted by the GDPR. +_Aggregated Data_ - Where we aggregate data and remove digital identifiers (e.g., cookie IDs), we may use this data for internal research, marketing, and statistical analysis purposes. **Data Controller** -ShareThis is generally a Controller of data with respect to the data processed as described above. Where the GDPR applies to Usage Data and Profile Information and we share this data with our Customers, our Customers are independent controllers in relation to their processing of such data and they process it in accordance with their own privacy policies. ShareThis is also the controller of the data it collects via ShareThis.com. +ShareThis is generally a Controller of data with respect to the data processed as described above. Where the GDPR or LGPD applies to Usage Data and Profile Information and we share this data with our Customers, our Customers are independent controllers in relation to their processing of such data and they process it in accordance with their own privacy policies. ShareThis is also the controller of the data it collects via ShareThis.com. **Data Processors** ShareThis also has a number of agents and service providers who operate as processors of data on ShareThis' behalf. This agents and service providers are only able to use the data as specifically directed by ShareThis and only to provide the services requested by us. They are also contractually obligated to process the data securely and under confidentiality obligations. -**EU Data Subject Rights** +Brazil and **EU Data Subject Rights** -Where the GDPR applies, EU data subjects have the following rights, including: a) The right to be informed about the types of data being processed and the legal basis for processing; b) the right to access and see the data being processed; c) the right of rectification, to make corrections to data subject to processing; d) the right to erase data; e) the right to restrict processing of data; f) the right of data portability; g) the right to object to the processing of data and f) the right not to be subject to automated decision-making. Some of these rights apply only in certain circumstances and depend on the legal basis relied upon to process the data. As an example, the right to object applies to processing which is carried out because it is necessary for our legitimate interests and only if we cannot demonstrate compelling legitimate grounds which outweigh your rights, interests and freedoms. The same right does not apply to processing which is necessary for us to comply with our legal obligations or to perform a contract with you. +Where the GDPR or LGPD applies, such data subjects have certain rights, including: a) The right to be informed about the types of data being processed and the legal basis for processing; b) the right to access and see the data being processed; c) the right of rectification, to make corrections to data subject to processing; d) the right to erase data; e) the right to restrict processing of data; f) the right of data portability; g) the right to object to the processing of data and f) the right not to be subject to automated decision-making. Some of these rights apply only in certain circumstances and depend on the legal basis relied upon to process the data. As an example, the right to object applies to processing which is carried out because it is necessary for our legitimate interests and only if we cannot demonstrate compelling legitimate grounds which outweigh your rights, interests and freedoms. The same right does not apply to processing which is necessary for us to comply with our legal obligations or to perform a contract with you. Given that both the LGPD and the GDPR defines personal data broadly, these rights may extend to the personal data we place into cookies or similar tracking technologies. -Where processing is based on your consent, in accordance with the GDPR, you may withdraw that consent at any time, although any processing previously carried out will still be legal. In order to exercise your data subjects' rights or if you have any questions about these rights, you can write to us at [privacy@sharethis.com](mailto:privacy@sharethis.com). We will endeavor to respond to any requests to exercise your rights within one month from when they are made, although this period may be extended in some cases in which case we will inform you before the expiration of the one month period. +Where processing is based on your consent, in accordance with the GDPR and LGPD (as applicable), you may withdraw that consent at any time, although any processing previously carried out will still be legal. In order to exercise your data subjects' rights or if you have any questions about these rights, you can write to us at [privacy@sharethis.com](mailto:privacy@sharethis.com). We will endeavor to respond to any requests to exercise your rights within one month from when they are made, although this period may be extended in some cases in which case we will inform you before the expiration of the one month period. You also have the right to submit complaints to the supervisory authority in your jurisdiction. A list of supervisory authorities in the EEA can be found here: [https://edpb.europa.eu/about-edpb/board/members\_en](https://edpb.europa.eu/about-edpb/board/members_en). -**How ShareThis interacts with our Publishers on GDPR compliance** +**How ShareThis interacts with our Publishers on GDPR and LGPD compliance** -If you are in the European Economic Area, you may be familiar with websites asking you to consent to the use of cookies and similar technologies. Where the ShareThis Applications are used to process personal data from EU data subjects, our Publishers are required to notify you about the use of the ShareThis Applications, mention ShareThis as a third party who processes your personal data and ask you to consent to such processing as well as the placement of cookies. +If you are in the European Economic Area, you may be familiar with websites asking you to consent to the use of cookies and similar technologies. If you are in Brazil, you may see similar consent notices which pertain to the LGPD. Where the ShareThis Applications are used to process personal data from data subjects in places where a notice and/or consent is required, our Publishers are required to notify you about the use of the ShareThis Applications, mention ShareThis as a third party who processes your personal data and ask you to consent to such processing as well as the placement of cookies. -_Cross-border transfers of EU personal data_ +_Cross-border transfers of EU or Brazil personal data_ -We generally process data in the United States. When we share data, we provide data to companies both inside and outside the EU and the US. In each case, we have safeguards in place which allow those transfers to happen in a way that ensures data is handled in accordance with the applicable law. +We generally process data in the United States. When we share data, we provide data to companies globally. In each case, we have safeguards in place which allow those transfers to happen in a way that ensures data is handled in accordance with the applicable law. -When we transfer personal data outside the EEA, unless the recipient or location to which the data is transferred has been approved by the European Commission as providing an adequate level of protection for personal data, we put in place measures to ensure that the transfer complies with the GDPR and that the personal data which is transferred is appropriately safeguarded. +When we transfer personal data outside the EEA or Brazil, unless the recipient or location to which the data is transferred has been approved by the appropriate authorities as providing an adequate level of protection for personal data, we put in place measures to ensure that the transfer complies with the applicable data protection law and that the personal data which is transferred is appropriately safeguarded. -When we transfer data to the United States, we put in place EU standard contractual clauses with the recipient unless the recipient is self-certified under the EU-U.S. Privacy Shield. For more information about our responsibilities under Privacy Shield, please visit the "Privacy Shield" section of the ShareThis privacy policy. More information about international data transfers under the GDPR can be found at [https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection\_en](https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_en). If requested, we may make available a copy of such safeguards, as required by the GDPR. +When we enter into business relationships which involves the transfer of EU personal data to the United States, we put in place reasonable transfer mechanisms such as the EU standard contractual clauses with the recipient. More information about international data transfers under the GDPR can be found at [https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection\_en](https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_en). If requested, we may make available a copy of such safeguards, as required by the GDPR. _Data Protection Officer and Representative_ ShareThis has appointed a data protection officer to supervise our personal data processing-related activities, and to respond to requests as required. Our DPO can be contacted as follows: Vincent Potier (ShareThis DPO): [dpo@sharethis.com](mailto:dpo@sharethis.com) ShareThis' representative in the EU is: ShareThis UK Limited of 10 John Street, London WC1N 2EB, UK. @@ -275,12 +280,14 @@ LiveRamp: [https://liveramp.com/privacy/](https://liveramp.com/privacy/) AppNexus: [https://www.appnexus.com/platform-privacy-policy](https://www.appnexus.com/platform-privacy-policy) Eyeota : [https://www.eyeota.com/privacy-policy](https://www.eyeota.com/privacy-policy) Oracle: [https://www.oracle.com/legal/privacy/privacy-policy.html](https://www.oracle.com/legal/privacy/privacy-policy.html) Lotame: [https://www.lotame.com/about-lotame/privacy/](https://www.lotame.com/about-lotame/privacy/) Nielsen: [https://www.nielsen.com/ssa/en/legal/privacy-policy/](https://www.nielsen.com/ssa/en/legal/privacy-policy/) +Retargetly: [https://retargetly.com/privacy-policy](https://retargetly.com/privacy-policy) +1plusX: [https://www.1plusx.com/privacy-policy/](https://www.1plusx.com/privacy-policy/) **2\. Other third party agents and service providers** We share the data described in this Privacy Notice trusted agents with data storage and processing facilities such as Amazon Web Services who are required under contract to only process data according to our written instructions and we require them to use data only for the purposes of providing services to us and to implement security controls and to maintain the confidentiality of that information. Here are the categories of service providers utilized by ShareThis: - Cloud data storage providers such as Amazon Web Services; @@ -338,13 +345,13 @@ ShareThis, Inc. is committed to protecting data and enabling individual privacy rights in every location we do business. Therefore, we comply with the GDPR and the EU-US and Swiss-US Privacy Shield Frameworks. In accordance with the GDPR, which is designed to empower and protect the data privacy rights of EU individuals, ShareThis makes available user consent tools (ShareThis is a registered CMP with the IAB Transparency and Consent Framework), as well as facilitating user data rights outlined throughout this notice. ### User Choices and Opt-out Rights -If you do not want to receive advertisements based on Usage Data and Profile Information collected by ShareThis on your current browser, you can change and manage your preferences in relation to the collection and processing of Usage Data and Profile Information by clicking the ShareThis opt-out button available on this privacy policy. When California data subjects opt-out, ShareThis will stop transferring data about their browser or device to third parties but does not otherwise treat those users differently. +If you do not want to receive advertisements based on Usage Data and Profile Information collected by ShareThis on your current browser, you can change and manage your preferences in relation to the collection and processing of Usage Data and Profile Information by clicking the ShareThis opt-out button available on this privacy policy. When data subjects opt-out, ShareThis will stop transferring data about their browser or device to third parties but does not otherwise treat those users differently. If you do not want to receive ads based on Usage Data collected by ShareThis whatever device or browser used, you must opt-out from our services for each device and each internet web browser. **Click below to "Limit Ad-Tracking" function on mobile devices:** Instructions by Google for most Androids: [Google Play Help](https://support.google.com/googleplay/answer/3405269) @@ -416,13 +423,13 @@ The Federal Trade Commission has investigation and enforcement authority over our compliance with the Privacy Shield. If you believe we have not respected your rights or otherwise not handled data correctly, then we encourage you to contact us directly and we will do everything possible to help. However, where you still have a complaint, then you have the right to raise the matter with the Supervisory Authority (or data protection agency) in your country for resolution. -**Last Updated: July 28, 2020** +**Last Updated: November 18, 2020** **Contact** ShareThis, Inc. 3000 El Camino Real 5 Palo Alto Square, Suite 150 Palo Alto, CA 94306, USA

ShareThis Privacy Notice

Full text changes — 20201001_rev01 to 20201201_rev01