Xerox Xerox Privacy Policy changes — 20201127_rev01

73

Personal data collected by Xerox may be transferred to, stored and processed in your region, the United States, or any other country in which Xerox or its subsidiaries, affiliates, sub-contractors, agents or partners maintain facilities. Our subsidiaries, affiliates, sub-contractors, agents and partners are required by contract to safeguard any personal data they receive from us and are prohibited from using the personal data for any purpose other than to perform the services as instructed by Xerox. We also take steps to provide adequate protection for any transfers of your personal data in accordance with applicable law.

74

75

Our privacy guidelines are communicated to Xerox employees on an annual basis as part of our mandatory training program. We take steps to ensure that the data we collect under this privacy statement is processed according to the provisions of this statement and the requirements of applicable law wherever the data is located. Sometimes we transfer personal data from the European Economic Area and Switzerland to other countries. When we do, we use a variety of legal mechanisms, including Standard Contractual Clauses, to help ensure any required rights and protections apply to your data.

76

77

## Video Links

78

79

Clicking on videos on Xerox.com may (1) take you to a third party's site to play the video, or (2) play the video on Xerox.com and this functionality may be supported by a third party's site or technology (e.g., [YouTube](https://www.youtube.com/static) or another third party site). In any such case, by playing the video you may become subject to the third party's terms and conditions, including, but not limited to, its terms of service and policies on privacy and collection and use of your information.

79

Clicking on videos on Xerox.com may (1) take you to a third party's site to play the video, or (2) play the video on Xerox.com and this functionality may be supported by a third party's site or technology (e.g., [YouTube](https://www.youtube.com/static), [YouTube API](https://www.youtube.com/t/terms), or another third party site). In any such case, by playing the video you may become subject to the third party's terms and conditions, including, but not limited to, its terms of service and policies on privacy and collection and use of your information.

80

[https://www.youtube.com/t/terms](https://www.youtube.com/t/terms)

80

81

82

## EU-U.S. Privacy Shield

82

83

84

Xerox Corporation complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework established by the U.S. Department of Commerce regarding the collection, use and retention of personal data transferred from the European Union and Switzerland to the United States. Xerox Corporation has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If third-party agents process personal data on our behalf in a manner inconsistent with the Privacy Shield Principles, we remain liable unless we prove we are not responsible for the event giving rise to the damage. If there is any conflict between the terms in this privacy statement and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit [www.privacyshield.gov](https://www.privacyshield.gov/).

84

85

86

In compliance with the Privacy Shield Principles, Xerox commits to resolve complaints about our collection or use of your personal data. European Union or Swiss individuals with inquiries or complaints regarding this privacy statement should first contact Xerox at: [privacy@xerox.com](mailto:privacy@xerox.com) and indicate "Privacy Shield" in the Subject line.

 Personal data collected by Xerox may be transferred to, stored and processed in your region, the United States, or any other country in which Xerox or its subsidiaries, affiliates, sub-contractors, agents or partners maintain facilities. Our subsidiaries, affiliates, sub-contractors, agents and partners are required by contract to safeguard any personal data they receive from us and are prohibited from using the personal data for any purpose other than to perform the services as instructed by Xerox. We also take steps to provide adequate protection for any transfers of your personal data in accordance with applicable law.
 Our privacy guidelines are communicated to Xerox employees on an annual basis as part of our mandatory training program. We take steps to ensure that the data we collect under this privacy statement is processed according to the provisions of this statement and the requirements of applicable law wherever the data is located. Sometimes we transfer personal data from the European Economic Area and Switzerland to other countries. When we do, we use a variety of legal mechanisms, including Standard Contractual Clauses, to help ensure any required rights and protections apply to your data.
 ## Video Links
+Clicking on videos on Xerox.com may (1) take you to a third party's site to play the video, or (2) play the video on Xerox.com and this functionality may be supported by a third party's site or technology (e.g., [YouTube](https://www.youtube.com/static) or another third party site). In any such case, by playing the video you may become subject to the third party's terms and conditions, including, but not limited to, its terms of service and policies on privacy and collection and use of your information.
+Clicking on videos on Xerox.com may (1) take you to a third party's site to play the video, or (2) play the video on Xerox.com and this functionality may be supported by a third party's site or technology (e.g., [YouTube](https://www.youtube.com/static), [YouTube API](https://www.youtube.com/t/terms), or another third party site). In any such case, by playing the video you may become subject to the third party's terms and conditions, including, but not limited to, its terms of service and policies on privacy and collection and use of your information.
+[https://www.youtube.com/t/terms](https://www.youtube.com/t/terms)
 ## EU-U.S. Privacy Shield
 Xerox Corporation complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework established by the U.S. Department of Commerce regarding the collection, use and retention of personal data transferred from the European Union and Switzerland to the United States. Xerox Corporation has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If third-party agents process personal data on our behalf in a manner inconsistent with the Privacy Shield Principles, we remain liable unless we prove we are not responsible for the event giving rise to the damage. If there is any conflict between the terms in this privacy statement and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit [www.privacyshield.gov](https://www.privacyshield.gov/).
 In compliance with the Privacy Shield Principles, Xerox commits to resolve complaints about our collection or use of your personal data. European Union or Swiss individuals with inquiries or complaints regarding this privacy statement should first contact Xerox at: [privacy@xerox.com](mailto:privacy@xerox.com) and indicate "Privacy Shield" in the Subject line.
 ## Communication Preferences
 Xerox may send commercial email to you advertising our products and services. You can also subscribe to various product and service-specific communications on our websites. If you receive commercial email from Xerox and wish to discontinue these mailings, you may unsubscribe at [www.xerox.com/unsubscribe](https://www.xerox.com/perl-bin/formeng.pl) or via an 'opt-out' provided in the communication. You may also mail an unsubscribe request to:
 Marketing Privacy Preferences
 Xerox Corporation
 Marketing Manager
 SW Canyon Creek Road,
 Building 63 MS 7063-630,
 Wilsonville, OR 97070
 This unsubscribe option does not apply to communications primarily for the purpose of administering order completion, contracts, support, product safety warnings, software updates, or other administrative and transactional notices, the primary purpose of which is not promotional in nature.
 Xerox commits to resolve complaints about your privacy and our collection or use of your personal data.
 - US & Canada Toll-Free Number: 1-866-XRX-0001
 - [Direct Dial Toll-Free Numbers Outside US & Canada](https://www.xerox.com/downloads/usa/en/h/HowtoContacttheXeroxEthicsHelpline.pdf) available at [www.xerox.com/ethics](https://www.xerox.com/en-us/about/corporate-citizenship/ethics)
 You may also contact us via postal mail at:
 Xerox Corporation
 Xerox Business Ethics and Compliance Office
 Merritt 7
 Norwalk, CT 06851-1056
 USA
 Xerox Limited is our representative for the European Economic Area and Switzerland:
 Xerox Limited, Riverview, Oxford Road, Uxbridge, UB8 1HS, UK

Xerox Privacy Policy

Full text changes — 20200804_rev01 to 20201127_rev01