Privacy Notice DDB Worldwide Communications Group LLC: Privacy Notice Last updated: May 11, 2020 DDB Worldwide Communications Group LLC (“DDB”), the entity responsible for the processing of personal information collected through this website, respects your concerns about privacy. This Privacy Notice describes the types of personal information we collect about individuals on ddb.com (the “Site”), how we may use the information, with whom we may share it, and the choices available regarding our use of the information. The Privacy Notice also describes the measures we take to safeguard the personal information and how individuals can contact us about our privacy practices. If you are a California consumer and would like information about our online and offline privacy practices and your privacy rights, please see the section of this Privacy Notice called “California Consumer Privacy Statement”. Click on one of the links below to jump to the listed section: Information We Obtain Automated Collection of Data on the Site How We Use the Information We Obtain Third-Party Web Analytics Services Information Sharing Data Transfers Your Choices Other Online Services and Third-Party Features How We Protect Personal Information Retention of Personal Information Children’s Personal Information Updates to our Privacy Notice How to Contact Us California Consumer Privacy Statement Information We Obtain When you visit our Site, we may obtain personal information about you in various ways. The types of personal information we obtain include: Contact information, such as name, postal address, email address and telephone number; If you are seeking career opportunities with DDB via the Site, we request information such as name, postal address, email address, telephone number and Skype address, and you may also choose to submit your resume, cover letter and additional files; and Personal information contained in content you submit, such as through our “Contact” feature. Automated Collection of Data on the Site When you visit our Site, we may obtain certain information by automated means, such as cookies, web server logs, web beacons, and other technologies. “A “cookie” is a text file that websites send to a visitor’s computer or other Internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon,” also known as an Internet tag, pixel tag or clear GIF, links web pages to web servers and their cookies and may be used to transmit information collected through cookies back to a web server. The information we obtain in this manner may include your device IP address, identifiers associated with your devices, types of devices, web browser characteristics, device characteristics, language preferences, clickstream data, and dates and times of visits to the Site. These technologies help us (1) remember your information so you will not have to re-enter it; (2) track and understand how you use and interact with our Site; (3) tailor the Site around your preferences; (4) measure the usability of the Site; (5) understand the effectiveness of our communications; and (6) otherwise manage and enhance the Site. To the extent required by applicable law, we will obtain your consent before using certain cookies. Your browser may also tell you how to be notified when you receive certain types of cookies or how to restrict or disable certain types of cookies. Please note, however, that without cookies you may not be able to use all of the features of our Site. Our Site is not designed to respond to “do not track” signals received from browsers. To learn more about our use of cookies or to specify your preferences in this respect, please visit our cookie policy and cookie preferences centre. How We Use the Information We Obtain We may use the information we obtain on the Site to: Personalize your experience on the Site; provide our services; respond to your inquiries; market our services to you; manage career opportunities, including for recruitment purposes (such as processing job applications); operate, evaluate and improve our business (including developing new services; enhancing and improving our services; analyzing our services; managing our communications; performing data analytics; and performing accounting, auditing and other internal functions); protect against, identify and prevent fraud and other unlawful activity, claims and other liabilities; and comply with and enforce applicable legal requirements, relevant industry standards, contractual obligations and our policies, including this Privacy Notice and our Terms of Use. We use the information listed above to perform a contract with you, to take steps at your request prior to entering into a contract or on the basis of our legitimate interests (to market our services, perform data analytics and personalize our Site), which we can further describe to you upon request. Where required by applicable law, we may also collect your consent to the processing of your personal information. We may use the information we obtain in other ways for which we provide specific notice at the time of collection. Third-Party Web Analytics Services Subject to your preferences, we may use third-party analytics services on our Site, such as Google Analytics, HotJar and ShareThis. The service providers that administer these services use automated technologies to collect data (such as email and IP addresses) to evaluate use of our Site. To learn more about Google Analytics, Hotjar and ShareThis and specify your preferences, please visit our cookie policy and cookie preferences centre. You can also read these third parties’ privacy policies at: Google Hotjar ShareThis Information Sharing We do not disclose personal information we obtain about you, except as described in this Privacy Notice. We may share your personal information with our (1) subsidiaries and affiliates and (2) service providers who perform services on our behalf, such as the data analytics service providers listed above, for the purposes described in this Privacy Notice. We do not authorize our service providers to use or disclose the information except as necessary to perform services on our behalf or comply with legal requirements. We also may disclose information about you (1) if we are required to do so by law or legal process (such as a court order or subpoena); (2) in response to requests by government agencies, such as law enforcement authorities; (3) to establish, exercise or defend our legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (5) in connection with an investigation of suspected or actual illegal activity; (6) in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution or liquidation) or (7) otherwise with your consent. Data Transfers We may transfer the personal information we collect about you to recipients in countries other than the country in which the information originally was collected, including the U.S. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to recipients in other countries (such as the U.S.), we will protect that information as described in this Privacy Notice and will comply with applicable legal requirements providing adequate protection for the transfer of personal information to recipients in countries other than the one in which you provided the information. DDB Worldwide Communications Group LLC and its affiliates TLP, Inc. (d/b/a Tracy Locke), Interbrand Corporation and Adam&Eve Inc. are certified under the EU-U.S. and Swiss-U.S. Privacy Shield frameworks developed by the U.S. Department of Commerce, and the European Commission and Swiss Federal Data Protection and Information Commissioner, respectively. Click here to view our EU/Swiss-U.S. Privacy Shield Privacy Policy. We no longer rely on the EU-U.S. Privacy Shield to transfer personal information to the U.S. Your Choices We offer you certain choices in connection with the personal information we obtain about you. Subject to applicable law, you have the right to (1) request access to and rectification or erasure of the personal information we maintain about you, (2) request the restriction of our use of this information, (3) object to that processing on grounds relating to your particular situation, and in any event, to the processing of your personal information for direct marketing purposes, and (4) where you have consented to the processing of your personal information, withdraw your consent at any time. Subject to applicable law, you also have the right to receive, in a structured, commonly used and machine-readable format, the personal information that you have provided to us with your consent or based on a contract to which you are party, as well as the right to have this information transmitted to another data controller, where it is technically feasible. To update your preferences, update or correct your information, submit a request or exercise your rights, please contact us as specified in the How to Contact Us section of this U.S. Privacy Notice. If you are located in the EEA and are not satisfied with our responses, you may lodge a complaint with a data protection authority. Other Online Services and Third-Party Features Our Site may provide links to other online services and websites, and may include third-party features such as apps, tools, widgets and plug-ins (such as LinkedIn, Instagram, ShareThis or Twitter buttons). These online services, websites and third-party features may operate independently from us. The privacy practices of the relevant third parties, including details on the information they may collect about you, is subject to the privacy statements of these parties, which we strongly suggest you review. To the extent any linked online service, website or third-party features are not owned or controlled by us, DDB is not responsible for these third parties’ information practices. How We Protect Personal Information We maintain administrative, technical and physical safeguards designed to protect personal information we obtain through the Site against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. Retention of Personal Information To the extent permitted by applicable law, we retain personal information we obtain about you for the duration of our contractual relationship, plus a reasonable period to be able to run regular deletion routines, to take into account the applicable statute of limitations period or to comply with mandatory applicable law. Children’s Personal Information The Site is designed for a general audience and are not directed to children under the age of 16. The Site does not knowingly collect or solicit personal information from children under the age of 16. If we learn that we have collected personal information from a child under the age of 16, we will promptly delete that information. If you believe that a child under the age of 16 may have provided us with personal information, please contact us as specified in the How to Contact Us section of this U.S. Privacy Notice. Updates to Our U.S. Privacy Notice This Privacy Notice may be updated periodically to reflect changes in our personal information practices on the Site. We will post a notice on our Site to notify you of significant changes to our Privacy Notice and indicate at the top of the notice when it was most recently updated. How to Contact Us To update your preferences, update or correct your information, submit a request, exercise your rights or ask us questions about this Privacy Notice, please contact us by email at privacy@ddb.com or write to us at: Attn: General Counsel DDB Worldwide Communications Group LLC 195 Broadway 7th Floor New York, New York 10007 California Consumer Privacy Statement Last updated: May 11, 2020 This California Consumer Privacy Statement supplements the DDB Worldwide Communications Group LLC Privacy Notice and applies solely to California consumers. This section provides information about our online and offline privacy practices. This Statement does not apply to DDB personnel. This California Consumer Privacy Statement uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 and its implementing regulations (the “CCPA”). 1. Notice of Collection and Use of Personal Information We may collect (and may have collected during the 12-month period prior to the effective date of this Statement) the following categories of personal information about you: Identifiers: identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, internet protocol address, email address, account name, Social Security number, driver’s license number, passport number, and other similar identifiers Additional Data Subject to Cal. Civ. Code § 1798.80: signature, physical characteristics or description, state identification card number, insurance policy number, education, bank account number, credit card number, debit card number, and other financial information, medical information, and health insurance information Protected Classifications: characteristics of protected classifications under California or federal law, such as race, color, national origin, religion, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, disability, citizenship status, and military and veteran status Commercial Information: commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements Sensory Information: audio, electronic, visual, and similar information Employment Information: professional or employment-related information Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. We may use (and may have used during the 12-month period prior to the effective date of this Statement) the categories of personal information listed above for the purposes described in our Privacy Notice and for the following business purposes specified in the CCPA: Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytics services, or providing similar services Auditing related to a current interaction with you and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance Short-term, transient use, including, but not limited to, the contextual customization of ads shown as part of the same interaction Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity Debugging to identify and repair errors that impair existing intended functionality Undertaking internal research for technological development and demonstration Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us Managing career opportunities with DDB 2. Sources of Personal Information During the 12-month period prior to the effective date of this Statement, we may have obtained personal information about you from the following categories of sources: Directly from you, such as when you contact us with a question or comment From your devices, such as when you visit our Site Your family or friends, such as when they provide us with your contact information so we can send information that may interest you Our affiliates and subsidiaries Vendors who provide services on our behalf Social networks Government entities Online advertising companies Consumer data resellers 3. Sale of Personal Information We do not sell your personal information in exchange for monetary compensation. We may allow certain third parties (such as certain advertising partners) to collect your personal information via automated technologies on our Site in exchange for non-monetary consideration (such as an enhanced ability to serve you content and advertisements that may be of interest to you). You have the right to opt out of this disclosure of your information, as detailed below. During the 12-month period prior to the effective date of this California Consumer Privacy Statement, we may have sold the following categories of personal information to online advertising services and social networks: Identifiers, Online Activity, and Inferences. We do not have actual knowledge that we sell personal information of minors under 16 years of age. 4. Sharing of Personal Information During the 12-month period prior to the effective date of this Statement, we may have shared your personal information with certain categories of third parties, as described above in our Privacy Notice and as described below. We may have disclosed the following categories of personal information about you for a business purpose to the following categories of third parties: Category of Personal Information Category of Third Party Identifiers •Our affiliates and subsidiaries •Vendors who perform services on our behalf •Internet service providers •Data analytics providers •Government entities •Operating systems and platforms •Social networks Additional Data Subject to Cal. Civ. Code § 1798.80 Law •Our affiliates and subsidiaries •Vendors who perform services on our behalf •Internet service providers •Data analytics providers •Government entities •Operating systems and platforms •Social networks Protected Classifications •Our affiliates and subsidiaries •Vendors who perform services on our behalf •Government entities Commercial Information •Our affiliates and subsidiaries •Vendors who perform services on our behalf •Internet service providers •Data analytics providers •Government entities •Operating systems and platforms •Social networks Online Activity •Our affiliates and subsidiaries •Vendors who perform services on our behalf •Internet service providers •Data analytics providers •Government entities •Operating systems and platforms •Social networks Sensory Information •Our affiliates and subsidiaries •Vendors who perform services on our behalf •Internet service providers •Data analytics providers •Government entities •Operating systems and platforms •Social networks Employment Information •Our affiliates and subsidiaries •Vendors who perform services on our behalf •Internet service providers •Data analytics providers •Government entities •Operating systems and platforms •Social networks Inferences •Our affiliates and subsidiaries •Vendors who perform services on our behalf •Internet service providers •Data analytics providers •Government entities •Operating systems and platforms •Social networks 5. California Consumer Privacy Rights You may have certain choices regarding our use and disclosure of your personal information, as described below. Access: You may have the right to request, twice in a 12-month period, that we disclose to you the personal information we have collected, used, disclosed and sold about you during the past 12 months. Deletion: You may have the right to request that we delete certain personal information we have collected from you. Opt-Out of Sale: You may have the right to opt out of the sale of your personal information. How to Submit a Request: To submit an access or deletion request, click here or call us at 1-833-520-0506. To submit an opt-out of sale request, click here or email privacy@ddb.com. Verifying Requests: To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your request If you request access to or deletion of your personal information, we may require you to provide any of the following information: your email address, the name of the DDB representative with whom you typically interact, and the date of your last interaction with a DDB representative. In addition, if you ask us to provide you with specific pieces of personal information, we will require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request. If you designate an authorized agent to make an access, deletion or opt-out of sale request on your behalf (1) we may require you to provide the authorized agent written permission to do so, and (2) for access and deletion requests, we may require you to verify your own identity directly with us (as described above). Additional Information: If you choose to exercise any of your rights under the CCPA, you have the right to not receive discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request. This Statement is available in alternative formats upon request. Please contact privacy@ddb.com or 1-833-520-0506 to request this Statement in an alternative format. Inquiries info@ddb.com 1-212-415-2000 press@ddb.com jobs@ddb.com Company Work News About Us Offices Asia Pacific Europe Latina Middle East North America Careers Asia Pacific Europe Latina Middle East North America Privacy California Privacy Do Not Sell My Info © 2021 DDB Worldwide