This notice explains the personal data we collect to manage our business and our relationships with customers, visitors and event attendees.

This notice explains how we use cookies and similar technologies when you interact with us through our websites.

If you are a resident of the State of California, this notice explains your privacy rights and how you can exercise these rights.

This notice addresses the personal data we collect about candidates in connection with our employment recruiting efforts.

This notice addresses the information we collect and use in connection with our customers’ deployment of our products and services.

This disclosure explains the types of information collected by the Workspace ONE UEM offering from customers’ users and their devices.

Effective as of December 6, 2019

 

California Privacy Notice

This California Privacy Notice (the “Notice”) sets forth VMware, Inc. and its group of companies ("VMware", "we", "us" and "our") disclosure obligations under California law, including the California Consumer Privacy Act of 2018 (“CCPA”) and the California Civil Code section 1798.83. This Notice provides the additional details regarding the information defined as ‘personal information’ under applicable California law and related to a California resident or household (“Consumers” and “you”) further referred to as “Personal Information.” This Notice describes the categories of Personal Information VMware has collected, the categories of Personal Information VMware has disclosed, the categories of Personal Information VMware has sold (if any), and a description of the Consumer’s rights.

This Notice supplements VMware's Privacy Notices posted at www.vmware.com/help/privacy.html including the VMware Global Privacy Notice and the VMware Products & Services Notice.

This Notice does not cover the Personal Information we process as a ‘service provider’ in connection with your use of VMware’s products and services that have been deployed by one of our business customers, such as your organization. Our commitments as a service provider are set forth in the applicable agreement between VMware and your organization.

Categories of Personal Information Collected

VMware has collected the following categories of Personal Information in the preceding 12 months:

Category of Personal Information
(corresponds to categories listed in CCPA §1798.140(o)(1))
Examples
Category of Personal Information<br>(corresponds to categories listed in CCPA §1798.140(o)(1)) Category A: Identifiers
Examples Real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address or other similar identifiers.
Category of Personal Information<br>(corresponds to categories listed in CCPA §1798.140(o)(1)) Category B: Personal information listed in § 1798.80 of the California Customer Records statute
Examples A name, signature, address, telephone number, education, employment, billing and transactions information.
Category of Personal Information<br>(corresponds to categories listed in CCPA §1798.140(o)(1)) Category D: Commercial Information
Examples Records and history of products or services purchased or considered.
Category of Personal Information<br>(corresponds to categories listed in CCPA §1798.140(o)(1)) Category F: Internet or other electronic network activity information
Examples Interaction with our Web sites, applications, or advertisement.
Category of Personal Information<br>(corresponds to categories listed in CCPA §1798.140(o)(1)) Category G: Geolocation data
Examples Approximate physical location (derived from an Internet Protocol address)
Category of Personal Information<br>(corresponds to categories listed in CCPA §1798.140(o)(1)) Category I: Professional or employment-related information
Examples Job title, employer name.

Personal Information Sources

See the VMware Global Privacy Notice, Part I: What Information We Collect & How We Collect It, and the VMware Products & Services Notice, Part I: What Information We Collect & How We Collect It, listing the sources of Personal Information.

Purposes for Which Personal Information is Used

See the VMware Global Privacy Notice, Part II: How We Use the Information, and the VMware Products & Services Notice, Part II: How We Use the Information, setting forth the purposes for which VMware uses Personal Information.

Categories of Personal Information Disclosed We have disclosed in the preceding 12 months the following categories of Personal Information for operational business purposes:

Category of Personal Information
(corresponds to categories listed in CCPA §1798.140(o)(1))
Disclosed to
Category of Personal Information<br>(corresponds to categories listed in CCPA §1798.140(o)(1)) Category A: Identifiers
Disclosed to • Our subsidiaries and affiliates
• Service providers (such as CRM SaaS offerings)
• Our business partners (such as resellers)
Category of Personal Information<br>(corresponds to categories listed in CCPA §1798.140(o)(1)) Category B: Personal information listed in § 1798.80 of the California Customer Records statute
Disclosed to • Our subsidiaries and affiliates
• Service providers
• Our business partners
Category of Personal Information<br>(corresponds to categories listed in CCPA §1798.140(o)(1)) Category D: Commercial Information
Disclosed to • Our subsidiaries and affiliates
• Service providers
• Our business partners
Category of Personal Information<br>(corresponds to categories listed in CCPA §1798.140(o)(1)) Category F: Internet or other electronic network activity information
Disclosed to • Our subsidiaries and affiliates
• Service providers
Category of Personal Information<br>(corresponds to categories listed in CCPA §1798.140(o)(1)) Category G: Geolocation data
Disclosed to • Our subsidiaries and affiliates
• Service providers
Category of Personal Information<br>(corresponds to categories listed in CCPA §1798.140(o)(1)) Category I: Professional or employment-related information
Disclosed to • Our subsidiaries and affiliates
• Service providers
• Our business partners

Personal Information Sold

For purposes of the CCPA, VMware has not sold Personal Information relating to California residents in the last 12 months.


Your Consumer Rights under the CCPA

Under the CCPA, you may have the following consumer rights. Please note that these rights are not absolute and in certain cases are subject to conditions or limitations as specified in the CCPA:

Abbreviated Right to Know (Collection): You have the right to request, at no charge, that we disclose to you the categories and specific pieces of Personal Information VMware has collected in the prior 12 months.

Expanded Right to Know (Collection and Disclosure): You have the right to request that we disclose certain information about how we have handled your Personal Information in the prior 12 months, including the:

  • categories of Personal Information collected about you;
  • categories of sources from which we collected your Personal Information;
  • business and/or commercial purposes for collecting and disclosing your Personal Information; and
  • categories of third parties to/with whom your Personal Information has been disclosed/shared, including for a business purpose; and
  • the specific pieces of Personal Information collected about you.

Access and Portability: You have the right to obtain a list of categories and a copy of the Personal Information, in a portable and (if technically feasible) readily usable format, collected on you covering the 12-month period preceding the request.

Deletion: You have the right to request the deletion of your Personal Information we have collected from you. This right may be subject to certain conditions and limitations under the law.

Right to be Free from Discrimination: You may exercise all of the above rights at all times and VMware will not unlawfully discriminate against you for exercising your rights under the CCPA.

Additional Rights under California Law

Under California Civil Code section 1798.83, California residents who provide Personal Information in obtaining products or services for personal, family, or household use may request information about the Personal Information shared by VMware, if any, with other third parties for their own direct marketing purposes. If applicable, this information will include the identity and addresses of those third parties and the type of Personal Information.

In addition, a business subject to California Business and Professions Code Section 22581 must allow California residents under age 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted. Your request should include a detailed description of the specific content or information to be removed. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

Submitting a Request to Exercise Your Rights

To exercise any of your rights as set out above, please contact us by:

  • calling 1-877-486-9273, option 0, or
  • by submitting a request here.

You may be required to provide additional information to verify your identity and request before further action is taken.

Contact Us

If you have any questions or concerns regarding this Notice, you may write to us at privacy@vmware.com or by mail to: Office of the General Counsel of VMware, Inc., 3401 Hillview Ave, Palo Alto, California, 94304, USA. To exercise any of your rights under California Law, see the Submitting a Request to Exercise Your Rights section above