Horizon Workspace Privacy Supplement

Horizon Workspace consists of several Server Components and End User Client Components. Horizon Workspace Server Components allow your organization's IT administrator (your "IT Administrator") to install, configure and manage your organization's instance of Horizon Workspace. The Horizon Workspace End User Clients allow you to access your Horizon Workspace account from a web browser, from your computer or on your mobile device. Horizon Workspace Server Components include:

• VMware Horizon Workspace Virtual Appliance ("Horizon Workspace vApp")
  
• VMware Horizon Workspace Manager Virtual Appliance ("Horizon Manager vApp")
• VMware Horizon Workspace Configurator Virtual Appliance ("Horizon Connector vApp")
• VMware Horizon Workspace Connector Virtual Appliance ("Horizon Connector vApp")
• VMware Horizon Workspace Data Virtual Appliance ("Horizon Data vApp")
• VMware Horizon Workspace Gateway Virtual Appliance ("Horizon Gateway vApp")

Horizon Workspace End User Components include:

• VMware Horizon Workspace Web Client ("Horizon Web Client")
• VMware Horizon Workspace Client for Windows ("Horizon Windows Client")
• VMware Horizon Workspace Client for Mac ("Horizon Mac Client")
• VMware Horizon Workspace Client for Android ("Horizon Android App")
• VMware Horizon Workspace Client for IOS ("Horizon IOS App").

Combined, all elements of Horizon Workspace provide you with an integrated workspace where you can access your files, applications, and Horizon View desktops from any location. Once your workspace is created, you may use Horizon Workspace to access your files and applications through a single sign-on process, sync files between your devices, collaborate and share files with others, and track your files' editing and sharing history. Inside your workspace, you and other members of your organization can collaborate, access and share corporate information while simultaneously protecting the security and confidentiality of your corporate files and data. In addition, your IT Administrator may set policies to protect the privacy, security and integrity of your information and the information in your workspace.

Horizon Workspace will not work on your mobile device until your organization's IT Administrator provides you with an account.

As a general matter, VMware does not receive information from you during your use of Horizon Workspace. However, if you or your organization chooses to send log files to VMware in order to obtain support services, VMware may receive your personal information, including personally identifiable, sensitive or confidential information. For more details regarding information we may receive in your logs, please see the sections "Log Files" below.

In order to allow you to use Horizon Workspace and provide you with access to your organization's applications and assets, your IT Administrator must first provide you with a Horizon Workspace account. As part of this process, your IT Administrator may provide you with a username, a password and applicable server information which may be used by Horizon Workspace to validate your credentials. Once your credentials are validated, your Horizon Workspace account will be created. When your account is created, your IT Administrator and organization may receive certain information about your device including: username, password, your IP address, your device's unique identification number, information regarding your device's name, type, manufacturer, model, operating system and device kernel.

Once your account has been created, you will also have a personal profile. Your personal profile will include your name, email and contact information provided in your organization's active directory. Additionally, you may choose to provide additional information to enhance your profile, such as a photograph or picture. Your IT Administrator and all users registered with your organization's instance of Horizon Workspace (including both internal and external users) may be able to access your profile information and see your profile information if you access, edit or share a file.

External users who are invited to access an organization's files must also have a Horizon Workspace account. For additional information regarding external users account details, please see the section "External Users" below.

Your organization may choose to collect additional information, including aggregated statistical and technical information regarding your device and your use of Horizon Workspace and deployed applications in your corporate workspace. If you have questions about the information collected by your organization, you should contact your organization or your IT Administrator.

In order to protect the confidentiality, integrity and security of your data and your organization's assets, your IT Administrator may take action or set policies that affect the functionality in your Horizon Workspace. Examples of such actions may include: remotely disabling or wiping the workspace; restricting the ability to share information with parties outside of your organization; restricting the ability to store or share image, video or audio files; preventing certain applications or programs from opening corporate files; preventing users from accessing files offline; tracking users' most heavily used contacts; limiting the length of time external parties may access shared files data; and preventing users from editing or downloading files. Additionally, your IT Administrator may set policies that require you to set a password or allow you to send crash reporting logs to Horizon Workspace Server Components, VMware or third parties. If you have questions about the policies, assets and applications that are provided in your workspace, you will need to contact your IT Administrator.

Horizon Workspace may share information, including information received when your account is established, with third party service providers who are contracted to provide services for your organization. Third party service providers may provide hosting services, support services and other services for your benefit and the benefit of your organization. If you have questions regarding how your organization shares information with third party service providers, you should contact your organization.

Horizon Workspace is designed to allow you to access, collaborate on and share your corporate files and data efficiency and securely. Accordingly, Horizon Workspace provides you with many features to help you control how you retrieve and disclose the data and files in your account.

Creating or Uploading Files

After your account has been created, you will be able to use your Horizon Workspace account to create new files and upload existing files into your organization's cloud repository. Once uploaded or saved into your organization's cloud repository, you will be able to track, edit and share your files. Once you upload or create a file in Horizon Workspace, that file will automatically sync with your Horizon Workspace account on other devices. Generally speaking, when you create or edit files using Horizon Workspace, a copy will be saved both inside your organization's cloud repository and in your device's local storage.

Please note that files that you upload, create, edit or share inside Horizon Workspace may be accessible to others, including: other Horizon Workspace users inside your organization, external parties outside of your organization and the public-at-large, your IT Administrator and any third party applications, products and services deployed inside Horizon Workspace who have access to your files and data. When you save a file in Horizon Workspace, you are given the opportunity to control who can access, edit and share your files. Before you upload or save a file in Horizon Workspace, you should be conscious of who you allow to see it, edit it and share it.

Sharing Files with Others

Horizon Workspace is designed to help you share and collaborate with others easily and securely. Your IT Administrator may allow you to share and collaborate with others in your organization, external parties and the public-at-large.

If your IT Administrator allows you to share with others in your organization, you may be able to access their contact information that is stored in your organization's active directory. Additionally, other members of your organization will be able to access your contact information in order to share files and data with you. If you have questions about how your members of your organization may access your contact information, you should contact your IT Administrator. 

When sharing files with others (either inside or outside of your organization), you may control how they interact with your files. You may allow others to access your document as a Reviewer, a Collaborator or a Share Administrator. Reviewers are only able to read the file. Contributors may read, edit and make comments to the document. Share Administrators are able to both read and edit the file and are also able to control how the document is shared with others, including others outside of your organization or the public. 

In addition to sharing with your known contacts, your IT admin may allow you to make files publicly accessible. Documents that are publicly accessibly may be accessed, downloaded and shared by others outside of your organization, including members of the public-at-large. 

When saving and sharing your files, you should be conscious of whom you allow to access, edit, download and share your files.

Revoking Access to Shared Files

If you previously shared a file with another party - either internally or externally - you may revoke their ability to access, download, edit or share your files. By removing access and share functionalities from your documents, the links to your files will no longer be accessible. Please note, however, that if any party downloaded your data prior to having their access or sharing privileges revoked, they may still have the ability to read, edit or share your data even after access privileges have been revoked.

Additionally, your IT Administrator may also revoke users' ability to access, download, edit or share your files. Alternatively, your IT Administrator may set times limits for how long external parties may have access to corporate files or may block certain users or domains from accessing files in the future.

Editing Files

Horizon Workspace allows you and your contacts to review documents. Users may edit, review past versions, and leave commentary from any location. To help you keep track of actions pertaining to a particular file, Horizon Workspace may track and share the editing history of both your files and folders and the files and folders that are shared with you. A file or folder's editing history may show: the date and time you accessed the file, any edits or changes you may have made, any comments you may leave, and when you may have downloaded and/or shared a file. If you have chosen to include a picture or photograph in your account, your contacts and other users may be able to see your picture or photo along with your editing history. If you access, read, edit, download, share or mark a particular file as your favorite, other users who have access to that file may be able to see your activity. Additionally, your IT Administrator may also be able to see the user activity of any files that are uploaded and/or saved in Horizon Workspace.

Deleting Files

You may choose to delete your files at any time. After you have deleted a file, you may have the opportunity to restore a deleted file for a period of time (as set by your IT Administrator). Files that are marked as favorites and stored locally on your device may require an active Internet connection before they are deleted from your device's local storage.

Please note that after you delete a file, the editing, audit and share history of the file may remain in an audit log that is accessibly by your IT Administrator. Additionally, deleting a file from your device's local storage may not delete the file inside your organization's cloud repository. For additional information regarding how to delete information inside your Horizon Workspace account, please see section "Deletion of Data, Horizon Workspace and Unlinking Your Device" below or contact your IT Administrator.

Favorite files

Horizon Workspace allows you to mark your favorite and important files. When you select a file as your favorite, you will be able to access them in the IOS Client and Android Client even without an Internet connection. Note that files that are marked as favorites cannot be deleted from your device's local storage without an active Internet connection.

If a Horizon Workspace account holder wishes to share files with you, you may receive an email notification asking you to create a Horizon Workspace account with their organization. Once your account has been created, you may be able to access, edit and transfer the files that have been shared with you.

In order to create your account, the IT Administrator may collect your email address from the internal user who wishes to share files with you. Once your account has been created, you will have a personal profile. Your personal profile may include your email information. Additionally, you may choose to provide additional information to enhance your profile, including your name, organization information, contact information and a photograph or picture. The organization's IT Administrator and other users registered with the organization's instance of Horizon Workspace (including both internal and external users) may be able to access your profile information if you access, edit or share a file.

The IT Administrator may limit the amount of time you will be able to access the organization's files. Additionally, an internal user may also revoke your access to files or your ability to edit and transfer files. If you no longer wish to have access to a file, you may choose to leave the folder. If you choose to leave a folder, you may not regain access the folder until an internal user or the organization's IT Administrator provides you with access to the file or folder.

Please note that leaving a file or folder will not delete your account within the organization's instance of Horizon Workspace. Additionally, leaving a file or folder will not delete any of the edits or comments you placed in a file or folder, nor will it delete any information in the file or folder's history documenting your access, edits and transfers of the file or folder. If you wish to have your account and your profile information deleted from the organization's instance of Horizon Workspace, you will need to contact the organization's IT Administrator.

Inside your workspace, your IT Administrator may choose to deploy third party applications, products and services. Information collected, used and transmitted by third party applications, products and services, including Horizon View and any VMware applications, products and services not included in Horizon Workspace, are governed by their own privacy policies. Information collected outside of Horizon Workspace may include such things as personal data, location data, behavioral data, and sensitive or confidential data.

We encourage you to learn about the privacy policies of all products, services and applications prior to interacting with them in Horizon Workspace.

Should you ever require technical assistance, your IT Administrator may allow you to use Horizon Workspace to send your log files to your IT Administrator, to VMware and to other third party service providers who are contracted to provide support services to your organization. If you choose to send log files from your computer or mobile device, the log files may include personal information, including personally identifiable, sensitive and/or confidential information. You should carefully consider the content of your logs prior to sending.

Except as provided in this Privacy Supplement, VMware does not receive your geolocational information. Your IT Administrator may configure Horizon Workspace to use your geolocation information in order to help you keep track of your preferences and to deploy appropriate policies. Additionally, third party applications deployed in your workspace may collect, use or transmit your geolocational data.

Generally speaking, you may control how applications access and use your geolocational data through your mobile device and browser settings. Additionally, your organization's IT Administrator may also choose to restrict how applications inside your corporate workspace collect and/or use your geolocational data. If your individual settings differ from the settings chosen by your IT Administrator, the corporate workspace will respect the setting that is the most restrictive. If you have questions about the privacy settings surrounding your geolocation data on Horizon Workspace, you should contact your IT Administrator.

Horizon Workspace does not use automatic collection tools, such as cookies, embedded web links and web beacons to send information back to VMware. However, applications or programs that are deployed in your corporate workspace, including VMware applications independent of the Horizon Workspace, may use automatic collection tools to collect information (including personal information or device information) about you and your use of the corporate workspace. Information and data collected, used and transmitted by third party applications and services are governed by their own privacy policies.

We encourage you to learn about the privacy policies of all products, services and applications prior to interacting with them in Horizon Workspace.

You may choose to delete Horizon Workspace from your device. You may also choose to unlink a particular device from your Horizon Workspace account. If you choose to delete Horizon Workspace or unlink a device from your account, you may lose your ability to access Horizon Workspace from that device. Additionally, by unlinking a device from your account, you may lose the ability to sync any files or data in your Horizon Workspace account with that device. If you choose to delete Horizon Workspace or unlink your account, you may lose any data that was not uploaded or stored inside Horizon Workspace or your organization's cloud repository.

Note that neither deleting the Horizon Workspace application or program from your device, nor unlinking your Horizon Workspace from a particular device, nor deleting your Horizon Workspace account may delete all of your data stored inside your organization's Horizon Workspace cloud repository. Even after deleting your account, others may still access data that you have shared with them or have made publicly accessible, including edits you may have made; comments you made have shared; or your access, editing and sharing history relating to a particular file or folder. Additionally, deletion of the Horizon Workspace or unlinking a device may not delete data that is already stored in your logs. If you have questions regarding how to delete the data in your Horizon Workspace account or data stored in your logs, you should contact your IT Administrator.

Horizon Workspace is not directed towards children under the age of 13. Additionally, VMware does not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information of a child under the age of 13, we will delete that data from our systems.

For additional details on how VMware treats your information, including information on how you can change your communications preferences or request access to your information, please see the VMware Privacy Policy at https://www.vmware.com/help/privacy.html.