In general, we collect personal data about you in one or more of these ways:

• When you actively provide the data to us through your interactions with us, such as when you register an account, make a purchase, or attend an event.
• When you visit our websites or use our products and services, we may automatically collect personal data.
• From a third party, such as a vendor, customer, distributor or other third party that transacts business with us. This may include credit reference agencies, payment processing companies, your bank, and other individuals or entities affiliated with the company you work for.
• From publicly available sources, such as social media profiles, information in the media, and other public sources.

We collect the following types of personal data in the following circumstances:

• When you visit ADI websites that display a link to this Privacy Notice, we may collect:
  • Usage data such as information about how you use our website.
  • Technical data such as internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the website.
  • Product data such as products or services we provided.
  • Marketing and communications data such as your preferences related to marketing.
• When you visit an ADI-branded social media page, we may collect:
  • Identity and contact data such as name, address, email address, phone number, company name, employer, job title, other personal data you voluntarily provide including your social media account.
  • Details of any communications to and from us.
  • Marketing and communications data such as your preferences related to marketing.
• When you visit an ADI office, we may collect:
  • Identity and contact data such as name, email address, company name, and the date, time, and location of your visit.
• When you communicate with us or receive our communications, including through phone calls, text messages, or emails, we may collect:
  • Identity and contact data, including name, address, email address, phone number, company name, city, zip code, job title
  • Transaction data such as bank account information, payment details, and order or invoice information
  • Technical data such as internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the website.
  • Profile data such as your username and password, purchases or orders made by you, social media information, your interests, preferences, feedback and survey responses.
• When you purchase and use our products and services, we may collect:
  • Identity and contact data, including name, address, email address, phone number, company name, city, zip code, and job title.
  • Transaction data such as bank account information, payment details, and order or invoice information
  • Product data such as information needed to provide or customize a product or service for you.
  • Technical data such as internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the website.
  • Profile data such as your username and password, purchases or orders made by you, social media information, your interests, preferences, feedback and survey responses.
• When you register for, attend, or participate in ADI-sponsored events, trainings, webinars, or similar activities, we may collect:
  • Identity and contact data such as name, address, email address, phone number, company name, employer, job title, other personal data you voluntarily provide including your social media account if you access us through that means. Details of any communications to and from us.
  • Marketing and communications data such as your preferences related to marketing.
• If you are employed by an ADI customer, vendor, distributor, or other third-party, and your information has been disclosed to us to transact business with ADI, such as during the procurement process, we may collect:
  • Identity and contact data such as name, address, email address, phone number, company name, employer, job title, other personal data you voluntarily provide.
• If you register and participate in an ADI-hosted community, such as EngineerZone or MyAnalog, we may collect:
  • Identity and contact data such as name, address, email address, phone number, company name, city, zip code, country, employer, job title, social media account, other personal data you voluntarily provide, and your account details, including username, password, and account settings and preferences.
  • Marketing and communications data such as your preferences related to marketing.
• If you participate in a survey or research project conducted by ADI, we may collect:
  • Identity and contact data such as name, address, email address, phone number, company name, employer, job title, other personal data you voluntarily provide such as area of expertise or interests.
• If you work for a supplier or service provider of ADI Group, we may collect:
  • Identity and contact data such as name, address, email address, phone number, company name, employer, job title.

ADI’s websites and services may contain links to other websites maintained by third parties. We recommend that you review the respective privacy notices of these third parties to better understand their privacy practices.

We may disclose your personal data to:

• ADI Group companies and any companies we acquire in the future, to the extent that ADI needs to disclose data to fulfill a request you have submitted to us or for customer support, marketing, technical operations, event registration, and account management purposes.
• Distributors, agents, vendors, and other service providers, including those who provide services such as IT systems, research and analytics, marketing, event planning, payment processing, and customer support. In each case, we disclose data only for the purposes described in this Notice.
• Event sponsors, to the extent that we organize an event or webinar, or provide you with access to resources on our website that are provided by event sponsors. If required by applicable law, we obtain your consent prior to sharing. Information disclosed to event sponsors is subject to the sponsors’ privacy policies.

We may also disclose your information in these circumstances:

• As required by law or to protect or exercise our legal rights, which may include to respond to requests from law enforcement officials (such as supervisory authorities, investigative authorities or other governmental bodies) and in connection with court proceedings.
• To manage or give effect to any Business Transaction that our business decides to enter into.
• With your consent or at your instruction.

If you consent to our use of cookies, we may collect information about your online activities, over time and across different sites and applications. Refer to our Cookie Notice for information on how we use cookies and other tracking technologies, and how to manage your cookie settings on our website.

Note that some browsers support a “Do Not Track” feature, which is intended to be a signal to websites that you do not wish to be tracked across different websites you visit. You may also disable certain tracking as discussed in the Cookie Notice.

We store your personal data in ADI data centers in the United States and other locations where ADI operates, including Ireland, Singapore and the Philippines.

We provide access to data on a need-to-know basis to provide you with requested services or to allow us to perform any necessary or legitimate functions. We may store your personal data within the ADI Group entities in other locations.

When we disclose your personal data within the ADI Group or to third parties, we take steps to address applicable privacy and data protection laws.

We retain your personal data for as long as necessary to fulfill the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and applicable legal requirements.

You may contact us to exercise your rights, subject to applicable laws. Those rights may include the right to access, review, modify, and delete personal data that we collect and process as described in this Notice. Your available rights depend in part on where you reside or are located and the context in which we may have received your personal data.

For example, if you are a resident of certain U.S. States, the privacy laws of your state of residence may give you the following rights:

• No Sale of Personal Data: We do not sell personal data. We will not share your personal data with third parties for the third parties’ targeted or cross-context behavioral marketing purposes unless you have consented to the disclosure.
• No Automated Decision Making: We do not engage in decision-making about you based solely on automated processing, including profiling.
• Right to Know: You may have the right to request the disclosure of the categories of personal data we collected about and certain other details about how we use your personal data.
• Right to Delete: You may have the right to request that we delete certain personal data of yours.
• Right to Correct: You may have the right to request that we correct the personal data we have collected about you if it is incorrect. You can also correct some of this information directly by logging in to your MyAnalog account, if you have one.
• Right to Anti-Discrimination: We will not discriminate against you for exercising your rights set forth under this paragraph.
• Minors’ Right to Erasure: If you are under 18 years of age, you may have the right to request and obtain the removal of content or information you posted on a social media environment controlled by us.

To exercise your rights, or to allow an authorized agent to do so on your behalf, please contact us by email at dataprivacy@analog.com or using one of the methods in the section on Contacting Us below.

To ensure that we disclose your personal data only to you or to an authorized person, we may need additional information to verify your identity before responding to your request. Where needed, we will do so using a reasonable method based on the type, sensitivity, and value of the personal information requested.

Transmissions over the internet are never 100% secure or error-free. However, we have put in place security measures intended to prevent your personal data from being accidentally lost or from being used or accessed in an unauthorized way. In addition to security measures, we also maintain physical and administrative procedures to safeguard and secure information processed by us and we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

We have established procedures to respond to a suspected personal data breach. You should also safeguard any password and user ID you use to access our websites and notify dataprivacy@analog.com if you suspect that this password or user ID has been compromised. You are solely responsible for any unauthorized use of your password and user ID to access our websites.

Our websites may contain links to third party websites that ADI has not reviewed. ADI is not responsible for any content on third-party websites and does not endorse them or their privacy and security policies, which may be different than ADI. If you decide to access any of these third-party sites, you do so at your own risk.

If you use a user forum on our websites, such as EngineerZone, you should be aware that any personal data you submit there can be read, collected, or used by other users of these forums and could be used to send you unsolicited messages. We are not responsible for the information you choose to submit in these forums.

We may use artificial intelligence (AI) technology to process certain personal data that we collect from you or about you, such as your browsing behavior, device information, or location data, to improve our products and services through AI. For example, we may use AI to provide you with a better user experience, more personalized content, or enhanced functionality, and for other purposes referenced in this Privacy Notice. Our use of AI technology is subject to prior screening to ensure that it meets applicable legal and contractual requirements including data privacy and information security. We have adopted appropriate policies governing responsible use of AI technology to ensure that your personal data remains protected.

Our online services are intended for adults. We do not intentionally or knowingly collect, personal data from children under the age of 13 and we request that individuals under the age of 13 not submit any personal information on our online services. If you are concerned that your child has provided us with personal data without your approval (for instance by submitting an incorrect age), you may contact us at dataprivacy@analog.com.

ADI may change this Notice periodically due to changes in how we collect and use data, in technologies we use, legal requirements, and other factors. When we make changes, we also change the “effective date” of the Notice. We suggest that you review the Notice from time to time. We may also post a notice or contact you directly to inform you about changes to the Notice or to seek your consent to the changes, if required by law.

If you have any questions about this Notice or you would like to exercise your rights regarding your personal data, you can contact us in the following ways:

Email: dataprivacy@analog.com
Toll-free Number: +1 (855) 601-5263 (California Only)
Mail: One Analog Way, Wilmington, MA 01887 (Attention: Legal and Risk Organization, Data Privacy)

You may also contact the Data Protection Officer in your area:

• EU (except Germany), Middle East & Africa, Data Protection Officer: Nicole Jahn, Nicole.Jahn@analog.com, Analog Devices International U.C., Bay F-1 Raheen Industrial Estate Limerick, Ireland
• Germany, Data Protection Officer: Dentons Europe (Germany) GmbH & Co. KG, DPO.Germany.Analog@dentons.com
• UK, Data Protection Officer: Dev Patel, Dev.Patel@analog.com
• Americas, Data Protection Officer: Jodi Dahlgard, Jodi.Dahlgard@analog.com
• Asia Pacific (except China) Data Protection Officer: Marc Salarda, Marc.Salarda@analog.com
• China Data Protection Officer: Luca Pang, Luca.Pang@analog.com

When you contact us, please identify the country or U.S. state where you reside.

These disclosures apply solely to residents of the State of California. Any terms defined in the California Consumer Privacy Act of 2018, as amended from time to time, including by the California Privacy Rights Act of 2020 and its implementing regulations (“CCPA”) have the same meaning when used in these disclosures. These disclosures do not reflect our collection, use, or disclosure of California residents’ personal information, or data subject rights, where an exception or exemption under the CCPA applies. If you are an ADI Group job applicant or former or current employee, please also refer to our other privacy statements.

What categories of personal information do we collect?

Please see Section 3 above for the types of personal information we collect. These types of personal information correspond with the following categories of personal information in the CCPA’s definition of personal information:

• Identifiers such as a real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.
• Any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, address, telephone number, but excluding publicly available information that is lawfully made available to the general public from federal, state, or local government records.
• Geolocation data.
• Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a California resident’s interaction with an internet website application, or advertisement.

We collected these categories of personal information from the sources described in Section 3 above over the preceding 12 months.

For what purposes do we collect and use personal information?

Please see Section 4 above for a list of the purposes for which we use, and have used over the preceding 12 months, California residents’ personal information. We do not “sell” or “share” (as the CCPA defines these terms) personal information and did not do so over the preceding 12 months. We do not use sensitive personal information to infer characteristics about individuals or for purposes outside of those referenced at Subsection 1798.121(a) of the CCPA. We do not have actual knowledge that we sell or share for cross context behavioral advertising, the personal information of California residents under 16 years of age.

What rights do you have as a California resident under the CCPA?

As a California resident, you have the following rights under the CCPA:

• The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you. You may only exercise your right to know twice within a 12-month period.
• The right to delete personal information that we have collected from you, subject to certain exceptions.
• The right to correct inaccurate personal information that we maintain about you.
• The right to opt out of the sale or sharing of your personal information. We do not “sell” or “share” personal information about you.
• The right to limit our use and disclosure of sensitive personal information to purposes specified in Cal. Civil Code 1798.121(a). We do not use or disclose sensitive personal information for purposes outside of those specified in Cal. Civil Code 1798.121(a).
• The right not to receive discriminatory treatment by the business for the exercise of privacy rights conferred by the CCPA, in violation of California Civil Code § 1798.125, including an employee’s, applicant’s, or independent contractor’s right not to be retaliated against for the exercise of their CCPA rights.

How can you exercise your CCPA rights?

To submit a request to exercise your rights to know, delete or correct, please contact us using the contact details in Section 17 above. Only you, or someone legally authorized to act on your behalf, may make a request related to your personal information. You may designate an authorized agent by taking the steps outlined in the following paragraph. In your request or in response to us seeking additional information, you, or your authorized agent, must provide sufficient information to allow us to reasonably verify that you are, in fact, the person whose personal information was collected which will depend on your prior interactions with us and the sensitivity of the personal information being requested. We may ask you for information to verify your identity and, if you do not provide enough information for us to reasonably verify your identity, we will not be able to fulfill your request. We will only use the personal information you provide to us in a request for the purposes of verifying your identity and to fulfill your request.

How can you designate an authorized agent?

You can designate an authorized agent to make a request under the CCPA on your behalf if:

• The authorized agent is a natural person or a business entity and the agent provides proof that you gave the agent signed permission to submit the request; and
• You directly confirm with us that you provided the authorized agent with permission to submit the request.

If you provide an authorized agent with power of attorney pursuant to Probate Code sections 4121 to 4130, it may not be necessary to perform these steps and we will respond to any request from such authorized agent in accordance with the CCPA.

If you are located in China, the following provisions apply when ADI processes your personal data:

• ADI is the personal information processor of your personal data. Our registered address is One Analog Way, Wilmington, MA, 01887, USA.
• You may contact us at dataprivacy@analog.com or through our local representative in China, Luca Pang, at Luca.Pang@analog.com.
• ADI has adopted internal policies and implemented measures to ensure that the applicable legal requirements are met and that your personal data is processed in accordance with the Personal Information Protection Law of China and other applicable laws.
• You have the right to request access to your personal data as processed by us and to have it corrected or deleted unless ADI is legally required to retain it. You have also the right to restrict or object to our processing of your personal data, the right to data portability and the right to obtain explanations of this Privacy Notice. To exercise any of these rights, please send an email to dataprivacy@analog.com. We may request additional information from you, if necessary, to verify your identity or find your unique records in our systems.
• ADI may share your personal data among its affiliated companies in the ADI Group worldwide to conduct marketing and promotion of ADI’s products, services or activities, to improve our customer experience, and for other legitimate business uses that are permitted under applicable laws.
• We respect your right to privacy and will not take any negative actions against you for asserting your rights.
• If consent is required for us to process your personal data, you may withdraw or modify such consent at any time by contacting us.
• If you are concerned about ADI’s compliance with laws relating to the privacy of your personal data, you may also contact your local privacy data protection authority.

The additional disclosures in this section apply only if you are located in the European Economic Area (EEA), United Kingdom (UK) or Switzerland (“EEA+”).

What laws apply?

If you are located in the EEA, the EU General Data Protection Regulation applies to the processing of your personal data. If you are located in the UK, the UK General Data Protection Regulation applies to the processing of your personal data. References to the "GDPR" are references to the General Data Protection Regulation as it applies in the country where you are located. If you are located in Switzerland, the provisions of the Swiss Federal Data Protection Act (the "FDPA") apply to you, and references to the GDPR below shall be interpreted analogously for the purposes of applying the FDPA.

Who is the data controller and who is its EEA and UK representative?

When you use our website at www.analog.com, Analog Devices, Inc. is the controller. Its EEA and UK representatives are Nicole Jahn who can be contacted at NicoleJahn@analog.com, and our primary business address is Analog Devices International U.C., Bay F-1 Raheen Industrial Estate Limerick, Ireland. When you purchase goods or services from, sell goods or services to, register for a program with, or communicate directly with a particular ADI Group entity, that entity is the controller of your personal data.

What lawful bases of processing do we rely on?

You are not legally required to provide personal data to us, but we cannot provide the Service without receiving some personal data from you. If you provide personal data, we rely on the following legal bases to process it:

• Necessary for us to perform a contract with you or take steps at your request prior to entering into a contract per Article 6(1)(b) GDPR ("Contract Performance Legal Basis");
• Necessary for us to comply with an applicable legal obligation per Article 6(1)(c) GDPR ("Legal Obligations Legal Basis");
• Necessary for us to realize a legitimate interest based on an assessment of that interest and your privacy and other fundamental interests per Article 6(1)(f) GDPR ("Legitimate Interest Legal Basis"); or
• According to your consent per Article 6(1)(a) GDPR ("Consent Legal Basis"). In these cases, you can withdraw your consent at any time with future effect.

The following table outlines the legal basis and, where applicable, the legitimate interests pursued with respect to each purpose for which we process personal data.

Where is your personal data processed and on what basis do we transfer personal data across borders?

We rely on service providers in locations including the United States, Ireland, Singapore and the Philippines and all of the locations listed on the right-hand column here. We take measures to ensure that service providers in non-adequate jurisdictions, such as the United States, Singapore and the Philippines, provide an adequate level of data protection by entering into appropriate data transfer agreements based on Standard Contractual Clauses and performing data protection assessments of data transfer arrangements as appropriate. Data transfer agreements are accessible upon request by contacting us at the details shown further above. The UK Government and EU Commission recognize certain territories (see here for those recognized by the UK Government and see here for those recognized by the EU Commission) as providing an adequate level of protection for the types of data transfers that we make to our service providers in these territories.

What rights do you have?

In the EEA, Switzerland and the UK, you have the following rights, subject to the conditions under the GDPR and/or local data protection law:

1. Access: You are entitled to ask us if we are processing your personal data and, if we are, you can request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
2. Correct: You are entitled to request that any incomplete or inaccurate personal data we hold about you is corrected. If you have registered with myAnalog.com you can edit some of your personal data directly.
3. Erase: You are entitled to ask us to delete or remove personal data in certain circumstances. There are certain exceptions where we may refuse a request for erasure, for example, where the personal data is required for compliance with law or in connection with legal claims.
4. Restrict: You are entitled to ask us to suspend the processing of certain personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
5. Object: You have the right to object, on grounds relating to your particular situation, to the processing of your personal data by us. This includes the right to object to our processing of your personal data for direct marketing and the right to object to our processing of our personal data where we are performing a task in the public interest or pursuing our legitimate interests or those of a third party. If we process your personal data based on our legitimate interests or those of a third party, or in the public interest, you can object to this processing, and we will cease processing your personal data, unless the processing is based on compelling legitimate grounds or is needed for legal reasons. Where we use your personal data for direct marketing for our own products and services, you can always object and opt out of future marketing messages using the unsubscribe link in such communications.
6. Withdraw consent: Where you have provided your consent to the processing of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. The withdrawal of consent does not affect the lawfulness of prior processing based on your consent, and does not affect the continued processing of your personal data on a lawful basis other than consent.
7. Request a copy of personal data (data portability): You may request the transfer of a copy of certain personal data to you or another party (if technically feasible). You have the right to ask that we provide your personal data in an easily readable format to another company.
8. Submit a complaint to your supervisory authority: You also have a right to lodge a complaint with a supervisory authority in the country where you live, or where the concerns arose. You may view a list of supervisory authorities in the EEA, UK and Switzerland and their respective contact information here:
   
   

   Jurisdiction	Data protection authority's website
   EEA	https://edpb.europa.eu/about-edpb/board/members_en
   United Kingdom	https://ico.org.uk/global/contact-us/
   Switzerland	https://www.edoeb.admin.ch/de/kontakt

   
   
   
9. In some jurisdictions such as France and Portugal, you also have the right to provide us with guidelines as to the processing of your personal data after your death.

To exercise your rights under applicable privacy law, to raise a privacy concern, or to make a data-related request, please contact us at the Contact Details in Section 16 above. We may need to request specific information from you to help us confirm your identity and verify that you have the right to request what you are requesting. These are security measures to ensure that we do not disclose personal data to any person who has no right to receive it, or otherwise process the data in unauthorized ways. We may also contact you to ask for further information about your request to clarify the scope of your request and speed up our response.