Privacy Notice

This Privacy Notice was last reviewed and updated on March 31st, 2026.

Summary

Who we are: ASSA ABLOY Global Solutions AB is the data controller responsible for the processing of Personal Data described in this Privacy Notice.

What data we process: We process Personal Data relating to customers, business partners, professional contacts, and individuals interested in our products and services, depending on the nature of the interaction.

Why we process Personal Data: We process Personal Data to manage business relationships, provide and improve our products and services, communicate with customers and partners, customer support, comply with legal obligations, and protect our systems and operations.

How we protect Personal Data: We apply appropriate technical and organizational measures to safeguard Personal Data and limit processing to what is necessary for the relevant purposes.

International transfers: As a global organization, Personal Data may be transferred and processed in countries outside your country of residence, subject to appropriate safeguards as required by applicable law.

Your rights: You have rights in relation to your Personal Data, including the right to access, correct, or object to certain processing. Further details on your rights and how to exercise them are set out below.

For more detailed information, please read the full Privacy Notice.

Privacy Notice

ASSA ABLOY Global Solutions AB, together with its affiliated entities, is committed to safeguarding the privacy of our customers, business partners, and professional contacts.

This Privacy Notice applies to individuals interested in our products, customers, business partners, and professional contacts. It explains how we collect, use, disclose, and protect Personal Data, and describes your rights and choices under applicable data protection laws.

ASSA ABLOY Global Solutions AB (referred to as “we”, “our”, or “us”), registered in Sweden under company number 556666‑0618 with its principal office at Förmansvägen 11, 117 43 Stockholm, serves as the data controller responsible for the processing of your Personal Data.

For our commercial services that involve Software as a Service (SaaS), we may process Personal Data on behalf of our customers as a data processor under an applicable Data Processing Agreement (DPA). In such cases, our customers function as data controllers and are responsible for informing end users about the processing of their Personal Data. Where we function as a data controller in relation to our SaaS offerings, we provide end users with a separate Product Privacy Notice. Please refer to the applicable DPA, our General Terms and Conditions, and the relevant Product Privacy Notice for further details.

This Privacy Notice does not apply to third‑party websites, services, or applications, even if accessed through our platforms. We encourage you to review the privacy notices of such third parties to understand how they process your personal data.

Overview of this Privacy Notice

1. Collection of Personal Data

We collect “Personal Data,” which means any information that can identify or help identify a person, as per relevant privacy laws. Personal Data may be collected directly from you when you engage with our Services, or, in certain circumstances, from third-party sources. We may also analyze and combine data to derive insights regarding your preferences, interests, characteristics, or behavioral patterns, to enhance your experience with our Services.

1.1 Personal Data Collected Directly from You

Personal Data is collected through your interactions with our Services, including but not limited to:

  • Contacting us via our website forms
  • Registering an account, for example in our eStore
  • Engaging with customer support
  • Making product warranty inquiries
  • Participating in contests or competitions
  • Subscribing to marketing communications
  • Navigating our Services
  • Attending events or tradeshow that we participate in
  • Making purchases
  • Communicating with us
  • Becoming a partner or vendor

We collect the following categories of Personal Data in accordance with our use of Personal Data:

  • Contact Information: Name, prefix, email address, telephone number, address, title, country.
  • Account Information: Login credentials, profile, username, products, license information, cart contents, and purchase history.
  • Audio, Electronic, Visual, and Similar Information: Images, audio, video, or call recordings generated in connection with our business activities.
  • Transaction Information: Purchase and order details, payment information, company bank account information, and billing address.
  • Device Information: IP address, also used to calculate your approximate location e.g. city area, technical details about your device you are using to access our services e.g. website, such as device type and model, system language, browser details, operating system, and device or other advertising identifiers such as Android Advertising ID or Apple’s Identifier for Advertisers.
  • User Content: Information you choose to provide to us through structured interactions such as surveys, forms, or feedback tools, only to the extent necessary for the purposes described in Section 2
  • Professional Characteristics: Company details, job title, industry, certifications, relevant trainings, and experience.
  • Usage Information: Browsing behavior, purchasing patterns and trends, engagement metrics (e.g. page visits, clicks, visit frequency, return intervals) only to the extent necessary for the purposes described in Section 2.
  • Preferences: Payment method, purchased/viewed/recommended products, preferred language, marketing communication preferences, and cookie preferences.
  • Social Media Information: Name, company name, email address, and publicly available interactions or comments with our social media posts such as on LinkedIn and YouTube, in accordance with our Privacy Notice.
  • Communication History: Details of your interactions and any additional information you provide as part of emails, meetings, and other communication with us. In relation to customer support cases, we may, where relevant.
  • Customer Support Information: Such access is limited to authorized personnel, subject to role‑based access controls, logging, and audit measures, and restricted to the minimum data necessary to provide support, and is handled separately from general business communications.
  • Other Related Personal Data: This includes limited Personal Data about other individuals that you provide to us where necessary to use our Services (such Contact information from colleagues, employees, end users, or other contacts), or information we access when Providing our Services or Providing Customer Support. Examples include details in communications, documents, service tickets, logs, or system records where someone else is mentioned, such as while managing a support request.

Such Personal Data is processed only to the extent necessary for the specific purposes described in Section 2, Use of Personal Data, of this Privacy Notice. Further information on how long we retain each category of Personal Data is set out in Section 6, Data Retention.

We also utilize automated data collection tools, such as cookies and web beacons, to gather certain information. For further details regarding our use of cookies, please refer to our Cookie Notice.

1.2 Personal Data Provided by Third Parties

In limited instances, we may receive Personal Data about you from other ASSA ABLOY group companies, or from services and products with which you interact. Additional sources may include:

  • Publicly Available Information: Contact Information, Professional Characteristics from services such as LinkedIn and similar social media channels, product review websites, and trade or industry association registries.
  • Resellers and Partners: Purchase and Contact Information from our resellers, or other service providers we interact with in our Products and Services.
  • From your Employer: Contact Information, Professional Characteristics with regards to our Products and Services offered to your company.
  • From ASSA ABLOY Group companies: Contact Information, Professional Characteristics for joint marketing and promotional events relevant to your interests.
  • From event companies: Contact Information, Professional Characteristics where you allow your details to be shared with vendors or participants.
  • Data Brokers: We may obtain limited Contact Information (specifically name and business email address only) from third‑party data brokers, such as B2B industry project lists, who are authorized to share such information. We do not obtain sensitive Personal Data, profiling data, or inferred characteristics from data brokers. We only engage with data brokers who confirm compliance with applicable data protection laws and have obtained the necessary consent or other lawful basis to share such information. If you wish to verify, correct, or challenge the accuracy of any data obtained from data brokers, or inquire about the source of such data, you may contact us using the details provided in this Privacy Notice. Upon request, we will provide you with additional information about the relevant data broker to enable you to exercise your privacy rights.

When we collect your Personal Data from a third party, we will notify you using your available Contact Information to provide our Privacy Notice. We will only use your data to arrange a meeting or inform you about our products and services specifically in relation to your project. We will not use your data for broader marketing purposes.

If you provide Personal Data relating to other individuals to us or our vendors in connection with the Services, you represent that you have the requisite authority to do so and to permit us to use such information in accordance with this Privacy Notice.

2. Use of Personal Data

We use your Personal Data only to the extent necessary to achieve the purposes described below. Where required under applicable data protection laws, we rely on one or more of the following legal bases for processing your Personal Data: performance of a contract, compliance with legal obligations, legitimate interests, or your consent. Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms, implemented appropriate safeguards, and you may object to such processing as described in Section 8 below.

2.1 Respond to Inquiries and Manage Leads

We process your Personal Data when you contact us, request information, submit forms on our websites, or otherwise express interest in our products or services. This includes using your Contact Information, Professional Characteristics, Communication History, Social Media Information and any other information you choose to provide to respond to your inquiries, provide requested information, assess your needs, and manage potential business relationships. These activities rely on legitimate interests in responding to your inquiry regarding our products and services.

2.12 Process Orders, Billing, and Financial Administration

We process your Contact Information, Account Information, Transaction Information, Device Information, Preferences, and Communication History to process orders and returns, including warranty and product registration, payments, exchanges, or refund requests, as well as to manage billing, invoicing, accounting, accounts receivable, accounts payable, and related financial administration. These activities are undertaken to manage our contractual relationship with you and/or to take steps at your request prior to entering into a contract, and to comply with applicable accounting and financial reporting obligations.

2.3 Provide our Services

We process your Contact Information, Account Information, Device Information, Preferences, Communication History, and Other Related Personal Data you share to provide you with the Products and Services you request in a personalized and efficient manner. This may include installation and integration services, project management, trainings, opening and maintaining your account, and sending administrative information related to your account. These activities are undertaken to manage our contractual relationship with you.

2.4 Provide Customer Service

We process your Contact Information, Account Information, Device Information, Preferences, Communication History, Customer Support Information and Other Related Personal Data to address customer service requests, deliver support, and resolve enquiries and complaints. These activities are conducted to manage our contractual relationship with you or rely on legitimate interests in servicing our products and services.

2.5 Marketing Communications

We use your Contact Information, Account Information, User Content, Professional Characteristics, Preferences, Social Media Information, Communication History, and Transaction Information, including inferences derived from such information, to identify your preferences and provide personalized advertising and marketing communications about our Services, new products, and company news.

For existing customers, we may send marketing communications, promotions, or contests based on our legitimate interests, where permitted by applicable law. For individuals who have not received an offer or previously purchased our products or services, we will obtain your consent prior to sending marketing communications.

In every instance, you may opt out of marketing communications or adjust your preferences at any time by utilizing the links included in each marketing email.

2.6 Digital Advertising

We use Usage Information collected through cookies and similar technologies to tailor and deliver advertisements. Our online advertising initiatives include platforms such as Google Ads (including YouTube), LinkedIn Ads, and in limited cases Meta Ads. These platforms help us promote our products and services and share relevant content with you.

Audience targeting may involve the use of cookie data and, where applicable, email‑based audience matching. Such processing is conducted in accordance with the marketing purposes and legal bases described in Section 2.4 (Marketing Communications) of this Privacy Notice. Where required by applicable law, such processing is based on your consent.

You have control over how your data is used for advertising. You can adjust your preferences directly in your account settings on Google Ad Center, LinkedIn Ad Settings, or Facebook & Instagram Ad Preferences. You can also withdraw cookie consent at any time using the “Adjust cookie settings” button in our Cookie Notice.

For additional details, please read our Cookie Notice. For more information about how cookies work, please also refer to www.allaboutcookies.org.

2.7 Facilitate and Host Visits, Conferences, and Events

We use your Contact Information, Account Information, Professional Characteristics, Preferences, Communication History, Transaction Information, Audio, Electronic, Visual, and Similar Information, and Other Related Personal Data to facilitate and host conferences and events, such as trade shows, and to welcome visitors to our premises. We rely on our legitimate interests for such process or where legally required, we will obtain your consent for such processing activities.

2.8 Improve Our Products and Services

We process your Account Information, Professional Characteristics, Transaction Information, Communication History, Usage Information, and, where applicable, Audio, Electronic, Visual, and Similar Information to analyze performance, conduct internal reviews, improve the quality, functionality, and security of our products and services, and develop new features and offerings.

This may include processing Personal Data for purposes such as service quality assurance, internal testing, training, troubleshooting, analytics, customer feedback analysis, and improving operational processes. Where required by applicable law, such processing is based on your consent; otherwise, it is conducted based on our legitimate interests in maintaining and improving our products and services.

Appropriate technical and organizational measures are applied to ensure that such processing is proportionate and limited to what is necessary for these purposes.

2.9 Partner Relationships

We use your Contact Information, Account Information, Professional Characteristics, and Communication History to establish and manage relationships with vendors, suppliers, and distributors, including activities such as submitting bids and proposals, onboarding new partners, delivering Services, providing feedback, managing ongoing relationships, and managing contract renewals or terminations.

Where relevant, we process your Personal Data for these purposes based on our legitimate interests, as well as those of our partners or third parties, to conduct business effectively and ensure a positive experience. When required by law, we will obtain your consent before conducting such processing activities.

2.10 Business Transactions

We may share your Personal Data with third parties if our business or assets are merged, acquired, reorganized, assigned, sold, or transferred, including during bankruptcy. These third parties may include acquiring companies and their advisors.

Where applicable, we would process your Personal Data in the context of such a sale or business transaction based on our legitimate interests to conduct business.

2.11 Security, Legal Compliance, and Internal Controls

We process Personal Data where necessary to protect the security of our systems, networks, and services; to prevent, detect, and investigate fraud, security incidents, and other unlawful or improper activities; and to ensure compliance with applicable laws, regulations, contractual obligations, and internal policies.

This may include processing Personal Data for purposes such as legal and regulatory compliance, responding to lawful requests from public authorities, conducting internal and external audits, implementing, and monitoring internal controls, managing risk, and investigating potential violations of law, contractual commitments, or company policies.

Any disclosure of Personal Data to public authorities or other third parties for these purposes is conducted in accordance with applicable data protection laws and subject to appropriate safeguards, and is limited to Personal Data that is strictly necessary.

2.12 IT Operations and System Maintenance

We process Personal Data as necessary to operate, maintain, and secure our IT systems and infrastructure, including system administration, access management, backups, troubleshooting, monitoring, and ensuring business continuity.

These activities are carried out based on our legitimate interests in operating and maintaining stable, reliable, and efficient IT environments that support our Services.

3. Recipients of Personal Data

We will only share your Personal Data with third parties as described in this Privacy Notice. Third-party processors are engaged only to the extent necessary to achieve the purposes set out above and are contractually obligated to observe the security and integrity of your Personal Data. Some processors will have access to your Personal Data as necessary to perform their functions but may not share it with other third parties or use it for other or own purposes.

  • Affiliated entities: ASSA ABLOY Global Solutions AB may share Personal Data with affiliated entities within the ASSA ABLOY Global Solutions division that function as data processors on our behalf. These affiliates process Personal Data in accordance with our instructions, for the purposes described in this Privacy Notice, and are subject to appropriate contractual safeguards, including data processing agreements, to ensure compliance with applicable data protection laws.
  • Third party companies: Limited to vendors or other companies e.g. consulting acting as service providers or data processors to Us.

We may also share limited Contact Information (name, email address, and phone number) with the following categories of recipients. These recipients may function as independent data controllers and process your Contact Information in accordance with their own privacy practices.

  • Other ASSA ABLOY Group companies: ASSA ABLOY Group Companies, if interested in other ASSA ABLOY products and services, we may share your Contact Information (name and email information).
  • Partners: Where necessary to respond to inquiries or to provide products or services, including sales, delivery, installation, or support, particularly where a local partner is responsible for a specific region and ASSA ABLOY Global Solutions does not have a local office.
  • Delivery Companies and Installers: Where necessary to fulfill your order, such as for delivery or installation services.

We may further share Personal Data where required by law or in response to lawful government access requests.

  • Required by law: Where we are legally obligated to disclose Personal Data as part of a legal or regulatory process, we will take commercially reasonable steps to notify you of such disclosure, unless prohibited by law. Disclosures may occur in response to lawful requests from government authorities, including courts, regulators, national security authorities, or law enforcement agencies.
  • Government requests, security and protection of rights: We may disclose Personal Data where we believe, in good faith, that such disclosure is necessary and proportionate to protect the security of our systems and services, prevent or investigate fraud, respond to security incidents or data breaches, comply with lawful government requests, or protect our rights, property, or legal interests. Any such disclosure will be limited to the Personal Data that is strictly necessary and conducted in accordance with applicable data protection laws.

4. Cross-Border Transfers

We operate globally and may collect Personal Data from individuals located in different countries. Regardless of where Personal Data is collected, it may be accessed, stored, or processed in countries where ASSA ABLOY Global Solutions AB, its affiliates, or its service providers operate.

For individuals located in the European Economic Area (EEA), this may include transfers of Personal Data outside the EEA. Such transfers may be made to countries recognized by the European Commission as providing an adequate level of data protection or countries that are not subject to an adequacy decision.

Where Personal Data is transferred to countries not recognized as providing an adequate level of protection, we rely on appropriate safeguards in accordance with applicable data protection laws. These safeguards include, as applicable, the European Commission’s Standard Contractual Clauses and additional technical, organizational, and contractual measures designed to ensure an essentially equivalent level of protection.

Transfers are conducted in connection with the processing purposes outlined above, such as providing customer support and supporting internal business functions. You may obtain further information about the specific countries involved and the safeguards applied to each transfer by contacting us using the details provided in the Contact section of this Privacy Notice. 

5. Use of Artificial Intelligence (AI)

We leverage AI technologies to process your Personal Data to deliver enhanced services aligned with the purposes described above. This processing is conducted based on our legitimate interests, while respecting your privacy rights. AI enables us to respond to your requests promptly and accurately. All AI usage complies with internal ASSA ABLOY policies, incorporates appropriate safeguards, and does not involve automated decision-making with significant impact, within the meaning of applicable data protection laws.

As part of this process, we utilize your Contact Information, Account Information, Transaction Information, User Content, Usage Information, Communication History and Professional Characteristics when you interact with us as a customer, business partner, or representative of an organization interested in our offerings. This may include details related to products and services you have expressed interest in or acquired from us, installation, maintenance or support activities, project-related tasks, and billing or financial information when a contact person from your company is required.

Personal Data outlined above may be processed using AI features or Services across our IT systems, including email (e.g. Copilot with Microsoft Outlook), CRM, customer support, service platforms, ERP for billing, eCommerce, and corporate websites using chatbots or online forms. AI-supported outputs are subject to appropriate human oversight and review. Processing is based on legitimate interests or your consent where required.

In line with the ASSA ABLOY Group Responsible AI Policy, we aim to be transparent about our use of AI systems and Personal Data. Where AI systems are used, we seek to communicate information about their use, functioning, and decision-making processes in a clear, understandable manner, adapted to the relevant audience.

You have the right to object to the processing of your Personal Data using AI‑supported tools where such processing is based on our legitimate interests. We will assess each objection and apply appropriate safeguards or discontinue the processing where required. If you wish to exercise this right, please reach out using the contact details provided in the Contact section.

6. Data Retention

We retain Personal Data only as long as necessary to fulfill the purposes for which it was collected unless a longer retention period is required or permitted by law. Specific retention periods are as follows:

  • Contact Information, Communication History for Leads: Retained for up to two (2) years from the last meaningful interaction.
  • Contact Information, Account Information, Communication History for Customers and Business Partners: As long as the business relationship persists and five (5) years thereafter.
  • Device Information, Audio, Electronic, Visual, and Similar Information, User Content, Usage Information, Social Media Information, Preferences: Deleted after 2 years, aggregate data may be stored longer.
  • Customer support Information: Deleted within three (3) months after the support case is resolved.
  • Other Related Personal Data: Retained for the duration of the relevant business relationship or support engagement and thereafter only for as long as necessary to resolve the relevant matter, comply with legal or contractual obligations, or establish, exercise, or defend legal claims. Such data is deleted or anonymized once no longer required for these purposes.

We may keep your Personal Data for longer if laws or regulations require it, such as for legal, contract, or regulatory reasons.

7. Children’s Data

Our websites, applications, products, and services are intended for adults and are not directed at children. We do not knowingly collect or process Personal Data from individuals under the age of sixteen (16), or such higher age as may be required by applicable local law, without verifiable consent from a parent or legal guardian. If we become aware that Personal Data relating to a child has been collected without the required consent or in violation of applicable laws, we will take reasonable steps to promptly delete or anonymize such data.

Where deletion is not feasible, we will restrict the processing of the data to legal or compliance purposes only and ensure that it is not used for any other purpose or disclosed to third parties. Parents or legal guardians who believe that we may have collected Personal Data relating to a child may contact us using the details provided in the Contact section of this Privacy Notice. We will investigate the matter and take appropriate action in accordance with applicable data protection laws.

8. Your Rights

You have the following rights regarding your Personal Data:

  • Right to withdraw consent: If we process your Personal Data with your consent, you can withdraw it at any time. Withdrawal does not affect prior processing's legality, but may limit access to certain services. We will let you know the consequences if you deny or withdraw consent.
  • Right to access: You are entitled to request information about which Personal Data we process about you and how it is being processed. You also have the right to request a copy of the Personal Data we process about you.
  • Right to rectification: If you consider your Personal Data that we process to be inaccurate, e.g. information concerning your name or address, you have the right to get the inaccurate information corrected and to get the incomplete information completed by providing us with the correct information.
  • Right to erasure: You have the right to request that your Personal Data is erased, e.g. if the processing is no longer relevant in relation to the purpose the information was collected for or if you recall your consent to the processing and there are no other legal grounds for the process.
  • Right to limitation of processing: You have the right to request limitation of the processing of your Personal Sata, with the exception for storage. Limitation of processing can be requested, for example if you object to the accuracy of the Personal Data or if you consider the processing of your Personal Data to be unlawful.
 
  • Right to objection: You have the right to object to our processing of your Personal Data where such processing is based on our legitimate interests or used for direct marketing purposes. Where you object, we will review your request and stop the relevant processing unless we can demonstrate compelling and overriding legitimate grounds or where the processing is required for legal or contractual reasons. You may object at any time, including to the use of your Personal Data for marketing communications or related profiling.
  • Right to data portability: You have the right to obtain the Personal Data you have provided us with in a structured, commonly used, and machine-readable format and have this transmitted to another controller, provided that the process is automatized and that the process is based on consent or an agreement.

Requests to exercise your rights should be submitted via email at privacy.globalsolutions@assaabloy.com. If you have a complaint regarding our processing of your Personal Data, you may report it to the Swedish Data Protection Authority (IMY), Box 8114, 104 20, Stockholm, Sweden. Details are available here.

If you are located outside the European Union or European Economic Area, you may also have the right to lodge a complaint with your local data protection authority or other competent supervisory authority, in accordance with applicable local data protection laws.

9. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. The most current version of this Privacy Notice is always available on our website and applies from its effective date as indicated at the top of this page. If you do not agree with the updated terms, you should discontinue use of our Services.

Where changes materially affect your privacy rights, we will provide additional notice, for example through our website or via email as appropriate. Where we process Personal Data based on your consent, and an update introduces a new processing purpose that is not compatible with the original purpose, we will seek new consent in accordance with applicable data protection laws.

10. Cookies

We use cookies and similar technologies to enhance your experience on our website and deliver personalized advertising through platforms such as Google Ads, YouTube, LinkedIn, Facebook, and Instagram. Advertising cookies are placed only with your consent, helping us understand your Preferences and show relevant content.

We also use cookies including from third parties to ensure the best browsing experience. Some cookies may track your use of our website, display personalized content and targeted ads, analyze site traffic, and help us understand audience sources.

You can manage or withdraw your consent to advertising cookies at any time through our Cookie Settings or via your browser preferences. For more information, please refer to our Cookie Notice and www.allaboutcookies.org.

11. Security

We implement security measures to protect personal information from loss, misuse, unauthorized access, alteration, disclosure, or destruction. Additionally, we have measures to ensure the ongoing confidentiality, integrity, and availability of systems and services processing personal information, and to restore data availability and access promptly in case of an incident. We recommend that individuals protect their user accounts and devices with up-to-date security measures.

In the event of a Personal Data breach, we will assess the incident and, where required by applicable data protection laws, notify the relevant supervisory authorities and affected individuals without undue delay. Such notifications will be made in accordance with legal requirements and will include appropriate information about the nature of the breach and the measures taken or proposed to address it.

12. Contact us

If you have questions or concerns regarding your Personal Data, or wish to exercise your rights under applicable data privacy laws, please direct your correspondence to the Data Protection Manager at the address above. We encourage you to provide detailed information about your inquiry to help us respond efficiently. Our team is committed to addressing your requests promptly and in compliance with all relevant privacy regulations.

Please email us at privacy.globalsolutions@assaabloy.com.

Alternatively, you can write to us at:

Attention: ASSA ABLOY Global Solutions, Data Protection Manager
Lodjursgatan 1, 26144, Landskrona, SWEDEN.

We will reply to your request as soon as possible. Typically, we acknowledge receipt of requests within five to ten working days. Substantive responses are provided within the timeframes required by applicable data protection laws. Where we have appointed a Data Protection Officer (DPO), the DPO will be informed as necessary.

13. Country specific

The country‑specific information set out below is intended to reflect certain local data protection laws that may apply depending on your location. This list is not exhaustive, and additional rights or obligations may apply under other applicable national or regional data protection laws.

We are committed to respecting the principles and requirements of applicable data protection laws and to applying appropriate safeguards to protect your Personal Data. Where local law provides specific or additional requirements, we seek to address those requirements in line with applicable legal obligations and our data protection practices.

  • ARGENTINA – Personal Data Protection Law 2000 (PDPL) (Law No. 25,326)
  • AUSTRALIA – The Privacy Act 1988, Australian Privacy Principles (APPs)
  • BRAZIL – Brazilian General Data Protection Law (LGPD) – Law No 13,709/2018.
  • CANADA – Personal Information Protection and Electronic Documents Act (PIPEDA) 2000
  • COLOMBIA – Data privacy rights and protection are governed by Law 1581/12, Decree 1377/13, Law 1266/08 and Law 1273/09
  • HONG KONG – Personal Data Privacy Ordinance (PDPO) 1995
  • INDIA – The Digital Personal Data Protection Act (DPDPA) 2023
  • INDONESIA – The Personal Data Protection Law (PDPL) 2022 and Electronic Information and Transaction Law (EIT), as amended in 2008
  • ISRAEL – The Privacy Protection Law (PPL) 1981, Amendment No. 13 to the Privacy Protection Law 2024
  • JAPAN – The Act on the Protection of Personal Information (APPI) 2003, as amended in 2017
  • MEXICO – The Federal Law on Protection of Personal Data held by Private Parties (LFPDPPP) 2010
  • PANAMA – Law no 81 of 2019 on Personal data protection
  • SINGAPORE – The Personal Data Protection Act (PDA) 2012
  • SOUTH AFRICA – The Protection of Personal Information Act (PoPIA) 2013, as amended in 2025
  • SWITZERLAND – The Federal Act on Data Protection (FADP) 2007, as amended in 2020
  • THAILAND – The Personal Data Protection Act (PDPA) 2019
  • UAE – The Protection of Personal Data (PDPL)- 2021
  • UNITED STATES – If you are a United States resident, additional privacy rights may apply to you under applicable U.S. state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA) and similar state privacy statutes. Please refer to our Do Not Sell My Info Notice, which supplements this Privacy Notice.