Snapshot 205472
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to main content Privacy Statement AKAMAI PRIVACY STATEMENT 1. Akamai Group and Contact Details 1.1 Akamai’s Affiliates 1.2 Akamai’s Main EU Establishment and Supervisory Authority 1.3 Akamai’s UK Establishment and Supervisory Authority 1.4 Akamai’s Malaysian Establishment and Supervisory Authority 1.5 Akamai’s Data Protection Officers 1.6 How to Contact Us 2. Personal Data Collected and Processed by Akamai Directly and Indirectly 2.1 Services Provisioning 2.2 Marketing Activities 2.3 Recruitment 2.4 Procurement Activities 2.5 Visiting Akamai Sites 2.6 Visiting Akamai Facilities 2.7 Threat Monitoring 2.8 Call and Meeting Recording 3. Purpose and Legal Basis for Processing of Personal Data 4. Recipients of Personal Data 5. International Transfer of Personal Data 6. Personal Data Safeguards 7. Personal Data Retention 8. Your Rights as Data Subject 9. Country-Specific Information 9.1 Information for Data Subjects in the EU 9.2 Information under California Law 9.3 Information for Data Subjects in Brazil 10. Children and Minors 11. Tracking Technologies 11.1 Cookie Technologies 11.2 Adobe Analytics 11.3 Third-Party Social Media Widgets 12. Changes to Privacy Statement 12.1 Notification of Changes 12.2 Change Control AKAMAI PRIVACY STATEMENT AKAMAI PRIVACY STATEMENT 1. Akamai Group and Contact Details 1.1 Akamai’s Affiliates 1.2 Akamai’s Main EU Establishment and Supervisory Authority 1.3 Akamai’s UK Establishment and Supervisory Authority 1.4 Akamai’s Malaysian Establishment and Supervisory Authority 1.5 Akamai’s Data Protection Officers 1.6 How to Contact Us 2. Personal Data Collected and Processed by Akamai Directly and Indirectly 2.1 Services Provisioning 2.2 Marketing Activities 2.3 Recruitment 2.4 Procurement Activities 2.5 Visiting Akamai Sites 2.6 Visiting Akamai Facilities 2.7 Threat Monitoring 2.8 Call and Meeting Recording 3. Purpose and Legal Basis for Processing of Personal Data 4. Recipients of Personal Data 5. International Transfer of Personal Data 6. Personal Data Safeguards 7. Personal Data Retention 8. Your Rights as Data Subject 9. Country-Specific Information 9.1 Information for Data Subjects in the EU 9.2 Information under California Law 9.3 Information for Data Subjects in Brazil 10. Children and Minors 11. Tracking Technologies 11.1 Cookie Technologies 11.2 Adobe Analytics 11.3 Third-Party Social Media Widgets 12. Changes to Privacy Statement 12.1 Notification of Changes 12.2 Change Control AKAMAI PRIVACY STATEMENT Last Updated: August 18, 2026 1. Akamai Group and Contact Details Akamai Technologies, Inc. and its wholly owned and operated global affiliates (each separately and together “Akamai”) respect your privacy and are committed to compliance with applicable privacy laws, regulations, and principles. This Privacy Statement covers the personal data which respective Akamai affiliate processes in a controller role (i.e., we process this data for our own purposes), or in any other equivalent role or corresponding terms applied by applicable data protection laws. The entity controlling your personal data is the entity with which you interact. In case of interaction with Akamai websites (e.g., akamai.com, linode.com or other websites or portals that post a link to this Privacy Statement), the controlling entity is Akamai Technologies, Inc. This Privacy Statement does not apply to the extent where the respective Akamai affiliate processes personal data in a processor role (i.e., when we offer various services to our customers and act on behalf of our customers), or in any other equivalent role or corresponding terms applied by applicable data protection laws. The details of the processing of personal data in the processor role are outlined in our data processing agreement available in our Trust Center. 1.1 Akamai’s Affiliates A detailed list, with locations, of Akamai’s affiliates covered by this Privacy Statement and contact details is available here. 1.2 Akamai’s Main EU Establishment and Supervisory Authority Global Data Protection Officer Akamai’s Supervisory Authority in the EU: Akamai Technologies GmbH Attn: Global Data Protection Officer Parkring 22 85748 Garching Germany Bayerisches Landesamt fur Datenschutzaufsicht (BayLDA) Promenade 18 85748 Ansbach Germany 1.3 Akamai’s UK Establishment and Supervisory Authority Akamai's UK establishment: Akamai’s Supervisory Authority in the UK: Akamai Technologies Limited Attn: Global Data Protection Officer Level 3, 58-60 Berners St., London, W1T 3NQ UK Information Commissioner's Office Wycliffe House Water Lane Wilmslow, Cheshire, SK9 5AF UK 1.4 Akamai’s Malaysian Establishment and Supervisory Authority Global Data Protection Officer Akamai’s Supervisory Authority in Malaysia: Akamai Technologies Malaysia SDN. BHD. D2-55, IOI Boulevard, Jalan Kenari 5, Bandar Puchong Jaya, 47170 Puchong, Selangor Darul Ehsan Malaysia Data Protection Commissioner Office Level 8, Galeria PjH, Jalan P4W, Persiaran Perdana, Precinct 4, Federal Government Administration Center 62100 Putrajay Malaysia 1.5 Akamai’s Data Protection Officers Chief Privacy Officer Global Data Protection Officer Akamai Technologies, Inc. Attn: Chief Privacy Officer Legal Department 145 Broadway Cambridge, MA 02142 U.S.A. Akamai Technologies GmbH Attn: Global Data Protection Officer Parkring 22 85748 Garching Germany 1.6 How to Contact Us If you have a question about this statement or Akamai’s handling of your personal data, or if you wish to execute your data subject access rights or provide instructions regarding our use of your personal data as set forth in this Privacy Statement, you may contact us: To opt out of marketing email communications: by contacting us via this Marketing Email Opt-Out Form To access and provide instruction regarding your personal data via our privacy requests forms: If you are the user of Cloud Computing services – by contacting us via Data & Privacy Requests Form Other requests - by contacting us via our DSAR Form For any other matters: By sending an email to privacy@akamai.com; By mailing us at the postal addresses indicated in section 1.3 above 2. Personal Data Collected and Processed by Akamai Directly and Indirectly This Privacy Statement explains what personal data (otherwise known as personal information) Akamai collects or otherwise processes about you through our interactions with you. Such interactions may occur through your status as, among others, a representative of a customer or a prospective customer; a representative of a partner or third-party service provider; a visitor to our websites, communities, web properties, applications, or portals (“Sites”); a visitor to our offices; a job applicant, or as you otherwise engage with Akamai. The data collected depends upon the nature of your direct interaction with Akamai, the products, services, and features you use (or that the company you represent uses), Sites you use, as well as any decisions you make about providing data, including decisions through privacy settings that you may set on your browser or device. You may also provide your data to Akamai indirectly through use of one of Akamai’s customers’ websites, applications or corporate systems or via Akamai’s third-party service providers. When asked to provide personal data, you may decline — but depending on what that personal data is and the purpose for which it may be collected, your user experience; ability to obtain a product, service, or offer from us; ability to provide a product or service to us; job application submission; or any other engagement with Akamai may be impacted. Personal data will be processed by Akamai manually or by electronic means. In general, Akamai collects and processes personal data in connection with the following business operations or activities: Services provisioning, Marketing activities, Recruitment, Procurement activities, visiting our Sites, visiting our facilities, Threat Monitoring or if you otherwise directly or indirectly engage with Akamai or speak to one of our representatives. For an overview of categories of personal data collected and processed by Akamai depending on the activities, type of interaction, and data subject please check “More” below. More Table 1 (Category of personal data collected and processed and type of interaction) No. Business Operations and Other Activities Data Subject Category of Personal Data Collected and Processed Type of Interaction Between Akamai and Data Subject 1 Services provisioning 1) Customer/ prospective customer or their representative 2) Partner/ prospective partner or their representative Contact Information Account Data (in case of Cloud Computing services) Direct 3) Individuals accessing Akamai customers’ websites, applications or corporate systems (except for Cloud Computing services) Service Logs Indirect 4) Customer/Partner/Individuals accessing Cloud Computing services Service Logs Direct Indirect 2 Marketing activities 1) Customer/ prospective customer or their representative 2) Partner/ prospective partner or their representative 3) Individual interested in our services or products Contact Information Direct Indirect Device and Usage Data Direct 3 Recruitment Job applicant Employment, Job History, and Applicant Data Identity verification data Background check data Direct Indirect 4 Procurement activities Service provider or its representative Contact Information Direct Indirect 5 Visiting Akamai Sites Visitor to Akamai Sites/Interested individual Contact Information Sites Logs Device and Usage Data Login Information and Credentials Live Chat Data Direct 6 Visiting Akamai facilities Visitor to Akamai facilities/Interested individual Contact Information Office Visitors Data Direct 7 Threat Monitoring Internet users whose online content references Akamai/ indicates a threat Threat Data Indirect 8 Call and Online Meeting Recording 1)Customer/prospective customer or their representative 2) Partner/prospective partner or their representative 3) Individual interested in our services or products Call or Online Meeting Chat Data Direct Less 2.1 Services Provisioning Akamai collects and processes personal data from you through your direct interactions with Akamai if you inquire about or obtain a service or product from us (or represent a company that inquires about or obtains a service or product from us) or request a support from us. Categories of data collected and processed by Akamai includes the following: Contact Information. This data includes first and last name, email address, postal address, telephone number, company name, job title, and similar contact data e.g. social media handle(s). Account Data (in case of Cloud Computing services). This data includes Contact Information (defined above) and any other data provided by you during account creation, financial information, billing address and payment information e.g. credit card numbers or payment token, information that you store in your account, details about your use of Akamai offerings or any preferences you set in your account. Additionally Akamai is partnering with third parties to enable the performance of their services to Akamai customers (e.g. Google Tag Gateway services, Akamai service logs/network or threat data related services, professional services), in this case, personal data collected by Akamai is shared with the partner, who is acting in a sub-processor role or processor role, if agreed so between the customer and the partner, as described in Akamai’s description of the enabled services and/or in the agreement between Akamai and the partner. In case such data is processed by the partner outside the enabled services, the data is processed independently by the partner in a “controller” or “business” role in accordance with terms agreed between the customer and the partner and/or the partner’s privacy statement. For more information about processing of personal data in connection with Akamai Services please see the information available in Akamai’s Trust Center. There are also scenarios where Akamai acts as “controller” or ”business” with respect to data collected from the users of our services or individuals accessing Akamai customers' websites, applications or corporate systems. Categories of such data include the following: Service Logs. During its service operation, Akamai collects network traffic data, including IP addresses and related internet transaction data t as a result of the service delivery or delivery of information over the Akamai platform, as well as (when our customer has purchased the relevant services) data associated with user activity and interaction with web and internet protocol sessions transiting Akamai’s servers as part of your session with our customer’s websites, applications, corporate systems or AI tool. Depending on the service type, Service Logs include such data as e.g., an end user’s IP address, browser and device data, URLs visited, a time stamp, and, where applicable depending on the service used, authentication data, API traffic packet or content of communication, including attachments. Depending on the applicable laws, these Service Logs may or may not be classified as personal data. We refer to these Service Logs as Network Data and Threat Data as defined in Akamai’s Services Terms of Use. We process the Service Logs a in a “controller” or “business” role (i.e., we process this data for our own purposes) for traffic and security analytics, billing our customers, service improvement (e.g., improving Akamai’s threat intelligence), plan future capacity and deployment needs, troubleshooting and aggregate reporting (i.e., reports that do not identify you or the customer). We also partner with third parties for traffic and security analysis of Service Logs, and certain partnerships include the analysis of the partner's traffic and security data. Processing Service Log data for security analytics includes validating credentials in Service Logs against lists with stolen credentials as part of recognition of malicious access and account take over attempts. 2.2 Marketing Activities Akamai collects and processes your personal data from you through your direct interactions with Akamai if you obtain a service or product from us (or represent a company that obtains a service or product from us), if you inquire about a service or product from us or you are otherwise interested in our services, products, or events, or interact with Akamai Sites (e.g., by registering for Akamai newsletters or events, or accessing Akamai online resources) to perform direct marketing and lead generation activities. Categories of data collected and processed by Akamai in case of direct interaction include the following: Contact Information. This data includes first and last name, email address, postal address, telephone number, company name, job title, and similar contact data. Device and Usage Data. Akamai collects information about the device you use to access our Sites and the interactions of you and your device with our Sites. That personal data can include the internet protocol (IP) address associated with your computer or device, the domain name of your internet service provider (ISP), your device type and identifiers, browser type, operating system, the content or pages you view on the Akamai Sites, time spent on Akamai Sites, and similar usage and device information. Information is collected via different technologies used on Akamai Sites such as cookies, web beacons, Adobe Analytics or third-party social media widgets. For more information about these technologies on Akamai Sites and your choices regarding them, see the Tracking Technologies section of this statement. Akamai collects and processes personal data from you through your indirect interactions with Akamai as a result of service provisioning by third party service providers to Akamai. In some cases, you may provide such personal data via third-party service providers (e.g., professional event coordinators, lead generation service providers) who then forward the data to Akamai, typically pursuant to a contract with us. Such service providers perform business operations on Akamai’s behalf, such as sales, lead generation, and direct marketing. Akamai may also purchase data from contact database provider companies. Akamai may also use third-party databases to enrich its own customer database with missing information like e.g., job title or company name. Akamai may also collect and process your personal data for marketing activities if you obtain a service or product from one of Akamai’s resellers (or represent a company that obtains a service or product from one of Akamai’s resellers). Customers of Akamai services may have the opportunity to refer other contacts to Akamai and share their contact details, provided that they have permission to do so. Categories of data collected and processed by Akamai in case of indirect interaction include the following: Contact Information. This data includes first and last name, email address, postal address, telephone number, company name, job title, and similar contact data. Over this data, we are the “controller” or “business” (i.e., we determine the purpose and means of the data processing). Akamai may also allow service performance partners to access Contact Information to engage directly with Akamai customers and market their services to them as part of the service performance engagement between Akamai and that partner. Such access is granted based on Akamia’s and the partner’s legitimate interest to perform services to the Akamai customers. In marketing communication we use web beacon technology, as described in Web Beacons in Marketing Communication below. As part of any marketing communications, we offer you the opportunity to choose to unsubscribe. You may at any time choose not to receive marketing communication from us by following the unsubscribe instructions included in each email you may receive, by indicating so when we call you, or via our marketing opt out forms indicated in section 1.4 above. Please note that if you choose to unsubscribe we will still keep your data on the marketing email opt-out list to make sure that you will not receive marketing communication from Akamai in the future. If you are a customer or partner, or a representative of a customer or of a partner who has an active account for our services, and you choose to unsubscribe, we will still send you non-marketing communications, e.g., your service-related notifications. In addition to unsubscribe option, as indicated above, you may also at any time request deletion of your data by contacting us via our privacy requests forms (see section Your Rights as Data Subject). Please note that if you choose to delete your data then your data will not be included on the marketing opt-out list. In case of deletion request we will not have records against which we can screen new data therefore you may receive marketing communication from Akamai in the future if we will have again legal basis for sending you marketing communication. Akamai does not deliver third-party online advertisements on our websites, but we advertise our services on third-party websites. Please familiarize yourself with those website operators’ or network advertisers’ privacy policies to understand their practices relating to advertising, including what type of information they may collect about your internet usage. Some advertising networks we use may be members of the Network Advertising Initiative (NAI), the European Interactive Digital Advertising Alliance (EDAA) or the Digital Advertising Alliance (DAA). Individuals may opt out of targeted advertising delivered by NAI, EDAA or DAA member ad networks by visiting the NAI website, Your Online Choices by EDAA and Your AdChoices by DAA. These third-party websites may use cookies and web beacons to collect information (such as your IP address) about your activities on Akamai’s and others’ websites to provide you with targeted Akamai advertisements based upon your interests. If you wish to not have this information used for the purpose of serving you targeted ads, you should update your preferences in the cookie management tool or contact the website owner. Please note that this does not opt you out of being served non-targeted advertising. You will continue to receive generic, non-targeted ads. Akamai may also advertise our services and run retargeting campaigns on social media platforms (e.g. LinkedIn, Meta, Reddit, YouTube) based on customer and prospect contact list maintained by Akamai and collected either through your direct or indirect interactions with Akamai as outlined in this section above. Akamai may share your name and email address with the respective social media platforms in a secure fashion to provide you with targeted Akamai ads that may be of interest to you based on our past interactions. As a result you will see Akamai ads when scrolling through your social feeds or watching video content. If you wish to not see targeted ads you should update your preferences on the respective social media platform. You may also opt-out from sharing your name and email address with social media platforms for Akamai retargeting campaigns via our DSAR Form. Please note that this does not opt you out of being served non-targeted advertising. You will continue to receive generic, non-targeted ads. 2.3 Recruitment Akamai collects and processes personal data from you through direct interactions with Akamai if you apply for a job with us. Akamai collects and processes personal data from you through indirect interactions with Akamai as a result of service provisioning by third-party service providers to Akamai. In some cases, you may provide such personal data via third-party service providers (e.g., job application sites, recruiter agencies) who then forward the data to Akamai, typically pursuant to a contract with us. Such service providers perform business operations on Akamai’s behalf, such as recruitment services or other Human Resources tasks. Categories of data collected and processed by Akamai in case of direct and indirect interactions include the following: Employment, Job History, and Applicant Data. If you interact with Akamai to process employment applications, we collect personal identity and contact information, as well as data relating to your job history, educational history, resume, work eligibility, and related information used to evaluate candidates for employment with Akamai e.g. to the extent applicable information related to immigration assessment. Over this data, we are the “controller” or “business” (i.e., we determine the purpose and means of the data processing). Akamai uses automated tools provided by third parties to process your Employment, Job History, and Applicant Data collected both through direct and indirect interactions. These tools are used to organize your personal data, to support Akamai’s recruitment process (e.g., by offering nonbinding recommendations to Akamai during different stages of the process) and to ensure a fair and objective decision-making process by the Akamai Talent Acquisition team. Akamai does not make any decisions with legal or significant effects about you without meaningful human input. If you wish to update your Employment, Job History, and Applicant Data processed by Akamai or withdraw your consent for participation in future recruitments, you may contact your recruiter directly or us as outlined in the How to Contact Us section of this statement. To protect the integrity of our hiring process, reduce candidate fraud, and ensure security, Akamai conducts job applicant’s identity verification during the virtual interview or once the job offer was accepted by the job applicant. Akamai may use a third party service provider to detect impersonation and suspicious activity during virtual interviews. To the extent permitted by local laws once the job offer was accepted Akamai may use a third-party identity verification provider to complete the identity check or verify the job applicant’s identity via manual ID check. A failure to complete identity verification may result in not proceeding with the hiring process. In addition to the extent permitted by applicable laws, once the job offer was accepted Akamai may obtain background screening reports from respective reporting agencies and other authorized sources to evaluate respective job applicant’s eligibility for employment. Categories of data processed by Akamai in case of direct and indirect identity verification and background check include the following: Identity Verification Data. This data includes: a) for identity verification during virtual interview: name, email address, image, IP address and device data, assessment responses and b) for identity verification once the job offer was accepted: (i) in case of identity check via third-party identity verification provider, processing includes storing such data as name, date of birth, address, phone number, and for some jurisdictions identifiers such as Social Security Number or national ID number; image(s) of a government-issued identity document; and a facial image (selfie) used by the provider to authenticate document ownership and detect liveness, and (ii) in case of manual ID check viewing of data visible on the candidate’s ID. Background Check Data. This data may include the following information when it is substantially related to the position’s duties and responsibilities you are applying for: information concerning credit standing, criminal history, litigation history, identity and social security number verification, address and alias history, credit history, education verification, employment, professional licensing, credential and certification checks, military service, and other information. Over this data, we are the “controller” or “business” (i.e., we determine the purpose and means of the data processing). In the case of a third-party identity verification and background check service Akamai receives the identity verification results and background screening reports. Akamai does not use this data for any purpose other than identity verification and evaluation of eligibility for employment. Akamai does not make any decisions with legal or significant effects about you without meaningful human input. 2.4 Procurement Activities Akamai collects and processes personal data from you through direct interactions with Akamai if you provide services or products to us (or represent a company that provides services or products to us) or if we inquire about a service or product from you (or from the company that you represent). Akamai collects and processes your personal data through indirect interactions with Akamai if your representatives or agents (or representatives or agents of the company that you represent) offer your services or products to us or if we inquire about a service or product from your representatives or agents (or from representatives or agents of the company that you represent). Categories of data collected and processed by Akamai in case of direct and indirect interactions include the following: Contact Information. This data includes first and last name, email address, postal address, telephone number, company name, job title, and similar contact data, as well as financial information (payment-related information). Over this data, we are the “controller” or “business” (i.e., we determine the purpose and means of the data processing). 2.5 Visiting Akamai Sites Akamai collects and processes personal data from you through direct interactions with Akamai if you use Akamai’s Sites (for example, when registering for an Akamai event, webcast, or training, or accessing resources such as publications and white papers available online), or use one of our mobile applications, or visit or interact with our Sites and services using technologies like cookies and methods for obtaining usage and device data. Categories of data collected and processed by Akamai include the following: Contact Information. This data includes first and last name, email address, postal address, telephone number, company name, job title, and similar contact data provided by you in our webform during registration e.g., for an event, webcast or training. Sites Logs. Akamai collects network traffic data, including IP addresses and related internet transaction data that Akamai servers log as a result of the delivery of information over the Akamai platform, as well as data associated with user activity and interaction with web and internet protocol sessions transiting Akamai’s servers as part of your session with Akamai web property. Sites Logs include such data as: end-user IP addresses, URLs of Sites visited with time stamps (with an associated IP address), geographic location based upon IP address and location of Akamai server, telemetry data (e.g., mouse clicks, movement rates, and related browser data). Depending on the applicable laws, logged data may or may not be classified as personal data. Except for Akamai portal logs, we do not process or maintain the information in an identifiable way. Device and Usage Data. Akamai collects information about the device you use to access our Sites and the interactions of you and your device with our Sites. That personal data includes the internet protocol (IP) address associated with your computer or device, the domain name of your internet service provider (ISP), your device type and identifiers, browser type, operating system, the content or pages you view on the Akamai Sites, time spent on Akamai Sites, and similar usage and device information. Sites Logs and Device and Usage Data are collected via different technologies used on Akamai Sites such as cookies, web beacons, Adobe Analytics or third-party social media widgets. For more information about these technologies and your choices regarding them, see the Tracking Technologies section of this statement. Login Information and Credentials. If you use any of our Sites, you may be asked to create an account and provide a login name, password, and similar security information (e.g., a mobile phone number to which we can send a code) for authentication and account access. Live Chat Data.We also provide “live chat” sessions to assist you with our Sites and content. Please be aware that it is our general practice to monitor and record the live chat transcripts for staff training and quality assurance purposes, and in certain cases to retain evidence of a particular transaction or interaction. Live Chat Data includes content of the conversation and metadata about the user (e.g. IP address, type of connection (mobile, desktop etc.) and other web server metadata). During “live chat” sessions we may ask you to provide your Contact Information to verify if you are an existing customer, assist you with your inquiry or follow up on our discussion or provide you with our marketing communication. The live chat uses the LLM GPT-4 provided by Open AI OpCo LLC and you are notified respectively before starting your chat. If you do not want to use the chat bot, you can opt out via the cookie management pop up window as indicated in the chat notice you acknowledge before starting your chat. Over this data, we are the “controller” or “business” (i.e., we determine the purpose and means of the data processing). To allow you to interact with other websites on which you may have accounts (such as Facebook and other social media service providers) or join communities on such sites, we provide links or embed third-party applications that allow you to log in, post content, or join communities from our Sites. We may also provide you with general links to third-party websites. Your use of these links and applications is subject to the third parties’ privacy policies, and you should become familiar with these third-party sites’ privacy policies before using the links or applications. We do not control these third-party websites or applications and Akamai is not responsible for the privacy practices or the content of those other third-party websites or applications. 2.6 Visiting Akamai Facilities Akamai collects and processes personal data from you through direct interactions with Akamai if you visit our offices or an Akamai trade show or exhibit booth or other Akamai event. Categories of data collected and processed by Akamai include the following: Contact Information. This data includes first and last name, email address, postal address, telephone number, company name, job title, and similar contact data. Office Visitors Data. We collect CCTV images, first and last name, or other information when you enter our offices. We also collect details about your health if necessary, so that we can help you to access our buildings or reserve a parking spot. Over this data, we are the “controller” or “business” (i.e., we determine the purpose and means of the data processing). 2.7 Threat Monitoring Akamai may collect and process personal data as a result of monitoring of publicly available online sources to detect, assess, and respond to potential security threats, fraud, brand misuse, and other harmful activity that could impact Akamai, our employees, our customers, or our services. Such threat monitoring includes scanning of information that individuals have made available on the open internet or that is accessible in online environments such as social media, blogs, forums, and other online communities. Where a third‑party provider performs continuous monitoring of such sources on Akamai’s behalf, we receive reports that may include limited personal data necessary to evaluate and respond to a threat. Categories of personal data processed for this activity includes: Threat Data. This data may include: (i) identifiers and contact information contained in publicly available posts or profiles (e.g., name, handle/username, email if published), (ii) content of posts or related user‑generated content where relevant to the alert, (iii) device or network indicators included in the alert (e.g., IP address, URL), and (iv) contextual metadata (e.g., timestamp, platform, source link). Scope of Threat Data is limited to what is necessary to assess and address potential threats. Over this data, we are the “controller” or “business” (i.e., we determine the purpose and means of the data processing). 2.8 Call and Meeting Recording Akamai may collect and process your personal data when recording calls and online meetings. Calls and online meetings may be also transcribed by an automated service including AI transcription service. Please be aware that it is our general practice to record and transcribe the calls and online meetings, especially in connection with service provisioning or marketing activities, to accurately capture and analyze your requests, for quality assurance and staff training purposes, internal reporting, and in certain cases to retain evidence of a particular transaction or interaction. Categories of data collected and processed by Akamai include the following: Call or Online Meeting Chat Data. This data includes your voice, content of the conversation and any information you share during the chat (e.g.Contact Information, image). For this data, we are the “controller” or “business” (i.e., we determine the purpose and means of the data processing). We will only record and transcribe if all call and meeting participants consent. In case of Akamai hosted calls or meetings, you may express your consent by selecting respective options when joining the call or meeting e.g. Join and record or Join but don’t record. You may also ask the host to proceed without recording anytime. In case of customer hosted calls, please do not allow Akamai AI Notetaker Bot to join the meeting or ask the host to proceed without recording if you do not consent to recording and transcription. Service providers process recordings and transcripts on our behalf under data protection terms, they may not use your data for their own purposes. 3. Purpose and Legal Basis for Processing of Personal Data Akamai processes personal data to perform essential business operations and provide our products and services. In all cases, Akamai ensures that such processing is legal, fair, and reasonable. The various processing activities are justified by varying legal bases under the applicable data protection laws. The specific purposes the data is used for varies by type of data and may include operating and maintaining our platform, improving performance, development of new features and capabilities, research, and customer support. For an overview of purposes of personal data processing by Akamai and corresponding legal bases please check “More” below. More Table 2 (Purpose and legal basis for processing) No. Business Operations and Other Activities Data Subject Category of Personal Data Collected and Processed Purpose of Processing Legal Basis 1 Services provisioning 1) Customer/ prospective customer or their representative 2) Partner/ prospective partner or their representative Contact Information Communications, managing and supporting our customer relationship Legitimate interest or Contract Customer surveys and service improvements Legitimate interest Fulfillment of transactions/contractual obligations Legitimate interest or Contract Providing support Legitimate interest Account Data (in case of Cloud Computing services) Fulfillment of transactions/contractual obligations Legitimate interest or Contract Traffic and Security analytics Legitimate interest 3) Individuals accessing Akamai’s customers’ websites, applications or corporate systems (except for Cloud Computing services) Service Logs Fulfillment of transactions/contractual obligations Legitimate interest Product development and improvement Legitimate interest Traffic and Security analytics Legitimate interest Providing support Legitimate interest 4) Customer/Partner/Individuals accessing Compute services Service Logs Fulfillment of transactions/contractual obligations Legitimate interest Product development and improvement Legitimate interest Traffic and Security analytics Legitimate interest Providing support Legitimate interest 2 Marketing activities 1) Customer/ prospective customer or their representative 2) Partner/ prospective partner or their representative 3) Individual interested in our services or products Contact Information Device and Usage Data Marketing communications and promotional events Legitimate interest or Consent 3 Recruitment Job applicant Employment, Job History and Applicant Data Recruitment Contract, Legitimate interest, Legal obligation, or Consent Identity Verification Data Legitimate interest or Consent Background Check Dat Consent 4 Procurement activities Service provider or its representative Contact Information Communications, managing and supporting our vendor relationships Legitimate interest or Contract 5 Visiting Akamai Sites Visitor to Akamai Sites/ Interested individual Contact Information Fulfillment of transactions/contractual obligations Legitimate interest or Contract Sites Logs Device and Usage Data Providing functionality of our Sites Contract Personalization of your experience on our Sites Legitimate interest or Consent Product development and improvement Legitimate interest Marketing communications and promotional events Legitimate interest or Consent Providing support Legitimate interest Traffic and Security analytics Legitimate interest Login Information and Credentials Providing functionality of our Sites Contract Providing mobile applications and social computing environments Contract or Consent Providing support Legitimate interest Live Chat Data Providing support Legitimate interest Marketing communications and promotional events Consent 6 Visiting Akamai facilities Visitor to Akamai facilities/ Interested individual Contact Information Managing our relationship Legitimate interest Marketing communications and promotional events Legitimate interest or Consent Office Visitors Data Office access and physical security Legitimate interest or Consent 7 Threat Monitoring Internet users whose online content references Akamai/ indicates a threat Threat data Threat analysis Legitimate interest 8 Call and Online Meeting Recording 1) Customer/prospective customer or their representative 2) Partner/prospective partner or their representative 3) Individual interested in our services or products Call or Online Meeting Chat Data Communications, managing and supporting our customer relationships Marketing communications and promotional events Providing support Consent The specific purposes mentioned above may include the following: Communications, managing and supporting our customer relationships: We use Contact Information collected about customers, prospective customers, partners, and prospective partners, and about individuals representing them, to manage and support our customer relationships. This includes providing support for our services, providing access to customer service portals and communities, providing service training, communicating with customers, selling new services and features, troubleshooting issues, and other customer relationship–related matters. Akamai has legitimate interest to manage the business relationship with you or the party that you represent, to respond to any request or inquiries you submit to us, or to submit communication or inquiries to you. If you are acting on your own behalf, Akamai is processing your Contact Information in order to take steps necessary, at your request, to enter into a contract and to perform that contract. We may use Call or Online Meeting Chat Data to accurately capture and analyze your requests, for quality assurance and staff training purposes, internal reporting, and in certain cases to retain evidence of a particular transaction or interaction based on your consent. Communications, managing and supporting our vendor relationships: We use Contact Information about our service providers or individuals representing our third-party service providers to manage and support our vendor relationships. This includes, among others, communication with vendors and third-party service providers, purchasing and negotiating new offerings, requesting support and maintenance services, completing necessary transactions, and fulfillment of contractual obligations. Akamai has legitimate interest to manage the business relationship with you or the party that you represent, to submit inquiries to you or to respond to any request or inquiries you submit to us. If you are acting on your own behalf, Akamai is processing your Contact Information in order to take steps necessary, at your request, to enter into a contract and to perform that contract. Customer surveys and service improvements: As part of our customer relationship, we may contact you as our customer or as a representative of a customer or a partner, if applicable (except if you chose not to be contacted by us) via Contact Information you provided, to ask whether you would like to participate in our satisfaction surveys or in market research surveys. We use these surveys to improve our service offering and business operations to better serve you and our customers and partners. Akamai has legitimate interest to maintain viable and efficient business operations through management and improvement of our services, increase customer satisfaction, provide better user experience, and identify ways to grow our business. Fulfillment of transactions/contractual obligations: We use Contact Information to respond to requests from current and prospective customers and partners or their representatives, and as needed and appropriate to complete business transactions, comply with contractual requirements, provide Akamai services and products or access to an Akamai event, webcast, training or other materials. We use Account Data for account creation and account management, to process your service requests, handle orders and process payments. If you are a representative of a customer or prospective customer, or a representative of a partner or prospective partner, Akamai has legitimate interest to process your Contact Information and Account Data to manage the business relationship with you or the party that you represent. If you are acting on your own behalf, Akamai is processing your Contact Information and Account Data in order to take steps necessary, at your request, to enter into a contract and to perform that contract. We use Service Logs in order to comply with contractual requirements between Akamai and its customers. Service Logs are processed for purposes of billing our customers based on Akamai’s legitimate interest in providing and maintaining its products and services and calculation of fees. Managing our relationship: We use Contact Information collected about visitors at our facilities (like Akamai offices, or trade show or exhibit booths) or about other interested individuals to manage our relationships. For example, we need your Contact Information to confirm your appointment at our offices or to handle your inquiries. Akamai has legitimate interest to manage the relationship with you and to respond to any request or inquiries you submit to us. Marketing communications and promotional events: We use Contact Information, Sites Logs, Live Chat Data and Device and Usage Data we collect to communicate with you, whether you are a customer, prospective customer, or their representative, partner, prospective partner or their representative, visitor to Akamai Sites, or other individual interested in Akamai services and products. We use the personal data collected from your interaction with Akamai or with the Sites for website performance and marketing analytics, to deliver marketing communications, special offers, information about events, advertisements or retargeting campaigns that may be of interest to you or to parties that you represent, either directly or via third-party service providers (e.g. event organizers, social media platforms). Akamai has legitimate interest to process such data in order for us to operate effectively and to manage and respond to any request or inquiries you submit to us, allow interaction to provide information regarding Akamai products and services or events, and to promote our products, services, and events to identify ways to grow our business. Where legitimate interest may not serve as legal basis, Akamai is processing your data based on your consent, e.g., consent provided via subscription form on our Sites or via acceptance of cookies on our Sites, or consent provided to third parties who have shared your data for marketing purposes with us. Some of our offerings may be co-branded, as they are sponsored by both Akamai and third parties. We share data with these third parties for promotional purposes (see section Recipients of Personal Data). Notwithstanding the above, Akamai and third parties are processing this data as separate controllers for their own purposes. We encourage you to familiarize yourself with such third parties’ privacy policies to gain an understanding of the manner in which they will handle personal data about you. We may use Call or Online Meeting Chat Data to accurately capture and analyze your requests, for quality assurance and staff training purposes, internal reporting, and in certain cases to retain evidence of a particular transaction or interaction based on your consent. Office access and physical security: We collect Office Visitors Data when you enter our facilities in order to enable you to access our offices and ensure physical security. Akamai has legitimate interest to protect the company’s facilities, its employees and visitors. In case of collection of sensitive data, such as health data to help you with access to our buildings, Akamai will seek your explicit consent. Personalization of your experience on our Sites: We use Sites Logs and Device and Usage Data to provide you with a personalized experience on our Sites, such as providing you with content in which you may be interested and making navigation on our Sites easier. The data also is used to generate statistics about the usage and effectiveness of our Sites and our service offerings, personalize your experience, and tailor our interactions with you. Akamai has a legitimate interest to personalize our interactions to provide best experiences with our Sites and services as well as provide the content of the Sites that may be of interest to you. Where legitimate interest may not serve as legal basis, Akamai will seek your consent, e.g., use of cookies that are not strictly necessary. Product development and improvement: We use Service Logs, Sites Logs and Device and Usage Data, and where applicable third party traffic and security data, in the development of new products and services, to improve and implement new features and capabilities in existing products or to develop and improve our Sites or to understand and analyze usage trends and preferences. For example, Service Logs and other technical traffic data, and security event data is used to derive and compile information relating to the type, nature, content, identity, behavior, signature, source, frequency, reputation, and other characteristics of malicious internet traffic and activity and to create aggregate reporting (i.e. reports that do not identify you or the customer). Akamai has a legitimate interest in developing and improving our products, services, platform, and Sites (e.g., routing optimization, service troubleshooting, identification and mitigation of security threats on the internet) to increase customers’ satisfaction and grow our business. Providing functionality of our Site: We use Login Information and Credentials, Sites Logs, and Device and Usage Data to provide you with services, features, or functionality of a website, community, or portal, as requested by you. Akamai is processing your data in order to take steps necessary, at your request, to enter into a contract and to perform that contract. Providing mobile applications and social computing environments: Akamai uses Login Information and Credentials in connection with offering mobile applications and social computing environments. Akamai makes available mobile applications for download from various mobile application marketplaces. Akamai also provides social computing tools on some of its Sites to enable online sharing and collaboration among members who have registered to use them. These include forums, wikis, blogs, and other social media platforms. When downloading and using these applications or registering to use these social computing tools, you are asked to provide certain personal data. Akamai is processing your data in order to take steps necessary, at your request, to enter into a contract and to perform that contract or based on consent. Registration information will be subject to and protected in accordance with this statement, except for the personal data that is automatically made available to other participants in such a social computing environment as part of your profile or settings. The processing of your personal data by these applications and tools may be subject to their respective privacy statements with specific information about personal data collection and handling practices. We recommend that you read those statements to understand how the tools and applications are processing your personal data. Any content you post, such as pictures, information, opinions, or any other type of personal data that you make available to other participants in such a social computing environment, is not subject to this Privacy Statement. Rather, such content is subject to the terms of use of the respective social computing environment, and any additional guidelines and privacy information provided in relation to its use, as well as the process by which you can remove your content from such tools or get help to do so. Please refer to the respective social computing environment to better understand yours, Akamai’s, and other parties’ rights and obligations with regard to such content. You should be aware that the content you post on any such social computing environments may be made broadly available to others inside and outside Akamai due to your profile and settings. Providing support: We use Contact Information to provide customers and partners with technical support as requested. We also use Service Logs, Sites Logs, Device and Usage Data, and Login Information and Credentials collected to troubleshoot and identify errors in our Sites as well as with our platform and services. Akamai has legitimate interest in maintaining viable and efficient business operations, services, products, platforms, and Sites. We use Live Chat Data to assist you with navigating our Sites and offerings. We may use Call or Online Meeting Chat Data to accurately capture and analyze your requests, for quality assurance and staff training purposes, internal reporting, and in certain cases to retain evidence of a particular transaction or interaction. . Akamai has legitimate interest in maintaining viable and efficient business communication. Where legitimate interest may not serve as legal basis, Akamai is processing your data based on your consent. Recruitment: In connection with a job application or inquiry, whether advertised on Akamai Sites or on a third-party platform, you provide us (either directly or through a service provider like a recruiting agency or recruitment platform) with Employment, Job History, and Applicant Data about yourself. We may use this data within Akamai in order to address your inquiry, consider you for employment purposes, or collect your feedback. Depending on local regulations, our legal basis for processing of your personal data within our recruitment process is: taking steps necessary, at your request, to enter into an employment contract; our legitimate interest in managing the recruitment process effectively and attracting the best talent for our organization; or legal obligation to process certain information as part of recruitment process or your consent. Akamai processes Identity Verification Data in connection with a job applicant's identity verification process during the interview or once the job offer was accepted by the job applicant. To the extent required by the respective jurisdiction such processing is based on your consent, especially where required for biometric identifiers, or Akamai’s legitimate interest. Akamai has legitimate interest in protecting the integrity of our hiring process, reducing candidate fraud, and ensuring security. When you are selected for hiring at Akamai, Akamai processes Background Check Data to evaluate your eligibility for employment. Background Check Data is processed to the extent permitted by applicable laws and based on job applicant’s consent. When you are providing more personal data than required for recruitment purposes in accordance with applicable laws, then please note that you are providing such data voluntarily, and Akamai’s processing of such data is based on your consent, which is given through the voluntary submission of your data. If your application is unsuccessful, Akamai may process your data for future recruitment processes based on your consent, or where applicable, our legitimate interest. When you show your general interest in working for Akamai or apply for future recruitment processes, then Akamai is processing your personal data based on your consent. Akamai processes Identity Verification Data in connection with a job applicant's identity verification process during the interview or once the job offer was accepted by the job applicant. To the extent required by the respective jurisdiction such processing is based on your consent, especially where required for biometric identifiers, or Akamai’s legitimate interest. Akamai has legitimate interest in protecting the integrity of our hiring process, reducing candidate fraud, and ensuring security.When you are selected for hiring at Akamai, Akamai processes Background Check Data to evaluate your eligibility for employment. Background Check Data is processed to the extent permitted by applicable laws and based on job applicant’s consent. Threat analytics: We process Threat Data to detect negative sentiment about Akamai and identify, assess, and respond to potential threats, fraud, or brand misuse that could affect Akamai, our personnel, our customers, or our services. Akamai has a legitimate interest in protecting its networks, systems, data, intellectual property, reputation, customers and personnel and, where applicable, in complying with legal obligations to prevent and respond to unlawful activity. Traffic and Security analytics: We use Service Logs, Sites Logs, Device and Usage Data and Account Data, and where applicable, third party traffic and security data, to detect and prevent potential fraud and security risks to our platform and to our website visitors, and to customers and their end users, for the purpose of traffic and security analytics, related reports, as well as for managing access to our portal accounts for security purposes. For example, we might deny a particular IP address or set of IP addresses used to launch cyberattacks. Akamai has a legitimate interest to protect the company’s networks, systems, and data as well as customers’ websites, applications, and end user’s data. For detailed information related to purposes and legal basis to the extent we process the personal data as a “processor” or “service provider” (i.e., on behalf of our customer who is the owner of the respective website or application that you access or use), please contact Akamai’s customers or partners directly. Additionally, we may use personal data listed in this statement to comply with our legal obligations, where applicable, or to resolve disputes and to protect or enforce our rights or claims. In case of any disputes, Akamai has legitimate interest in exercising or defending legal claims. In all cases of data processing on the basis of our legitimate interests, Akamai considers the impact on the rights and freedoms of the individuals whose data may be part of the processing, and ensures that its processing activities do not contradict or place at unreasonable risk any such rights or freedoms. Akamai may use personal data for reasons not described in this Privacy Statement where permitted by law and the new purpose is compatible with the purpose for which personal data was collected. If Akamai needs to use your personal data for an unrelated purpose, Akamai will notify you and explain the applicable legal basis. Less 4. Recipients of Personal Data Akamai may share personal data about you as may be necessary to complete the purpose of data processing as defined above or to fulfill legal obligation as applicable. Personal data processed by Akamai will be shared, transferred, accessed, disclosed, and preserved by other authorized entities to the extent required: Entities within Akamai group— Akamai is a global organization with business processes, management structures, and technical systems that cover all Akamai affiliates. As such, we share the personal data within the Akamai group to support necessary business operations, e.g., providing global services, operating global programs and initiatives, operating marketing activities, recruitment and people management, maintaining viable and efficient business operations, or supporting necessary business functions (e.g., Human Resources, Finance, customer support services). Third-party vendors, business partners, or agents- Your personal data may be shared with third-party vendors providing services to Akamai, business partners, professional advisors or agents working on our behalf for the purposes described in this statement. For example: Co-Branded Promotions — We share some Contact Information and Device and Usage Data with our business partners in order to be able to offer you co-branded products and services that may be of interest to you Cloud Security Services — We share Service Logs in connection with detecting and preventing potential fraud and security risks to our platform and to our visitors and customers Protection of the Rights and Property of Akamai and Others — We use and share the personal data you provide to protect the rights or property of Akamai, our business partners, third-party service providers, customers, or others when we have reasonable grounds to believe that such rights or property have been or could be affected Corporate Transactions — Circumstances may arise where, whether for strategic or other business reasons, Akamai decides to sell, buy, merge, or otherwise reorganize businesses in one or more countries. In such cases, we may share the personal data collected within Akamai, with Akamai third-party service providers, or other third parties as reasonable to proceed with the negotiation or completion of a merger, acquisition, sale, or other corporate transaction Consultancy services — We also may share personal data with our advisors, auditors, and other third parties providing to Akamai consultancy services (e.g., tax, legal, regulatory auditing, fraud protection and credit risk reduction) Sub-contracting services — We use sub-processors, e.g., for the purpose of services provisioning; a sub-processor list for our services is available in the Privacy Trust Center Third-party services — We may share personal data with third-party service providers, or other third parties as reasonable to operate and achieve the purpose of data processing as described in this statement e.g., processing payments for Compute services via third-party service providers, call recording and transcription services, identity verification and background check activities for recruitment purposes Marketing campaigns — We share some Contact Information with our business partners (e.g. social media platforms) in order to be able to offer you targeted ads that may be of interest to you Partner marketing activities - We share some Contact Information with our business partners reselling Akamai services for their own marketing and lead generation activities Data processing policies and data transfer agreements govern the sharing of your data with the recipients. Recipients within Akamai groups as well as third-party vendors, business partners, or agents must e.g., abide by our data privacy, confidentiality, and security requirements, and are prohibited from using the data for any other purposes. In all cases, Akamai will seek reasonably appropriate protections for your personal data when sharing it with third parties, and we share it only if the recipient agrees to comply with this Privacy Statement or has in place substantially similar privacy policies regarding the treatment of personal data, and only after execution of a data protection agreement or a nondisclosure agreement. National authorities — we use and share personal data as required to comply with applicable law or regulation, respond to proper law enforcement requests or other valid legal processes, or to comply with applicable government reporting obligations (e.g., tax authorities, social security office, consumer reporting agencies). 5. International Transfer of Personal Data Akamai is a global organization with business processes, management structures, and technical systems that operate globally. As such, we share the personal data within the Akamai group and with our business partners, third-party service providers and other third parties, consistent with this policy and as permitted by applicable law (see section Recipients of Personal Data), and therefore may transfer your personal data to other countries where we do business (see section Akamai’s Affiliates). By providing your personal data, where applicable law permits, you specifically and expressly consent to such transfer and processing set forth herein. For any international transfer, Akamai shall ensure that such recipients maintain appropriate safeguards and shall have in place required data protection terms to ensure protection of personal data to the same degree as required by Akamai and applicable data protection laws. For any geography-specific transfer mechanism (e.g., transfer outside of European Economic Area, Argentina, Brazil, UK) we have the required data transfer agreement in place. Please refer to the Data Transfer Statement in the Akamai Trust Center for details. For data transfers from the EU, Switzerland, and the UK, to the USA, Akamai also participates in the Data Privacy Framework. Please refer to the Data Privacy Framework Policy Statement in the Akamai Trust Center for details. 6. Personal Data Safeguards Akamai maintains administrative, technical, organizational, and physical measures designed — taking into account the nature of the data and the processing, the state of the art, the costs of implementation, and the potential for impact to the rights and freedoms of individuals whose data is being processed — to protect personal data in accordance with this statement and applicable laws against loss, and unauthorized access, use, alteration, and disclosure. Such measures include, by way of example, encryption in transit, two-factor authentication, and strict access controls. We also require that our third-party service providers protect personal data against unauthorized access, use, alteration, and disclosure. A detailed overview of the technical and organizational measures Akamai has in place to secure the personal data it processes when providing its services and overview of certifications and attestations maintained by Akamai can be checked under Akamai Trust Center. 7. Personal Data Retention The retention of personal data collected depends on the purpose for which it has been collected and the systems used to process the data. For an overview of Akamai’s processing activities and corresponding retention periods please check “More” below. More Table 3 (Retention period) No. Business Operations and Other Activities Data Subject Category of Personal Data Collected and Processed Retention Period 1 Services provisioning 1) Customer/ prospective customer or their representative 2) Partner/ prospective partner or their representative Contact Information Data will be retained as long as required for the customer relationship. Account Data (in case of Cloud Computing services) Data will be retained as long as required for the business operation, security and compliance purposes. 3) Individuals accessing Akamai’s customer’s websites, applications or corporate systems (except for Cloud Computing services) Service Logs For security analytics data will be retained for up to 90 days in most of the cases. Where specific security events require updates of the existing algorithm, such data is retained for up to 180 days. For traffic analytics and for forensic aggregated data will be retained for up to 3 years. 4) Customer/Partner/Individuals accessing Cloud Computing services Service Logs Data will be retained as long as necessary for security purposes. 2 Marketing activities 1) Customer/ prospective customer or their representative 2) Partner/ prospective partner or their representative 3) Individual interested in our services or products Contact Information Data will be retained until the purpose of processing is met. Device and Usage Data Data will be retained for 90 days. In case of linode.com data will be retained as long as necessary for security purposes. 3 Recruitment Job applicant Employment, Job History and Applicant Data Identity Verification Data Background Check Data Data will be retained for 5 years. Data will be retained as long as required by local laws. 4 Procurement activities Service provider or its representative Contact Information Data will be retained as long as required for the business relationship. 5 Visiting Akamai Sites Visitor to Akamai Sites/ Interested individual Contact Information Data will be retained as long as required for the business relationship. Sites Logs Device and Usage Data Data will be retained for 90 days. Akamai Control Center portal logs will be retained for 1 year in accordance with SOX and PCI requirements. In case of linode.com data will be retained as long as necessary for security purposes. Login Information and Credentials Data will be retained for as long as your account is active or to comply with statutory obligations.. Live Chat Data Data will be retained for 2 years. 6 Visiting Akamai facilities Visitor to Akamai facilities/ Interested individual Contact Information Office Visitors Data Data will be retained for 12 months. CCTV data is stored for 30 days. 7 Threat Monitoring Internet users whose online content references Akamai/ indicates a threat Threat Data Data will be retained as long as necessary for security purposes. 8 Call and Online Meeting Recording 1) Customer/prospective customer or their representative 2) Partner/prospective partner or their representative 3) Individual interested in our services or products Call or Online Meeting Chat Data Data will be retained until the purpose of processing is met but no longer than 2 years. Please note that, where applicable, we will retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, exercise or defend legal claims, or enforce our agreements. Less 8. Your Rights as Data Subject Depending on your jurisdiction or on where you live, you may have the right to request access to and correction or erasure of personal data or restriction of processing concerning the data subject and to object to processing as well as the right to data portability or other rights as provided by applicable law. You also have the right to withdraw any consent that you may have given for the processing of personal data. You may have additional rights pursuant to your local law applicable to the processing. More information about your rights as a data subject can be found in the section Country-Specific Information. You may make data subject requests by contacting us via our privacy requests forms indicated in section 1.4 above. Please note that before Akamai is able to provide you with any access to information, correct any inaccuracies, or delete your personal data, we will ask you to verify your identity and may seek other details from you to help us to respond to your request. If we process your data indirectly as a result of providing our services to our customers or partners (see section Services Provisioning) and you as end user accessing Akamai’s customers’ or partners’ websites or applications wish to exercise your data subject access rights, please contact directly the owner of the website or application who is the “controller” or “business” over your data, as we act only upon their instructions and cannot independently answer your request. Note on Service Logs and Sites Logs: As noted above, we do not, and are not required to, collect additional information in order to positively identify any individual in most of the cases. Therefore, absent detailed and verifiable proof that a given IP address from any person requesting access to Service Logs or Sites Logs that may relate to them was actually assigned to the requestor during the time period of the request, we likely will not be able to provide any data in response to the request. If such verifiable and detailed information is available, Akamai will work with the requestor to determine if the request can reasonably be met. Note on Threat Data: For threat reports derived from publicly available online sources, we typically receive limited context (e.g., a post link, handle, timestamp) and may not be able to reasonably verify a requestor’s identity against such alert‑level data. 9. Country-Specific Information 9.1 Information for Data Subjects in the EU For information about your rights as a data subject in the EU according to EU law please check “More” below. More According to the GDPR, you have the right to: 1) access your personal data 2) rectify your personal data 3) erase your personal data 4) restrict processing of your personal data 5) object to processing of your personal data 6) transfer your personal data 7) withdraw your consent at any time where the legal basis of Akamai’s processing is based on your consent 8) lodge a complaint to the data protection authority or Akamai’s supervisory authority (find a list of EU data protection authorities here). The BayLDA, Akamai’s supervisory authority offers a website to report concerns here. Less 9.2 Information under California Law For information about processing of personal data of individuals as required by California law please check “More” below. More The personal data we collect about you includes information within the categories defined in the table below. The categories listed are defined by California law and are designed to represent the personal data that we may have collected about individuals, and how it may have been shared over the past 12 months, if at all. We do not necessarily collect all information listed in a particular category, nor do we collect all categories of information for all individuals. We do not sell, and do not intend to sell, personal information about individuals, as defined under California state law. Table 4 (Information for California Residents) Category Sources Purpose of Collecting Information Disclosed for a Business Purpose? Who Shared With? Personal Identifiers. Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier internet protocol (IP) address (if used to identify you as individual), email address, account name, social security number, driver’s license number, passport number, or other similar identifiers. directly from you our customers our service providers A subset of this data is processed in connection with a number of our operational functions, including to provide products and services to our customers, provide customer support,and to fulfill transactions and contractual obligations. It is also processed to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and for data analytics. This information may also be used for marketing purposes, including offering you products that may interest you. For job applicants, a subset of this information is used to process your application. Yes affiliates service providers customers Information About You. Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, your name, signature, social security number, physical characteristics or description, address, telephone number, date of birth, passport number, personal ID, driver’s license or state identification card number, facial image (selfie), insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. directly from you our customers our service providers A subset of this data is processed in connection with a number of our operational functions, including to provide products and services to our customers, provide customer support, fulfill transactions and contractual obligations. It is also processed to detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, and for data analytics. This information may also be used for marketing purposes, including offering you products that may interest you. For job applicants, a subset of this information is used to process your application, including to the extent we arrange travel for you to interview, to conduct job applicant’s identity verification or background check screening to protect the integrity of our hiring process, reduce candidate fraud, and ensure security or if we need to confirm right-to-work status. Yes affiliates service providers customers Demographic Information. Characteristics of classes protected under federal or state law, including: familial status, disability, sex, national origin, religion, color, race, sexual orientation, gender identity and gender expression, marital status, veteran status, medical condition, ancestry, source of income, age. directly from you our service providers public records A subset of this data is processed in connection with our operational functions as permitted by law, including for example providing customer support and fulfilling legal and contractual obligations. It is also processed to detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, and for data analytics. This information may also be used for marketing purposes, including offering you products that may interest you. We may also process a subset of this information as part of an employment application, including to make any accommodations for interviewing and to make you aware of any benefits you may receive. Yes affiliates service providers Commercial Information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. directly from you our customers A subset of this data is processed in connection with a number of our operational functions, including to provide products and services to our customers, provide customer support, fulfill transactions and contractual obligations. This information may also be used for marketing purposes, including offering you products that may interest you. Yes affiliates service providers Usage Information. Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with a website, application, or advertisement. directly from you our customers our service providers through the use of cookies and similar technologies This data is processed in connection with a number of our operational functions, including to provide products and services to our customers, provide customer support, fulfill transactions and contractual obligations. It is also processed to detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, and for data analytics. This information may also be used for marketing purposes, including offering you products that may interest you. Yes affiliates service providers Geolocation Data. directly from you our customers our service providers through the use of cookies and similar technologies This data is processed in connection with a number of our operational functions, including to provide products and services to our customers, provide customer support, fulfill transactions and contractual obligations. It is also processed to detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, and for data analytics. It is also processed for marketing purposes, including offering you products that may interest you through both direct and partner advertising. Yes affiliates service providers customers Sensory Information. Audio, electronic, visual, thermal, olfactory, or similar information. directly from you our service providers This data is processed in connection with a number of our operational functions, including providing customer support (i.e., when you call into our call center, we may record the call, or, if you come into our offices to interview, you may be recorded by CCTV). Yes affiliates service providers Professional or employment-related information, such as your job title, job history, or income. directly from you our customers our service providers what you may post on social media and job sites A subset of this data is processed in connection with a number of our operational functions, including to provide products and services to our customers, and for human resources purposes. It may also be used for marketing purposes, including offering you products that may interest you. Yes affiliates service providers Inferences drawn from any of the above categories of information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. our service providers A subset of this data is processed in connection with a number of our operational functions, including to provide products and services to our customers, to detect security incidents, and protect against malicious, deceptive, fraudulent or illegal activity. It is also processed for marketing purposes, such as offering you products that may interest you. Yes affiliates service providers Privacy Rights under California law According to the California law, to the extent we have collected information about you on our behalf, you may have the rights regarding your personal information described below, subject to certain conditions and limitations: 1) Right to Know – You are entitled to request that we disclose to you personal information we have collected about you, the categories of sources from which we collected the information, the purposes of collecting the information, the categories of third parties with whom we have shared the information, and the categories of personal information that we have shared with third parties for a business purpose. In some instances, you have the right to receive the information about you in a portable and readily usable format. Before providing any of this information, we must be able to verify your identity. 2) Right to Opt Out – We currently do not sell personal information to third parties, nor do we intend to do so, and therefore we do not offer this option. However, we may share personal information about you with our service providers and partners as permitted by law. 3) Right to Deletion – Subject to certain conditions, you are entitled to request that we delete personal information about you. Before deleting information, we must be able to verify your identity. We will not delete personal information about you when the information is required to fulfill a legal obligation, is necessary to exercise or defend legal claims, or where we are required or permitted to retain the information by law. For example, we cannot delete information about you while continuing to provide you with certain products and services or where we are legally required to retain certain information. If you chose to exercise any of these rights, to the extent that they apply, state law prohibits us from discriminating against you on the basis of choosing to exercise your privacy rights. Submitting a Personal Information Request Under CCPA You may exercise your privacy rights under the California Consumer Privacy Act (“CCPA”) by submitting a personal data request via our privacy requests forms indicated in section 1.4 above or by calling this toll-free number, +1 877-425-2624, and selecting the “Other” option to speak to a member of our team. Before providing information you request in accordance with these rights, we must be able to verify your identity. In order to verify your identity, we may request that you submit information about yourself, including, to the extent applicable, providing your account login credentials or other account information, answers to security questions, your name, government identification number, date of birth, contact information, or other personal identifying information. We will match any information against information we have previously collected about you to verify your identity and your request. To the extent you maintain an account with us, we may require you to log in to that account as part of submitting your request. If we are unable to verify your identity as part of your request, we will not be able to satisfy your request. We are not obligated to collect additional information in order to enable you to verify your identity. Information collected for purposes of verifying your request will only be used for verification. If you would like to appoint an authorized agent to make a request on your behalf, and that agent is not already authorized to access your account in your profile, please submit a notarized special power of attorney, or a signed letter from an attorney representing you, identifying the agent and authorizing them to submit requests and receive information on your behalf. We may require you to verify your identity with us directly before we provide any requested information to your approved agent. Less 9.3 Information for Data Subjects in Brazil For information about your rights as a data subject in Brazil according to Brazilian law please check “More” below. More According to the LGPD, you have the right to: 1) confirmation of the existence of the processing 2) access the data 3) correction of incomplete, inaccurate, or out-of-date data 4) anonymization, blocking, or elimination of data that is unnecessary, excessive, or processed in noncompliance with the provisions in the LGPD 5) data portability 6) deletion of personal data that is processed with the data subject’s consent on withdrawal of that consent 7) information about public and private entities with which the controller has shared data 8) information about the possibility of denying consent and the consequences of such denial 9) revocation of consent 10) oppose the processing 11) request the review of decisions made solely based on automated processing 12) lodge a complaint with a national authority For information about international data transfer as required by Brazilian law please refer to the International Data Transfer Notice for Brazilian Data Subjects. Less 10. Children and Minors We do not knowingly collect personal data directly from children and minors (“children and minors” as defined under applicable law). Our services are not intended for children and minors and children and minors should not submit or post personal data through our services. We may collect personal data regarding children and minors from their parents or legal guardians, but only as necessary to provide our products and services to our customers and partners, however Akamai customers and partners remain responsible for personal data collection via their websites and applications and its compliance with applicable laws. 11. Tracking Technologies 11.1 Cookie Technologies General Information A cookie or similar tracking technology such as web beacons, pixel tags, local storage, session storage or scripts (collectively "cookies" or “cookie technologies”) is injected into your browser to collect certain data related to the device used to access a website or application. You can generally express your privacy preferences regarding the use of most cookies on our Site through the cookie management tool available on our Sites or your web browser settings. If you block, turn off, or otherwise reject cookies, some websites or applications may not display properly, or you will not be able to proceed using the website or application, to checkout, for instance. If you choose to opt out of cookies during an active session on the Akamai Site, previously set cookies may remain stored in your browser until their designated expiration dates. However, upon receiving your opt-out preference, Akamai will immediately cease collecting any data from or utilizing these cookies. Because browsers do not allow websites to forcibly delete client-side storage set in prior sessions, you can manually clear your browser cache and cookies at any time through your browser settings if you wish to remove them immediately. Some Sites, service offerings, and services also use web beacons or other technologies to provide better customer service. These technologies may be in use on a number of pages across the Sites. When you as a visitor access these Sites, an unidentifiable notice of that visit is generated, which is processed by the site owner or by third-party service providers. These web beacons usually work in conjunction with cookies. If you don’t want your cookie information to be associated with your visits to these Sites or use of these services, you can control the web beacons via the cookie management tool available on our Sites or your browser settings. If you turn off cookies, web beacons and other technologies will still detect visits to these sites; however, they will not be associated with information otherwise stored in cookies. Cookies on Akamai Sites (except for linode.com) We collect information from your visits to our Sites in order to help us gather statistics about usage and effectiveness of our Sites, personalize your experience with our Sites, tailor our interactions with you, and provide, develop, and improve our services. We do so through the processing of transaction logs, as well as the use of various cookie technologies. We use session cookies, for example, for media performance analytics. We use persistent cookies, for example, to record your choice of language and country location. You can check the list of all cookie technologies used by Akamai Sites via the cookie management tool available on the Sites. While Akamai’s Sites at this time do not recognize automated browser signals regarding tracking mechanisms, such as “do not track” instructions, you can express your privacy preferences regarding the use of cookies and similar technologies (except for strictly necessary cookies) through the cookie management tool available on our Sites or your web browser settings. Please note that if you do this your user experience of our Sites may be reduced. Third parties with whom we partner to provide certain features on our Sites or to display Akamai advertising on others’ websites based upon your web browsing activity also use Flash cookies or HTML5 to collect and store information. Various browsers may offer their own management tools for removing HTML5. To manage Flash cookies, please visit this page. Some of our business partners set web beacons and cookies on Akamai’s Sites and mobile applications. You can also manage these third-party cookies through the cookie management tool available on our Sites or your web browser settings. Cookies on linode.com Linode.com uses cookies to tailor content or advertisements to match your preferred interest; avoid showing visitors the same advertisements repeatedly; compile anonymous, aggregated statistics that allow to understand how users use the site and to help improve the structure of the site. For details about cookies used at linode.com please refer to the cookie policy available at https://www.linode.com/legal-cookies/. Cookies in Akamai Services For certain Akamai Services we use cookie technology. We collect information from your interactions with our services or our customers’ service offerings, sites and applications, in order to help us to provide, develop and improve our services. Many Akamai services that you interact with via our customer services use session and persistent cookies in order to provide the service functionality. Examples of the purposes for use of various cookies include determining whether a given interaction is with a human or a “bot,” identifying attempts to bypass security settings, identifying devices that already have been authenticated, web performance analytics, media analytics, and similar necessary service functions. Such cookies are developed based on privacy by design principle, and do not identify individuals nor track them. For example, the domain go-mpulse.net or akstat.io used for web performance analytics does not collect, retain, or share any data regarding a particular user or device (including IP addresses and user identifiers) on sites or applications not owned by Akamai, nor does it identify nor track a particular user or device. You may refuse the use of cookies by selecting the appropriate settings on your browser or the cookie management tool offered by our customers, however please note that if you do this you may not be able to benefit fully from the capabilities of services or applications used by our customers. Cookies used to provide Akamai security services are classified as strictly necessary cookies for the performance of the services you are requesting. To not undermine the purpose of the services, to protect the personal data submitted by you when using our customers’ web services and products, and to make the internet a safer place, we do not have to offer an opt-out mechanism for the security cookies. If we do, malicious actors would opt out and thereby prevent the detection of their malicious activities. We offer cookie management options depending on our customers’ classification. Details are available in Akamai Control Center or via the responsible Akamai Sales Account representative. Web Beacons in Marketing Communication We include web beacons in marketing email messages or our newsletters in order to determine whether messages have been opened and links contained within have been clicked on and count the number of times that the advertisements and web-based email content are viewed. 11.2 Adobe Analytics We use Adobe Analytics, a web analysis service of Adobe Inc, (345 Park Avenue, San Jose, CA 95110, USA; “Adobe”), for our Sites. Adobe Analytics uses cookies which generate information about your use of our Sites. List of Adobe Analytic cookies used on our Sites can be checked in the cookie management tool available on our Sites. Adobe Analytics will collect the following data: IP address, usage information, location data. Akamai has enabled IP Obfuscation option which turns IP addresses into non-recognizable strings and original IP addresses are permanently lost. Data gathered in connection with the use of Adobe Analytics will be used by Akamai to perform analytics on our Sites to better understand how you use our Sites and optimize and adapt it to the needs of website visitors. Data will be collected via servers hosted in Amazon Web Services Inc.’s locations that are closest to the website visitor’s location and will be transferred and stored on Adobe servers in the USA. For more information on how Adobe collects and uses information in connection with its services please see Adobe Privacy Policy in Adobe Privacy Center. You may opt-out of data collection and use by Adobe Analytics in connection with your use of the Sites via the cookie management tool available on our Sites or your browser settings. 11.3 Third-Party Social Media Widgets In addition, third-party social media widgets (e.g., Facebook’s “Share” or “Like” button), the playing of videos embedded on our Sites and operated by third-party video-sharing providers (e.g., YouTube), and surveys linked to from our Sites and operated by third-party providers (e.g., SurveyMonkey), may log certain information such as your IP address, browser type and language, access time, and referring web site addresses, and, if you are logged in to those social media sites, they may also link such collected information with profile information they may have about you. We do not control these third-party tracking technologies. Please make yourself familiar with the usage of these third-party web beacons and cookies, and read their privacy statements to understand their data collection practices and the choices offered to you (e.g., for YouTube). Depending upon your privacy settings with the social media service providers, we may be able to collect information from your profile set up for their social media services when you interact with the widgets. We may include applications (or “widgets”) from third-party social media offerings that allow you to follow or interact with us on social media platforms. These widgets, such as a Facebook “Share” or “Like” button, are visible to you on the Sites you visit. When you use these widgets or when you are logged in to those platforms, the respective social media providers may be able to collect information about your use of the Sites. Please view the applicable social media network’s privacy policy to better understand their data collection practices and choices they make available to you. The privacy policy of the social media network controls the collection, use, and disclosure of all personal information transmitted to that network. 12. Changes to Privacy Statement 12.1 Notification of Changes Please note that applicable laws and business operations change, so we reserve the right to update this Privacy Statement at any time. If we are going to use your personal data in a manner different from that what is stated in this Privacy Statement at the time of collection, we will notify you, and you will have a choice as to whether or not we can use your personal data in such a way. We recommend that you check this Privacy Statement regularly to familiarize yourself with Akamai’s practices and to be aware of any material changes. 12.2 Change Control To see the change history to this Privacy Statement please check “More” below. More Date of change Change description May 15, 2018 The Akamai Privacy Statement was updated to meet the requirements of the General Data Protection Regulation EU 2016/679 (“GDPR”). Added descriptions of privacy practices associated with data processed as part of Akamai service offerings. January 1, 2020 The Akamai Privacy Statement was updated to meet the requirements of the California Consumer Privacy Act (“CCPA”). Added descriptions of privacy practices associated with data collected as part of Akamai service offerings. July 1, 2020 The Akamai Privacy Statement was updated to meet cookie law requirements. Added clarification that cookies used by Akamai services do not track individuals. December 23, 2020 The Akamai Privacy Statement was restructured to ensure more transparency for data subjects and updated to include recent changes to data protection requirements, e.g., international data transfer. January 11, 2021 The Akamai Privacy Statement was updated to include changes resulting from Brexit. Main EU establishment and Supervisory Authority were changed to Germany. April 6, 2021 The Akamai Privacy Statement was updated to include changes resulting from current processing practices, especially updates to legal bases for processing activities and retention periods. August 25, 2021 The Akamai Privacy Statement was updated to include changes resulting from current processing practices, especially addition of new Adobe Analytics tool on Akamai website, distinction between opt out and deletion request, and to provide a comprehensive document describing Akamai’s processing activities as a controller. April 30, 2022 The Akamai Privacy Statement was updated to include changes resulting from removal of Google Analytics from Akamai website. December 15, 2022 The Akamai Privacy Statement was updated to cover the entities, including their data processing practices, acquired by Akamai Technologies Inc. July 21, 2023 The Akamai Privacy Statement was updated to cover the participation of Akamai Technologies, Inc. in the Data Privacy Framework. October 3, 2023 The Akamai Privacy Statement was updated to include changes resulting from removal of Google Analytics at linode.com. November 12, 2024 The Akamai Privacy Statement was updated to stress that Akamai does not sell personal data under applicable privacy law. December 10, 2024 The Akamai Privacy Statement was updated to include changes resulting from current processing practices, especially adjusting of terminology across Akamai privacy documentation and retention periods. June 3, 2025 The Akamai Privacy Statement was updated to include changes resulting from current processing practices within marketing activities, especially updating opt-out link and adding information about retargeting activities on social media platforms. The Akamai June 9, 2025 The Akamai Privacy Statement was updated to stress that for traffic analytics and for forensic aggregated data will be retained for up to 3 years. September 4, 2025 The Akamai Privacy Statement was updated to include a link with information about international data transfer as required by Brazilian law. September 15, 2025 The Akamai Privacy Statement was updated to delete privacy@linode.com as a point of contact. April 13, 2026 The Akamai Privacy Statement was updated to include changes resulting from current processing practices, e.g. on the AI chat bot for our website or by introduction of threat monitoring activities, job candidates identity verification and background check process as well as acquisition of a new company. August 18, 2026 The Akamai Privacy Statement was updated to include especially reference to Data Privacy Framework, Call and Meeting Recording activities, updates to marketing activities, additional contact details and updated link references. Less