Effective as of December 6, 2019

?

California Privacy Notice

This California Privacy Notice (the “Notice”) sets forth VMware, Inc. and its group of companies ("VMware", "we", "us" and "our") disclosure obligations under California law, including the California Consumer Privacy Act of 2018 (“CCPA”) and the California Civil Code section 1798.83. This Notice provides the additional details regarding the information defined as ‘personal information’ under applicable California law and related to a California resident or household (“Consumers” and “you”) further referred to as “Personal Information.” This Notice describes the categories of Personal Information VMware has collected, the categories of Personal Information VMware has disclosed, the categories of Personal Information VMware has sold (if any), and a description of the Consumer’s rights.

This Notice supplements VMware's Privacy Notices posted at www.male9.com/help/privacy.html including the VMware Global Privacy Notice and the VMware Products & Services Notice.

This Notice does not cover the Personal Information we process as a ‘service provider’ in connection with your use of VMware’s products and services that have been deployed by one of our business customers, such as your organization. Our commitments as a service provider are set forth in the applicable agreement between VMware and your organization.

Categories of Personal Information Collected

VMware has collected the following categories of Personal Information in the preceding 12 months:

Personal Information Sources

See the VMware Global Privacy Notice, Part I: What Information We Collect & How We Collect It, and the VMware Products & Services Notice, Part I: What Information We Collect & How We Collect It, listing the sources of Personal Information.

Purposes for Which Personal Information is Used

See the VMware Global Privacy Notice, Part II: How We Use the Information, and the VMware Products & Services Notice, Part II: How We Use the Information, setting forth the purposes for which VMware uses Personal Information.

Categories of Personal Information Disclosed We have disclosed in the preceding 12 months the following categories of Personal Information for operational business purposes:

Personal Information Sold

For purposes of the CCPA, VMware has not sold Personal Information relating to California residents in the last 12 months.

Your Consumer Rights under the CCPA

Under the CCPA, you may have the following consumer rights. Please note that these rights are not absolute and in certain cases are subject to conditions or limitations as specified in the CCPA:

Abbreviated Right to Know (Collection): You have the right to request, at no charge, that we disclose to you the categories and specific pieces of Personal Information VMware has collected in the prior 12 months.

Expanded Right to Know (Collection and Disclosure): You have the right to request that we disclose certain information about how we have handled your Personal Information in the prior 12 months, including the:

• categories of Personal Information collected about you;
• categories of sources from which we collected your Personal Information;
• business and/or commercial purposes for collecting and disclosing your Personal Information; and
• categories of third parties to/with whom your Personal Information has been disclosed/shared, including for a business purpose; and
• the specific pieces of Personal Information collected about you.

Access and Portability: You have the right to obtain a list of categories and a copy of the Personal Information, in a portable and (if technically feasible) readily usable format, collected on you covering the 12-month period preceding the request.

Deletion: You have the right to request the deletion of your Personal Information we have collected from you. This right may be subject to certain conditions and limitations under the law.

Right to be Free from Discrimination: You may exercise all of the above rights at all times and VMware will not unlawfully discriminate against you for exercising your rights under the CCPA.

Additional Rights under California Law

Under California Civil Code section 1798.83, California residents who provide Personal Information in obtaining products or services for personal, family, or household use may request information about the Personal Information shared by VMware, if any, with other third parties for their own direct marketing purposes. If applicable, this information will include the identity and addresses of those third parties and the type of Personal Information.

In addition, a business subject to California Business and Professions Code Section 22581 must allow California residents under age 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted. Your request should include a detailed description of the specific content or information to be removed. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

Submitting a Request to Exercise Your Rights

To exercise any of your rights as set out above, please contact us by:

• calling 1-877-486-9273, option 0, or
• by submitting a request here.

You may be required to provide additional information to verify your identity and request before further action is taken.

Contact Us

If you have any questions or concerns regarding this Notice, you may write to us at privacy@vmware.com or by mail to: Office of the General Counsel of VMware, Inc., 3401?Hillview Ave, Palo Alto, California, 94304, USA. To exercise any of your rights?under California Law, see the Submitting a Request to Exercise Your Rights?section above