Georgia-Pacific California Consumer Privacy Notice

Effective: January 1, 2020

Georgia-Pacific California Consumer Privacy Notice in Spanish

This California Consumer Privacy Notice (“Notice”) supplements Georgia-Pacific’s (“GP’s”) Privacy Policy and applies solely to the personal information collected online and offline of California consumers (excluding GP employees, applicants, contractors and other personnel). This Statement is intended to address the relevant notice requirements of the California Consumer Privacy Act of 2018, Cal. Civ. Code § 1798.100 et seq. (the “CCPA”), and certain terms used herein have the meaning given to them in the CCPA.  Nothing in this Statement is intended to contradict or limit the applicability of the information provided in the GP Privacy Policy.

1.   Notice of Collection and Use of Personal Information

We may collect the following categories of personal information about you:

  • Identifiers: Identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology, telephone number, online identifier, internet protocol address, email address, account name, and other similar identifiers.
  • Additional Data Subject to Cal. Civ. Code § 1798.80: Education, credit card number, debit card number, and other financial information.
  • Protected Classifications: Characteristics of protected classifications under California or federal law, such as national origin, age, sex, gender, marital status, religion, ancestry, and veteran status
  • Commercial Information: Commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies
  • Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements
  • Geolocation Data
  • Sensory Information: Audio, electronic, visual, and similar information
  • Employment Information: Professional or employment-related information
  • Inferences: Inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

We may use the categories of personal information listed above for the purposes described in our Privacy Policy. In addition, we may use such categories of personal information for certain business purposes specified under the CCPA, including as described in this table:

Purposes

Categories of Personal Information

Performing services: Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytics services, or providing similar services
  • Identifiers
  • Additional Data Subject to §1798.80
  • Protected Classifications
  • Commercial Information
  • Online Activity
  • Geolocation Data
  • Sensory Information
  • Employment Information
  • Inferences
Auditing: Auditing related to a current interaction with you and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance
  • Identifiers
  • Commercial Information
  • Online Activity
  • Geolocation Data
  • Inferences
Short Term Use: Short Term Use: Short-term, transient use, including, but not limited to, the contextual customization of ads shown as part of the same interaction
  • Identifiers
  • Additional Data Subject to Cal. Civ. Code § 1798.80
  • Protected Classifications
  • Commercial Information
  • Online Activity
  • Inferences
Security Purposes:Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity
  • Identifiers
  • Additional Data Subject to Cal. Civ. Code § 1798.80
  • Protected Classifications
  • Commercial Information
  • Online Activity
  • Geolocation Data
  • Sensory Information
  • Employment Information
  • Inferences
Debugging:Debugging to identify and repair errors that impair existing intended functionality
  • Identifiers
  • Additional Data Subject to §1798.80
  • Online Activity
Internal R&D: Undertaking internal research for technological development and demonstration
  • Identifiers
  • Commercial Information
  • Online Activity
  • Sensory Information
  • Inferences
Safety: Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us
  • Identifiers
  • Additional Data Subject to §1798.80
  • Commercial Information
  • Online Activity
  • Sensory Information

2.  Our Prior Collection, Use and Disclosure of Personal Information

We may have collected and used your personal information, as described in section 1 above, during the 12-month period prior to the effective date of this California Consumer Privacy Notice. For the personal information collected during that timeframe, we describe below: (a) the categories of sources from which we may have obtained the personal information, (b) the categories of third parties with whom we may have shared the information, (c) the categories of personal information we may have sold, and (d) the categories of personal information we may have disclosed for a business purpose.

a. Sources of Personal Information

We may have obtained personal information about you from various sources, including as described below.

Categories of Sources of Data Collection

Categories of Personal Information

Directly from you, such as when you make a purchase, register on our websites, connect to us via social media, send us questions, requests or comments, participate in market research activities or contests, sweepstakes and similar activities, elect to receive business alerts, newsletter and other communications, when you provide information about an incident or allegation, when you apply for a scholarship, grant or award or take part in our Influencer Program Identifiers; Additional Data Subject to §1798.80; Protected Classifications; Commercial Information; Inferences
From your devices, such as when you visit our websites Identifiers; Online Activity; Inferences
Our parent, subsidiary and affiliated entities Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Employment Information; Inferences
Social networking services Identifiers; Protected Classifications; Commercial Information; Online Activity; Inferences
Online advertising companies Identifiers; Commercial Information; Online Activity; Inferences
Consumer data vendors Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Inferences
Public databases Identifiers
GP/System Generated Data Identifiers; Commercial Information; Online Activity; Inferences

 

b. Sharing of Personal Information

We may have shared your personal information with certain categories of third parties, including as described in our Privacy Policy and below.

Categories of Third Parties

Categories of Personal Information

Our parent, subsidiary and affiliated entities Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Employment Information; Inferences
Corporate business partners (such as parties involved in a transfer of our assets, attorneys and consultants) Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Inferences
Law enforcement agencies, courts, regulators and government authorities Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Inferences
Marketing partners (including network advertising companies, social network advertising, publishers and business partners) Identifiers; Commercial Information; Online Activity; Inferences
Data analytics providers Identifiers; Commercial Information; Online Activity; Inferences
Consumer data vendors Identifiers; Online Activity; Inferences

c. Sale of Personal Information

We do not sell your personal information in exchange for monetary compensation or other valuable consideration.

d.  Disclosure of Personal Information for a Business Purpose.

We may have disclosed to third parties the following categories of personal information for a business purpose: Identifiers, Additional Data Subject to Cal. Civ. Code § 1798.80, Protected Classifications, Commercial Information, Online Activity, Geolocation Data, Sensory Information, Employment Information and Inferences.

3.  California Consumer Privacy Rights

You have certain choices regarding our use and disclosure of your personal information, subject to relevant exceptions under applicable law, as described below.

Access: You may have the right to request, twice in a 12-month period, that we disclose to you the personal information we have collected, used, disclosed and sold about you during the past 12 months.

Deletion: You have the right to request that we delete certain personal information we have collected from you.

Shine the Light Request: If you are a California resident and have provided us with your personal information, you may ask us to refrain from sharing your personal information with third parties, including our affiliates if they are separate legal entities, for direct marketing purposes.

How to Submit a Request: To submit an access or deletion request, click here or call us at 1-800-283-5547. To submit a Shine the Light request, contact us as described in the “How to Contact Us” section of our Privacy Policy.

Verifying Requests: To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your request. If you request access to or deletion of your personal information, we may require you to provide certain information to help us identify you. In addition, if you ask us to provide you with specific pieces of personal information, we will require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request. If you designate an authorized agent to make an access or deletion request on your behalf (1) we may require you to provide the authorized agent written permission to do so, and (2) we may require you to verify your own identity directly with us (as described above).

Additional Information: If you choose to exercise any of your rights under the CCPA, you have the right to not receive discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request. This Notice is available in alternative formats upon request by contacting privacy@gapac.com.