01/14/22

Oracle Customer Data Research and Development Privacy Policy

1. INTRODUCTION

This Oracle Customer Data Research and Development Privacy Policy (also referred to as the ‘Privacy Policy’ or ‘policy’) informs data subjects (‘you’) on the collection and use (collectively referred to as ‘processing’ or ‘process’) of your personal information in connection with Oracle’s artificial intelligence and machine learning (“AI/ML”) activities in order to analyze, develop, and improve Oracle products and services, and for security and compliance purposes. This Privacy Policy also explains your privacy rights in relation to these processing activities.

This Privacy Policy was created on January 14, 2022. However, the Privacy Policy can change over time, for example to comply with legal requirements or to meet changing business needs. The most up-to-date version can be found on this site. In case there is an important change that we want to highlight to you, we will also inform you in another appropriate way (for example, via a pop-up notice or statement of changes on our website).

As used in this Privacy Policy, ‘personal information’ means information that relates to an identified individual or to an identifiable individual. For example, this could include among other things your name, address, email address, or information about your use of Oracle products and services, or your interactions with Oracle. Personal information about you that Oracle may process is also referred to as ‘information about you.’ For more detail about the types of information about you that Oracle may process, please refer to section 4 below.

Categories of personal information

Find out what categories of personal information Oracle processes.

Data use

Find out how Oracle uses personal information.

Sources

Find out how Oracle obtains your personal information.

Disclosing

Find out how Oracle discloses personal information within Oracle and with third parties.

Rights

Exercise your privacy rights (opt-out, deletion, correction, or access) by filling out our inquiry form.

Contact

Contact the Global Data Protection Officer with any questions or concerns.

2. SCOPE

This Privacy Policy applies to Oracle’s processing of personal information that Oracle has obtained from an Oracle customer when agreed to by contract with that customer to use such information for AI/ML processing for the purposes specified in this Privacy Policy. The following Oracle lines of business may process personal information under this policy: NetSuite.

3. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL INFORMATION?

Oracle America, Inc., having its registered address at 2300 Oracle Way, Austin, TX, 78741, USA, is responsible for processing your personal information in scope of this Privacy Policy.

For personal information sourced in the EU/EEA, Oracle America, Inc.’s EU representative is Oracle EMEA Limited, having its registered address at East Point Business Park, Fairview, Dublin 3, Ireland.

For personal information sourced in the UK, Oracle America, Inc.’s UK representative is Oracle Corporation UK Ltd, having its registered address at Oracle Parkway, Thames Valley Park (TVP), Reading, Berkshire, RG6 1RA, UK.

4. WHICH CATEGORIES AND SPECIFIC PIECES OF PERSONAL INFORMATION DO WE PROCESS?

Personal information that can directly or indirectly identify you may include, for example:

• Contact details: Name, email, phone number, mailing address, zip code;