Adobe Privacy Policy

DATED 2023-11-14 · VERSION 20231201_rev01 · COMPARED WITH 20231101_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20231101_rev01 to 20231201_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+Last updated: October 27, 2023
+Last updated: November 14, 2023
 The Adobe Privacy Policy describes the privacy practices of Adobe's Services and Software (as defined in our General [Terms of Use)](https://www.adobe.com/legal/terms.html) and anywhere we display or reference this policy.
 If you are a resident of North America, your relationship is with Adobe Inc. (Adobe U.S.) and the laws of California and the United States apply.
 If you reside outside of North America, your relationship is with Adobe Systems Software Ireland Limited (Adobe Ireland), which is the controller with regard to your personal information collected by Adobe, and the laws of Ireland apply.
 ### Does Adobe transfer my personal information across national borders?
 The main locations where we process your personal information are the US and India, but we also transfer personal information to all other countries in which Adobe or its affiliates, providers, and partners operate. We carry out these transfers in compliance with applicable laws - for example, by putting data transfer agreements in place to help protect your personal information.
 If you reside outside of North America, your relationship is with Adobe Ireland. Where Adobe Ireland transfers your personal information to a country which is not within the EEA and is not subject to an adequacy decision by the EU Commission, we rely on one or more of the following legal mechanisms: European Commission approved Standard Contractual Clauses and/or your consent in certain circumstances. A copy of the relevant mechanism can be provided for your review upon request, using the contact details provided at the end of this Privacy Policy. For more information about how Adobe Ireland transfers European personal information, please see [Cross-border data transfers](https://www.adobe.com/privacy/eudatatransfers.html).
+Adobe complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Adobe has also certified to the US Department of Commerce that it adheres to EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Adobe has also certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. Adobe's commitments under the Data Privacy Framework are subject to the investigatory and enforcement powers of the United States Federal Trade Commission. To learn more about the Data Privacy Framework program, and to view our certification, please visit [https://www.dataprivacyframework.gov/s/](https://www.dataprivacyframework.gov/s/).
+Adobe and its U.S. subsidiaries Marketo Inc, Magento (X-commerce, Inc) and Workfront Inc. comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Adobe has also certified to the US Department of Commerce that it adheres to EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF (as does its U.S. subsidiaries Marketo Inc, Magento (X-commerce, Inc) and Workfront Inc.). Adobe has also certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF (as does its U.S. subsidiaries Marketo Inc, Magento (X-commerce, Inc) and Workfront Inc.). If there is any conflict between the terms in this policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. Adobe's commitments under the Data Privacy Framework are subject to the investigatory and enforcement powers of the United States Federal Trade Commission. To learn more about the Data Privacy Framework program, and to view our certification, please visit [https://www.dataprivacyframework.gov/s/](https://www.dataprivacyframework.gov/s/).
+As set out above Adobe uses a limited number of third-party service providers to assist us in providing our services to our users and business customers. These third parties may access, process, or store personal data in the course of providing their services. Adobe maintains contracts with these third parties restricting their access, use and disclosure of personal data in compliance with our Data Privacy Framework obligations, including the onward transfer provisions, and Adobe remains liable if they fail to meet those obligations and Adobe is responsible for the event giving rise to the damage).
 The information above applies to Adobe users who are consumers. More information is available for our business customers that want to learn more about [Cross-border data transfers](https://www.adobe.com/privacy/eudatatransfers.html).
 ### What rights do I have regarding my personal information and how can I exercise these rights?
 When provided for by applicable law, you have the right to ask us for a copy of your personal information; to correct, delete or restrict (stop any active) processing of your personal information; and to obtain the personal information you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this information to another controller. You may be entitled to additional rights based on applicable data privacy laws in your jurisdiction.