Data Privacy Notice
INTRODUCTION
This Data Privacy Notice (“Notice”) is meant to provide a comprehensive description of the practices of Rivian and Volkswagen Group Technology (“RVW,” “we,” “us,” or “our”) regarding the collection, use, disclosure, and retention of data when you use our website (the “Site”), rivianvw.tech.
It is our policy to post any changes we make to this Notice on our Site. Your continued use of our Site following the posting of changes constitutes your acceptance of such changes. This Notice was last updated on November 12, 2024.
PERSONAL DATA WE COLLECT AND HOW WE USE IT
When you use our Site, we may collect the information below directly from you.
Identifying and contact information, such as first name, last name, and email address, if you provide this information, which we use to communicate with you, including to respond to your inquiries and fulfill your requests.
Device information, such as:
Computer or mobile phone make, model, operating system (OS), type of browser, browser version, and app version
Device unique identifier, internet protocol (IP) address, MAC ID
Preferences, such as communication preferences and information about your interests, if you provide this information.
Automatically collected information. We use cookies and other tools, such as pixel tags (also known as clear GIFs, web bugs, or web beacons) (collectively, “cookies”) through Google Analytics, session replay tools, and similar technologies to automatically collect certain information about your equipment, browsing actions, and patterns when you use our Sites or services. We also utilize Google’s integrated services that require Google Analytics to collect data for advertising purposes, including the collection of data via advertising cookies and identifiers. You can learn about Google’s practices by going to www.google.com/policies/privacy/partners, and exercise the opt-out provided by Google by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout. You can also opt out of this activity by visiting our Cookie Notice and clicking “Manage Preferences” at the top. For additional information on our use of cookies, please visit our Cookie Notice.
Do not provide personal data about anyone else unless you have their consent to do so. If you provide us their information, we may disclose to them that you shared this information.
OUR DISCLOSURE OF YOUR PERSONAL DATA
We may disclose the above information to the following parties:
Parent Companies and Affiliates. We may disclose your personal data to RVW’s parents, Rivian Automotive, Inc., and Volkswagen International America, Inc., and affiliates of each as necessary for our business purposes or when legally required.
Service Providers. Companies who process consumers’ personal information on our behalf for a business purpose, pursuant to a written agreement, such as software or IT providers. The contract or other agreement we execute with our service providers describes the purpose and requires the service provider to keep that personal data confidential consistent with this Notice.
Law Enforcement. We may disclose your personal data when legally required or when we deem advisable to do so.
DATA RETENTION AND SECURITY
Except as otherwise permitted or required by applicable law or regulation, we will retain your personal data only as long as necessary to fulfill the purposes we collected it for. To determine the appropriate retention period for personal data, we consider our legal obligations, the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means.
We have implemented security measures to prevent your personal data from being accidentally lost or used or accessed in an unauthorized way, including controls designed to limit access to your personal data to those RVW personnel who have a genuine business need to know it. Those personnel who process your personal data are required to do so only in an authorized manner and are subject to confidentiality.
Despite our implementation of these measures, posting or transmission of personal data via the internet, by email, or by other electronic means is not completely secure and it is possible that third parties may unlawfully intercept or access such data. We cannot guarantee that personal data will be totally secure.
INTERNATIONAL DATA TRANSFERS
RVW is based in the United States, and as such your personal data may be processed in the United States. We may transfer your personal data or store it internationally, including to or in countries that do not have data protection laws equivalent to those in the country where you reside or where your personal data is collected, for the purposes described above.
By using the Site or by otherwise providing us with your personal data, you agree to the collection, transfer, storage, and other processing of your personal data to countries outside of your country of residence. Personal data transferred or stored internationally will be subject to the laws of the jurisdiction(s) where it is transferred or stored, and may be accessible to foreign courts, law enforcement, and national security authorities in those jurisdiction(s).
YOUR PRIVACY RIGHTS
You may have the privacy rights described below, depending on applicable laws in your jurisdiction. We will acknowledge and coordinate these requests as timely as possible. Initially, we will respond to and fulfill any such requests within one month or in accordance with applicable laws, which may be slightly longer (e.g., 45 days for California). We will not discriminate against you for exercising any of your privacy rights.
Access/Know. Request confirmation from us as to whether or not your personal data is being processed by RVW and, if so, access to such data and/or the more detailed circumstances of the data processing.
Correction/Rectification. Request that we correct any inaccurate or incomplete personal data relating to you without undue delay.
Deletion/Erasure. Request that your personal data be deleted without undue delay. In certain circumstances, it may not be possible for us to accept your request, for example, when the processing is necessary to comply with a legal obligation, or if the processing is necessary for the performance of a contract.
We do not sell personal data, as this term is defined by applicable privacy regulations, or share personal data for targeted advertising purposes. If you wish to stop receiving messages from us, click on the “unsubscribe” link at the bottom of any message you receive from us.
To exercise your privacy rights, please contact us as set forth below.
CHILDREN’S DATA
The Site is not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us as set forth below. If we become aware that we have collected the personal data of a child, we will take steps to promptly delete such information.
CALIFORNIA PRIVACY RIGHTS
This section describes disclosures that we are required to make under the California Consumer Privacy Act, as amended ("CCPA"). We will update this section periodically as new laws and requirements are passed.
Personal Information Collection, Use, and Disclosure
We have collected the following categories of personal information from or about California consumers and disclosed such personal data for a business purpose within the last twelve (12) months as described in Section 3 above, depending on the nature of your relationship with us (for example, whether you have purchased a vehicle and/or financing or insurance products from us):
Sources and Uses of Personal Information. We collect and use the categories of personal information listed above as described in Section 2 (“Personal Data We Collect and How We Use It").
Disclosure of Personal Information. We may disclose your personal information to the categories of recipients set forth in Section 3 (“Our Disclosure of Your Personal Data”). In the preceding twelve (12) months, RVW has disclosed each of the personal information categories as shown in the table above to our service providers for a business purpose.
Access to Personal Information.
You can request (a) the categories of personal information we collected about you and the categories of sources from which we collected such personal information; (b) the business or commercial purpose for collecting or “sharing” personal information about you; (c) the categories of personal information about you that we “shared” and the categories of third parties to whom we “shared” such personal information; and (d) the categories of personal information about you that we otherwise disclosed, and the categories of third parties to whom we disclosed such personal information. We have made this information available to you without having to request it by including it in this Notice.
Up to two times each year, you can request that we disclose the specific pieces of personal information that we collect, use, disclose, and may sell.
Correction of Personal Information. You have the right to have inaccurate personal information corrected.
Deletion of Personal Information. You can ask us to delete the personal information that we have collected from you, subject to certain exceptions such as to complete a transaction for you, to exercise our rights, or to comply with a legal obligation.
Sales of Personal Information. In the preceding twelve (12) months, RVW has not “sold” personal information as this term is defined in the CCPA.
“Sharing” of Personal Information. The CCPA defines “sharing” as disclosing, disseminating, or transferring a consumer’s personal information to a third party for cross-context behavioral advertising. In the preceding twelve (12) months, RVW has not shared your personal information covered by this Notice with third-party advertisers in order to tailor ads to consumers’ interests.
No Retaliation. You are entitled to exercise the rights described above free from retaliation as prohibited by the CCPA.
To exercise your California privacy rights, please contact us as set forth below.
Additional Information
Authorized Agent. Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information. You can designate an authorized agent to make a request under the CCPA on your behalf if: (1) the authorized agent is a natural person or a business entity registered with the Secretary of State of California; and (2) you sign a written declaration that you authorize the authorized agent to act on your behalf. If you use an authorized agent to submit a request to exercise your rights, please have the authorized agent take the following steps in addition to the steps described above:
Mail a copy of your signed written declaration authorizing the authorized agent to act on your behalf to jvprivacy@rivian.com; and
Provide any information we request in our response to your email to verify your identity. The information requested will depend on your prior interactions with us and the sensitivity of the personal information at issue.
If you provide an authorized agent with power of attorney pursuant to Probate Code sections 4121 to 4130, it may not be necessary to perform these steps and we will respond to any request from such authorized agent in accordance with the CCPA.
Identity Verification. You may only submit a request to know twice within a 12-month period. Your request must provide sufficient information about you (which may include personal data such as your name and other personal identifiers) and your relationship, if any, with us that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in the request to verify the requestor's identity or authority to make it.
CONTACT US
If you have any questions or concerns or to exercise your privacy rights, please contact us by email at jvprivacy@rivian.com or by mail at Rivian and VW Group Technology, LLC, 14600 Myford Road, Irvine, CA 92606, United States.
