Last Modified: May 1, 2018
This Privacy Statement explains how Western Digital (“Western Digital,” “we,” “us,” or “our”) collects, uses, and discloses your information. The Privacy Statement applies to all services and products, except those products that have a separate Privacy Statement.
Where applicable, you consent to the use of your information as described in this Privacy Statement each time you use our products or services, so we urge you to read this document in full, and Contact Us if you have any questions.
Click on the links below to go to a specific section of this Privacy Statement.
Collection and Use of Personal Information
Cookies and Similar Technologies
Disclosure of Personal Information
Third-Party Websites and Services
Information Security, Integrity, and Retention
Information Transfers, Storage, and Processing Globally
Changes to This Privacy Statement
Personal information is information that can be used to directly or indirectly identify you. Personal information also includes anonymous information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you.
Here is a description of the types of personal information we may collect and how we may use it:
What Personal Information We Collect
Depending on the products and services you use, we collect different kinds of personal information from or about you.
How We Use Your Personal Information
Generally speaking, we use personal information to provide, improve, and develop our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our users.
Western Digital Technologies, Inc. collects, processes, and determines how to process your personal information as data controller for the following purposes:
For any of the uses of your data described above that require your prior express consent, note that you may withdraw your consent by Contacting Us.
As a global company, Western Digital Corporation has a number of corporate affiliates in different jurisdictions. Each of these affiliates collects, processes and determines how to process your personal information as a data controller to help provide you the products and services you request.
You can remove or reject cookies using your browser or device settings, but in some cases doing so may affect your ability to use our products and services.
We make certain personal information available to strategic partners that work with us to provide our products and services or help us market to customers. Personal information will only be shared by us with these companies in order to provide or improve our products, services, and advertising; it will not be shared with third parties for their own marketing purposes without your prior express consent.
We share personal information with companies that provide services on our behalf, such as website hosting; email services; marketing; sponsoring of sweepstakes, contests, and other promotions; auditing; payment processing; fulfilling customer orders; data analytics; providing customer support; conducting customer research and satisfaction surveys; and other services that assist in selling our products and services. These companies are obligated to protect your information and may be located wherever we operate.
Corporate Affiliates and Corporate Business Transactions
We may share personal information with all Western Digital Corporation-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party.
Legal Compliance and Security
It may be necessary—by law or as a result of legal process, litigation, or requests from public or governmental authorities within or outside your country of residence—for us to disclose personal information. We may also disclose personal information if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.
We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.
We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. Depending on where you live, you may have the rights described below.
You have the right to access, correct, or delete the personal information that we collect. You are also entitled to object to or restrict, at any time, the further processing of your personal information. You have the right to receive your personal information in a structured and standard format. You may lodge a complaint with the competent data protection authority regarding the processing of your personal information.
To protect the privacy and the security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to refuse to provide or delete some or all of the personal information that we maintain.
You may Contact Us to exercise your rights. We will respond to your request in a reasonable timeframe, and in any event in less than 30 days.
California Privacy Rights
If you are a California resident, California law permits you to request information regarding the disclosure of your personal information to third parties for the third parties’ direct marketing purposes. To make such a request, please Contact Us and include “California Privacy Rights Request” in the first line of the request.
Please Contact Us to close your account in relation to the following uses of your personal information:
If you close your account, we have no obligation to retain your information, and we may delete any or all of your information without liability. We may retain, however, information related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes, such as analysis of non-personal information, account recovery, auditing our records, or enforcing our rights and obligations under our agreements.
Our products and services, including our websites and digital media properties, may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to information collected by us. We encourage you to read the privacy policies of any third parties before proceeding to use their websites, products, or services.
It is important that you take precautions to protect against unauthorized access to your Western Digital products, account credentials, and computers or other devices. If you feel that the security of your account or personal information has been compromised, please immediately Contact Us. Please be aware that, despite our efforts, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.
We will retain your personal information for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, unless a longer retention period is required or permitted by law.
We do not knowingly collect, use, or disclose information from children under 16. If we learn that we have collected the personal information of a child under 16—or the equivalent minimum age depending on the jurisdiction, such as 13 in the United States—we will take steps to delete the information as soon as possible. Please immediately Contact Us if you become aware that a child under 16 has provided us with personal information.
If you are a California resident under the age of 18, and you are a registered user of our products or services, California law permits you to request and obtain removal of content or information you have publicly posted. To make such a request, please Contact Us with specific information about where the content or information is posted and attesting that you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view, or anonymize it so you cannot be individually identified, to the extent required by applicable law. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.
When we share your personal information with our partners, Western Digital-affiliated companies, and service providers, your personal information may be transferred to and/or made accessible from countries out of the European Economic Area. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission, or rely on alternative legal bases such as the Privacy Shield, where applicable, or binding corporate rules where our partners or service providers have adopted such internal policies approved by European data protection authorities.
We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. We expect most such changes to be minor. Any non-material changes will take effect immediately upon posting of an updated Privacy Statement. There may, however, be cases where changes to the Privacy Statement may be more significant. In such cases, we will provide you either a prominent notice of such changes before they take effect or by directly sending you a notification.
Your continued use of our products and services after the effective date of the Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products or services and Contact Us to close any account you may have created.
If you have any questions regarding this Privacy Statement or its implementation, you may e-mail our Data Protection Officer at DPO@wdc.com. You also may write to us at:
5601 Great Oaks Parkway
San Jose, California, USA 95119