Last Updated: May 24, 2023
This Supplemental Privacy Notice for Virginia Residents (“Virginia Notice”) supplements the information contained in WeWork’s Global Privacy Policy and applies solely to consumers who reside in Virginia. This Virginia Notice is intended to provide you with additional information with regard to our handling of your personal data and certain consumer rights.
When we use the terms “consumer” and “personal data” in this Virginia Notice, we are using those terms as Virginia’s Consumer Data Protection Act (“VCDPA”) defines them, which the VCDPA generally defines a “consumer” as a natural person who is a resident of Virginia acting only in an individual or household context, but does not include a natural person acting in a commercial or employment context and “personal data” as information that is linked or reasonably linkable to an identified or identifiable natural person, but does not include de-identified data or publicly available information. Capitalized terms used but not defined in this Virginia Notice shall have the meaning ascribed thereto in WeWork’s Global Privacy Policy.
Please note, this Virginia Notice does not apply to personal data that we process as a processor on behalf of our customers in connection with the WeWork Workplace Platform.
2.1 Categories of Personal Data, Purpose for Processing, Categories of Personal Data Shared with Third Parties and Categories of Third Parties with Whom We Share Personal Data
In our Global Privacy Policy,
Section 3: “Personal Data We Collect” describes the categories of personal data we process;
Section 5: “Purposes for Which We Process Your Personal Data and the Legal Bases on Which We Rely” describes the purposes for processing personal data; and
Section 6: “How We Share Your Personal Data” describes the categories of third parties with whom we share personal data.
Some or all of the categories of personal data we process may be shared with third parties. The categories of personal data that we share with third parties depends upon the purposes for which we process personal data. If we engage a third party in connection with any of the purposes for which we process personal data, the categories of personal data associated with that purpose will be shared with the associated third party. Please refer to Sections above in our Global Privacy Policy for more context.
As is common practice among companies that operate online, we may share limited personal data with certain third parties, including non-affiliated Advertising Partners for purposes of targeted advertising on non-WeWork websites, applications and services. In addition, we may allow certain Advertising Partners to collect personal data from our websites and services using cookies, web beacons, mobile advertising identifiers and other technologies. These Advertising Partners may use this information to display online advertisements tailored to your interests and preferences across your browsers and devices and to conduct ad campaign measurement and website analytics. Any personal data we may have shared for the purpose of targeted advertising is limited to Device, Internet & Network Activity Information. For more information on how we use cookies, targeted online advertising and other tracking technologies, please see our Cookie Policy.
We may use de-identified data in some instances (as that term is defined under VCDPA). We maintain and use such data without attempting to re-identify it.
As a Virginia resident, you may have the rights listed below in relation to personal data that we have collected about you. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include the right to:
To confirm whether or not we are processing your personal data and to access such personal data;
To correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of your personal data;
To delete personal data provided by or obtained about you;
To obtain a copy of your personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and
To opt out of the processing of the personal data for purposes of (i) targeted advertising, (ii) the sale of personal data or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.
You may exercise your rights by completing our Privacy Webform. To protect your privacy and maintain security, we may take steps to verify your identity before complying with your request, and may decline your request if we are unable to verify your identity. To verify your identity, we may collect information such as your email address, government issued ID or date of birth, before providing a substantive response to the request.
We do not sell your personal data or engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning you (as those terms are defined under VCDPA). To opt out of targeted advertising, please refer to Section 7: “How to Manage Cookies, Targeted Online Advertising and Other Tracking Technologies?” in our Cookie Policy.
If we decline to take action in any request that you submit in connection with the rights described in the above sections, you may ask that we reconsider our response by sending an email to privacy@wework.com. Please use “VCDPA Appeal of Consumer Rights Request” in the subject line.
If you have questions or concerns regarding this Virginia Notice or if you have a complaint, please email us at: privacy@wework.com contact us by using the information in Section 14: “Contacting Us” in our Global Privacy Policy.