Last Updated: June 28, 2024
This Supplemental Privacy Notice for Oregon Residents (“Oregon Notice”) supplements the information contained in WeWork’s Global Privacy Policy and applies solely to consumers who reside in Oregon. This Oregon Notice is intended to provide you with additional information with regard to our handling of your personal data and certain consumer rights.
When we use the terms “consumer” and “personal data” in this Oregon Notice, we are using those terms as the Oregon Consumer Data Privacy Act (“OCDPA”) defines them, which the OCDPA generally defines a “consumer” as a natural person who resides in Oregon and acts in any capacity other than in a commercial or employment context and “personal data” as data, derived data or any unique identifier that is linked to or is reasonably linkable to a consumer or to a device that identifies, is linked to or is reasonably linkable to one or more consumers in a household, but does not include deidentified data or data that is lawfully available through federal, state or local government records or through widely distributed media or a controller reasonably has understood to have been lawfully made available to the public by a consumer. Capitalized terms used but not defined in this Oregon Notice shall have the meaning ascribed thereto in WeWork’s Global Privacy Policy.
Please note, this Oregon Notice does not apply to personal data that we process as a processor on behalf of our customers in connection with the WeWork Workplace Platform.
2.1 Categories of Personal Data, Purpose for Processing, Categories of Personal Data Shared with Third Parties and Categories of Third Parties with Whom We Share Personal Data
In our Global Privacy Policy,
Section 3: “Personal Data We Collect” describes the categories of personal data we process;
Section 5: “Purposes for Which We Process Your Personal Data and the Legal Bases on Which We Rely” describes the purposes for processing personal data; and
Section 6: “How We Share Your Personal Data” describes the categories of third parties with whom we share personal data.
Some or all of the categories of personal data we process may be shared with third parties. The categories of personal data that we share with third parties depends upon the purposes for which we process personal data. If we engage a third party in connection with any of the purposes for which we process personal data, the categories of personal data associated with that purpose will be shared with the associated third party. Please refer to Sections above in our Global Privacy Policy for more context.
2.2 Sharing of Personal Data for Targeted Advertising
As is common practice among companies that operate online, we may share limited personal data with certain third parties, including non-affiliated Advertising Partners for purposes of targeted advertising on non-WeWork websites, applications and services. In addition, we may allow certain Advertising Partners to collect personal data from our websites and services using cookies, web beacons, mobile advertising identifiers and other technologies. These Advertising Partners may use this information to display online advertisements tailored to your interests and preferences across your browsers and devices and to conduct ad campaign measurement and website analytics. Any personal data we may have shared for the purpose of targeted advertising is limited to Device, Internet & Network Activity Information. For more information on how we use cookies, targeted online advertising and other tracking technologies, please see our Cookie Policy.
2.3 De-Identified Data
We may use de-identified data in some instances (as that term is defined under OCDPA). We maintain and use such data without attempting to re-identify it.
3.1 Your Rights
As a Oregon resident, you may have the rights listed below in relation to personal data that we have collected about you. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law (e.g., if such rights would require us to disclose a trade secret). These rights include the right to:
To obtain confirmation as to whether or not we are processing or have processed your personal data and the categories of personal data we are processing or have processed;
To obtain, at our option, a list of specific third parties, other than natural persons, to which we have disclosed: (i) your personal data or (ii) any personal data;
To obtain a copy of all of your personal data that we have processed or are processing in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the personal data to another person without hindrance;
To correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes for processing your personal data;
To delete personal data about you, including personal data you provided to us, personal data we obtained from another source and derived data; and
To opt out of the processing of your personal data that we process for purposes of: (i) targeted advertising; (ii) selling your personal data or (iii) profiling you in furtherance of decisions that produce legal effects or effects of similar significance.
3.2 How to Exercise Your Rights
You may exercise your rights by completing our Privacy Webform. To protect your privacy and maintain security, we may take steps to verify your identity before complying with your request, and may decline your request if we are unable to verify your identity. To verify your identity, we may collect information such as your email address, government issued ID or date of birth, before providing a substantive response to the request.
We do not sell your personal data (as that term is defined under OCDPA). To opt out of targeted advertising, please refer to Section 7: “How to Manage Cookies, Targeted Online Advertising and Other Tracking Technologies?” in our Cookie Policy.
3.3 Authorized Agent
You may designate another person to act on your behalf as your authorized agent for the purpose of opting out of our processing of your personal data for purposes of: (i) targeted advertising; (ii) selling your personal data or (iii) profiling you in furtherance of decisions that produce legal effects or effects of similar significance. We will comply with an opt-out request we receive from an authorized agent if we can verify, with commercially reasonable effort, your identity and the authorized agent’s authority to act on your behalf.
3.4 How to Appeal Our Refusal to Take Action on a Request
If we decline to take action in any request that you submit in connection with the rights described in the above sections, you may ask that we reconsider our response by sending an email to privacy@wework.com. Please use “OCDPA Appeal of Consumer Rights Request” in the subject line.
If you have questions or concerns regarding this Oregon Notice or if you have a complaint, please email us at: privacy@wework.com contact us by using the information in Section 14: “Contacting Us” in our Global Privacy Policy.