We may collect (and may have used during the 12-month period prior to the effective date of this Statement) the following categories of personal information about You:

Data Categories	Data Detail	Purpose
Identifiers	First name Last name Email address Username Postcode & City, Country Profile picture (if provided) Secondary email address (if provided) The last IP address used to login The IP address used at the moment of sign-up Serial number (unique to each product or device)	Enabling account creation and validation, including helping to confirm ownership of the associated email address and using data to keep You informed through newsletters about product updates, company news, and special communications. Customer support and warranty management, including using data to support warranty claims, assess issues, and provide after-purchase assistance. Managing relationships with business customers, partners, or vendors that provide services on our behalf.
Personal Information	Preferred pronouns Birthdate Associated accounts (e.g., Facebook) Data disclosed by adding posts or private messages to the forum Administrators’ access to private messages to ensure forum rules adherence	Debugging and error resolution, identifying and fixing issues to improve the functionality and user experience of our website and services.
Internet or Other Electronic Network Activity Information	Device Information (operating system and browser used, plugins and fonts installed, screen size) Log information: The time and duration of Your use of our digital channels Use of the website: where You click and which pages You visit Other information about Your use of digital channels Preferences You set on our website about language and location Login information and the contents of Your shopping cart The Fairbuds App will include links to the Fairphone website with a UTM tag	Delivering our services, including saving Your settings (language and location preferences), preserving session information, offering customer support, and enhancing security and fraud protection. Improving our website, including analyzing usage, performing A/B testing, and generating reports for optimization purposes. Statistical analysis and segmentation to tailor products and services, including through platforms like Bloomreach.
Geolocation Data	Location information: Your approximate location derived from Your IP address. For Google Analytics, we erase the last three numbers of Your IP address to make this data less identifiable. Under Bloomreach we receive the full IP address.	Statistical analysis and segmentation, including evaluating customer preferences and experiences to tailor products and services, including through Bloomreach.
Inferences	Engagement with Fairphone content Response rates for surveys	Statistical analysis and segmentation, including evaluating customer preferences, satisfaction, and experiences to better tailor products and services, as well as using data for personalization through platforms like Bloomreach.

During the 12-month period prior to the effective date of this Statement, we may have obtained personal information about You from various sources, including:

• You or Your devices;
• business partners;
• internet service providers;
• online advertising networks and services.

During the 12-month period prior to the effective date of this Statement, we have not disclosed Your personal information in a manner that considers as sale or share within the meaning of applicable state laws as we do not place relevant cookies or similar technologies without Your affirmative consent.

We also do not authorize third parties to collect personal information about Your online activities over time and across different websites when You use our services.

With Your consent, we and third parties that provide advertising or other functionality on our behalf may use cookies and similar technologies to help us advertise our services to You as informed by Your interests. Where You choose to opt in and direct us to disclose this information, You have the right to opt out at any time, as described below.

During the 12-month period prior to the effective date of this Statement, we may have disclosed the following categories of personal information about You for a business purpose to the following categories of third parties:

• Device Information: Affiliates, ad networks and business partners
• Internet or Other Electronic Network Activity Information: Affiliates, media agency

You have certain choices regarding our use and disclosure of Your personal information, to the extent applicable to each Service, as described below.

• Access: You may have the right to request that we disclose to You the personal information we have collected about You.
• Correction: You may have the right to request that we correct the personal information we maintain about You, if that information is inaccurate.
• Deletion: You may have the right to request that we delete certain personal information we have collected from You.
• Portability: You may have the right to obtain a copy of Your personal information in a format that can be transmitted to another entity.
• Opt-Out: While we do not engage in selling or sharing Your personal data, You may still exercise opt-out rights for other data collection activities through:
  • Adjusting Your cookie preference settings on our website
  • Enabling Global Privacy Control (GPC) signals in Your browser
• Non-Discrimination: You have the right to not be discriminated against by us for exercising Your rights under this Statement or any applicable law. We will not discriminate against You or deny, charge different prices for, or provide a different quality of our goods and/or services if You choose to exercise these rights, although some of the functionality and features available may change or no longer be available to You.

• Access: In addition to the right of access described above, California residents may have the right to request a copy of Your personal data and information regarding: (i) the categories of personal information; (ii) the categories of sources from which the personal information is collected; (iii) the business or commercial purposes for collecting, selling, or sharing (for cross-context behavioral advertising purposes) personal information; (iv) the categories of third parties to whom we disclose personal information; (v) the specific pieces of personal information we collected about You.
• Shine the light request: California residents are entitled once a year, free of charge, to request and obtain certain information regarding our disclosure, if any, of certain categories of personal data to third parties for their direct marketing purposes in the preceding calendar year. We do not share personal data with third parties for their own direct marketing purposes.
• Do not track: Some web browsers transmit “do-not-track” signals to websites. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. At this time our websites are not designed to respond to these signals or similar mechanisms from browsers.

We will provide You with access to Your Data, so You may control and update, modify and, where legally possible, delete it. You can contact us at privacy@fairphone.com or submit via Data Subject Request form if You want to:

• Review, change or delete Your Data;
• Object to certain processing of Your Data;
• Receive a copy of Your Data in a machine-readable format;
• Ask us any other questions regarding Your Data and its protection

Please note that when You make a request to exercise Your rights, we may require that You provide information and follow procedures so that we can verify Your identity. Where possible, we will attempt to match the information that You provide in Your request to information we already have on file to verify Your identity. If we are able to verify Your request, we will process it.

We will assess any request to exercise these rights on a case-by-case basis. We will respond to Your request within the periods required by applicable data protection law. However, we may not always be able to comply fully with Your request. We will notify You in that event.