Sources of Personal Information. We collect personal information from various sources:

• Directly or indirectly from you through interactions with our products or services including our websites, applications, form submissions, or interactions with our advertisers
• Social network information
• Publicly available data bases
• Third party business partners such as marketing partners

Personal Information does not include:

• Publicly available information from government records.
• De-identified or aggregated consumer information.
• Information excluded from the CCPA’s scope, like:
  • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
  • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

Purposes of Processing Personal Information. We may use or disclose the personal information we collect for one or more of the following business purposes:

• To fulfill or meet the reason for which the information is provided. For example, using email addresses, physical addresses, or phone numbers to process and verify warranty information.
• To provide you with information, products or services that you request from us.
• To provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collections.
• To improve our website and present its contents to you.
• For testing, research, analysis and product development.
• As necessary or appropriate to protect the rights, property or safety of us, our clients or others.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your personal information or as otherwise set forth in the CCPA.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without obtaining your consent.

Disclosure and Sale or Sharing of Personal Information.  In the preceding twelve (12) months, we have disclosed the categories of personal information to the categories of the third parties as listed in the chart above for our business purposes. When we disclose (including sell or share if applicable) personal information for our business purposes, we enter a contract that describes, among other statutory required conditions, the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

In the preceding twelve (12) months, we did not disclose your personal information for monetary consideration or for cross-context behavioral advertisement to third parties unless we specifically obtained your consent. If our disclosure is construed as “sale” or “share” under the CCPA, we might have sold or shared the categories of personal information to the categories of the third parties as listed in the chart above for our business purposes.

Sensitive Personal Information.  Although personal information we collect might include “sensitive personal information” (e.g. Social Security number, precise geolocation, citizenship), we process such sensitive personal information solely for the purposes permitted by the CCPA and other relevant laws and regulations unless we specifically obtain your consent.

Human Resource (HR) Data Processing.  Taking the unique employer-employee relationship into consideration, we provide a separate privacy notice/notice at collection that notifies our HR data processing for (i) the existing Yamaha employees, and (ii) the job candidates or applicants, respectively. This Statement still applies to the matters to which said HR data specific privacy statement does not cover.

Business Related (B2B) Data Processing.  This Statement applies to B2B data processing other than those items specified as follows:

• Categories of Personal Information We Collect: We collect personal information in B2B context about Identifies and Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as name, business address, email address, phone number, job title, qualifications, education.
• Purposes of Processing Personal Information: We process personal information we collect in B2B context for maintaining business relationship, pursuing business objectives, fulfilling or meeting the reason for which the information is provided, carrying out our obligations and enforcing our rights arising from any contracts entered into between you (or your employer) and us, as necessary or appropriate to protect the rights, property or safety of us, our clients or others, responding to law enforcement requests and as required by applicable law, court order, or governmental regulations, and as described to you when collecting your personal information or as otherwise set forth in the CCPA.
• Disclosure, and Sale or Sharing of Personal Information: In the preceding twelve (12) months, we did not sell or share your personal information collected in the B2B context to third parties.

Consumer Rights under the CCPA. The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months (or the periods specified by the applicable laws). Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting, selling, or sharing that personal information.
• The categories of third parties with whom we disclose that personal information.
• The specific pieces of personal information we collected about you (also called a data portability request).
• If we sold, shared or disclosed your personal information for a business purpose, two separate lists disclosing:
  • the categories of personal information sold or shared and  each category of recipient to whom we sold or shared; and
  • the categories of personal information disclosed and each category of recipient to whom we disclosed.

Deletion Request

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless any of the following exception applies:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 ).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
10. Comply with Bennett Marine’s ability to make repairs covered under warranty or communicate recalls to consumers.

Correction Request

You have the right to request that we correct inaccurate personal information about you. Once we receive and confirm your verifiable consumer request, we will use commercially reasonable efforts to correct as directed, unless we determine that the contested information is more likely than not accurate based on the totality of the circumstances.

Opt-Out Rights

You have the right to request that we do not “sell” or “share” (disclosure for cross-context behavioral advertisement) any of your personal information that we collected and retained, or that we limit the use or disclosure of your sensitive personal information to those uses permitted by the CCPA. Once we confirm your identity, we will cease to sell and/or share your personal information with third parties, or cease to use or disclose your sensitive personal information for purposes other than those permitted by the CCPA.

Exercising Access, Data Portability, Deletion, Correction, and Opt-Out Rights

To exercise the right to access, data portability, deletion, correction, and request not to “sell” or “share” personal information, request to “limit use of sensitive personal information” described above, please submit a verifiable consumer request to us by either:

• Calling us at 800-962-7926
• Submit this form: https:yamaha-motor.com/data-privacy-request-form

Only you or a person that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access, correction, opt-out, deletion, or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.  Making a verifiable consumer request does not require you to create an account with us.  We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Do Not Track “DNT” Signals. We have not implemented the necessary program changes to honor “Do Not Track” or “DNT” browser signals.

CCPA Children Privacy Rights. We do not disclose California Personally Identifiable Information of individuals we know to be under the age of 16 to business or third parties for monetary or other valuable consideration as a “sale” or “share” under the CCPA without affirmative authorization.

Response Timing and Format. We endeavor to respond to a verifiable consumer request within 45 days of its receipt.  If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt, unless otherwise required by the applicable laws.  The response we provide will also explain the reasons we cannot comply with a request, if applicable.  For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Retention Period. We intend to retain the personal information we collect for the period necessary to fulfill the purposes for which it was collected, unless the different retention period is specified by the relevant laws. The criteria used to determine our retention periods include (i) for as long as we have an ongoing relationship with you; (ii) as required by a legal obligation to which we are subject to (such as product recall);