Your privacy and the protection of your personal information are important to Netflix. Netflix is a "controller" in respect of personal information. This means that we are responsible for managing and deciding how we use personal information we hold about you.
We have put together this Privacy Statement to help you understand how Netflix collects and uses your personal information during and after your visit. This Privacy Statement applies to all visitors to Netflix offices, facilities, and production locations, both during your visit with us and thereafter. This Privacy Statement does not form part of any contract to provide services.
It is important that you read this Privacy Statement, together with any other documents we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.
See our California Consumer Privacy Act (CCPA) Visitor Privacy Statement by clicking the link or scrolling down below.
We receive and store information about you such as:
Information you provide to us: We collect the information you provide to us when you register online or onsite to visit a Netflix facility. This information includes: your company name (if applicable), your name and last name, photograph and email address.
Information we collect automatically: We may collect information about you automatically while you visit our facilities or use our online registration tools. This information includes: which Netflix facilities you enter and exit, including areas which are monitored with closed circuit TV cameras (CCTV); your interactions with our communications, including emails; device IDs or other unique identifiers; device and software characteristics (such as type and configuration), connection information, statistics on page views, referring source (for example, referral URLs), IP address (which may tell us your general location), browser and standard web server log information; and information collected via the use of cookies, web beacons and other technologies.
Netflix will only use your personal information when permitted to do so in accordance with data protection laws. Primarily, we will process your personal information to facilitate your visit and protect you, other visitors, our employees/workers, operations, facilities and systems.
The purposes for which Netflix processes your personal information include:
Management and administration of visitors: including managing the entry and exit of individuals (including through the use of CCTV); coordinating access to facilities; monitoring activities (including your facilities access and Netflix systems and resources you may access during your visit); and maintaining records relating to details of your visit;
Planning and allocating space and work: including performing facilities and workforce analysis and planning; and allocating Netflix facilities, assets, and human resources;
Communications (including in emergencies): including facilitating communication with you and others (including in an emergency); ensuring business continuity; protecting the health and safety of you and others; safeguarding IT infrastructure, office equipment and other property;
Conduct data analytics and reporting: including to monitor, test, and enhance the effectiveness of our visitor registration system and processes and security;
Compliance: including complying with applicable legal and other requirements; recordkeeping and reporting obligations; conducting audits; compliance with law enforcement and similar requests in accordance with applicable law; pursuing legal rights and remedies; defending litigation and managing any internal complaints or claims; and complying with internal policies and procedures.
Our legal basis for collecting and using the personal information described in this Privacy Statement will depend on the personal information concerned, the applicable data protection law and the specific context in which we collect and use it. We will normally collect personal information from you; where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (for example, to protect our systems); or where we have your consent to do so. In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect a substantial public interest or your vital interests or those of another person (for example, to protect the security of you or others). For questions about our use of your personal information (including legal bases and transfer mechanisms we rely on), cookies or similar technologies, please contact our Data Protection Officer/Privacy Office by email at corporateprivacy@netflix.com.
We may disclose your personal information to our Netflix family of companies (help.netflix.com/legal/corpinfo) and certain third parties to process your personal information on our behalf. In each case, we will ensure that all such parties only process your personal information in accordance with this Privacy Statement.
We may also disclose your personal information in the following circumstances: where if we believe that doing so is necessary to protect the rights, property, security, or safety of Netflix (including our employees/workers), or the public; to enforce any contract or policies we have in place with you; to investigate and defend ourselves or others against any third-party claims or allegations; and in relation to a business transaction, such as a merger, change of control or sale of assets.
Whenever in the course of sharing information we transfer personal information to countries outside of the European Economic Area, UK and other regions with comprehensive data protection laws, we will ensure that the information is transferred in accordance with this Privacy Statement and as permitted by the applicable laws on data protection.
Netflix will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
You can request access to or deletion of your personal information, or correct or update out-of-date or inaccurate personal information we hold about you. You can object to the processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. If we have collected and process your personal information with your consent, then you can withdraw your consent at any time; withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent. You have the right to complain to a data protection authority about our collection and use of your personal information.
Netflix is required to ensure that the personal information it holds about you is accurate and up-to-date. We therefore request that you notify us as soon as possible if your personal information changes.
To make requests, or if you have any other questions regarding our privacy practices, please contact our Data Protection Officer/Privacy Office. When contacting our Data Protection Officer/Privacy Office, please be sure to advise in regard to which Netflix facilities you visited: corporateprivacy@netflix.com. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We may reject requests that are unreasonable or not required by law, including those that would be extremely impractical, could require disproportionate technical effort, or could expose us to operational risks.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
Please be aware that the rights above are not absolute and there may be circumstances where we are unable to comply with your request (either wholly or in part). In such cases we will explain why we cannot comply with the request.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
We use reasonable administrative, logical, physical and managerial measures to safeguard your personal information against loss, theft and unauthorised access, use and modification. These measures are designed to provide a level of security appropriate to the risks of processing your personal information.
We may update this Privacy Statement at any time.
If you have any queries in relation to your personal information or how it is processed by Netflix please contact our Data Protection Officer/Privacy Office at the email address below. When contacting our Data Protection Officer/Privacy Office, please be sure to advise in regard to which Netflix facilities you visited: corporateprivacy@netflix.com
California Consumer Privacy Act (CCPA) Visitor Privacy Statement
This Privacy Statement applies to California consumers, and supplements this Visitor Privacy Statement.
We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“CCPA personal information”). We have collected the following categories of CCPA personal information from consumers within the last twelve (12) months:
We use the categories of CCPA personal information listed above for the purposes noted in the How we will process your personal information section of this Privacy Statement. For ease of reference, we repeat that section below:
Netflix will only use your personal information when permitted to do so in accordance with data protection laws. Primarily, we will process your personal information to facilitate your visit and protect you, other visitors, our employees/workers, operations, facilities and systems.
The purposes for which Netflix processes your personal information include:
Management and administration of visitors: including managing the entry and exit of individuals (including through the use of CCTV); coordinating access to facilities; monitoring activities (including your facilities access and Netflix systems and resources you may access during your visit); and maintaining records relating to details of your visit;
Planning and allocating space and work: including performing facilities and workforce analysis and planning; and allocating Netflix facilities, assets, and human resources;
Communications (including in emergencies): including facilitating communication with you and others (including in an emergency); ensuring business continuity; protecting the health and safety of you and others; safeguarding IT infrastructure, office equipment and other property;
Conduct data analytics and reporting: including to monitor, test, and enhance the effectiveness of our visitor registration system and processes and security;
Compliance: including complying with applicable legal and other requirements; recordkeeping and reporting obligations; conducting audits; compliance with law enforcement and similar requests in accordance with applicable law; pursuing legal rights and remedies; defending litigation and managing any internal complaints or claims; and complying with internal policies and procedures.
We disclose categories of CCPA personal information for business purposes. (Please see the Disclosing your personal information section of this Privacy Statement for additional details that may be of interest to you.)
CCPA personal information may include information that may be considered Sensitive Personal Information as defined by the CCPA. We do not use or disclose Sensitive Personal Information for any purpose inconsistent with section 7027 (l) of the CCPA Regulations.
We explain our sources of information in the Collection of Information section of this Privacy Statement. (Please see that section for more information that may be of interest to you.) For ease of reference, in regard to CCPA personal information these are:
Information you provide to us: We collect the information you provide to us when you register online or onsite to visit a Netflix facility. This information includes: your company name (if applicable), your name and last name, photograph and email address.
Information we collect automatically: We may collect information about you automatically while you visit our facilities or use our online registration tools. This information includes: which Netflix facilities you enter and exit, including areas which are monitored with closed circuit TV cameras (CCTV); your interactions with our communications, including emails; device IDs or other unique identifiers; device and software characteristics (such as type and configuration), connection information, statistics on page views, referring source (for example, referral URLs), IP address (which may tell us your general location), browser and standard web server log information; and information collected via the use of cookies, web beacons and other technologies.
We do not sell or share CCPA personal information. We do not knowingly sell, share or use the personal information of minors under 16 years of age.
You can assert these rights only where we receive a verified request from you. To make requests, or if you have a question regarding our privacy practices, please contact us at corporateprivacy@netflix.com. If you wish to contact us through an authorized agent, the authorized agent can submit a request on your behalf to corporateprivacy@netflix.com along with a statement, certified as may be required, that the agent is authorized to act on your behalf. In order to verify the request, we may ask you to verify your identity.
Netflix will only retain your CCPA personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for CCPA personal information, we consider the amount, nature, and sensitivity of the CCPA personal information, the potential risk of harm from unauthorised use or disclosure of your CCPA personal information, the purposes for which we process your CCPA personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.