PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

If your Personal Information is not provided by you, what is the source from which your Personal Information originates?

For all categories of Personal Information, we obtain personal information from the following categories of sources:

• Our affiliates
• Directly and indirectly from your activity on our websites (e.g. www.avnet.com). For example, from participation in our forums, from orders or other submissions through our website portal, or website usage details
• Publicly available information on the internet, social media and/or any other platform.

How do we use your Personal Information that we collect?

We may use or disclose the personal information we collect for the following business purposes:

• To perform the service for which the information is provided. For example, if you provide us with Personal Information for us to complete an order, we will use that information to complete that order.
• To provide you with information, products, or services that you buy from us.
• To provide you with email alerts, event registrations, and other notices concerning our products or services, or events or news that may be of interest to you.
• To enforce our rights arising from any contracts entered into between you and us, including for billing and collections.
• To improve our website and present its contents to you.
• For testing, research, analysis and product development.
• To protect the rights, property or safety of us, our customers or others.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• To perform job application and hiring processes.
• To perform the standard employment functions for you as an employee.
• As may otherwise be disclosed to you when collecting your Personal Information or as otherwise set forth in the CCPA.

We will not collect additional categories of Personal Information or use the Personal Information we collected from you for materially different, unrelated, or incompatible purposes without first providing you notice.

Do we share your Personal Information?

We may disclose your Personal Information to another party for a business purpose and to the degree such transfer is strictly required for the purposes mentioned above. We have disclosed Personal Information to the following categories of parties in the last 12 months:

• Our affiliates.
• Third-party service providers.

When legally permitted to do so, we may share Personal Information with courts, law enforcement authorities, regulators or attorneys if necessary to comply with the law or for the establishment, exercise or defense of legal claims.

What categories of Personal Information do we collect from job applicants or potential employees?

Non-Sensitive Personal Information:

• Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver's license number, passport number, or other similar identifiers.
• Any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information, but excluding publicly available information that is lawfully made available to the general public from federal, state, or local government records.
• Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an internet website application, or advertisement.
• Geolocation data.
• Professional or employment-related information.
• Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99).
• Inferences drawn from any Personal Information to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
• Specifically including for any applicant that applies to our roles we look at their resume/cv and review that against our role description for the position. If the relevant requirements of our role description are demonstrated by the candidate's resume/cv, we could consider them as a candidate for the role and short-list for consideration to interview.

Sensitive Personal Information:

• A consumer's social security, driver's license, state identification card, or passport number, specifically including ID confirmation provided at the hire stage if applicable when completing I-9 form. In addition, we ask for social security number.
• A consumer's account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.

How do we use Personal Information of employees?

We use Personal and sensitive Personal Information about you as an employee for the purpose of:

• Administering and providing compensation, including administering and providing payroll, bonus and other applicable incentives.
• Administering and providing applicable benefits and other work-related allowances, including reporting of benefit entitlements and use.
• Administering the workforce, including managing work activities, providing performance. evaluations and promotions, producing and maintaining corporate organization charts, entity and intra-entity staffing and team management, managing and monitoring business travel, carrying out workforce analysis, conducting talent management and career development, employee training, leave management/approvals, succession planning, providing references as requested, and administering ethics and compliance trainings, facilitating and providing services for the relocation and movement of employees and family members locally and internationally.
• Complying with applicable laws and employment-related requirements along with the administration of those requirements, such as income tax, national insurance deductions, and employment and immigration laws.
• Monitoring and ensuring compliance with applicable laws, regulatory requirements, and applicable procedures.
• Performance and administration of the compliance alertline.
• Communicating with you, our other employees, and third parties (such as existing or potential business partners, suppliers, customers, end-customers or government officials).
• Communicating with your designated contacts in case of an emergency.
• Responding to and complying with requests and legal demands from regulators or other authorities in or outside of your home country.
• Complying with corporate financial responsibilities, including audit requirements (both internal and external), accounting, and cost/budgeting analysis and control.
• Managing corporate information technology, including helpdesk, corporate directory, IT support, and IT security.
• Conducting security screenings, to the extent permitted by law.
• For inclusion and diversity initiatives.

Your Rights and Choices

As a California resident, you have the following rights under the CCPA:

• The right to know what Personal Information we have collected about you, including the categories of Personal Information, the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom we disclose Personal Information, and the specific pieces of Personal Information we have collected about you. You may only exercise your right to know twice within a 12-month period.
• The right to delete Personal Information that we have collected from you, subject to certain exceptions.
• The right to correct inaccurate Personal Information that we maintain about you.
• The right to opt-out of the sale or sharing of your Personal Information by us. We do not sell or share for cross-context behavioral advertising any of the categories of Personal Information that we collect about California residents.
• The right to limit our use and disclosure of sensitive Personal Information to purposes specified in subsection 7027(l) of the California Consumer Privacy Act Regulations. We do not use or disclose sensitive Personal Information for purposes other than those specified in subsection 7027(m) of the California Consumer Privacy Act Regulations.
• The right not to receive discriminatory treatment by the business for the exercise of privacy rights conferred by the CCPA, in violation of California Civil Code § 1798.125, including an employee's, applicant's, or independent contractor's right not to be retaliated against for the exercise of their CCPA rights.

Request to Know -- access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the 12 months prior to receiving your request. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of Personal Information we collected about you.
• The categories of sources for the Personal Information we collected about you.
• The categories of third parties with whom we shared Personal Information we collected about you
• Our business or commercial purpose for collecting that Personal Information.
• Our business or commercial purpose for sharing that Personal Information with third parties.
• The specific pieces of Personal Information we collected about you (also called a data portability request).

We will deny your request to know if (i) we cannot verify your identity; (ii) the disclosure creates a substantial, articulable, and unreasonable risk to the security of your Personal Information, your account with us, or the security of our business’s systems or networks. In no event will we disclose your Social Security number, driver’s license number or other government-issued identification number, account password, or security questions and answers.  

Deletion Request Rights

You have the right to request that we delete some or all of the Personal Information we have pertaining to you. Once we receive and confirm your verifiable consumer request, we will separately reconfirm your request. After you confirm, we will then delete (and direct our service providers to delete, if applicable) your Personal Information from our records, unless an exception applies. We may deny your deletion request if we are unable to verify your identity or if we are not required to delete your Personal Information under the CCPA.

Exercising Your Rights and Choices

To exercise the rights described above, please submit a verifiable consumer request to us by either:

• Calling us at 800.408.8353
• www.avnet.com/americas/about-avnet/ccpa/ccpa-request-form

Only you or an authorized agent may make a verifiable consumer related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.

We are only required to respond to a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must provide sufficient information to allow us to verify you (or an authorized agent) are the person about whom we collected Personal Information.

We will not provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. We use Personal Information provided in a verifiable consumer request solely to verify the requestor's identity or authority to make the request.

Response Timing and Format

We will acknowledge receipt of your request to know or deletion request within 10 days. We will respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period. If you have an account with us, we will deliver our response to the email address for that account. If you do not have an account with us, we will deliver our response by US mail or electronically at the email address in your request, at your option. All disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Changes to Our Privacy Notice

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will notify you by email or through a notice on our website homepage.

Contact Information

If you have any questions or comments about this notice, our Privacy Statement, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Email: CCPArequests@Avnet.com