• Supplemental Privacy Notice
    for California Consumers

    Supplemental Privacy Notice for California Consumers

    Our Personal Information Handling Practices in 2023

    This Supplemental California Privacy Statement (“Supplement”) applies to visitors, users, and others who reside in the State of California (“consumers” or “you”). It is designed to supplement the Yubico Privacy Notice (“Privacy Notice”) to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and other California privacy laws. Any terms defined in the CCPA have the same meaning when used in this notice. In the event of a conflict between this Supplement and our Privacy Notice, this Supplement will prevail only to the extent of resolving such conflict. If you are not a California consumer, this Supplement does not apply to you. 

    We are committed to your right to privacy and respecting your ability to control your information. We have set out below the categories of personal information we have collected about California residents in the preceding 12 months and, for each category of personal information collected and the business or commercial purposes for which the information was collected. 

    1. Identifiers
      Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.

      We collected such personal information to use for the following business or commercial purposes:
      To provide Yubico offerings, contact you, to provide you with information and advertisements about Yubico and our offerings, establish and maintain a well-managed customer or prospective customer relationship, to evaluate, develop, and improve our offerings, and to comply with applicable laws.
    1. Personal information
      Any categories of personal information described in subdivision (e) of Section 1798.80.

      We collected such personal information to use for the following business or commercial purposes:
      For the purposes of recruitment and evaluations of qualifications for possible employment or internship possibilities; for employee onboarding;
    1. Protected classifications
      Characteristics of protected classifications under California or federal law.

      We collected such personal information to use for the following business or commercial purposes:
      For the purposes of recruitment and evaluations of qualifications for possible employment or internship possibilities; for employee onboarding;
    1. Commercial information
      Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

      We collected such personal information to use for the following business or commercial purposes:
      To provide Yubico offerings, contact you, to provide you with information and advertisements about Yubico and our offerings, establish and maintain a well-managed customer or prospective customer relationship, to evaluate, develop, and improve our offerings, and to comply with applicable laws.
    1. Biometric information
      Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.

      Yubico does not mandatorily collect biometric data. 
    1. Internet or other similar network activity.
      Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.

      We collected such personal information to use for the following business or commercial purposes:
      To contact you to provide you with information and advertisements about Yubico and our offerings, establish and maintain a well-managed customer or prospective customer relationship, and to evaluate, develop, and improve our offerings;
      To provide a more customized web experience and to understand site usage and improve the content and offerings of the site.
    1. Geolocation
      Physical location or movements.

      We collected such personal information to use for the following business or commercial purposes:
      Localization of offerings; to provide a more customized web experience and to understand site usage and improve the content and offerings of the site.
    1. Sensory data
      Audio and visual recordings.

      We collected such personal information to use for the following business or commercial purposes:
      Support calls may be recorded for quality purposes
    1. Professional or employment-related information.
      Current or past job history or performance evaluations.

      We collected such personal information to use for the following business or commercial purposes:
      For the purposes of recruitment and evaluations of qualifications for possible employment or internship possibilities; for employee onboarding.
    2. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.

      We collected such personal information to use for the following business or commercial purposes:
      For the purposes of recruitment and evaluations of qualifications for possible employment or internship possibilities; for employee onboarding.
    1. Inferences
      Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

      We collected such personal information to use for the following business or commercial purposes:
      Name may be used to infer gender.
    WE DO NOT SELL YOUR PERSONAL INFORMATION

    We do not sell your personal data. In the last 12 months, we have not sold any personal information.

    SOURCES

    We may collect the personal data as listed in the categories from the following sources: from you; from partners; from customers; and from publicly available sources. 

    WHAT PERSONAL INFORMATION DO WE SHARE?

    In the preceding 12 months, we have disclosed the following categories of personal information for business purposes, described in the Privacy Policy, to our affiliates, services providers, and third parties who you (or an agent on your behalf) has authorized us, for a business purpose:

    Category 1: Identifiers.
    Category 2: California Customer Records personal information categories.
    Category 3: Protected classification characteristics under California or federal law.
    Category 4: Commercial information.
    Category 6: Internet or other similar network activity.
    Category 7: Geolocation data.
    Category 8: Sensory data.
    Category 9: Professional or employment-related information.
    Category 10: Non-public education information
    Category 11: Inferences

    YOUR RIGHTS

    You have a right to request that we disclose what personal information we collect, use and disclose. You have the right to request the specific pieces of personal information that we have about you; categories of personal information we have collected about you; categories of sources from which your personal information is collected; categories of personal information that we have disclosed for a business purpose about you; categories of third parties to whom your personal information was disclosed for a business purpose; and/or the business or commercial purpose for collecting information.

    Our offerings are not directed to children under 18 and we do not knowingly collect information about children under 13. That being said, you may also make a request on behalf of your minor child.

    You also have the right to request that we delete your personal information collected or maintained by us, as provided by California Civil Code Section 1798.105 and subject to certain exceptions.

    You may exercise any of your rights in this section without discrimination by us. We will not deny you goods or services, charge different prices or rates, or provide a different level or quality of goods or services based on your exercise of any rights in this section, unless the difference is reasonably related to the value provided by your data.

    Your request must:

    • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
    • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

    You may only make a personal information request twice within a 12-month period.  

    You may reach out to us by emailing us at:

    and including “California Request” in your subject line. You may designate an authorized agent to make a request to know or delete on your behalf.

    Your authorized agent can make such a request by emailing:

    In such case, we may require that the authorized agent provide us with your written permission to act on your behalf, that you verify your identity directly with us, and that your authorized agent verify their identity directly with us.

    CHANGES TO THIS SUPPLEMENT

    Yubico may at any time with or without a separate notice change this Supplement, and You are encouraged to review this Supplement from time to time. In case of substantial changes, continued use of the offerings after a notice of changes has been communicated to You or published on our offerings shall constitute consent to the changed Supplement.

    Last updated: October 24th, 2023