Yummly Privacy Notice

Effective as of 8/21/19

Welcome! Yummly is an online platform that provides users with a collaborative space to find, discuss and share information about all things food, and take advantage of other food- and cooking-related features, through the Yummly website (the "Site") and/or a Yummly mobile application (the "App") (collectively, our "Services"). Yummly, Inc. ("Yummly"), a subsidiary of Whirlpool Corporation, provides this Privacy Notice to inform you of our policies and procedures regarding the collection, use and disclosure of your Personal Data and other data when you use our Services. For purposes of the European General Data Protection Regulation No. 679/2016 ("GDPR") and similar data protection laws, Yummly processes your Personal Data as a data controller.

Unless otherwise defined in this Privacy Notice, terms used in this Privacy Notice have the same meanings as in our Terms of Use.

As used in this Privacy Notice, the terms "using" and "processing" information include using cookies on a computer, subjecting the information to statistical or other analysis, and using or handling information in any way, including, but not limited to collecting, storing, evaluating, modifying, deleting, using, combining, disclosing and transferring information within our organization or among our affiliates within the United States or internationally.

Summary

Information Collection and Use

We collect (1) Personal Data that you have voluntarily shared with us; (2) data concerning your activity when using the Services; and (3) data you provide or that is otherwise collected through other sources. We use your Personal Data to provide you with the Services, respond to your requests, and enable you to interact with our Services.

Legal Basis for Processing

We process your Personal Data to satisfy our contractual obligations to you; based on your consent; to protect the legitimate interests of Yummly or third parties; or to comply with legal obligations.

Data Retention

We use your Personal Data for as long as is necessary to achieve the intended purpose.

Information Shared with Others

Your data may be shared (1) with other users; (2) with service providers; (3) with other third-party apps and services; (4) to comply with the law; (5) with other Whirlpool entities; or (6) in connection with a sale or reorganization of our business.

International Transfers

We take measures to protect your data when we transfer it to another country.

EU-U.S. Privacy Shield And Swiss-U.S. Privacy Shield

If you are a resident of Europe, special protections apply when we transfer your data to the United States.

Managing Your Data

You can access, integrate, update, amend and delete your Personal Data.

Your California Privacy Rights

We do not share your Personal Data with third parties for their own marketing purposes unless you consent to such sharing.

Interest-Based Advertising/Your Choices

You can opt-out of seeing personalized ads.

Security

The security of your data is important to us so we have implemented measures designed to safeguard your Personal Data against loss, theft, and unauthorized use, disclosure or modification.

Links to Other Sites

We may link to other sites, but we are not responsible for their practices.

Our Policy Toward Children

We do not knowingly collect data from children under age 13.

Amendments and Updates

We may update this Privacy Notice from time to time.

CONTACT US

You can contact us by sending us an email at privacy@yummly.com or using the information provided in the "Contact Us" section below.

1. Information Collection and Use

Our primary goals in collecting information are to provide and improve our Services and to enable our users to enjoy and easily navigate our Services. To provide you with a consistent user experience and to recognize you as a user across our Services, we may collect and combine data as described below; for example, data collected when you visit the Site or the App from one browser or device may be combined or linked with data collected when you visit the Site or App from a different browser or device.

Generally, we collect two types of information: Personal Data and Other Information. Personal Data is information that can be used to identify you as an individual. Other Information is information that does not reveal your specific identity or does not directly relate to you as an identifiable individual, including information that has been de-identified, aggregated with data from other users, or anonymized so that it doesn't reveal who you are.

Personal Data. When you use the Services, we may collect the following Personal Data:

  • Your contact information, such as your first and last name, email address, mailing address, and phone number;
  • Your billing information, such as your credit card number and billing address;
  • Your Yummly account information, including your user name, account number, and your encrypted Yummly password;
  • Product and ownership information about your kitchen appliances and accessories, including those that are capable of working with the Yummly app (for example, if you use the App to remotely control a kitchen appliance, we will collect information from the appliance manufacturer that we need to make the App work);
  • Information you voluntarily provide about yourself, such as allergies, dietary restrictions, food preferences, and groceries that you want to purchase;
  • Your preferences, such as product wish lists, food and recipe preferences, kitchen appliance or accessory preferences, order history, and marketing preferences;
  • Your user content (including video and images) you provide to use certain features, including recipes you submit, and information you provide so that we can help you manage your grocery inventory (such as photographs or video you provide to facilitate ingredient recognition features); and
  • Your mobile device model and ID number, user settings, location (if you enable this feature), and information about your use of the App when applicable.

Your Personal Data is processed only to the extent necessary to pursue the purposes set out in this Privacy Notice. To learn about how long Yummly keeps your Personal Data, see Section 3, Data Retention.

When we ask you to provide us with your Personal Data, you can decline, but many of our services and features require some Personal Data. If you choose not to provide the necessary Personal Data, you may not be able to use certain services or features. If you choose not to share your Personal Data, features that require personalization will not work for you.

Third Party Services. If you create a Yummly Account using your login from a third party service (including a social media network such as Facebook), we will access and collect the information about you that your privacy settings on that third party service permit so that we can create an Account for you. Also, we may collect information that you make available to Whirlpool or other manufacturers of kitchen appliances and accessories (like information about your appliance to allow us to send cooking times and temperatures to the appliance ) if this is related to providing the Services to you.

Use of Personal Data. We use your Personal Data mainly to provide our Services and administer your inquiries. For example, when you create an Account through the Services and become a Registered User or when you choose to create your own profile, we may ask you for Personal Data so we can create your account or populate your profile (see "Registered Users" below). We may also use your Personal Data to update our Services or features, troubleshoot or provide support to you.

We also use your Personal Data to improve and develop our products, personalize our products, make recommendations to you, and send you relevant offers. We may also use your Personal Data to send you Yummly newsletters, marketing or promotional materials, or other information that may be of interest to you. Where required, we will obtain your consent to send you these communications. If you decide at any time that you no longer wish to receive them, please follow the unsubscribe instructions provided in any of the communications or update your user preferences information.

Registered Users. Once you become a Registered User, you will be able to create a profile page by submitting certain Personal Data. The profile page will display your profile name as well as your profile picture, if you choose to upload one or agree to allow a Third-party service (like Facebook) to provide one for you. You can choose what other Personal Data you provide as part of your profile. Providing such information is voluntary and should correlate with the degree of interaction you want to have with Yummly and its users.

Other Information. We collect Other Information that you provide as part of the registration process, when you personalize your profile page, when you set your individual preferences (such as your viewing and/or food preferences), and as you use the Services. We also collect Other Information from you when we administer your account or respond to your inquiries. Certain Other Information will be considered Personal Data if it is combined with other data in such a way that enables you to be identified. However, where Other Information is taken alone or combined only with other non-identifying information (for example, your viewing preferences) it will not be treated as Personal Data.

We may combine your Personal Data with Other Information and aggregate it with information collected from other users to attempt to provide you with a better experience, to improve the quality and value of the Services and to analyze and understand how our Services are used. We may also use the combined information without aggregating it to serve you specifically – for instance, to deliver information to you according to your preferences or restrictions.

Usage Information. When you visit or use the Services or use a Yummly website or mobile application that has Yummly features (like the Yum button), our servers automatically record information that your browser or mobile device sends or transmits (Usage Information). This Usage Information may include information such as your computer's Internet Protocol (IP) address, browser type or the webpage you were visiting before you came to our Site, pages of our Site or the App that you visit (or of the site you visited that had the Yummly feature), the time spent on those pages, information you search for, access times and dates, the model and device ID number of your mobile device, user settings, location (if you enable this feature), and statistics and information about your use of the Site and App. We use this information to provide and improve the Services, develop new products, and offer products and services that may be of interest to you. We also use Usage Information to monitor and analyze use of the Services, for technical administration, to improve functionality and user-friendliness, and to better tailor our Services to our visitors' needs. For example, some of this information is collected so that when you revisit the Services, we will recognize you and can serve advertisements and other information appropriate to your interests. Some of the Usage Information (like your IP address) is Personal Data, but we don't use it to identify you.

Cookies. Like many websites, we use cookies, pixels, web beacons, APIs and similar technologies to collect Usage Information. Pixels and web beacons are small pieces of code placed on web pages and content that communicate when the page or content has been viewed. A cookie is a small data file that your browser places on your computer that helps us understand how you interact with the Site and use our Services. We use two types of cookies. We use persistent cookies to save information like your search preferences, your Account settings and login information, so that we can remember you and your settings when you return to the Site or App, and personalize your experience. We use session cookies to enable certain features of our Services, but unlike persistent cookies, session cookies are deleted when you leave or log off and/or when you close your browser. Third-party advertisers on the Site or in the App may also place or read cookies on your browser. Most Internet browsers automatically accept cookies but you can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. If you do not accept cookies, however, you may not be able to use all portions of or all functionality of our Services.

We also use third parties (including Google Analytics and Mixpanel) to provide usage analytics for our Services. These third parties will place their own cookies to collect traffic and activity data in order to deliver us relevant metrics and information. We do not share any Personal Data of our users with these parties, but we may share anonymized or aggregated information with them to help improve our Services. The collection of this data by these third parties is subject to their own privacy notices. For more information visit: Google Analytics and Mixpanel.

Below is an explanation of the different legal grounds we have for processing your information:

  • To satisfy our contractual obligation to you. For example: allowing you to register for an Account; providing the Services to you; assisting you with pairing a kitchen appliance or accessory through the Services; and fulfilling your product orders and providing additional services (for example, delivery, after-sale services, and the management of returns).
    • With your consent. For example: processing health information, such as information about your allergies, so that we can customize our recommendations for you; processing your entry into a prize promotion/competition; sending you customized marketing communications related to our products and services electronically (including email, notifications from third party services, and notifications from mobile applications); and sharing your Personal Data for customized marketing communication with our selected trusted partners with your consent.
      • When we have a legitimate business interest to do so. For example: managing the requests for information you send us, including handling complaints; preventing fraud; enforcing our rights before the courts; improving the performance and security of our products and our Services, including the App and the Site; sending you customer care communications concerning products or services you have used or which you showed interest in, and in order to carry out customer satisfaction surveys; unless you opt-out, contacting you for marketing purposes by phone (non-automated) and via paper mail; and carrying out activities useful for the transfers of business and business branches, takeovers, mergers, demergers or other transformations and for the execution of such transactions.
        • We may also use your Personal Data to the extent necessary to comply with our legal obligations.

If you do not want Yummly to use your electronic contact details for marketing purposes, you can always follow the instructions to "unsubscribe" in our emails; or in accordance with Section 14 of this Privacy Notice below.

3. Data Retention

Yummly will process your Personal Data for as long as it is necessary to achieve the purposes described above. In any case, the following retention periods generally apply:

  • If you delete your account we have processes designed to delete your Personal Data within approximately one month.
  • If you do not use your account or receive emails from us for an extended period of time (generally up to two and one-half years), we will delete your Personal Data.

While this represents our general policy, keep in mind that we will retain information to comply with the law, prevent fraud, collect fees, resolve disputes, troubleshoot problems, assist with investigations, enforce our agreements, and take other actions permitted by law.

4. Information Shared with Others

We do not share your Personal Data, except as described in this Privacy Notice. Through the Services, you are able to share your Personal Data when you share something through our Service (like when you use the Yum button), when you give us your consent to do so (like when we notify you that the information you provide will be shared in a particular manner and you provide us with such information), when you share Personal Data with a third party service (if you allow such sharing), or when you share Personal Data with your friends with whom you want to connect (according to the preferences you have set in your Account).

We may share Other Information, such as de-identified data and Usage Information, with third parties.

Your Personal Data is shared with:

Whirlpool Brands and Entities. Yummly is a subsidiary of Whirlpool Corporation. Any data, including Personal Data collected by Yummly, may also be shared with Whirlpool Corporation or its brands (including but not limited to Whirlpool®, Maytag®, KitchenAid®, Jenn-Air®, Amana®, EveryDrop®, and Affresh®) and subsidiaries located in the European Economic Area (EEA) and outside of the EEA, acting as autonomous controllers (e.g., Whirlpool Canada LP, Whirlpool EMEA S.p.A., Whirlpool UK Appliance Limited), who may use the information for the purposes described in this Privacy Notice. A more complete list of Whirlpool Corporation's brands and subsidiaries can be found by browsing https://whirlpoolcorp.com. All of these brands and entities are referred to within this Notice collectively as "Whirlpool."

Other Users. When you post comments or content (such as reviews or recipes) on any Yummly message boards or blogs, or when you use other interactive features (such as when you connect with friends) made available through or in connection with the Services, any data you choose to include will be accessible to other users. We urge you to be very careful when deciding to make any of your Personal Data, or any Other Information, publicly available through the Services. If you choose to use any social network features such as the Facebook "Like" button and other widgets, such as a "share" button or interactive mini-programs that we may offer through the Services, these features may collect your IP address and information about which page you are visiting on our Services, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our Website. Your interactions with these features are governed by the privacy statements of the companies providing them.

Service Providers. We may share any of your data with third party companies and individuals we engage to facilitate our Services, to provide services to us or on our behalf, to perform related services (e.g., without limitation, maintenance services, database management, web analytics and improvement of our features) or to assist us in analyzing how our Services are used. We also share information about your use of Yummly products that does not personally identify you with service providers that store this information to improve the Services. If service providers have access to your Personal Data, we require them to use it only to perform tasks on our behalf and not to disclose or use it for any other purpose.

Other Third-Party Apps and Services. You can choose to integrate our App with a variety of third-party apps and services. If you do, we will share information with, and receive information from, the relevant third party to the extent necessary for the integration to work properly. For example:

  • If you use our App with your compatible connected kitchen appliance or accessory, we may exchange information like cooking times and temperatures with the manufacturer.
  • If you use our App with compatible services or retailers, such as grocery stores, grocery delivery, or food delivery services, we may exchange information about your geographic location, food preferences, and ingredient choices.
  • If you authorize our App to connect with Apple Health or a similar app, we may share nutritional information about certain recipes with the app to help you accommodate food preferences or allergies.

Compliance with Laws and Law Enforcement. In certain situations, Yummly may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. Yummly cooperates with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including but not limited to subpoenas), to protect the property and rights of Yummly or a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, any illegal, unethical or legally actionable activity.

Business Transfers. Yummly may sell, transfer or otherwise share some or all of its assets, including your Personal Data, in connection with a merger, acquisition, reorganization or sale of assets or in the event of bankruptcy.

5. International Transfers

The Services are offered globally so it is necessary to transfer your information internationally. In particular, your information will be transferred to and processed in the United States where our servers are located. The data protection and other laws of other countries, such as the United States, may not be as comprehensive as those in your country. We rely on multiple legal bases to lawfully transfer Personal Data internationally. These include your consent, EU Commission approved model contractual clauses (which require certain privacy and security protections), and the Privacy Shield Frameworks described below.

6. EU-U.S. Privacy Shield And Swiss-U.S. Privacy Shield

Yummly, through Whirlpool Corporation, participates in and has certified its compliance with the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks. Yummly is committed to subjecting all Personal Data received from EU member countries and Switzerland in reliance on the Privacy Shield Frameworks to the Frameworks' applicable Principles. To learn more about the Privacy Shield Frameworks, visit the U.S. Department of Commerce's Privacy Shield List https://www.privacyshield.gov/list.

Yummly is responsible for the processing of Personal Data it receives under the Privacy Shield Frameworks and subsequently transfers to a third party acting as an agent on its behalf. Yummly complies with the Privacy Shield Principles for all onward transfers of Personal Data from the EU and Switzerland to the U.S., including the onward transfer liability provisions.

With respect to Personal Data received or transferred pursuant to the Privacy Shield Frameworks, Yummly is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission.

If you have an unresolved privacy or data use concern related to the Privacy Shield Framework that you believe we have not addressed satisfactorily, you may contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

Under certain conditions, more fully described on the Privacy Shield website https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.

TRUSTe

7. Managing Your Data

We give you options to help you understand what Personal Data we use and to request that we change how we use it. At any time, you may contact us to:

  • be informed on the purposes and methods of the processing of your Personal Data;
  • access your Personal Data (commonly known as making a "data subject access request"). This enables you to receive a copy of the Personal Data we hold about you;
  • ask for updating or rectification of the Personal Data we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us;
  • request erasure of your Personal Data. This enables you to ask us to delete or remove your Personal Data where there is no good reason for us continuing to process it. You can also ask us to delete or remove your Personal Data where you have successfully objected to processing or where we are required to erase your Personal Data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be communicated to you, if applicable, at the time of your request;
  • restrict the processing of your Personal Data. This enables you to ask us to suspend the processing of your Personal Data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it;
  • object to the processing, wholly or partly, of your Personal Data where we are relying on legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms;
  • where we are relying on consent to process your Personal Data, you can revoke the consent to the processing of your Personal Data freely and at any time, also by clicking on the unsubscribe option at the bottom of our marketing communications; or
  • make your Personal Data available to you or to a different provider in some circumstances. We will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that Personal Data we process based on our legitimate interests (or those of a third party) may not be portable.

If you wish to manage your data as described above, or raise any questions about the Personal Data we hold about you, please send an email to privacy@yummly.com or write us:

Chief Data Officer
Yummly, Inc.
3101 Park Blvd
Palo Alto, CA 94306

We respond to general privacy inquiries within 30 days. We process opt-out requests within 10 business days.

There is generally no charge for you to exercise any of the data management options described in this section, but we may charge a reasonable fee if you make excessive or unfounded requests. In some cases, depending on where you live, you have the right to lodge a complaint in front of the competent national data protection or judicial authority if you object to how we use your Personal Data.

8. Your California Privacy Rights

We do not share your Personal Data with third parties for their own marketing purposes unless you consent to such sharing.

9. Interest-Based Advertising/Your Choices

As described above, we and other parties we do business with (including advertisers on the Site), may place or recognize unique cookies or other technologies on your browser or device when you visit the Site or use the App. In addition to the uses above, these technologies enable the collection of information about online activities over time and across different websites and apps, which can be used to customize advertisements to you as you browse the Internet. In accordance with the Digital Advertising Alliance (DAA) Self-Regulatory Principles for Online Behavioral Advertising, you can opt-out of having information regarding your online behavior collected and used for advertising purposes. To learn more about interest-based advertising, or to opt out for your web browser, please visit optout.aboutads.info or optout.networkadvertising.org; to opt out for mobile apps, please visit aboutads.info/appchoices. You may also be able to configure your mobile device privacy or advertising settings to limit the collection or use of data for advertising. Please note that even if you choose to remove your information (opt-out), you will still see advertisements while you're browsing online. However, the advertisements you see may be less relevant to you and your interests.

Do Not Track. Some web browsers may give you the ability to enable a "do not track" setting; however, our Services do not respond to "do not track" signals at this time.

10. Security

Yummly is very concerned with safeguarding your information. We employ administrative, physical and electronic measures designed to protect your information from unauthorized access; however, despite these efforts, no security measures are perfect or impenetrable and no method of data transmission can be guaranteed against any interception or other type of misuse.

If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us in accordance with the "Contact Us" section below.

11. Links to Other Sites

Our Services may contain links to other websites, apps, and platforms. If you click on an ad or another third party link, you will be directed to that third party's website, app, or platform. The fact that we link to a website or present a banner ad or other type of advertisement is not an endorsement, authorization or representation of our affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. We do not exercise control over third party websites. These other websites may place their own cookies or other files on your computer, collect data or solicit Personal Data from you. Other sites follow different rules regarding the use or disclosure of the Personal Data you submit to them. We encourage you to read the privacy policies or statements of the other websites you visit. This Privacy Notice does not address, and we are not responsible for, the privacy, information or other practices of any third parties.

12. Our Policy Toward Children

Our Service is not directed to children and we do not knowingly collect personally identifiable information from children under 13. If we become aware that we have collected Personal Data from a child under 13 (or any other age specified by applicable law), we will take steps to delete such information from our files as soon as possible.

13. Amendments and Updates

From time to time, we may update this Privacy Notice. Please take a look at the "Last Updated" field at the top of this page to see when this Privacy Notice was last revised. If we make any material changes we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on this website prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

Your use of the Website following these changes means that you accept the revised Privacy Notice.

14. Contact Us

If you have any questions about this Privacy Notice, please contact us via email at privacy@yummly.com, or please write to us at the following address:

Chief Data Officer
Yummly, Inc.
3101 Park Blvd
Palo Alto, CA 94306