Issuu Inc’s Privacy Policy regulating personal data processed in accordance with the EU REGULATION 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Last Updated: September 2nd, 2021

PLEASE NOTE: The Issuu Privacy Policy is effective as of the "Last Updated" date above. (See the previous version of the Privacy Policy.)

2.1 Issuu Inc is an international media company (hereinafter “Issuu”, “we”, or “us”), providing an online platform named ISSUU that enables registered users (hereinafter “User”) to upload and promote their content, in particular publications and other content, hereinafter the “Platform”).

2.2 Our address headquarter is located at: 131 Lytton Ave, Palo Alto, CA 94301, United States. The company is duly incorporated under the laws of the state of Delaware.

2.3 The privacy policy may be amended from time to time by us with a fair notice to you before the new privacy policy comes into force.

2.4 Please note, that you may use our Platform without signing up, in which case we will only collect data based on your consent to our cookie policy.

3.1 Issuu is the data controller for the personal data collected from Users domiciled within the EU when using the Platform.

3.2 We will process your personal data in compliance with European General Data Protection Regulation. (“GDPR”)

3.3 This privacy policy covers our processing of personal data processed if you are domiciled within the EU, when you use the Platform.

4.1 We process your personal data in order for us to manage our user relationship with you, including managing your account and provide you with access to use the Platform, we collect and use information about you. The processing of your personal data is performed on the legal basis of:

4.2 We process your personal data to facilitate any sale of content via the Platform on the legal basis of:

4.3 We process your personal data to manage communications with you through the entire lifecycle with you as a user using embedded services within our Platform including live chat and messaging functionality. The processing of your personal data is performed on the legal basis of:

4.4 We also process your personal data to deliver and improve the Platform, to let you know about our policies and Terms of -Service, to manage our business, to improve our offerings, develop new features and updates, develop personalization services and other types of service, including but not limited to develop and implement algorithms and machine learning. This processing is on the basis of:

4.5 We also use your personal data to display to you personalized marketing message on our Platform, to inform you about new features and updates on the Platform. The processing of personal data is performed based on:

If you withdraw your consent to receive personalized marketing message on the platform in your Profile Settings, will we still display marketing message to you on the Platform, but they will be of a generic nature and therefore less relevant to you.

Please be aware that the content on the Platform may contain advertisement, product placement and other marketing material, that is placed within the content as part of the content. This marketing is outside of our control and will not be affected by your withdrawal of your consent to receive marketing by e-mail.

5.1 We mainly collect the personal data that you submit to us, including your contact information and purchase history and information you provide us with in our communications channels including chat and messenger services But we also collect information in several ways from different parts of the Platform, as further detailed below, including but not limited to the way you use the Platform and if applied tracking information about your whereabouts on the Internet and technical information about your devices and location.

5.2 Please visit Clause 8 to read more about your right to access and deletion of your personal data.

5.3 When signing up and logging in

5.3.1 When registering via our online Platform, you provide us with certain information, including email, password, username, name, country of origin, preferred language. When registering and signing in/logging in via third-party supported application login (such as Facebook, Google, Hootesuit), you authorize us to access certain account information from that third-party application, such as basic profile information; name, profile picture, e-mail address (optional), current city (optional). Some of this information will never be made public, such as password. Other information can be either hidden by default (email address, country of origin) or public by default (name and profile picture if third party application sign up).

5.4 Please note that your username will be public at all times.

5.5 When using the Platform

5.5.1 We register the information you provide us with, when using the Platform, including what content you view and read, your content orders, your traffic on the Platform and your communication with us.

5.5.2 The Users are encouraged not to reveal personal data concerning themselves or a third party on the platform, in particular special categories of data (such as information about a person’s health, addictions or allergies) when commenting on the content or making reviews, nor when uploading to the Platform.

5.5.2.1 Should a User make such information about them or others public, the User is responsible for ensuring it has a legal ground for disclosing the information.

5.5.3 We use cookies to enable the Platform to work, and to provide you with a personalized experience and to collect information about your interests and whereabouts on the Internet. For further information on our use of Cookies, please see our cookie policy.

6.1 As Issuu is located in the United States all collected data is transferred to the United States for processing.

6.2 We undertake the transfer to the United States on the legal basis of fulfilling our contractual obligation towards you. The transfer of your personal data is necessary for us to perform our contractual obligations to you as a User under the Terms of Service and to deliver the services we have agreed with you as a User to provide.

6.3 We and our suppliers have, as required by the General Data Protection Regulation, implemented appropriate technical and organizational measures to keep your personal data safe. Please contact us at [email protected] if you would like to learn more about how we keep your personal data safe.

7.1 Personal data about our Users is an essential part of our business. We only share your personal data as described below apart from when we share it with a third-party vendor (including card processing and payment service providers), from whom you have purchased content.

7.2 We may share personal data regarding you if we are obligated to do so by law, to enforce our terms of service, to protect us against loss or damage. This may include exchanging information with the police, courts or law enforcement organisations.

7.3 If we sell our business or our company assets are acquired by a third party, personal data held by us about our users may be one of the transferred assets.

7.4 We may also share some of your personal information with Google, Youtube or other third-party service providers, to provide use of integrations and links to external content by use of API. Your personal data is only shared when you choose to activate a link in a publication to external content on YouTube or other services hosting the content linked to in a publication. To facilitate this, your data will be shared with the third-party API services, namely the Youtube API services. Please be aware, that when you activate such a link you will be subject to the terms of service and privacy policy of said third party. In the Privacy policy you can find information about what information they collect from you and how and when they process it and how to enact your rights to information and deletion. Please consider reading the third party’s privacy policy before activating a link in a publication. As for Google you may find their Privacy policy here.

8.1 As provided by the GDPR, you have the right to:

You can always access your account to review the personal data we have collected about you. You may delete and amend the data collected.

You also have the right to obtain a copy of the personal data free of charge. However, we may charge a fee corresponding to administrative costs if further copies of the information are requested, or if the request is unfounded or excessive.

When we receive a request to access, rectify, erase or port data, we may ask you for additional information in order to confirm your identity and ensure data security. You can send a request at our help-center.

8.2 You have the right to complain regarding the processing of personal data concerning you to the supervisory authority, which in Denmark is the Danish Data Protection Agency:

Datatilsynet Borgergade 28 1300 København K Phone no.: 33 19 32 00 E-mail: [email protected]

9.1 We store your personal data for as long as your account is active.

9.2 We may also store some of your personal data to comply with our legal obligations.

9.3 You may add or update certain information to your account. When you update information, however, we often maintain a copy of the unrevised information in systems back-ups for a period of time until our backup is updated with the latest version.

9.4 You may request deactivation of your account by following the instructions at the Platform. If you deactivate your account, we do not delete your information but hold it for you until such time as you either activate your account again or delete it.

9.5 When you delete your account, we delete the data attached to your account including your username. The username will be deleted from all reviews, and the reviews will be anonymized for future viewing.

9.6 Please note that some information may remain in our records after your account has been deleted, and that we may only be able to delete this information later when updating our backups.

10.1 User accounts including personal data are protected by a password for your privacy and security. You should ensure no unauthorized access to your account and personal data by choosing and protecting your password appropriately, and by signing off when finishing accessing your account. When signing in via third-party application provider your password is solely managed by such third-party.

10.2 We do our best to ensure that user accounts are kept private. However, various instances such as unauthorized entry/use, hardware or software failure, and other factors, may compromise the security of the personal data.

10.3 This Privacy Policy only governs information collected on the Platform and through our cookies.

11.1 The Platform is intended for use by people above the age of sixteen or the legal age for granting consent to an information service provider on the Internet in the jurisdiction in which you reside. If we receive notice or reasonably believe that someone under the appropriate age has provided us with personal information, we will promptly delete the account and all personal information that has been provided to us.

11.2 We may use a registration of age as a tool to try and prevent users under the legal age in the jurisdiction where the user resides to read content not rated for minors.

12.1 This Privacy Policy may be amended from time to time. You will be notified before we make changes to this policy with a fair notice and you will be given the opportunity to review this revised policy before you choose to continue using the Platform.

12.2 We will use only use personal data in accordance with the privacy policy under which the personal data was collected unless we specifically ask for your consent to process (reuse) your personal data for a new purpose.

13.1 In accordance with article 27 of the GDPR we have appointed a representative: Issuu ApS, Gasvaerksvej 16, DK 1656 Copenhagen, Denmark.

13.2 If you have any feedback on this Privacy Policy or you want to contact us, you can contact us: