CALIFORNIA PRIVACY NOTICE

This section supplements the information provided in this Privacy Policy and applies only to California residents who are within the scope of this Privacy Policy. It provides our “notice at collection,” describes the rights that California residents have over their personal information, and includes disclosures related to our processing activities.

If you have any questions about your California privacy rights or the information provided in this section, please contact us at privacy@vornado.com.

• California Privacy Rights

If you are a resident of California, you have the following rights related to your personal information:

• The right to know – You have the right to know (a) the categories of personal information we’ve collected, (b) the categories of the sources from which the personal information is collected, (c) the business or commercial purposes for collecting, selling, or sharing the personal information, (d) the categories of third parties with whom we’ve disclosed personal information, and (e) the categories of personal information we’ve disclosed for a business purpose, sold, or shared and the third parties to whom we’ve disclosed, sold, or shared the personal information;
• The right to access (portability) – You have the right to request and receive the specific pieces of personal information we’ve collected about you in a commonly used, machine readable format;
• The right to correct your personal information – You have the right to correct inaccurate personal information that we have collected from you and retained;
• The right to delete your personal information – You have the right to request that we delete your personal information, subject to certain exceptions;
• The right to opt-out of sale and sharing of your personal information – You have the right to opt out of having your personal information “sold” or “shared”;
• The right to limit the use and disclosure of sensitive personal information – In certain circumstances, you have the right to request that we limit the use and disclosure of certain personal information considered “sensitive personal information” under the CCPA, as applicable; and
• The right against discrimination – You have the right not to be discriminated against because you have exercised your rights under the CCPA.

For information on how to exercise your rights, please see the “Exercising Your California Privacy Rights” section below.

• Personal Information Categories We Collect and Personal Information Practices:

For purposes of this section, “personal information” is used as defined under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, and its implementing regulations (“CCPA”) and means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to a particular consumer or household. Personal information does not include:

• information that is lawfully made available from federal, state or local government records;
• anonymous, de-identified or aggregated information; and
• information excluded from the scope of the California Consumer Privacy Act of 2018 (“CCPA”), such as health or medical information covered under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and financial information covered under the Fair Credit Reporting Act (“FCRA”) or Gramm-Leach Bliley Act (“GLBA”).

When we talk about a “sale” or “sharing” of personal information or personal information being “sold” or “shared,” we are also using those terms as they are defined under the CCPA.

Below is a summary of the personal information categories, as defined by the CCPA, that we have collected in the preceding twelve (12) months, the categories of sources from which the personal information were collected, the business or commercial purposes for which we’ve collected and disclosed them, and the categories of third parties to which we’ve disclosed them for a business purpose. Some of the information in several of the categories may overlap. For information about the categories of personal information sold or shared and the third parties to which we’ve sold or shared them, please see the “Do Not Sell or Share My Personal Information” section below.

Below, “Service Providers” means our third-party vendors, consultants, agents, contractors, advertising partners, and other service providers that perform services for us or on our behalf, as further described in the "How We Disclose Personal Information"  section of this Privacy Policy.