Campus Guide Privacy Notice

Rivian Automotive, LLC (“Rivian,” “Company,” or “we” or “us”) respects the privacy of our employees, contractors, consultants, interns, and other workers (collectively, “workers”). This Data Privacy Notice (“Notice”) applies to those individuals whose personal information Rivian may collect and process during and following the individual’s use of The Current Mobile Application (the “Application”). If you do not agree with our policies and practices as described herein, do not download, register with, or use the Application.

The Application may contain links to other websites/applications and other websites/applications may reference or link to the Application. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal information to third-party websites or applications is at your own discretion.

Personal Information We May Collect About You

Through your use of the Application, we may collect the following personal information from or about you:

Identifying information, such as your first name, last name, profile image, and Rivian ID;
Contact information, such as your email address and telephone number, if you have shared it through your Workday preferences;
Communications with us, such as questions relating to your use of the Application;
Device information, such as IP address, device ID, and other similar identifiers;
Login and authentication details, such as the number of logins;
Location, if you have enabled it through your mobile device settings; and
Employment details, such as hire date, job title, worker type, team/department, campus, work building address, organizational/reporting structure

If you do not want us to collect this information do not download the Application or delete it from your device.

The technologies we use for automatic information collection may include:

Interact Analytics. The Application, which was developed by Interact Software, uses Interact’s proprietary application to capture analytics that enable us to assess how the Application is interacted with, if and how certain features are being used, and to collate usage statistics such as page visits, frequent searches, login history and which users are creating content.
Apple Developer Console and Google Play Console. The Application is distributed via App Store Connect and Google Play Console on the iOS and Android platforms, respectively. Data in connection with downloads, source countries, crash analytics, devices and operating system versions are all collected and shared with Apple and Google upon download of the app from the App Store or Google Play Store.

Our Use of Your Personal Information

We may use your personal information to:

Provide core functionality for the Application, including:
- Allowing colleagues to search for and view your professional profile;
- Enabling colleagues to contact you via company-approved communications channels such as email or messaging (Slack);
- Displaying news, events, announcements and program information most relevant to your work location and role to support you on your employee journey;
Support application functionality, including review of application crash data and logs;
Comply with all applicable laws and regulations;
Perform workforce analytics, data analytics, and benchmarking, including analytics regarding worker use of the Application; and
Conduct other reasonable and legitimate purposes related to your use of Rivian facilities.

We may share your personal information as set forth below:

Service Providers. With software, IT, consultants, contractors and cloud service and other similar service providers we use to support our business, including the Application developer and the providers of approved Company applications such as Outlook and Slack.
Other Third Parties. When legally required or when we deem advisable to do so, such as at the request of governmental authorities conducting an investigation or to verify or enforce compliance with applicable laws. In addition, we may disclose your information if we believe disclosure is necessary or appropriate to protect the rights, property or safety of Rivian, or any of our respective affiliates, business partners, workers, customers or others. We may also share your information with other third parties if you authorize us to do so. When we disclose personal information for a business purpose, we execute a contract or other legal agreement that describes the purpose of our disclosure and requires the recipient to keep that personal information confidential and process it consistent with the terms of our agreement and applicable data privacy laws and regulations.
We do not sell your personal information to third parties.
APIs. We may use third-party Application Program Interfaces (“APIs”) and Software Development Kits (“SDKs”) as part of the functionality of the Application. For more information about our use of APIs and SDKs, please contact us as set forth in “Contact Us” below.

Children's Data

The Application is intended for use by Rivian employees, interns and contractors. It is not intended for children under 16 years of age, and we do not knowingly collect personal information from children under 16. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at privacy@rivian.com.

Data Security

We use reasonable administrative, technical and physical security to protect the personal information we retain and to help ensure that it is used in accordance with this Notice. Unfortunately, no system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us. We have taken appropriate safeguards to require that your personal information will remain protected and require our third-party service providers and partners to have appropriate safeguards as well. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure. We will retain your personal information for the period necessary to fulfill the purposes outlined in this Notice unless longer retention is required by law, for auditing purposes, or for litigation purposes.

Updating Your Personal Information

We strive to keep information contained in our records accurate and up to date. If your personal information changes during your employment, please keep us informed of such changes by contacting the People Team, updating your Workday Profile, and/or updating it within the Application.

Access and Deletion of Your Personal Information

Subject to applicable law, you may request access to, and rectification or deletion of, the personal information that we hold about you. To make such a request, please contact us as set forth below. When requesting access to, or rectification or deletion of your personal information, we may request specific information from you to enable us to confirm your identity. If we are unable to provide you with access to, or rectification or deletion of your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

We will not discriminate or retaliate against you for exercising any of your rights described in this Notice.

Supplemental Notice for California Residents

This Supplemental Notice sets forth our privacy practices as required by the California Consumer Privacy Act of 2018 (“CCPA”) and applies only to individuals employed by Rivian residing in the State of California for whom we hold personal information as defined in the CCPA.

We have collected and disclosed to a third party the following categories of personal information through the Application within the last twelve (12) months:

Category	Examples	Collected	Disclosed
Identifiers	Name, alias, unique personal identifier, device identifiers, Internet Protocol address, email address, or other similar identifiers.	Yes	Yes
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	Name, telephone number. Some personal information included in this category may overlap with other categories.	Yes	Yes
Internet or other similar network activity	Browsing history, information on an worker’s interaction with the Application.	Yes	Yes
Geolocation data	Physical location or movements.	Yes	Yes

We may use, disclose or share the Personal Information we collect from you as set forth in the section titled “Our Sharing of Your Personal Information” above.

Sale of Personal Information

In the preceding twelve (12) months, Rivian has not sold personal information. If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Information to third parties who intend to license or sell that Personal Information. Please note that we do not currently sell your Personal Information as sales are defined in Nevada Revised Statutes Chapter 603A. If you have any questions, please contact us as set forth below.

Transfer of Personal Information

Rivian is based in the United States. Information collected about you may be collected, stored and processed in the United States and anywhere we engage service providers, including countries that do not have data protection laws equivalent to those in the UK. Rivian has implemented appropriate safeguards to ensure the necessary level of data protection for any transfers to countries outside of the European Economic Area (“EEA”) without an adequacy decision by entering into appropriate data transfer arrangements, as required by law. When we transfer and process information about you, we will protect it as described in this Notice. You understand that the transfer of information to countries outside of your country of residence which may provide for different data protection rules than in your country.

Supervisory Authority

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law. If the complaint relates to provisions of the EU GDPR, you can lodge such complaint with a supervisory authority in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement. You may identify the applicable lead supervisory authority based on your location on the European Data Protection Board website. If the complaint relates to provisions of the UK GDPR, you can lodge such complaint with the Information Commissioner’s Office. If the complaint relates to provisions of the Serbian Data Protection Act, you can lodge such complaint with the Commissioner for Information of Public Importance and Personal Data Protection.

Changes to this Notice

We may revise this Notice from time to time in our sole discretion. If there are any material changes to this Notice, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Notice if you continue to use our Services after the new Notice takes effect.

Last Modified: April 15, 2024

Contact Us

If you have any questions or concerns about our processing of your Workforce Personal Data, this Notice or would like to alter or withdraw your consent, please contact us as specified below based on your location:

U.S./Other: By email at privacy@rivian.com or by mail at Attn: Privacy Officer, 14600 Myford Road, Irvine, CA 92606.
Canada: Attn: Privacy Officer, by email at privacy@rivian.com or by mail at 1038 Homer Street, Vancouver, BC V6B 2W9.
EU/UK: By email at dpo@rivian.com or by mail at Herengracht 433, Unit 2.01 and 2.02, 1017 BR Amsterdam, The Netherlands.
Serbia: By email at dpo@rivian.com or by mail at Rivian SE Europe d.o.o. Beograd, c/o Petrikić & Partneri AOD, in cooperation with CMS Reich-Rohrwig Hainz, Krunska 73, 11000 Belgrade, Serbia.

You may view the list of Rivian Data Controllers within the meaning of applicable privacy laws at this webpage.