Yahoo Minnesota Privacy Rights

Minnesota residents have certain privacy rights under the Minnesota Consumer Data Protection Act (MCDPA). This notice provides a general overview of the privacy rights under the MCDPA. Further, it applies generally to all of Yahoo's products and services. For specific information about your personal data or how your personal data is processed by a particular Yahoo product or service you may interact with, please log into your privacy controls, accessible from our Privacy Policy.

The MCDPA defines certain terms in a particular manner that may differ from how those terms are used in everyday language. When these terms are used in this notice, they are used based on the definition set forth in the MCDPA. These terms are: "personal data", "process", "consumer", "processor", "controller", "third party", "sale", and "targeted advertising". Please note that Yahoo uses the terms "personal data" and "personal information" interchangeably throughout our policies.

Yahoo's products and services are provided in the state of Minnesota under the following entities: Yahoo Inc., Yahoo Ad Tech LLC, Yahoo Fantasy Sports LLC, Yahoo Finance LLC, AOL Media LLC and AOL Member Services, LLC (collectively referred to in this notice as "Yahoo", "us", "our" or "we"). For purposes of this notice, Yahoo's consumer customers may be referred to as "you" or "your".

Summary of MCDPA Privacy Rights

The MCDPA provides Minnesota consumers with the following privacy rights.

Yahoo does not profile in furtherance of decisions that produce legal effects concerning you or similarly significant effects concerning you.

You may exercise these rights by logging into your privacy controls.

Note: To exercise the above rights (other than the right to opt out), you must first sign in to your account. This is how we authenticate your request to correctly associate it with your data.

Right to Confirm and Obtain a Copy of Your Personal Data

You have the right to confirm whether or not Yahoo is processing your personal data and access the categories of personal data Yahoo is processing. You also have the right to obtain personal data concerning you, which you previously provided to Yahoo, in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means. You may exercise these rights by logging into your privacy controls.

Right to Correct Inaccuracies in Your Personal Data

You have the right to correct inaccurate personal data concerning you, taking into account the nature of the personal data and the purposes of the processing of the personal data. You may exercise this right by logging into your privacy controls or contacting us at the information provided below.

Right to Delete

You have the right to delete personal data concerning you. You may exercise this right by logging into your privacy controls.

If you have more than one registered account with Yahoo (for example, a Yahoo and an AOL account), you will need to exercise your deletion right within each registered account for which you wish to delete your personal data.

If you do not have a registered account with Yahoo, please refer to this help article about clearing your cookies.

If you exercise your right to delete your personal data, the MCDPA allows Yahoo to retain certain personal data for limited purposes. As a result, Yahoo may retain your personal data in accordance with our records retention program to: (1) effectuate a product recall or identify and repair technical errors that impair existing or intended functionality; (2) perform internal operations that are reasonably aligned with the expectations of the consumer based on the consumer’s existing relationship with the controller, or are otherwise compatible with processing in furtherance of the provision of a product or service specifically requested by a consumer or the performance of a contract to which the consumer is a party; or (3) conduct internal research to develop, improve, or repair products, services, or technology.

Further, the MCDPA does not restrict Yahoo’s ability to, and Yahoo may process your personal data to: (1) comply with federal, state, or local laws, rules, or regulations, including but not limted to data retention requirements in state or federal law notwithstanding a consumer’s request to delete personal data; (2) comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, local, or other governmental authorities; (3) cooperate with law enforcement agencies concerning conduct or activity that Yahoo or its processors reasonably and in good faith believes may violate federal, state, or local laws, rules, or regulations; (4) investigate, establish, exercise, prepare for, or defend legal claims; (5) provide a product or service specifically requested by a consumer; (6) perform a contract to which the consumer is a party, including fulfilling the terms of a written warranty; (7) take steps at the request of the consumer prior to entering into a contract; (8) take immediate steps to protect an interest that is essential for the life or physical safety to the consumer or of another natural person, and where the processing cannot be manufestly based on anoter legal basis; (9) prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, or malicious or deceptive acitivities, or any illegal activity; or preserve the integrity or security of systems; or investigate, report, or prosecute those responsible for any such action; ;; (10) assist another controller, processor, or third party with any of the obligations set forth in this section; (11) engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other appplicable ethics and privacy laws and is approved, monitored, and governed by an institutional review board, human subjects research ethics review board, or a similar independent oversight entity that has determined: (i) the research is likely to provide substantial benefits that do not exclusively accrue to the controller; (ii) the expected benefits of the research outweigh the privacy risks; (iii) the controller has implemented reasonable safeguards to mitigate privacy risks associated with research, including any risks associated with reidentification; (12) process personal data for the benefit of the public in areas of public health, community health, or population health, but only to the extent that the processing is: (y) subject to suitable and specific measures to safeguard the rights of the consumer whose personal data is being processed; (z) under the responsibility of a professional individual who is subject to confidentiality obligations under federal, state, or local law.

Right to Opt Out of Selling or Targeted Advertising

Selling Personal Data
Yahoo does not sell information that, on its own, identifies you, like your name or email address. As outlined in our Privacy Policy, we do share other identifiers with partners for product, service, and advertising reasons in ways that could be considered a ‘sale’ under MCDPA. Sharing this data allows us to provide the content and services you enjoy, helps our partners deliver better content and advertising, and keeps our services supported by our advertisers.

Targeted Advertising
Yahoo uses your personal data to target and deliver tailored ads to you, to measure how effective our ads are, and to create advertising interest profiles based on your inferred interests. See How Digital Advertising Works to learn more about how we use your information to provide advertising to you.

Opt out of selling or targeted advertising
You have the right to direct Yahoo not to process personal data concerning you for the purposes of sale and targeted advertising. You may direct Yahoo not to process personal data concerning you for the purposes of sale and targeted advertising through the controls above or via the sale of personal data and targeted advertising control in your privacy controls. Under the MCDPA, targeted advertising does not include advertisements that are based on activities within Yahoo's own websites or online applications. As a result, if you opt out of processing personal data concerning you for the purpose of targeted advertising on Yahoo, under the MCDPA, Yahoo may still show you ads, including personalized advertisements, based on your interactions with the family of Yahoo Products.

If you choose to opt out of the processing of personal data concerning you for the purpose of sale, such action may impact how you are able to view and/or receive some services that Yahoo offers. This is because some of the services that Yahoo offers require disclosure of your personal data to third parties, and such disclosure may be deemed processing for the purpose of selling under the MCDPA.

Right to Confirm and Obtain a Copy of Personal Data

Under the MCDPA, Minnesota consumers have the right to obtain the following information from Yahoo:

• Confirm whether or not Yahoo is processing personal data concerning you and access the categories of personal data Yahoo is processing;  
• The purposes for which the categories of personal data are processed;
• The categories of personal data that Yahoo sells to or shares with third parties, if any;
• The categories of third parties, if any, with whom Yahoo sells or shares personal data;
• A list of the specific third parties to which Yahoo has disclosed: (i) your personal data; or (ii) any consumer’s personal data.

You may access this data by logging into your privacy controls. If you do not have a Yahoo login, Yahoo is unable to confirm the ownership of personal data and will not be able to provide you with access. You can see the types of data Yahoo generally collects via our Privacy Policy.

Categories of Personal Data Processed: Yahoo may process different categories of personal data depending on the product or service a consumer uses. You may locate the specific categories of personal data for each product or service by logging into your privacy controls.

Below is the list of categories of personal data, including the categories of sensitive data, that Yahoo may process across all of its products or services: identifiers (e.g., technical, financial, government identifiers); contact information; physical characteristics or description information; internet or electronic network activity information; geolocation information; commercial information; biometric information; inferences, including advertising and content related inferences; medical information or health insurance information; professional or employment related information; education information; legally protected classifications; and other information that identifies you or can be reasonably associated or linked with you.

Purposes for processing personal data: Yahoo processes personal data for the following purposes: auditing; security and fraud prevention; debugging; short-term transient use; performing services on behalf of Yahoo; research; quality assurance service improvements; delivering content and ads; associating user activity; providing Yahoo services; providing contextual advertising; providing targeted advertising; providing personalized content; fulfilling user requests; for user communication; providing location-based services; providing promotions; creating analytics and reports for third parties; and payment processing.

Categories of Personal Data Sold To or Shared with Third Parties: Across all of our products or services, Yahoo sells or shares the following categories of personal data with third parties: identifiers (e.g., technical, financial, government identifiers); contact information; physical characteristics or description information; internet or electronic network activity information; geolocation information; commercial information; audio, electronic, visual, thermal, olfactory or similar information; inferences, including advertising and content related inferences; professional or employment related information.

Purposes for selling or sharing personal data: Yahoo may sell or share personal data with third parties for the following purposes: delivering content and ads; associating user activity; provide Yahoo services; provide contextual advertising; provide targeted advertising; provide personalized content; fulfill user requests; user communication; provide promotions; create analytics and reports for third parties; processing payments; and security and fraud prevention.

Categories of Third Parties: Yahoo sells or shares different categories of personal data to third parties depending on the product or service. You may locate the specific categories of personal data sold or shared for each product or service you use by logging into your privacy controls. Yahoo may sell or share personal data of our consumers, across all of Yahoo's products or services, with the following categories of third parties: analytics providers; social button providers; application providers; advertising partners; content providers; game developers; payment providers; search partners; voice and digital assistant providers; and security partners.

Third Party List: Please click here to access the list of specific third parties to which Yahoo has disclosed any consumer’s personal data. Yahoo does not maintain this information in a format specific to you.

Personal Data Retention Policy

You can view information on Yahoo’s data retention practices here in our Privacy Policy.

Use of Precise Geolocation Information in Minnesota

The MCDPA requires consumer consent for the collection of precise location data for certain commercial uses. Yahoo honors this legal requirement by: (i) truncating latitude and longitude coordinate information from geolocation data that falls within the state of Minnesota or otherwise converting the data into imprecise location data; or (ii) requiring the consumer's consent to be obtained prior to processing. With regards to consent, Minnesota consumers do not need to manage or effectuate their Precise Location Information opt-out in their privacy controls to receive this privacy protection.

Authorized Agent

You may use an authorized agent to submit a request to opt-out of the processing of your personal data for purposes of: (i) targeted advertising, and (ii) sale of your personal data.

Authorized Agent Request to Opt-Out of Sale or Targeted Advertising

Users with Registered Accounts

Yahoo will comply with an opt-out request received from your authorized agent provided that Yahoo is able to authenticate, with commercially reasonable effort, your identity and the authorized agent's authority to act on your behalf.

Users without Registered Accounts

Requests to opt out of sale or targeted advertising for non-registered users must come from the device on which the user wishes to opt out of sale. As a result, an authorized agent will need to submit the request to opt out of sale or targeted advertising from the applicable device. Due to the nature of Yahoo's services, we are only able to opt a non-registered user out of sale or targeted advertising if such user takes such action on the device on which the user wishes to opt out.

Verification Process for Exercising Your Rights

You may exercise your rights by logging into your privacy controls. By logging into your privacy controls, we will verify your identity based on your login and process your request within your privacy controls. If you choose to email us at the email address below, we will need to verify your identity before we can fulfill your request. The verification process may vary depending on the nature of the request.

Right to Appeal

Under the MCDPA, you have the right to appeal a decision by Yahoo to decline to act on your request. If you choose to appeal, you must submit your appeal within a reasonable timeframe following receipt of the decision from Yahoo to decline to act on your request. We will respond to you in writing within 45 days of receipt of your appeal with an explanation on any action taken or not taken and the reasoning for our decision. If we deny your appeal, we will also include information on how you may contact the Office of the Attorney General to submit a complaint.

Contact Us

If you have questions you can complete this form, or you may contact us via email at minnesota_privacy@yahooinc.com.