Zebra General Data Protection Regulation (GDPR) Addendum

As used in this GDPR Addendum:

“controller,” “data subject,” “personal data”, “process”, and “processor” will each have the meaning given to them in Article 4 of the GDPR; 

“GDPR” means the General Data Protection Regulation (EU) 2016/679, together with any national implementing laws in any Member State of the European Union, as amended, repealed, consolidated or replaced from time to time including the UK version of the GDPR as defined in Section 10(3) of the Data Protection Act 2018;

"Privacy Policy” means Zebra’s privacy policy located on Zebra.com. 

As a controller and processor of data, including personal data, Zebra collects, processes, and uses personal data fairly and lawfully.

Annex 1 (below) contains the list of Zebra entities in the European Economic Area (“EEA”) that may collect and process your personal data.

Zebra is focused on implementing the appropriate technical and organizational measures to ensure that Zebra meets the requirements of the GDPR. Where the GDPR is applicable, Zebra commits to follow all the requirements of the GDPR, including to:

• Only process your personal data in line with your instructions
• Honor your right to withdraw consent at any time
• Maintain the confidentiality of your personal data and ensure sufficient staff training on data protection
• Ensure appropriate security of, and access to, your personal data
• Provide relevant data retention and deletion policies
• Facilitating data subject’s rights and incident notifications
• Utilize processors, sub-processors and international data transfers in a GDPR-compliant manner

Zebra’s Workcloud solutions may use sub-processors, including Zebra affiliates, for the processing of personal data from time to time in accordance with the GDPR. Zebra's current Workcloud solutions’ sub-processors can be found under the following links:

• Demand Intelligence Suite
• Enterprise Collaboration Suite
• Inventory Optimization Suite
• Workforce Optimization Suite

If you are a member of the Zebra PartnerConnect Program,  please click on the following link to see Zebra’s PartnerConnect Sub-processor Schedule.

For the purposes set out in the Privacy Policy and any applicable product or solution documentation, your personal data may be transferred outside of the country in which it was collected to Zebra Technologies Corporation (“Zebra US”), the parent company of Zebra located in the USA, its subsidiaries, affiliates and third party service providers located in other jurisdictions.

Zebra will ensure that all transfers are lawful and that there are appropriate legal and security arrangements, including implementing supplementary measures to achieve a level of protection equivalent to GDPR.

To meet the conditions of Chapter 5 of the GDPR, Zebra primarily relies on Standard Contractual Clauses approved by the European Commission in its decisions 2004/915/EC and 2010/87/EU or 2021/914/EC and 2021/915/EU for any new agreement entered into with or by Zebra on or after the 28 September 2021 ("SCCs"). This shall ensure the lawful transfer of personal data outside of the UK and European Union. Furthermore, Zebra as a group of companies has entered into an intra-group data transfer agreement, which incorporates the SCCs as the GDPR Chapter 5 transfer mechanism. This agreement ensures appropriate and suitable safeguards with Zebra US, Zebra UK, Zebra's subsidiaries, affiliates and third-party service providers. 

Zebra's sub-processors commit to using approved methods to ensure the controlled transfer of data outside of the EU. Additionally, Zebra’s providers make strong commitments to Zebra related to limiting access to the data that is stored with them.

Zebra products, services and websites are not for use by children under the age of 16 years and Zebra does not knowingly collect, store, share or use the personal data of children under the age of 16 years. If you are under the age of 16 years, please do not provide any personal data, even if prompted by Zebra's website to do so.

Where requested and lawful to do so, Zebra may communicate with you about Zebra products, services and solutions, subject to your consent where required. If you wish to unsubscribe from receiving marketing communications, please visit http://online.zebra.com/Preferences-enu to manage communications preferences. As is common with most websites, Zebra gathers certain information and stores it in log files when you interact with Zebra’s website. Zebra uses this information to personalize information presented to you, to monitor the effectiveness of Zebra's website-based marketing campaigns and to improve the functionality of the website. In such cases, Zebra will process such information in accordance with Privacy Policy.

Please visit the Preference Center page to understand the options available to you regarding unsubscribing to any communications you have subscribed to via Zebra's website. To invoke a data subject request under GDPR for access to and rectification or erasure of personal data or restriction of processing or to object to processing and rights to data portability, send an email detailing your specific request to privacy@zebra.com. Zebra also retains personal data no longer than is necessary to carry out the purposes described in the Privacy Policy. In considering how long to keep a particular category of personal data Zebra will have regard to the purposes for which it is processed, and any purposes which continue to apply even when Zebra has delivered a product or service (for example, because Zebra needs to keep records for audit purposes or in the event of a legal claim or threatened claims). Data subjects have the right to lodge a complaint with the appropriate supervisory authority if the data subject considers that the processing of personal data relating to the data subject infringes the GDPR. Please refer to Annex 2 below to find your local supervisory authority in the EEA.

This Zebra GDPR Addendum is subject to change from time to time, so you should check it periodically.

The statutory regulation is:

This policy was last updated on June 4, 2024.