State-Specific Privacy Notice

This Privacy Notice for Alabama, Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia residents (“State-Specific Privacy Notice”) applies to information that is linked or reasonably linkable to an identified or identifiable natural person (“Personal Data”) who is a resident of the state and subject to applicable state privacy laws (collectively “Covered Resident”)‎. If you are a Covered Resident, please review the information below about how and why we collect, use and disclose your Personal Data and your potential rights with regard to your Personal Data under applicable state privacy laws. Terms used herein have the meaning ascribed to them under the appliable state privacy law. The rights described herein are subject to exemptions and other limitations under applicable law. If you are not a Covered Resident, please see our Privacy Policy.

How We Process Personal Data

Categories of Personal Data we process, our purposes for processing it, and the categories of third parties to which we disclose Personal Data

Please review the chart below for information about the categories of Personal Data we process; the purpose for processing Personal Data; the categories of Personal Data that we share with third parties, if any; and the categories of third parties, if any, with whom we share Personal Data.

Sale of Personal Data and Use for Targeted Advertising

We do not sell your Personal Data for monetary consideration or as that term is traditionally defined. However, we do engage in certain activities related to marketing, advertising and data analytics that could be a “sale” of Personal Data or engaging in “targeted advertising” under the applicable state privacy laws. We engage in such activities in order to provide you with certain communications and marketing about our products and services. We also use these tools to collect analytics and other data about your interactions with our Site and other services.

To learn more about our online collection of information, or to modify your cookies settings, please review our online Privacy Policy: ‎www.wm.com/privacy.‎ If you wish to opt-out of the processing of Personal Data for targeted advertising or the sale of Personal Data, please click on the “Your Privacy Choices” link on the footer of the page. In the preceding 12 months, we have sold or processed for targeted advertising the following categories of Personal Data (as described in more detail above) to the following categories of third parties:

How Long Do We Keep Your Personal Data

We keep Personal Data for as long as reasonably necessary for the purposes described in this State-Specific Privacy Notice, while we have a business need to do so, or as required by law (e.g. for tax, legal, accounting or other purposes), whichever is the longer.

Your Privacy Rights

Depending on where you are a resident, you have certain rights to your Personal Data under state privacy laws. Please note that the applicable state privacy laws do not restrict our ability to do certain things like comply with other laws or comply with regulatory investigations. We also reserve the right to retain, and not to delete, certain Personal Data after receipt of a request to delete information from a Covered Resident where permitted by the applicable state privacy laws or another law or regulation.

Note that rights vary by state and some rights are inapplicable to our business practices (e.g., right to opt out of profiling that has legal or similarly significant effects is inapplicable because personal information is not used for purposes to which the right to opt out applies).

Right to Know and Access

You have the right to request that we confirm whether or not we are processing your Personal Data and to request access to that Personal Data. To submit a request, please review the below section, “Submitting Consumer Requests.”

Depending on your state, you may have the right to receive additional information, and it will be included in the response to a specific request for such information:

• Delaware and Maryland: Categories of third parties to whom we disclose personal information.

• Minnesota and Oregon: Specific third parties to whom we disclose personal information.

• Connecticut: Specific third parties to whom we sell personal information (as “sale” is defined under Connecticut’s privacy law).

Right to Obtain a Copy of Personal Data

You have the right to obtain a copy of your Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller, where the processing is carried out by automated means. To submit a request, please review the below section, “Submitting Consumer Requests.”

Right to Request Deletion

You have the right to request that we delete Personal Data about you that we process. To submit a request, please review the below section, “Submitting Consumer Requests.”

You should be aware, however, that we are allowed to retain your Personal Data under certain conditions, even if you have asked us to delete it, such as when retaining your Personal Data is necessary for us to complete a transaction with you or provide you with a good or service you have requested. We will notify you of any denial of your deletion request and the reason for such denial.

Right to Request Correction

You may have the right to request that we correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing of your Personal Data. To submit a request, please review the section below, “Submitting Consumer Requests.”

Right to Opt Out of Certain Processing of Personal Data

Consumers have the right to opt out of certain categories of processing of Personal Data. These include the right to opt out of (i) processing for targeted advertising, (ii) the sale of Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. To submit a request and to learn how we respond to opt-out preference signals, please review the section below, “Submitting Consumer Requests.”

We do not process Personal Data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects and therefore these opt out rights do not apply.

Right to Appeal

You may have the right to appeal our responses to your consumer rights requests. If you believe you have a basis for such an appeal, please contact us here: you can visit our privacy portal here, or call 855-782-6445‎ to make an appeal request and provide any required information to submit your appeal.

Submitting Consumer Requests

Consumer Rights Requests

You can submit a request for access, deletion, or correction (“Consumer Rights Request”) through our portal here, or by calling ‎855-782-6445‎.

We are only required to respond to verifiable Consumer Rights Requests made by you, or someone legally authorized to act on your behalf, who may make a Consumer Rights Request related to your Personal Data. You may also make a Consumer Rights Request on behalf of your minor child.

Making a Consumer Rights Request does not require you to create an account with us.

When you submit a Consumer Rights Request, we will take steps to verify your request ‎by email or telephone call. In some cases, we may request additional information in order to verify ‎your request or where necessary to process your request. If we are unable to adequately verify a ‎request, we will notify the requestor. Authorized agents will be required to provide proof of their ‎authorization, and we may also require that the relevant consumer directly verify their identity and ‎the authority of the authorized agent.‎

We will only use Personal Data provided in a consumer request to verify the requestor’s identity or authority to make the request.

We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you.

Opt-Out of Sale and Targeted Advertising

You have the right to opt-out of certain advertising and marketing activities including online tracking and email marketing that could be considered a sale or processing of your Personal Data for targeted advertising. You can exercise your right to opt-out of the sale or processing of Personal Data for targeted advertising in the following ways:

• Opt-Out of Online Tracking: You can exercise your right to opt-out of certain online tracking activities that could be considered a sale or processing of your Personal Data for targeted advertising by clicking the “Your Privacy Choices” link on the footer of the page, through an opt-out preference signal, or by calling 855-782-6445‎. If you choose to exercise this right through an opt-out preference signal and we detect such a signal, it will be honored. If you submit a request to opt-out, including through an opt-out preference signal, after you have consented to our sale or processing of Personal Data for targeted advertising, we will opt you out of any further selling sale or processing of Personal Data for targeted advertising.

• Opt-Out of Other Sales/Targeted Advertising: You can exercise your right to opt-out of certain email marketing activities that could be considered a sale or processing of your Personal Data for targeted advertising through the Privacy Web Form or by calling 855-782-6445‎.

• Global Privacy Opt-Out Preference Signal: We process opt-out requests submitted using an opt-out preference signal as required by applicable law. For example, when we detect the Global Privacy Control (“GPC”) signal from a browser, we treat the signal as a request to opt out of sale and sharing of personal information associated with that browser. If we receive the GPC signal from a user who we identify as a customer with an account, we treat the signal as a request to opt out of sale and sharing applicable to that account. If you click “accept” on the cookies banner subsequent to your submission of a GPC signal, this may override your GPC signal.

Additional Information for Oregon Residents

The following entities are a controller and are registered with the Secretary of State in Oregon:

• Waste Management of Oregon, Inc.

• WM Bagco, LLC

• WM LampTracker, Inc.

We are also registered to do business in Oregon with the following entity names:

• Sandy Transfer Station

• Troutdale Transfer Station

• Waste Management of Columbia County

• wastebyrail

• wastebyrail.com

• Stericycle, Inc.

• Stericycle of Washington, Inc.

Changes to this State-Specific Privacy Notice

This State-Specific Privacy Notice is current as of the Last Updated date set forth above. From time to time, we may update or revise this State-Specific Privacy Notice. If there are changes to the terms of this State-Specific Privacy Notice, any documents (e.g., Terms of Use) or website pages referencing this State-Specific Privacy Notice will link to the most recent version of the notice.

Contact for Additional Information

If you have questions about this policy, please contact us at:

Email: privacyofficer@wm.com

Address: WM 800 Capitol St. Houston, TX 77002
Attn: WM Privacy Team

Waste Management Home