Privacy Policy

Lattice Privacy Policy

Effective starting: July 1, 2022

This Privacy Policy describes how Lattice Semiconductor Corporation ("Lattice") collects, uses, and discloses your personal data that we collect when you visit the Lattice family of web sites, request information about our products or services, use our mobile application, place an order with us, interact with customer support, or otherwise interact with us (collectively the “Site”).

Mirametrix, Inc. is a wholly-owned subsidiary of Lattice Semiconductor Corporation. Any Personal Information collected by Mirametrix software, including software offered by or licensed from Mirametrix, Inc. is subject to the privacy policy located at https://www.mirametrix.com/privacy/ and not this privacy policy. The controller for such Personal Information is Mirametrix, Inc.

I. Collection of Information

We collect information (including Personal Information) that you provide directly to us. The types of Personal Information collected depend on how you interact with us and with our products, services and personnel. “Personal information” is defined in accordance with applicable law and includes, but is not limited to name, address, email address, phone number.

We also collect information when you use the Site, as well as when you use our mobile application, Lattice Link. Such information includes the type of browser you use, your operating system, access times, your IP address, the pages accessed and links clicked, how you navigate to (referring link) and from the Site and its content (such as how you scroll over the Site and its content, which parts you click, and how long you spend on each page), your preferences, the products and/or services that you have viewed or searched for, how you use the mobile application, and other information such as online identifier(s), and persistent device identifier(s). Such information is obtained from your browser and as applicable, your device, including by use of cookies, web beacons or other tracking technologies. With respect to Lattice Link, relevant consents, such as for access to precise geolocation data, are requested using consent mechanisms on your device. Please note that if you decline to allow certain data to be collected by the Site, certain functions and services may not be available or operate as intended. For more information about how we use cookies, please see Lattice’s Cookie Policy.

In addition, in order to perform certain functions on the Site, such as accessing certain documents, downloading software, or requesting technical support, and to use Lattice Link, we collect information from you via a registration form. This information includes user name (i.e. your email address) and a password, as well as contact information (such as name and business telephone number). We also collect Personal Information when you apply for a position of employment with us and when you enter into a contract with us. If you choose not to provide the requested information, then you will not be able to perform these various functions.

We may also collect Personal Information when you interact with us offline, such as when you provide your information to us at trade shows, visit our office(s), send us an email, call us on the phone, or when you communicate with us via third-party social media sites, or otherwise.

II. Use and Sharing of Information

When you register at our Site, in addition to providing requested registration information, you can opt-in to receive email communications from Lattice. If you opt-in, we will send you information on new product launches, Product Change Notifications (PCNs), updated software, live seminars in your locality and other general information relating to the Lattice's business. You may also select individual areas of interest relating to Lattice’s business about which you would like to remain informed (via "web content updates" that let you know when the Site has been updated). If you sign up for "web content updates," you will be notified of new content added to the Site in the sections you select as being of interest to you.

Out of respect for your privacy, we do not send such communications unless you affirmatively express your interest in them, and we allow you to adjust your preference or terminate delivery of such messages at any time by replying to the message or clicking the "manage my email preferences" or "unsubscribe" links at the bottom of every email.

Additionally, we may use and disclose Personal Information and any other information we collect from and about you for the following purposes:

• Fulfill contractual obligations and verify compliance with contractual obligations;
• Respond to your request(s) for information and communicate with you about Lattice and our products, such as but not limited to sending you technical notices, administrative messages, including product change notices and notices of product discontinuances, and responding to support requests;
• Business management, operational, and commercial purposes, such as to process your transactions, marketing, and product support, development and improvement;
• Comply with our contractual obligations to third-party licensors of intellectual property and/or software, including electronic design automation tools and simulators that may be combined with or offered for use with Lattice tools or products, and specifically, we may share information about who has licensed such third-party intellectual property or software with the licensor, provided that they do not sell or share Personal Information with other third parties for their direct marketing purposes;
• Detect and prevent fraudulent transactions and illegal activities, comply with our legal obligations, and protect the rights and property of Lattice and others;
• We share Personal Information with employees, contractors, and service providers (such as IT service vendors, website hosting facilities, and email distribution, customer support, sales and training services) so they can perform a business, professional, or technical support function for you or for Lattice, such as providing products and services to you, fulfilling and delivering orders, processing payments, performing social media functions, and administering drawings, contests, seminars, trainings, and events. Third parties are permitted to use Personal Information only to fulfill specific purposes applicable thereto.
• We share information among our affiliates and subsidiaries for business and commercial purposes;
• If applicable, we may provide personal identifiers (such as your name) and training, event, and program attendance and participation information to your employer when you have registered to participate in a training, event, or program in connection with your employment;
• We may disclose information about you to law enforcement, legal tribunals, and others (such as our advisors) if required by law or based on our good faith belief that it is necessary to enforce the Sites’ terms and conditions, to comply with applicable law, or to protect Lattice, the users of the Site, or others;
• In the event of a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another business unit, we will provide relevant information to the persons and/or entities assuming control of such business unit, to our advisors, and as otherwise necessary to complete the transaction as permitted by law or contract;
• For any other purpose specifically described to you at the time we collect information; and
• as otherwise described in this Privacy Policy.

We do not sell Personal Information for monetary or other valuable consideration.

III. Changes to your information

If you no longer wish to receive email communications from Lattice, you may opt-out of receiving them by following the instructions included in each newsletter or communication or by emailing us at privacy@latticesemi.com. If your Personal Information changes, or if you wish to modify your communication preferences, or if you no longer desire our services, you may correct or update your account by making the appropriate change on the "my account" section of this Site.

IV. International & Cross-Border Data Transfers

When you interact with the Site or with the Lattice Link application, the data controller is Lattice Semiconductor Corporation, a Delaware, U.S.A. corporation. The information we collect about you may be transferred to, and accessed from within, jurisdictions in which Lattice does business which may not offer the same level of data protection as your home jurisdiction. We may transfer your Personal Information for business purposes, including to enable us to provide you with our products and services, to improve our business processes, for marketing purposes, and for customer relationship management purposes. These transfers can take place among Lattice and any of its affiliates and subsidiaries and to selected third parties.

When you provide Personal Information to personnel that are employed by Lattice affiliates or subsidiaries located outside of the U.S.A., that Personal Information may be transferred for processing out of the country in which you provided it. We will take steps to maintain an adequate level of protection for such Personal Information in the jurisdictions in which we process it consistent with the legal requirements applicable to such Personal Information. If you are a resident of the European Economic Area ("EEA"), this information is transferred pursuant to Standard Contractual Clauses. Please see the "Note to EEA Residents" section below for more details.

V. Advertising and Analytic Services Provided by Others

We may partner with ad networks and other ad serving providers (“Advertising Providers”) that serve ads on behalf of us and others on non-affiliated platforms. Some of those ads may be personalized, meaning that they are intended to be relevant to you based on information Advertising Providers collect about your use of the Site and other sites or apps over time, including information about relationships among different browsers and devices. This type of advertising is known as interest-based advertising.

A. Web beacons

Our Site and certain of our communications may employ technology called "web beacons" or "clear GIFs". Web beacons (clear GIFs) are tiny graphics with unique identifiers that are embedded invisibly on web pages and/or included in emails, and which may be used to tell us which parts of our Site users have visited and whether emails we have sent you have been opened or forwarded. For more information about web beacons and other advertising and analytic services, please visit our Cookie Policy. If such technology is supplied to Lattice by a third-party, the use of such technology is subject to the privacy policy of the relevant partner site. However, where applicable, the use of such technology on the Site may be subject to your consent.

We do not currently respond to web browser “do not track” signals or other mechanisms that provide a method to opt out of the collection of information across websites or other online services.

B. Links to other sites

The Site contains links to other sites that are not owned or controlled by Lattice. Lattice is not responsible for the privacy practices of such other sites.

We encourage you to be aware when you leave our Site and to read the privacy statements of other web sites that you visit, as this privacy statement applies only to information collected by the Site.

VI. Security

The security of information about you is important to us. We follow generally accepted industry standards to help protect the information we collect, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use reasonable means in accordance with the custom and practices of the industry to protect information, we cannot guarantee its absolute security.

If you have any questions about security on our Site, you can email us at webmaster@latticesemi.com.

VII. Children

We do not knowingly collect, maintain, or use Personal Information from children, and no part of our site or services is directed at them. If you learn that your child has provided us with Personal Information without your consent, you may alert us at privacy@latticesemi.com. If we learn that we have collected any Personal Information from a child, we will promptly take steps to delete it and terminate the child’s account, if applicable.

VIII. Additional Information for Individuals located in European Economic Area (“EEA”), Switzerland and United Kingdom (“UK”)

If you are located in the EEA or UK, you have certain rights and protections under the law described below regarding our processing of your personal data.

A. Legal Bases for Processing

We will only process your personal data in accordance with the following legal bases:

• As necessary to perform our responsibilities under our contract with you. For example, by processing your order and providing the products or services you purchase.
• When we have a legitimate interest in processing your Personal Information. For example, to communicate with you about changes to our services or legal documents, to prevent fraud, or to provide, protect and improve our products and services.
• If you consent to specific processing activit(ies) (including those described in Section II above), or by your consent to data collection via the Lattice Link application through a device’s consent mechanisms, and you provide your consent in the manner indicated.
• In some cases, processing will be necessary for compliance with a legal obligation, such as response to legal process requests.

B. Data Subject Requests

You have the right to access personal data we hold about you and to ask that this data be corrected. In certain cases, you may also have the right to request that we erase data we are processing or to restrict or object to certain of our processing activities. You may also have the right to request that we provide you with the personal data you have provided us in a portable form for transmission to another controller’s service. If you would like to exercise any of these rights, you may contact us as indicated below.

C. Data Retention

We store the information we collect about you for as long as is necessary for the purposes for which we originally collected it. We may retain certain information for legitimate business purposes or as required by law.

D. Data Protection

Lattice will safeguard Personal Information collected in the EEA or UK consistent with the European General Data Protection Regulation (EU) 2016/679 (“GDPR”) or its UK equivalent, respectively, if that Personal Information is transferred outside the EEA.

E. Questions or Complaints

If you have a concern about our processing of personal data that we are not able to resolve, you have the right to lodge a complaint with the data privacy authority where you reside. For contact details of your local Data Protection Authority, please see: http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm.

IX. Additional Information for Individuals located in California

California Privacy Rights This section contains disclosures required by the California Consumer Privacy Act (“CCPA”) and applies only to “personal information” that is subject to the CCPA.

Personal Information We Collect. In the preceding 12 months, we collected the following categories of personal information about California consumers.

We do not currently “sell” (as defined by the California Consumer Privacy Act) Personal Information without your consent.

Categories of Sources. We collect personal information from the following categories of sources:

• Consumers;
• Internet service providers;
• Operating systems and platforms;
• Social networks;
• Suppliers;
• Service providers;
• Distributors and resellers; and
• Affiliates not under the Lattice brand.

Why We Collect, Use, and Share California Information. We use and disclose the personal information we collect for our commercial and business purposes, as further described in this Privacy Policy. These commercial and business purposes include, without limitation:

• Our commercial purposes, marketing, advertising, and enabling commercial transactions.
• Our business purposes as identified in the CCPA, which include:
  • Auditing related to our interactions with you;
  • Legal compliance;
  • Detecting and protecting against security incidents, fraud, and illegal activity;
  • Debugging;
  • Performing services (for us or our service provider) such as account servicing, processing orders and payments, and analytics;
  • Internal research for technological improvement;
  • Internal operations;
  • Activities to maintain and improve our products and services, including to better understand and improve our supply-chain processes; and
  • Other one-time uses.

We disclose the categories of personal information designated above to the categories of third parties listed below for business purposes:

• Service providers;
• Affiliates not under the Lattice brand;
• Government entities;
• Advertising networks;
• Suppliers;
• Distributors and resellers; and
• Data analytics providers.

Your Rights Regarding Personal Information. California residents have certain rights with respect to the personal information collected by businesses. If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:

• The right to know the categories and specific pieces of personal information we collect, use, disclose, and sell about you; the categories of sources from which we collected personal information about you; our purposes for collecting or selling personal information about you; the categories of personal information about you that we have either sold or disclosed for a business purpose; and the categories of third parties with which we have shared personal information.
• The right to request that we delete the personal information we have collected from you.
• The right not to receive discriminatory treatment for the exercise of the privacy rights conferred by the CCPA.

To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:

• By email at privacy@latticesemi.com.

California consumers also have the right not to receive discriminatory treatment if they exercise the rights list above.

Consumers will be required to submit their email address, and may also be asked to provide their name, location, and telephone number so that we can verify the request. California law permits California consumers to use an authorized agent to make privacy rights requests. We require an authorized agent to provide us with proof of the California consumer’s written permission (for example, a power of attorney) that shows the authorized agent has the authority to submit a request for the California consumer. An authorized agent must follow the process described above to make a request, and we may additionally require the authorized agent to verify his/her own identity and registration to do business in California and we may confirm the agent’s authority with the California consumer about whom the request was made.

Minors’ Right to Opt In. We do not have actual knowledge that we sell the personal information of minors under 16 years of age.

If applying for a position with us, and you are a California resident, review the California Applicant/Employee Privacy Notice at https://www.latticesemi.com/About/LegalNotices/California_Applicant_Employee_Privacy_Notice%20.

XII. Additional Information for Individuals Located in the People’s Republic of China (PRC)

For individuals located in China, this Section contains disclosures on the rights and protections regarding our processing of your Personal Information pursuant to the Personal Information Protection Law of the People’s Republic of China ("PIPL"). For the purpose of this section, “PRC” or "China" refers solely to the mainland of the People’s Republic of China.

A. Personal Information Processor

When you interact with the Site or with the Lattice Link application, the Personal Information Processor that collects and processes your Personal Information as defined under the PIPL is the “controller” referred to in Section IV (International & Cross-Border Data Transfers) of this Privacy Policy, i.e., Lattice Semiconductor Corporation, a Delaware, U.S.A. corporation.

B. Collection and Processing of Personal Information

Please refer to Sections I (Collection of Information) and II (Use and Sharing of Information) of this Privacy Policy for the types of Personal Information that we may collect and the purposes for which we process your Personal Information.

Among the Personal Information we may collect, precise geolocation data is considered sensitive Personal Information under the PIPL. We will process such data with strict protection measures and with sufficient necessity for the processing. If you do not want us to process such data, you may choose not to provide us with or grant us access to such data.

C. Legal Basis for Data Processing

We may collect and process your Personal Information under the following circumstances acknowledged in the PIPL:

• where we have obtained your consent;
• where it is required to conclude and perform a contract to which you are a party;
• where it is required to perform statutory obligations or legal duties;
• where it is required to respond to public health emergencies, or protect the life, health and property safety of natural persons in emergencies;
• where Personal Information is processed to a reasonable extent for the purposes of news report, public opinion supervision and other acts for public interest;
• Where Personal Information has already been made public by your own or through other legitimate channels, and processing of such Personal Information is done pursuant to applicable laws and to a reasonable extent; or
• where it is required by applicable laws or administrative regulations.

We will not, however, process your Personal Information in a way prohibited by or not compliant with the PIPL.

D. Sharing and Transfer of Personal Information

We may share your Personal Information with our affiliates, subsidiaries, service providers or other third parties located within or outside of China for the purposes and in a manner specified in Sections II (Use and Sharing of Information) and IV (International & Cross-Border Data Transfers) of this Privacy Policy.

If we share your Personal Information with the foregoing recipients, we will follow and adopt the applicable process and requirements required by the data protection laws of the PRC in respect of the transfer (including international transfer) of your Personal Information.

E. Storage of Your Personal Information

As we operate our business internationally, your Personal Information will inevitably be stored on servers located outside of China. We will store your Personal Information for the shortest period of time that is necessary to achieve the corresponding purposes, and delete or anonymize your Personal Information under the circumstances as stipulated by the PIPL.

F. Your Rights and How to Contact Us

You have the following rights with respect to your Personal Information in accordance with the PIPL:

• the right to access your Personal Information maintained by us;
• the right to request rectification (correction) of your Personal Information if it is inaccurate or incomplete;
• the right to request the erasure of your Personal Information in certain circumstances specified under the PIPL, unless we have a legal obligation to process the Personal Information or another exception applies;
• the right to request us to explain the rules of processing of your Personal Information;
• the right to request a machine-readable copy of your Personal Information from us, and to have us transmit that data directly to another controller, where technically feasible and to the extent the conditions required by laws or supervisory authorities are fulfilled; and
• the right to withdraw your consent with respect to certain types of processing activities to which you have given consent at any time with future effect. Such withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal or processing based on other legal bases.

To exercise any of your rights in relation to your Personal Information, to inquire on any aspect of this Privacy Policy or your Personal Information, or provide us with any feedback, you may contact us at the contact details specified in Section XIV (Contact Us).

If you provide any Personal Information for the purposes as described in this Privacy Policy on behalf of any other person (for example a third-party recipient’s shipping address and mobile number), you should ensure that you have obtained his/her express consent or authorization to share his/her Personal Information with us for the purposes described herein, including but not limited to enabling us to share his/her Personal Information with third party logistics companies or service providers for processing purchase order, and where necessary, sharing his/her Personal Information with our subsidiaries and affiliated companies located within or outside of China.

By interacting with the Site or with the Lattice Link application and/or providing your Personal Information to us, you will be deemed as having consented to our processing of your Personal Information in accordance with the terms and conditions set out in this Privacy Policy, including the collection of your Personal Information in a cross-border manner, and the sharing of your Personal Information with our subsidiaries and affiliated companies as well as other third parties located within or outside China for the purposes and in the manner described in this Privacy Policy.

XIII. Changes to this privacy statement

If we decide to change our privacy policy, we will post those changes to this privacy statement on this Site. Please review this privacy statement frequently to learn of any updates.

This version of our privacy policy was first published on July 1, 2022

XIV. Contact us

If you have questions regarding our privacy policy, please contact us at:

Lattice Semiconductor Corporation
5555 NE Moore Ct,
Hillsboro, OR 97124
USA
Telephone: 503/268-8000

Email: privacy@latticesemi.com