SUPPLEMENTAL INFORMATION FOR CALIFORNIA RESIDENTS

The following supplements NextEra’s Privacy Policy and provides additional information to California resident required by California law.

This supplemental information applies when Nextera Energy collects personal information from California residents who visit our website NextEraEnergy.com as it may be modified, relocated and/or redirected from time to time (the “Site”) or otherwise provide us with their personal information.  This supplemental information does not apply to the personal information of California residents in their capacity as the Company’s prospective, current, or former employees, independent contractors, or board members, or their emergency contacts, dependents, or beneficiaries.

As used in this supplement, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.
 

Notice at Collection for California Residents: 

NextEra collects the personal information identified in the section above entitled, “Information we collect and how we use it”, for the purposes stated in that section and retains it for the period described in the section, above, entitled, “How long we retain your personal information”. We do not sell your personal information or disclose it for cross-context behavioral advertising (“sharing”).  We also do not collect or process sensitive personal information for the purpose of inferring characteristics about you. To the extent you provide us with personal information about other California residents, you are responsible for providing this notice to them.
 

A.  Information About Disclosures of Personal Information

1. Disclosures for Business Purposes

Company has disclosed each of the categories of personal information listed in the “Categories of sources of Personal Information we collect” section of NextEra Energy’s Privacy Policy, for the following “business purposes”, as that term is defined under the California Privacy Rights Act (“CPRA”), in the last 12 months:

  • Service providers:  For the business purpose of performing services on Company’s behalf and, in particular, for the specific purposes described in the “Disclosure of personal information” section of NextEra Energy’s Privacy Policy.
  • Auditors, lawyers, consultants, and accountants engaged by Company:  For the business purpose of auditing compliance with policies and applicable laws, in addition to performing services on Company’s behalf.
  • Affiliated companies:  To other companies within the NextEra family of companies for the business purposes of (1) auditing compliance with policies and applicable laws, (2) helping to ensure security and integrity, (3) debugging, (4) short-term transient use, (5) performing services on behalf of Company, (6) internal research, and (7) activities to maintain or improve the quality or safety of a service or device.

2. Sales and Sharing

We do not sell or share your personal information¸ where “share” means disclosing personal information to third parties for cross-context behavioral advertising. Without limiting the foregoing, we have not, and have no actual knowledge that we have, sold or “shared” the personal information of individuals of any age, including the personal information of children under 16, in the last 12 months.

  • “Sell” is defined as making available personal information to “a third party for monetary or other valuable consideration.”
  • “Share” is defined as making available personal information to “a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.”

Sales of Personal Information

We do not “sell” your personal information as most people would understand that term, meaning that we do not disclose your personal information to any third party in exchange for a monetary payment. However, as is common practice among businesses operating online, we may allow third parties to receive information about you via cookies for purposes of analyzing and optimizing our services, to personalize your online experience by providing advertisements that are more relevant to you, and for statistical research and analytics. These activities may be defined as “sale’ or “sharing” of personal information under the California Privacy Rights Act (“CPRA”).  The CPRA defines “sharing” to mean disclosing personal information to a third party for its cross-context behavioral advertising purposes.

In the last 12 months, we have disclosed Internet or Other Electronic Network Activity Information, to analytics providers and network advertisers, and such disclosure may be considered a “sale” or “sharing” of personal information.

We have no actual knowledge that we have sold or “shared” the Personal Data of children under 16, in the last 12 months and we have no intention to do so.

3. Aggregated and Deidentified Information

We may aggregate and/or deidentify information, use it internally, and disclose to third parties.  Neither Aggregated Information nor Deidentified Information (defined below) is personal information.

  • “Aggregated Information” refers to information about a group of individuals from which the individually identifiable information has been removed. An example of Aggregated Information would be the statistic that 20 people used our website’s contact form on a given day. 
  • “Deidentified Information” means information subjected to reasonable measures to ensure that the deidentified information cannot be associated with the individual. An example of Deidentified Information would be the data point that an unidentified visitor first entered the Site through our main web page. We maintain Deidentified Information in a deidentified form and do not attempt to reidentify it, except that we may attempt to reidentify the information just to determine whether our deidentification processes function correctly. 
     

B.  Your California Privacy Rights

Subject to applicable law, individuals who reside in California and do business with NextEra companies that operate in California1, have the following rights:

  • Right to Know: You have the right to submit a verifiable request for specific pieces of your personal information and for information about Company’s collection, use, and disclosure of your personal information.  Please note that the CPRA’s right to obtain “specific pieces” does not grant a right to the whole of any document that contains personal information, but only to discrete items of personal information.  Moreover, California residents generally just have a right to know categories, for example, categories of third parties to which personal information is disclosed, but not the individual third parties. 
  • Right to Delete: You have the right to submit a verifiable request for the deletion of personal information that you have provided to Company.
  • Right to Correct: You have the right to submit a verifiable request for the correction of inaccurate personal information maintained by Company, taking into account the nature of the personal information and the purposes of processing the personal information.
  • Right to Restrict Use and Disclosure of Sensitive Personal information: You have the right to restrict Company’s use and disclosure of your sensitive personal information to purposes permitted under the CPRA, such as security, quality control, uses required by law, and disclosures to vendors in support of the permitted purposes.  This right only applies to sensitive personal information collected or processed by Company for the purpose of inferring characteristics about you. 

Note on Sensitive Personal Information: Company does not infer characteristics from sensitive personal information.  Company only uses sensitive personal information as necessary to perform the services or provide the goods the average person would reasonably expect when requesting those goods or services, to ensure security and integrity, short term transient use, to maintain the quality of our products and services, or for other purposes permitted by the California Privacy Rights Act and implementing regulations (“CPRA”) without the right to opt out.

1For the avoidance of doubt, Section B does not apply to customers of Florida Power & Light Company, GEXA Energy and any other NextEra Energy, Inc. affiliates that do not conduct business in the state of California.
 

C.  How to Exercise Your Rights

Company will respond to requests to know, delete, correct, and limit the use of your sensitive personal information to permitted purposes in accordance with applicable law and to the extent required by law, if it can verify the identity of the individual submitting the request.  You can exercise these rights in the following ways:


D.  How We Will Verify Your Request

We match personal information that you provide us against personal information we maintain in our files.  The more risk entailed by the request (e.g., a request for specific pieces of personal information), the more items of personal information we may request to verify your identity.  If we cannot verify your identity to a sufficient level of certainty to respond securely to your request, we will let you know promptly and explain why we cannot verify your identity.
 

E.  Authorized Agents

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. To authorize an agent, provide written authorization signed by you and your designated agent and contact us as set forth in “Contact Us” section of NextEra’s Privacy Policy for additional instructions.
 

F.  Company’s Non-Discrimination Policy

Company will not unlawfully discriminate against you for exercising your privacy rights under the California Privacy Rights Act.