California Privacy Notice

Last Updated: January 1, 2023

Scope of Disclosures

This California Privacy Notice (the “CA Disclosures”) supplements the information contained in the Privacy Policy of Six Flags Entertainment Corporation and its subsidiaries (collectively, “we,” “us,” or “our”) and applies solely to guests, users and other individuals who reside in the State of California (“consumers” or “you”). These CA Disclosures describe how we collect, use, disclose, and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act of 2018 (“CCPA”). Unless otherwise expressly stated, all terms in these CA Disclosures have the same meaning as defined in our Privacy Policy or as otherwise defined the CCPA.

Personal Information Disclosures

When we use the term “personal information” in these CA Disclosures, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. For the purposes of these CA Disclosures, personal information does not include:

• Publicly available information from government records.
• De-identified, aggregated or anonymized information that is maintained in a form that is not capable of being associated with or linked to you.
• Information excluded from the CCPA’s scope, such as:
  • Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
  • Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.
• Information relating to our job applicants, employees, contractors and other personnel of Six Flags, which is not governed by these CA Disclosures.

Collection and Use of Personal Information

We collect various categories of personal information in connection with our services. Please review The Types of Information We Collect, And How We Collect Them section of the Privacy Policy to learn more about the personal information we collect. In the last 12 months, we have collected the following categories of personal information:

Purposes for Collecting Personal Information

We may use or disclose the personal information we collect about you for one or more of the following purposes:

• To fulfill or meet the reason you provided the information, such as to create your account, process your transaction or respond to your inquiry.
• To communicate with you, including via email, text message, push notification and/or telephone calls.
• To operate, maintain, and provide to you the features and functionality of our services.
• To market to you, including through email, direct mail, phone or text message.
• To personalize your experience and to deliver custom content and product and service offerings relevant to your interests, including targeted offers and ads through our websites, Apps, third party sites, or on other devices you may use.
• To improve our products and services and to improve our website.
• To recognize you and remember your information when you return to our websites and services.
• For testing, training, research, analysis, and product development, including to develop and improve our services.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• To evaluate, negotiate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about consumers is among the assets transferred or is otherwise relevant to the evaluation, negotiation or conduct of the transaction.

Disclosure of Personal Information

As described in our Privacy Policy , we disclose personal information for business purposes or we may sell your personal information to third parties, subject to your right to opt out of those sales or sharing (see Right to Opt-Out of Personal Information Sales and Sharing below). We disclose your personal information to the following categories of recipients:

• Our service providers: We engage a number of service providers that perform business or operational services for us or on our behalf, such as website hosting, infrastructure provisioning, IT services, customer service, email delivery services, marketing and advertising services, and other similar services, subject to contractual terms restricting the collection, use and disclosure of your personal information for any other commercial purpose.
• Third parties at your request. We share your personal information with third parties with your consent or at your direction.
• Businesses as needed to provide services. We may share personal information with businesses you engage with through our services, or as needed to fulfil your request or transaction, including, for example, payment processing services.
• Security providers. We may share your personal information with security providers, for example, to detect, prevent, or otherwise address actual or suspected fraud, harassment, security or technical issues, violations of any law, rule, regulation or the policies of Six Flags.
• Business partners. We may disclose personal information to businesses with whom we partner to provide contests, joint promotional activities or co-branded services, and such disclosure is necessary to fulfil your request or application.
• Other third parties. From time to time, we may disclose your personal information to third parties or service providers who use this information to market to you, to perform analytics and conduct research, or for other purposes, in accordance with their own privacy policies and terms.
• Ad networks and advertising partners. We work with ad networks and advertising partners to deliver advertising and personalized content to you on our services, on other sites and services you may use, and across other devices you may use. These parties may collect information directly from your browser or device when you visit our services through cookies or other tracking technologies. This information is used to provide and inform targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics and market research;
• Analytics providers. We work with analytics providers to better understand the demographics of our users and visitors, and to personalize, enhance and improve our services.
• Social networks. We may disclose personal information, such as a unique identifier, hashed email address, or information automatically collected through tracking technologies, to social networks for the purpose of displaying personalized advertising and content on those social networks.
• Law enforcement and third parties pursuant to legal request. From time to time, we may disclose personal information as reasonably necessary to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• Third parties in the context of a corporate transaction. We may disclose personal information as reasonably necessary to evaluate, negotiate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Six Flags’ assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Six Flags about consumers is among the assets transferred or is otherwise relevant to the evaluation, negotiation or conduct of the transaction.

In the previous 12 months, we have disclosed the following categories of personal information to recipients for a business purpose:

• All of the categories of personal information we collect explained in the table above.

In the previous 12 months, we have sold or shared the following categories of personal information to third parties, subject to your settings and preferences and your Right to Opt Out of Personal Information Sales and Sharing:

• Identifiers
• Commercial Information
• Internet / Network Information

In addition, please see Third Party Tracking and Online Advertising below to learn how third party advertising networks, social media companies and other third party businesses collect and disclose your personal information directly from your browser or device through cookies or tracking technologies when you visit or interact with our websites, use our apps or otherwise engage with us.

Your California Privacy Rights

As a California resident, you may be able to exercise the following rights in relation to the personal information about you that we have collected (subject to certain limitations at law):

Right to Know	You have the right to request any or all of the following information relating to your personal information we have collected and used in the last 12 months, upon verification of your identity: The specific pieces of personal information we have collected about you; The categories of personal information we have collected about you; The categories of sources of the personal information; The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed; The categories of personal information we have sold and the categories of third parties to whom the information was sold; and The business or commercial purposes for collecting or selling the personal information.
Right to Request Correction Right to Request Deletion	You have the right to request in certain circumstances that we correct personal information that we have collected about you. You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions. You have the right to direct us not to sell or share personal information we have collected about you to third parties now or in the future. Your right to opt out does not apply to our disclosure of personal information to service providers.
Right to Opt Out of Personal Information Sales and Sharing	You have the right to direct us not to sell personal information we have collected about you to third parties now or in the future. If you are under the age of 16, you have the right to opt in, or to have a parent or guardian opt in on your behalf, to such sales.
Right to Non-Discrimination	You have the right not to receive discriminatory treatment for exercising these rights. However, please note that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our products and services or engage with you in the same manner.
“Shine the Light”	California residents that have an established business relationship with us have rights to know how their information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law (Civ. Code § 1798.83).

How to Exercise Your California Consumer Rights

To Exercise Your Right to Know, Right to Correct, or Right to Deletion

To exercise your Right to Know, Right to Correct, and/or your Right to Deletion, please submit a request by:

• Filling out our California Resident Rights Request Form, or
• Calling (833) 316-0113.

We will need to verify your identity before processing your request, which may require us to request additional personal information from you. We will only use personal information provided in connection with a Consumer Rights Request to review and comply with the request. In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.

To Exercise Your Right to Opt Out of Personal Information Sales and Sharing

Unless you have exercised your Right to Opt Out of Personal Information Sales and Sharing, we may sell personal information to third parties for monetary or other valuable consideration or disclose it for cross-context behavioral advertising (“sharing” under the CCPA). The third parties to whom we sell or share personal information may use such information for their own purposes in accordance with their own privacy statements, which may include reselling this information to additional third parties. To exercise your Right to Opt Out of Personal Information Sales or Sharing, you may submit a request by clicking the following link: Do Not Sell My Personal Information

Third Party Tracking and Online Advertising

We utilize third parties to engage in online advertising. These ad networks, social media companies and other third party businesses collect your personal information directly from your browser or device through cookies or similar tracking technology when you visit or interact with our website, use our apps or otherwise engage with us online. These third parties use your personal information to serve relevant ads on our websites, on other websites or mobile apps, or on other devices you may use, or to personalize content and perform other advertising-related services such as reporting, attribution, analytics and market research. These third party businesses may use such information for their own purposes in accordance with their own privacy statements, which may include reselling this information to additional third parties, including other advertising networks. Please see our Privacy Policy for more information about how third parties use cookies and related technologies to collect information automatically on our websites and other online services, and the choices you may have in relation to those practices.

Minors Under Age 16

We do not sell or share the personal information of consumers we know to be less than 16 years of age, unless we receive affirmative authorization (the “Right to Opt In”) from either the minor who is between 13 and 16 years of age, or the parent or guardian of a minor less than 13 years of age.

California’s “Shine the Light” Law

At the time of this writing, we do not provide your personal information to third parties for their direct marketing purposes, as described in California’s “Shine the Light” law (Civil Code Section §1798.83). To opt-out of having your personal information disclosed to third parties for their direct marketing purposes in the future, please click the Do Not Sell My Personal Information link and provide your contact information to be added to our suppression list.

Authorized Agent

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf where (i) you provide sufficient evidence to show that the requestor is an authorized agent with written permission to act on your behalf and (ii) you successfully verify your own identity with us.

Updates to These CA Disclosures

We will update these CA Disclosures from time to time. When we make changes to these CA Disclosures, we will change the “Last Updated” date at the beginning of these CA Disclosures. All changes shall be effective from the date of publication unless otherwise provided.

Contact Us

If you have any questions in connection with these CA Disclosures or other privacy-related matters, please send an email to [email protected] with the subject line “Privacy Rights” or address inquiries to us as described in the “Contact Us” section of the Privacy Policy.