US Privacy Addendum

Privacy Rights for Residents of California, Colorado, Connecticut, Utah and Virginia

Privacy Policy

The following terms apply only to the Personal Information of residents of California, Colorado, Connecticut, Utah and Virginia (the “States”). These provisions are intended to comply with the privacy laws enacted by the States (the “State Privacy Laws”), including the California Consumer Privacy Act, the California Privacy Rights Act and related regulations (collectively, the “CCPA”). These provisions supplement the other sections of our Privacy Policy.  Any terms that are defined in the State Privacy Laws have the same meaning here. The term definitions applicable to you are those provided in the State Privacy Law of the state in which you are a resident.

Your Personal Information

The categories of Personal Information we may have collected from you, the sources of that Personal Information, and how and with whom we may have used or shared such Personal Information during the past year include the following:

3. Your State Privacy Rights

If you are a resident of one of the States, State Privacy Law provides you with the following rights with respect to your Personal Information:

• The right to know what Personal Information we have collected, used or disclosed about you.
• The right to request that we delete any Personal Information we have collected about you.
• The right to request that we delete any inaccurate Personal Information we have collected about you.

4. Sale of Personal Information

If you are a resident of one of the states, you can always tell us not to sell your personal information, as defined in the CCPA, by changing your cookie settings via the link in the website footer at any time.

5. Sensitive Personal Information

We may collect some sensitive personal information, as that term is defined under State Privacy Laws and as described in this Privacy Policy, such as your credit card payment information or precise geolocation data. Your sensitive personal information will not be used for any additional purposes that are incompatible with the purposes listed above, unless we provide you with notice of those additional purposes.

6. California Business Contact Information

If you are a California resident and we receive your Personal Information in the form of contact details from business events, for example as part of a business appointment (e.g., by exchanging business cards) or as part of any other form of collaboration, we may use your contact and business details to maintain our business contacts. For this purpose, we may transfer your contact details to our internal database.  Pursuant to the CCPA, you have the privacy rights under State Privacy Laws with respect to your business contact Personal Information described above.

The processing activity may include the following data categories:

• Your contact information (e.g., name, title, form of address or salutation, address, gender, telephone numbers, email address); and
• Details on your profession (e.g., job title, position, personnel number, place of work, branch office, department, qualifications).

This data processing is based on our legitimate business interests. We have a legitimate economic interest in maintaining contacts beyond the initial context and in using them to establish and develop a business relationship and to remain in contact with the parties concerned.

Such business contacts could also be easily processed in our email communications with you and then kept in typical business software, either centrally or on the electronic devices of our employees.

7. Submitting Requests

You may submit requests to delete and/or to know Personal Information we have collected about you by accessing our State Privacy Rights request portal at:

https://privacyportal-de.onetrust.com/webform/71528392-912c-4f33-b3b5-9e665d0de552/44a2b69a-52e7-4f71-bd11-3c4b71ad611d

or by contacting our Toll-Free Telephone Number at:

+1 (888) 914-9661 (PIN 659429)

We will respond to your request in compliance with the State Privacy Laws or other applicable law.

8. Verification of Your Identity

When you exercise these rights and submit a request to us, we or our partners will verify your identity by asking you to authenticate your identity via standard authentication procedures.  For example, we may ask for your email address, order numbers of previous orders of our products and services, the last four digits of a credit or debit card or bank account number used to make a purchase, or the date of your last purchase from us.  We also may use a third-party verification provider to verify your identity.

9. Non-Discrimination

If you make a request under State Privacy Law, we will not discriminate against you in any way.  For example, we will not deny you goods or services, charge you different prices or rates for goods or services, deny you discounts or other benefits or impose penalties on you, or provide you with or suggest that you will receive a different level or quality of goods or services.

10. Authorized Agents

You may permit an authorized agent to submit a request to know or to delete your Personal Information.  If we receive a request on your behalf, we will ask that person to give us proof that you gave that person written permission to make a request for you.  If that person does not provide us with written proof, we will deny their request so that we can protect your Personal Information.

11. Automated Decision-Making

We generally do not use automated decision-making technology, as that term is defined by State Privacy Laws. If we make use of automated decision-making technology, you will be informed through a separate privacy notice.

12. Record Retention

We may retain your Personal Information for as long as necessary to fulfill the purpose for which it was collected or to comply with legal or regulatory requirements. We strive to retain your Personal Information no longer than is reasonably necessary to carry out the purposes listed in this Privacy Policy or as required by law.  Under certain circumstances, your data may also be kept longer, e.g., if a Legal or Litigation Hold (i.e., a ban on deleting data for the duration of the procedure) is ordered in connection with official or legal proceedings. We retain your Personal Information following the end of your services or other business relationship in accordance with applicable law and our record retention and destruction policies. Data without any personally identifiable information may be stored permanently.