EFFECTIVE DATE: June 30, 2023
International Flavors & Fragrances Inc. and its subsidiaries and affiliates (“IFF”) collect, use, and disclose data from visitors of our websites (“Sites”) in accordance with the following statement (“Privacy Statement”). The Privacy Statement does not apply to any data IFF collects offline or through web or mobile sites that do not link to this Privacy Statement. Additional information for visitors in the EEA/UK is available here. Additional information for visitors who are California residents is available here.
Your use of the Sites, and any dispute over privacy, is subject to this Privacy Statement and our Terms of Use , including its applicable limitations on damages and the resolution of disputes. The Terms of Use are incorporated by reference into this Privacy Statement.
For visitors outside the EEA/UK: By visiting our Sites, you agree that your data will be handled as described in this Privacy Statement.
Types of Data Collection; Data Collected
Purposes of Data Collection
How We May Disclose Personal Data
Third-Party Links
Security
What Choices Do I Have Regarding Use of My Data?
Children Under 13
Information Storage and International Transfers
Contact
Changes to this Privacy Statement
Information for Individuals Located in the European Economic Area (EEA) and United Kingdom (UK)
Privacy Policy and Notice at Collection for California Residents
The information we collect from you depends on how you use our Sites. If you send a request through our website, we will collect the data that you submit to us. For example, if you request ingredients and/or samples, register for e-mail alerts or webcasts, or if you receive commercial documentation from IFF, either via an IFF website, to enable the fulfillment of the request you may provide information such as your name, title, company, address, country, phone, fax, and/or e-mail.
IFF automatically collects certain information when you use our Sites, including but not limited to the activities you perform on our Sites, the type of hardware and software you are using (for example, your operating system or browser), information stored in cookies, IP address, access times, the web pages from which you came, the regions from which you navigate the web page, and the web page(s) you access (as applicable).
IFF uses cookies, pixel tags, or similar tracking technology or other technologies (“cookies”) on the IFF websites, to customize and improve the Sites and for certain additional purposes including analysis of what information you are accessing or downloading and how you are interacting with that information after the download is completed. Please refer to the IFF Cookie Policy for details of the types of cookies IFF uses and the purposes for which the cookies and the data collected through them are used.
IFF uses your personal data for its business purposes including to:
When permitted by applicable law, including, if applicable, when we have obtained your consent, we may disclose your personal data to our affiliates, business partners, vendors, and others as follows:
We also may disclose your personal data in the following circumstances:
Our Sites may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Privacy Statement, but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.
No data transmission over the internet or any wireless network can be guaranteed to be 100% secured. As a result, while IFF strives to protect your personal data through implementation of security measures, IFF cannot warrant the security of any information you transmit to IFF.
We may send periodic promotional emails to you, with your consent if required by applicable law. You may opt-out of promotional emails at any time by following the opt-out instructions contained in the email. Please note that it may take up to 10 business days for us to process opt-out requests. If you opt-out of receiving promotional emails, we may still send you emails about any services you have requested or received from us.
Our Sites and services are not designed for children under 13. If we discover that a child under 13 has provided us with information, we will delete such information from our systems.
IFF and its affiliates and service providers process and store your personal data on servers around the world, including in the United States.
If you have any questions about our Privacy Statement, please contact IFF’s Chief Privacy Officer by e-mail at [email protected] or by mail addressed to Chief Privacy Officer, International Flavors & Fragrances Inc., 521 West 57th Street, New York, New York 10019.
This Privacy Statement is current as of the Effective Date set forth above. We may change this Privacy Statement from time to time, so please be sure to check back periodically.
We will post any changes to this Privacy Statement on our site. If we make any changes to this Privacy Statement that materially affect our practices with regard to the personal data we have previously collected from you, we will endeavor to provide you with notice in advance of such change by highlighting the change on our Sites.
SCOPE OF NOTICE
This section of this Privacy Statement applies only if you use our Site from a country that is a Member State of the EEA or from the UK, and it supplements the information in the remainder of our Privacy Statement, above. IFF or its respective subsidiary or affiliate is the controller of your personal data. The data controller will depend on who you are: a visitor of this website, an investor, or an IFF customer or supplier.
IFF legal entities and their full details can be found in the latest annual report.
Legal bases for processing
We rely on one of several different legal bases to process your personal data, which are as follows:
PURPOSES FOR USING YOUR DATA
IFF collects personal data through our sites to:
USER’S RIGHTS
Subject to the conditions set forth in applicable law, you have the following rights with regard to our processing of your personal data:
Right to access, correct and delete your personal data – IFF will strive to ensure that all personal data you provide us is correct. However, you also have a responsibility to ensure you provide us accurate personal data, and that changes in personal circumstances (for example, change of address, etc.) are notified to IFF so that we keep your personal data up-to-date. You have the right to request access to any of your personal data that IFF may hold, and to request correction of any inaccurate personal data relating to you. You furthermore have the right to request deletion of any irrelevant personal data we hold about you.
Right to withdraw consent – In the event your personal data is processed on the basis of your consent, you have the right to withdraw consent at any time by sending an email to [email protected] specifying your request, without affecting the lawfulness of processing based on consent before its withdrawal.
Data portability – To the extent that we use your personal data for performance of contract and that personal data is processed by automatic means, you have the right to receive all such personal data that you have provided to IFF in a structured, commonly used and machine-readable format, and also to require us to transmit it to another data controller where this is technically feasible.
Right to restrict personal data use – You have the right to restrict our use of your personal data where (i) you contest the accuracy of the personal data; (ii) the use is unlawful, but you do not want us to erase the personal data; (iii) we no longer need the personal data for the relevant purposes, but you require it for the establishment, exercise, or defense of legal claims; or (iv) you have objected to our personal data use justified on where we need to process the personal data for the establishment, exercise or defense of legal claims.
Rights to object to processing of your personal data – You have the right to object to the processing of your personal data on grounds relating to your particular situation (where processing is based on our legitimate interests). You also have right to object to the use of your personal data for direct marketing purposes (including profiling).
Lodge a complaint – You also have the right to lodge a complaint with a supervisory authority, in particular in your country of residence, if you consider that the collection and use of your personal data infringes this Notice or applicable law.
For further information regarding your rights, or to exercise any of your rights (other than the right to lodge a complaint with an authority), please contact [email protected]. You can lodge a complaint by contacting the authority directly.
TRANSFER OF PERSONAL DATA
Your personal data may be stored and processed in any country where we have facilities or in which we engage service providers, and, by using the Site, you understand that your personal data will be transferred to countries outside of your country of residence which may have data protection rules that are different from those of your country. When transferring personal data to entities located in a country outside the EEA or UK that that have not received an adequacy decision from the European Commission (including the United States), we take measures to provide adequate protection for your personal data. We enter into data processing agreements and data transfer agreements that include standard contractual clauses approved by the European Commission or the UK Information Commissioner’s Office. Such data processing agreements are available upon request by contacting [email protected]. Where required, we conduct transfer risk assessments and enter into supplementary measures to protect any personal data we transfer outside the EEA or UK to countries that do not have an adequate level of data protection.
DATA RETENTION
We retain your personal data only for as long as necessary for the relevant activity unless a longer retention period is required or permitted by law For more information, please contact us at: [email protected].
EU GDPR REPRESENTATIVE
International Flavors & Fragrances I.F.F. (Nederland) B.V. is International Flavors & Fragrances Inc.’s representative in the European Union and may be contacted at B.V. Liebergerweg 72-98, 1221 JT, Hilversum, The Netherlands, Attn: Law Department Tel: +31 35 688 3911 or at [email protected].
UK GDPR REPRESENTATIVE
IFF (GB) Ltd. is International Flavors & Fragrances Inc.’s representative in the United Kingdom and may be contacted at Duddry Hill Haverhill, CB98LG, United Kingdom, Attn: Law Department Tel: +44 1440 715000 or at [email protected].
GERMAN DATA PROTECTION OFFICER
To contact IFF’s German Data Protection Officer, please send an email to [email protected].
CONTACT
If you have questions about this statement, please contact us at [email protected].
Last Updated: June 15, 2023
This Privacy Policy and Notice for California Residents (“Notice”) supplements the information contained in IFF’s Website Privacy Statement to provide California residents with specific information regarding our collection, use, and disclosure of their personal data. This Notice is also intended to satisfy our applicable notice at collection requirements under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), with respect to the personal data we collect about you.
What is personal data? In this notice, “personal data” is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household (i.e., we use “personal data” in the same manner as “personal information” is defined under the CCPA). It does not include publicly available information as defined by the CCPA.
What isn’t covered by this Notice? This Notice does not apply to our collection of consumer credit reports and background checks, publicly available information lawfully made available from state or federal government records or that we have reason to believe was made publicly available by the individual, or other information that is exempt under the CCPA. This Notice also does not apply to personal data we collect about employees of our business customers and vendors, job applicants, independent contractors, or current or former IFF employees. We may provide supplemental privacy notices for these groups of individuals.
CATEGORIES OF DATA THAT WE COLLECT, DISCLOSE AND SELL
Our collection, use, and disclosure of personal data about California residents will vary depending upon the circumstances and the nature of our interactions or relationship with such resident. The chart below describes the categories of personal data IFF collects, discloses for a business purpose, and “sells.”
Note that under the CCPA’s broad definition of “sell” and “share” the use of cookies and other tools for website analytics and targeted advertising may be considered “selling” or “sharing” of personal data. In the chart below, the categories of personal data that we “sell” or “share” are related to our use of analytics and ad cookies. We do not disclose personal data to third parties in exchange for money.
Please see the “Types of Data Collection” and “Purposes of Data Collection” sections of our Website Privacy Statement for information regarding the purposes for which we collect your personal data.
Please see the “Sharing Data” section of our Website Privacy Statement for information on the categories of third parties with whom we share your personal data.
SOURCES OF PERSONAL DATA
As further described in the “Types of Data Collection” section of our Website Privacy Statement, we may collect personal data from the following sources:
RETENTION OF PERSONAL DATA
We retain the personal data we collect only as reasonably necessary for the purposes described in this Notice, or otherwise disclosed to you at the time of collection. For example, we will retain certain identifiers for as long as it is necessary to comply with our tax, accounting, and recordkeeping obligations, to provide you with products and services or service your account, and for research, development, and safety purposes, plus an additional period of time as necessary to protect, defend or establish our rights, defend against potential claims, and to comply with our legal obligations.
DEIDENTIFICATION OF PERSONAL DATA
Occasionally, we may deidentify personal data and use the deidentified information for our internal purposes. We commit to maintaining and using this information in deidentified form and will not attempt to reidentify the information except to determine whether our deidentification process is effective.
RIGHTS REGARDING YOUR PERSONAL DATA
1. The CCPA provides California residents with specific rights regarding personal data. This section describes your rights under the CCPA and explains how to exercise those rights. Subject to certain exceptions, California consumers have the right to make the following requests: Right to Know: With respect to the personal data we have collected about you in the prior (twelve) 12 months, you have the right to request from us (up to twice per year and subject to certain exemptions and carveouts):
2. Right to Correct. Subject to certain restrictions, you have the right to request that we correct inaccuracies in your personal data.
3. Right to Delete. Subject to certain conditions and exceptions, you have the right to request deletion of your personal data that we have collected about you.
4. Right to Opt-Out: You have the right to opt-out of “sales” and “sharing” of your personal data, as those terms are defined under the CCPA, including through the use of an opt-out preference signal. As noted above, we only “sell” personal data under the CCPA through our use of third party advertising and analytics cookies. We may “share” personal data by disclosing it to third-parties to enable cross-contextual behavioral advertising of our products and services. We do not and will not sell personal data if we have actual knowledge that the individual is less than 16 years of age, unless we receive affirmative authorization (“opt-in”) from either the individual between 13 and 16 years of age, or the parent or guardian of an individual less than 13 years of age.
To exercise your right to opt-out of the “sale” or “sharing” of your personal data, please click here or use the Do Not Sell or Share My Personal Information link at the bottom of our website.
5. Right to Limit Use and Disclosure of Sensitive Personal Information. We do not engage in uses or disclosures of personal data that would trigger the right to limit use of sensitive personal data under the CCPA.
6. Right to Non-Discrimination. We will not discriminate against you for exercising any of the rights described in this section.
SUBMITTING REQUESTS
If you are a California resident and would like to exercise your CCPA rights, you may do so via any of the methods described below:
Authorized Agent. You may designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may also require that you directly verify your identity and the authority of your authorized agent.
Businesses operating as an authorized agent on behalf of a California resident must provide both of the following:
(1) Certificate of good standing with its state of organization; and
(2) A written authorization document, signed by the California resident, containing the California resident’s name, address, telephone number, and valid email address, and expressly authorizing the business to act on behalf of the California resident.
Individuals operating as an authorized agent on behalf of a California resident must provide either of the following:
(1) A notarized power of attorney signed and dated by the California resident naming the authorized agent as the California resident’s representative; or
(2) A written authorization document, signed by the California resident, containing the California resident’s name, address, telephone number, and valid email address, and expressly authorizing the individual to act on behalf of the California resident.
We reserve the right to reject (1) authorized agents who have not fulfilled the above requirements, or (2) automated CCPA requests where we have reason to believe the security of the requestor’s personal data may be at risk.
Verification. Before responding to your request, we must first verify your identity using the personal data you recently provided to us by asking you to provide us with additional information such as your email address, order numbers of previous orders of our products and services. We will take steps to verify your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information to verify your identity, or where necessary to process your request. In some cases, we may also carry out checks, including with third party identity verification services, to verify your identity before taking any action with your personal data. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.
DO NOT TRACK
We do not currently respond to web browser “Do Not Track” signals.
CHANGES TO THIS NOTICE
This Notice is current as of the Effective Date set forth above. We may change this Notice from time to time, so please be sure to check back periodically. We will post any changes to this Notice on our Site. If we make any changes to this Notice that materially affect our practices with regard to the personal data we have previously collected from you, we will endeavor to provide you with notice in advance of such change by highlighting the change on our Sites.
CONTACT US