CUSTOMER AND VENDOR PRIVACY NOTICE

If you are an individual representing a current or prospective customer, supplier, vendor, distributor, agent, service provider or other business partner of International Flavors & Fragrances Inc. (“IFF”) or one of its affiliates, this privacy notice is issued to you by IFF or the affiliate that you do business with, as the responsible party for your personal data (“we” or “us”). A list of IFF group entities is available here and here.

For individuals located in California, please see IFF’s Customer and Vendor – CCPA Privacy Policy & Notice at Collection section of this Notice below.

DATA CATEGORIES COLLECTED AND PURPOSES OF PROCESSING

You may provide to us, or we may collect about you, certain personal data (which term, when used in this privacy notice, includes without limitation sensitive personal data, if any), namely:

  • contact information (name, business address, telephone number, email address);job title, role and company name;
  • employment information, such as occupation, licenses and professional membership;
  • background information, such as business credit report and score
  • education information, such as degree and schooling information
  • characteristics of protected classifications under state or federal law, such as gender and nationality
  • demographic information, such as age and date of birth;
  • government identifiers, such as national identification numbers, driver’s license numbers, and government or taxpayer Identification Number;
  • for natural persons acting as customer, suppliers, vendors, distributors, agents or service providers, financial information;
  • data related to customer satisfaction surveys;
  • data collected during customer support/service calls;
  • data collected during assessments, surveys and audits;
  • your electronic identification data where required for the purpose of delivering products or services to our company (login, passwords, IP address, cookies, access and connection times); and
  • data concerning related IT support and technology requests.

We process this data for the following purposes (and any directly related purposes):

  • to be able to do business with you, including to perform our contractual obligations to your employer or principal and to manage our contracts with your employer or principal;
  • to provide you with marketing materials about products, services, news, offers, promotions and events which we think may be of interest to you;
  • for security and safety when you visit our facilities;
  • to manage our technology resources (e.g., cyber-risk management, infrastructure management and business continuity);to detect and prevent fraud;
  • to protect and defend the rights or property of others;
  • to contact you, including to fulfill sample requests and orders, answer questions and other requests from you, provide customer support and about business opportunities;
  • to operate and expand our business activities and develop and improve the quality of our products and services;
  • to perform corporate governance, training and other internal functions;
  • for archiving and record-keeping;
  • in event of corporate transactions such as a financing, merger, acquisition, takeover, amalgamation or other disposal of assets or interests; and
  • to comply with the law, when certain information is necessary to satisfy our legal or regulatory obligations and to respond to lawful requests, court orders, and legal process.

Any data that you do not provide to us directly is either collected from publicly available sources such as company websites or professional networking sites or provided by another business professional in your field.

We will let you know whether it is mandatory or voluntary for you to provide certain types of personal data. Having a business relationship with us is voluntary, but it may be impossible to work with you without processing some personal data about you such as your contact information.

Legal bases for processing

In order to comply with applicable data protection law, we process your personal data on several different legal bases, as follows:

1. Based on your consent – where applicable law requires your consent to process your personal data for any of the purposes described above, we will obtain your consent to do so on or before the processing of your personal data.

2. Based on our legitimate interests to efficiently conduct and manage our customer relationships, and grow our business – we process your personal data to perform our contractual obligations to your employer or principal; to manage our contracts with your employer or principal; to provide marketing materials to you when applicable law does not require your consent; for security and safety when you visit our facilities; to detect and prevent fraud; to protect and defend the rights or property of others, or our own rights and interests; to effect corporate transactions such as a financing, merger, acquisition, takeover, amalgamation or other disposal of assets or interests; we consider your privacy interests in this regard and redact personal information to the largest extent practicable to avoid affecting your privacy rights.

3. Based on compliance with legal obligations – we may need to process your personal data to comply with the law, when certain information is necessary to satisfy our legal or regulatory obligations and to respond to lawful requests, court orders, and legal process.

4. Based on necessity to perform contracts with you – we need to process your personal data to fulfil sample requests and orders, answer questions and requests from you, and provide customer support.

SHARING AND TRANSFERS OF PERSONAL DATA

We may share your personal data with the following recipients on a need to know basis:

  • our personnel including personnel of our affiliates (a list of IFF group entities is available here);
  • service providers that act on our behalf to process personal data for administrative, management or business purposes and to assist us in providing our services;
  • our IT systems providers, cloud services providers, database providers and consultants;
  • other third parties to whom we assign or novate any of our rights or obligations; and
  • professional advisors and external lawyers.

Many third-party recipients may be located or have relevant operations where the data protection laws may not provide an adequate level of protection for Personal Data. Any transfer is subject to conditions under applicable law including contract terms that require (i) the recipients to provide an adequate level of protection for the Personal Data and (ii) appropriate technical and organizational security measures to protect Personal Data against unauthorized disclosure or access, accidental loss or alteration and against all other unlawful forms of processing.

We may also share your personal data with third parties such as governmental bodies or regulatory authorities anywhere in the world where required by applicable law, in the context of lawful requests, court orders, legal proceedings or investigations; or with third parties such as potential or prospective buyers, sellers, lenders and their respective affiliates, agents, advisers, representatives, employees and officers in event of corporate transactions such as a financing, merger, acquisition, takeover, amalgamation or other disposal of assets or interests.

In each case, we will obtain your consent to the disclosure of your personal data where we are required to do so under applicable law.

YOUR RIGHTS

Subject to conditions and limitations set out in applicable law, you have certain rights in relation to your personal data which vary depending on where you are located. These rights may include:

  • The right to obtain copies of your personal data, and information about sources of your personal data, how and the purpose for which we process your personal data, and the identity or type of any third party which has obtained your personal data.
  • The right to ask us to correct or complete your personal data, to erase your personal data (this may not apply in particular where processing your personal data is necessary for compliance with a legal obligation or for the establishment, exercise or defense of legal claims) and to restrict the processing of your personal data;
  • The right to object to processing of your personal data on grounds relating to your particular situation when we process based on our legitimate interests, or at any time if we process your personal data for marketing purposes;
  • The right to request your personal data (or transfer of your data to a third party) in a structured, commonly used and machine-readable format, where the processing is based on consent or a contract and the processing is carried out by automated means.
  • The right to withdraw or limit the scope of your consent at any time without charge.

If you have any questions or comments about this privacy notice or the processing of your personal data, or you may exercise any rights available to you under applicable law by contacting our Data Privacy Officer at [email protected]. Where permitted under applicable law, we may charge you a reasonable fee to process your request. You may also have a right under applicable law to lodge a complaint with us and/or a supervisory authority in your country of residence if you consider that the processing of your personal data infringes applicable law.

DATA RETENTION

We retain your personal data for only as long as necessary, which may be for the duration of the relevant business relationship to provide you with services, for legitimate business purposes and in accordance with contract, where required or allowed under applicable law. We may also retain personal data for longer than the duration of the business relationship should we need to retain it to protect ourselves against legal claims, use it for analysis or historical record-keeping, or comply with our information management policies and schedules, or as may be permitted or required by applicable laws.

DATA SECURITY

We have implemented appropriate technical and organizational measures to provide a level of security and confidentiality to your personal data aimed at protecting against accidental or unlawful destruction or alteration, accidental loss, and unauthorized disclosure or access.

UPDATES

We may update this privacy notice from time to time. Where we are required to do so by applicable law, we will seek your consent to such changes.

IFF CUSTOMER AND VENDOR – CCPA PRIVACY POLICY & NOTICE AT COLLECTION

If you are an individual representing a current or prospective customer, supplier, vendor, distributor, agent, service provider or other business partner of International Flavors & Fragrances Inc. (“IFF”) or one of its affiliates, this privacy notice is issued to you by IFF or the affiliate that you do business with, as the responsible party for your personal information (“we” or “us”). This privacy notice is intended to satisfy the requirements of the California Consumer Privacy Act 2018, as amended by the California Privacy Rights Act 2020 (“CCPA”). A list of IFF group entities is available here and here.

1. DATA CATEGORIES COLLECTED AND PURPOSES OF PROCESSING

You may provide to us, or we may collect about you, certain categories of personal information (which term, when used in this privacy notice, includes without limitation sensitive personal information, if any). In the previous twelve months we have collected the following categories of personal information:

Categories of Personal Information Categories of Sources Disclosed for a Business or Commercial Purpose Have we Sold or Shared in the Past 12 Months?
Identifiers

  • name, business address, telephone number, email address, age, date of birth).
  • From you directly;
  • From your employer;
  • From other businesses that provide us with information we use to do business with you or your employer;
  • From publicly available sources such as company websites or professional networking sites; or
  • From other business professionals in your field.
 Yes No
Characteristics of protected classifications

  • gender and nationality).
  • From you directly;
 Yes No
Commercial information

  • customer satisfaction survey responses.
  • data collected during customer support/service calls.
  • data collected during assessments, surveys, and audits.
  • data concerning related IT support and technology requests
  • From you directly;
 Yes No
Internet or other electronic network activity information

  • unique identifier (i.e., your electronic identification data) where required for the purpose of delivering products or services to our company (login, passwords, IP address, cookies, access, and connection times.
  • From you directly;
 Yes Yes
Professional or employment-related information

  • job title, role, company name, occupation, licenses, and professional membership.
  • From you directly;
  • From your employer;
  • From other businesses that provide us with information we use to do business with you or your employer;
  • From publicly available sources such as company websites or professional networking sites
 Yes No
Education information

  • degree and schooling information).
  • From you directly;
  • From your employer;
 Yes No
Sensitive personal information

  • national identification numbers, driver’s license numbers, and government or taxpayer Identification Number.
  • for natural persons acting as customer, suppliers, vendors, distributors, agents or service providers, financial information.
  • From you directly;
  • From your employer;
 Yes No
Inferences drawn from any of the information above
  • From you directly;
 Yes No

 

We process this data for the following business or commercial purposes (and any directly related purposes):

  • to be able to do business with you, including to perform our contractual obligations to your employer or principal and to manage our contracts with your employer or principal;
  • to provide you with marketing materials about products, services, news, offers, promotions and events which we think may be of interest to you;
  • for security and safety when you visit our facilities;
  • to manage our technology resources (e.g., cyber-risk management, infrastructure management and business continuity);
  • to detect and prevent fraud;
  • to protect and defend the rights or property of others;
  • to contact you, including to fulfill sample requests and orders, answer questions and other requests from you, provide customer support and about business opportunities;
  • to operate and expand our business activities and develop and improve the quality of our products and services;
  • to perform corporate governance, training and other internal functions;
  • for archiving and record-keeping;
  • in event of corporate transactions such as a financing, merger, acquisition, takeover, amalgamation or other disposal of assets or interests; and
  • to comply with the law, when certain information is necessary to satisfy our legal or regulatory obligations and to respond to lawful requests, court orders, and legal process.

We do not use or disclose sensitive personal information for any purpose that would require us to provide you with a right to limit the use of your sensitive personal information under the CCPA.

We will let you know whether it is mandatory or voluntary for you to provide certain types of personal information. Having a business relationship with us is voluntary, but it may be impossible to work with you without processing some personal information about you such as your contact information.

2. DISCLOSURE AND SALE OF PERSONAL INFORMATION

In the previous 12 months we have disclosed the above categories of personal information for a business purpose to the following categories of recipients on a need-to-know basis:

  • our personnel including personnel of our affiliates (a list of IFF group entities is available here);
  • service providers that act on our behalf to process personal information for administrative, management, or business purposes and to assist us in providing our services;
  • our IT systems providers, cloud services providers, database providers and consultants;
  • other third parties to whom we assign or novate any of our rights or obligations; and
  • professional advisors and external lawyers;
  • governmental bodies, law enforcement, or regulatory authorities where required by applicable law, in the context of lawful requests, court orders, legal proceedings or investigations; or
  • potential or prospective buyers, sellers, lenders and their respective affiliates, agents, advisers, representatives, employees and officers in event of corporate transactions such as a financing, merger, acquisition, takeover, amalgamation or other disposal of assets or interests.

Note that we never “sell” or “share” sensitive personal information (as those terms are defined in the CCPA).

If required under the CCPA, we will obtain your consent prior to disclosing your personal information

3. YOUR CALIFORNIA PRIVACY RIGHTS

Subject to conditions and limitations set out the CCPA, you have certain rights in relation to your personal information. These rights include:

  • Right to Know/Request Access. You have the right to request from us:
    – The categories of personal information we have collected about you;
    – The categories of sources from which we collected your personal information;
    – The business or commercial purposes for collecting, selling, or sharing your personal information;
    – The categories of third-parties to whom we have disclosed your personal information; and
    – The specific pieces of personal information we have collected.
  • Right to Delete. Subject to certain conditions and exceptions, you have the right to request we delete your personal information.
  • Right to Correct. You havethe right to ask us to correct or complete your personal information.
  • Right to Opt-Out of Sale/Sharing. You have the right to opt-out of “sales” and “sharing” of your personal information, as those terms are defined under the CCPA, including through the use of an opt-out preference signal. As described above, we may disclose certain categories of personal information to advertising companies, marketing companies, and analytics partners for targeted advertising, marketing, and campaign management purposes. Some of this may be considered a “sale” or “sharing” under the CCPA. To opt-out of the sale or sharing of your personal information, you may do so by clicking here or by clicking on “Do Not Sell or Share My Personal Information” in the footer of our website. Alternatively, when you use a browser that transmits an opt-out preference signal we will automatically opt you out of sales and sharing of your personal information for that browser. Note that we do not have actual knowledge that we sell or share the personal information of consumers under sixteen (16) years of age.
  • Right to Non-Discrimination. We will not discriminate against you for exercising any of the rights described in this section.
  • Exercising Your California Privacy Rights.

You may exercise any rights available to you under the CCPA by emailing our Data Privacy Officer at [email protected]. You may also send any questions or comments about this privacy notice or our privacy practices to that email address.

Verifying Your Request

Before we can respond to your request, we need to verify your identity. We do so by using personal information you provide to us as part of your request. When sending us a privacy rights request, please include your name, contact phone number, any address associated with your account, and any account number you may have to enable us to verify your identity. If we cannot verify your identity with the information you initially provided, we may ask for additional information. If we are still unable to verify your identity after a good faith attempt, we may reject your request to protect the personal information in our possession.

Authorized Agents

Authorized agents may initiate a request on behalf of another individual. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.

Businesses operating as an authorized agent on behalf of a California resident must provide the following:

(i) Certificate of good standing with its state of organization; and

(ii) A written authorization document, signed by the California resident, containing the California resident’s name, address, telephone number, and valid email address, and expressly authorizing the business to act on behalf of the California resident.

Individuals operating as an authorized agent on behalf of a California resident must provide the following:

(i) A notarized power of attorney signed and dated by the California resident naming the authorized agent as the California resident’s representative; or

(ii) A written authorization document, signed by the California resident, containing the California resident’s name, address, telephone number, and valid email address, and expressly authorizing the individual to act on behalf of the California resident.

We reserve the right to reject (1) authorized agents who have not fulfilled the above requirements, or (2) automated CCPA requests where we have reason to believe the security of the requestor’s personal information may be at risk.

We endeavor to respond to all privacy rights requests within 45 days of receipt. If we require more time (up to 90 days total), we will inform you of the reason and extension period within 45 days.

Where permitted under the CCPA, we may charge you a reasonable fee to process your request.

4. DATA RETENTION

We retain your personal information for only as long as is necessary, which may be for the duration of the relevant business relationship to provide you with services, receive services from you or your employer, for our own business purposes, or where required or allowed under applicable law. We may also retain personal information for longer than the duration of the business relationship should we need to retain it to protect ourselves against legal claims, use it for analysis or historical record-keeping, comply with our information management policies and schedules, or as may be permitted or required by applicable laws.

5. DATA SECURITY

We have implemented technical and organizational measures to provide a level of security and confidentiality to your personal information aimed at protecting against accidental or unlawful destruction or alteration, accidental loss, and unauthorized disclosure or access.

6. UPDATES

We may update this privacy notice from time to time. Where we are required to do so by applicable law, we will seek your consent to such changes.

Last Updated: June 15, 2023

IFF Subsidiaries Impacted by DuPont name and logo changes:

On November 4, 2023, the names of the IFF subsidiary legal entities listed below were officially changed, and IFF-owned systems and system-generated documents were updated accordingly. We kindly request that any sales orders and invoices issued to these impacted entities reflect their new subsidiary legal entity names.

While we deplete existing inventory and finish implementing manual changes, packaging materials and manually generated documents may display both the DuPont and IFF subsidiary legal entity names and logos. We hereby confirm that all DuPont and IFF subsidiary legal entity names and logos are valid and can be accepted as usual.

Please note that the name changes were only executed for existing subsidiary legal entities, and no new legal entities were created. Furthermore, all identifying characteristics including bank account number, taxpayer identification, and address remained unchanged‡.

If you have any questions, concerns, or challenges that we should know about, please reach out to your account representative as soon as possible.

Legal Entities With Name And/Or Logo Changes

Impacted business(es)
Jurisdiction Former Legal Entity Name Current Legal Entity Name Manufacturing Health & Bioscience Nourish Pharma Solutions
China DuPont Nutrition Food Ingredients (Beijing) Co., Ltd. Danisco Health Foods (Beijing) Co., Ltd. x x
Denmark DuPont Nutrition Biosciences ApS International N&H Denmark ApS x x x x
Germany DDP Specialty Products Germany GmbH & Co. KG IFF N&H Germany GmbH & Co. KG x x x
Ireland  DuPont Nutrition Ireland International N&H Mfg. Ireland x x x
Mexico DuPont Nutrition Mexicana S.A. de C.V. IFF N&H Mexicana S.A. de C.V. x x
Norway Dupont Nutrition Norge AS IFF N&H Norway AS x x x
Philippines DuPont Nutrition Philippines Inc. IFF Nutrition Philippines Inc. x
Spain DuPont Nutrition and Biosciences Iberica S.L. IFF Nutrition and Biosciences Iberica, S.L. x x x x
Thailand DuPont Nutrition (Thailand) Co., Ltd. International N&H (Thailand) Co., Ltd. x x
Thailand DuPont Nutrition (Thailand) Co., Ltd. (branch) International N&H (Thailand) Co., Ltd. (branch) x x x
United Kingdom DuPont Nutrition Manufacturing UK Limited International N&H Manufacturing UK Limited x x x
United States DuPont Nutrition USA, Inc. International N&H USA, Inc. x x x

Notes:

‡Updates unrelated to the name and logo changes have been made to corporate office addresses and bank accounts for certain subsidiary legal entities. IFF N&H Norway AS (f/k/a DuPont Nutrition Norge) and International N&H Kenya Limited (f/k/a DuPont de Nemours Kenya Limited) are now registered in Vormedal and Nairobi, respectively. Additionally, bank account information for IFF N&H Germany GmbH & Co. KG (f/k/a DDP Specialty Products Germany GmbH & Co. KG) has been updated. Customers impacted by this change have been directly contacted.

*“Logo change” refers to the removal of DuPont logo or other references to a DuPont name on labels, packaging, documents, or other collateral. Logos and other references to IFF-owned brands (e.g., Solae, Danisco, Genencor) have not changed.

 

Legal Entities with Logo Changes Only

Impacted business(es)
Jurisdiction Current Legal Entity Name Manufacturing Health & Bioscience Nourish Pharma Solutions
Argentina Danisco Argentina S.A. x x x x
Argentina Solae Argentina S.A. x
Australia Danisco Australia Pty Limited x x x
Australia Kelp Industries Pty. Ltd. x x x
Australia Nutrition & Biosciences Australia Pty Ltd x x x
Austria Danisco Austria GmbH x x
Belgium Danisco Ingredients Belgium N.V. x x x
Belgium Genencor International BV x x
Belgium Solae Belgium N.V. x x
Brazil Danisco Brasil Ltda. x x x
Brazil Nutrition & Biosciences Brasil Ingredientes Ltda x x x
Brazil Solae Do Brasil Industria E Comercio De Alimentos Ltda. x x
Canada Danisco Canada Inc. x x x x
Chile Danisco Chile S.A. x x x
China Danisco (China) Co. Ltd. x x x
China Danisco Biosciences (Shanghai) Co., Ltd. x x x x
China Genencor (China) Bio-Products Co., Ltd. x x
Colombia Danisco Colombia Ltda. x x x x
Czech Republic Danisco Czech Republic, a.s. x x x x
Egypt Danisco Egypt Trading LLC x x
Finland Danisco Sweeteners Oy x x x
Finland Finnfeeds Finland Oy x x
Finland Finnfeeds Oy x x x x
Finland Genencor International Oy x x
France Danisco France SAS x x x x
Germany Danisco Deutschland GmbH x x x x
Hong Kong Nutrition & Biosciences Hong Kong Limited x x x
India Danisco (India) Private Limited x x x
India Danisco Nutrition and Biosciences India Private Limited x x
Italy Danisco Italy S.p.A. x x x
Italy Nutrition & Biosciences Italy S.r.l. x x
Japan Danisco Japan Limited x x x x
Japan Nutrition & Biosciences Japan K.K. x x x
Korea Danisco Nutrition & Biosciences Korea Ltd. x x
Malaysia Danisco Malaysia Sdn. Bhd. x x x
Mexico Danisco Mexicana S.A. de C.V. x x x x
Mexico Solae de Mexico S.A. de C.V. x
Netherlands Danisco Holland B.V. x x
Netherlands Genencor International B.V. x x x
Netherlands Danisco Zaandam B.V. x x
Netherlands Nutrition & Biosciences Netherlands B.V. x x
New Zealand Danisco New Zealand Limited x x x
New Zealand Nutrition & Biosciences New Zealand Limited x x x
Peru Danisco Peru S.A.C. x x x
Poland Danisco Poland Sp. z.o.o x x
Russia ZAO Danisco x x
Singapore Danisco Singapore Pte. Ltd. x x x x
South Africa Danisco South Africa (Pty) Ltd. x x x
Sweden Nutrition & Biosciences (Sweden) AB x x
Switzerland Danisco Cultor (Switzerland) AG x x x
Switzerland Danisco Switzerland AG x x x x
Switzerland Nutrition & Bioscience (Switzerland) GmbH x
Switzerland Solae Europe S.A. x x x
Thailand Nutrition & Bioscience (Thailand) Co., Ltd. x x x
Turkey Danisco Dis Ticaret Limited Sirketi x x x
Ukraine Danisco Ukraine LLC x x
United Kingdom Danisco UK Ltd. x x x
United States Danisco US Inc. x x x
United States Danisco USA Inc. x x x x
United States Nutrition & Biosciences USA 1, LLC x x
United States Solae, LLC x x
United States Specialty Products US, LLC x x

Notes:

‡Updates unrelated to the name and logo changes have been made to corporate office addresses and bank accounts for certain subsidiary legal entities. IFF N&H Norway AS (f/k/a DuPont Nutrition Norge) and International N&H Kenya Limited (f/k/a DuPont de Nemours Kenya Limited) are now registered in Vormedal and Nairobi, respectively. Additionally, bank account information for IFF N&H Germany GmbH & Co. KG (f/k/a DDP Specialty Products Germany GmbH & Co. KG) has been updated. Customers impacted by this change have been directly contacted.

*“Logo change” refers to the removal of DuPont logo or other references to a DuPont name on labels, packaging, documents, or other collateral. Logos and other references to IFF-owned brands (e.g., Solae, Danisco, Genencor) have not changed.