IFF WEBSITE PRIVACY STATEMENT

EFFECTIVE DATE: June 30, 2023

International Flavors & Fragrances Inc. and its subsidiaries and affiliates (“IFF”) collect, use, and disclose data from visitors of our websites (“Sites”) in accordance with the following statement (“Privacy Statement”). The Privacy Statement does not apply to any data IFF collects offline or through web or mobile sites that do not link to this Privacy Statement. Additional information for visitors in the EEA/UK is available here. Additional information for visitors who are California residents is available here.

Your use of the Sites, and any dispute over privacy, is subject to this Privacy Statement and our Terms of Use , including its applicable limitations on damages and the resolution of disputes. The Terms of Use are incorporated by reference into this Privacy Statement.

For visitors outside the EEA/UK: By visiting our Sites, you agree that your data will be handled as described in this Privacy Statement.

Types of Data Collection; Data Collected

Purposes of Data Collection

How We May Disclose Personal Data

Third-Party Links

Security

What Choices Do I Have Regarding Use of My Data?

Children Under 13

Information Storage and International Transfers

Contact

Changes to this Privacy Statement

Information for Individuals Located in the European Economic Area (EEA) and United Kingdom (UK)

Privacy Policy and Notice at Collection for California Residents

 


 

Types of Data Collection; Data Collected

The information we collect from you depends on how you use our Sites. If you send a request through our website, we will collect the data that you submit to us. For example, if you request ingredients and/or samples, register for e-mail alerts or webcasts, or if you receive commercial documentation from IFF, either via an IFF website, to enable the fulfillment of the request you may provide information such as your name, title, company, address, country, phone, fax, and/or e-mail.

IFF automatically collects certain information when you use our Sites, including but not limited to the activities you perform on our Sites, the type of hardware and software you are using (for example, your operating system or browser), information stored in cookies, IP address, access times, the web pages from which you came, the regions from which you navigate the web page, and the web page(s) you access (as applicable).

IFF uses cookies, pixel tags, or similar tracking technology or other technologies (“cookies”) on the IFF websites, to customize and improve the Sites and for certain additional purposes including analysis of what information you are accessing or downloading and how you are interacting with that information after the download is completed. Please refer to the IFF Cookie Policy for details of the types of cookies IFF uses and the purposes for which the cookies and the data collected through them are used.

Purposes of Data Collection

IFF uses your personal data for its business purposes including to:

  • Operate Our Business. We use the personal data we collect to allow you to maintain your account and otherwise run our day-to-day operations.
  • Provide You Products and Services. We use the personal data we collect to provide you with sample requests, fulfill orders, or renew, or modify products and services we provide to you.
  • Communicate With You. We use the personal data we collect to communicate with you about your use of our Sites and services, to respond to your inquiries, to provide you with the information and documents you request, and for other customer service purposes.
  • Evaluate and Improve Our Products and Services. We use the personal data we collect to evaluate, analyze, improve, and develop our products and services, including our Sites. We also use this information to tailor the content and information that we may send or display to you, to offer location customization and personalized help and instructions, and to otherwise personalize your experiences while using our Site.
  • Analytics and Research. We use the personal data we collect to administer surveys and questionnaires, such as for market research or member satisfaction purposes.
  • Marketing and Advertising. We may use your personal data for marketing and promotional purposes, including to send you promotional communications about products, services, features, and options we believe may interest you. We may send communications via e-mail or regular mail. We may also use your information to serve you advertisements or customized content online.
  • Inferences. We may use the information we collect to better understand how you access and use our Site and the products and services available on our Site, both on an aggregated and individualized basis.
  • Security Purposes. We may use the personal data we collect to mitigate fraud and protect IFF and others.
  • Legal Requirements. We use the personal data we collect to investigate, enforce, and apply this Privacy Statement and our Terms of Use, and to otherwise protect our own rights and interests, such as to resolve any disputes or to respond to requests from law enforcement, court orders, regulators, or other legal processes.
  • Business Transfers. We may also use the personal data we collect and receive to consider and implement mergers, acquisitions, reorganizations, refinancing, and other business transactions, and where necessary to the administration of our general business, accounting, recordkeeping, and other legal functions.

How We May Disclose Personal Data

When permitted by applicable law, including, if applicable, when we have obtained your consent, we may disclose your personal data to our affiliates, business partners, vendors, and others as follows:

  • Affiliates, Subsidiaries, and Business Partners. We disclose the personal data we collect with our affiliates, subsidiaries, and agents. We also partner with other businesses to offer products, services, or credit, and we may disclose your personal data to those organizations.
  • Agents, retailers, and distributers. We disclose the personal data we collect with our agents, retailers, and distributors to facilitate the sale and distribution of our products and services, which may include marketing communications consistent with your choices
  • Vendors and Service Providers. We may disclose the personal data we collect with vendors who perform functions on our behalf, such as helping complete transactions and process payments, handle order fulfillment and shipping, host or sponsor sweepstakes, contests, and similar promotions. We also disclose personal data with vendors who provide IT services, website hosting and analytics, auditing services, marketing and advertising, email or other communication services, customer support, accounting, legal services.
  • Marketing and Advertising Partners. We may also disclose the personal data we collect, such as name and contact information, with our marketing and advertising partners to send you content about certain products.

We also may disclose your personal data in the following circumstances:

  • Business Transfers. As we continue to develop our business, we may buy, merge, sell, or partner with other companies. We may disclose personal data as part of those commercial transactions (e.g., mergers, acquisitions, financings, asset sales or transfers, bankruptcy or reorganization or other similar business transactions), as well as in contemplation of such transactions (e.g., due diligence). Where possible, we will do so under appropriate confidentiality agreements. Similarly, if all or part of our business, assets, or Sites are merged with or sold to another company, or as part of a bankruptcy proceeding, your personal data may be transferred to the surviving or acquiring company.
  • In Response to Legal Process. Personal data may be disclosed to third parties, as required by law or subpoena, or if we reasonably believe such action is necessary to comply with the law and the reasonable requests of regulators, law enforcement or other public authorities, including those outside your country of residence. We also may disclose the information we collect in order to comply with a judicial proceeding, court order, or other legal process, including responding to national security or law enforcement disclosure requirements.
  • To Protect Us and Others. We also may disclose the personal data we collect from you where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of this Privacy Statement or our Terms of Use, or as evidence in litigation in which we are involved. We may also disclose personal data to protect our rights and the rights of others. This may include exchanging information with other companies and organizations for fraud prevention, spam/malware mitigation, and similar purposes.
  • Aggregate and De-Identified Information. We may disclose aggregate or de-identified information about users with third parties for marketing, advertising, research, or other purposes.
  • With Your Permission. We may disclose personal data in other ways not described above. If we do so, we will notify you and, if necessary, obtain your consent.

Third-Party Links

Our Sites may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Privacy Statement, but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.

Security

No data transmission over the internet or any wireless network can be guaranteed to be 100% secured. As a result, while IFF strives to protect your personal data through implementation of security measures, IFF cannot warrant the security of any information you transmit to IFF.

What Choices Do I Have Regarding Use of My Data?

We may send periodic promotional emails to you, with your consent if required by applicable law. You may opt-out of promotional emails at any time by following the opt-out instructions contained in the email. Please note that it may take up to 10 business days for us to process opt-out requests. If you opt-out of receiving promotional emails, we may still send you emails about any services you have requested or received from us.

Children Under 13

Our Sites and services are not designed for children under 13. If we discover that a child under 13 has provided us with information, we will delete such information from our systems.

Information Storage and International Transfers

IFF and its affiliates and service providers process and store your personal data on servers around the world, including in the United States.

Contact

If you have any questions about our Privacy Statement, please contact IFF’s Chief Privacy Officer by e-mail at [email protected] or by mail addressed to Chief Privacy Officer, International Flavors & Fragrances Inc., 521 West 57th Street, New York, New York 10019.

Changes to this Privacy Statement

This Privacy Statement is current as of the Effective Date set forth above. We may change this Privacy Statement from time to time, so please be sure to check back periodically.

We will post any changes to this Privacy Statement on our site. If we make any changes to this Privacy Statement that materially affect our practices with regard to the personal data we have previously collected from you, we will endeavor to provide you with notice in advance of such change by highlighting the change on our Sites.

INFORMATION FOR INDIVIDUALS LOCATED IN THE EUROPEAN ECONOMIC AREA (EEA) AND UNITED KINGDOM (UK)

SCOPE OF NOTICE

This section of this Privacy Statement applies only if you use our Site from a country that is a Member State of the EEA or from the UK, and it supplements the information in the remainder of our Privacy Statement, above. IFF or its respective subsidiary or affiliate is the controller of your personal data. The data controller will depend on who you are: a visitor of this website, an investor, or an IFF customer or supplier.

  • For a visitor of this website or an investor, the data controller is International Flavors & Fragrances, Inc., 521 West 57th St., New York, NY 10019.
  • For all other individuals, including contacts of customers and suppliers, the data controller is the legal entity that manages your business relationship with IFF.

IFF legal entities and their full details can be found in the latest annual report.

Legal bases for processing

We rely on one of several different legal bases to process your personal data, which are as follows:

  1. To take necessary steps prior to entering into a contract with you, and to perform a contract with you- we need to process your personal data to fulfil sample requests, answer questions and requests from you, and provide customer support. Where we request personal data in order to fulfil a request, or perform a contract, and you do not provide that personal data, we may not be able to respond to your request or perform our obligations under the contract.
  2. Based on legitimate interests – we process personal data from you to further our legitimate interests in protecting the security and safety of our customers and stakeholders; in minimizing our legal exposure and protect our reputation by detecting and preventing fraud; in building our reputation by protecting and defending the rights or property of others; and in growing our business by enforcing our own rights and interests. We consider your privacy interests in this regard and redact personal data to the largest extent practicable.
  3. Based on compliance with EEA/UK legal obligations to which we are subject – we may need to process your personal data to comply with relevant laws, regulatory requirements and to respond to lawful requests, court orders, and legal process; and
  4. Based on your freely given consent, for tracking your activities in accordance with the IFF Cookie Policy, and (where required by law) for sending marketing communication.

PURPOSES FOR USING YOUR DATA

IFF collects personal data through our sites to:

  • Provide, customize, and improve the functionality of the site (legal basis: legitimate interests in improving our marketing efforts to grow our revenues);
  • Provide you e-mail alerts, access to webcasts or other services (legal bases: consent, where required by applicable law; otherwise, our legitimate interests in promoting our company, products and services in order to grow our revenues); and
  • Fulfil sample requests or contractual obligations (legal bases: pre contract necessity).

USER’S RIGHTS

Subject to the conditions set forth in applicable law, you have the following rights with regard to our processing of your personal data:

Right to access, correct and delete your personal data – IFF will strive to ensure that all personal data you provide us is correct. However, you also have a responsibility to ensure you provide us accurate personal data, and that changes in personal circumstances (for example, change of address, etc.) are notified to IFF so that we keep your personal data up-to-date. You have the right to request access to any of your personal data that IFF may hold, and to request correction of any inaccurate personal data relating to you. You furthermore have the right to request deletion of any irrelevant personal data we hold about you.

Right to withdraw consent – In the event your personal data is processed on the basis of your consent, you have the right to withdraw consent at any time by sending an email to [email protected] specifying your request, without affecting the lawfulness of processing based on consent before its withdrawal.

Data portability – To the extent that we use your personal data for performance of contract and that personal data is processed by automatic means, you have the right to receive all such personal data that you have provided to IFF in a structured, commonly used and machine-readable format, and also to require us to transmit it to another data controller where this is technically feasible.

Right to restrict personal data use – You have the right to restrict our use of your personal data where (i) you contest the accuracy of the personal data; (ii) the use is unlawful, but you do not want us to erase the personal data; (iii) we no longer need the personal data for the relevant purposes, but you require it for the establishment, exercise, or defense of legal claims; or (iv) you have objected to our personal data use justified on where we need to process the personal data for the establishment, exercise or defense of legal claims.

Rights to object to processing of your personal data – You have the right to object to the processing of your personal data on grounds relating to your particular situation (where processing is based on our legitimate interests). You also have right to object to the use of your personal data for direct marketing purposes (including profiling).

Lodge a complaint – You also have the right to lodge a complaint with a supervisory authority, in particular in your country of residence, if you consider that the collection and use of your personal data infringes this Notice or applicable law.

For further information regarding your rights, or to exercise any of your rights (other than the right to lodge a complaint with an authority), please contact [email protected]. You can lodge a complaint by contacting the authority directly.

TRANSFER OF PERSONAL DATA

Your personal data may be stored and processed in any country where we have facilities or in which we engage service providers, and, by using the Site, you understand that your personal data will be transferred to countries outside of your country of residence which may have data protection rules that are different from those of your country. When transferring personal data to entities located in a country outside the EEA or UK that that have not received an adequacy decision from the European Commission (including the United States), we take measures to provide adequate protection for your personal data. We enter into data processing agreements and data transfer agreements that include standard contractual clauses approved by the European Commission or the UK Information Commissioner’s Office. Such data processing agreements are available upon request by contacting [email protected]. Where required, we conduct transfer risk assessments and enter into supplementary measures to protect any personal data we transfer outside the EEA or UK to countries that do not have an adequate level of data protection.

DATA RETENTION

We retain your personal data only for as long as necessary for the relevant activity unless a longer retention period is required or permitted by law For more information, please contact us at: [email protected].

EU GDPR REPRESENTATIVE

International Flavors & Fragrances I.F.F. (Nederland) B.V. is International Flavors & Fragrances Inc.’s representative in the European Union and may be contacted at B.V. Liebergerweg 72-98, 1221 JT, Hilversum, The Netherlands, Attn: Law Department Tel: +31 35 688 3911 or at [email protected].

UK GDPR REPRESENTATIVE

IFF (GB) Ltd. is International Flavors & Fragrances Inc.’s representative in the United Kingdom and may be contacted at Duddry Hill Haverhill, CB98LG, United Kingdom, Attn: Law Department Tel: +44 1440 715000 or at [email protected].

GERMAN DATA PROTECTION OFFICER

To contact IFF’s German Data Protection Officer, please send an email to [email protected].

CONTACT

If you have questions about this statement, please contact us at [email protected].

PRIVACY POLICY AND NOTICE AT COLLECTION FOR CALIFORNIA RESIDENTS

Last Updated: June 15, 2023

SCOPE OF NOTICE

This Privacy Policy and Notice for California Residents (“Notice”) supplements the information contained in IFF’s Website Privacy Statement to provide California residents with specific information regarding our collection, use, and disclosure of their personal data. This Notice is also intended to satisfy our applicable notice at collection requirements under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), with respect to the personal data we collect about you.

What is personal data? In this notice, “personal data” is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household (i.e., we use “personal data” in the same manner as “personal information” is defined under the CCPA). It does not include publicly available information as defined by the CCPA.

What isn’t covered by this Notice? This Notice does not apply to our collection of consumer credit reports and background checks, publicly available information lawfully made available from state or federal government records or that we have reason to believe was made publicly available by the individual, or other information that is exempt under the CCPA. This Notice also does not apply to personal data we collect about employees of our business customers and vendors, job applicants, independent contractors, or current or former IFF employees. We may provide supplemental privacy notices for these groups of individuals.

CATEGORIES OF DATA THAT WE COLLECT, DISCLOSE AND SELL

Our collection, use, and disclosure of personal data about California residents will vary depending upon the circumstances and the nature of our interactions or relationship with such resident. The chart below describes the categories of personal data IFF collects, discloses for a business purpose, and “sells.”

Note that under the CCPA’s broad definition of “sell” and “share” the use of cookies and other tools for website analytics and targeted advertising may be considered “selling” or “sharing” of personal data. In the chart below, the categories of personal data that we “sell” or “share” are related to our use of analytics and ad cookies. We do not disclose personal data to third parties in exchange for money.

Categories of Personal Information Do we collect? Do we disclose for a business purpose(s)? Do we “sell” or “share”? Categories of Third Parties to whom we may disclose or “sell”/”share” this information
Name, Contact Information, and Other Identifiers:
Identifiers such as a real name, address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address
YES YES No
  • service providers
  • affiliates and subsidiaries
Customer Records: Paper and electronic customer records containing personal information, such as name, signature, education, current employment, employment history YES YES No
  • service providers
  • affiliates and subsidiaries
Purchase History and Tendencies: Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies YES YES No
  • service providers
  • affiliates and subsidiaries
Usage Data: Internet or other electronic network activity information, including, but not limited to, browsing history, clickstream data, search history, and information regarding a resident’s interaction with an internet website, application, or advertisement, including access logs and other activity information related to your use of any IFF websites, applications, or other online services YES YES YES
  • service providers
  • affiliates and subsidiaries
  • advertising networks
  • social networks
Profiles and Inferences: Inferences drawn from any of the information identified above to create a profile reflecting a resident’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes YES YES No
  • service providers
  • affiliates and subsidiaries

Please see the “Types of Data Collection” and “Purposes of Data Collection” sections of our Website Privacy Statement for information regarding the purposes for which we collect your personal data.

Please see the “Sharing Data” section of our Website Privacy Statement for information on the categories of third parties with whom we share your personal data.

SOURCES OF PERSONAL DATA

As further described in the “Types of Data Collection” section of our Website Privacy Statement, we may collect personal data from the following sources:

  • directly from the individual
  • advertising networks
  • data analytics providers
  • social networks
  • internet service providers
  • business customers
  • government entities

RETENTION OF PERSONAL DATA

We retain the personal data we collect only as reasonably necessary for the purposes described in this Notice, or otherwise disclosed to you at the time of collection. For example, we will retain certain identifiers for as long as it is necessary to comply with our tax, accounting, and recordkeeping obligations, to provide you with products and services or service your account, and for research, development, and safety purposes, plus an additional period of time as necessary to protect, defend or establish our rights, defend against potential claims, and to comply with our legal obligations.

DEIDENTIFICATION OF PERSONAL DATA

Occasionally, we may deidentify personal data and use the deidentified information for our internal purposes. We commit to maintaining and using this information in deidentified form and will not attempt to reidentify the information except to determine whether our deidentification process is effective.

RIGHTS REGARDING YOUR PERSONAL DATA

1. The CCPA provides California residents with specific rights regarding personal data. This section describes your rights under the CCPA and explains how to exercise those rights. Subject to certain exceptions, California consumers have the right to make the following requests: Right to Know: With respect to the personal data we have collected about you in the prior (twelve) 12 months, you have the right to request from us (up to twice per year and subject to certain exemptions and carveouts):

  • The categories of personal data we collected about you;
  • The sources from which we have collected that personal data;
  • Our business or commercial purpose for collecting, selling, or sharing that personal data;
  • The categories of third parties to whom we have disclosed that personal data; and
  • A copy of the specific pieces of your personal data we have collected.

2. Right to Correct. Subject to certain restrictions, you have the right to request that we correct inaccuracies in your personal data.

3. Right to Delete. Subject to certain conditions and exceptions, you have the right to request deletion of your personal data that we have collected about you.

4. Right to Opt-Out: You have the right to opt-out of “sales” and “sharing” of your personal data, as those terms are defined under the CCPA, including through the use of an opt-out preference signal. As noted above, we only “sell” personal data under the CCPA through our use of third party advertising and analytics cookies. We may “share” personal data by disclosing it to third-parties to enable cross-contextual behavioral advertising of our products and services. We do not and will not sell personal data if we have actual knowledge that the individual is less than 16 years of age, unless we receive affirmative authorization (“opt-in”) from either the individual between 13 and 16 years of age, or the parent or guardian of an individual less than 13 years of age.

To exercise your right to opt-out of the “sale” or “sharing” of your personal data, please click here or use the Do Not Sell or Share My Personal Information link at the bottom of our website.

5. Right to Limit Use and Disclosure of Sensitive Personal Information. We do not engage in uses or disclosures of personal data that would trigger the right to limit use of sensitive personal data under the CCPA.

6. Right to Non-Discrimination. We will not discriminate against you for exercising any of the rights described in this section.

SUBMITTING REQUESTS

If you are a California resident and would like to exercise your CCPA rights, you may do so via any of the methods described below:

Authorized Agent. You may designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may also require that you directly verify your identity and the authority of your authorized agent.

Businesses operating as an authorized agent on behalf of a California resident must provide both of the following:

(1) Certificate of good standing with its state of organization; and

(2) A written authorization document, signed by the California resident, containing the California resident’s name, address, telephone number, and valid email address, and expressly authorizing the business to act on behalf of the California resident.

Individuals operating as an authorized agent on behalf of a California resident must provide either of the following:

(1) A notarized power of attorney signed and dated by the California resident naming the authorized agent as the California resident’s representative; or

(2) A written authorization document, signed by the California resident, containing the California resident’s name, address, telephone number, and valid email address, and expressly authorizing the individual to act on behalf of the California resident.

We reserve the right to reject (1) authorized agents who have not fulfilled the above requirements, or (2) automated CCPA requests where we have reason to believe the security of the requestor’s personal data may be at risk.

Verification. Before responding to your request, we must first verify your identity using the personal data you recently provided to us by asking you to provide us with additional information such as your email address, order numbers of previous orders of our products and services. We will take steps to verify your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information to verify your identity, or where necessary to process your request. In some cases, we may also carry out checks, including with third party identity verification services, to verify your identity before taking any action with your personal data. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.

DO NOT TRACK

We do not currently respond to web browser “Do Not Track” signals.

CHANGES TO THIS NOTICE

This Notice is current as of the Effective Date set forth above. We may change this Notice from time to time, so please be sure to check back periodically. We will post any changes to this Notice on our Site. If we make any changes to this Notice that materially affect our practices with regard to the personal data we have previously collected from you, we will endeavor to provide you with notice in advance of such change by highlighting the change on our Sites.

CONTACT US

If you have any questions about our Privacy Statement, please contact IFF’s Chief Privacy Officer by e-mail at [email protected] or by mail addressed to Chief Privacy Officer, International Flavors & Fragrances Inc., 521 West 57th Street, New York, New York 10019.