ABB PRIVACY NOTICE

At ABB, respecting your data protection rights is a top priority. This Privacy Notice explains how we use personal data about you, how we process such data, and what rights you have.

Select Language

1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA

This Privacy Notice ("Notice") applies to the ABB Group of companies, which means ABB Ltd, Switzerland and each entity in which ABB Ltd, Switzerland, directly or indirectly, has a majority holding or owns or controls the majority of voting rights. The ABB company:

that is providing you with services,
to which you are providing goods or services,
that is communicating with you,
that is hosting you,
where you are applying for a position,
-or otherwise explicitly referred to in Notice

(also referred to as "ABB" or "we") is responsible for the processing of your personal data and controls how it is used, in accordance with this Notice.

Other subsidiary companies of ABB may also receive and process your personal data, either in the capacity of controller or processor and this Notice applies equally to them.

2. WHY WE USE YOUR PERSONAL DATA

PROCESSING PERSONAL DATA OF CUSTOMERS

PROCESSING PERSONAL DATA OF EXTERNAL PUBLIC – MEDIA REPRESENTATIVES AND INDIVIDUALS ENGAGED IN ABB’S PUBLIC RELATIONS

PROCESSING PERSONAL DATA OF EVENT PARTICIPANTS

PROCESSING OF PERSONAL DATA RELATED TO YOUR USE OF ABB WEBISTES, MOBILE APPLICATIONS AND ONLINE PLATFORMS AND SERVICES

The types of information we collect and use

We collect and use personal data that concerns you in connection with the agreements with our customers. We may collect the following categories of personal data:

The contact information you share with us: name, job, position, title, personal or business: email address, address, telephone number, mobile number.

Additional information you provide to us in the course of our business relations, such as: interests in ABB products, marketing preferences, registration information provided at events, webinars, fairs, contract or order data, invoices, payments, business partner history, data concerning the fulfilment of our contractual obligations and pre-contractual measures including marketing activities, correspondence data, offers, tenders, insurance data, records relating to queries, orders, passport number, date of birth, travel visa information, interview assessment/feedback, training records, gender, customer/consumer ID, product usage data, preferences, Voice Mail/Phone Recordings/Skype Recordings.

Electronic identification data and information collected by the communications systems, IT applications and website browser, such as: IP address, the source of your site visit, webpage views and time spent on the website, links clicked, comments shared, emails opened, browser type, date and time of visit, device identifiers (mobile device ID, PC ID etc.), cookie identifiers, digital alias/signature, registration and login credentials, tracking/analytics data.
The below mentioned types of personal data are only collected and processed, if at all, in accordance with applicable local laws in your country of residence.

Data about criminal convictions and offences, such as: criminal background information and sanction list information to the extent required for the purposes of criminal background screening and Know Your Customer (“KYC”) and Anti Money Laundering (“AML”) obligations.

To the extent necessary to fulfil our obligations, data obtained from publicly accessible sources or which are legitimately transmitted by other third parties (e.g. a credit agencies): commercial register data, association register data, creditworthiness data.
Why we use your personal data and the legal basis we rely on
We will rely on our legitimate interests to process your personal data within the scope of the business relationship with you or your company. Depending on the specific context, ABB’s legitimate interests to process your data may include:

conduct, management, development and furtherance of our business in the broadest sense possible including supply of products and services, performance of agreements and order management with customers, process and fulfilment of purchases, process quality management and improvement of products or services, analytics and market intelligence, reduction of default risks in our sales processes, enforcement of legal claims, including debt collection via out-of-court procedures, and reorganization, acquisition and sale of activities, business divisions and companies;
managing the customer relationship including providing customer and product support and process, conducting customer training and courses, processing quotation offer for your company, evaluate and respond to requests and inquiries, contract lifecycle management, and capturing personal data of potential customers for future communications;
for direct marketing purposes for existing customers including sharing tailored marketing communication with you by post, telephone, text, email and other digital methods about products and services (such as alerts, promotional materials, newsletters, etc.); and to ensure accuracy of your contact information;
analyzing personal data to provide you with relevant marketing offers and information, ensure accuracy of customer contact information;
conducting and facilitating existing customer satisfaction surveys, marketing campaigns, market analysis, sweepstakes, contests, or other promotional activities or events;
monitor, investigate and ensure compliance with legal, regulatory, standard and ABB internal requirements and policies;
prevent fraud and criminal activity including investigations of such activity, misuse of ABB assets, products and services, and as strictly necessary and proportionate for ensuring network and information security;
transmitting personal data within the ABB group for internal administrative purposes as necessary for example to provide centralized services;
travel arrangement, ticket and workflow management, fleet management;
reorganization, acquisition and sale of activities, business units and companies;
management of process quality and insurance management;
carrying out audits, reviews and regulatory checks to meet obligations to regulators;
governance, risk and compliance, including due diligence and Anti Money Laundering (“AML”) obligations, customs and global trade compliance and sanctioned party list screening, security, including prevention, detection of crime and fraud;
maintaining and protecting the security of products, facilities, services, systems, networks, computers and information, preventing and detecting security threats, and fraud or other criminal or malicious activities; and
managing IT resources, including infrastructure management including data back-up, information systems’ support and service operations for application management, end user support, testing, maintenance, security (incident response, risk, vulnerability, breach response), user accounts creation and management, software licenses assignment and management, security and performance testing and business continuity, monitoring access to systems, downloads.

We will process your personal data for the fulfilment of contractual obligations resulting from contracts with you, comply with specific counter-obligations under the contract, such as payment of debts, customer invoice and payment management, purchase of direct and indirect services; payment collection (in case you operate as a sole proprietorship or under your own name) and insolvency processes or as part of pre-contractual measures we have been asked to take in the context of a potential contract with you e.g., provide a quotation.

We will rely on your consent when required by applicable law, for example when we process your data for marketing purposes including sharing tailored marketing communication with you, where we don’t have an existing business relationship with you or your company.

In some cases, we process your personal data on the basis of ABB’s legal obligations and statutory requirements, for example, on the basis of tax or reporting obligations, cooperation obligations with authorities, conducting mandatory financial audits, complying with anti-money laundering regulations, fraud prevention and financial crime prevention sanctions country screening, statutory retention periods or the disclosure of personal data within the scope of official or judicial measures may be required for the purposes of taking evidence, prosecution or enforcement of civil law claims.

With regard to personal data concerning criminal convictions and offences, we will only process such data where such processing is permitted by applicable (local) law.

To confirm the accuracy of your contact information, provide you with tailored marketing communication, we will use automated methods to build a profile based on data that we have obtained as described in Notice such as the number of ABB webpage views, downloads (whitepapers, eBooks, reports etc.), opened emails and clicks (through the use of a tracking pixel and link wrapping) , your webinar or event registration and attendance, as well as the other recent interaction and activities with ABB. In case you would like to be provided with more information about the automated methods to build a profile, you can request that by submitting a request at www.abb.com/privacy. You have the right to object to profiling activities by submitting a data subject request at www.abb.com/privacy.

We collect only the personal data from you that we need for the purposes described above. For statistical purposes, improvement of our services and testing of our IT systems we use as much as reasonably possible anonymized data. This means that these data can no longer (in)directly identify you or single you out as an individual.

How long we keep your personal data

Based on mandatory legislation, ABB must keep certain personal data for a minimum period of time. We only keep your personal data for as long as necessary for the purposes described in Notice.

If you notify us that you no longer wish to receive ABB marketing materials, we will suppress your details from our mailing list, to ensure that your preference is respected in the future.

In general, customer related personal data is kept for the duration of the contractual relationship and for a minimum period (typically between 5-10 years after the termination of the contract) or for longer period if required by local laws and regulatory requirements.

Customer contact or prospect related personal data is kept as long as you are interested in ABB products and services. After 24 months of your inactivity, your data and connected profile built based on automated methods as described in Notice are deleted.

The types of information we collect and use

We collect and use personal data that concerns you in connection with the relationship that ABB has with you. We may collect the following categories of data:

The business contact information you chose to share with us: name, title, job title, email address, business address, telephone number, mobile telephone number – for instance by subscribing to our company announcements, press releases or newsletters, etc.

Additional information you provide to us in the course of our business relations, such as: interests in ABB products, communication preferences, registration information provided at events, fairs, contract or order data, invoices, payments, business partner history, etc.

Information your browser makes available when you visit an ABB website: IP address, the source of your site visit, time spent on the website or a particular page, links clicked, comments shared, browser type, date and time of visit, etc.

To the extent necessary to fulfil our obligations, data obtained from publicly accessible sources or which are legitimately transmitted by other third parties (e.g. a credit agency): commercial register data, association register data, creditworthiness data.
Why we use your personal data and what legal basis we rely on
We will rely on our legitimate interests to process your personal data within the scope of the professional relationship ABB has with you or your company or your organization. We may use your personal data described above for the following purposes:

maintain and cultivate ABB’s relationship with you;

invite you to our events or organize meetings between you and ABB’s executives;

facilitate contact with press agencies/organizations and the distribution of press releases;

send you communications in case you indicate your interest in receiving such information and conduct and facilitate surveys.

In some of above cases ABB might also ask for your consent. Whenever processing is based on consent, and subject to applicable local law which provides otherwise, you have the right to withdraw your consent at any time. This will not affect the validity of the processing prior to the withdrawal.
How long we keep your personal data

Based on mandatory legislation, ABB must keep certain personal data for a minimum period of time. The length of time personal data are retained for will differ dependent on the purpose of their collection and legal requirements.
We only keep your personal data for as long as necessary for the purposes described in Notice. Your data will be erased, when they are no longer required in relation to the purpose of our collection of your personal data, e.g. when we no longer need your media contact, as we have been notified that you have left your job position at your employer, or when you unsubscribe to our direct marketing or announcements, etc.

The types of information we collect and use

We collect and use personal data that concerns you in connection with the event and our content production. We may collect the following categories of personal data:

The contact information you share with us to register and communicate in the course of the event such as first and last name (including what name you indicate to appear on your event name tag), birth date, business email address, business mobile phone number, your assistant name and email address (if applicable).
Additional information you provide to us for accommodation arrangements and invoicing such as business address, passport number, nationality, place of birth, emergency contact name and number, credit card number.
Media assets such as photographs, images, videos and recordings in the course of an event, interview, photoshoot or other appointments.
The below mentioned types of personal data are only collected and processed, if at all, in accordance with applicable local laws in your country of residence and justified on a legal basis:
Special categories of personal data such as the information about your food preferences, allergies and disabilities you share with us in the course of the event (e.g. dietary requirements or preferences regarding seat, space and accommodation adjustment to a disability).

Why we use your personal data and the legal basis we rely on

We will rely on our legitimate interests to process your personal data within the scope of the employment or business relationship we have with you. We may use your personal data described above for the following purposes:

register your attendance to events and forums;
provide you with information and services associated with the event;
facilitate the event and provide you with appropriate service;
make travel arrangements and reserve hotel accommodations where requested;
conduct and facilitate event satisfaction surveys;
create media assets (photographs, videos and recordings) to showcase event impressions and store those assets in our brand data base;
publish media assets, articles, publications, press releases and brochures that focus on the event on ABB channels, third party channels and social media channels.

We will rely on your consent, to use your personal data described above for the following purposes:

Collect any information special categories of personal data, described in this Notice;
For the publication of your image on ABB channels, third party channels and social media channels.

How long we keep your personal data

Based on mandatory legislation, ABB must keep certain personal data for a minimum period of time. We only keep your personal data that we have collected in the course of the event registration, for as long as necessary for the purposes described in this Notice. Photographs and video footage are kept not longer than for five years or until you withdraw your consent. Specifically, regarding the chat, files, registration, attendance report, transcript and Q&A functionalities used in MS Teams – if they are available for a specific type of event – the personal data collected for these purposes will be stored depending on the source of data storage (for example Mailbox, SharePoint, OneDrive), also for 5 years maximum.

Any information about dietary requirements will be deleted immediately after the event as this information can reveal special categories of personal data.

The types of information we collect and use

We collect and use personal data that concerns you in connection with use of our Digital Channels [e.g. website, application, intranet]. We may collect the following categories of personal data and other information related to you (such as cookies):

Identification data and business contact information, you share with us such as first name, last name, job/position/title, business email address, business address, telephone number, mobile telephone number, telefax number, private telephone number, gender, date of birth, login credentials.
Additional information you provide to us in the course of your use of the platform, register for an account and providing the service requested such as interests in ABB products, subscription preferences, personal preferences, webinars, profile information (cv), posts on Digital Channels, comments, opinions, images and videos, credit card and other payment information.
Electronic identification data and information collected by the communications systems, IT applications and website browser such as information technology usage (system access, IT and internet usage), device identifier (mobile device ID, IP address, browser type, browser settings, time and URL accessed, cookies), registration and login credentials, login data and log files, analytics ID, searches, website registration and sound recordings (e.g. voice mail/phone recordings, Skype recordings).

In case you would like to be provided with information about a specific personal data processing activity, you can request that by submitting a request at www.abb.com/privacy.

Why we use your personal data

We may use your personal data and other information as described above for the following purposes:

to understand your interests and preferences in relation to the ABB Digital Channels;
to register an account, grant you access to and authenticate you on ABB's Digital Channels;
to monitor access to Digital Channels or downloads;
to subscribe and in the course of the subscription to follow comments, posts, articles, authors, webinars, news and updates about ABB products and services;
in the course of creation of and publishing media and press releases, to create brochures, news, media assets (such as images, videos), newsletters etc.;
in order to create articles that will be published on ABB’s internal and external Digital Channels;
to provide you the possibility to create your profile on ABB Digital Channels for example to create posts, make comments, follow posts and discussions and sign-up for newsletters etc.;
to allow you making posts, comments, upload content, participate quizzes and publishing opinions on ABB Digital Channels;
in the course of sharing job adds on ABB's Digital Channels;
to provide customer support and process, evaluate and respond to requests and inquiries;
to collect your image and your personal data in the course of an event to show impressions of an event;
to register and organize webinars.

We only collect the personal data from you that we need for the above purposes. For statistical purposes, improvement of our services and testing of our IT systems we use as much as reasonably possible anonymized data. This means that these data can no longer (in)directly identify you or single you out as an individual.

We offer certain Digital Channels where you can post information on the site which will then be available to other visitors of the site. Examples are discussion forums and comments on blogs. When you post, basic information identifying you as the poster will be made available to other visitors together with your posted information. This information includes your name or alias, and where relevant, may include other information such as your country or the name of the company or organization you work for. You have control over this data in your user profile and can control what will be shown in your posts.

We may also display statistical, reputational and other similar information related to your user account. Examples are the number of forum posts you have posted or a rating showing how useful other visitors have rated your posts. For details, please see the help pages for each service.

The legal basis we rely on

We use your personal data and other information related to you for the purposes described in this Notice based on one of the following legal bases, as applicable:

We may process your personal data for the fulfilment of contractual obligations resulting from contracts with you or your company, or as part of pre-contractual measures we take;
We will ask your consent for the activities described in this Notice when required by applicable law, for example when we process your data for carrying out analytics by the use of first and third party cookies; or
In some cases, we rely on our legitimate intereststo process your personal data insofar as this is not overridden by your own privacy interests. Such interests may include:
- better understand users’ behavior to further improve our offerings;
- purposes of ensuring network and information security (for example to prevent malicious use such as hacking and denial of service attacks);
- offering a personalized service and communications;
- analytics and profiling for business intelligence;
- allowing interaction on products and services offered by ABB.

Links

The external sites linked to from the ABB web sites are developed by people over whom ABB exercises no control. These other sites may place their own cookies on your computer, collect data or solicit personal information. Please refer to the privacy Notice on each site for more information.

Cookies and tracking technologies

A cookie is a small piece of data stored on a user’s device by the web browser when visiting a website. Cookies may be used for various purposes and the purposes we use them for are described in the table below. In some cases cookies are used to share visitor data with service providers we work with.

Purpose	Description	Data processors	Third party services data is shared with
Technical	· Control electronic communication channels and traffic load, guard against information security threats and malicious use, authenticate logged in users, etc	· Amazon Web Services · Microsoft Azure · Google reCAPTCHA	None
Preferences	· Remember your settings and preferences across visits, personalize your experience based on the history of your visit, etc.	None	None
Embedded content	· Third party social network sites that we embed content from use their own cookies for purposes such as analytics. These cookies and the way they are used are not controlled by us but rather by the respective social networks that we embed content from.		· YouTube (see Privacy Policy) · Facebook (see Data Policy) · Twitter (see Privacy Policy) · LinkedIn (see Privacy and Cookie Policy) · Instagram (see Data Policy and About Cookies) · Youku (see Privacy Policy)
Analytics	· Measure traffic and usage patterns of our website, test improvements, measure the efficiency of our advertising, etc. · The data is collected in a way in which individuals cannot be identified.	· Google Analytics · Crazy Egg · Hotjar · Salesforce · Marketo · Prelytix · Leadinfo	· Google (see Privacy Policy) · Leadinfo (see Privacy Policy) · Demandbase (see Privacy Policy)
Advertising and tracking	· Your browsing behavior is shared with third party advertising providers and social networking sites. They may build a profile of your online activity and use it for purposes such as serving targeted advertising or showing you more relevant content on their sites. · Based on what you viewed on our website, related advertising can be displayed on other websites which are participating in the advertising networks of our advertising partners.		· Google (see Privacy Policy) · Microsoft Bing (see Privacy Policy) · Facebook (see Data Policy) · Twitter (see Privacy Policy) · LinkedIn (see Privacy and Cookie Policy) · Verizon (see Privacy and Cookie Policy) · NewsCred Inc. t/a Welcome (see Privacy Policy and Cookie Policy) · Outbrain (see Privacy and Cookie Policy) · Taboola (see Privacy Policy)

A detailed list of the cookies that may be set when you visit our website can be found below.

Cooke domain	Cookie name	First or third party	Lifespan	Purpose	Description
new.abb.com	csSelectedCountry	First	1 day	Technical	Identify your country in order to show the content that is valid (e.g. products available in your country)
.abb.com, new.abb.com	_ga, _gid, _gat*	First	Up to 2 years	Analytics	Google Analytics: Distinguish users
.abb.com	_gcl_au	First	3 months	Advertising and tracking	Google Adsense: Track conversions
new.abb.com, campaign.abb.com	visitor_id*	First	10 years	Analytics	Salesforce Pardot: Distinguish users
.abb.com	_mkto_trk	First	2 years	Analytics	Marketo: Distinguish users
new.abb.com, global.abb	consent, consentCountry	First	3 months	Preferences	Cookie consent and privacy settings
global.abb, .abb.com	ApplicationGatewayAffinity, ApplicationGatewayAffinityCORS, ak_bmsc, bm_cookie, bm_sv, cebs	First	Session	Technical	Traffic control, security, bot protection
ads.linkedin.com	lang	Third	Session	Advertising and tracking	LinkedIn: Language preference
linkedin.com	lidc, bcookie, AnalyticsSyncHistory, UserMatchHistory, bscookie	Third	Up to 2 years	Advertising and tracking	LinkedIn: User tracking
new.abb.com	sf-prs-*	First	Session	Technical	Session management
new.abb.com	_li_id.xxxx	First	Session	Analytics	Determine whether the visitor is new or has visited the site before
new.abb.com	_li_ses.xxxx	First	Up to 2 years	Analytics	Determine which pages were consulted during a session

We may provide links to third party sites. Third party sites are websites or platforms that are linked with our site to provide you with additional functionality, tools, or services such as a direction. You acknowledge and agree we are not responsible for the availability of such sites or resources and do not endorse and are not responsible or liable for any content, advertising, goods, services or other materials on, available through, or provided by such sites or resources. We are not responsible for the privacy or other practices of such sites and cannot guarantee the security of any of your personal information that you provide or is collected by such sites. We encourage you to review the privacy policies and terms and conditions on those linked sites.

How to manage cookies

You will find a link for changing your privacy settings in the footer of our website. You can choose which of the optional cookie types you allow us to send to your device. You can also use your browser settings or plug-ins to refuse cookies. However, some features or services on our sites may not function properly without cookies.

PROCESSING PERSONAL DATA OF CANDIDATES

The types of information we collect and use

We collect and use personal data in connection with the recruitment process at ABB. We may collect the following categories of personal data:

Personal details and identification data such as name, gender, personal and business address, personal and business telephone number, personal email address or other contact details, date and country of birth, photo, citizenship, nationality and residence status.
Resume/CV, work history including current and previous positions, skill and experience details such as qualifications and certifications, as well as education and training courses.
In some cases: contact details of referees and results of capability assessments and interview assessment/feedback and any other personal information you choose to disclose to us as part of your job application; business relationships and your participation in other businesses, directorships, major shareholdings.
Depending on the position, we may perform internal/external assessments, where we collect additional data such as assessment performance data, assessment score, phone interview recordings/notes and video interview recordings/notes.
In case of performing additional specific checks, which will be indicated in the job description, we will additionally collect the following categories of personal data if required to further check the suitability for the position and permitted by applicable (local) law:

- Data relating to credit and loan history;

- Data relating to civil litigation or business disputes on record;

- Data resulting from reference checks.

In some countries, we further need to process data concerning your trade union membership; religion and philosophical beliefs; military status (protected veterans); disabilities information and criminal records (only when required by the local law or where this is used to secure equal opportunity and treatment for all candidates and employees in ABB, in accordance with the local law). In case you provide us with special categories of personal data, you hereby explicitly consent to the processing of these data as described above. If we run a background check on you as a part of the recruitment process, we will only process such data in accordance with applicable law.

For the successful candidates only, we collect data necessary for the employment contract conclusion and onboarding process such as the applicable personal identity number (tax, citizenship, social security etc.; data of your related persons (name of spouse/partner, children, etc.); signature; bank account details; emergency contacts; insurance data; driving license number; training records; clothing and shoe size where necessary. In some countries, during the onboarding process we need to process your health data and data regarding your racial or ethnic origin (only when required by the local law or where this is necessary to secure equal opportunity and treatment for all candidates and employees in ABB, in accordance with the local law). Respectively, any category of personal data mentioned above will not be processed, if such processing is prohibited according to applicable provisions of national law.

For further details on the personal data that we collect in your country, please submit a request to www.abb.com/privacy.

Why we use your personal data and the legal basis we rely on

To process your job application for a specific position within ABB or its subsidiary;

To evaluate your job application and assess your qualifications for a specific position within ABB or its subsidiary;

To assess your suitability for the position you are applying for, including performing the following checks which shall vary upon the position:
criminal background checks (criminal convictions and offences) - always only in line with local legislation (excluding candidates based in the UE and EEA). We will only process this category of data where such processing is permitted by applicable (local) law.
verification of CV details;
verification of ownership/executive participation in other businesses, directorships, major shareholdings – Conflict of Interest check;
Global Sanctions Check and checking with the ABB Integrity List. In most of the cases these checks are conducted due to comply with both global and local laws and regulations. In some of the cases we rely on our legitimate interests to process your personal data insofar as this is not overridden by your own privacy interests. Such interests include checking and assessing your suitability for the position you are applying for. You may obtain a copy of our assessment of why we may process your personal data for these interests by submitting a request at abb.com/privacy.

In case of performing additional specific checks, which will be indicated in the job description, the additional purpose of collecting your personal data will be to perform further pre-employment screening aimed:
To check the credit history at least 10 years back and verify whether or not there was a civil litigation against the candidate or any other business disputes – always only in line with local legislation;
To perform the reference check, which aim is to verify – with candidate’s consent – through at least two reference contacts provided by the candidate, the professional and personal suitability of the candidate.
To provide you with future opportunities connected with open positions at ABB or its subsidiary, specific to the country and area you are interested in – on the basis of your consent.

We use your personal data for the purposes described in this Notice basing on your consent, with the Global Sanctions Check and checking with the ABB Integrity List being in place due to comply with the both global and local laws and regulations, or based on our legitimate interests – as described above.

In case of performing additional specific checks, which will be indicated in the job description, the following legal basis apply:

For Switzerland, the basis for the processing of your personal data is article 328b of the Swiss Code of Obligations, and articles 4 and 5 of the Swiss Federal Act on Data Protection: The employer may handle data concerning the employee to the extent that such data concern the employee’s suitability for their job, for establishing of the contract of employment or are necessary for the performance of the employment contract. In addition, we will obtain your consent for all of the background checks.
For Germany, we use your personal data basing on your consent and based on the employment contract if it is necessary for its conclusion.
For Estonia, Italy, Latvia, Lithuania, the Netherlands and Spain, we rely on our legitimate interests to process your personal data insofar as this is not overridden by your own privacy interests. Such interests include checking and assessing your suitability for the position you are applying for. You may obtain a copy of our assessment of why we may process your personal data for these interests by submitting a request at abb.com/privacy.

By submitting your application, you confirm that your personal data therein is accurate and up-to-date. Further, you confirm that you have read and understood this Notice and you are aware that by submitting your application you consent for us to process your personal data to review and assess your application (in the event we rely on a consent) or to do the same in order to take steps to prepare your employment contract.

We collect only your personal data which we need for these purposes. The use of your personal data provided during your job application will be limited to a need basis and shared only with the employees and third parties that are directly involved in the recruitment processes for the specific position.

In case of employment contract conclusion – to undertake steps necessary to fulfill controller obligations resulting from the employment contract and applicable legal provisions such as confirming that you meet internal and legal requirements relevant to the position, creation and signing of the employment contract and other employment documentation, creation of necessary accounts in our information systems; providing you access to the ABB premises; providing mandatory notifications to governmental authorities; providing you work uniform and personal protection equipment where necessary; and performing an onboarding session necessary to provide you with equipment, training and information required for the position you have been recruited. On your request we can also process your data as required for performance of the contract in scope of some employment related services (e.g. relocation services or obtaining required visa and work permit).

How long we keep your personal data

We will only retain your personal data obtained via this process as long as our legitimate interest or your consent remains valid. In general, although there may be limited exceptions due to local legal requirements your personal data will be processed for up to 24 months. This retention period starts with every action registered in ABB’s recruitment systems (e.g. log-in to your account, reviewing job adverts sent via newsletter).

In case of performing additional specific checks, which will be indicated in the job description, the retention policy described in this section applies. For Sweden, the retention period is decided on a case-by-case analysis, depending on the categories of personal data which are collected.

In case of employment contract conclusion, we will process your personal data for the duration of this contract. Based on mandatory legislation, ABB must keep certain personal data for a minimum period of time. For example, employment contracts and information about salary payments and reimbursements need to be kept for a minimum period based on local corporate and tax legislation.

After the retention period, your personal information will be deleted.

Join our recruitment mailing list

We would like to use your email address to inform you about open positions at ABB, specified to the country and area you are interested in. You may unsubscribe at any time by clicking the “unsubscribe” link in any future communications or by completing the form at www.abb.com/privacy.

Profiling and automated processing of your data

We may use automated methods to make a decision based on your personal data. The logic used to make this decision is based on the minimum requirements of the job profile and whether your experience and background meet these requirements. The potential consequences and significance of this automated decision making are that your application may be rejected in case your profile does not meet the minimum requirements of the job description. In case we use automated methods, you have a right to obtain human intervention or to express your point of view and to contest the decision by submitting a data subject request at www.abb.com/privacy.

We can also use automated methods to analyze your personal data submitted on our recruitment platform and build the profile of our candidates (profiling). The profile will be only used to assess our candidates in a unified manner, ensuring greater consistency and fairness of the recruitment process. The profiling outcome is an additional feedback for the recruiter and does not preordain the results of the recruitment process.

After your application, irrespective of whether you have been hired or not, we may send you an email asking you to participate in a survey related to the recruitment process. Your participation in such a survey is voluntary.

Further information

PROCESSING PERSONAL DATA OF CANDIDATES

PROCESSING PERSONAL DATA OF SUPPLIERS

PROCESSING PERSONAL DATA OF VISITORS (CCTV)

The types of information we collect and use

We collect and use personal data in connection with the recruitment process at ABB. We may collect the following categories of personal data:

Personal details and identification data such as name, gender, personal and business address, personal and business telephone number, personal email address or other contact details, date and country of birth, photo, citizenship, nationality and residence status.
Resume/CV, work history including current and previous positions, skill and experience details such as qualifications and certifications, as well as education and training courses.
In some cases: contact details of referees and results of capability assessments and interview assessment/feedback and any other personal information you choose to disclose to us as part of your job application; business relationships and your participation in other businesses, directorships, major shareholdings.
Depending on the position, we may perform internal/external assessments, where we collect additional data such as assessment performance data, assessment score, phone interview recordings/notes and video interview recordings/notes.
In case of performing additional specific checks, which will be indicated in the job description, we will additionally collect the following categories of personal data if required to further check the suitability for the position and permitted by applicable (local) law:

- Data relating to credit and loan history;

- Data relating to civil litigation or business disputes on record;

- Data resulting from reference checks.

For further details on the personal data that we collect in your country, please submit a request to www.abb.com/privacy.

Why we use your personal data and the legal basis we rely on

To process your job application for a specific position within ABB or its subsidiary;

To evaluate your job application and assess your qualifications for a specific position within ABB or its subsidiary;
To assess your suitability for the position you are applying for, including performing the following checks which shall vary upon the position:
-       criminal background checks (criminal convictions and offences) - always only in line with local legislation (excluding candidates based in the UE and EEA). We will only process this category of data where such processing is permitted by applicable (local) law.
-       verification of CV details;
-       verification of ownership/executive participation in other businesses, directorships, major shareholdings – Conflict of Interest check;
-       Global Sanctions Check and checking with the ABB Integrity List. In most of the cases these checks are conducted due to comply with both global and local laws and regulations. In some of the cases we rely on our legitimate interests to process your personal data insofar as this is not overridden by your own privacy interests. Such interests include checking and assessing your suitability for the position you are applying for. You may obtain a copy of our assessment of why we may process your personal data for these interests by submitting a request at www.abb.com/privacy.
In case of performing additional specific checks, which will be indicated in the job description, the additional purpose of collecting your personal data will be to perform further pre-employment screening aimed:
- To check the credit history at least 10 years back and verify whether or not there was a civil litigation against the candidate or any other business disputes – always only in line with local legislation;
- To perform the reference check, which aim is to verify – with candidate’s consent – through at least two reference contacts provided by the candidate, the professional and personal suitability of the candidate.
To provide you with future opportunities connected with open positions at ABB or its subsidiary, specific to the country and area you are interested in – on the basis of your consent.

In case of performing additional specific checks, which will be indicated in the job description, the following legal basis apply:

- For Switzerland, the basis for the processing of your personal data is article 328b of the Swiss Code of Obligations, and articles 4 and 5 of the Swiss Federal Act on Data Protection: The employer may handle data concerning the employee to the extent that such data concern the employee’s suitability for their job, for establishing of the contract of employment or are necessary for the performance of the employment contract. In addition, we will obtain your consent for all of the background checks.

- For Germany, we use your personal data basing on your consent and based on the employment contract if it is necessary for its conclusion.

- For Estonia, Italy, Latvia, Lithuania, the Netherlands and Spain, we rely on our legitimate interests to process your personal data insofar as this is not overridden by your own privacy interests. Such interests include checking and assessing your suitability for the position you are applying for. You may obtain a copy of our assessment of why we may process your personal data for these interests by submitting a request at www.abb.com/privacy.

How long we keep your personal data

After the retention period, your personal information will be deleted.

Join our recruitment mailing list

Profiling and automated processing of your data

Further information

The types of information we collect and use

We collect and use personal data that concerns you in connection with the agreements with our suppliers. We may collect the following categories of personal data:

Identification data and contact information, you share with us such as first name, last name, job/position/title, nationality, personal or business: email address, address, telephone number, mobile number, telefax number, private telephone number, gender, date of birth.

Additional information you provide to us in the course of our business relations such as data concerning the fulfilment of our contractual obligations and pre-contractual measures including correspondence data, offers, tenders, resume/CV, conditions, contract and order data, invoices, payments, business partner history, records relating to queries/questions/complaints/orders, driving license number, vehicle license plate, ID/passport number.

Electronic identification data and information collected by the communications systems, IT applications and website browser (where supplier has access or is affected by such systems or applications and in accordance with the applicable law) such as information technology usage (system access, IT and internet usage), device identifier (mobile device ID, PC ID), cookie identifiers, registration and login credentials, IP address, login data and log files, Analytics ID, time and url, searches, website registration and cookie data, sound recordings (e.g. voice mail/phone recordings, Skype recordings).
The below mentioned types of personal data are only collected and processed, if at all, in accordance with applicable local laws in your country of residence and where relevant depending on the agreements with our suppliers.

Data about criminal convictions and offences such as criminal background information and sanction list information to the extent required for the purposes of criminal background screening, due diligence and Anti Money Laundering (“AML”) obligations.

Health related data such as health certificate of supplier’s employees when allowed or required by local law.

To the extent necessary to fulfil our obligations, data obtained from publicly accessible sources or which are legitimately transmitted by other third parties (e.g. a credit agency) such as commercial register data, creditworthiness data.
Why we use your personal data and the legal basis we rely on
We may use your personal data as described above for the following purposes:

supplier and service provider management throughout the supply chain including contact interaction including tendering, engagement, processing orders, process and fulfilment of purchases, administration and management of suppliers, vendors, contractors, advisers and other professional experts;

paying debts, supplier invoice and payment management, purchasing of direct and indirect services;

Travel arrangements for suppliers and suppliers’ employees;

reporting and analytics including market intelligence and development and improvement of services or products through assessment and analysis of the information;

management of process quality;

references on documents, such as tenders, purchase orders, invoices, reports;

contract lifecycle management;

payment collection and insolvency processes;

to communicate with the supplier and carry out the supplier’s instructions and requests;

to enable the supplier’s participation in supplier development programs, including training;

for historical, statistical and research purposes, like market segmentation or performance management.

conducting and facilitating supplier satisfaction surveys,

finance and shared accounting services, providing record to report and purchase to pay services;

reorganization, acquisition and sale of activities, business units and companies;

monitoring and auditing compliance with ABB’s corporate policies, contractual obligations and legal requirements including Conflict Minerals;

carrying out audits (internal and external), reviews and regulatory checks to meet obligations to regulators;

governance, risk and compliance, including due diligence and Anti Money Laundering (“AML”) obligations, customs and global trade compliance and sanctioned party list screening, security, including prevention, detection of crime and fraud;

maintain and protect the security of products, facilities, services, systems, networks, computers and information, preventing and detecting security threats, and fraud or other criminal or malicious activities; and

manage IT resources, including infrastructure management including data back-up, information systems’ support and service operations for application management, end user support, testing, maintenance, security (incident response, risk, vulnerability, breach response), user accounts management, software licenses assignment, security and performance testing and business continuity.
We collect only the personal data from you that we need for the purposes described above. For statistical purposes, improvement of our services and testing of our IT systems we use as much as reasonably possible anonymized data. This means that these data can no longer (in)directly identify you or single you out as an individual.
We use your personal data for the purposes described in this Notice based on one of the following legal bases, as applicable:

We may process your personal data for the fulfilment of contractual obligations resulting from contracts with you or as part of pre-contractual measures we take;

In absence of a direct contractual relation with you, we rely on our legitimate interests to process your personal data as above, insofar as this is not overridden by your own privacy interests. We rely on legitimate interest unless the basis for the processing derives from another basis, in particular contractual relation with you.

In some cases, we process your personal data on the basis of legal obligations and statutory requirements, for example, on the basis of tax or reporting obligations, cooperation obligations with authorities, statutory retention periods or the disclosure of personal data within the scope of official or judicial measures may be required for the purposes of taking evidence, prosecution or enforcement of civil law claims.
With regard to personal data concerning criminal convictions and offences, we will only process such data where such processing is permitted by applicable (local) law.
How long we keep your personal data
Personal data is kept for the duration of the contractual relationship and for a minimum period (typically between 5-10 years after the termination of the contract) or for longer period if required by local laws and regulatory requirements.

The types of information we collect and use

We collect and use personal data that concerns you in connection with your visit. We may collect the following categories of personal data:

Identification data and business contact information, you share with us such as first name, last name, job/position/title, business email address, business address, telephone number, mobile telephone number, private telephone number, gender, date of birth, vehicle license plate, number of a valid identification document.
Additional information you provide to us related to or during your visit such as logging details for facilities and locations, employee hosting, purpose of visit, records relating to your visit.
Image and video recordings from closed circuit television system (CCTV) footage.
Electronic identification data and information collected by the communications systems, IT applications and website browser (where visitor has access or is affected by such systems or applications) such as information technology usage (system access, IT and internet usage), device identifier (mobile device ID, PC ID), registration and login credentials, IP address, login data and log files, Analytics ID, time and url, searches, website registration and cookie data.

The below mentioned types of personal data are only collected and processed, if at all, in accordance with applicable local laws in your country of residence and where relevant depending on your visit.

Data about criminal convictions and offences such as criminal background information to the extent required for the purposes of criminal background screening for granting access to the facilities.
To the extent necessary to fulfil our obligations, data obtained from publicly accessible sources or which are legitimately transmitted by other third parties such as criminal and sanctions register data.

Why we use your personal data and the legal basis we rely on

We may use your personal data as described above for the following purposes:

visitor management, registration and visitor access management including related contact interaction and references on documents;
health and safety management including medical emergencies;
closed circuit television system (CCTV) capture for the purposes of public and staff safety, building security and crime prevention and detection;
access control system providing electronically controlled ingress and/or egress for authorized individuals to locations that have access restrictions and a registry of personnel on site in case of emergencies;
log-in information provided when using guest WiFi services offered in ABB’s premises;
maintain and protect the security of products, facilities, services, systems, networks, computers and information, preventing and detecting security threats, and fraud or other criminal or malicious activities;
monitoring and auditing compliance with ABB’s corporate policies, contractual obligations and legal requirements;
carrying out audits, reviews and regulatory checks to meet obligations to regulators; and
manage IT resources, including infrastructure management including data back-up, information systems’ support and service operations for application management, end user support, testing, maintenance, security (incident response, risk, vulnerability, breach response), master data and workplace including user accounts management, software licenses assignment, security and performance testing and business continuity.

We only collect the personal data from you that we need for the above purposes.

We use your personal data for the purposes described in this Notice based on one of the following legal bases, as applicable:

We will rely on our legitimate interests to process your personal data within the scope of your visit at ABB, if they do not unduly affect your interests or fundamental rights and freedoms. Our legitimate interests to collect and use the personal data for this purpose are to:
- conduct, management, development and furtherance of our business in the broadest sense possible including visitor, facilities and locations management, ensuring safety and security, acquisition and sale of activities, business divisions and companies;
- monitor, investigate and ensure compliance with legal, regulatory, standard and ABB internal requirements and policies;
- prevent fraud and criminal activity including investigations of such activity, misuse of ABB assets, products and services, and as strictly necessary and proportionate for ensuring network and information security; and
- transmitting personal data within the ABB group for internal administrative purposes as necessary for example to provide centralized services.
- In some cases, we process your personal data on the basis of legal obligations and statutory requirements, for example, on the basis of safety obligations, cooperation obligations with authorities, statutory retention periods or the disclosure of personal data within the scope of official or judicial measures may be required for the purposes of taking evidence, prosecution or enforcement of civil law claims.

With regard to personal data concerning criminal convictions and offences, we will only process such data where such processing is permitted by applicable (local) law.

How long we keep your personal data

In general, personal data for visitor management is kept for the duration of 3 to 12 months. Certain personal data will be kept for longer period if required by local laws and regulatory requirements or to respond to legal claims. Some of ABB's buildings and sites use CCTV systems to monitor their inside and outside for security and operational purposes. We do not keep the footage for more than one month or for a shorter retention period required by the applicable local law, unless this is necessary, for example to handle a security incident.

3. SOURCES OF COLLECTING PERSONAL DATA AND WHAT HAPPENS IF WE ARE UNABLE TO USE IT

We may collect your personal data:

directly from you,
from publicly accessible sources or which are legitimately transmitted by other third parties,
from third parties we cooperate with,
information collected by the communications systems, IT applications and website browsers.

If you do not provide us with personal data that is needed for the particular process ABB will not be able to adequately perform the purposes described above without certain personal data. Although we cannot obligate you to share your personal data with us, please note that this then may have consequences which could affect the business relationship in a negative manner.

4. PARTIES WE SHARE YOUR PERSONAL DATA WITH (IN AND OUTSIDE THE EU AND EEA OR OUTSIDE THE COUNTRY WHERE THE ABB COMPANY THAT CONTROLS YOUR DATA IS LOCATED)

We only share your personal data with other ABB affiliates or third parties as necessary for the purposes described in this table below. Where we share your personal data with an affiliate or third party so that it is transferred to or becomes accessible from outside the European Union (“EU”) and the European Economic Area ("EEA") or outside the country where the ABB company that controls your data is located, we always put adequate safeguards in place to protect your personal data. Examples of these safeguards are an adequacy decision of the European Commission or Standard Contractual Clauses. We have taken additional measures for the transfer of data from within to outside the EU, EEA and outside the country where the ABB company that controls your data is located to protect your personal data. If you would like an overview of the safeguards which are in place, please submit a request at www.abb.com/privacy.

Recipients or recipient category:

ABB affiliates and subsidiaries - See the list of ABB subsidiaries – The purpose described in Notice;
ABB business partners, distributors, and agents (EU/EEA and non-EU/EEA (global) – The purpose described in Notice;
Service providers such as IT services, marketing agencies, independent agents, payment processors, rating and assessment services, professional and advisory services including accountants, auditors, lawyers, insurers, bankers, recruiters, HR assessment providers, travel agents and other advisors or service providers working on ABB’s behalf (EU/EEA and non-EU/EEA (global) – The purpose described in Notice;
Our banking and financial services partners and payments networks - To help us provide our services to you. This includes banking and lending partners, banking intermediaries and international payment service providers (EU/EEA and non-EU/EEA global) – the purpose described in Notice;
Insolvency administrators or creditors (EU/EEA and non-EU/EEA (global) - For default and insolvency management;
Potential or actual acquirers of ABB businesses or assets (EU and non-EU) – For the evaluation of the business or assets in question or executing the transformation/merger of the companies of for the purposes described in Notice;
Recipients as required by applicable law or legal process, to law enforcement or government authorities, etc. (EU and non-EU) - Where required by applicable law or a legitimate request by government authorities, or a valid legal requirement.

5. HOW LONG WE KEEP YOUR PERSONAL DATA

Based on mandatory legislation, ABB must keep certain personal data for a minimum period of time. We only keep your personal data for as long as necessary for the purposes described in this Notice.

More details on how we store personal data you can find in the appropriate subsection.

At the same time, applicable data protection laws require that we do not keep personal data in an identifiable form for any longer than is necessary for the purpose for which the personal data is being processed. Through the setting of IT applications and policies we ensure that our keeping of your personal data is deleted or anonymized when we no longer need it.

6. YOUR DATA PRIVACY RIGHTS

Depending on the jurisdiction in which you are located and in which your personal data is processed, you may have the following rights:

Data privacy rights	What it means
The right to access your data	You are entitled to ask ABB for an overview of or to obtain a copy of the personal data we hold about you.
The right to have your data corrected	You may request immediate correction of inaccurate or incomplete personal data we hold about you.
The right to have your data erased	You may request that personal data be erased when it is no longer needed, where applicable law obliges us to delete the data or the processing of it is unlawful.
The right to restrict data processing	You have the right to restrict the processing of your personal data in specific circumstances.
The right to data portability	You have the right to receive your personal data in a structured, machine-readable format for your own purposes, or to request us to share it with a third party.
The right to object to data processing	You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data, which is based on a legitimate interest
The right to withdraw consent	Where ABB has asked for your consent to process personal data, you may withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

If we are relying on legitimate interest You may obtain a copy of our assessment of why we may process your personal data for these interests by submitting a request at www.abb.com/privacy.

Please note that the rights described above are not absolute, and that your request cannot always be met entirely. For example, sometimes we cannot delete or restrict the processing of your personal data as we may have legal obligations or contractual obligations to keep certain personal data.

You may request to enforce your data privacy rights at www.abb.com/privacy.

7. CONTACT AND FURTHER INFORMATION

If you want to access your personal data, make use of any of your other rights mentioned above or if you have any questions or concerns about how ABB processes your personal data, please submit your request at www.abb.com/privacy. In any other cases please contact our Group Data Protection Officer at privacy@abb.com

Should you not be satisfied with our response or believe we are processing your personal data against the law, you may also have the right to file a complaint with the Data Privacy Authority in your country of residence or work, or seek a remedy through the courts where you believe an infringement of data privacy laws may have taken place.

8. UPDATES TO THIS DOCUMENT

This Privacy Notice may be updated from time to time as a result of required developments. In case of such updates, we will undertake necessary actions to inform you about them depending on the importance of changes done. If and where required by applicable laws we will also ask for your consent to any material Privacy Notice changes describing our up-to-date practices.

Please check the “date of publication” to see when this Privacy Notice was updated.

9. SPECIFIC INFORMATION UNDER OTHER DATA PROTECTION LAWS

SPECIFIC INFORMATION UNDER AUSTRIAN DATA PROTECTION LAW

If you are not satisfied with our response or believe that we are processing your personal data unlawfully, you also have the right to lodge a complaint with the competent data protection authority in your country of residence or work or to seek a remedy in the courts if you believe that a breach of data protection laws may have occurred. The contact details of the Austrian Data Protection Authority can be found here.

SPECIFIC INFORMATION UNDER SOUTH AFRICA DATA PROTECTION LAWS

Further the provisions as contained in the Protection of Personal Information Act 4 of 2013, as amended (POPI Act) shall be applicable. In the event of any discrepancies, ambiguities or contradictions, the provisions as contained din the POPI Act shall prevail.

SPECIFIC INFORMATION UNDER SOUTH KOREA DATA PROTECTION LAWS

In accordance with Article 30 of the Protection Act, we provide the following additional information on personal information for Korean data subjects in order to inform them of the procedures and standards for the processing and protection of personal information and to enable them to promptly and smoothly handle any grievances related thereto.

Items of personal information we process

We collect and use personal information to the minimum extent necessary to provide our services in accordance with the protection laws.

(1) Items of personal information processed without the consent of the data subject

Information subject

(Korean information subject) Legal basis Purpose of collection Retention and use period of collected items

Article 15 (1) (4) of the Consumer Protection Act (Performance of Contract) Performance of pre-contractual measures such as payment of debts, management of customer invoices and payments, purchase of direct or indirect services, collection of payments (if operating as a sole proprietorship or in your own name), compliance with certain set-off obligations such as bankruptcy proceedings, and provision of quotations Name, position, title, email address, address, telephone number, mobile phone number 5 years after termination of the contract or the minimum period required by applicable law

Article 15 (1) (5) (legitimate interests of the controller) Pre-contractual measures, customer support, investigations for the purpose of preventing fraud and criminal activities, and compliance with laws and regulations - Name, name, title, position, title, email address, address, telephone number, mobile phone number

- Name, title, job title, email address, address, telephone number, mobile phone number 10 years after termination of the contract or for the minimum period required by applicable law

Media representatives and ABB public relations, participation in events, Article 15, paragraph 1, sentence 4 (Performance of the contract) Maintenance and development of the contractual relationship, invitation to our events or arranging meetings, registration to attend events and forums, provision of information and services in connection with events, - Name, title, job title, email address, company address, telephone number, mobile phone number

- your interest in ABB products, communication preferences, registration information provided at events or fairs, contract or order data, invoices, payments, and business partner history

- Business address, passport number, nationality, place of birth, emergency contact name and number, credit card number, etc.) for the minimum period required by applicable law or, in the case of photographs and videos, 5 years or immediately upon withdrawal of consent

Protection of users of ABB websites, mobile applications, online platforms and services pursuant to Article 15, paragraph 1, subsection 4 of the Act on the Protection of Users of Online Platforms and Services (Performance of Contracts) - Identification of interests and preferences in relation to ABB digital channels - Name, job title, title, email address, company address, telephone number, mobile phone number

- fax number, personal telephone number, gender, date of birth, login credentials until you withdraw your consent.

ABB Job Candidate Protection Act Article 15, paragraph 1, subparagraph 4 (Performance of a contract) - to evaluate candidates, conduct the recruitment process and conclude an employment contract - name, gender, personal and business address, personal and business telephone number, personal email address or other contact information, date of birth and country of birth, photograph, citizenship, nationality and residence status for up to 24 months or until you withdraw your consent

Article 15, Paragraph 1, Item 4 of the Supplier Employee Protection Act (Performance of Contracts) - Bidding, contracting, order processing, fulfillment of the purchasing process, supplier management

- Payment, invoice light payment management, settlement - name, surname, position, nationality, personal or company email address, company address, telephone number, mobile phone number, fax number 10 years after the end of the contract or as required by applicable law

Article 15, Paragraph 1, Item 5 of the Office Visitor Protection Act (Legitimate Interests of the Personal Information Processor) - Visitor management, safety management including emergencies, employee safety, building security, compliance with other legal obligations - First name, last name, title, company email address, company address, telephone number, vehicle license plate,

- CCTV images, recorded video for 3 to 12 months

(2) Items of personal information processed with the consent of the information subject

Information subject

(Korean information subject) Purpose of collection Retention and use period of collected items

Marketing purposes, such as customized marketing communications Name, job title, title, email address, company address, telephone number, mobile phone number, interests in ABB products, communication preferences, registration information provided at events or fairs, contract or order data, invoices, payments, business partner history Until withdrawal of membership or withdrawal of consent

Media representation and ABB public relations, sending personal newsletters, participating in events, conducting surveys, publishing images on ABB channels or third party channels and social media channels - name, position, title, email address, business address, telephone number, mobile phone number.

- Media assets such as photos, images, videos and recordings taken during events, interviews, photo shoots or other engagements

- Special categories of personal information, such as information about food preferences, allergies and disabilities that you share during an event, until you withdraw your consent.

Users of ABB websites, mobile applications, online platforms and services To understand your interests and preferences, grant you access, authenticate you and track your comments, posts, articles, webinars, news and updates on the services during your subscription - name, title, work email address, phone number, gender, date of birth,

- preferences for products, webinars, profile information, digital channel posts, comments, opinions, images and videos until you withdraw your consent.

ABB recruitment candidates Name, phone number, email address, gender, date of birth, nationality and country of birth, until you withdraw your consent

Supplier Employees Name, title, email address, company address phone number for marketing and communication purposes until consent is withdrawn

Visitors to our offices Visitor management, registration and visitor access management First name, last name, title/position/job title, company email address, company address, telephone number, mobile phone number, personal telephone number, gender, date of birth, vehicle license plate, valid identification document number 3 to 12 months

Children

It is the Company's policy not to collect personal information from Korean data subjects under the age of 14. Therefore, if you are a Korean data subject under the age of 14, you should not provide personal information to use our services.

Processing and retention period of personal information

In principle, after the purpose of collecting and using personal information is achieved, the information is destroyed without delay. However, if it is necessary to preserve it in accordance with the provisions of the relevant laws and regulations, we will keep the member's information for a certain period of time as stipulated by the relevant laws and regulations as follows. In this case, we will move the personal information to a separate database (DB) or preserve it in a different storage location.

- Records related to contract or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)

- Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)

- Records of consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)

- Records on collection/processing and use of credit information: 3 years (Act on the Use and Protection of Credit Information)

- Records on display/advertising: 6 months (Act on Consumer Protection in Electronic Commerce, etc.)

- Log records of user's internet access/tracking data of user's access point: 3 months (Act on Protection of Communications Secrets)

- Other communication fact verification data: 12 months (Act on the Protection of Communications Secrets)

Procedures and methods for destroying personal information

In principle, the Company destroys the information without delay after the purpose of collecting and using personal information is achieved. However, if the personal information retention period agreed to by the information subject has elapsed or the purpose of processing has been achieved, but the personal information must continue to be preserved in accordance with other laws and regulations, the personal information shall be transferred to a separate DB or preserved in a different storage location.

The procedure and method of destruction are as follows

(1) Destruction Procedure

The Company selects the personal information for which the reason for destruction has occurred and destroys the personal information with the approval of the Company's personal information protection officer.

(2) Method of destruction

Personal information stored in the form of electronic files will be deleted using technical methods that do not allow the records to be reproduced. Personal information printed on paper will be destroyed by shredding or incineration.

Overseas Collection of Personal Information

We collect and process personal information outside of the United States in order to provide our services.

- Countries where personal information is collected and processed: Switzerland

Provision of Personal Information to Third Parties

We process personal information of Korean data subjects only within the scope specified, and provide personal information to third parties only in cases falling under Articles 17 and 18 of the Protection Act, such as consent of the data subject or special provisions in the law, and otherwise do not provide personal information of the data subject to third parties.

The personal information that we provide with the prior consent of the Korean data subject is as follows.

(1) Provision of personal information to third parties in Korea

Purpose of Provision to Third Parties Retention and Use Period of Provision

ABB Korea business operations, recruitment of employees, conclusion of contracts, management of business sites, compliance with legal obligations - Personal information of customers, suppliers, job candidates, visitors, media representatives and public relations participants (name, title, company, email address, phone number, gender, nationality, etc.

We may provide personal information without your prior consent when we cannot obtain your prior consent, including when requested by an investigative or supervisory agency in accordance with the provisions of relevant laws and regulations or the procedures and methods set forth in relevant laws and regulations, and when it is clearly recognized that it is necessary for the urgent interests of your life, body, or property or that of a third party. In this case, we will only provide the minimum amount of personal information required under the applicable law and will not provide it for any other purpose.

Outsourcing of Personal Information Processing

We outsource the processing of personal information as follows.

(1) Entrustment of personal information processing in Korea

Entrusted person (trustee) Entrusted tasks

ABB Korea business operations, conclusion of contracts, fulfillment of contractual obligations, marketing and promotion, recruitment procedures and contracts, and compliance with various laws and regulations

When entering into an outsourcing contract, we specify in documents such as contracts the prohibition of processing personal information other than for the purpose of performing the outsourced business, technical and administrative protection measures, restrictions on re-delegation, management and supervision of the outsourcer, and liability for damages in accordance with Article 26 of the Protection Act, and supervise the outsourcer's safe processing of personal information. In addition, we obtain our consent when the outsourcer re-delegates our personal information processing business in accordance with Article 26(6) of the Protection Act.

We will disclose any changes in the content of the consignment or the consignee through this Privacy Policy without delay.

Measures to ensure the safety of personal information

We take the following measures to ensure the safety of personal information.

(1) Administrative measures: Establishment and implementation of internal management plans, operation of a dedicated organization, and regular employee training

(2) Technical measures: management of access rights to personal information processing systems, installation of access control systems, encryption of personal information, installation and update of security programs

(3) Physical measures: Access control to computer rooms, data storage rooms, etc.

Installation, operation, and rejection of automatic personal information collection devices

The Company operates 'cookies' that store and retrieve user information from time to time. A cookie is a very small text file sent to the user's browser by the server used to operate the Company's website and is stored on the user's computer hard disk.

(1) Purpose of using cookies, etc.

To provide targeted marketing and personalized services by implementing an automatic login function, analyzing the access frequency and visiting time of members and non-members, identifying users' tastes and interests and tracking their traces, and identifying the degree of participation in various events and the number of visits.

(2) How to refuse cookie settings

You have the right to choose whether to install cookies. Therefore, you can accept all cookies, confirm each time a cookie is saved, or refuse to save all cookies by setting options in your web browser.

However, if you refuse to install cookies, there may be difficulties in providing the service.

- How to set cookies (if you are using Internet Explorer 8.0)

- Select "Internet Options" from the "Tools" menu and click on the "Privacy tab". Use "Settings" to set the cookie acceptance level that suits you.

- How to view the cookies you have received (if you are using Explorer 8.0)

Select "Internet Options" from the "Tools" menu. Click the "General" tab to go to "Settings" under "Browsing History", and then "View File" to view it.

- How to refuse cookie settings (if you are using Internet Explorer 8.0)

Select "Internet Options" from the "Tools" menu. Click on the "Privacy tab".

Use the "Settings" menu to set the highest level to "Block all cookies".

Rights of data subjects and their legal representatives and how to exercise them

Information subjects and their legal representatives may request to view, correct, delete, suspend processing, withdraw consent, etc. of their personal information at any time. However, this may be limited by applicable laws and regulations. If you are a legal representative, please contact us using the contact information below, including your power of attorney.

Department in charge of personal information

Department in charge of personal information protection

Department Name: Privacy Management Team

Contact: privacy@abb.com

Changes to the Privacy Policy

(1) The following additional information on privacy for Korean data subjects is effective as of January 1, 2025.

(2) Previously relevant additional information can be found below.

SPECIFIC INFORMATION UNDER SWISS DATA PROTECTION LAW

With respect to Section 4 PARTIES WITH WHOM WE SHARE YOUR PERSONAL DATA, personal data relating to individuals in Switzerland will be processed by ABB affiliates and third party service providers located in Europe (mainly in Germany, Ireland, Poland and the Netherlands) as well as in the United Kingdom, India and the United States of America. In addition, personal data may be transferred to ABB subsidiaries in other countries.

If a recipient is located in a country without adequate legal data protection, ABB contractually obliges the recipient to comply with the applicable data protection (ABB uses the revised standard contractual clauses of the European Commission, which are available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?), unless the recipient is already subject to a legally recognized set of rules to ensure data protection and ABB cannot rely on an exemption provision. In addition, ABB ensures an adequate level of protection for personal data when it is transferred outside Switzerland by applying appropriate technical and operational measures.

Any data subject resident in Switzerland can assert their rights with the Federal Data Protection and Information Commissioner. You can contact him here: https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt.html.

Select region / language

Europe
Americas
Middle East and Africa
Asia and Oceania

Global - English
Austria - German
Belgium - Dutch | French
Bulgaria - Bulgarian
Croatia - Croatian
Czech Republic - Czech
Denmark - Danish
Estonia - Estonian
Finland - Finnish
France - French
Germany - German
Greece - Greek
Hungary - Hungarian
Ireland - English
Italy - Italian
Latvia - Latvian
Lithuania - Lithuanian
Luxembourg - French
Netherlands - Dutch
Norway - Norwegian
Poland - Polish
Portugal - Portuguese
Romania - Romanian
Russia - Russian
Serbia - Serbian
Slovakia - Slovakian
Slovenia - Slovenian
Spain - Spanish
Sweden - Swedish
Switzerland - French | German | Italian
Turkiye - Turkish
United Kingdom - English

Global - English
Argentina - Spanish
Aruba - Spanish
Bolivia - Spanish
Brazil - Portuguese
Canada - English | French
Chile - Spanish
Colombia - Spanish
Costa Rica - Spanish
Dominican Republic - Spanish
Ecuador - Spanish
El Salvador - Spanish
Guatemala - Spanish
Honduras - Spanish
Mexico - Spanish
Panama - Spanish
Paraguay - Spanish
Peru - Spanish
Puerto Rico - Spanish
United States of America - English
Uruguay - Spanish

Global - English
Algeria - English | French
Angola - English | French
Bahrain - English | French
Botswana - English | French
Cameroon - English | French
Côte d'Ivoire - English | French
Egypt - English | French
Ghana - English | French
Israel - Hebrew
Jordan - English
Kenya - English | French
Kuwait - English
Lebanon - English
Madagascar - English | French
Mali - English | French
Mauritius - English | French
Morocco - English | French
Namibia - English | French
Nigeria - English | French
Oman - English
Pakistan - English
Palestine - English
Qatar - English
Saudi Arabia - English
Senegal - English | French
South Africa - English
Tanzania - English | French
Tunisia - English | French
Uganda - English | French
United Arab Emirates - English
Zambia - English | French
Zimbabwe - English | French

Global - English
Australia - English
Bangladesh - English
China - Chinese | English
India - English
Indonesia - English
Japan - Japanese
Kazakhstan - Russian
Malaysia - English
Mongolia - Mongolian | English
New Zealand - English
Philippines - English
Singapore - English
South Korea - Korean
Sri Lanka - English
Taiwan (Chinese Taipei) - Chinese - Traditional
Thailand - English
Vietnam - English