External Public Privacy Notice
1. Who is responsible for the processing of your personal data?
This Supplier Privacy Notice ("Notice") applies to the ABB Group of companies, which means ABB Ltd, Switzerland and each entity in which ABB Ltd, Switzerland, directly or indirectly, has a majority holding or owns or controls the majority of voting rights. The ABB company that is communicating with you or to which you are providing goods or services (referred to as "ABB" or "we"), is responsible for the processing of your personal data and controls how it is used, in accordance with this Notice.
Other subsidiary companies of ABB may also receive and process your personal data, either in the capacity of controller or processor and this Notice applies equally to them.
2. The types of information we collect and use?
We collect and use personal data that concerns you in connection with the relationship with you. We may collect the following categories of personal data:
- The business contact information you share with us:name, title, job title, email address, business address, telephone number, mobile telephone number.
- Additional information you provide to us in the course of our business relations, such as:interests in ABB products, communication preferences, registration information provided at events, fairs, contract or order data, invoices, payments, business partner history, etc.
- Information your browser makes available when you visit an ABB website:IP address, the source of your site visit, time spent on the website or a particular page, links clicked, comments shared, browser type, date and time of visit, etc.
- To the extent necessary to fulfil our obligations, data obtained from publicly accessible sources or which are legitimately transmitted by other third parties (e.g. a credit agency):commercial register data, association register data, creditworthiness data.
In case you would like to be provided with information about a specific personal data processing activity, you can request that by submitting a request at www.abb.com/privacy .
3. What we use your personal data for
We may use your personal data as described above for the following purposes:
- maintain and cultivate our relationship with you;
- invite you to our events;
- to organize meetings between you and our executives;
- send you communications in case you indicate your interest in receiving such information (such as press releases about financial results, services, products, initiatives and invitations to events or meetings etc.); and
- conduct and facilitate surveys.
We collect only the personal data from you that we need for the purposes described above. For statistical purposes, improvement of our services and testing of our IT systems we use as much as reasonably possible anonymized data. This means that these data can no longer (in)directly identify you or single you out as an individual.
4. The legal basis we rely on
We use your personal data for the purposes described in this notice based on one of the following legal bases, as applicable:
- We will ask your consent for the activities described in this privacy notice when required by applicable law, for example communications materials and events; or
- We will rely on our legitimate interests to process your personal data within the scope of the professional relationship with you or your company or your organization. Our legitimate interests to collect and use the personal data for this purpose are management and furtherance of our business or relationship with you.
You may obtain a copy of our assessment of why we may process your personal data for these interests by submitting a request at www.abb.com/privacy.
5. Parties we share your personal data with (in and outside the EU and EEA or outside the country where the ABB company that controls your data is located)
We only share your personal data with other ABB affiliates or third parties as necessary for the purposes described in this table below. Where we share your personal data with an affiliate or third party so that it is transferred to or becomes accessible from outside the European Union (“EU”) and the European Economic Area ("EEA") or outside the country where the ABB company that controls your data is located, we always put adequate safeguards in place to protect your personal data. Examples of these safeguards are an adequacy decision of the European Commission or Standard Contractual Clauses. We have taken additional measures for the transfer of data from within to outside the EU, EEA and outside the country where the ABB company that controls your data is located to protect your personal data. If you would like an overview of the safeguards which are in place, please submit a request at www.abb.com/privacy.
|
Recipient name or – for non-EU countries – recipient category |
Recipient location |
Purposes |
|
ABB affiliates and subsidiaries |
See the list of ABB subsidiaries |
The purposes described in this privacy notice |
|
ABB business partners, distributors, and agents |
EU/EEA and non-EU/EEA (global) |
The purposes described in this privacy notice |
|
Service providers such as IT services, marketing agencies, independent agents, payment processors, rating and assessment services, professional and advisory services including accountants, auditors, lawyers, insurers, bankers, recruiters, travel agents and other advisors or service providers working on ABB’s behalf |
EU/EEA and non-EU/EEA (global) |
IT services, marketing or communication agencies, payment processors and other service providers working on ABB’s behalf |
|
Potential or actual acquirers of ABB businesses or assets |
EU/EEA and non-EU/EEA (global) |
For the evaluation of the business or assets in question or executing the transformation/merger of the companies |
|
Recipients as required by applicable law or legal process, to law enforcement or government authorities, etc. |
EU/EEA and non-EU/EEA (global) |
Where required by applicable law or a legitimate request by government authorities, or a valid legal requirement. |
6. How long we keep your personal data
Based on mandatory legislation, ABB must keep certain personal data for a minimum period of time. We only keep your personal data for as long as necessary for the purposes described in this privacy notice.
At the same time, applicable data protection laws require that we do not keep personal data in an identifiable form for any longer than is necessary for the purpose for which the personal data is being processed. Through the setting of IT applications and policies we ensure that our keeping of your personal data is deleted when we no longer need it.
For more information regarding specific retention periods that apply to your personal data, please submit a request at www.abb.com/privacy.
7. Your data privacy rights
Depending on the jurisdiction in which you are located and in which your personal data is processed, you may have the following rights:
|
Data privacy rights |
What it means |
|
The right to access your data |
You are entitled to ask ABB for an overview of or to obtain a copy of the personal data we hold about you. |
|
The right to have your data corrected |
You may request immediate correction of inaccurate or incomplete personal data we hold about you. |
|
The right to have your data erased |
You may request that personal data be erased when it is no longer needed, where applicable law obliges us to delete the data or the processing of it is unlawful. |
|
The right to restrict data processing |
You have the right to restrict the processing of your personal data in specific circumstances. |
|
The right to data portability |
You have the right to receive your personal data in a structured, machine-readable format for your own purposes, or to request us to transfer it to a third party. |
|
The right to object to data processing |
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data, which is based on a legitimate interest. |
|
The right to withdraw consent |
Where ABB has asked for your consent to process personal data, you may withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. |
Please note that the rights described above are not absolute, and that your request cannot always be met entirely. For example, sometimes we cannot delete or restrict the processing of your personal data as we may have legal obligations or contractual obligations to keep certain such personal data.
You may request to enforce your data privacy rights at www.abb.com/privacy.
8. Contact and further information
If you want to access your personal data, make use of any of your other rights mentioned above or if you have any questions or concerns about how ABB processes your personal data, please contact our Group Data Protection Officer at privacy@abb.com, or submit your complaint at www.abb.com/privacy.
Should you not be satisfied with our response or believe we are processing your personal data against the law, you may also have the right to file a complaint with the Data Privacy Authority in your country of residence or work, or seek a remedy through the courts where you believe an infringement of data privacy laws may have taken place.
You can contact the Information Regulator in South Africa as follows:
Website: Home l Information Regulator SA (justice.gov.za)
Email: inforeg@justice.gov.za
9. Updates to this document
This Privacy Notice may be updated from time to time as a result of required developments. In case of such updates, we will undertake necessary actions to inform you about them depending on the importance of changes done. If and where required by applicable laws we will also ask for your consent to any material Privacy Notice changes describing our up-to-date practices.
Please check the “date of publication” to see when this Privacy Notice was updated.
Date of publication: 23.09.2021