Covestro LLC Privacy Notice for California Residents
This Notice for California Residents (“CCPA Notice”) is a supplement to our Privacy Statement and applies to the “personal information,” as such term is defined in the California Consumer Privacy Act of 2018 (“CCPA”), or “sensitive personal information,” as that term is defined in the California Privacy Rights Act (CPRA) of 2020, of natural persons who reside in the State of California (“consumer” or “you”). To the extent of any conflict between this CCPA Notice and any other provision of the Privacy Statement, this CCPA Notice shall control only with respect to California residents and their personal information. If you reside elsewhere, please see the rest of our Privacy Statement in the link above.
Information We Collect About California Residents
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, device or household (“Personal Information”). In particular, we may collect the following Categories of Personal Information from consumers:
We obtain the Categories of Personal Information listed above from the following Categories of Sources:
- Directly from Consumer, e.g., forms consumers complete or submissions made to us on our Website or other websites or platforms controlled by Covestro, provided to us in person at trade shows or other marketing and sales related events, or products and services consumers purchase from us, Website visitor who signed up or registers in a sales, marketing or educational capacity, attending in-person or online training or education, or any of the above activities through our service providers and vendors.
- Indirectly from Consumer, e.g., passive online interactions and from observing consumer actions on our Website and other websites.
- Consumer Interactions with Website
- Cookies
- Social Media Websites
- Business Relationships directly with consumers or with other business partners, such as customers, suppliers, distributors, consultants, sponsorships, trade memberships, etc.
- Information Publicly Available Online, such as government databases, online profiles, social media, and Internet search engines.
Use of Personal Information for a Business Purpose
We may use any of the Categories of Personal Information set forth above for one or more of the following Business Purposes:
- to meet requirements imposed by law, including court orders, subpoenas, or compliance with the legal process;
- to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
- as described to a consumer when collecting Personal Information or Sensitive Personal Information; and
- to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us about our Website users is among the assets transferred.
Additional business purposes are listed in the chart below.
Disclosures of Personal Information for a Business Purpose
Covestro may disclose Personal Information for a Business Purpose to the following Categories of Recipients:
- Service Providers (for-profit legal entities that process information on behalf of Covestro and to which Covestro discloses a consumer's personal information for a business purpose pursuant to a written contract)
- Governmental Agencies (Federal or State)
- Trade or Industry Groups
- Affiliates and subsidiaries of Covestro and other members in the Covestro group of companies (“Affiliates”)
- Recipients in connection with legal or equitable claims, actions or proceedings (“Proceeding Recipients”)
Sale or Sharing of Personal Information
For purposes of the CPRA, a “sale” is the disclosure of Personal Information to a third party for monetary or other valuable consideration, and a “share” is the disclosure of Personal Information to a Third Party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration. We do not sell the categories of personal information or sensitive personal information we collect or share it with third parties for cross-context behavioral advertising, as indicated in the chart below.
We do not have actual knowledge that we sell or share Personal Information of California consumers under 16 years of age. However, we may share your personal information with our affiliates and/or service providers in arrangements that may meet the broad definition of “sale” or “share” under the CCPA. In these arrangements, use of the information we share is limited by policies, contracts, or similar restrictions.
Knowing Your Rights Under the CCPA
The CCPA provides consumers with specific rights regarding their Personal Information. In this section, we describe your rights under CCPA and explain how to exercise those rights.
Access to Specific Information and Data Portability Rights
You have the right to request that Covestro provide certain information to you about our collection and use of your Personal Information over the past 12 months. If you wish to exercise either your right to access or your data portability right, you must submit a verifiable consumer request (see Exercising Access, Data Portability, Correction and Deletion Rights).
Deletion Request Rights
You have the right to request that Covestro delete your Personal Information, subject to certain exceptions. If you wish to exercise this right, you must submit a verifiable consumer request (see Exercising Access, Data Portability, Correction and Deletion Rights).
Correction Rights
You have the right to request that Covestro correct inaccurate Personal Information that Covestro maintains about you.
Exercising Access, Data Portability, Correction and Deletion Rights
To exercise the access, data portability, correction and deletion rights described above, please submit a verifiable consumer request to us by one of the following methods:
- Email: DataPrivacyUS@covestro.com
- Calling us at 1-877-229-3778. A consumer may submit a request by calling the phone number provided and an operator will take your information. Covestro will contact you directly to provide more instruction and procure verification information.
Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of a minor child to whom you are parent or guardian.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period.
Verification Process
A verifiable consumer request must:
- Provide sufficient information in response to the website/email/phone verification question asked in the creation of your request that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative of such a person. In the event we need additional information, we will reach out to you personally to ask additional questions.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. Covestro or a third party on behalf of Covestro may follow up with you to determine whether a request is a verifiable consumer request under applicable law.
If we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you, Covestro will deny the consumer request. Covestro will respond to any such consumer request with a denial and will also explain why it has no reasonable method by which it can verify the identity of the requestor.
Response Timing and Format
We will confirm receipt of a verifiable consumer request within ten (10) days of its receipt.
We will respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and extension period in writing.
We will deliver our written response by mail or electronically, at your option. If you do not indicate a preference for delivery, Covestro will use its discretion in choosing the method for delivery of the information.
We do not charge a fee to process or respond to your verifiable consumer request.
Personal Information Sales Opt-Out and Opt-In Rights
We do not sell or share your Personal Information. Further, we do not sell or share the Personal Information of minors under 16 years of age.
Our affiliate Covestro AG manages all cookies on our website. Our affiliate will only set non-essential cookies after they have obtained your consent. Please refer to Covestro AG’s Privacy Statement for more information. In addition, you can manage your cookie preferences through the UserCentrics button located at the bottom right of the website.
You have the right to limit the use or disclosure of Sensitive Personal Information. To the extent Covestro uses or discloses Sensitive Personal Information, such processing is restricted to the permitted business purposes set forth under the CCPA and the CCPA Regulations. Therefore, Covestro does not offer to limit the use or disclosure of Sensitive Personal Information at this time.
Data Retention
Your Personal Information will be deleted or blocked as soon as the purpose for the storage no longer applies and the storage is no longer necessary to comply with regulatory requirements, usually for the duration of the respective contractual relationship, including any applicable statutory retention period.
Details on the deletion periods can be found in the Covestro LLC Information Retention and Disposal Schedule which can be provided upon request.
Financial Incentives
Under California law, we do not offer financial incentives to consumers.
Category | Collected | Business Purpose | Sold or Shared |
---|---|---|---|
A. Identifiers. A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers. | YES. This information is collected: Directly from Consumer, Indirectly from Consumer, Business Relationships, and Information Publicly Available Online. | Auditing; security and integrity; debugging to identify and repair errors; short-term, transient use; performing services on behalf of the business including developing, implementing, marketing, and selling products and services; providing advertising and marketing services; internal research for technological development and demonstration; communicating with and establishing customer, supplier, and business relationships; managing and promoting the business activities of Covestro, including employment functions and the development and evaluation of business plans; to personalize a consumer’s website experience. | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. | YES. This information is collected: Directly from Consumer, Indirectly from Consumer, Business Relationships, and Information Publicly Available Online. | Auditing; security and integrity; debugging to identify and repair errors; short-term, transient use; performing services on behalf of the business including developing, implementing, marketing, and selling products and services; communicating with and establishing customer, supplier, and business relationships; managing and promoting the business activities of Covestro, including employment functions and the development and evaluation of business plans. | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
C. Protected classification characteristics under California or federal law. Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | YES. This information is collected: Directly from Consumer, Indirectly from Consumer. | Performing service on behalf of the business related to the employment relationship. | No selling or sharing for cross-context behavioral advertising. This may be shared with third party service providers for the provision of employment related benefits. |
D. Commercial information. Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | YES. This information is collected: Directly from Consumer, Business Relationships. | Auditing; security and integrity; debugging to identify and repair errors; short-term, transient use; performing services on behalf of the business including developing, implementing, marketing, and selling products and services; providing advertising and marketing services; internal research for technological development and demonstration; communicating with and establishing customer, supplier, and business relationships; managing and promoting the business activities of Covestro, including employment functions and the development and evaluation of business plans; to personalize a consumer’s website experience. To carry out other purposes which are identified to a consumer; for example, in any terms of use or agreements related to a specific product or service of Covestro. To purchase, acquire, and solicit products, services, and special offers from our suppliers. To provide information and training to customers, suppliers, and distributors about existing and new products and services of Covestro, including the use of such products and services. To review and assess market trends and activities impacting the business of Covestro. To provide, develop, implement, market, support, personalize, and develop our Website, products, and services. To create, maintain, customize, and secure a consumer’s account with us. | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
E. Biometric information. Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | YES. This information is collected: Directly from Consumer | Performing service on behalf of the business related to the employment relationship. | No selling or sharing for cross-context behavioral advertising. This may be shared with third party service providers for the provision of employment related benefits. |
F. Internet or other similar network activity. Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. | YES. This information is collected Indirectly from Consumer. | Auditing; security and integrity; debugging to identify and repair errors; short-term, transient use; performing services on behalf of the business including developing, implementing, marketing, and selling products and services; providing advertising and marketing services; internal research for technological development and demonstration; communicating with and establishing customer, supplier, and business relationships; managing and promoting the business activities of Covestro, including employment functions and the development and evaluation of business plans; to personalize a consumer’s website experience. | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
G. Geolocation data. Physical location or movements. | YES. This information is collected Indirectly from Consumer. | Auditing; security and integrity; debugging to identify and repair errors; short-term, transient use; performing services on behalf of the business including developing, implementing, marketing, and selling products and services; providing advertising and marketing services; internal research for technological development and demonstration; communicating with and establishing customer, supplier, and business relationships; managing and promoting the business activities of Covestro, including employment functions and the development and evaluation of business plans; to personalize a consumer’s website experience. | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
H. Sensory data. Audio, electronic, visual, thermal, olfactory, or similar information. | NO | Sensory data is not collected nor sold or shared with third-parties. | Sensory data is not collected nor sold or shared with third-parties. |
I. Professional or employment-related information. Current or past job history or performance evaluations. | YES. This information is collected: Directly from Consumer, Business Relationships, and Information Publicly Available Online. | Auditing; security and integrity; debugging to identify and repair errors; short-term, transient use; performing services on behalf of the business including developing, implementing, marketing, and selling products and services; providing advertising and marketing services; internal research for technological development and demonstration; communicating with and establishing customer, supplier, and business relationships; managing and promoting the business activities of Covestro, including employment functions and the development and evaluation of business plans; to personalize a consumer’s website experience. To carry out other purposes which are identified to a consumer; for example, in any terms of use or agreements related to a specific product or service of Covestro. To purchase, acquire, and solicit products, services, and special offers from our suppliers. To provide information and training to customers, suppliers, and distributors about existing and new products and services of Covestro, including the use of such products and services. To review and assess market trends and activities impacting the business of Covestro. To provide, develop, implement, market, support, personalize, and develop our Website, products, and services. To create, maintain, customize, and secure a consumer’s account with us. | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. | NO | Non-public education information is not collected nor sold or shared with third-parties. | Non-public education information is not collected nor sold or shared with third-parties. |
K. Inferences drawn from other personal information. Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | YES. This information is collected: Directly from Consumer, Indirectly from Consumer. | Auditing; security and integrity; debugging to identify and repair errors; short-term, transient use; performing services on behalf of the business including developing, implementing, marketing, and selling products and services; providing advertising and marketing services; internal research for technological development and demonstration; communicating with and establishing customer, supplier, and business relationships; managing and promoting the business activities of Covestro, including employment functions and the development and evaluation of business plans; to personalize a consumer’s website experience. | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
Sensitive personal information is a subtype of personal information consisting of specific information categories. While we collect information that falls within the sensitive personal information categories listed in the table below, the CCPA does not treat this information as sensitive because we do not collect or use it to infer characteristics about a person.
L. Sensitive Personal Information Category | Collected | Business Purpose | Sold or Shared |
---|---|---|---|
Government identifiers, such as your Social Security number, driver's license, state identification card, or passport number. | YES. This information is collected: Directly from Consumer, Indirectly from Consumer, Business Relationships, and Information Publicly Available Online. | Auditing; security and integrity; performing services on behalf of the business; communicating with and establishing customer, supplier, and business relationships; managing and promoting the business activities of Covestro, including employment functions. | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
Complete account access credentials, such as user names, account numbers, or card numbers combined with required access/security code or password. | YES. This information is collected: Directly from Consumer, and Business Relationships. | Performing services on behalf of the business | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
Precise geolocation, such as your physical location within a small area (1,850 feet radius). | YES. This information is collected: Indirectly from Consumer. | Security and integrity. | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
Racial or ethnic origin. | YES. This information is collected: Directly from Consumer | Auditing; managing and promoting the business activities of Covestro, including employment functions. | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
Citizenship or immigration information. | YES. This information is collected: Directly from Consumer | Auditing; managing and promoting the business activities of Covestro, including employment functions. | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
Religious or philosophical beliefs. | YES. This information is collected: Directly from Consumer | Managing and promoting the business activities of Covestro, including employment functions | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
Union membership | YES. This information is collected: Directly from Consumer | Performing service on behalf of the business related to the employment relationship | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
Mail, email, or text messages contents not directed to us. | YES. This information is collected: Directly from Consumer | Performing service on behalf of the business related to the employment relationship | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
Genetic data. | NO | Generic data is not collected nor sold nor shared with third-parties. | Generic data is not collected nor sold nor shared with third-parties. |
Unique biometric information used for identification. | YES. This information is collected: Directly from Consumer | Performing service on behalf of the business related to the employment relationship | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
Health information. | YES. This information is collected: Directly from Consumer, Indirectly from Consumer | Performing service on behalf of the business related to the employment relationship | No selling or sharing for cross-context behavioral advertising. May be shared with third party vendors or service providers within the business purpose context only. |
Sex life, or sexual orientation information. | NO | Sex life, or sexual orientation information is not collected nor sold nor shared with third-parties. | Sex life, or sexual orientation information is not collected nor sold nor shared with third-parties. |
If you have any questions about this Notice or need to access it in an alternative format due to having a disability, please contact:
Julia DiPasquale
Telephone: 412-413-2901
Mobile: 412-277-6096
julia.dipasquale@covestro.com
1 Covestro Circle
Pittsburgh PA 15205
Effective: January 1, 2020
Updated: January 1, 2025