California Consumer Privacy Act


IMPORTANT ADDITIONAL PRIVACY INFORMATION FOR CALIFORNIA RESIDENTS

Last Updated: January 1, 2020

This statement provides specific information for California residents, as required under California privacy laws, including the California Consumer Privacy Act (“CCPA”).  California privacy laws require that we provide California residents information about how we use their personal information, whether collected online or offline, and this document is intended to satisfy that requirement.  Except for the Right to Opt-out and the Right of Non-Discrimination, this statement does not apply to California residents with whom we transact or communicate solely in the context of providing or receiving a product or service to or from a company that employs such residents or engages such residents as contractors. This statement does not apply to applicants or candidates for employment or contractor positions with us who are California residents, nor does it apply to current or former full-time, part-time and temporary employees and staff, officers, directors or owners, or other non-employee workers and contractors.

Under the CCPA, “personal information” is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a California resident or a California household. 

Categories of Personal Information that We Collect, Disclose, and Sell; Notice at Collection

Below please find the categories of personal information about California residents that we collect, sell, and/or disclose to third parties or service providers for a business purpose. We collect these categories of personal information from the sources described in our Privacy Statement, and for the purposes described below.  Our collection, use and disclosure of personal information about a California resident will vary depending upon the circumstances and nature of our interactions or relationship with such resident.

Categories of personal information

Do we collect?

Do we disclose for business purpose?

Do we sell?

NAME, CONTACT INFORMATION AND IDENTIFIERS: Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.

YES

YES

NO

CUSTOMER RECORDS: Paper and electronic customer records containing personal information, such as name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.

NO

NO

NO

PROTECTED CLASSIFICATIONS: Characteristics of protected classifications under California or federal law such as race, color, sex, age, religion, national origin, disability, citizenship status, and genetic information.

NO

NO

NO

PURCHASE HISTORY AND TENDENCIES:  Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

NO

NO

NO

BIOMETRIC INFORMATION: Physiological, biological or behavioral characteristics that can be used alone or in combination with each other to establish individual identity, including DNA, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.

NO

NO

NO

USAGE DATA: Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a resident’s interaction with an internet website, application, or advertisement.

YES

YES

YES

GEOLOCATION DATA: Precise geographic location information about a particular individual or device.

NO

NO

NO

AUDIO/VISUAL: Audio, electronic, visual, thermal, olfactory, or similar information.

NO

NO

NO

EMPLOYMENT: Professional or employment-related information.

NO

NO

NO

EDUCATION INFORMATION: Information that is not publicly available personally identifiable information as defined in the federal Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99).

NO

NO

NO

PROFILES AND INFERENCES: Inferences drawn from any of the information identified above to create a profile about a resident reflecting the resident’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

NO

NO

NO


Uses of Personal Information; Notice at Collection

We use the above categories of personal information for the following purposes:

o   Business Prospecting. Exploring or initiating prospecting of potential customers and vendors, including:

        o   Searching for and providing information to potential corporate customers and vendors and appropriate contact persons

        o   Researching prior purchase history and interactions, as well as potential interest in Axalta products and services of corporate customers and vendors

        o   Contacting the contact persons for potential corporate customers and vendors

        o   Reviewing sales and marketing activities and assessing performance and conversion rates of those activities

        o   Facilitating related business development opportunities, as relevant

        o   Facilitating communications in furtherance of the foregoing

        o   Satisfying reporting and auditing obligations

o   Conducting Business and Management of Client Relationships. The organization and operation of our business, including:

        o   Operating our business by developing, producing, marketing, selling and providing goods and services

        o   Improving our website, mobile apps and marketing activities by conducting tests, research and analysis of users

        o   Displaying website, mobile apps and marketing content to users, customers and prospective customers

        o   Providing after-sales services to clients

        o   Auditing and assessing performance of business operations, including client services and associated activities

        o   Training and quality control 

        o   Satisfying client reporting and auditing obligations

        o   Facilitating business development opportunities, as relevant

        o   Facilitating communications in furtherance of the foregoing

o   Security and Monitoring. In order to monitor and secure our resources and network, including:

        o   Monitoring for, preventing and investigating suspected or alleged misconduct or violations of law

        o   Monitoring for, preventing investigating, and responding to security and privacy incidents

        o   Monitoring activities, access and use to ensure the security and functioning of our systems and assets

o   Auditing, reporting corporate governance, and internal operations.  Relating to financial, tax and accounting audits, and audits and assessments of our business operations, security controls, financial controls, or compliance with legal obligations, and for other internal business purposes such as administration of our records retention program.

o   M&A and Other Business Transactions.  For purposes of planning, due diligence and implementation of commercial transactions, for example mergers, acquisitions, asset sales or transfers, bankruptcy or reorganization or other similar business transactions. 

o   Defending and Protecting Rights. In order to manage and respond to legal disputes, to respond to legal claims or disputes, and to otherwise establish, defend or protect our rights or interests, or the rights, interests, health or safety of others, including in the context of anticipated or actual litigation with third parties.

o   Compliance with Applicable Legal Obligations. Relating to compliance with applicable legal obligations (such as responding to subpoenas and court orders) as well as assessments, reviews and reporting relating to such legal obligations.

 

California Residents’ Rights

California law grants California residents certain rights and imposes restrictions on particular business practices as set forth below.

Notice of Right to Opt-out of Sale of Personal Information.  California residents have the right to opt-out of our sale of their personal information. Opt-out rights can be exercised using our California resident rights webform, by emailing us at CAPrivacy@axalta.com or by contacting us at 1-855-547-1461 (toll free). We do not sell personal information about residents who we know are younger than 16 years old, without opt-in consent.

Right to Opt-In. We do not sell personal information about residents who we know are younger than 16 years old without opt-in consent.

Notice at Collection. We are required to notify California residents, at or before the point of collection of their personal information, the categories of personal information collected and the purposes for which such information is used. See Categories of Personal Information that We Collect, Disclose, and Sell; Notice at Collection and Uses of Personal Information; Notice at Collection.

Verifiable Requests for Deletion and Right to Know. Subject to certain exceptions, California residents have the right to make the following requests:

Right of Deletion: California residents have the right to request deletion of their personal information that we have collected about them, subject to certain exemptions, and to have such personal information deleted, except where necessary that we maintain such personal information in order to:

o   Complete the transaction for which the personal information was collected, provide a good or service requested by the California resident, or reasonably anticipated within the context of a business’s ongoing business relationship with the California resident, or otherwise perform a contract between the business and the California resident.

o   Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.

o   Debug to identify and repair errors that impair existing intended functionality.

o   Exercise free speech, ensure the right of another California resident to exercise his or her right of free speech, or exercise another right provided for by law.

o   Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.

o   Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the businesses’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if the California resident has provided informed consent.

o   Enable solely internal uses that are reasonably aligned with the expectations of the California resident based on the California resident’s relationship with the business.

o   Comply with a legal obligation.

o   Otherwise use the California resident’s personal information, internally, in a lawful manner that is compatible with the context in which the California resident provided the information.

Right to Know – Right to a Copy: California residents have the right to request, up to twice every 12 months, a copy of the specific pieces of personal information that we have collected about them in the prior 12 months and to have this delivered, free of charge, either (a) by mail or (b) electronically in a portable and, to the extent technically feasible, readily useable format that allows the California resident to transmit this information to another entity without hindrance. 

Right to Know – Right to Information: California residents have the right to request, up to twice every 12 months, that we provide them certain information about how we have handled their personal information in the prior 12 months, including the:

o   categories of personal information collected;

o   categories of sources of personal information;

o   business and/or commercial purposes for collecting and selling their personal information;

o   categories of third parties/with whom we have disclosed or shared their personal information;

o   categories of personal information that we have disclosed or shared with a third party for a business purpose;

o   categories of personal information collected; and

o   categories of third parties to whom the California residents’ personal information has been sold and the specific categories of personal information sold to each category of third party.

Submitting Requests. Requests to exercise the right of deletion or the right to know (right to a copy and / or the right to information) may be submitted on our California residents’ rights webform, by emailing us at CAPrivacy@axalta.com or by contacting us at 1-855-547-1461 (toll free).  We will respond to verifiable requests received from California residents as required by law.   

Right to Non-Discrimination, and Incentives. The CCPA prohibits discrimination against California residents for exercising their rights under the CCPA and imposes requirements on any financial incentives offered to California residents related to their personal information.   

Discrimination: Businesses may not discriminate against California residents who exercise their rights under CCPA. Discrimination may exist where a business denies or provides a different level or quality of goods or services, or charges (or suggests that it will charge) different prices or rates or impose penalties on residents who exercise their CCPA rights, unless doing so is reasonably related to the value provided to the business by the California residents’ data.

Disclosure of Incentives: A business may offer financial incentives for the collection, sale or deletion of California residents’ personal information, provided the incentive is not unjust, unreasonable, coercive or usurious, and is made available in compliance with applicable transparency, informed consent, and opt-out requirements. California residents have the right to be notified of any financial incentives offers and their material terms, the right to opt-out of such incentives at any time, and may not be included in such incentives without their prior informed opt-in consent. We do not offer any incentives at this time.

Contact us for More Information

If you have any questions about this statement, please contact Axalta.

California Privacy Rights under California’s Shine the Light Law

Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), any California resident who provides certain personal information to us in obtaining products or services for personal, family or household purposes is entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing use.  Such requests may be made once per calendar year for information about any relevant third party sharing in the prior calendar year. California residents who would like to make such a request may submit a request in writing to CAPrivacy@axalta.com or through our California resident rights webform. The request should attest to the fact that the requester is a California resident, and provide a current California address.