PRIVACY NOTICE FOR RESIDENTS OF CALIFORNIA, NEBRASKA, AND TEXAS

We retain your personal information for as long as necessary to process your order, perform our obligations, comply with applicable law, and in accordance with our data retention schedule. We may retain your personal information for longer if it is necessary to comply with our legal or reporting obligations, to resolve disputes, or as permitted or required by applicable law. We may also retain your personal information in a deidentified or aggregated form so that it can no longer be associated with you. To determine the appropriate retention period for your personal information, we consider various factors, such as the amount, nature, and sensitivity of your information; the potential risk of unauthorized access, use or disclosure; the purposes for which we collect or process your personal information; and applicable legal requirements.

Personal information does not include:

• Publicly available information or lawfully obtained, truthful information that is a matter of public concern.
• De-identified or aggregated consumer information.
• Information excluded from the scope of the CCPA, NEDPA, or TDPSA, as applicable, like:
  • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data subject to the Federal Policy for the Protection of Human Subjects;
  • or personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

We may alter the categories of personal information we collect and/or the purposes for which we use it, and will inform you in the event we do so. 

We obtain the categories of personal information listed above from the following categories of sources:

• Directly from our customers, or their employees, representatives, or agents, or, in California, from our employees, applicants, or contractors. For example, from documents that our customers provide to us related to the products or services for which they engage us or information that our employees communicate to us verbally during phone or video communications, including those recorded and transcribed using AI-powered tools.
• Indirectly from our customers, or their employees, representatives, or agents, or, in California, from our employees, applicants, or contractors. For example, through information we collect from our customers in the course of providing products or services to them.
• Directly from our suppliers or business partners, or their respective employees, representatives, or agents. For example, from documents that our suppliers provide to us related to the products or services for which we engage them.
• Indirectly from our suppliers or business partners, or their respective employees, representatives, or agents. For example, through information we collect from our supplier in the course of them providing products or services to us.
• Directly and indirectly from activity on our website (www.heraeus.com). For example, from submissions through our website portal or website usage details collected automatically.  For information regarding our use of cookies and other tracking technologies, please refer to our general privacy policy and privacy policy or US-residents located at:  https://www.heraeus.com/en/group/heraeus_group/privacy_policy.html
• From third-parties that interact with us in connection with the products or services we perform. For example, from government agencies when we prepare readiness assessments for projects that receive government funding.
• From other third party data or information sources.  For example, news outlets, social media, and data brokers.

We may use or disclose the personal information we collect for one or more of the following business or commercial purposes:

1. To fulfill or meet the reason for which the information is provided. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns.
2. To provide you with information, products or services that you request from us.
3. To create, maintain, and secure your account, if any, with us.
4. To process your requests, purchases, transactions, and payments and prevent transactional fraud.
5. To provide you with email alerts, correspondence, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.
6. To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collections.
7. To improve our website and present its contents to you.
8. To communicate with you.
9. For testing, research, analysis and product development.
10. As necessary or appropriate to protect the rights, property or safety of us, our clients or others.
11. To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
12. As described to you when collecting your personal information or as otherwise set forth under applicable law.
13. In connection with your application for or employment with us.
14. To carry out or process employee benefits related matters or offerings.
15. To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without first updating this Privacy Notice to reflect those changes and, where required by law, obtaining your consent. 

We do not sell or share personal information, as “sell” and “share” are defined under applicable law, and we have no actual knowledge of having sold personal information of minors under 16 years of age.

The Site is not directed to children as the products and services on this Site are intended for persons 18 years of age and older. We do not knowingly collect, use or disclose any personally identifiable information from children. If you are concerned about your child’s use of the Site, you may use web-filtering technology to supervise or limit access to the Site.

You may have certain rights regarding your personal information.  This section describes those rights and how to exercise them.

Shine the Light [California residents only].  California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information by certain members of our company to third parties for the third parties’ direct marketing purposes. Consumers who have provided their personal information to us may request information about our disclosures of certain categories of personal information to third parties for their direct marketing purposes. Such request must be submitted to us by calling us at the toll-free number or reaching us by email at the email address set forth under “Exercise Right to Know, Right to Delete, or Right to Correct” below. Please mention in your call or email that you are making a "California Shine the Light" inquiry. Within 30 days of receiving such a request, we will provide a list of the categories of such personal information disclosed to third parties for third-party direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties. This request may be made no more than once per calendar year. We reserve our right not to respond to requests submitted other than to the address specified in this paragraph.

Eraser Law [California residents only].  If you are a California resident under the age of 18, and a registered user of any site where this policy is posted, California law permits you to request and obtain removal of content or information you have publicly posted. You may submit your request using the contact information in the “Exercising Right to Know, Right to Delete, or Right to Correct” section below.  Please be aware that such request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

Request to Know/Access

You may have the right to request that we disclose certain information to you about our collection and use of your personal information for the period of time set forth in such verifiable consumer request, subject to exceptions as permitted by applicable law. Specifically, you may submit a verifiable request for any or all of the following:

• The categories of personal information we have collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting, selling, or sharing that personal information, if applicable.
• The categories of third parties to whom we sold, shared, or disclosed for a business purpose that personal information.
• The categories of personal information about you that we sold, shared, or disclosed for a business purpose and the categories of third parties that received that information.
• The specific pieces of personal information we collected about you.

If you previously provided us your personal information, and that information is available in a digital format, you may have the right to obtain a copy of the information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another person without hindrance.

Request to Delete

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete your personal information from our records and direct our service providers and contractors to delete your personal information from their records, unless an exception applies.  We may deny your deletion request if maintaining your personal information is necessary for us or our service providers or contractors to:

1. Complete the transaction for which we collected the personal information, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise that consumer’s free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Cal. Penal Code § 1546) of Title 12 of Part 2 of the Penal Code.
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of information is likely to render impossible or seriously impair the research's achievement, if you previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Request to Correct  

You have the right, subject to certain limitations, to request that we correct any inaccurate personal information we maintain about you. Once we receive and confirm your verifiable request, and as required by applicable law, we will take appropriate steps to respond to your request.

Right to Opt-Out of Selling, Sharing, Targeted Advertising, and/or Profiling

You have the right, subject to certain limitations, to opt-out of having your personal information “sold” or “shared,” or used for “targeted advertising” or “profiling.”  However, we do not use your personal information for any of those purposes, as they are defined under applicable law.

Right to Consent to or Limit Use or Disclosure of Sensitive Personal Information

Please note that we do not collect or process your sensitive personal information for the purpose of inferring characteristics about you. If we collect or process your sensitive personal information, we do so only for the purposes described in Section 7027 of the CCPA regulations.  Additionally, where required by applicable law, we will process your sensitive personal information only with your consent

Exercising Right to Know, Right to Delete, or Right to Correct

To exercise the right to know, delete, or correct described above, please submit a verifiable consumer request to us by either:

• Calling us at:
  • Tel: +1 (888) 914-9661
  • PIN: 862 348

• Visiting the Privacy Portal
• Emailing us at vincent.magyar@heraeus.com

Only you or your authorized agent may make a verifiable consumer request related to your personal information. When you submit a request to know/access, delete, or correct, unless you have provided the authorized agent with a qualifying power of attorney, you must provide your authorized agent written permission (signed by you) to act on your behalf and verify the authorized agent’s identity with us. We reserve the right to deny requests from persons or businesses claiming to be authorized agents that do not submit sufficient proof of their authorization. You may also make a verifiable consumer request on behalf of your minor child.

You are generally permitted to make two requests to know/access, delete, or correct, without charge, within a 12-month period. In general, we will attempt to verify your request by asking that you provide identifying information that we already maintain about you, or through use of a third-party verification service. As part of this process, we will ask that you:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which may include:

• The following information:
  • Consumer Name
  • Consumer Address
  • Consumer Email Address
  • Company/Employer Name
  • Company/Employer Telephone Number
  • Proof of authorization by Consumer to act on Consumer’s behalf (if requestor is an authorized representative)

• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.  Making a verifiable consumer request does not require you to create an account with us.  We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Response Timing and Format

We endeavor to confirm receipt of requests to know, requests to correct, or requests to delete within 10 business days and to respond to such requests within 45 calendar days of the date of receipt. If we require more time (45 additional calendar days, or a total of 90 calendar days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the period contained in the request preceding our receipt of the verifiable consumer request, subject to exceptions as permitted by applicable law. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For requests to know/access, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Appeal of Our Response

In the event you believe we have erroneously denied your request, in full or in part, you may, within 60 days of receipt of that denial, submit an appeal via any of the methods set forth in the “Exercising Right to Know, Right to Delete, or Right to Correct” section above.  In your appeal submission, please explain why you believe our decision to deny your request was incorrect and please provide any additional information you believe we should consider in connection with your appeal.  Within 60 days of receipt of your appeal, we will advise you in writing of any action we have taken, or refrained from taking, in response to your appeal, along with an explanation of why we have taken, or refrained from taking, such action.

Nebraska residents: If we deny your appeal, you may submit a complaint to your State Attorney General here.

Texas residents: If we deny your appeal, you may submit an complaint to your State Attorney General here.

Non-Discrimination

Unless otherwise permitted by applicable law, we will not discriminate against you for exercising any of the rights described above, including, but not limited to, by:

• Denying you goods or services.
• Charging you different prices or rates for goods or services, including through the use of discounts or other benefits, or imposing penalties.
• Providing you a different level or quality of goods or services.
• Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives, as permitted by applicable law, that can result in different prices, rates, or quality levels. Any permissible financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

Changes to Our Privacy Notice

We reserve the right to amend this Privacy Notice at our discretion and at any time. When we make changes to this Privacy Notice, we will post the updated Privacy Notice on our website homepage and update the Privacy Notice’s last updated on date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.

United States Privacy Policy

Heraeus’s United States Privacy Policy may be accessed at: Privacy Policy

Contact Information

If you have any questions or comments about this Privacy Notice, our Privacy Policy, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under applicable law, please do not hesitate to contact Heraeus at vincent.magyar@heraeus.com or +1 215-944-9278. You may also write to Heraeus at: 770 Township Line Road, Suite 300, Yardley, Pennsylvania 19067.

This Privacy Notice was last updated on August 5, 2025.