Notice of Personal Data Collection and Processing for Suppliers
Last Reviewed: 2/14/2024
On behalf of itself and its majority owned subsidiaries, Corning Incorporated is providing the following notice to suppliers in regard to the processing of personal data. Please inform your employees whose personal data may be shared with Corning about the following data protection provisions.
1. Data Collection and Use
As a data controller, Corning collects, uses and processes personal data related to your employees (hereinafter referred to as “Data Subject”), primarily the personal data of our individual contacts within your company (hereinafter referred to as the “Personal Data”) in the context of the performance of your contract and to send commercial communication in accordance with legal requirements. The Personal Data are processed by Corning to carry out supplier management operations related to your contract(s) with Corning, including orders, deliveries, invoices, accounting management, relationship management, and due diligence. This data processing is necessary for managing Corning’s activity as described. Failure to provide such data or objection to their collection and use will negatively impact our ability to efficiently manage the commercial relationship between you and Corning, as well as potentially the performance of our obligations under the aforementioned contract(s).
Some (or all) of the Personal Data may sometimes be jointly used by Corning Incorporated and the relevant Corning entities which can be together considered as joint controllers (herein collectively referred to as “Corning”, “we”, “us” or, “our”).
Please click here to view the names and contact details of all relevant Corning entities.
2. Disclosure
The Personal Data processed by Corning will only be accessible by a limited list of recipients on a need to know basis, including those personnel in Corning’s shared services, supply management, and business organizations involved in the handling of your contract(s) and commercial relationship with Corning. The Personal Data may not be provided to third parties, except other Corning entities and service providers acting on behalf of Corning in connection with the administration of your commercial relationship with Corning, without the prior authorization of the Data Subjects.
The Personal Data may be transferred to third countries, including countries which do not have the same level of protection of personal data as in the EEA. Data transfers to other Corning entities are covered by the Group’s Binding Corporate Rules (“BCRs”). Data transfers to our service providers are secured through appropriate contractual guarantees such as the EU Commission’s Standard Contractual Clauses. You may request and receive copy of such documents by contacting the Corning Privacy Office as provided in the “Contact Us” section below.
3. Data Retention
Corning only keeps the Personal Data in an active database for the duration of our contractual relationship. At the end of the contractual relationship, Corning archives the Personal Data for a duration allowing us to comply with any legal obligation or for a duration equivalent to an applicable statutory limitation period.
4. Your Rights
You are allowed to obtain access to the Personal Data that Corning processes and can make reasonable requests to correct, amend, or delete information, where it is inaccurate. You can also exercise your right to request the restriction of the processing of your Personal Data.
In addition, whenever Corning processes your Personal Data based on its legitimate interest, you may at any time object to such processing on legitimate grounds relating to your particular situation.
You also have the right to lodge a complaint with a supervisory authority if you suspect that Corning is not compliant with applicable data protection rules. In addition, you can find in the BCRs of Corning the data protection principles to which Corning is subject and that you have the right to enforce, as a third party beneficiary. If you suffer any damage related to the processing of your personal data, you have the rights to seek redress and, where appropriate, receive compensation as may be ordered by the competent court or Supervisory Authority or as decided according to the internal Corning complaint mechanism, if used.
5. Contact Us
For any request related to the processing of their Personal Data, including information about Corning’s
entities and appointed Data Protection Officers, the Data Subjects should contact:
Corning Data Privacy Office
One Riverfront Plaza
MP-HQ-01-E06
Corning, NY 14831
(607) 974-9000
