Global Employee Privacy Notice

Last updated: October 2024

This Global Employee Privacy Notice ("Employee Privacy Notice” or “Notice”) applies throughout the global Ecolab enterprise to all employees and independent contractors. This Notice outlines the personal information that Ecolab may collect during your employment relationship with Ecolab, how Ecolab uses and safeguards that information, and with whom we may share it.

This Employee Privacy Notice is designed to set a uniform standard for every Ecolab entity with respect to its protection of employee personal information. Ecolab acknowledges that certain laws may impose additional requirements than those described in this Employee Privacy Notice. As such, this Notice is supplemental to the public-facing Privacy Policy. In addition, any local notices or privacy-related disclosures specific to your country of residence shall supersede this Employee Privacy Notice, to the degree to which there is a conflict.


What Personal Information Do We Collect About You?

Personal information (also commonly known as personally identifiable information or personal data) is information that can be used to identify you, or any other individual to whom the information may relate. Certain information is required to establish the employment relationship while other information is collected throughout the duration of your employment. Ecolab collects information consistent with what is allowed by law in your country of residence. Certain information, such as gender, race, and religion, may only be collected where legally permissible in your jurisdiction.

The personal information that we collect in conjunction with your employment may include the following:

  • Name and contact information, including emergency contact information (for example, address; phone number; email, fax);
  • Personnel information (for example, date of birth, marital status, birthplace, nationality, residency, citizenship, work permit status, military status, nationality, preferred language);
  • Payment information (for example, personal bank account information, tax-related forms and information, Ecolab corporate card number);
  • Identification information (for example, SSN or other national identification number, passport number, driver’s license number, license plate number);
  • Account information (for example, login credentials for Ecolab Job Portal or other employee portals);
  • Employment information (for example, dates of employment, compensation and benefits, union affiliation, retirement, insurance, beneficiaries, work restrictions and accommodations, grievance resolutions, performance);
  • Position information (for example, Ecolab identification number, job title, department/business unit, supervisor, site, computer and facilities access);
  • Education and training (for example, education level, field and institution, competency assessments, professional licenses and certifications, or training courses);
  • Professional history (for example, previous employers or previous positions; letters of recommendation);
  • Attendance information (for example, paid time off (“PTO”) and requests for PTO, and all other leave of absence requests);
  • Communication information (for example, voicemails, e-mails, correspondence, documents, and other work product and communications created, stored or transmitted using our networks, applications, devices, computers, or communications equipment; survey information);
  • Information collected from the hiring and termination processes (for example, interview information, CV or resume, cover letters, references, reference letters, background and credit checks, transcripts, pre-hire interactions, letters of reference, letters of offer and acceptance dates of hire, start and end dates, resignation date and reasons);
  • Industrial hygiene exposure assessment and monitoring information;
  • Other information provided in forms as required for benefits, payroll, or human resources, in accordance with applicable laws;
  • Image and likeness information, where permitted by law and/or after subsequent notice where required by law (for example, identification photo, CCTV footage, other images or photographs, and key card use times and locations);
  • Technology information and information outlined via Ecolab’s Cookie Notice, when accessing certain Ecolab sites, where permitted by local law, including where an employee may be able to opt-out of such information collection (for example, browsing, online, or other use information from company devices or on company networks, work device IP addresses, User I.D., password, and any other credentials used to access Ecolab systems, applications, devices, computers, or communications equipment);
  • Unique personal identifiers affiliated with certain website tracking technology as described in Ecolab’s Cookie Notice, and as you can opt-out of consistent with that Cookie Notice (for example device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; or other forms of persistent identifiers). Please note that, while this Employee Privacy Notice applies across all employee activity, the applicability of cookies and the affiliated cookie notice may vary if you are on certain websites outside of www.ecolab.com.
  • Other information that may be exchanged in the course of engaging in the employment relationship with Ecolab.

Some personal information, such as biometric information, precise location data, gender, race, religious, and health information, as well as communications where we are not the intended recipient, is considered sensitive personal information under certain data privacy regulations. We do not collect sensitive personal information in all jurisdictions in which we operate. Where required by law, your explicit consent to collection, processing, or transferring of such sensitive personal information will be obtained. Appropriate security and protection measures will be provided that will be congruent with the nature and risks associated with the data and processing activities.


What Are the Sources of Personal Information Collected by Ecolab?

When providing personal information to Ecolab as described in this Employee Privacy Notice, that personal information is typically collected directly from you, and you will know the precise personal information being collected by us.

In certain limited circumstances, third-party service providers may also collect information on behalf of Ecolab (for example for the purposes of background checks, screening, etc.), though such collection of your information will always be within the context of your employment, and we will inform you that a third party is collecting your information at the time of collection.

Finally, certain information may be collected from customers, associates, or others that you may engage with in the course of your employment with Ecolab (for example customer surveys for performance review and similar purposes).


How Does Ecolab Use Personal Information?

Subject to the terms of this Employee Privacy Notice, Ecolab uses the above-described categories of personal information in several ways. Unless otherwise stated specifically, the above information may be used for any of the purposes listed below. These purposes are not all inclusive, and you may receive subsequent notice about additional purposes for other, specific types of processing. Ecolab may use your personal information to:

  • Determine your eligibility for employment, including verification of references and qualifications;
  • Administer pay and benefits to you; • Assess qualifications for a particular job or task;
  • Enable communication and networking among employees;
  • Comply with applicable labor or employment statutes;
  • Contact you regarding other recruitment opportunities;
  • Provide general information about Ecolab;
  • Respond to your queries and requests;
  • Process work-related claims (for example worker compensation and insurance claims);
  • Provide training or other developmental requirements;
  • Conduct performance reviews and disciplinary action;
  • Establish contact in the event of an emergency;
  • Comply with legal obligations, including health and safety requirements, and requests for information from government agencies, and security investigations, or to assert or defend a legal claim;
  • Compile employee directories;
  • Ensure the security of company-held information;
  • Manage staffing resources, financial planning, corporate compliance, internal audits, and other administration;
  • Administer our applications, software, and electronic systems;
  • Improve employee satisfaction and performance;
  • Prevent potentially fraudulent, prohibited, or illegal activities;
  • Generally manage all aspects of the employment relationship, including but not limited to establishing, maintaining, and terminating employment relationships, general operations, and administrative, financial, and human resources related purposes;
  • For other such purposes as are necessary and reasonably required by Ecolab for which you will receive subsequent notice if it is a material deviation from the above purposes.

In applicable countries, the information that you provide in the equal opportunities section of a job application will be used for the sole purpose of monitoring equal opportunities within the Ecolab global enterprise. Ecolab does not use this information for marketing purposes.

Ecolab may collect similar or related information or use personal information for a similar or related purpose consistent with laws and regulations of a particular jurisdiction. Where required, subsequent notice will be provided prior to further collection. Depending on your jurisdiction, you may have data subject rights such as deletion, correction, or limitation of use. Such data subject rights, and the jurisdictions where they are applicable, are described below or in jurisdiction-specific notices.

Certain information collected is required to establish and maintain the employment relationship. If you choose not to provide required information, we may not be able to pursue or continue an employment contract or provide all of the benefits of employment that would otherwise be available to you. You may inquire at any time as to whether certain information is required or optional and understand how removal of certain information may impact you.


How Does Ecolab Share Your Personal Information?

We may provide any of the described categories of personal information to Ecolab employees, consultants, affiliates or other businesses or persons for the purpose of processing such information on our behalf in order to establish, manage, or terminate the employment relationship with you. In such cases, we require that these parties agree to protect the confidentiality of such information consistent with the terms of this Employee Privacy Notice as well as the public-facing Ecolab Privacy Notice and any internal privacy compliance standards, and the laws and regulations of the jurisdiction in which you live.

Parties receiving your information may include:

  • Our affiliates and related companies;
  • Business partners, contractors, and channel partners, which are not considered affiliated companies;
  • Third-party vendors or service providers providing crucial services and necessary to support your employment or application and or provide you certain employment-related services (including for purposes addressed outlined in the preceding section);
  • Third parties who may provide professional advice (for example, lawyers, bankers, accountants);
  • Government agencies or other parties in response to legal process or other requests, where permitted by law;
  • With other persons or third parties with whom you have requested that we share information.

Except as described above, we will not share your personal information with other, third-party companies for their commercial or marketing use without your consent or except as part of a specific program or feature for which you have the ability to opt-in or opt-out.

In addition, we may release personal information: (i) to the extent we have a good-faith belief that such action is necessary to comply with any applicable law; (ii) to enforce our rights and/or make or defend claims related to your employment with Ecolab, protect ourselves against any liability, defend ourselves against any claims, protect the rights, property and personal safety of any person, or protect the public welfare; (iii) when disclosure is required to protect the security of other persons, consistent with applicable laws (iv) to respond to a court order, subpoena, search warrant, or other legal process, to the extent permitted and as restricted by law; (v) in the event that we go through a business transition, such as a merger, divestiture, acquisition, liquidation or sale of all or a portion of our assets; or (vi) for an additional purpose that is directly related to the original purpose for which the personal information was collected.


How Long Does Ecolab Retain Your Personal Information?

Ecolab will retain your personal information only for as long as is necessary for the purposes set out in this Employee Privacy Notice, which is typically the length of your employment, plus at least an additional year following the termination of the employment relationship.

In certain jurisdictions, the length of time that your personal information will be retained may vary depending on local law. You may inquire with your manager or contact Ecolab as described herein for the retention period that is specific to your jurisdiction. Further, we may retain and use personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.


International Data Transfer

If you are located outside the United States, in particular if you are located in Canada, Brazil, the European Union (“EU”), the European Economic Area (“EEA”), New Zealand, the Republic of South Africa, Switzerland, the United Kingdom, or other countries with similar data privacy laws, please note that we and our servers are located in the United States. Any information that you provide to us may be transferred to and processed in the United States or other countries around the world where we do business. Although this may include recipients of information located in countries where there may be a lower level of legal protection for your personal information than in your country, we will make efforts to protect your information in accordance with requirements applicable to the law in your particular jurisdiction and take steps to only share with third parties that offer similar protection. By engaging with and providing personal information and other data that Ecolab may legitimately collect, process, use or transfer in connection with your relationship with Ecolab, you unambiguously consent to your information being collected, processed, used, and transferred as disclosed herein.


Data Privacy Framework Program

Ecolab complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce (collectively, the “DPF Program”).

Ecolab has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) when processing personal information received from the EU and UK. Ecolab has also certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles,” together with “EU-U.S. DPF Principles” are referred to as “Principles”) when processing personal information received from Switzerland. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles (including the UK Extension) and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification, please visit https://www.dataprivacyframework.gov/. To view the complete list of participating organizations, please visit https://www.dataprivacyframework.gov/s/participant-search. Under certain circumstances, Ecolab may remain liable for the acts of certain third parties if those third parties process PI originating from the EU, the UK, Gibraltar and/or Switzerland that Ecolab discloses to them in a manner that is inconsistent with the Principles.

If you have any inquiries or complaints about our handling of your personal information under the DPF, please contact us using the information in the "Contact Us" section below.  If you still have a specific privacy concern that has not been resolved after attempting to address your privacy question or concern with Ecolab directly, Ecolab has committed to working with the panel established by the EU Data Protection Authorities (DPAs), the UK Information Commissioner’s Office (ICO), the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal information received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. As described in the DPF Program, individuals may have the option to select binding arbitration for the resolution of your complaint with respect to personal information originating in the EU, the UK, Gibraltar or Switzerland. Please visit the DPF Program website linked above for the most up-to-date information.

Ecolab is subject to the investigatory and enforcement authority of the U.S. Federal Trade Commission for purposes of enforcing compliance with the DPF. Additionally, under limited circumstances, public authorities in the U.S., including but not limited to, the U.S. Federal Government, may make lawful requests of Ecolab to obtain certain personal information with which Ecolab must comply.

The following U.S. Ecolab affiliates also adhere to the DPF principles:

  • Abednego Environmental Services, LLC
  • Chemlink Laboratories, LLC
  • Ecolab (Guam) LLC
  • Ecolab Manufacturing Inc.
  • Ecolab Production LLC
  • Ecolab USA Inc.
  • Flottec, LLC
  • Nalco Company LLC
  • Nalco Contract Operations, LLC
  • Nalco Industrial Outsourcing Company
  • Nalco Production LLC
  • Nalco US 1 LLC
  • Nalco Wastewater Contract Operations LLC
  • Pest Management LLC
  • Quantum Technical Services, LLC
  • Wabasha Leasing LLC

US State Privacy Rights and Disclosures

Depending on the state in which you reside, you may have certain privacy rights regarding your personal information. If you are a California resident, please see our “Notice to California Residents” section below. For other state residents, your privacy rights may include (if applicable in your state of residence):

  • The right to confirm whether or not we are processing your personal information and to access such personal information;
  • The right to obtain a copy of your personal information that we collected from and/or about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another controller without hindrance, where the processing is carried out by automated means;
  • The right to delete personal information that we collected from and/or about you, subject to certain exceptions;
  • The right to correct inaccurate personal information that we maintain about you, subject to certain exceptions;
  • The right, if applicable, to opt out of the processing of your personal information for purposes of (1) targeted advertising; (2) the “sale” of your personal information (as that term is defined by applicable law); and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
  • If we are required by applicable law to obtain your consent to process sensitive personal information, the right to withdraw your consent; and
  • The right not to receive discriminatory treatment by us for the exercise of your privacy rights.

Depending on how the applicable privacy law defines a “sale,” we may sell personal information to third parties. For instance, if you are a resident of Colorado or Connecticut, our use of cookies and tracking technologies constitutes a sale of personal information to third-party advertisers. We also use cookies and other tracking technologies to display information about Ecolab jobs or products on other sites you may visit. This is “targeted advertising” under applicable privacy laws. For more information about how this information may be used via the sites associated with www.ecolab.com, please review our Cookie Notice. Please note that, while this Privacy Notice applies across all websites, the applicability of cookies and the affiliated cookie notice may vary if you are on certain websites outside of www.ecolab.com. We do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning individuals.

In order make a request regarding your personal information and/or to inquire about the availability of the above privacy rights, please contact your manager, HR, or dataprivacy@ecolab.com. If you are a job applicant, you can request deletion of your job applicant information directly in the job applicant portal after logging in to your applicant account.

Notice to California Residents

The California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 (“CCPA”), requires that we provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, sale, sharing, and retention of personal information and of the rights of California residents regarding their personal information. This section of the Privacy Notice is intended solely for, and is applicable only as to, California residents. If you are not a California resident, this section does not apply to you and you should not rely on it.

The CCPA defines “personal information” to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include publicly available, deidentified or aggregated information or lawfully obtained, truthful information that is a matter of public concern.

Notice at Collection of Personal Information

We currently collect and, in the 12 months prior to the effective date of this Privacy Notice, have collected the categories of personal information listed above in this Privacy Notice.

We collect personal information directly from California residents and from the above-described sources. We do not collect all categories of personal information from each source. In addition, we collect personal information for the purposes stated above.

Sale, Sharing, and Disclosure of personal information

The CCPA defines “sale” as the transfer of personal information for monetary or other valuable consideration. Although we do not “sell” personal information as that term may be commonly interpreted, we engage in online activities that may constitute a sale or a sharing of personal information under California law. This may include showing you advertisements on other websites related to your activity on www.ecolab.com or associated with the job applicant website.

The following table identifies the categories of personal information that we sold or shared, as defined by California law, to third parties in the 12 months preceding the Effective Date of this Privacy Notice and, for each category, the categories of third parties to whom we sold or shared personal information:

Category of Personal Information
Categories of Third Parties
Unique personal identifiers affiliated with certain website tracking technology as described in Ecolab’s Cookie Notice, and as you can opt-out of consistent with that Cookie Notice (e.g. device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; or other forms of persistent identifiers. Please note that, while this Privacy Notice applies across all websites, the applicability of cookies and the affiliated cookie notice may vary if you are on certain websites outside of www.ecolab.com.
Advertising network; data analytics provider.

 

We sold or shared personal information to third parties for the following business or commercial purposes:

  • To better understand how you use our websites across the various devices you use, and to deliver tailored promotions to you;
  • To track page content and viewing information, pages viewed, keystroke activity, time spent on pages, scroll activity, click/touch information, and mouse movements;
  • To better understand your specific preferences and track your activity across our web-based offerings and advertisements.

The following table identifies the categories of personal information that we disclosed for a business purpose in the 12 months preceding the Effective Date of this Privacy Notice and, for each category, the categories of recipients to whom we disclosed personal information.

Category of personal information 
(see above list for specific examples)
Categories of Recipients
  • Name and contact information
  • Account information
  • Billing Information
  • Order Information
  • Professional Information
  • Geographic or location information
  • Information contained in posts you may on the public forums and interactive features of the Service
  • Our affiliates and related companies;
  • Business partners, contractors, and channel partners, which are not considered affiliated companies.
  • Name and contact information
  • Account information
  • Billing Information
  • Order Information
  • Professional Information
  • Geographic or location information
  • Information contained in posts you may on the public forums and interactive features of the Service

The following recipients will only receive the stated categories of personal information based on the particular business purpose of the relationship:

  • Third-party vendors or service providers providing crucial services and necessary to provide the Service;
  •  Government agencies or other parties in response to legal process or other requests, where permitted by law.

 

We disclosed your personal information for the business or commercial purposes stated in the section “How does Ecolab use personal information?” For information about the purposes of specific data disclosures, please contact us as provided in this Notice.

We do not knowingly collect or sell or share the personal information of consumers under 16 years of age. We do not collect or process sensitive personal information for the purpose of inferring characteristics about individuals and, consequently, do not collect sensitive personal information or use it for purposes other than those allowed by the CCPA and its regulations.

Your California Privacy Rights

If you are a California resident, you have the following rights with respect to your personal information:

  • The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which we collected personal information, the business or commercial purpose for collecting, selling, or sharing personal information (if applicable), the categories of third parties to whom we disclose personal information (if applicable), and the specific pieces of personal information we collected about you;
  • The right to delete personal information that we collected from you, subject to certain exceptions;
  • The right to correct inaccurate personal information that we maintain about you;
  • If we sell or share personal information, the right to opt-out of the sale or sharing;
  • If we use or disclose sensitive personal information for purposes other than those allowed by the CCPA and its regulations, the right to limit our use or disclosure; and
  • The right not to receive discriminatory treatment by us for the exercise of privacy rights conferred by the CCPA.

How to Submit a Request to Know, Delete, and/or Correct

You may submit a request to know, delete, and/or correct by contacting dataprivacy@ecolab.com. Depending on the nature of your relationship with Ecolab, we may ask you to confirm separately that you want your personal information deleted.

If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, we will require additional information to verify your authority to act on behalf of the California resident.

In addition to the CCPA rights discussed above, California law provides individuals the right to request certain information relating to their employment, such as the right to access their personnel file and payroll records. Because these requests are governed by laws that contain different requirements than the CCPA, we handle such requests separately from CCPA requests. If you would like to make such a request please contact your manager or HR.

If you would like to update your personal information, such as to notify us of a change of name or address, or if you have questions about your employment, you may do so directly in Workday or you may contact your manager, HR, or the IT Helpdesk for assistance.

Our Process for Verifying a Request to Know, Delete, and/or Correct

We will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request. Our verification process may differ depending on whether you maintain a password-protected account with us.

If you maintain a password-protected account, we may verify your identity through existing authentication practices available through your account. Prior to disclosing or deleting the personal information, we will ask you to re-authenticate yourself with respect to that account.

If you do not maintain a password-protected account, or if you are an account-holder but we suspect fraudulent or malicious activity with your account, we will verify your identity either to a “reasonable degree of certainty” or a “reasonably high degree of certainty” depending on the sensitivity of the personal information and the risk of harm to you by unauthorized disclosure, deletion, or correction as applicable. To do so, we will ask you to verify data points based on information we have in our records concerning you.

Right to Opt-Out of Sale or Sharing of personal information

If you are a California resident, you have the right to direct us to stop selling or sharing your personal information.

You may submit a request to opt-out of sales or sharing through the cookie controls available on our websites. Ecolab does not engage in any activity that would constitute a “sale” or “sharing” of personal information outside of the use of cookies and similar tracking technology on our websites. Please note that, while this Privacy Notice applies across all websites, the applicability of cookies and the affiliated cookie notice may vary if you are on certain websites outside of www.ecolab.com.

Right to Limit Use of Sensitive Personal Information

California residents have the right to limit our use or disclosure of sensitive personal information if we use it for purposes other than those allowed by the CCPA and its regulations. You may submit a request to limit our use of your sensitive personal information or inquire about Ecolab’s use of sensitive personal information by emailing dataprivacy@ecolab.com.


Information Security, Data Integrity and Employee Responsibility

Ecolab will take reasonable steps to protect your personal information in Ecolab’s possession and secure against risk of loss, misuse, unauthorized access, disclosure, alteration, and destruction. We employ industry-standard security measures designed to protect the security of all information collected during the employment relationship. Ecolab periodically reviews its security measures in an effort to ensure the privacy of personal information. However, the security of information transmitted through the internet or via a mobile device can never be guaranteed. We are not responsible for any interception or interruption of any communications through the internet or for changes to or losses of data.

You are responsible for maintaining the security of any password, user ID or other form of authentication involved in obtaining access to password protected or secure areas of Ecolab’s systems to which you have been granted access based on your position. In order to protect you and your information, we may suspend your access to any Ecolab systems, without notice, pending an investigation, if any breach of security is suspected.

Ecolab will take reasonable precautions to ensure that your personal information is only used for the purposes for which it was collected as described in this Employee Privacy Notice. Ecolab will take steps to ensure that personal information is relevant to its intended use, accurate, complete, and current. However, Ecolab relies upon you to assist in providing accurate updates to your personal information.


Changes to This Notice

Ecolab reserves the right to modify this Employee Privacy Notice from time to time in order that it accurately reflects the regulatory environment and our data collection principles. When material changes are made to this Employee Privacy Notice, Ecolab will provide you with the revised notice. This Employee Privacy Notice was last modified as of November of 2024.


Contact Us

If you have any questions or comments about this Privacy Notice or the Service provided by Ecolab, please contact us at 844-880-8355 or dataprivacy@ecolab.com.