3M GLOBAL PRIVACY STATEMENT

Access / Copy:You may request (i) to access your Personal Data, including the specific pieces of your Personal Data that we maintain, and (ii) that we provide your information in a portable format to you or your authorized representative (i.e., the right to data portability).

Know:You may request to know certain information about the Personal Data that we process about you, including the:
 

• Purposes for our collection, use, disclosure and other processing of Personal Data;
• Categories and specific pieces of Personal Data collected (and under CCPA, the categories ‘sold’ to or ‘shared’ with third parties);
• Categories of sources from which the Personal Data is collected;
• Business and/or commercial purpose for collecting your Personal Data;
• The categories of third parties to whom we disclose Personal Data (and under CCPA, the categories of third parties to whom we ‘sell’ or ‘share’ Personal Data);
• Categories of Personal Data that we have disclosed to third parties for a business purpose;
• The consequences of not granting consent, or withdrawing consent, to our processing of your Personal Data.

Correct:You may request correction of your Personal Data if it is inaccurate or incomplete.

Delete:You may request deletion of your Personal Data (i.e., the “right to be forgotten”).

Object or Restrict:You may object to or restrict our processing of your Personal Data, including to:
 

• The “sale” (as such term is defined under applicable law, including the CCPA) of your Personal Data;
• The processing your Personal Data for direct marketing or targeted advertising purposes (or in California, the right to opt out of “sharing,” as defined under the CCPA);
• The processing of your Personal Data on a ‘legitimate interest’ basis under the GDPR;
• The use of profiling or automated decision-making which might significantly affect you;
• Restrict (or limit) our use or disclosure of your sensitive Personal Data;
• If we are processing your Personal Data based on your consent, to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of our processing before your withdrawal.

De-register an account:You may request de-registration of any account you maintain with us, if applicable.

You or (where permitted by applicable law) your authorized agent may exercise your rights by completing our request form. Before responding to your request, we will first take steps to verify your request by matching the Personal Data you provide to us with the information we have in our records. Your request must provide sufficient information for us to reasonably verify you are the person about whom we collected Personal Data or an authorized representative (e.g., by completing all required fields on our request form. We may, after receiving your request, require additional information from you (or your authorized agent) to honor your request and verify your identity. For more information on how you can exercise the rights available to you in certain jurisdictions, see “Additional Information for Residents of Certain Jurisdictions” below.

Please note that for Personal Data that we process on behalf of a Business Partner, in our capacity as a processor or service provider, we will provide reasonable assistance to that Business Partner as necessary to enable them to respond to your requests to exercise your privacy rights. You should submit your request directly to the relevant Business Partner.

In some jurisdictions, you have the right to approach us or the competent data protection authority or equivalent regulatory body with requests or complaints in the jurisdiction(s) in which you reside, including with respect to cross-border transfers of your data.

If we deny your request to exercise a privacy right, you may request the right to appeal the decision to 3M by contacting us or by submitting your appeal through our request form.