Skip to primary navigation Skip to primary content Skip to primary footer

Privacy Statement

PRIVACY NOTICE

Last Updated: September 7, 2023

This Privacy Notice explains how Crane Company (“Crane”, “we”, “us” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with our services. This Privacy Notice is not a contract and does not create any legal rights or obligations, nor is it intended to set forth our privacy practices as they relate to Crane employees.

Region-Specific Disclosures

We may choose or be required by law to provide different or additional disclosures relating to the processing of personal information about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you:

  • If you are a resident of the State of California in the United States, please click here for additional California-specific privacy disclosures.
  • If you are based in the European Economic Area (“EEA”), United Kingdom (“UK”), and Switzerland, please click here for additional EEA/UK/Swiss-specific privacy disclosures.

What is Personal Information?

When we use the term “personal information” in this Privacy Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you. It does not include aggregated or anonymized information that is maintained in a form that is not reasonably capable of being associated with or linked to you.

Our Collection of Personal Information

From the first moment you interact with us, we are collecting personal information about you. Sometimes we collect personal information automatically when you interact with our services and sometimes we collect the personal information directly from you. We may also collect personal information about you from other sources and third parties, even before our first direct interaction.

Personal Information You Provide

We collect the following personal information you provide in connection with our products and services:

  • Contact Information, including but not limited to your first and last name, phone number, email address, mailing address and state and country of residence. 
  • Professional Information, including but not limited to your title, company name, professional background and the nature of your relationship with us.
  • Service Information, including but not limited to product or service interests and orders. 
  • Investor Information, including but not limited to your Crane share purchasing history, number of shares held, value of the shares, eligible dividends and the holder of record’s name, address, and contact information (as well as any investor alert mailing lists you have signed up for). 
  • Job Applicant Information, including but not limited to email address and password for our careers page, LinkedIn account data, first name, last name, phone number, mailing address, information on your ability to work in the U.S., on visa sponsorship and employment visa status, and on how you heard from us, resume content and attachments including related descriptions, responses to additional questions (such as on U.S. citizenship, salary requirements, firearm license, willingness to work rotating shifts, weekends and holidays as needed), employment history information (such as title, company name, relevant descriptions and dates), education history information (degree achieved, school name), any other categories of personal information which is included in the documents you upload or responses you provide in relation to requests for additional information or your interview with us, and your eSignature including related data. 
  • Inquiry and Communications Information, such as the content of your email, call or other communication with us, as well as recordings of your voice from calls with us (where permitted by law). 

If you choose to contact us, we may need additional information to fulfill your request or respond to your inquiry. We may provide additional privacy disclosures where the scope of the inquiry/request and/or personal information we require fall outside the scope of this Privacy Notice. In that case, the additional privacy disclosures will govern how we may process the information you provide at that time.

Personal Information Automatically Collected

As is true of most digital platforms, we collect certain personal information automatically, including:

  • Log File Data, including Web browser type and version, the operating system used by your computer, the referrer Universal Resource Locator (URL), the “hostname” given to your computer, your Internet Protocol (IP) address, the date and time you (i) accessed our website and (ii) took certain actions, such as subscribing to our investor alerts mailing list or clicking on the activation link in the related email, performing a job search, or using our contact form.
  • Analytics Data, including the electronic path you take to our services, through our services and when exiting our services, as well as your usage and activity on our services, such as the links and object you view, click or otherwise interact with (also known as “Clickstream Data”).
  • Location Data, including your general geographic location based on your IP address.

For information about our and, where applicable, our third-party partners’ use of cookies and related technologies to collect information automatically, and any choices you may have in relation to its collection, please visit our Cookie Notice. 

Personal Information from Other Sources and Third Parties

We also obtain personal information from other sources, which we may combine with personal information we collect either automatically or directly from you.

We may receive some of the same categories of personal information as described above from the following sources and third parties:

  • Crane Affiliates: We may receive personal information from other companies owned or controlled by Crane Company, and other companies owning or under common ownership with Crane Company, particularly when we collaborate in providing services.
  • Employers: We may obtain personal information about you from your employer. For example, we may obtain your contact information from your employer to allow us to communicate with you about your employer’s customer relationship with us.
  • Recruiters, References and Professional Networks: We may obtain personal information in relation to your job application from recruiters, your references or from professional networks (such as on our career page, where you have the voluntary option to fill in fields of the application form by using the information included in your LinkedIn profile or your Monster profile).  
  • Service Providers: Service providers that perform services solely on our behalf, such as website hosting and recruiters, collect personal information and often share some or all of this information with us in connection with their services. 
  • Information Providers: We may from time to time obtain information from third-party information providers to correct or supplement personal information we collect. For example, we may obtain updated contact information from third-party information providers to connect with an individual who may be interested in our services. 
  • Publicly Available Information: We may also collect personal information from publicly available sources, such as government records or publicly available websites, to supplement other personal information we collect.
  • Inferences: We may generate inferences or predictions about you and your interests and preferences based on the other personal information we collect and the interactions we have with you. 

Our Use of Personal Information

We use personal information we collect to: 

  • Communicate with You: We use personal information like contact information, professional information and inquiry and communications information to communicate with you about our services, including to inform you about new services, solicit feedback, respond to inquiries or keep you up to date with what’s going on with Crane and our services. Some of these communications may include marketing materials. You may ask us not to send marketing communications by following any available opt-out instructions in the marketing communications you receive. Please note we may continue to send you non-marketing communications even after you opt out.
  • Provide You with Services: We use personal information like contact information and professional information to provide you with our services. For example, we may use contact information and professional information to provide support while onboarding our services. 
  • Facilitate Investor Services: We use personal information like contact information, professional information, and investor information to maintain a record of share ownership and facilitate investor services, including investor relation communications.
  • Review Your Job Application: We use personal information like contact information, professional information and job applicant information to assess your application for employment and facilitate the job application process (including interviews, where applicable). The information we collect in connection with your job application may be transferred to your employment record if you are offered and accept a position at Crane.
  • Otherwise Operate Our Business: We use personal information like contact information, professional information, service information, investor information, job applicant information, inquiry and communications information, log file data, analytics data, and location data to otherwise operate our business, including to:
    • Identify and communicate with customers who may be interested in our services.
    • Optimize customer experience with our services.
    • Remember customers and the choices they have made in relation to our services.
    • Connect with customers about requests and transactions they make on our services and other online services.
    • Diagnose errors and problems with existing service.
    • Develop and test new services.
    • Conduct research and analytics on service usage and activity trends.
    • Deliver marketing communications and advertisements based on customer representative interests and interactions with us.
    • Facilitate business transactions and reorganizations impacting the structure of our business.
  • Exercise or Comply with Legal Obligations and Rights: We use personal information to exercise or comply with legal obligations and rights including to enforce and carry out contracts and agreements and prevent, investigate, or provide notice of fraud or unlawful criminal activity.

Our Disclosure of Personal Information

We disclose personal information in the following ways: 

  • Within Crane: Crane Company entities disclose personal information to other Crane Company affiliates for purposes and uses that are consistent with this Privacy Notice. For example, we may disclose your contact information to facilitate communication between you and a local Crane Company representative. 
  • Your Employer: We may share personal information about you with your employer. For example, where you represent your employer in their relationship with us, we may inform your employer of your communications with us.
  • Data Analytics Providers: We share information with data analytics providers who analyze statistics and trends relating to the usage of and activity relating to our services. These data analytics providers produce reports and make suggestions for our customer and business strategy based on the personal information and other information analyzed.
  • Marketing Partners: We coordinate and share personal information with our marketing partners, including advertisement networks, social networks, re-targeting partners and marketing communication providers, in order to communicate with you about our products and services and market our products and services to you. 
  • Other Service Providers: In addition to the third parties identified above, we engage other third parties to perform certain functions on our behalf in connection with the use of personal information described in the Our Use of Personal Information section above. Depending on the function the third party serves, the service provider may process personal information on our behalf or have access to personal information while performing functions on our behalf.  
  • Business Transaction or Reorganization: We may take part in or be involved with a corporate business transaction or reorganization, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal information to a third party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal information may also be disclosed in the event of insolvency, bankruptcy, or receivership.
  • Legal Obligations and Rights: We may disclose personal information to third parties, such as legal advisors and law enforcement:
    • in connection with the establishment, exercise, or defense of legal claims;
    • to comply with laws or to respond to lawful requests and legal process;
    • to protect the rights and property of us, our agents, customers, and others, including to enforce our agreements, policies, and terms of use;
    • to detect, suppress, or prevent fraud;
    • to reduce credit risk and collect debts owed to us;
    • to protect the health and safety of us, our customers, or any person; or
    • as otherwise required by applicable law.
  • Otherwise with Consent or Direction: We may disclose personal information about you to certain other third parties with your consent or at your direction. 

Children’s Personal Information

Our websites and online services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 13. IF YOU ARE UNDER THE AGE OF 13, PLEASE DO NOT USE OUR WEBSITES OR ONLINE SERVICES OR OTHERWISE PROVIDE US WITH ANY PERSONAL INFORMATION EITHER DIRECTLY OR BY OTHER MEANS. If a child under the age of 13 has provided personal information to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal information from our systems. If we learn that any personal information we collect has been provided by a child under the age of 13, we will promptly delete that personal information.

Third-Party Websites

Our websites and online services may include links to third-party websites, plug-ins and applications. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to, and we are not responsible for, any personal information practices of third-party websites and online services or the practices of other third parties. To learn about the personal information practices of third parties, please review their respective privacy notices.

Updates to This Privacy Notice

We will update this Privacy Notice, including its region-specific disclosures and the Cookie Notice, from time to time. When we make changes to this Privacy Notice, we will change the “Last Updated” date at the beginning of this Privacy Notice and of its region-specific disclosures as well as the Cookie Notice (where applicable). If we make material changes to this Privacy Notice, we will notify you by email to your registered email address, by prominent posting on this website or our online services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

Contact Us

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to [email protected].

Alternatively, inquiries may be addressed to:
Crane Company
Attn: Privacy Office
100 First Stamford Place, Stamford, CT 06902, USA

CRANE PRIVACY NOTICE ADDITIONAL CALIFORNIA PRIVACY DISCLOSURES

Last Updated: September 7, 2023

Scope of Disclosures

These Additional California Privacy Disclosures (the “CA Disclosures”) supplement the information contained in our PRIVACY NOTICE and apply solely to individual residents of the State of California (“consumers” or “you”).

These CA Disclosures provide additional information about how we collect, use, disclose and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act of 2018 (“CCPA”). For a detailed description of how we collect, use, disclose, and otherwise process personal information, please see our PRIVACY NOTICE. 

Unless otherwise expressly stated, all terms in these CA Disclosures have the same meaning as defined in our PRIVACY NOTICE or as otherwise defined in the CCPA.

Personal Information Disclosures

When we use the term “personal information” in these CA Disclosures, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include information that is made publicly available, that is deidentified or aggregated such that it can no longer reasonably be used to infer information about, or otherwise be linked to, you, or that is otherwise excluded from the CCPA’s scope.

Personal Information

As described in more detail in the Our Collection of Personal Information section of our PRIVACY NOTICE, we collect the following categories of personal information: 

  • Identifiers, such as first and last name, phone number, email address and IP address.
  • California Customer Records (Cal. Civ. Code § 1798.80(e)), such as mailing address, email address, phone number, state and country of residence, and information about your status and holdings as an investor. 
  • Commercial Information, such as product or service interests and orders. 
  • Internet/Network Information, such as log file data (including operating system and browser type) and clickstream data (including your usage and activity on our web sites and online services). 
  • Geolocation Data, such as your general geographic location based on your IP address.
  • Sensory Information, such as the sound of your voice from calls with us or your image when you visit our facilities (where permitted by law). 
  • Professional/Employment Information, such as your title, company name, professional background, the nature of your relationship with us, the nature and length of your relationship with current and prior employers, and other professional / employment information you choose to share in connection with a job application. 
  • Education Information, such as education history shared in connection with your job application (including schools attended and degrees achieved). 
  • Sensitive Personal Information, solely in connection with your job application where voluntarily provided or otherwise collected in accordance with law, such as account credentials for our careers page,  social security number, driver’s license number, state identification card number, passport number, racial or ethnic origin, union membership, and personal information concerning health (such as accommodation requests).  
  • Other Personal Information, such as inquiries, requests or comments you choose to send us. 
  • Inferences, such as predictions about which services may be of interest to you and your employer.

We collect this information directly from you, from your browser or device when you interact with our services, and from our affiliates, your employer, recruiters, references, professional networks, service providers, information providers and other publicly available sources. For more information about the personal information we collect and how we collect it, please refer to the Our Collection of Personal Information section of our PRIVACY NOTICE.

We collect personal information from and about you for a variety of purposes. For example, we use personal information to communicate with customers about our services, to provide customers with our services, to facilitate investor services, to process job applications, and to otherwise operate our business. For more information about our use of personal information, please refer to the Our Use of Personal Information section of our PRIVACY NOTICE. 

Sensitive Personal Information

We only use sensitive personal information for the purposes set forth in the Our Use of Personal Information section of our PRIVACY NOTICE to the extent necessary to process your job application at your request, to enter into and perform a contract with you, to comply with legal and regulatory requirements, to protect the life or physical safety of anyone or as otherwise permissible for our own internal purposes consistent with laws.

Deidentified Information

We may at times receive, or process personal information to create, deidentified information that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified information, we will maintain and use the information in deidentified form and not attempt to reidentify the information except as required or permitted by law.

Disclosure, Sale and Sharing of Personal Information

As further described in the Our Disclosure of Personal Information section of our PRIVACY NOTICE,

we may disclose all of the personal information identified above to third parties for business purposes. The categories of third parties to whom we disclose personal information for these purposes include our affiliates, the business you represent, data analytics providers, marketing partners, service providers, and certain other third parties where you have provided your consent or direction, we are engaging in a business transaction or reorganization, or we are addressing our legal obligations and rights.

As is common practice among companies that operate online, we also allow certain third-party providers to use cookies and related technologies to collect Identifiers (such as IP address), Commercial Information (such as products sold or considered), Internet/Network Information (such as analytics data), and Inferences (generated from your interactions with us) directly through our websites and other online services for purposes of analyzing and optimizing our services, delivering ads, providing content and ads that are more relevant, measuring statistics and the success of ad campaigns, and detecting and reporting fraud. Some of these practices may constitute the sale of personal information or the use of personal information for the purpose of displaying advertisements that are selected based on personal information obtained or inferred over time from an individual’s activities across businesses or distinctly-branded websites, applications, or other services (otherwise known as “targeted advertising” or “cross-context behavioral advertising”). Subject to certain legal limitations and exceptions, you may be able to limit or opt-out of the sale of personal information or the sharing of personal information for purposes of targeted advertising (as described in the Your California Privacy Rights section below).

We do not otherwise sell personal information or share personal information for purposes of targeted advertising. We also do not sell the personal information of individuals we know to be less than 16 years of age or share such information for targeted advertising purposes. In addition, we do not sell sensitive information or share sensitive information for purposes of targeted advertising, nor use sensitive information for the purpose of inferring characteristics about a consumer in a manner that would require our offering of the right to limit the use of such information.

Retention of Personal Information

We retain personal information only for as long as is reasonably necessary to fulfil the purpose for which it was collected.  However, if necessary, we may retain personal information for longer periods of time, until such retention periods and deadlines expire, for instance where we are required to do so in accordance with legal, tax, or accounting requirements set by a legislature, regulator, or other government authority.

To determine the appropriate duration of the retention of personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, and whether we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.

Your California Privacy Rights

As a California resident, you may be able to exercise the following rights (subject to certain limitations at law):

The Right to Know

The right to confirm whether we are processing personal information about you and to obtain certain personalized details about the personal information we have collected about you, including: 

  • The categories of personal information collected;
  • The categories of sources of the personal information;
  • The purposes for which the personal information was collected;
  • The categories of personal information disclosed to third parties (if any) and the categories of recipients to whom this personal information was disclosed;
  • The categories of personal information shared for cross-context behavioral advertising purposes (or, “targeted advertising”) (if any), and the categories of recipients to whom the personal information was disclosed for those purposes; and
  • The categories of personal information sold (if any), and the categories of third parties to whom the personal information was sold.

The Right to Access & Portability

The right to obtain access to the personal information we have collected about you and, where required by law, the right to obtain a copy of the personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.

The Right to Correction

The right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.

The Right to Opt-Out of Targeted Advertising

The right to direct us not to share personal information for certain cross-context behavioral or targeted advertising purposes.

The Right to Opt-Out of Sales

The right to direct us not to sell and/or share personal information for certain cross-context behavioral or targeted advertising purposes.

The Right to Request Deletion

The right to request the deletion of personal information that we have collected from you.

You also have the right not to receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. However, please note that if the exercise of these rights limits our ability to process personal information, we may no longer be able to engage with you in the same manner.

How to Exercise Your California Privacy Rights 

To Exercise Your Right to Know, Access, Portability, Correction, or Deletion

To submit a request to exercise the right to know, access, portability, correction and/or deletion, please submit a request by:

Before processing your request, we will need to verify your identity and confirm you are a resident of California. In order to verify your identity, we will generally either require the successful login to your account or the matching of sufficient information you provide us to the information we maintain about you in our systems. Although we try to limit the personal information collected in connection with a request to that personal information identified on our webform, certain requests may require us to obtain additional personal information from you. In certain circumstances, we may decline or limit a request, particularly where we are unable to verify your identity.

To Exercise Your Right to Opt Out of Personal Information Sales or Sharing for Targeted Advertising Purposes

To submit a request to exercise the right to opt out of personal information sales or sharing for targeted advertising purposes, please submit a request by:

  • For Non-Cookie-Based Opt-Outs: 
  • For Cookie-Based Opt-Outs: To exercise your right to opt-out as it relates to the use of cookies and related technologies that involve the sale of personal data or the use of personal data for targeted advertising purposes, please click the cookie icon on the bottom right-hand corner of your screen and adjust your cookie preferences. This opt-out tool is device- and browser-specific, so you will need to change your preferences on each device and browser you use to interact with the specific website you are visiting. In addition, you can also opt-out of cookie-based sales by businesses that participate in the Digital Advertising Alliance’s CCPA Opt-Out Tool by visiting www.privacyrights.info. Lastly, you may follow the other steps set forth in our PRIVACY NOTICE to further exercise control over cookies and related technologies. 

Once you make an opt-out request, you may change your mind and opt back in at any time by contacting us at [email protected] (for non-cookie-based opt-outs) and/or adjusting your cookie preferences as described above (for cookie-based opt-outs).

Authorized Agents

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf. In order to verify the authorized agent’s authority, we generally require evidence of either (i) valid power of attorney or (ii) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.

CRANE PRIVACY NOTICE ADDITIONAL EEA, UK, AND SWISS PRIVACY DISCLOSURES

Effective Date / Last Updated: September 7, 2023

Unless otherwise expressly stated, capitalized terms in these Disclosures have the same meaning as defined in the PRIVACY NOTICE.  

Scope of Disclosures

These Additional European Economic Area (“EEA”), United Kingdom (“UK”), or Switzerland Privacy Disclosures supplement the information contained in our PRIVACY NOTICE, and apply only to our processing of your personal data where you are based in the EEA, the UK, or Switzerland. 

Controller

Crane Company is the data controller responsible for the collection and use of your personal data.

Personal Data Disclosures

When we use the term “personal data” in these Disclosures, we mean any information relating to an identified or identifiable natural person.

Legal Bases for Processing

We rely on one or more of the following legal grounds to process Personal Data about you, whether it is obtained from you or a third party:

Processing Activity

Purposes of the Processing

Legal Bases for Processing and Corresponding GDPR Provision

Communicate with You

To communicate with you about our services, including to inform you about new services, solicit feedback, respond to inquiries or just keep you up to date with what is going on with Crane and our services.

These are also our legitimate interest to process your Personal Data.

Legitimate Interest
Art. 6 (1) s 1 (f) GDPR

To the extent required for us sending marketing communications to you:
Consent
Art. 6 (1) s 1 (a) GDPR

Provide You with Services

To provide you with our services. For example, we may use contact information and professional information to provide support while onboarding our services.

These are also our legitimate interest to process your Personal Data.

Legitimate Interest
Art. 6 (1) s 1 (f) GDPR

To the extent that the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract:

Performance of a Contract
Art. 6 (1) s 1 (b) GDPR

Facilitate Investor Services

To maintain a record of share ownership and facilitate investor services, including investor relation communications.

These are also our legitimate interest to process your Personal Data.

Legitimate Interest
Art. 6 (1) s 1 (f) GDPR

As it relates to us sending you investor email alerts:
Consent
Art. 6 (1) s 1 (a) GDPR

Review Your Job Application

To assess your application for employment and facilitate the job application process (including interviews, where applicable) as well as to transfer relevant information to your employment record if you are offered and accept a position at Crane.

Performance of a Contract
Art. 6 (1) s 1 (b) GDPR
or, where applicable,
Article 88 (1) of the GDPR in conjunction with the respective provision/s under the applicable national data protection law

Otherwise Operate Our Business

To operate our business, including to: 

  • Identify and communicate with customers who may be interested in our services.
  • Optimize customer experience with our services.
  • Remember customers and the choices they have made in relation to our services.
  • Connect with customers about requests and transactions they make on our services and other online services. 
  • Diagnose errors and problems with existing service. 
  • Develop and test new services. 
  • Conduct research and analytics on service usage and activity trends. 
  • Deliver marketing communications and advertisements based on customer representative interests and interactions with us. 
  • Facilitate business transactions and reorganizations impacting the structure of our business.

These are also our legitimate interest to process your Personal Data.

Legitimate interest

Art. 6 (1) s 1 (f) GDPR

To the extent that the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract: 

Performance of a Contract

Art. 6 (1) s 1 (b) GDPR

To the extent required for us (i) sending marketing communications to you or (ii) performing research and analytics:

Consent

Art. 6 (1) s 1 (a) GDPR

Exercise or Comply with Legal Obligations and Rights

To exercise or comply with legal obligations and rights including to enforce and carry out contracts and agreements and prevent, investigate, to provide notice of fraud or unlawful, or criminal activity, or for the establishment, exercise or defence of legal claims.

These are also our legitimate interest to process your Personal Data.

Legitimate interest

Art. 6 (1) s 1 (f) GDPR

To the extent that the processing occurs for compliance with a legal obligation based on EEA (including Member State)/UK/Swiss law:

For compliance with a legal obligation

Art. 6 (1) s 1 (c) GDPR

You are generally not required to provide personal data to us, but we do rely on your personal data to provide certain of our services. For example, we need your email address to send you mailings. If you choose not to provide us with your personal data, we may not be able to provide you with a service you request.

Data Retention

We retain personal data about you for as long as is necessary for the purposes set out in these Disclosures, unless a longer period is required under applicable law or is needed to resolve disputes or protect our legal rights.

The criteria used to determine the period for which personal data about you will be retained varies depending on the legal basis under which we process the personal data:

Legitimate Interests

Where we are processing personal data based on our legitimate interests, we generally will retain such information for a reasonable period of time based on the particular interest, taking into account the fundamental interests and the rights and freedoms of data subjects

Consent

Where we are processing personal data based on your consent, we generally will retain the information for the period of time necessary to fulfill the underlying agreement with you, subject to your right, under certain circumstances, to have certain of your data erased (please see the Your Privacy Rights section below)

Contract

Where we are processing personal data based on contract, we generally will retain the information for the duration of the contract plus some additional limited period of time that is necessary to comply with law or that represents the statute of limitations for legal claims that could arise from the contractual relationship

Legal Obligation

Where we are processing personal data based on a legal obligation, we generally will retain the information for the period of time necessary to fulfil the legal obligation

Legal Claim

We may need to apply a “legal hold” that retains information beyond our typical retention period where we face threat of legal claim.  In that case, we will retain the information until the hold is removed, which typically means the claim or threat of claim has been resolved.

In all cases, in addition to the purposes and legal bases, we consider the amount, nature and sensitivity of the personal data, as well as the potential risk of harm from unauthorized use or disclosure of your personal data.

Descriptions in the Cookie Notice

Additional descriptions on the processing in connection with cookies or similar technologies, including on the purposes, categories of personal data, retention, legal basis, and recipients can be found in the Cookie Notice. The remainder of these Disclosures shall apply to the related processing activities.

International Data Transfers

We may transfer personal data about you among us and to our subsidiaries or affiliates, as well as to the categories of third parties identified in the Our Disclosure of Personal Information section of the PRIVACY NOTICE. Personal data may be transferred to, stored and processed in a country other than the one in which it was collected, including, but not limited to, the United States and any (other) country in the world. A country to which personal data is transferred may not provide the same level of protection for personal data as the country from which it was transferred.

We may transfer personal data about you outside of the EEA, UK, or Switzerland and when we do so, we rely on appropriate or suitable safeguards recognized under the GDPR including adequacy decisions, and standard contractual clauses.

Adequacy Decisions

We may transfer personal data about you to countries, territories or one or more specified sectors within a country that the European Commission has or competent authorities in the UK or Switzerland have deemed to adequately safeguard personal data. You can find a current list of these adequacy decisions here. 

Standard Contractual Clauses

The European Commission has adopted Standard Contractual Clauses, which provide safeguards for personal data transferred outside of the EEA, UK, or Switzerland. We may use these Standard Contractual Clauses (with UK and Swiss amendments, as may be required) when transferring personal data from a country in the EEA, UK, or Switzerland to a country outside of the EEA, UK, or Switzerland that has not been deemed to adequately safeguard personal data. You can request a copy of our Standard Contractual Clauses by contacting us as set forth in the Contact Us section of this PRIVACY NOTICE.

Other Grounds

Where appropriate, we may transfer personal data from a country in the EEA, the UK, or Switzerland to a country outside of the EEA, the UK, or Switzerland also on the grounds of one of the derogations provided for specific situations by the GDPR. These derogations may especially apply in case you consent to a proposed transfer or in relation to a transfer which is necessary for (i) the establishment, exercise or defense of legal claims, or (ii) the performance of a contract of a Crane Affiliate with you or concluded in your interest.

Your Privacy Rights

You have the following rights in relation to your personal data (subject to certain limitations at law):

Access

The right to obtain (i) confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, (ii) access to the personal data as well as information relating to its processing, and (iii) obtain a copy of personal data about you.

Rectification

The right to correct or update any personal data about you that is inaccurate or incomplete.

Restriction of Processing

The right to require us to limit the purposes for which we process your personal data if the continued processing of the personal data in this way is not justified, such as where the accuracy of the personal data is contested by you.

Erasure

The right to request the deletion or erasure of personal data about you without undue delay if the continued processing of that personal information is not justified, such as where the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.

We may reject such as request, in particular, where the processing is necessary for compliance with a legal obligation (such as retention obligations) or for the establishment, exercise or defense of legal claims.

Portability

The right to obtain a copy of personal data about you which you have provided to us in a structured, commonly used and machine-readable format and the right to transmit that personal data to another controller, where the processing is based on consent or the performance of a contract.

Objection to Processing

You also have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal data, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.

Please note that if the exercise of these rights may limit our ability to process personal data, we may not be able to provide our services to you, or otherwise engage with you going forward.

Right to Withdraw Consent

Where we rely on your consent for processing of your personal data, you also have the right to withdraw your consent to such processing, subject to certain limitations at law.

In relation to your subscription to Investor Alerts Mailing Lists, you may withdraw your consent by entering your email address under Unsubscribe from Email Alerts on our Investor Alerts page or by clicking the unsubscribe link in our investor alerts emails.

Submitting Requests

To submit a request, please contact us as set forth in the Contact Us section of this PRIVACY NOTICE. We may need to verify your identity before processing your request, which may require us to obtain additional personal data from you. In certain circumstances, we may decline a request to exercise the rights described above.

Right to Lodge a Complaint

If you have any complaints regarding our privacy practices, you have the right to lodge a complaint with a data protection authority (i.e., supervisory authority), in particular, at your usual residence, place of work or place of the alleged infringement. An overview of the supervisory authorities in Germany and the EEA may be found here and here. If you are based in the UK or Switzerland, your local data protection authorities are the UK Information Commissioner’s Office (https://ico.org.uk/global/contact-us/) and the Swiss Federal Data Protection and Information Commissioner (the “FDPIC”, https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact/address.html).