Chart Industries California Privacy Notice

Effective Date: January 1, 2023

This California Privacy Notice (“Notice”) supplements, for California residents (referred to in this Notice as “Consumer(s),” “you,” or “your,”) the general privacy policies of Chart Industries, Inc. (together with its relevant subsidiaries, associates, and affiliated companies, “Chart,” “us,” “we,” or the “Company”) including, without limitation, the Website Privacy Policy , and any other privacy policies, notices or statements on a “Service” (e.g., website, mobile app, or any other digital asset) owned and operated by Company. You have certain privacy rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, including regulations promulgated thereunder (together, the “CCPA”). This Notice provides you information regarding our data practices, including our collection, use, disclosure, and sale of your personal information, as the terms are defined by the CCPA (collectively, “PI”).

In the event of a conflict between any other Company policy, statement or notice and this Notice, this Notice will prevail as to California residents, unless stated otherwise. Please see also any other privacy policies, notices or statements posted or referenced on our Service.

Non-Applicability, Human Resources: The rights described in this Notice apply to California residents whose PI is subject to the CCPA. If you are not a California resident, the rights described in this Notice do not apply to you. This Notice does not apply to our job applicants, current and former employees and independent contractors (“Personnel”), however, our California-based Personnel may obtain a separate privacy notice that is applicable to them by contacting our Human Resources Department at globaldataprivacy@chartindustries.com.

  1. NOTICE OF DATA PRACTICES

    The description of our data practices in this Notice covers only the twelve (12) months prior to the date of this Notice and will be updated at least annually. Our data practices may differ between updates; however, if they materially differ from those described in this Notice, we will provide pre-collection notice of the current practices, which may include references to other privacy policies, notices or statements posted or referenced on the Service that reflect current practices.
    1. PI Collection and Retention

      In the past 12 months, we collected and retained PI about you as follows:
      Category of PI Examples of PI Collected and Retained Retention
      1. Identifiers Real name, alias, postal address, unique personal identifiers, online identifier, Internet Protocol address, e-mail address, and account name. Up to 10 years.
      2. Personal Records Name, signature, description, address, telephone number, and financial information (e.g., payment card information). Some PI included in this category may overlap with other categories. Up to 10 years.
      3. Customer Account Details/Commercial Information Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. Up to 10 years.
      4. Geolocation Data If you interact with us online we may gain access to the approximate location of the device or equipment you are using. Up to 10 years.


      As required by the CCPA, we note our general PI retention rules by category of PI above. However, because there are numerous types of PI in each category, and various uses for each PI type, actual retention periods vary. We retain specific PI pieces based on how long we have a legitimate purpose for the retention.
    2. Sources of PI

      We collect PI about you in the following ways and from the following sources:
      • Directly from you. We collect PI directly from you when you submit requests for information on our websites.
      • Through cookies and other tracking technologies. We may collect information about how you use our websites or otherwise interact with us online automatically, such as IP address, information about your device, internet usage, browsing preferences, browser type, website activity, and other technical information when you interact with us online.
      • From third parties. We may collect PI from third parties, such as service and content providers, business partners, or from others interacting with us.
      • From public sources. We may collect information about you from public sources such as government entities that maintain public records or information you submit in public forums.
    3. Use of PI

      Generally, we process your PI to the extent necessary for the operation of our business, including for one or more of the following business purposes:
      • Managing interactions and transactions between you and us to provide our services;
      • Processing interactions and transactions between you and us to provide our services;
      • For legal, safety, and security purposes;
      • Debugging to identify and repair errors that impact existing intended functionality;
      • Performing services, including providing customer service and processing or fulfilling orders;
      • To market our products or services;
      • Undertaking activities to verify or maintain the quality of our services; and
      • For our own internal purposes, such as research and development to improve the quality of your interactions with us.


      We may also disclose PI to our vendors, to you or to other parties at your direction for the additional purposes explained at the time of collection (such as in the applicable privacy policy or notice), as required or permitted by applicable law, to the government or private parties to comply with law or legal process, and to assignees as part of an acquisition, merger, asset sale, or other transaction where another party assumes control over all or part of our business.

      During the past 12 months, we did not “sell” or “share,” as those terms are defined by the CCPA, any of the categories of PI described above.
    4. PI Disclosure Practices

      During the past 12 months, for the purposes explained above, we disclosed such PI to our vendors, other members of our corporate group, government entities (when we are under a duty to disclose or as required to protect our rights or the rights of others), and other parties as more fully set forth below:
      Category of PI Categories of Recipients
      1. Identifiers
      • Vendors (e.g., data analytics providers, payment processors, and marketing services providers);
      • Governmental entities (making requests pursuant to legal or regulatory process)
      2. Personal Records
      • Vendors (e.g., data analytics providers, payment processors, and marketing services providers);
      • Governmental entities (making requests pursuant to legal or regulatory process)
      3. Customer Account Details / Commercial Information
      • Vendors (e.g., data analytics providers, payment processors, and marketing services providers);
      • Other members of our corporate group
      4. Geolocation Data
      • Vendors (e.g., data processors and storage providers)
  2. YOUR CONSUMER RIGHTS AND HOW TO EXERCISE THEM

    As described more below, subject to our being able to verifying your identity (discussed below), you may exercise the privacy rights described in this section. To exercise such rights, follow the instructions in the How to Exercise Your Consumer Privacy Rights section below.
    1. Right to Limit Use and Disclosure of Sensitive PI

      With regard to PI that qualifies as “sensitive personal information” under the CCPA, as of January 1, 2023, we do not process sensitive personal information of Consumers.
    2. Right to Know/Access

      You are entitled to access the PI that we maintain about you, up to twice in a 12-month period.
      1. Categories

        You have a right to submit a request for any of the following:
        • The categories of PI we have collected about you;
        • The categories of sources from which we collected your PI;
        • The purposes for our collecting your PI;
        • A list of the categories of PI disclosed to third parties and, for each, the categories of recipients.
      2. Specific PI

        You may request to confirm if we are processing your PI and, if we are, to obtain a transportable copy, subject to applicable request limits, of your PI that we have collected and are maintaining. Before providing you with the specific PI that we maintain about you, we will apply the heightened verification standards described in the How to Exercise Your Consumer Privacy Rights section below.
    3. Right to Delete

      Subject to certain exceptions, you may request that we delete your PI. Note that we may not be required to delete your PI that we did not collect directly from you.
    4. Correct Your PI

      You may request that we correct any inaccuracies you find in the PI that we maintain about you.
    5. How to Exercise Your Consumer Privacy Rights
        To submit a request to exercise your privacy rights, or to submit a request as an authorized agent, use our   , e-mail us at globaldataprivacy@chartindustries.com, or call us at 844-411-1337 and respond to any follow-up inquiries we make. Please be aware that we do not accept or process requests through other means (for example, via fax, chats, social media, etc.).
      1. We Must Verify Your Identity

        When you submit a request, we may ask you to provide verifying information, such as your name, e-mail, phone number and/or mailing address. We will review the information provided and may request additional information via e-mail or other means to ensure we are interacting with the correct individual. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the Consumer about whom we collected PI.

        We will use PI provided in your request only to verify your identity or authority to make the request and to track and document request responses, unless you also gave it to us for another purpose.

        We verify each request as follows:
        • Right to Know/Access (Categories of PI): We will verify your request by matching at least two data points you provide with data points we maintain, which we have determined to be reliable for the purpose of verifying you.
        • Right to Know/Access (Specific PI): We will verify your request by matching at least three data points you provide with data points we maintain, which we have determined to be reliable for the purpose of verifying you, together with a signed declaration under penalty of perjury that you are the Consumer whose PI is the subject of the request. If you fail to provide the data points, we will be unable to verify you sufficiently to honor your request, but we will then treat it as a request for disclosure of the categories of PI we maintain about you.
        • Right to Delete: We will verify your request by matching at least two or three data points you provide with data points we maintain, depending on the sensitivity of the PI and the risk of harm posed by unauthorized deletion.
        • Right to Correction: We will verify your request by matching at least two or three data points you provide with data points we maintain, depending on the sensitivity of the PI and the risk of harm posed by unauthorized correction.
      2. Agent Requests

        You may use an authorized agent to exercise your rights on your behalf. Authorized agents may demonstrate that the agent has authority to exercise rights on the requesting Consumer’s behalf by submitting supporting documentation to globaldataprivacy@chartindustries.com. At a minimum, we will require evidence of the agent’s identity (via submission of a driver’s license or other government-issued identification), and at least one of the following evidencing proof of your legal authority to act on the behalf of the individual who is the subject of this request:
        • Written authorization signed by the Consumer; or
        • Certified copy of a Power of Attorney granted under the California Probate Code.


        Whenever you interact with us on behalf of another individual or entity, such as by providing or accessing PI about another individual, you represent that your interactions and exchanges comply with applicable data privacy laws. You shall have sole responsibility for any violation of applicable laws as a result of a failure to obtain any necessary consent from such individual.
    6. Our Responses

      Some PI that we maintain is insufficiently specific for us to be able to associate it with a Consumer (e.g., clickstream data tied only to a pseudonymous browser ID). We do not include such PI in response to requests. If we cannot comply with a request, we will explain the reasons in our response.

      We will not charge a fee to respond to your requests; provided, however, that we may charge a reasonable fee, or refuse to act upon a request, if your request is excessive, repetitive, unfounded, or overly burdensome. If we determine that the request warrants a fee, or that we may refuse it, we will give you notice explaining why we made that decision.
  3. NON-DISCRIMINATION

    We will not discriminate against you in a manner prohibited by the CCPA for your exercise of your privacy rights.
  4. OUR RIGHTS AND THE RIGHTS OF OTHERS

    Notwithstanding anything to the contrary, we may collect, use and disclose your PI as required or permitted by applicable law and this may override your rights under the CCPA. In addition, we are not required to honor your requests to the extent that doing so would infringe upon our or another person’s or party’s rights or conflict with applicable law.
  5. CONTACT US

    If you have any questions, comments, or concerns about our privacy practices, please contact us by e-mail at globaldataprivacy@chartindustries.com