U.S. Addendum

Last updated: April 2023

This U.S. Addendum explains how Envista Holdings Corporation, 200 S. Kraemer Blvd, Brea, CA 92821("Envista") and its operating companies Ormco Corporation, Dental Imaging Technologies Corporation, PaloDEx Group Oy, Kerr Corporation, Metrex Research LLC, Medicim NV, Nobel Biocare Services AG, Implant Direct Sybron International LLC (“Affiliates”) collect, use and disclose the personal information of residents of the United States. Overall Envista and its Affiliates own more than 30 dental brands including DTX Studio, Spark, Dexis Imaging and Orascoptic. This U.S. Addendum includes information that supplements the Envista Privacy Policy (the “Privacy Policy”). Therefore, this U.S. Addendum is not a stand-alone statement of Envista’s privacy policy and must be read in conjunction with the Privacy Policy. Note that residents in different states may have varying rights, and not all state privacy laws necessarily apply.

Purposes for which we use your data

We collect personal information from a variety of sources and use it for purposes related to our business. We may disclose personal information to our service providers in order to manage consumer accounts, provide goods and services to our consumers, market our products, improve our business, including our marketing services, and respond to legal and regulatory requirements. A fuller description of the purposes for which we collect the personal information of our consumers is provided below and in the answer to Question 4 in the Privacy Policy.

Categories of data

The Personal Information about you that we collect includes information within the below categories of data. These categories also represent the categories of Personal Information that we have collected over the past 12 months. Note that the categories listed below refer to the categories of Personal Information as defined under the California Privacy Rights Act (“CPRA"). Inclusion of a category in the list below indicates only that, depending on the services and products we provide you, we may collect some information within that category. It does not necessarily mean that we collect all information listed in a particular category for all of our customers. In addition, state privacy law does not necessarily apply to each category of Personal Information, particularly since much of what we collect is in the Business to Business Context or may include Protected Health Information.

To the extent we process Protected Health Information about you on behalf of your health care provider, our practices comply with the practices and restrictions described in your health care provider’s privacy notice.

We have disclosed Personal Information in each of the below categories with our subsidiaries and affiliates, business partners, and service providers, as well as with government entities as necessary, within the past 12 months.

Category	Sources	Purpose of Processing and Disclosure
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.	Website form; telephone discussions; other direct communications with you; social media	We use this information to provide our products and services to you, including to manage orders, process payments, host at our premises, register products, troubleshoot, send you communications, manage and administer user accounts, and other operational purposes. We may also use this information in performance of our legal obligations or for marketing purposes, including offering you products that may interest you through both direct and partner advertising. This information may also be used for general business requirements, including but not limited to reviewing and improving our products and services, developing new products, scientific research, and monitoring.
Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, your name, signature, social security number, physical characteristics or description, address, telephone number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.	Website form; telephone discussions; other direct communications with you; social media	We use this information to provide our products and services to you, including to manage orders, process payments, host at our premises, register products, troubleshoot, send you communications, manage and administer user accounts, and other operational purposes. We may also use this information in performance of our legal obligations or for marketing purposes, including offering you products that may interest you through both direct and partner advertising. This information may also be used for general business requirements, including but not limited to reviewing and improving our products and services, developing new products, scientific research, and monitoring.
Characteristics of protected classifications under California or federal law, including: familial status, disability, sex, national origin, religion, color, race, sexual orientation, gender identity and gender expression, marital status, veteran status, medical condition, ancestry, source of income, age, or genetic information.	Website form; telephone discussions; other direct communications with you; social media	We use this information to provide our products and services to you, particularly if you are a patient. This information may also be used should you have any accessibility needs, including if you visit our facilities. It may also be used for general business requirements, including developing new products, scientific research, and monitoring.
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	Website form; telephone discussions; other direct communications with you	We use this information to provide our products and services to you, including to manage orders, process payments, host at our premises, register products, troubleshoot, send you communications, manage and administer user accounts, and other operational purposes. We may also use this information in performance of our legal obligations or for marketing purposes, including offering you products that may interest you through both direct and partner advertising. This information may also be used for general business requirements, including but not limited to reviewing and improving our products and services, developing new products, scientific research, and monitoring.
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding the consumer’s interaction with an Internet Web site, application, or advertisement.	Online automated technologies, including web server logs that compile IP addresses, web beacons, and cookies	We use this information to provide our products and services to you, including to manage orders, process payments, register products, troubleshoot, send you communications, manage and administer user accounts, and other operational purposes. We may also use this information in performance of our legal obligations or for marketing purposes, including offering you products that may interest you through both direct and partner advertising. This information may also be used for general business requirements, including but not limited to reviewing and improving our products and services, developing new products, scientific research, and monitoring. This information may also be used for maintaining the security and integrity of our electronic systems.
Geolocation data.	Online automated technologies, including web server logs that compile IP addresses, web beacons, and cookies	We use this information to provide our products and services to you, including to manage orders, process payments, host at our premises, register products, troubleshoot, send you communications, manage and administer user accounts, and other operational purposes. We may also use this information in performance of our legal obligations or for marketing purposes, including offering you products that may interest you through both direct and partner advertising. This information may also be used for general business requirements, including but not limited to reviewing and improving our products and services, developing new products, scientific research, and monitoring. This information may also be used for maintaining the security and integrity of our electronic systems.
Audio, electronic, visual, thermal, olfactory or similar information.	Recorded phone calls with our customer service representatives	We use this information for operational purposes, including but not limited to quality control, training, and security purposes.
Professional or employment-related information.	Website form; telephone discussions; other direct communications with you	We use this information to provide our products and services to you, including to set up and administer your account, manage orders, process payments, host at our premises, register products, troubleshoot, send you communications, manage and administer user accounts, and other operational purposes. We may also use this information in performance of our legal obligations or for marketing purposes, including offering you products that may interest you through both direct and partner advertising. This information may also be used for general business requirements, including but not limited to reviewing and improving our products and services, developing new products, scientific research, and monitoring.
Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99).	Direct communications with you	We use this information to provide our products and services to you, including to set up and administer your account, manage orders, process payments, host at our premises, register products, troubleshoot, send you communications, manage and administer user accounts, and other operational purposes.
Inferences (defined as “the derivation of information, data, assumptions, or conclusions from facts, evidence, or another source of information or data”) drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	Data analytics partners	We use this information to provide our products and services to you, including to set up and administer your account, manage orders, process payments, host at our premises, register products, troubleshoot, send you communications, manage and administer user accounts, and other operational purposes. We may also use this information in performance of our legal obligations or for marketing purposes, including offering you products that may interest you through both direct and partner advertising. This information may also be used for general business requirements, including but not limited to reviewing and improving our products and services, developing new products, scientific research, and monitoring.
Social security, driver's license, state Identification card, or passport number.	This information is collected directly from you or our Service Providers (including credit checking agencies).	This data is processed to protect against malicious, deceptive, fraudulent or illegal activity, and may be used for insurance reimbursement purposes
Account log-In, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.	This information is collected directly from you or our Service Providers.	This data is processed in connection with our operational functions, including for us to maintain your account and process delivery of products or services to you. It is also processed to detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, and for data analytics.
Precise geolocation.	This information is collected directly from you, our Service Providers, or through the use of cookies and similar technologies.	This data is processed in connection with our operational functions, including for us to process delivery of products or services to you. It is also processed to detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, and for data analytics. We also use this data for marketing purposes, including offering you products that may interest you through both direct and partner advertising.

We do not process sensitive personal information beyond what is reasonably necessary to provide our products and services and the purposes described above. We may rely on Service Providers to assist us with these efforts.

Use or sale of personal information of consumers under 13 years of age

We do not knowingly collect or use any personal information from children under 13 years of age unless the information is collected from a parent or guardian. If you are a child, please do not provide your personal information to us. If you are a parent and become aware that your child has provided personal information to us, please contact us at the contact addresses listed above and we will help you to resolve this issue. If we learn that we have collected personal information of a child, we will take reasonable steps to delete that personal information.

Your state specific rights

Certain states also grant residents specific rights regarding the collection and use of their Personal Information. Subject to certain limitations, and based on your residency, you may be entitled to the following rights:

Right to access/know. You may have the right to know and request information about the categories and specific pieces of Personal Information we have collected about you within the last 12 months, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the categories of third parties with whom we share such information. You also have the right to know if we have sold or disclosed your personal information.
Right to correct. You may have the right to notify us through the “Contact Us” section at the bottom of this Privacy Policy to correct any mistakes in yours Personal Information or update your preferences; we may also not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect; data solely retained for data backup purposes is generally excluded.
Right to delete. You may have the right to request the deletion of your Personal Information, subject to certain exceptions
Right to non-discrimination. You have the right to not be discriminated against for exercising any of the above-listed rights. We may, however, provide a different level of service or charge a different rate reasonably relating to the value of your Personal Information.
Right to limit use and disclosure of Sensitive Personal Information. You may have the right limit the use of and disclosure of your Sensitive Personal Information Envista collects or maintains, to only those purposes necessary to provide our Services.
Opt-out of the sale or sharing of personal information. We do not sell your Personal Information to or share your Personal Information with third parties for cross contextual advertising, nor do we intend to, as those terms are defined in the CPRA and other applicable state privacy law. We also have not done so for the last 12 months.
Right to portable data. You may have the right to obtain a personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
Exercising your rights If you would like to exercise any of the above rights, please submit your request at the contact addresses listed in the Privacy Policy, by completing this form or under the following toll-free telephone number: 844-570-6698.

We may require additional information from you in order to honor your request, and there may be circumstances where we will not be able to honor your request. For example, if you request deletion, we may need to retain certain personal information to comply with our legal obligations or other permitted purposes.

We will only use Personal Information provided in a consumer request to verify your identity or authority to make the request. You must provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized agent. If you are submitting a request through an authorized agent, the authorized agent must provide us with your signed written permission stating that the agent is authorized to make the request on your behalf.

We may also request that any authorized agents verify their identity and may reach out to you directly to confirm that you have provided the agent with your permission to submit the request on your behalf.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will use the personal information you provide to us when submitting a consumer request only to verify the requestor's identity or authority to make the request.

We will require the following information to verify your identity:

For requests to know categories of personal information: We will require you to correctly match at least two data points we have previously collected about you.
For requests to know specific pieces of personal information we have collected in the past 12 months: We will require you to correctly match at least three data points we have previously collected about you. We may also require you to sign a declaration under penalty of perjury that the requestor is the consumer whose personal information is being requested.
For requests to delete: We will require you to correctly match at least two or three data points we have previously collected about you, depending on the sensitivity of the personal information you are requesting. We may also require you to sign a declaration under penalty of perjury that the requestor is the consumer whose personal information is being requested.

Data we may request to verify your identity: When we request additional information from you to verify your identity, we may request other account information, answers to security questions, your name, government identification number, date of birth, contact information, or other personal identifying information.

Further, if you are a California resident who has provided Personal Information for personal, family, or household use, California Civil Code Section 1798.83 permits you to request in writing a list of the categories of Personal Information that we have disclosed to third parties during the preceding year, for the third parties’ direct marketing purposes. To make such a request, please contact us at privacy@envistaco.com.

Opt-Out Preference Signal

Some browsers have incorporated "Do Not Track" (“DNT”) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not yet a common understanding of how to interpret DNT signals, our services do not currently respond to browser DNT signals. For more information on DNT, see https://allaboutdnt.com/.

Questions

If you have any questions or concerns about this privacy policy, you may contact us using the process described in the Privacy Policy.