Effective Date: May 2018

Date of modification: June 2020

Firmenich SA (hereafter “Firmenich”) is committed to protecting your personal information. Some of the personal information you input into www.firmenich.com (the “Website”) will be included in a data file of Firmenich. Where European Economic Area and Swiss (“EEA + CH”) law applies, Firmenich is the controller of your personal information.

According to applicable data protection regulation, the “data controller” is the legal entity responsible for any personal data collected from you. The data controller will depend on who you are:

• a visitor of this Website;

• an investor;

• a job applicant,

• or a Firmenich customer or supplier.

Firmenich is the data controller for a visitor of this Website, an investor, or a job applicant. In relation to a customer or a supplier, the data controller is the Firmenich legal entity that manages the contractual relationship with such customer or supplier and it can be found:

• in the agreement you have entered into with Firmenich;

• on your purchase order or invoice.

This Privacy Policy describes, among other things, the types of information collected about you when you visit the Website; how your information may be used and when it may be disclosed; how you can control the use and disclosure of your information; and how your information is protected.

1. Types of personal information collected
2. Purposes for processing your personal information
3. Disclosure of your personal information
4. Your choices
5. Protection of your personal information
6. Storing and transferring your personal information
7. User-generated content
8. Third party sites
9. Your rights
9. Your EEA + CH rights
10. California privacy rights
11. Changes to this Privacy Policy
12. Questions

1. Types of personal information collected

We use different methods to collect personal information from and about you including through:

• Direct Interactions: You may provide personal information to us when you register for certain services, access various content or features, submit an application to work at Firmenich or other Firmenich group companies (“Group Companies”) or directly contact us via the Website. You may also provide personal information to Firmenich if you post in community discussions, participate in any other online interactive features and if you participate in any research questionnaires, projects and surveys (the nature of which will be explained to you in more detail prior to your participation in them), or when contacting our media or investors relations. The types of information we may collect from you includes personal details (including name and gender), contact information (including email address, postal address/location, telephone numbers), financial interests you may have as an investor, education and training details (including qualification, attendance at educational establishments and training received), and employment details (including details of previous employment roles).

• Automated technologies or interactions: When you use our Website, we will automatically collect technical information about your equipment, browsing actions and patterns, including your browser type and operating system, search history, the links you click on within the Website, unique identifiers (including mobile device identification and IP address), information collected through cookies, web beacons, pixel tags, and other, similar technologies (please refer to our Cookies Policy), your bandwidth speed and information about the software programs installed on your computer and standard server log information. We collect your internet or other electronic network activity information from your interactions with our website.

• Third parties or publicly available resources: Where permitted by applicable law, we may collect information about you from other sources, including through interactive applications (such as mobile devices, third-party services, and embedded video players), from third-party sites (for example social media sites), and from commercially available sources (such as data aggregators and public databases). The types of information we may collect includes personal details (including name, age, gender, and other demographic data), contact information (including postal address and telephone numbers), your interests and purchase behavior and navigation data (including websites visited and advertisements viewed or clicked on).

This Privacy Policy does not cover the practices of third parties, including those that may disclose information to Firmenich.

2. Purposes for processing your personal information

We may process any personal information you provide to us to enable us to perform the contract entered into between you and us, to ensure compliance with local legal and regulatory requirements and for the purposes of our legitimate business interests, including:

• To designate you as the contact person and to enable us to fulfill your requests for products, services, and information, including to complete transactions that you have requested;

• To ensure the security of our websites;

• To enable you to participate in features such as surveys, polls, promotions and message boards;

• With your consent, to provide you with electronic newsletters, information, special offers and promotional materials about us and the Website and on behalf of our Group Companies, in accordance with applicable law (see Your Choices below for further information of opting out of such marketing communications);

• To better understand how you interact with the Website to understand and improve the Website and our service offerings (including customizing the content of the Website and developing advertising tailored to your interests); and

• To produce anonymous or aggregated data and statistics that might help third parties develop our or their own products and service offerings; and

• To enable us to process and consider your application to join Firmenich and our Group Companies.

Combining Information. The information we collect about you may be combined for the purposes outlined in this Privacy Policy, including to help us tailor our communications to you and to develop rich online content and services.

3. Disclosure of your personal information

Firmenich is committed to maintaining your trust and we want you to understand when and with whom we may share information collected about you. We may share your personal information with the following categories of recipients:

• Firmenich Group Companies: We may share your contact information with other Group Companies so that they can contact you regarding features such as surveys, polls, and promotions and/or send you communications about their products and services. As a global company, some of our employees in different sites may need to access your personal data in order to deliver you better services you may request from Firmenich. A list of our affiliates and locations can be viewed on the dedicated page.

• Authorized third-party service providers: We may share your information with services providers who help us with specialized services, including customer support, email and text message deployment, business analytics, marketing and data processing. These service providers are required to keep your personal information confidential and secure, and must only use your personal information as instructed by Firmenich;

• California Only: Analytics providers: We may share your internet or other electronic network activity information with our analytics providers so they may perform auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards; and

• Our selected commercial partners and sponsors: Where you have chosen to enter a sweepstake, contest, or other promotion your personal information may be disclosed to sponsors and third parties who help design, administer and implement the promotion, including in connection with winner selection, prize fulfilment and aggregated data analysis.

We may also share your personal information in the following circumstances:

• Business transfers: We may share your information in connection with a substantial corporate transaction, such as the sale of a Group Company, a merger, consolidation, asset sale, or in the unlikely event of bankruptcy.

• Legal requirements: We may disclose information about our users, including contact information, where we have a legal duty to do so, including in response to court orders or legal process, and to comply with other legal obligations imposed on us.

• Protect our Website and users: We may disclose information to protect and defend the legal rights, interests, and safety of the Website, the Firmenich group of companies, and their employees, agents, and contractors (including enforcing our agreements); to protect the safety and security of users of the Website and members of the public. Your personal information may also be subject to foreign laws and may be accessible by foreign governments, courts, law enforcement and regulatory agencies.

We may share aggregated or anonymized information with third parties, for purposes including helping us develop content and services we hope you will find of interest or to help these third parties develop our or their products and service offerings. This sharing of anonymized or aggregated information will not include information that could be used to identify you.

4. Your choices

You can choose to enjoy content and features on the Website without directly providing us with any information about you; however, as described above, some information may automatically be collected or may be requested so you can take advantage of certain features and services offered on the Website.

We send marketing communications where you have agreed to us doing so. You can opt-out of receiving marketing emails or text messages from us by following the instructions contained in any such message or by contacting us at any time (see Section 12 “Questions” below). Please note that even if you unsubscribe to marketing communications, we still may need to send you communications relating to your use of the Website, such as service announcements and if we may need to send certain information to you under a legal, regulatory, or ethical requirement.

5. Protection of your personal information

We have adopted appropriate and commercially reasonable technical, organizational, administrative, and physical measures to help protect your personal information from loss, misuse, and unauthorized alteration. We ensure only the persons who need to for legitimate business purposes, have access to your personal data. Please note that no data transmission or storage can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot ensure or warrant the security of any personal information you transmit to us via the Website.

6. Storing and transferring your personal information

Your personal information collected via this Website will be stored on servers located in Switzerland or an EU member state.

We share your personal information with our Group Companies. If you are located in the EEA+ CH, this will involve transferring your data outside the EEA + CH.

Many of our external third parties are based outside the EEA + CH so their processing of your personal information will involve a transfer of data outside the EEA + CH.

Whenever we transfer your personal information out of the EEA +CH, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries.

Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe. For further details, see European Commission: Model contracts for the transfer of personal data to third countries.

Please contact us at data.privacy@firmenich.com if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA + CH.

We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements and in accordance with our data retention rules.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances, we may anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

7. User-generated content

The Website may enable users to submit their own content for contests, blogs, videos, message boards, and other functions. Publication of user-generated content on the Website is subject to any Terms of Use that may be notified to you prior to your submitting content. Please remember that any information you disclose as or in relation to user-generated content will be publicly available. You should exercise caution when deciding to disclose your contact details, financial information, and other information in a submission. We cannot prevent such information from being used in a manner that may violate this Privacy Policy, the law, or your personal privacy and safety.

8. Third party sites

The Website may contain links to non- Firmenich websites. Links to other websites are provided for information only and do not constitute endorsements of those other websites. When you select a link to a third party website from the Website, you will be leaving the Website and this Privacy Policy does not cover any information collected through any other website. Any information that you disclose on the third-party site will be governed by that site's privacy policy. You should review the privacy policies of those third-party sites before providing any information to them. We are not responsible or liable for the privacy practices or policies of any non-Firmenich websites. Your use of third-party websites is at your own risk.

9. Your EEA+CH rights

You may be entitled under local law to:

• access, update or amend the information that we hold about you;

• object to the processing of your information by Firmenich, including for marketing purposes or otherwise where you have a legitimate reason for doing so; and/or

• ask us to delete your information. Please note that we may need to retain some information about you in order to satisfy our legal or security obligations.

Residents of the EEA + CH: : In addition to the rights listed above you may also have the right to: (a) restrict the processing of personal information we hold about you; (b) object to the processing of personal information we hold about you; (c) receive any personal information we hold about you in a structured and commonly used machine-readable format or have such personal information transmitted to another company and/or (d) not be subject to any decision that significantly affects you being taken solely by automated processing, including profiling.

Please contact us if you wish to exercise any of these rights. We will process any request in line with any local laws and our policies and procedures. We may ask you for additional information to confirm your identity and for security purposes, before disclosing the information requested to you. If you are located in the EEA + CH, you have the right to lodge a complaint about how we process your personal information with the supervisory authority in your country. We would, however, appreciate the chance to deal with your concerns before you approach your local supervisory authority so please contact us in the first instance.

10. California privacy rights

If you are a California Consumer, you have certain rights with respect to the collection, use, transfer, and processing of your “Personal Information”, as defined by the California Consumer Privacy Act (CCPA). We reserve the right to limit these rights where permitted under applicable law, including where your identity cannot be reasonably verified or to the extent your rights adversely affect the rights and freedoms of others. To exercise any of the rights below, please contact us via the contact information below. Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information.

In the preceding 12 months, we have not sold Personal Information about consumers.
In the preceding 12 months, we have not sold Personal Information about minors.

Individual Rights

Right to Know About Personal Information Collected, Disclosed, or Sold
You have the right to request that Firmenich disclose the Personal Information it collects, uses, and discloses about you to third parties. There are two types of Right to Know requests you can make:

1. Right to Know (Abbreviated Request): If you make a Right to Know (Abbreviated Request), you will receive the following information about you:
a. Category of Personal Information collected in the past twelve months,
b. Categories of sources from which that information was collected,
c. The business or commercial purpose(s) for which the information was collected,
d. The categories of third parties with whom Personal Information has been shared, and
e. The business or commercial purpose for which Firmenich sold or disclosed the category of Personal Information.

2. Right to Know (Specific Pieces of Information Request): If you make a Right to Know (Specific Pieces of Information Request), you will receive the following information about you:
a. Specific pieces of Personal Information collected about you.

This information will be provided to you free of charge, unless Firmenich determines that your request is manifestly unfounded or excessive. You may request this information twice in a 12-month period.

Right of Deletion

You have the right to request that Firmenich and our service providers delete any Personal Information about yourself that Firmenich has collected from you upon receipt of a verifiable request. This right is subject to exceptions.

Right to Opt Out of the Sale of Information
California Consumers have the right to opt-out of the sale of Personal Information by a business that sells Personal Information. Firmenich does not sell any Personal Information of California Consumers.

Submitting Requests
You may submit a request through email at data.privacy@firmenich.com or by telephone (toll free) at 1-833-771-0298.

Verifying Requests
Firmenich provides California Consumers with the ability to submit requests through our request website, our telephone number, and our email address. Firmenich must verify that the person requesting information or deletion is the California Consumer about whom the request relates in order to process the request. To verify a California Consumer’s identity, we may request up to up to three pieces of Personal Information about you when you make a request to compare against our records. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity. Making a verifiable consumer request does not require you to create an account us. We will with only use Personal Information provided in your request to verify your identity and will delete any information you provide after processing the request. Firmenich reserves the right to take additional steps as necessary to verify the identity of California Consumers where we have reason to believe a request is fraudulent.

Authorized Agent
Consumers may use an authorized agent to submit their request. The authorized agent must be registered with the California Secretary of State and be authorized to submit requests on behalf of a consumer. If you are an authorized agent and a consumer has given you signed permission to submit a request on his or her behalf, please send a copy of your signed permission by the consumer to Firmenich. Failure to submit proof of signed permission may result in Firmenich denying the consumer’s request. Firmenich will require the consumer to verify his or her identity and directly confirm with Firmenich that the consumer has provided you with permission to submit the request.

Right to Equal Service
Firmenich will not discriminate against you because you exercised any of your rights, including, but not limited to, by:

• Denying goods or services to you.

• Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties.

• Providing a different level or quality of goods or services to you.

• Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

11. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices and service offerings. If we modify our Privacy Policy, we will update the "Effective Date" and such changes will be effective upon posting. If we make any material changes in the way we use your personal information, we will notify you by sending an email message to the email address you most recently provided to us or by prominently posting a notice of the changes on the Website.

12. Questions

If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact data.privacy@firmenich.com

Residents of Germany: We have appointed a local data protection officer in Germany, as required by law. The German data protection officer can be contacted at: DSB-Firmenich@intersoft-consulting.com

For our Privacy Policy regarding Columbia, please refer to our policy here in English and in Spanish.