California Privacy Rights Act (CPRA) Privacy Policy

Effective: January 1, 2023

Last Updated/Reviewed: June 28, 2023

The California Privacy Rights Act (CPRA) gives you specific rights regarding your Personal Information. These include:

• The right to know what Personal Information the Company has collected about you.
• The right to know what Personal Information the Company has disclosed to third parties.
• The right to delete Personal Information we have collected, with certain exceptions.
• The right to correct inaccurate Personal Information we maintain about you.
• The right to non-retaliation if you choose to exercise your CPRA rights.
• Where Batory Foods Collects Information

Batory Foods (“Batory” or “the Company”) may collect your Personal Information from:

1. You directly.
2. Prior employers, references, recruiters, and job-related social media platforms.
3. Third-party sources of demographic information.
4. Third-party service providers, such as background check or drug testing companies.
5. Claim administrators and investigators.
6. Unions (for union employees).

Categories of Personal Information Collected

Depending on your relationship with Batory, we may collect:

• Identifiers: name, alias, employee ID, Social Security Number, government-issued IDs.
• Contact information: address, phone number, email.
• Financial information: bank account, credit/debit card numbers, account log-ins with security credentials.
• Demographic and sensitive information: racial or ethnic origin, religious or philosophical beliefs, union membership, genetic data, biometric identifiers, health information, sex life or sexual orientation.
• Protected classifications under California or federal law: race, color, national origin, disability, marital status, gender identity, sexual orientation, age (40+), veteran status, reproductive health decisions.
• Commercial information: purchase history, reimbursements, transaction records.
• Internet/network activity: browsing history, use of Company systems, credentials used on Company devices.
• Geolocation data: device location from Company devices.
• Biometric data: access to secure facilities.
• Audio/visual/electronic data: security footage, call recordings.
• Employment information: work history, education, prior employers.
• Education information: non-public education records.
• Communications: contents of mail, email, and text messages (unless the Company is the intended recipient).
• Inferences: profiles or summaries of preferences, behaviors, or characteristics.

The Company does not sell or share Personal Information with third parties, nor do we knowingly sell or share the Personal Information of consumers under 16.

 

How We Use Personal Information

We use Personal Information to support business operations and employee needs, including:

• Operating, managing, and maintaining our business.
• Hiring, retention, and employment administration (e.g., payroll, benefits, access to facilities).
• Identifying employees (including biometric authentication).
• Protecting health and safety.
• Detecting, preventing, and investigating fraud or illegal activity.
• Providing services or goods you reasonably expect.
• Ensuring quality, safety, and performance of our products and services.
• Conducting research, analytics, and data analysis.
• Complying with law, legal processes, and internal policies.
• Maintaining records and handling claims.
• Performing audits, risk assessments, and security monitoring.
• Supporting internal operations such as accounting, HR, and IT.

We do not use Personal Information for purposes beyond those listed here.

Disclosure of Personal Information

Batory may disclose Personal Information to:

• Government entities (tax agencies, law enforcement).
• Employment-related third parties (background check companies, benefit providers, HR platforms, payroll services).
• Customer listing or marketing service providers.
• Insurance providers.
• Claim administrators and investigators.
• Unions (for union employees).

Disclosures are made only for the same business purposes listed above.

Your Rights Under the CPRA

Right to Know

You may request details about:

• The categories of Personal Information we collect.
• The sources of that information.
• The business purposes for collecting or disclosing it.
• The categories of third parties who receive it.
• The specific pieces of Personal Information collected about you.

Right to Delete

You may request deletion of your Personal Information, unless retention is necessary to:

• Complete a transaction.
• Ensure security and integrity.
• Debug or repair systems.
• Exercise free speech or comply with the law.
• Support internal uses consistent with your relationship with the Company.
• Comply with a legal obligation.

Right to Correct

You may request correction of inaccurate Personal Information.

Right to Non-Retaliation

Batory will not discriminate against you for exercising your CPRA rights.

How to Submit a Privacy Request

If you would like to submit a Request to Know, Delete, or Correct, use one of these options:

1. Online Form (preferred method): Submit through our Data Privacy Request Portal . Select the appropriate request type (Know, Delete, Correct).
2. By Phone: Call us at 800-367-6597.

Verification: We will verify your identity using information already on file. If additional details are needed, we will use them only for verification or lawful purposes. Authorized agents may submit requests on your behalf through the online form.

Updates

We review and update this CPRA Privacy Policy every 12 months.

This Policy was last updated on June 28, 2023.