Our Commitment to Privacy

Eastman Kodak Company Statements

Updated November 1, 2024

At Eastman Kodak Company we are committed to protecting your personal information. Our pledge is to safeguard any personal information that you provide to us and to use your personal information appropriately.

Our Privacy Statements describe the types of personal information we collect, how and why we use and disclose the information, and how you can exercise your privacy choices.

This information is being provided by Eastman Kodak Company for the members of its corporate group (collectively, "Kodak"). Please contact the Kodak Privacy Office for a list of legal entity names and business names. You can contact us in writing or via email to:

Kodak Privacy Office
343 State Street
Rochester, New York 14650
privacy@kodak.com

Eastman Kodak Company Privacy Policy

This Privacy Policy explains how we handle the personal information we collect from our customers, service providers and other consumers and professionals who interact with us, such as visitors to Kodak.com and other Kodak websites.

If you are a prospective, current, or former Kodak employee, your personal information is used for customary human resources purposes. Job applicants can find our candidate privacy notice here: Privacy Notice for Job Applicants. Please contact the Kodak Privacy Office at privacy@kodak.com for more information about our HR Privacy Program or visit our privacy rights portal at Your Privacy Choices to learn how to exercise your privacy rights.

Kodak also processes personal information for customers. This information is classified as "Customer Data." Kodak collects and uses Customer Data as a service provider/contractor for our customers, subject to applicable privacy and data protection laws. As a service provider/contractor, we only collect and use personal information as authorized by our contracts with our customers. We do not use Customer Data for our own purposes. We rely on our customers to manage the privacy rights of their persons. We support our customers as needed to help them respond to such requests. Please read our Privacy Statement for Cloud Services Customers to learn more.

PLEASE NOTE: This Privacy Notice does not apply to sites hosted by unaffiliated third parties, Kodak brand licensed partners, or unaffiliated online stores that offer Kodak-branded merchandise. These companies have their own privacy policies, and questions about privacy should be directed to them.

Additionally:

Some Kodak international sites have their own country-specific privacy notices. These will be presented to you if you use these sites.
On our co-branded sites (such as those sites where Kodak has presented content together with one of our retail partners), a privacy notice unique to that site may be presented.
Private sites (such as those only available to dealers and distributors) and sites created for our employees (or prospective employees) may also have privacy notices unique to those sites.

Please check the "privacy link" on the bottom of each website to read the privacy information associated with each site. You can also contact the Kodak Privacy Office at privacy@kodak.com if you have any questions.

Our Collection, Use and Disclosure of Personal Information

"Personal Information" is any information that can be used to identify, locate, contact or target you. It also includes other information that may be associated with your name or other identifiers. The chart below describes the categories of personal information we collect, the sources of that information, the reasons we collect it, and the categories of people who receive the information from us. We may also use and disclose any personal information for our Everyday Business Purposes.

We do not sell any personal information for monetary consideration. We share personal information for online targeted advertising, including cross-contextual behavioral advertising, as indicated in the chart. You can opt-out of this sharing at any time by exercising Your Privacy Choices.

Supplier and Business to Business Information
Description	We collect "B2B" information about professionals associated with our commercial customers, suppliers and partners in the context of our relationships with these companies. This includes: Contact information, such as name, title, company address, email address, telephone number Tax ID number and other information needed for payments and tax purposes Professional affiliations, such as your employer and information about your role and authority Professional interests and credentials Information collected for supplier qualification, supplier diversity programs Preference information, including marketing and communication preferences
Sources	If you are a professional, we collect this type of information from you and from your company. We also collect B2B data from publicly available sources, such as LinkedIn, or from third parties, such as data brokers, trade associations or trade shows.
Purposes for Collecting	We use this type of information to fulfill our business relationship with you and/or our commercial partner. We also use it to develop and maintain our relationship with you, including by sending you marketing communications, personalized offers and invitations, and for our everyday business purposes, such as customer service, quality control, training, reporting and analytics, risk management and compliance.
Recipients	We may disclose this type of information to our service providers and contractors, to the company you work for, and other companies (such as your company’s affiliates and service providers) as needed for the commercial relationship, and others, such as financial institutions, auditors and government agencies. While we do not sell business customer information for monetary consideration, your information may be shared with third parties as part of our online advertising programs. You can opt out of this sharing by exercising Your Privacy Choices.
Consumer Relationship Information
Description	We collect personal information about consumers in the context of our direct relationships with them. This includes: Contact information, such as your name and email address Personal characteristics, such as your language, and product preferences Communications, marketing and privacy preferences Loyalty and rewards program data, Data from social media sites, such as LinkedIn, Facebook, Instagram, and X
Sources	We collect this type of information from you and from other sources, such as your social media platforms. We may collect additional information from companies that provide information that helps us understand our customers, including data brokers and public records providers. We may also infer information about you based on information that you have given us and your past interactions with us and other companies.
Purposes for Collecting	We use this type of information to better understand you and to understand our customers in general to design products, services and programs that appeal to our customers, including loyalty programs, to identify prospective customers and for everyday business purposes, such as marketing, quality control, training and analytics.
Recipients	We disclose relationship information to our service providers and contractors as well as to authorized dealers, such as if you ask to be added to a purchase waitlist. As permitted by law, we may disclose relationship information to marketing partners, brand licensors and companies with whom we have similar relationships. While we do not sell relationship information for monetary consideration, the information may be shared with third parties as part of our online advertising programs. You can opt out of this sharing by exercising Your Privacy Choices.
Transaction Information
Description	We collect transaction information from customers and suppliers when they engage with us. Transaction information includes customer and supplier account information, qualification data, purchase history and related records (returns, records of payments, credits etc.). It also includes records related to use of our websites and apps, such as records of usage, downloads and in-app purchases, and customer service records and logs, such as visitor logs, server logs, and similar records.
Sources	We collect this type of information from you and (if you are a professional) from your company. We receive this type of information from our service providers and contractors and from other companies, such as our payment processors, resellers or agents. We also collect this information automatically when you visit our facilities or use our websites or apps. For example, our apps automatically log access requests, downloads and other transactions.
Why We Collect It	We use transaction data to fulfill our business relationship with you and/or your company, including for customer service, recordkeeping, compliance, and dispute resolution, and to administer programs, such as promotions and influencer programs. We also use this information for our internal business purposes, such as finance, quality control, training, reporting and analytics, and for risk management, fraud prevention and similar purposes.
Categories of Recipients	We disclose transaction information to our service providers, contractors and others, such as to other entities as needed to complete the transaction, including delivery companies, agents and manufacturers, and to our auditors, financial institutions, and government agencies. If you are a professional, we may disclose this information to your company.
Online & Technical Information *Please read our* *Cookies & Online Privacy Statement* *for additional information.*
Description	When you visit a Kodak website or use our mobile applications, we collect certain information by automated means, using technologies such as cookies, pixel tags, browser analysis tools, server logs and web beacons. This information includes your IP address, device identifiers and other information about devices that connect to our networks, system and server logs, including access logs, and data from cookies, pixel tags or other online tools.
Sources	We collect this type of information from your computer or device when you interact with our platforms, websites and applications. For example, when you visit our websites, our server logs record your IP address and other information. We may also receive this information from third parties, including computer security services and advertising partners.
Why We Collect It	We use technical information for system administration, technology management, including optimizing our websites and applications, and for information security and cybersecurity purposes, including detecting threats to our networks and systems. We also use online and technical information for personalization, to better understand our customers and prospective customers and to enhance our relationship information, including by associating you with different devices and browsers, and for online targeting and advertising purposes.
Categories of Recipients	We may disclose this type of information to our service providers and contractors, and others such as companies that support our information technology and cybersecurity programs. We do not share precise geolocation data, but other Online and Technical Information may be shared with third parties as part of our online advertising programs. You can opt out of this sharing by exercising Your Privacy Choices.
Audio Visual Information
Description	When you interact with Kodak via videoconference or telephone, we may collect video images, videoconference transcripts, call center recordings and voicemails. We also use CCTV to capture recordings within our facilities.
Sources	We collect this type of information from you and from publicly available sources, such as social media sites. We may also collect this information automatically, such as when we and our service providers record calls to our call center and use CCTV cameras in our facilities.
Why We Collect It	We use this type of information for internal business purposes, such as call recordings used for training, quality control, and compliance. We also use this data for relationship purposes, such as use of photos and videos for social media purposes or sentiment analytics, and for security purposes and loss prevention.
Categories of Recipients	We may disclose this type of information to our service providers and contractors that support our information technology, security, and loss prevention programs. We may also disclose this type of information to those partners that provide audio processing services, who may also use it for their internal business purposes.
Children’s Data	We do not knowingly collect personal information of children under 16.
Compliance Data
Description	We collect personal information in connection with our compliance programs. For example, we collect data needed to demonstrate compliance with applicable laws, including: Records to demonstrate compliance with tax laws, product safety laws, licensing laws, etc. Occupational and environmental health and safety records Intellectual property protection program records Records relating to complaints and internal investigations Records related to the exercise of privacy rights Records related to security incidents, including any breach notifications
Sources	We collect compliance data from you and from our providers, contractors, and others, such as screening companies service, investigators, legal advisors and government agencies. For example, Kodak employs technology and uses public watch list data obtained from Descartes Systems Group to screen all export orders in compliance with U.S. Federal and International rules and regulations regarding export controls for denied and restricted parties. We may generate compliance records internally, such as when we document a workplace event.
Why We Collect It	We use compliance data for internal governance, corporate ethics programs, institutional risk management, reporting, demonstrating compliance and accountability externally, and as needed for litigation and defense of claims.
Categories of Recipients	We disclose compliance to our service providers, contractors and others, such as auditors, investigators, lawyers, advisors, government agencies and others as required by law.

The categories of personal information described above include the following categories of sensitive personal information. Kodak does not sell or share any sensitive personal information for online targeted advertising.

Category of Sensitive Personal Information	Purposes for Use and Disclosure	Can I limit this Use and Disclosure?
Government-issued Identification Numbers	We use and disclose government-issued identification numbers in connection with payments made to individuals for tax reporting and compliance.	No
Account log-in credentials	We use and disclose account access information as needed to allow you to access your account, for account security purposes.	No
Financial account numbers Payment card numbers	We use and disclose financial account and payment card numbers as needed to process transactions.	No
Precise Geolocation data	If you authorize our use of precise geolocation data in our mobile apps, we will use it to deliver content to you based on your location.	Yes, you can disable sharing location data with us by changing the setting on your mobile device
Non-publicly available information about (a) racial or ethnic origin, religious or philosophical beliefs or union membership (b) health, or (c) sex life or sexual orientation	We may use and disclose sensitive personal information voluntarily provided to us, such as in connection with our supplier diversity programs.	Yes, by visiting our rights portal at Your Privacy Choices.
Health Information and "Consumer Health Data" (including Neural Data)	We use and disclose health information as needed for occupational health and safety and to accommodate disabilities.	No

We do not collect biometric data or the contents of mail, email or texts (unless we are a party to the communication).

Please note that we may also use and disclose information about you that is not personally identifiable. For example, we may publish reports that contain de-identified, aggregated or statistical data. These reports and products do not contain any information that would enable the recipient to contact, locate or identify you. We may also process pseudonymized data for our internal business purposes.

Collection of Personal Information by Third Parties

In most cases, Kodak only allows third parties to control the collection of personal information when those third parties are acting as service providers or contractors to us. For example, we have service providers that operate Kodak websites and that provide other services on our behalf. These companies only retain, use and disclose your personal information in accordance with our contracts and applicable law. However, we may allow third parties to control collection of personal information for their own purposes in the following situations:
- As disclosed above, Kodak’s websites allow third party advertising partners to utilize cookies, web beacons or other technologies to deliver ads to you on our sites and to deliver our advertisements to you. Please read our Cookies & Online Privacy Statement below to learn more.
- We and our partners may collect personal information in the course of providing customer service and support via chat and call center technology, and we may use the information and contents of your messages to communicate with you and improve our services.
- Our websites offer you the opportunity to engage directly with third parties, such as our authorized dealers. We will only share your personal information with these third parties with your consent, such as if you ask to be added to a product waitlist.
- We may engage market research firms to collect data for us. If you participate in a market research program, the third party will provide you with its contact information and privacy notice before you are asked to provide any personal information to it.

Your Privacy Rights and How to Exercise Them

Kodak respects your rights to access, correct and request deletion of your personal data as required by law. Depending on your country or state or residence, these rights may include:
- The right to be informed about our collection, use and disclosure of your personal information,
- The right to know if we maintain your personal information, and if we do, to access that information (subject to the rights of others) and to request that we provide your information in a portable format,
- The right to ask us to correct your information if it is incomplete or incorrect,
- The right to ask that we delete your personal information, and
- The right to object to our processing of your personal information, including the rights to object to:
  - the sale of your personal information,
  - the sharing or use of your personal information for certain types of online targeted advertising,
  - the use of profiling or automated decision-making which might significantly affect you,
  - certain secondary uses and disclosures of sensitive personal information, and, if we are processing your personal information based on your consent, to withdraw your consent at any time.
To learn more about the specific rights that you have and to exercise your rights, please visit our privacy rights portal at Your Privacy Choices. You can also contact the Kodak Privacy Office at privacy@kodak.com.

Please understand that these rights are subject to some limitations. For example, we may require documentation to support certain corrections to your information, and we generally cannot delete personal information when retention is required for our internal business purposes or to comply with law.

We will not retaliate against you if you exercise your privacy rights.
Analytics, Profiling and Automated Decision-Making

We may use analytics to understand how individuals interact with our products, websites and apps. These analytics products allow us to improve our products and give us insights for product development and personalization. We also use analytics for security and fraud prevention. We do not use profiling or automated decision-tools to make decisions that produce legal or similarly significant legal effects for you; any such decisions are subject to human review.
Information Security

We have an information security program that is reasonably designed to protect the confidentiality and security of all the personal information that is entrusted to us. Our security safeguards protect against unauthorized access, improper use, alteration, destruction or accidental loss. Our service providers and data processors are also required to implement appropriate security controls by our contracts.
Data Retention

We will retain your personal information for as long as the information is needed for the purposes listed above and for any additional period that may be required or permitted by law, such as for business, legal, accounting, or reporting requirements. The length of time your personal information is retained depends on the purpose(s) for which it was collected, how it is used, and the requirements we have under applicable laws. If you would like us to delete your personal information, please see Your Privacy Choices for information about how to submit a deletion request. If we do not have a legal basis for retaining your information, we will delete it as required by applicable law.
International Transfers of Personal Information

Kodak is a global family of companies, headquartered in the United States. Your personal information may be processed or stored in the US and countries which may not have equivalent privacy or data protection laws. However, regardless of where your personal information is transferred, we will protect it in accordance with this Privacy Policy and applicable law.

Where required, we use approved Standard Contractual Clauses and other approved data transfer mechanisms to assure that personal data is adequately protected. Please contact the Kodak Privacy Office at privacy@kodak.com if you would like more information about cross-border transfers or to obtain a copy of any applicable Standard Contractual Clauses.
Links to Other Websites

Our websites contain links to other websites operated by companies that are not affiliated with Kodak, such as our partners and brand licensees. When you interact with another company though these links, that company’s own policy will govern the personal information that you provide. We suggest you review each company’s privacy policies before you submit personal information to them. We are not responsible for the privacy practices of these companies.
Updates to our Privacy Policy

We may update this Privacy Policy from time to time. We use good faith efforts to post information about material changes at least 30 days before they come into effect.

[1] We may use and disclose any personal information for our “Everyday Business Purposes” as permitted by law. Our Everyday Business Purposes include the Business Purposes (as defined by California law) and following related purposes:

To provide the information, product or service you requested or as reasonably expected given the context (such as for customer credentialing, customer service, providing product updates, bug fixes or recalls, and dispute resolution)
For product development, research and analytics
For identity and credential management, including identity verification and authentication, and technology administration
To protect the security and integrity of systems, networks, applications and data, including detecting, analyzing and resolving security threats, and collaborating with cybersecurity centers and law enforcement about threats
For fraud detection and prevention,
For legal and regulatory compliance, including all uses and disclosures of personal information that are required by law or for compliance with company policies and procedures, such as: anti-money laundering programs, security and incident response programs, intellectual property protection and anti-piracy programs, and ethics and compliance hotlines,
To enforce our contracts and to protect against injury, theft, legal liability, fraud or abuse, to protect people or property, including physical security programs
For corporate audit, analysis and reporting and transactions (such as mergers, acquisitions and similar events), and
To de-identify the data or create aggregated datasets, such as for consolidating reporting, research and analytics.

Our Commitment to Privacy

Contents

Eastman Kodak Company Privacy Policy