Illinois Tool Works Inc. (“ITW,” “we,” “us,” or “our”) respects your privacy and is committed to following the data protection laws that apply to us. This Privacy Statement describes the information we collect, how we use and share it, and your rights with respect to it. This Privacy Statement applies to any information we collect or maintain about you, including (1) personal information that you provide to us on ITW.com (“Website”) and other websites, applications, communications, and online services that link to this Privacy Statement (collectively with the Website, the “Website and Online Services”), (2) information collected through your use of or interaction with the Website and Online Services, (3) information obtained from our approved partners and other reliable third-party sources, (4) information collected offline (e.g., if we collect you resume during a job fair), and (5) information collected through a call center. This Privacy Statement also explains the use of cookies and similar technologies on the Website and Online Services (see PASSIVE INFORMATION COLLECTION below).
This Privacy Statement applies only to the Website and Online Services that link to this Privacy Statement – not to any third-party sites that may be accessible from the Website and Online Services.
In this policy:
- Information we collect from you and how we use it
- Information we collect from other sources
- Choices you have about how we use your information
- How we protect your information
- How you can contact us
- Changes in the Privacy Statement
- California Residents
- European Economic Area Residents
1. Information we collect from you and how we use it
Your Consent
By using, visiting, or interacting with the Website and Online Services or providing personal information to us through your use of the Website and Online Services, you are consenting to the collection, use, and disclosure of your personal information described in this Privacy Statement.
If you do not consent to the collection, use, and disclosure of your personal information as described in this Privacy Statement, do not use the Website or contact us as described in Section 5 below.
Active Information Collection
Like many other websites, we actively collect information from our visitors by permitting you to communicate directly with us via Investor Relations “Email Notifications” forms, recruiting and employment forms, or other methods made available to you on our Website and Online Services. Some of the information that you submit may be personal information (that is, information that can be uniquely identified with you, such as your name, address, e-mail address, phone number, etc.). We use this information for the purposes for which you provide it and for any other purpose described at the time information is submitted by you, as otherwise set forth in this Privacy Statement, or as permitted or required by applicable law.
We generally collect and use personal information provided to us on the Website and Online Services for the following purposes:
- to respond to your inquiries;
- to allow individuals to apply for employment with us;
- to authenticate identity for privacy-related requests;
- to ensure the efficiency, reliability, and security of our systems;
- to meet legal and regulatory requirements and to allow us to meet contractual requirements relating to our products and services;
- to understand and assess the interests, wants, and changing needs of Website visitors with a view to improving our products and services and developing new ones; and
- to notify Website visitors about changes to the Website and Online Services.
Passive Information Collection
Some of the information we collect depends on the settings on your web browser or mobile device. Please check your web browser or mobile device if you want to learn what information your browser or mobile device sends or how to change your settings. In addition to the information sent by your web browser or mobile device, as you navigate through a website or mobile app, certain information can be passively collected (that is, gathered without you actively providing the information) using various technologies and means, such as navigational data collection.
Like most website operators, we and our approved partners use cookies and similar technologies, local shared objects (or any other successor tracker technology), Software Development Kits, and pixel tags that automatically receive and track certain data about how you and other visitors interact with our Website and Online Services, preferences expressed, and settings chosen. For example, we may collect information about the technology you use (such as browser, type of computer, operating systems, mobile device and network used, and Internet service providers) and server log data (such as access dates and times, online features or pages viewed, system activity, and the third-party site or service you were using before interacting with our Website). These technologies are described in more detail below.
“Cookies” are small text files that are stored on your browser or device by websites, mobile apps, online media, and advertisements. There are different types of cookies. Cookies served by the entity that operates the website or app you are visiting or using are called “first party cookies” (so cookies served by us while you are using our Website are first party cookies). Cookies served by companies that are not operating the website or app you are visiting or using are called “third party cookies” (so, a website analytics provider may set a cookie on your computer via our Website while you visit our Website). Cookies may also endure for different periods of time. “Session Cookies” last only as long as your browser or app is open. These are deleted automatically once you close your browser or app. Other cookies are “persistent cookies” meaning that they survive after your browser or app is closed (for example, they may recognize your computer when you re-open our online services).
“Local shared objects” (also called Flash cookies or HTML5 cookies) and any other successor technology refers generally to the collection of cookie-like data stored on a browser or computer by web sites, ads, or third parties. “Pixel tags” (also called beacons or pixels) are small blocks of code installed on (or called by) a web page, app, or advertisement which can retrieve certain information about your device and browser, including device type, operating system, browser type and version, web site visited, time of visit, referring web site, IP address, and other similar information (including the small text file (the cookie) that uniquely identifies the device). Pixels provide the means by which third parties can set and read browser cookies from a domain that they do not themselves operate and collect information about visitors to that domain, typically with the permission of the domain owner. “Software Development Kits” (also called SDKs) function like pixels and cookies but operate in the mobile app context where pixels and cookies cannot always function. The primary app developer can install pieces of code (the SDK) from partners in the app, thereby allowing such partners to collect certain information about user interaction with the app, information about the user device, and network information.
In this Privacy Statement, these and similar technologies are collectively referred to as “cookies and technologies.” The following table sets out the different categories of cookies and technologies that our Website and Online Services may use and why we use them:
Cookie Types:
Strictly Necessary Cookies
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personal identifiable information.
Performance Cookies
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
Functional Cookies
These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
Targeting Cookies
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Social Media Cookies
These cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.
2. Information we collect from other sources
We may also receive information from other sources and combine it with information we collect through our Website and Online Services. For example, we may obtain information about you from commercially available sources such as data aggregators and public databases (for example, job applicant information received from LinkedIn in connection with our hiring decisions). This information may include your name, demographic information, interests, and public data (such as social media and shopping behavior).
Retention of personal information
We retain the personal information collected on the Website and Online Services as long as necessary to provide the services, products, and information you request or as permitted by applicable law.
Disclosure of personal information
We will not sell or otherwise disclose personal information collected from the Website and Online Services to any third person, except as permitted by this Privacy Statement, as permitted or provided by applicable law, or with your consent.
We may disclose personal information you provide to us via this Website and Online Services or that we collect through your use of the Website and Online Services as follows:
- to affiliates, business partners, service providers, and contractors who support our business, in which case we will limit the amount of information disclosed to that which is necessary in order for them to provide the services or products we have engaged them to provide. We will strive to protect personal information rendered accessible by contractual agreements requiring confidentiality and security practices that help keep data inaccessible to others;
- to respond to law enforcement requests, where required by applicable laws, court orders, or governmental regulations;
- in the event of a sale, merger, liquidation, dissolution, reorganization, assignment, or other transfer of our business to which the information relates, in which case we will require any such buyer to agree to treat it in accordance with this Privacy Statement and use it for the same purposes as we are entitled to do so under this Privacy Statement; and
- to report to law enforcement agencies any activities that we, in good faith, believe to be unlawful, and in situations involving threats of physical safety of any person or when we believe that disclosure is reasonably necessary to protect our rights and property.
We are not liable for disclosure of information obtained due to errors in transmission or the unauthorized intervention of third parties.
We may provide aggregate statistics about our customers, sales, online traffic patterns, and related information to reputable third parties, but these statistics will not include any personally identifying information.
We may transfer the information described in this Privacy Statement to, and process and store it in, the United States and other countries, some of which may have less protective data protection laws than the region in which you reside. Where this is the case, we will take appropriate measures to protect your information in accordance with this Privacy Statement. Nonetheless, your personal information may be subject to foreign laws and may be accessible by foreign government authorities, courts, law enforcement, and regulatory agencies.
3. Choices you have about how we use your information
We strive to provide you with as many choices and as much control as possible regarding the personal information we collect about you.
You may send us an e-mail message at privacy@itw.com to request access to, correct, or delete any personal information that you have provided to us. To protect your privacy, we will only respond to e-mail messages sent from the e-mail account you used to set up your account.
You have the right to opt-out of promotional communications we send you at any time. You can exercise this right by clicking on the ‘unsubscribe’ or ‘opt-out’ link in the promotional e-mails we send you.
If you do not wish for us to collect cookies, you may set your browser to refuse cookies, or to alert you when cookies are being sent. If you do so, please note that some parts of this Website may then be inaccessible or not function properly. Removing or rejecting browser cookies does not necessarily affect third-party Flash cookies (see “Local shared objects” above) which may be used by us or our partners in connection with our Website and Online Services. You may need to take additional steps to delete or disable Flash cookies.
You can also generally opt-out of receiving personalized ads from third party advertisers and ad networks that honor such requests by visiting: www.aboutads.info/choices (if you are in the United States), http://youradchoices.ca/choices/ (if you are in Canada), or http://youronlinechoices.eu/ (if you are in Europe).
DO NOT TRACK: Some web browsers may transmit “do-not-track” signals to websites with which the browser communicates. Our Website and Online Services do not currently respond to these “do-not-track” signals.
4. How we protect your information
We work hard to protect your personal information. All information collected through the Website and Online Services is stored within a secured database that is not accessible to the outside world. Resumes are stored on file systems that are not publicly accessible. Our servers are protected behind both hardware and software firewalls. Low-level access to information is restricted to authorized support personnel only.
The safety and security of your information also depends on you. Never share passwords with anyone else and remember to log off this Website before you leave your computer.
Our Website and Online Services contain links to other websites operated by third parties that may be of interest to you. We cannot control these third-party sites, which may collect personal information from you. When you follow a link and leave this Website or Online Service, you do so at your own risk. We encourage you to read that third party’s privacy Statement or contact them directly regarding their privacy practices.
What we do about children visiting this website:
This Website is not intended for children under the age of 13. We will not knowingly collect information from Website and Online Services visitors in this age group. We encourage parents to talk to their children about their use of the Internet and the information they disclose online. If your child has submitted personal information and you would like to request that such information be deleted from our records, you may do so by writing us at the address in Section 5 below.
5. How you can contact us
If you have any questions, comments, or concerns about this Privacy Statement, our information practices, our Website and Online Services, or our service providers, contractors, and business partners, please contact us at the information below and address your request to:
Illinois Tool Works Inc.
155 Harlem Avenue
Glenview, IL 60025
Toll-Free: 1-844-676-0349
privacy@itw.com
6. Changes in the Privacy Statement
We reserve the right to update or modify this Privacy Statement, at any time and without prior notice, by posting the revised version of this Privacy Statement on this Website. If we modify this Privacy Statement, the modifications will only apply to personal information we collect after we have posted the revised Privacy Statement on this Website.
7. California Residents
The California Consumer Privacy Act of 2018 (CCPA) gives California residents rights about the personal information we collect, use, or disclose about you (subject to certain exceptions):
Right to Notice: Before or at the time we collect personal information from you, you have the right to receive notice of the personal information to be collected and the purposes for which we use it. The Supplemental Notice for California Residents attached to this Privacy Statement is intended to satisfy this requirement. You also have the right to request that we disclose to you the categories of personal information we have collected about you in the preceding 12 months, along with the categories of sources from which the personal information was collected, the purpose for collecting or selling the personal information, the categories of third parties with whom we shared the personal information, and the categories of third parties with whom we sold the personal information.
Right of Access: You have the right to request that we disclose or provide you with access to the specific pieces of personal information we have collected about you in the preceding 12 months.
Right to Deletion: You have the right to request that we delete the personal information we collect from you. However, in certain situations we are not required to delete your personal information, such as when the information is necessary in order to complete the transaction for which the personal information was collected, to provide a good or service requested by you, to comply with a legal obligation, to engage in research, to secure our Website and Online Services, or to otherwise use your personal information internally in a lawful manner that is compatible with the context in which you provided the information.
Right to Opt-Out of the Sale of Personal Information: We do not sell your personal information. If we sold your personal information to third parties, you would have the right, at any time, to direct us not to sell your personal information.
Right Not to Be Subject to Discrimination: You have the right to be free from discrimination or retaliation for exercising any of your rights under the CCPA as described above.
To exercise any of the rights described above, you can call us toll-free at 1-844-676-0349 or email us at privacy@itw.com. California residents who are unable to review or access this Privacy Statement, including the Supplemental Notice for California Residents, due to a disability may contact privacy@itw.com to access this Privacy Statement in an alternative format.
We value the security and confidentiality of your personal information. Therefore, if you exercise your right to notice, access, or deletion, we must first verify your identify to make sure that you are the person about whom we have collected personal information. We verify every request carefully and ask that you provide a scanned copy of a government ID along with your request for verification purposes.
Privacy Statement
Supplemental Notice for California Residents
Why:
This Supplemental Notice for California Residents provides certain information required under the California Consumer Privacy Act of 2018 (CCPA) and applies to both our online and offline activities involving personal information about California residents. This Supplemental Notice is incorporated into and a part of our Privacy Statement. For more information about our collection, use, and disclosure of information, as well as your rights under the CCPA, please review our Privacy Statement.
What:
The personal information that we collect or disclose depends on your relationship and interaction with us. Please select the category that applies to your relationship or interaction with us: Applicants, Employees and Contractors, Website Visitors. If you interact with us in more than one way, please review each category that applies to you.
In addition to the information described below, we collect and disclose any and all personal information (regardless of your relationship or interaction with us) as necessary or appropriate to: comply with laws and regulations; Investigate and enforce compliance with and potential breaches of our policies and legal and regulatory requirements; comply with civil, criminal, judicial, or regulatory inquiries, investigations, subpoenas, or summons; and exercise or defend our legal rights and those of our employees, affiliates, customers, contractors, and agents.
Personal Information
In this Supplemental Notice, “personal information” (or “PI”) means any information that identifies, relates to, describes, or is capable of being associated with you or your household, whether directly or indirectly. Here are the definitions of some of the categories of personal information we collect, use, and share about California consumers that are not otherwise defined below:
- Identifiers: Identifiers, such as real name, alias, postal address, unique personal identifier, online identifier, internet protocol (IP) address, email address, account name, social security number, driver’s license number, passport number, photographs, or other similar identifiers.
- Network Activity Data: Internet or other electronic network activity information, such as browsing or search history, and information regarding an individual’s interaction with an internet website, application, or advertisement.
APPLICANTS
Categories of PI Collected and Purposes for collecting or Sharing PI:
Identifiers – To evaluate a potential employment or contractor relationship, perform background checks and verify past employment, educational history, and qualifications, determine potential compensation and benefits, assess your fitness and physical capacity for work, communicate with you about your application.
Medical Information, including medical history, mental or physical condition, or treatment – After an offer, to assess your fitness and physical capacity for work.
Demographic Information protected under California or federal law, such as race, gender, disability, and religion – Filing of state or federal government-mandated reports and evaluating diversity and inclusion initiatives.
Job history, professional skills, and educational background – To evaluate a potential employment or contractor relationship.
EMPLOYEES AND CONTRACTORS
Categories of PI Collected and Purposes for collecting or Sharing PI:
Identifiers:
- Compensation and benefits.
- Management of your job performance.
- Communication with you/your designated emergency contacts in the event of illness, absence, natural disaster, etc.
- Authentication of your identity and access to Company systems, networks, databases, equipment, and facilities.
- Workforce management, including personnel planning, productivity monitoring, and evaluation.
- Tracking and administering training.
- Monitoring and securing Company systems, networks, databases, confidential information, equipment, facilities.
- Arranging work-related travel, events, and meetings.
- Assessing your fitness for work, and other occupational medicine purposes (including work-related injury and illness).
Health insurance information, including claims history
- Benefits planning and administration.
Financial information, including bank account number
- Compensation and benefits administration.
Medical Information, including medical history, mental or physical condition, or treatment
- Assessing your fitness for work, and other occupational medicine purposes (including work-related injury and illness).
Demographic Information protected under California or federal law, such as race, gender, disability, and religion
- Filing of state or federal government-mandated reports.
- Evaluating diversity and inclusion initiatives.
Job history, professional skills, and educational background
- Management of your job performance.
Internet activity on Company computers or Company phones, such as browsing history and search history.
- Monitoring and securing Company systems, networks, databases, confidential information, equipment, facilities.
- Management of your job performance.
WEBSITE VISITORS
Categories of PI Collected: Identifiers
Sources of PI: Website visitor
Purposes for Collecting or Sharing PI:
- For our everyday business purposes such as to process your requests, inquiries, or other communications.
- Ad impressions and determining unique visitors to our website.
- To help maintain the security of our website and business, and to detect security incidents and other fraudulent activity.
- To monitor and improve our website functionality and personalize your website experience.
- For marketing purposes, to deliver content and product and service offerings, including targeted ads.
Third Parties to Whom We Disclose PI: N/A
Third Parties to Whom We Sell PI: N/A
Categories of PI Collected: Network Activity Data
Sources of PI: Website visitor
Purposes for Collecting or Sharing PI:
- Ad impressions and determining unique visitors to our website.
- To help maintain the security of our website and business, and to detect security incidents and other fraudulent activity.
- To monitor and improve our website functionality and personalize your website experience.
- For marketing purposes, to deliver content and product and service offerings, including targeted ads.
Third Parties to Whom We Disclose PI: N/A
Third Parties to Whom We Sell PI: N/A
8. European Economic Area Residents
Data Controller
ITW Fastener Products GmbH
Am Pulverhäuschen 7
67677 Enkenbach-Alsenborn
Data Protection Officer
Data Protection Officer
c/o ITW Fastener Products GmbH
Am Pulverhäuschen 7
67677 Enkenbach-Alsenborn, Germany
Email: datenschutz@itwfasteners.com
General Information on Data Processing
We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other relevant data protection regulations. This Privacy Policy informs you about the nature, scope, and purpose of collecting and using personal data in the context of job applications, customer relationships, and business partnerships.
Data Processing of Applicants
Purpose of Processing:
- Execution of the application process
- Communication with applicants
- Documentation of selection procedures
- Defense against potential legal claims related to the application process
Types of Data Processed:
- Master data (name, contact details)
- Application documents (cover letter, résumé, certificates, etc.)
- Qualifications, potentially health-related data (if relevant to the position)
Legal Basis:
Art. 6(1)(b) GDPR (pre-contractual steps)
Sec. 26 BDSG (data processing in the employment context)
Art. 6(1)(c) GDPR (legal obligation), Art. 6(1)(f) GDPR (legitimate interests)
Art. 6(1)(a) GDPR (consent)
Retention Period:
Data is retained for a maximum of six months after completion of the application process, unless an employment relationship is established. Longer retention may occur to protect our legitimate interests under Art. 6(1)(f) GDPR, especially for the defense of legal claims related to the application process (e.g., based on the German General Equal Treatment Act – AGG).
If you consent to being included in an applicant pool, data will be retained according to the duration specified in the consent.
Data Processing of Customers and Business Partners
Purpose of Processing:
- Initiation, execution, and settlement of contractual relationships
- Communication
- Accounting and invoicing
- Legal obligations (e.g., tax-related retention duties)
Types of Data Processed:
- Contact and address data
- Contractual content, payment details
- Communication records
- Contact persons’ data within your company, if applicable
Legal Basis:
- Art. 6(1)(b) GDPR (performance of a contract)
- Art. 6(1)(c) GDPR (legal obligation)
- Art. 6(1)(f) GDPR (legitimate interest)
Our legitimate interests include responding to your inquiries and defending against potential legal claims.
Retention Period:
Retention periods depend on the purpose for which the data is processed and the specific system or tool in which it is stored. It is not feasible to list all applicable retention periods in a comprehensive format. In general, data will be retained:
- As long as necessary for the respective purpose
- Beyond the duration of the business relationship if required
- In accordance with applicable legal retention obligations
- If needed for the establishment, exercise, or defense of legal claims
Disclosure to Third Parties
We only share your personal data with parties that require it to fulfill our contractual and legal duties. This may include service providers and other entities within our corporate group. Your data may specifically be shared with:
- Our parent company and affiliated companies
- IT service providers
- Waste disposal providers
- Public authorities, offices, banks
- Individuals providing goods or services to the controller (e.g., financial, tax, or legal advisors, other consultants)
- Other service providers assisting in the recruitment process
Some recipients may be located in countries outside the EU that may not provide an adequate level of data protection compared to EU standards. In such cases, data transfers are generally carried out based on EU Standard Contractual Clauses. You may request a copy of these safeguards by emailing datenschutz@itwfasteners.com.
Your Rights
You have the following rights at any time:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent with future effect (Art. 7(3) GDPR)
To withdraw consent, simply send an email to datenschutz@itwfasteners.com.
You also have the right to lodge a complaint with the supervisory authority of your choice (Art. 77 GDPR).
Obligation to Provide Data
In the context of applications, contracts, or business relationships, the provision of certain personal data is necessary. Without this data, we cannot proceed with the application process or establish a business relationship.
Automated Decision-Making
Automated decision-making or profiling does not take place.
Right to Object under Art. 21 GDPR
You have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR due to reasons arising from your particular situation. We will cease processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
You may object to the processing of your personal data for direct marketing purposes, including profiling related to such marketing, at any time and without stating reasons.
Latest revision of this Privacy Policy: April 2025
