Privacy Statement

PRIVACY NOTICE

Last Updated: September 7, 2023

This Privacy Notice explains how Crane Company (“Crane”, “we”, “us” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with our services. This Privacy Notice is not a contract and does not create any legal rights or obligations, nor is it intended to set forth our privacy practices as they relate to Crane employees.

Region-Specific Disclosures

We may choose or be required by law to provide different or additional disclosures relating to the processing of personal information about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you:

If you are a resident of the State of California in the United States, please click here for additional California-specific privacy disclosures.
If you are based in the European Economic Area (“EEA”), United Kingdom (“UK”), and Switzerland, please click here for additional EEA/UK/Swiss-specific privacy disclosures.

What is Personal Information?

When we use the term “personal information” in this Privacy Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you. It does not include aggregated or anonymized information that is maintained in a form that is not reasonably capable of being associated with or linked to you.

Our Collection of Personal Information

From the first moment you interact with us, we are collecting personal information about you. Sometimes we collect personal information automatically when you interact with our services and sometimes we collect the personal information directly from you. We may also collect personal information about you from other sources and third parties, even before our first direct interaction.

Personal Information You Provide

We collect the following personal information you provide in connection with our products and services:

Contact Information, including but not limited to your first and last name, phone number, email address, mailing address and state and country of residence.
Professional Information, including but not limited to your title, company name, professional background and the nature of your relationship with us.
Service Information, including but not limited to product or service interests and orders.
Investor Information, including but not limited to your Crane share purchasing history, number of shares held, value of the shares, eligible dividends and the holder of record’s name, address, and contact information (as well as any investor alert mailing lists you have signed up for).
Job Applicant Information, including but not limited to email address and password for our careers page, LinkedIn account data, first name, last name, phone number, mailing address, information on your ability to work in the U.S., on visa sponsorship and employment visa status, and on how you heard from us, resume content and attachments including related descriptions, responses to additional questions (such as on U.S. citizenship, salary requirements, firearm license, willingness to work rotating shifts, weekends and holidays as needed), employment history information (such as title, company name, relevant descriptions and dates), education history information (degree achieved, school name), any other categories of personal information which is included in the documents you upload or responses you provide in relation to requests for additional information or your interview with us, and your eSignature including related data.
Inquiry and Communications Information, such as the content of your email, call or other communication with us, as well as recordings of your voice from calls with us (where permitted by law).

If you choose to contact us, we may need additional information to fulfill your request or respond to your inquiry. We may provide additional privacy disclosures where the scope of the inquiry/request and/or personal information we require fall outside the scope of this Privacy Notice. In that case, the additional privacy disclosures will govern how we may process the information you provide at that time.

Personal Information Automatically Collected

As is true of most digital platforms, we collect certain personal information automatically, including:

Log File Data, including Web browser type and version, the operating system used by your computer, the referrer Universal Resource Locator (URL), the “hostname” given to your computer, your Internet Protocol (IP) address, the date and time you (i) accessed our website and (ii) took certain actions, such as subscribing to our investor alerts mailing list or clicking on the activation link in the related email, performing a job search, or using our contact form.
Analytics Data, including the electronic path you take to our services, through our services and when exiting our services, as well as your usage and activity on our services, such as the links and object you view, click or otherwise interact with (also known as “Clickstream Data”).
Location Data, including your general geographic location based on your IP address.

For information about our and, where applicable, our third-party partners’ use of cookies and related technologies to collect information automatically, and any choices you may have in relation to its collection, please visit our Cookie Notice.

Personal Information from Other Sources and Third Parties

We also obtain personal information from other sources, which we may combine with personal information we collect either automatically or directly from you.

We may receive some of the same categories of personal information as described above from the following sources and third parties:

Crane Affiliates: We may receive personal information from other companies owned or controlled by Crane Company, and other companies owning or under common ownership with Crane Company, particularly when we collaborate in providing services.
Employers: We may obtain personal information about you from your employer. For example, we may obtain your contact information from your employer to allow us to communicate with you about your employer’s customer relationship with us.
Recruiters, References and Professional Networks: We may obtain personal information in relation to your job application from recruiters, your references or from professional networks (such as on our career page, where you have the voluntary option to fill in fields of the application form by using the information included in your LinkedIn profile or your Monster profile).
Service Providers: Service providers that perform services solely on our behalf, such as website hosting and recruiters, collect personal information and often share some or all of this information with us in connection with their services.
Information Providers: We may from time to time obtain information from third-party information providers to correct or supplement personal information we collect. For example, we may obtain updated contact information from third-party information providers to connect with an individual who may be interested in our services.
Publicly Available Information: We may also collect personal information from publicly available sources, such as government records or publicly available websites, to supplement other personal information we collect.
Inferences: We may generate inferences or predictions about you and your interests and preferences based on the other personal information we collect and the interactions we have with you.

Our Use of Personal Information

We use personal information we collect to:

Communicate with You: We use personal information like contact information, professional information and inquiry and communications information to communicate with you about our services, including to inform you about new services, solicit feedback, respond to inquiries or keep you up to date with what’s going on with Crane and our services. Some of these communications may include marketing materials. You may ask us not to send marketing communications by following any available opt-out instructions in the marketing communications you receive. Please note we may continue to send you non-marketing communications even after you opt out.
Provide You with Services: We use personal information like contact information and professional information to provide you with our services. For example, we may use contact information and professional information to provide support while onboarding our services.
Facilitate Investor Services: We use personal information like contact information, professional information, and investor information to maintain a record of share ownership and facilitate investor services, including investor relation communications.
Review Your Job Application: We use personal information like contact information, professional information and job applicant information to assess your application for employment and facilitate the job application process (including interviews, where applicable). The information we collect in connection with your job application may be transferred to your employment record if you are offered and accept a position at Crane.
Otherwise Operate Our Business: We use personal information like contact information, professional information, service information, investor information, job applicant information, inquiry and communications information, log file data, analytics data, and location data to otherwise operate our business, including to:
- Identify and communicate with customers who may be interested in our services.
- Optimize customer experience with our services.
- Remember customers and the choices they have made in relation to our services.
- Connect with customers about requests and transactions they make on our services and other online services.
- Diagnose errors and problems with existing service.
- Develop and test new services.
- Conduct research and analytics on service usage and activity trends.
- Deliver marketing communications and advertisements based on customer representative interests and interactions with us.
- Facilitate business transactions and reorganizations impacting the structure of our business.
Exercise or Comply with Legal Obligations and Rights: We use personal information to exercise or comply with legal obligations and rights including to enforce and carry out contracts and agreements and prevent, investigate, or provide notice of fraud or unlawful criminal activity.

Our Disclosure of Personal Information

We disclose personal information in the following ways:

Within Crane: Crane Company entities disclose personal information to other Crane Company affiliates for purposes and uses that are consistent with this Privacy Notice. For example, we may disclose your contact information to facilitate communication between you and a local Crane Company representative.
Your Employer: We may share personal information about you with your employer. For example, where you represent your employer in their relationship with us, we may inform your employer of your communications with us.
Data Analytics Providers: We share information with data analytics providers who analyze statistics and trends relating to the usage of and activity relating to our services. These data analytics providers produce reports and make suggestions for our customer and business strategy based on the personal information and other information analyzed.
Marketing Partners: We coordinate and share personal information with our marketing partners, including advertisement networks, social networks, re-targeting partners and marketing communication providers, in order to communicate with you about our products and services and market our products and services to you.
Other Service Providers: In addition to the third parties identified above, we engage other third parties to perform certain functions on our behalf in connection with the use of personal information described in the Our Use of Personal Information section above. Depending on the function the third party serves, the service provider may process personal information on our behalf or have access to personal information while performing functions on our behalf.
Business Transaction or Reorganization: We may take part in or be involved with a corporate business transaction or reorganization, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal information to a third party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal information may also be disclosed in the event of insolvency, bankruptcy, or receivership.
Legal Obligations and Rights: We may disclose personal information to third parties, such as legal advisors and law enforcement:
- in connection with the establishment, exercise, or defense of legal claims;
- to comply with laws or to respond to lawful requests and legal process;
- to protect the rights and property of us, our agents, customers, and others, including to enforce our agreements, policies, and terms of use;
- to detect, suppress, or prevent fraud;
- to reduce credit risk and collect debts owed to us;
- to protect the health and safety of us, our customers, or any person; or
- as otherwise required by applicable law.
Otherwise with Consent or Direction: We may disclose personal information about you to certain other third parties with your consent or at your direction.

Children’s Personal Information

Our websites and online services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 13. IF YOU ARE UNDER THE AGE OF 13, PLEASE DO NOT USE OUR WEBSITES OR ONLINE SERVICES OR OTHERWISE PROVIDE US WITH ANY PERSONAL INFORMATION EITHER DIRECTLY OR BY OTHER MEANS. If a child under the age of 13 has provided personal information to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal information from our systems. If we learn that any personal information we collect has been provided by a child under the age of 13, we will promptly delete that personal information.

Third-Party Websites

Our websites and online services may include links to third-party websites, plug-ins and applications. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to, and we are not responsible for, any personal information practices of third-party websites and online services or the practices of other third parties. To learn about the personal information practices of third parties, please review their respective privacy notices.

Updates to This Privacy Notice

We will update this Privacy Notice, including its region-specific disclosures and the Cookie Notice, from time to time. When we make changes to this Privacy Notice, we will change the "Last Updated" date at the beginning of this Privacy Notice and of its region-specific disclosures as well as the Cookie Notice (where applicable). If we make material changes to this Privacy Notice, we will notify you by email to your registered email address, by prominent posting on this website or our online services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

Contact Us

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to privacy@craneco.com.

Alternatively, inquiries may be addressed to:

Crane Company
Attn: Privacy Office
100 First Stamford Place, Stamford, CT 06902, USA

ADDITIONAL CALIFORNIA PRIVACY DISCLOSURES

Last Updated: September 7, 2023

Scope of Disclosures

These Additional California Privacy Disclosures (the “CA Disclosures”) supplement the information contained in our PRIVACY NOTICE and apply solely to individual residents of the State of California (“consumers” or “you”).

These CA Disclosures provide additional information about how we collect, use, disclose and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act of 2018 (“CCPA”). For a detailed description of how we collect, use, disclose, and otherwise process personal information, please see our PRIVACY NOTICE.

Unless otherwise expressly stated, all terms in these CA Disclosures have the same meaning as defined in our PRIVACY NOTICE or as otherwise defined in the CCPA.

Personal Information Disclosures

When we use the term “personal information” in these CA Disclosures, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include information that is made publicly available, that is deidentified or aggregated such that it can no longer reasonably be used to infer information about, or otherwise be linked to, you, or that is otherwise excluded from the CCPA’s scope.

Personal Information

As described in more detail in the Our Collection of Personal Information section of our PRIVACY NOTICE, we collect the following categories of personal information:

Identifiers, such as first and last name, phone number, email address and IP address.
California Customer Records (Cal. Civ. Code § 1798.80(e)), such as mailing address, email address, phone number, state and country of residence, and information about your status and holdings as an investor.
Commercial Information, such as product or service interests and orders.
Internet/Network Information, such as log file data (including operating system and browser type) and clickstream data (including your usage and activity on our web sites and online services).
Geolocation Data, such as your general geographic location based on your IP address.
Sensory Information, such as the sound of your voice from calls with us or your image when you visit our facilities (where permitted by law).
Professional/Employment Information, such as your title, company name, professional background, the nature of your relationship with us, the nature and length of your relationship with current and prior employers, and other professional / employment information you choose to share in connection with a job application.
Education Information, such as education history shared in connection with your job application (including schools attended and degrees achieved).
Sensitive Personal Information, solely in connection with your job application where voluntarily provided or otherwise collected in accordance with law, such as account credentials for our careers page, social security number, driver’s license number, state identification card number, passport number, racial or ethnic origin, union membership, and personal information concerning health (such as accommodation requests).
Other Personal Information, such as inquiries, requests or comments you choose to send us.
Inferences, such as predictions about which services may be of interest to you and your employer.

We collect this information directly from you, from your browser or device when you interact with our services, and from our affiliates, your employer, recruiters, references, professional networks, service providers, information providers and other publicly available sources. For more information about the personal information we collect and how we collect it, please refer to the Our Collection of Personal Information section of our PRIVACY NOTICE.

We collect personal information from and about you for a variety of purposes. For example, we use personal information to communicate with customers about our services, to provide customers with our services, to facilitate investor services, to process job applications, and to otherwise operate our business. For more information about our use of personal information, please refer to the Our Use of Personal Information section of our PRIVACY NOTICE.

Sensitive Personal Information
We only use sensitive personal information for the purposes set forth in the Our Use of Personal Information section of our PRIVACY NOTICE to the extent necessary to process your job application at your request, to enter into and perform a contract with you, to comply with legal and regulatory requirements, to protect the life or physical safety of anyone or as otherwise permissible for our own internal purposes consistent with laws.

Deidentified Information
We may at times receive, or process personal information to create, deidentified information that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified information, we will maintain and use the information in deidentified form and not attempt to reidentify the information except as required or permitted by law.

Disclosure, Sale and Sharing of Personal Information

As further described in the Our Disclosure of Personal Information section of our PRIVACY NOTICE, we may disclose all of the personal information identified above to third parties for business purposes. The categories of third parties to whom we disclose personal information for these purposes include our affiliates, the business you represent, data analytics providers, marketing partners, service providers, and certain other third parties where you have provided your consent or direction, we are engaging in a business transaction or reorganization, or we are addressing our legal obligations and rights.

As is common practice among companies that operate online, we also allow certain third-party providers to use cookies and related technologies to collect Identifiers (such as IP address), Commercial Information (such as products sold or considered), Internet/Network Information (such as analytics data), and Inferences (generated from your interactions with us) directly through our websites and other online services for purposes of analyzing and optimizing our services, delivering ads, providing content and ads that are more relevant, measuring statistics and the success of ad campaigns, and detecting and reporting fraud. Some of these practices may constitute the sale of personal information or the use of personal information for the purpose of displaying advertisements that are selected based on personal information obtained or inferred over time from an individual’s activities across businesses or distinctly-branded websites, applications, or other services (otherwise known as “targeted advertising” or “cross-context behavioral advertising”). Subject to certain legal limitations and exceptions, you may be able to limit or opt-out of the sale of personal information or the sharing of personal information for purposes of targeted advertising (as described in the Your California Privacy Rights section below).

We do not otherwise sell personal information or share personal information for purposes of targeted advertising. We also do not sell the personal information of individuals we know to be less than 16 years of age or share such information for targeted advertising purposes. In addition, we do not sell sensitive information or share sensitive information for purposes of targeted advertising, nor use sensitive information for the purpose of inferring characteristics about a consumer in a manner that would require our offering of the right to limit the use of such information.

Retention of Personal Information

We retain personal information only for as long as is reasonably necessary to fulfil the purpose for which it was collected. However, if necessary, we may retain personal information for longer periods of time, until such retention periods and deadlines expire, for instance where we are required to do so in accordance with legal, tax, or accounting requirements set by a legislature, regulator, or other government authority.

To determine the appropriate duration of the retention of personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, and whether we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.

Your California Privacy Rights

As a California resident, you may be able to exercise the following rights (subject to certain limitations at law):

The Right to Know	The right to confirm whether we are processing personal information about you and to obtain certain personalized details about the personal information we have collected about you, including: The categories of personal information collected; The categories of sources of the personal information; The purposes for which the personal information was collected; The categories of personal information disclosed to third parties (if any) and the categories of recipients to whom this personal information was disclosed; The categories of personal information shared for cross-context behavioral advertising purposes (or, “targeted advertising”) (if any), and the categories of recipients to whom the personal information was disclosed for those purposes; and The categories of personal information sold (if any), and the categories of third parties to whom the personal information was sold.
The Right to Access & Portability	The right to obtain access to the personal information we have collected about you and, where required by law, the right to obtain a copy of the personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
The Right to Correction	The right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
The Right to Opt-Out of Targeted Advertising	The right to direct us not to share personal information for certain cross-context behavioral or targeted advertising purposes.
The Right to Opt-Out of Sales	The right to direct us not to sell and/or share personal information for certain cross-context behavioral or targeted advertising purposes.
The Right to Request Deletion	The right to request the deletion of personal information that we have collected from you.

You also have the right not to receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. However, please note that if the exercise of these rights limits our ability to process personal information, we may no longer be able to engage with you in the same manner.

How to Exercise Your California Privacy Rights

To Exercise Your Right to Know, Access, Portability, Correction, or Deletion

To submit a request to exercise the right to know, access, portability, correction and/or deletion, please submit a request by:

Emailing privacy@craneco.com with the subject line “California Rights Request,” or
Submitting this form via our website.

Before processing your request, we will need to verify your identity and confirm you are a resident of California. In order to verify your identity, we will generally either require the successful login to your account or the matching of sufficient information you provide us to the information we maintain about you in our systems. Although we try to limit the personal information collected in connection with a request to that personal information identified on our webform, certain requests may require us to obtain additional personal information from you. In certain circumstances, we may decline or limit a request, particularly where we are unable to verify your identity.

To Exercise Your Right to Opt Out of Personal Information Sales or Sharing for Targeted Advertising Purposes

To submit a request to exercise the right to opt out of personal information sales or sharing for targeted advertising purposes, please submit a request by:

For Non-Cookie-Based Opt-Outs:
- Emailing privacy@craneco.com with the subject line “California Rights Request,” or
- Submitting this form via our website.
For Cookie-Based Opt-Outs: To exercise your right to opt-out as it relates to the use of cookies and related technologies that involve the sale of personal data or the use of personal data for targeted advertising purposes, please click the cookie icon on the bottom right-hand corner of your screen and adjust your cookie preferences. This opt-out tool is device- and browser-specific, so you will need to change your preferences on each device and browser you use to interact with the specific website you are visiting. In addition, you can also opt-out of cookie-based sales by businesses that participate in the Digital Advertising Alliance’s CCPA Opt-Out Tool by visiting www.privacyrights.info. Lastly, you may follow the other steps set forth in our PRIVACY NOTICE to further exercise control over cookies and related technologies.

Once you make an opt-out request, you may change your mind and opt back in at any time by contacting us at privacy@craneco.com (for non-cookie-based opt-outs) and/or adjusting your cookie preferences as described above (for cookie-based opt-outs).

Authorized Agents

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf. In order to verify the authorized agent’s authority, we generally require evidence of either (i) valid power of attorney or (ii) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.

ADDITIONAL EEA, UK, AND SWISS PRIVACY DISCLOSURES

Effective Date / Last Updated: September 7, 2023

Unless otherwise expressly stated, capitalized terms in these Disclosures have the same meaning as defined in the PRIVACY NOTICE.

Scope of Disclosures

These Additional European Economic Area (“EEA”), United Kingdom (“UK”), or Switzerland Privacy Disclosures supplement the information contained in our PRIVACY NOTICE, and apply only to our processing of your personal data if you are based in the EEA, the UK, or Switzerland.

Controller

Crane Company is the data controller responsible for the collection and use of your personal data.

Personal Data Disclosures

When we use the term “personal data” in these Disclosures, we mean any information relating to an identified or identifiable natural person.

Legal Bases for Processing

We rely on one or more of the following legal grounds to process Personal Data about you, whether it is obtained from you or a third party:

Processing Activity	Purposes of the Processing	Legal Bases for Processing and Corresponding GDPR Provision
Communicate with You	To communicate with you about our services, including to inform you about new services, solicit feedback, respond to inquiries or just keep you up to date with what is going on with Crane and our services. These are also our legitimate interest to process your Personal Data.	Legitimate Interest Art. 6 (1) s 1 (f) GDPR To the extent required for us sending marketing communications to you: Consent Art. 6 (1) s 1 (a) GDPR
Provide You with Services	To provide you with our services. For example, we may use contact information and professional information to provide support while onboarding our services. These are also our legitimate interest to process your Personal Data.	Legitimate Interest Art. 6 (1) s 1 (f) GDPR To the extent that the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract: Performance of a Contract Art. 6 (1) s 1 (b) GDPR
Facilitate Investor Services	To maintain a record of share ownership and facilitate investor services, including investor relation communications. These are also our legitimate interest to process your Personal Data.	Legitimate Interest Art. 6 (1) s 1 (f) GDPR As it relates to us sending you investor email alerts: Consent Art. 6 (1) s 1 (a) GDPR
Review Your Job Application	To assess your application for employment and facilitate the job application process (including interviews, where applicable) as well as to transfer relevant information to your employment record if you are offered and accept a position at Crane.	Performance of a Contract Art. 6 (1) s 1 (b) GDPR or, where applicable, Article 88 (1) of the GDPR in conjunction with the respective provision/s under the applicable national data protection law
Otherwise Operate Our Business	To operate our business, including to: Identify and communicate with customers who may be interested in our services. Optimize customer experience with our services. Remember customers and the choices they have made in relation to our services. Connect with customers about requests and transactions they make on our services and other online services. Diagnose errors and problems with existing service. Develop and test new services. Conduct research and analytics on service usage and activity trends. Deliver marketing communications and advertisements based on customer representative interests and interactions with us. Facilitate business transactions and reorganizations impacting the structure of our business. These are also our legitimate interest to process your Personal Data.	Legitimate interest Art. 6 (1) s 1 (f) GDPR To the extent that the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract: Performance of a Contract Art. 6 (1) s 1 (b) GDPR To the extent required for us (i) sending marketing communications to you or (ii) performing research and analytics: Consent Art. 6 (1) s 1 (a) GDPR
Exercise or Comply with Legal Obligations and Rights	To exercise or comply with legal obligations and rights including to enforce and carry out contracts and agreements and prevent, investigate, to provide notice of fraud or unlawful, or criminal activity, or for the establishment, exercise or defence of legal claims. These are also our legitimate interest to process your Personal Data.	Legitimate interest Art. 6 (1) s 1 (f) GDPR To the extent that the processing occurs for compliance with a legal obligation based on EEA (including Member State)/UK/Swiss law: For compliance with a legal obligation Art. 6 (1) s 1 (c) GDPR

You are generally not required to provide personal data to us, but we do rely on your personal data to provide certain of our services. For example, we need your email address to send you mailings. If you choose not to provide us with your personal data, we may not be able to provide you with a service you request.

Data Retention

We retain personal data about you for as long as is necessary for the purposes set out in these Disclosures, unless a longer period is required under applicable law or is needed to resolve disputes or protect our legal rights.

The criteria used to determine the period for which personal data about you will be retained varies depending on the legal basis under which we process the personal data:

Legitimate Interests	Where we are processing personal data based on our legitimate interests, we generally will retain such information for a reasonable period of time based on the particular interest, taking into account the fundamental interests and the rights and freedoms of data subjects
Consent	Where we are processing personal data based on your consent, we generally will retain the information for the period of time necessary to fulfill the underlying agreement with you, subject to your right, under certain circumstances, to have certain of your data erased (please see the Your Privacy Rights section below)
Contract	Where we are processing personal data based on contract, we generally will retain the information for the duration of the contract plus some additional limited period of time that is necessary to comply with law or that represents the statute of limitations for legal claims that could arise from the contractual relationship
Legal Obligation	Where we are processing personal data based on a legal obligation, we generally will retain the information for the period of time necessary to fulfil the legal obligation
Legal Claim	We may need to apply a “legal hold” that retains information beyond our typical retention period where we face threat of legal claim. In that case, we will retain the information until the hold is removed, which typically means the claim or threat of claim has been resolved.

In all cases, in addition to the purposes and legal bases, we consider the amount, nature and sensitivity of the personal data, as well as the potential risk of harm from unauthorized use or disclosure of your personal data.

Descriptions in the Cookie Notice

Additional descriptions on the processing in connection with cookies or similar technologies, including on the purposes, categories of personal data, retention, legal basis, and recipients can be found in the Cookie Notice. The remainder of these Disclosures shall apply to the related processing activities.

International Data Transfers

We may transfer personal data about you among us and to our subsidiaries or affiliates, as well as to the categories of third parties identified in the Our Disclosure of Personal Information section of the PRIVACY NOTICE and to the entities identified in Descriptions on Processing Activities Regarding Cookies section of our Cookie Notice. Personal data may be transferred to, stored and processed in a country other than the one in which it was collected, including, but not limited to, the United States and any (other) country in the world. A country to which personal data is transferred may not provide the same level of protection for personal data as the country from which it was transferred.

We may transfer personal data about you outside of the EEA, UK, or Switzerland and when we do so, we rely on appropriate or suitable safeguards recognized under the GDPR including adequacy decisions, and standard contractual clauses.

Adequacy Decisions

We may transfer personal data about you to countries, territories or one or more specified sectors within a country that the European Commission has or competent authorities in the UK or Switzerland have deemed to adequately safeguard personal data. You can find a current list of these adequacy decisions here.

Standard Contractual Clauses

The European Commission has adopted Standard Contractual Clauses, which provide safeguards for personal data transferred outside of the EEA, UK, or Switzerland. We may use these Standard Contractual Clauses (with UK and Swiss amendments, as may be required) when transferring personal data from a country in the EEA, UK, or Switzerland to a country outside of the EEA, UK, or Switzerland that has not been deemed to adequately safeguard personal data. You can request a copy of our Standard Contractual Clauses by contacting us as set forth in the Contact Us section of this PRIVACY NOTICE.

Other Grounds

Where appropriate, we may transfer personal data from a country in the EEA, the UK, or Switzerland to a country outside of the EEA, the UK, or Switzerland also on the grounds of one of the derogations provided for specific situations by the GDPR. These derogations may especially apply in case you consent to a proposed transfer or in relation to a transfer which is necessary for (i) the establishment, exercise or defense of legal claims, or (ii) the performance of a contract of a Crane Affiliate with you or concluded in your interest.

Your Privacy Rights

You have the following rights in relation to your personal data (subject to certain limitations at law):

Access	The right to obtain (i) confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, (ii) access to the personal data as well as information relating to its processing, and (iii) obtain a copy of personal data about you.
Rectification	The right to correct or update any personal data about you that is inaccurate or incomplete.
Restriction of Processing	The right to require us to limit the purposes for which we process your personal data if the continued processing of the personal data in this way is not justified, such as where the accuracy of the personal data is contested by you.
Erasure	The right to request the deletion or erasure of personal data about you without undue delay if the continued processing of that personal information is not justified, such as where the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed. We may reject such as request, in particular, where the processing is necessary for compliance with a legal obligation (such as retention obligations) or for the establishment, exercise or defense of legal claims
Portability	The right to obtain a copy of personal data about you which you have provided to us in a structured, commonly used and machine-readable format and the right to transmit that personal data to another controller, where the processing is based on consent or the performance of a contract.
Objection to Processing	You also have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal data, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.

Please note that if the exercise of these rights may limit our ability to process personal data, we may not be able to provide our services to you, or otherwise engage with you going forward.

Right to Withdraw Consent

Where we rely on your consent for processing of your personal data, you also have the right to withdraw your consent to such processing, subject to certain limitations at law.

In relation to your subscription to Investor Alerts Mailing Lists, you may withdraw your consent by entering your email address under Unsubscribe from Email Alerts on our Investor Alerts page or by clicking the unsubscribe link in our investor alerts emails.

Submitting Requests

To submit a request, please contact us as set forth in the Contact Us section of this PRIVACY NOTICE. We may need to verify your identity before processing your request, which may require us to obtain additional personal data from you. In certain circumstances, we may decline a request to exercise the rights described above.

Right to Lodge a Complaint

If you have any complaints regarding our privacy practices, you have the right to lodge a complaint with a data protection authority (i.e., supervisory authority), in particular, at your usual residence, place of work or place of the alleged infringement. An overview of the supervisory authorities in Germany and the EEA may be found here and here. If you are based in the UK or Switzerland, your local data protection authorities are the UK Information Commissioner's Office (https://ico.org.uk/global/contact-us/) and the Swiss Federal Data Protection and Information Commissioner (the "FDPIC", https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact/address.html).

COOKIE NOTICE

Effective Date/Last Updated: September 7, 2023

Unless otherwise expressly stated, capitalized terms in this Notice have the same meaning as defined in the PRIVACY NOTICE.

Scope of Notice

This Cookie Notice supplements the information contained in the PRIVACY NOTICE and its region-specific disclosures, including those for the ADDITIONAL CALIFORNIA PRIVACY DISCLOSURES, and the ADDITIONAL EEA, UK, AND SWISS PRIVACY DISCLOSURES, by explaining how we and our business partners and services providers use cookies and related technologies in the course of managing and providing our online services and our communications to you. It explains what these technologies are and why we use them, as well as your rights to control our use of them.

In some cases, we may use cookies and related technologies described in this Cookie Notice to collect personal information, or to collect information that becomes personal information if we combine it with other information. For more details about how we process your personal information, please review the PRIVACY NOTICE.

What Are Cookies and Related Technologies

Cookies are small data files that are stored on your computer that allow us and, where applicable, our third-party partners and providers to collect certain information about your interactions with our email communications, websites and other online services. We and, where applicable, our third-party partners and providers may also use other, related technologies to collect this information, such as web beacons, local storage, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “cookies”).

Descriptions on Processing Activities Regarding Cookies

In the following table, you may find descriptions on (i) the types of cookies we use when you visit or interact with our website, our email communications, and other online services as well as (ii) related processing activities:

Type of the Cookies	Purpose of the Cookies and the Related Processing	Categories of Personal Data	Retention Period	Recipients and, where applicable, International Data Transfer	Legal Basis in the EEA, UK, or Switzerland (References to the “E-Privacy Directive” refer to the EU Member State laws based on the Directive 2002/58/EC on privacy and electronic communications)
Functionally Necessary Cookies
Cookie Consent Management (Osano Consent Manager) Individual cookies: osano_consentmanager osano_consentmanager_uuid	Saves your cookie settings and, where applicable, consent based on your interaction with our cookie banner and implements them, i.e., allows or prevents the placing of other cookies on your device as well as prevents for the cookie banner to pop-up again.	Cookie retention period Cookie version Domain and URL of our website Your cookie selection on our cookie banner including, where applicable, consent as well as related date and time Unique consent identifier, i.e., a random number assigned to you which allows for your browser and thus your cookie settings to be remembered.	1 year	The cookies are locally hosted on your device. It can be read by Osano Inc., 3800 N Lamar Blvd Ste 200 Austin, TX 78756, USA, as our related service provider.	For the saving of the cookies including the included information on your device and the accessing of it, the legal basis is the necessity in order to provide you with the information society service requested by you, i.e., our website (Art. 5 (3) s 2 E-Privacy Directive). For further related processing activities, the legal basis are our legitimate interests to provide you with a fully functioning website and to implement your cookie choices (Art. 6 (1) s 1 (f) GDPR).
Cloudflare Bot Management for Site Security Individual cookie: _cf_bm	Identifies and mitigates automated traffic to protect site from bad bots.	Cookie version Domain and URL of our website Website traffic related information	30 minutes (session cookie, i.e., a cookie that only lasts for your session und is subsequently deleted)	The cookie is locally hosted and encrypted. It can be read by Cloudflare, Inc., located at 101 Townsend St., San Francisco, California 94107, USA as our related service provider.	For the saving of the cookie including the included information on your device and the accessing of it, the legal basis is the necessity in order to provide you with the information society service requested by you, i.e., our website (Art. 5 (3) s 2 E-Privacy Directive). For further related processing activities, the legal basis are our legitimate interests to provide you with a fully functioning website and to implement your cookie choices (Art. 6 (1) s 1 (f) GDPR).
Remaining Cookies
Google Analytics Individual cookies: _ga _gat _gat_Client _gid	Processes information on website use and helps to understand how website visitors use a website through the creation of analytics reports. Google uses the data to analyze your user behavior in order to improve Google's products and to provide targeted ads and content.	Cookie retention period Cookie version Domain and URL of our website Unique identifier, i.e., a random number assigned to you which allows for you to be remembered; Google user ID IP address Website or source from which you came to our site Visited websites and website use including information about your interest further technical data which could be used in combination to identify you	_ga = 2 years _gat = 1 minute _gat_Client = 1 minute _gid = 24 hours	The cookies are locally hosted on your device. It can be read by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.	For the saving of the cookies including the included information on your device and the accessing of it, the legal basis is your consent pursuant to Art. 5 (3) s 1 E-Privacy Directive For further related processing activities by us and Google, the legal basis is your consent pursuant to Art. 6 (1) s 1 (a) GDPR.
Snowplow Analytics __uxq412__id* __uxq412__ses* Sp	Processes information on website use and helps to understand how website visitors use a website through the creation of analytics reports.	Cookie retention period Cookie version Domain and URL of our website Unique identifier, i.e., a random number assigned to you which allows for you to be remembered IP address Information about your use of our website further technical data.	__uxq412__id* = 2 years __uxq412__ses* = 30 minutes Sp = 1 year	The cookies are locally hosted on your device. It can be read by Snowplow Analytics Limited, 17 Bevis Marks, Floor 6, London, EC3A 7LN, United Kingdom as our related service provider.	For the saving of the cookies including the included information on your device and the accessing of it, the legal basis is your consent pursuant to Art. 5 (3) s 1 E-Privacy Directive. For further related processing activities, the legal basis is your consent pursuant to Art. 6 (1) s 1 (a) GDPR.

Please note that we link some of the personal information we collect through cookies with the other personal information that we collect about you and for the purposes described in our PRIVACY NOTICE.

Your Choices About Cookies

You can choose your preferred cookie settings, including disable cookies, via the cookie banner which you can find on our website. Furthermore, if you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. However, this may only work in relation to cookies in the classical sense and not in relation related technologies, such as the ones’ set out above. Please further note that disabling or rejecting all cookies may negatively impact your experience using our online services, as some features and services on our online services may not work properly. Depending on your device and operating system, you may not be able to delete or block all cookies. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it.