Shop Cummins Website Privacy Policy

Shop Cummins Privacy Policy

Thank you for visiting the Cummins web pages offered through Salesforce. This website is owned and operated by Salesforce, a website provider that is not part of the Cummins Group. Rather, Cummins is one of many merchants that has entered into an agreement with Salesforce to advertise and sell some of our products on the Salesforce website.

As explained in the Salesforce website privacy statement, Salesforce will have access to some of your personal data if you sign up for the Site and/or make a purchase of a product offered by Cummins and/or other merchants. If you make a purchase of a Cummins product or service through the Salesforce Site, or otherwise provide your personal information to us, Cummins will also have access to some of your personal data.

This website privacy policy explains how Cummins collects and uses your data, as well as the choices you can make in relation to how your personal data is collected and used by our company. Please also review the Salesforce website privacy statement for information about how that company collects and processes your data. You can access their policy by going to: https://www.salesforce.com/privacy/overview/.

If you are interested in learning more about the Cummins Inc. Privacy Policy, you can learn more at https://www.cummins.com/privacy-and-legal.

Information that Cummins Collects

After you sign up to use the Salesforce website, you may browse the Cummins web pages (product and service information and offerings) without providing any information about yourself. However, in order to process sales orders or sign you up for a newsletter or other offerings through Salesforce, we must necessarily collect certain relevant personal information.

The personal information that we collect from you in relation to purchases or other transactions is based upon the type of service you are requesting. For example, if you purchase an engine or other product, we must necessarily collect your contact, payment and shipping details, as well as information relating to warranties and any ongoing services associated with your new engine. On the other hand, if you simply enroll in a newsletter that we offer, we collect relevant information to email the newsletter to you, along with any email or contact preferences. You always have the option of unsubscribing at any time.

Sharing Your Information

We use the information you provide to us to process your order or other request, or respond to your questions. We may share your personal information with our subsidiaries, joint ventures, affiliates, authorized distributors and other business partners, to the extent that they are assisting Cummins in fulfilling your request or providing products or services to our customers. We may also store your data in a centralized system, with other data that we hold about you. As noted above, Salesforce may also receive some information about your purchase and your web browsing relating to Cummins pages. Please be sure to check their website privacy policy for full information.

Cummins does not sell or share personal information provided to us with third parties for their own separate use.

Cross-Border Transfers of Personal Information

Like most global organizations, and to the extent warranted, Cummins transfers (shares) some of its personal data with relevant affiliates (personnel) in other countries as well as with external partners who assist with business activities. The data privacy laws that apply to personal data differ from country to country, and do not always offer a consistent level of protection to data that is transferred out of the country of origin. Nevertheless, Cummins has adopted measures that are designed to ensure that cross-border transfers take place in accordance with applicable data protection laws and requirements. The measures include assessments of the data importer as well as applicable host country laws to ensure that the recipient is capable of upholding an adequate level of protection for the data and entering into appropriate written agreements with the data importer confirming that commitment. Cummins also relies on the E.U. Standard Contractual Clauses or an equivalent data transfer mechanism.

Cummins Inc. adheres to the principles of the U.S. Department of Commerce’s EU-U.S. Privacy Shield framework for its human resource and customer personal data. However, in light of the judgment of the Court of Justice of the European Union in Case C-311/18 (“Schrems II”), Cummins discontinued its reliance on the Privacy Shield framework as a legal basis for transfers of personal data. Cummins nevertheless continues to remain certified to that framework as part of the company’s overall commitment to ensuring compliant and responsible data protection practices in the countries where we operate. To learn more about the Privacy Shield Program, and to view our certification please visit the U.S. Department of Commerce's Privacy Shield website at: https://www.privacyshield.gov/list or please see our Privacy Shield Notice.

Cookies and Other Anonymous Web Tracking Techniques

As also explained in the Salesforce Privacy Policy, most websites collect information online through “cookies”, which are pieces of information stored directly on the computer you are using. Cookies can contain a variety of information, such as a simple count of how often you visit our web pages on the Salesforce site or information that allows customization of our web pages for your use. Cummins also collects cookies in relation to users of our Salesforce web pages, which helps us process sales and gather data about the usage of the Site. You can always set your browser to refuse all cookies or to warn you when a cookie is sent to you. This will provide you with more control over the acceptance of cookies on your computer. However, it is possible that some portions of this website will not function properly or may perform more slowly if you choose to reject cookies.

Safeguarding Your Information

Cummins has put in place appropriate physical, electronic, and managerial procedures to help safeguard and secure the information we collect online from loss, misuse, alteration, unauthorized access, or theft. This includes appropriate safeguards for customers making purchases through the Salesforce site, as well as those who enroll in our programs. However, since this website is owned and operated by Salesforce and not Cummins, we also rely on Salesforce to some extent to ensure the security of the website and the data that is collected.

Our Commitment to Children's Privacy

This website is not intended to collect or maintain any information from children under the age of 13. If we learn that we mistakenly collected any information from anyone under the age of 13, we will purge it immediately, except for responding to a question or inquiry on a one-time basis from the individual.

Right of Access, Correction, and Objection/Consent

We take reasonable steps to ensure that your personal information on file with us is accurate and up-to-date. In that regard, we invite you to contact us to update your information if it changes, such as your email address, so that you can continue to receive information from us that you have requested, and so that we have your correct contact details to send you any relevant information about your Cummins engine, such as service reminders. Cummins also has processes in place to fulfill its obligations relating to the individual rights of access, correction and objection. Individuals who would like to exercise those rights should contact us by emailing us at legal.function@cummins.com, or writing to us at Cummins Inc. Global Headquarters, 500 Jackson Street, Columbus, IN 47201

Links to Other Websites

As noted above, this website is not owned or operated by Cummins. As such, it contains links to webpages of other merchants who, like Cummins, offer products and services for sale. You should carefully review the privacy policies and practices that apply to the web pages that you visit, including those of Salesforce. Cummins cannot control and we are not responsible for privacy policies or practices of third-party websites that are not ours

Retention of Personal Data

Cummins retains personal information based on our legal and business needs, and then securely destroys the information.

Changes to This Privacy Policy

As we continue to provide additional services and as the privacy laws and regulations evolve, it may be necessary to revise or update this website privacy policy. If we decide to change our policy, we will post those changes on the Salesforce web pages associated with our products, so our users are always aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If at any point we decide to use personally identifiable information in a manner different from that stated at the time it was collected, we will notify users by way the notification information that we have available. Users will have a choice as to whether or not we use their information in this different manner.

Contact Us

If you have questions about Cummins' Privacy Procedures or practices or believe that your information has been mismanaged, you can contact us by emailing us at legal.function@cummins.com, or writing to us at Cummins Inc., 500 Jackson Street, Columbus IN-47201, United States. Cummins has put in place a dispute resolution process for any privacy or security-related disputes, and does not retaliate against any individual who contacts us with a dispute that they believe to be legitimate. Individuals who believe that their dispute has not been resolved to their satisfaction by the company also have the right to file claims with the relevant oversight agencies for data protection.

E.U. - U.S. Privacy Shield Website Privacy Notice

This website Privacy Shield Notice is intended to inform you about Cummins Inc.'s adherence to, and compliance with, the E.U.-U.S. Privacy Shield framework as set forth by the U.S. Department of Commerce.

Scope: Cummins has certified to and confirmed its adherence to the Privacy Shield framework for human resource and customer personal information pertaining to residents of the European Union (E.U.) and European Economic Area (E.E.A.) and the United Kingdom (U.K.). However, in light of the judgement of the Court of Justice of the European Union in Case C-311/18 (“Schrems II”), Cummins discontinued its reliance on the Privacy Shield framework as a legal basis for transfers of personal data. Cummins nevertheless continues to remain certified to that framework as part of the company’s overall commitment to enduring compliant and responsible data protection practices in the countries where we operate.

Privacy Shield principles that Cummins upholds in connection with its Privacy Certification are: Notice; Choice (Consent); Accountability for Onward Transfer; Security; Data Integrity and Purpose Limitation; Access; and Recourse, Enforcement and Liability. To learn more about the Privacy Shield program, and to view our certification please visit the U.S. Department of Commerce’s Privacy Shield website at: https://www.privacyshield.gov/list.

Conflicts: If there are any conflicts between the terms of this Privacy Notice and the Privacy Shield Principles, the Privacy Shield Principles, as modified by the EU Court of Justice’s Schrems II decision, shall govern.

Disputes: In compliance with the Privacy Shield principles, Cummins has committed to cooperate with the E.U. Supervisory Authorities about unresolved Privacy Shield complaints concerning the company's human resource or customer personal information. Individuals who believe their personal information has been mismanaged by Cummins in relation to the company's Privacy Shield commitments have the right to contact the E.U. Supervisory Authorities for more information or to file a complaint, and can do so without charge. E.U./E.E.A. and U.K. individuals with inquiries or complaints regarding the Privacy Shield policies or practices should first contact Cummins at:

Email: legal.function@cummins.com

Mailing Address: Cummins Inc., Law Department – Privacy Shield Team, 301 East Market Street, 5th Floor, Indianapolis, Indiana USA 46204

Barring any unforeseen circumstances, Cummins will respond to the individual submitting the grievance within forty-five (45) days of receipt.

Regulatory Oversight and Enforcement: In connection with its Privacy Shield certification, Cummins is subject to investigatory and enforcement authority of the U.S. U.S. Federal Trade Commission and the relevant European Supervisory Authorities.

Right to Binding Arbitration: Under limited circumstances and in accordance with the Privacy Shield framework, E.U./E.E.A. and U.K. individuals can also seek binding arbitration before a Privacy Shield Panel.

Rights of Individuals to Access Their Data: E.U./E.E.A. and U.K. individuals have the right to access personal information about them, and to limit use and disclosure of their personal information. In certain situations, such as where the data is incorrect or was collected inappropriately, the individuals also have the right to request amendment or erasure of their data. Cummins committed to respect and uphold those rights. Should you wish to exercise those rights, you may contact us by writing to us at 301 East Market Street, 5th floor, Indianapolis, Indiana USA 46204, or emailing us at: legal.function@cummins.com. Please note that there are certain limitations on these rights, as described in the Privacy Shield framework.

Law Enforcement Requests: Cummins may be required to disclose personal information in response to lawful requests by public authorities, including compliance with national security or law enforcement requirements. In doing so and to the extent permitted relative to the particular situation, Cummins takes reasonable steps to balance the rights of the individuals with those of the requesting agencies.

Updates: This Policy may be updated from time to time, such as in relation to modifications to the Privacy Shield framework, regulatory expectations, or changes within Cummins. These changes will not adversely impact the Privacy Shield protections that have been put in place by Cummins.

California Consumer Privacy Act - Consumer Data Privacy Notice

This Data Privacy Notice describes how Cummins Inc. and its affiliated companies (“Cummins”) complies with the California Consumer Privacy Act of 2018 (“CCPA”), with respect to California residents (“consumers”).

CCPA Overview

The CCPA is a California law that is designed to give residents of that state additional rights in relation to the collection, processing and sharing of their personal information. The law applies to most for-profit businesses that collect and process personal information about California residents, even if the business doesn’t have its headquarters or other locations in California.

Contact Methods

Cummins has put in place the following methods for California residents to exercise their rights under the CCPA. With respect to the right to opt-out, right to know/access, and right to request deletion, we have also included direct links in the relevant sections of this Data Privacy Notice (below) to exercise those rights.

Website address: www.Cummins.com
Toll-free number: 1-800-286-6467
Email address: dataprivacy@cummins.com
Website Support link: https://www.cummins.com/customer-assistance
Mailing address: CCPA Rights, Cummins Legal Department, Cummins Inc., 500 Jackson Street, Columbus, IN 47201

For individuals with disabilities, and those who require language translations, please see the relevant sections of this Notice.

Personal Information Collection

The personal information that Cummins collects and processes about California residents is limited to those data elements that are relevant and proportionate for the particular purpose(s) of collection. They may include:

Name
Email address
Phone number
Mailing address
User name and password (such as for certain restricted areas of our websites)
Purchase history
Payment and invoicing history
Warranty information
Service history
Product/service interest
VIN number of engines/generators that you have purchased
Identification of your dealer and/or service centers
Telematics-derived engine (or other key system) performance data (only for enabled telematics users)
Information to respond to your question(s)
Website cookies and IP (Internet Protocol) address if your browser is set to allow cookies1
Website browsing information collected through Google Analytics if you visit our websites2
Information that you may post on our social media platforms or on other public platforms in relation to Cummins products, services or business

Please see our Website Privacy Statement for additional information, as well as our Cookies Notice which is linked via that website.

Personal Information Uses

Cummins limits its use of personal information pertaining to California residents to the purposes for which the data is collected, such as to address your request, process your order, or respond to your questions. We may also use the data for any surrounding legal, compliance or regulatory obligations. As also explained further in the opt-out section of this Notice, Cummins does not and will not ‘sell’ personal information of California residents (as that term is defined in the CCPA), or allow other organizations entrusted with your data (e.g., service providers) to do so.

Please see our Website Privacy Statement for additional information.

Personal Information Sharing

We may share your personal information with (1) our subsidiaries, joint ventures, affiliates, and authorized distributors; (2) other third-party ‘service providers’ assisting us with our business services; or (3) when we are required by law to make disclosures to other third-parties including, for example, government or law enforcement agencies, such as in relation to legal, compliance or regulatory obligations.

In terms of third-party disclosures, our service providers assist with a variety of business activities such as our websites; IT security; communications services; social media; those that partner with us in relation to our products and services such as dealers, distributors, service centers and telematics partners, and those that assist us with other types of services. Cummins evaluates those service providers in advance to ensure that they are capable of upholding a similar level of protection for the data and also requires them to enter into a written agreement confirming their understanding that they are expressly prohibited from using the personal information for any unrelated purposes or from selling the information.

When we entrust your personal information to our subsidiaries and affiliated companies, those companies also fall within the scope of the CCPA for that data and are required to uphold a similar level of protection. As is the case with service providers, our affiliated companies may only use that information for authorized purposes, and are prohibited from ‘selling’ your information or sharing it with any other parties for unrelated purposes, including ‘selling’ the data.

In rare situations where Cummins may be required to entrust limited personal information of California residents to other third parties, such as regulatory or government agencies or law enforcement, we take reasonable steps to ensure that those parties recognize the confidential, non-public nature of the information and will protect it accordingly. In addition, most of those organizations are required to comply with other state and federal data privacy and security laws, which means that they also have a legal obligation to uphold appropriate protections for your information.

Please see our Website Privacy Statement for additional information.

Use of Authorized Agents

In accordance with the CCPA, Cummins allows California residents to exercise their CCPA rights via an authorized agent. California consumers must recognize that in those situations, Cummins requires authentication/verification of the authorized agent as well as the individual about whom the data relates, and we may deny the request if we are unable to obtain appropriate authentication/verification at either level. The authentication/verification requirements adopted by Cummins vary by right, and take into consideration the potential risks to the individual of sharing their personal data with an unauthorized individual. Please see the specific rights (below), and general information about authentication/verification obligations associated with each of them.

Right to Opt-Out (Do Not Sell My Information)

As noted above, Cummins does not and will not “sell” personal information as that term is defined in the CCPA. As an added assurance, California residents may contact Cummins to request that they be added to a Do Not Sell Log, so that their data is not (inadvertently) subject to ‘sale’ on a go-forward basis. California residents can do so by clicking here, or by exercising their opt-out right via one of the other options listed in the Contact Methods section of this Notice.

Individuals who exercise the right to opt-out or retain an authorized agent to do so on their behalf, are subject to an authentication process which is fully aligned with the CCPA requirements. In the event that Cummins is unable to verify the individual and/or the authorized agent making the request, or has a good-faith, reasonable and documented belief that the request to opt-out is fraudulent (or unsubstantiated), Cummins will deny the request. If so, Cummins will inform the requesting party that it will not comply with the request and will provide an explanation as to why it believes the request is unsubstantiated (or fraudulent).

If Cummins is able to verify the individual about whom the personal information relates, and if applicable, the authorized agent, Cummins will confirm to the California resident (or authorized agent) as soon as feasibly possible, and no later than 15 days from the date that it received the request., that the California resident has been opted-out of the sale of his/her information held by Cummins, and added to the Do Not Sell My Information Log.

Right to Know/Access

In accordance with the CCPA requirements, California residents may contact Cummins to request information about the categories of, or specific types of, personal information that we hold about them as well as how the data was used, the categories of third parties with whom the data was shared, and the purpose(s) for the sharing of the information. They can do so by clicking here or by exercising that right via one of the other options identified in the Contact Methods section of this Notice.

Cummins will acknowledge a right to know/access within 10 days of receipt, and request appropriate verification information. California residents who exercise this right or use an authorized agent to do so are subject to comprehensive verification using a variety of authentication tools to minimize any risk to individuals of unauthorized sharing of their person information. The Company can deny the request if it is unable to verify the requestor and/or his/her authorized agent, and if so, will inform the individual/authorized agent within 45 days of receipt of their request. Of course, Cummins can also deny the request if it does not hold any information about the individual which falls within the scope of the CCPA.

Properly verified California residents and/or their authorized agents are entitled to receive information about (or a copy of) Personal Information collected by Cummins within the last 12 months before their request was made. Cummins will endeavor to fulfill those requests within 45 days, but may require an additional period of time (up to a total of 90 days) if necessary. If so, it will inform the requestor about the delay and the reasons therefore within the 45-day period.

California residents are limited to two such requests to know/access their data in any 12-month period (whether directly or via an authorized agent).

Right to Request Deletion

With certain exceptions as described below, California residents have the right to request deletion of their personal information, and can make the request directly or via an authorized agent. They can do so by clicking here or by exercising that right via one of the other options identified in the Contact Methods section of this Notice.

Cummins is not obligated to delete the personal information if it must be retained for one of the following purposes:

Complete a transaction for which the personal information was collected.
Fulfill the terms of a written warranty or product recall conducted in accordance with federal law.
Provide a good or service requested by the consumer (California resident), or reasonably anticipated within the context of a business’ ongoing business relationship with the consumer.
Otherwise perform a contract between the business and the consumer.
Detect security incidents.
Protect against malicious, deceptive, fraudulent, or illegal activity or prosecute those responsible for that activity.
Debug to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the businesses deletion of the information is likely to render impossible or seriously impair the achievement of such research, if the consumer has provided informed consent.
Enable solely internal uses of the data that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business.
Comply with a legal obligation.
Otherwise use the consumer’s personal information, internally, in a lawful manner that is compatible with the context in which the consumer provided the information.

Individuals who exercise the right to request deletion or retain an authorized agent to do so on their behalf, will be subject to detailed verification in accordance with the CCPA requirements.

Cummins will acknowledge a request for deletion within 10 days of receipt, and will endeavor to fulfill the request within 45 days. If it becomes evident that Cummins is unable to delete all of the California resident’s data within the 45-day period, the company will inform the individual and/or the authorized agent within that period, and may take an additional 45-days to fulfill the request (i.e., a total of 90 days).

In any case, when Cummins processes a request for deletion from a California resident (which has been properly verified), it will delete the data from its systems in a secure and irreversible manner, such that the data cannot be restored. At the same time, in accordance with the CCPA, Cummins may refrain from deleting copies of information stored on back-up systems if it is unable to do so at the time that that it deletes the remaining personal information within the scope of the request. In those situations, Cummins will mark that data for future deletion when the deletion can take place. In addition, Cummins will not use that data for any unrelated purpose once it is marked for deletion.

To the extent that Cummins has entrusted any of the Personal Information of the California resident to a service provider, it will also contact that service provider to process the deletion request and will confirm to the California resident (or his/her authorized agent, if applicable) that it has done so.

Rights of Minors

Cummins upholds the rights of California residents who are minors, including those that apply to minors who are under the age of 13 and those that apply to minors between the ages of 13 and 16. Cummins has also put in place practices to uphold the surrounding obligations to parents and legal guardians of those minors.

Parents and legal guardians who seek to exercise the CCPA rights of their children will also be subject to authentication so as to prevent the release of any information pertaining to a minor to an unauthorized individual.

Right to No Discrimination

In accordance with the CCPA, Cummins does not discriminate against individuals. including those who choose to exercise their CCPA rights. Please see Cummins’ Website Privacy Statement at www.CumminsDiagnostics.com for additional information about the company’s anti-discrimination practices, including in relation to federal and state civil rights laws.

Rights of Individuals with Disabilities

Cummins provides multiple ways to communicate with us in order to provide assistance to individuals with disabilities and to allow each individual to communicate effectively. To learn more, please visit www.cummins.com/cummins-care.

Questions or Concerns

California residents who have questions or who believe that Cummins has mismanaged their personal information or otherwise infringed their rights may contact us using the contact methods listed in this Notice.

Additional Information

For additional information about Cummins’ CCPA practices, please visit our website at www.Cummins.com or contact us via one of the options provided in the Contact Methods section of this Notice.

Updates to this Notice

Cummins will review its CCPA notices and practices on at least an annual basis, and may also make updates to this Notice at other intervals, such as in relation to new information issued by the California regulators or in connection with changes to its business activities. We encourage you to review this Notice periodically to be sure you are aware of those changes. Any changes will serve to enhance or strengthen the privacy and security protections that are in place for personal information of California residents, and not diminish them.

1 Cookies are small pieces of data sent from a website and stored on a user's web browser. When the user browses the same website in the future, the cookie notifies the website of the user's previous activity. Cookies do not harm your computer in any way, and some are automatically deleted after a certain period of time, such as six months. While cookies identify the IP address of the website visitor, they do not identify the visitor himself/herself. Please see Cummins’ Website Cookies Notice as well as additional information in our website privacy statement, which are accessible at www.cummins.com.

2 Google Analytics is a web analytics service offered by Google that tracks and reports website traffic to website owners. It is used by more than one-third of all websites, so that the website operators can evaluate use of the site, make improvements, and offer content that is of interest to the visitors. The tool does not identify specific visitors but does capture IP addresses if the visitor sets their browser to permit cookies.