Privacy Notice

Welcome to Lexmark’s privacy page and thank you for your interest. Our programme, Privacy@Lexmark, exists to help you understand what personal data we may collect and the steps we take to protect your privacy. Lexmark strives to design products, services, processes, and solutions that ensure your personal data is properly handled and protected. To that end, we look to incorporate the following recognized privacy principles in everything we do:

• Transparent notice and informed choice
• Lawful use
• Data Access
• Data Integrity
• Data Minimisation
• Data Security
• Limited Sharing
• Accountability for data transfers

Privacy@Lexmark is a dedicated organisation whose sole purpose is to implement, promote, and maintain a corporate culture that understands and respects your right to privacy. If we can answer any questions or be of service to you in any way, please contact us as explained below.

Best regards,
Your P@L Team.

Lexmark takes a broad view of Personal Data to best protect your privacy. Generally, the term “Personal Data” means any information relating to an identified or identifiable person (as opposed to a company or an organisation). An identifiable person is one who can be identified, directly or indirectly, by reference to things such as a name, an identification number, an address, an employee ID, job title, or a telephone number. For example, Jane Alvarez who lives at 123 Lexmark Lane with a telephone number of 859-123-4567 is an identifiable person:  her name, address, and telephone number are all examples of her Personal Data.  Other types of Personal Data can be less obvious — such as an IP address or other types of online identifiers.

This notice covers all Personal Data collected in the use of our websites, our products and our services. If in any case our privacy practices differ from those explained in this notice, we will advise you at the time we ask for your information.

Some pages on our websites may contain links to third-party websites. We do not endorse and have no control over the privacy practices or content of such websites. We recommend you carefully read the privacy notices of each site you visit – including ours.

Some products or solutions we offer may be co-branded or offered in conjunction with products or solutions from other companies. These products and solutions may come with other registration requests or terms and conditions. If you register or use these products, both we and the other company may receive the information you provide. While we carefully select our business partners, we do not endorse and have no control over the privacy practices or content of any third-party companies.

We collect Personal Data when you contact or do business with Lexmark, such as when:

• you make purchases of products or services;
• you register products;
• you request support for a product;
• you request software downloads;
• you create a user account (login user name and password);
• you request information or materials (e.g., whitepapers or newsletters);
• you participate in surveys and evaluations;
• you participate in promotions, contests or giveaways;
• you apply for a job or submit your resume;
• you or someone you work for enters into a contract with us;
• you submit questions or comments to us.

We may collect various types of Personal Data, including:

• your first and last name;
• your title and your company's name;
• your home, billing, or other physical address (including street name, name of a city or town, state/province, postal code);
• your e-mail address;
• your telephone number;
• your educational background, employment experience, and job interest (for job applicants submitting information);
• any other identifier that permits Lexmark to make physical or online contact with you;
• information that we collect online from you and maintain in association with your account, such as your username and your password;
• other information that you provide to us when you use our web shop or communicate with us.

We may also record the IP address you use to connect to the Internet. An IP address is a unique identifier used by devices to identify and communicate with each other on the Internet. 

You do not need to provide us Personal Data simply to browse our site, but we do collect certain information using cookies and other technology as explained in our cookie notice. 

If your Personal Data comes to us from a third party (for instance, from your employer), we require the third party to assure us they have the legal right to collect and provide us the data. 

Lexmark does not actively market or target any communication to children or knowingly collect their information. We encourage parents and guardians to take an active role in their children’s online activities and interests.

Like all companies, we use the Personal Data we collect in multiple ways. Examples include:

• to operate our websites;
• to fulfill your requests for information;
• to register your products;
• to process your job application;
• to allow you to participate in contests and surveys;
• to provide service and support,
• to carry out the purchases you have requested;
• to track your preferences related to our contact with you;
• to provide you support and maintenance on your Lexmark products;
• to fulfill our contractual responsibilities with your company.

We also use your Personal Data to communicate with you. We may use your Personal Data to send you certain mandatory service communications such as welcome letters, billing reminders, information on technical service issues, security warnings, software updates, and other support announcements. If you choose to receive promotional materials from us we may also use your Personal Data to confirm that choice where necessary and to promote and market products, services, and special offers.

The Personal Data in our care may be stored, transferred, combined with other data, and otherwise processed, all in accordance with our privacy principles.

Your rights related to your Personal Data will vary by jurisdiction and may include:

• The right to be fully informed of what data we collect, why we collect the data, and whether we intend to transfer it.
• The right to access your data and correct or update any errors;
• The right to erasure;
• The right to notification;
• The right to restrict the use of Personal Data;
• The right to object to some forms of processing.
• The right to lodge a complaint with the competent supervisory authority.

If our use of your Personal Data is based on your consent, you may withdraw it at any time by contacting us in writing as indicated below or, if applicable, through the Global Preference Centre. We will inform you of the implications of withdrawing consent.

Please feel free to direct any questions or concerns regarding this notice or our treatment of Personal Data by contacting us via the e-mail address or the physical addresses indicated below. To ensure the most efficient response, we highly encourage you to use the P@L e-mail address. When we receive written questions and concerns, it is our policy to contact the individual user regarding his or her concerns as soon as reasonably possible. We will investigate and attempt to resolve any questions or concerns related to Personal Data or our privacy programme in accordance with the principles contained in this notice.

E-mail

privacy@lexmark.comopens in a new tab

Post

Lexmark International Technology Kft.
Data Protection Officer
Lechner Ödön fasor 8.
Millennium Tower III., 2nd floor
1095 Budapest
Hungary.

Additional contact information

You may also contact your local Lexmark entity via the contact information provided on each of Lexmark’s websites.

When you contact us please let us know your name, address, any e-mail address you have provided on our website(s) and a description of the circumstances under which you provided the data (for example, to register a product, to receive a newsletter, etc.). To protect your privacy and security, we will also take reasonable steps to verify your identity before taking any action.

We regularly review our compliance with this Privacy Notice. If we change this notice, we will post the revised notice here, along with the date of revision. If the changes are significant, we may also post a notice on our home page. Any changes will apply only from the date of the revision.

The following sections provide a more detailed explanation of our privacy principles.

It is Lexmark’s intent to be fully transparent in its collection and use of Personal Data. We provide notice when collecting your Personal Data to explain the purpose for which we are collecting the data. This notice is intended to help you make an informed choice. We use our best efforts to provide information and an explanation in a clear and convenient manner at every point we ask for your data.

We provide notice regarding the types of data we collect, how the data will be used, how the data is obtained (if it is not already clear), with whom the data may be shared, and how long it will be retained. An example may be found in our Global Preference Centre. If we have not been clear or you have any question or concern, please ask.

We will not use the data for any purpose other than as provided in the notice. If you or your employer choose to have a contractual or other business relationship with Lexmark, we may contact you in connection with that business relationship when necessary.

Most of the time, you may simply choose not to provide us your Personal Data. If you choose not to provide the Personal Data we request online, you can still visit most of our web pages, but you may be unable to access certain options, offers, and services that involve our interaction with you.

Depending on the circumstances under which we collect Personal Data, Lexmark’s use and processing of the data is based on one or more of the following:

• your consent;
• fulfillment of an obligation to you;
• our compliance with an applicable law, regulation, or other legal obligation;
• a need to protect your or another natural person’s vital interests; or,
• our company's or a third party’s legitimate interests where such interest overrides your personal interest, fundamental rights or freedoms.

Lexmark frequently reviews the purposes for which data is collected to ensure that our data collection supports reasonable business requirements.

Your personal data belongs to you. We will provide you as much access and information as we reasonably can to update or amend the Personal Data in our care. Where applicable, we also provide a method to withdraw your consent, request a copy or transfer of your data, and even delete your Personal Data. Please keep in mind that any such request must be valid and legal and we may require additional details from you to respond appropriately. We will respond to each request in accordance with the law.

Lexmark takes reasonable steps to ensure that the Personal Data we process is accurate, complete and current by encouraging you to update your Personal Data as necessary.

We strive to keep your Personal Data accurately recorded. We have implemented technology, management processes, and policies to help maintain data accuracy. We provide individuals with reasonable access to review and correct their Personal Data.

Lexmark’s practice is to gather the least amount of Personal Data required for the stated purpose. It is also our policy to retain any Personal Data only as long as required to meet the business need for which it is collected. Once the business need has expired, the Personal Data will be routinely deleted. In some cases, Personal Data must be retained longer than either of us may expect due to legal obligations.

We take seriously the trust you place in us and work hard to incorporate information security into our systems, our products, and our services. We employ a global team of security professionals that sets standards and governs the enforcement of a number of corporate policies.

To protect against unauthorised access, misuse, disclosure, or alteration of your Personal Data, we employ appropriate physical, technical, organisational, and administrative measures.

Lexmark products and services are designed with privacy and security in mind using tested methodologies such as a Secure Development Lifecycle and Privacy Impact Assessments. Our devices have received worldwide recognition year after year for their robust security options and our organisation has received security related certifications such as ISO 27001.

We keep your Personal Data confidential. We will not sell, rent, trade or lease your Personal Data to others. Unless we have your permission, we will not use or share your Personal Data in ways unrelated to the ones we describe at the time you provide the data or as described in a controlling contract. We engage service providers and suppliers (“agents”) to perform certain functions on our behalf. For example, these agents may deliver products to you, provide product service and support, maintain our information technology systems, and assist us with legitimate marketing and communication initiatives. Those agents will be permitted to process Personal Data only to perform the services specified by Lexmark. They are required to maintain the confidentiality of the information and are prohibited from using it for any other purpose. Any agent will have entered into written terms with Lexmark requiring that the agent abide by terms no less protective than Lexmark's own privacy standards.

Lexmark or its affiliates could merge with or be acquired by another business, or their respective assets may be acquired. Lexmark will seek appropriate protection for personal information in these types of transactions.

We are a global organisation with offices and customers around the world. To efficiently manage our business and best serve you, all kinds of data – not just Personal Data – may be transferred and accessed by Lexmark entities worldwide on the basis of this Privacy Notice and in alignment with international data privacy standards.

We may in accordance with the EU General Data Protection Regulation and applicable local laws store, transfer and process Personal Data in the United States or other countries in which we maintain facilities. By using our website or services, you consent to any such transfer of information outside of your country. As regards the transfer of Personal Data outside the EEA, we have established appropriate data transfer processing agreements based on standard data protection clauses adopted by the EU Commission in accordance with applicable law (see i.e. Article 46 (2) (c) of the GDPR as well as EU Commission Decision 2010/87 of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries).

If your Personal Data are processed by Lexmark, you are a data subject within the meaning of the EU General Data Protection Regulation (“GDPR”) and Swiss law and have the following rights against the Lexmark as controller:

• Right of access

You have the right to obtain from Lexmark confirmation as to whether or not your Personal Data are being processed by us.

If that is the case, you may demand that Lexmark provide you with the following information:

• a. the purposes of processing your Personal Data;
• b. the categories of Personal Data concerned;
• c. the recipients or categories of recipient to whom your Personal Data have been or will be disclosed;
• d. the expected time period for which your Personal Data will be stored, or, if such information cannot be provided, the criteria used to determine that time period;
• e. the existence of a right to request from Lexmark rectification or erasure of Personal Data or restriction of processing or a right to object to such processing;
• f. the existence of a right to request from Lexmark rectification or erasure of Personal Data or restriction of processing or a right to object to such processing;
• g. the existence of a right to lodge a complaint with a supervisory authority; where the Personal Data are not collected from you as the data subject, all available information as to their source;
• h. the existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved, as well as the significance and the expected consequences of such processing for you.

You have the right to be provided with information as to whether your Personal Data will be transferred to any third country or international organisation. In this connection, you may demand to be notified of any suitable safeguards that are put into place in connection with such a transfer.

You have the right to rectification and/or completion of your Personal Data by Lexmark if your Personal Data are incorrect or incomplete.

You have the right to restricted processing of your Personal Data under the following conditions:

• the accuracy of the Personal Data is contested by you, for a period enabling Lexmark to verify the accuracy of the Personal Data;
• processing is unlawful and you oppose erasure of your Personal Data and request restricted use of your Personal Data instead;
• Lexmark no longer needs your Personal Data for processing purposes, but they are needed by you for the establishment, exercise, or defence of legal rights or claims;
• you have objected to and it has not yet been decided whether legitimate grounds of Lexmark, as controller, override your own rights

If processing of your Personal Data has been restricted, such Personal Data may  with the exception of storage  only be processed with your consent, or for purposes of establishing, exercising, or defending legal rights or claims, or for the protection of the rights of another natural person or legal entity, or for reasons of important public interest.

If processing has been restricted under any of the above conditions, you will be informed by Lexmark before the restriction is lifted.

You have the right to demand that Lexmark erases your Personal Data without undue delay if one of the following grounds is present:

• the Personal Data are no longer necessary for the purposes for which they were collected or otherwise processed;
• your revoke your consent based on which your data are processed, and where there are no other legal grounds for processing your Personal Data;
• you object to processing of your Personal Data and there are no overriding legitimate grounds for processing your Personal Data;
• your Personal Data have been unlawfully processed;
• your Personal Data must be erased for compliance with a legal obligation to which Lexmark is subject as a controller; or
• your Personal Data have been collected in relation to offered information society services.

If Lexmark has made your Personal Data public and is obligated to erase your Personal Data, Lexmark, taking into account available technology and the cost of implementation, must take reasonable steps, including technical measures, to inform third parties who are processing your Personal Data that you have requested that they erase any links to, or copies or replications of, those Personal Data.

There is no right to erasure if and to the extent that processing is necessary:

• for exercising the right of freedom of expression and information;
• for compliance with a legal obligation which requires processing under applicable law to which Lexmark is subject as a controller, or for the performance of a task carried out in the public interest, or in the exercise of official authority vested in Lexmark as a controller;
• for reasons of public interest in the area of public health;
• for archiving purposes in the public interest; or
• for the establishment, exercise, or defence of any legal rights or claims.

If you have exercised your right to rectification, erasure, or restriction of processing, Lexmark must notify all recipients to whom your Personal Data have been disclosed of such rectification, erasure, or restriction of processing, unless this proves impossible or would be associated with disproportionate effort and expense.

You have the right to be informed of those recipients by Lexmark.

You have the right to receive, in a structured, commonly used, and machine-readable format, the Personal Data which you have provided to Lexmark. In addition, you have the right to transmit those data to another controller without hindrance by, provided that:

• processing is based on consent or on a contract; and
• processing is carried out by automated means.

When exercising your right to data portability, you also have the right to have your Personal Data transmitted directly from one controller to another, if technically feasible. Any exercise of the right to data portability may not adversely affect freedoms or rights of any third parties.

The right to data portability does not apply to the processing of Personal Data that is necessary for the performance of a task that is carried out in the public interest or in the exercise of official authority vested in the controller.

You have the right to revoke your consent to processing of your Personal Data at any time. Revocation of consent will not affect the lawfulness of data processing that has occurred before revocation.

Notwithstanding any other administrative or judicial remedies available to you, you have the right to lodge a complaint with a supervisory authority, in particular in the country where your habitual abode or workplace is located or where the alleged violation occurred, if in your opinion the processing of your Personal Data violates applicable law.