Privacy & cookies policy

Effective Date: January 1, 2023

The AES Corporation, located at 4300 Wilson Blvd., 11th Floor, Arlington, VA 22203, and its affiliates and subsidiaries (collectively, "Company" or "AES") respect your privacy and are committed to protecting it through their compliance with this Policy.

This Privacy & Cookies Policy describes how AES collects, uses, shares, and otherwise processes individually identifiable data about visitors to this Site (defined below), contact persons of our customers, prospects, distributors, vendors, end users and suppliers ("Personal Data"). This Privacy & Cookies Policy applies to Personal Data that we collect through our public website or through any AES services that link to this Privacy & Cookies Policy (collectively, the “Site” or "Sites"), as well as in email, text, and other electronic messages between you and AES, and offline through contact forms or other communications with AES personnel.

This Policy does not apply to information collected by any third party, including through any application or content (including advertising) that may link to or be accessible from or through the Sites.

For the Privacy & Cookies Policy applicable to recruiting activities and job candidates, please see Privacy Notice For Applications | AES Corporation Careers.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Sites or provide that information to AES. By accessing or using this Site, or providing individually identifiable information to AES, you agree to this privacy policy unless there is a separate contract between you and AES governing such disclosures. This policy may change from time to time. Your continued use of this Site or disclosure of individually identifiable information to AES after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

For purposes of the General Data Protection Regulation (GDPR), The AES Corporation shall be considered data controller, and its subsidiaries and affiliates shall be considered transferees of Personal Data.

Children Under the Age of 16

Our Site is not intended for children under 16 years of age. No one under the age of 16 may provide any personal information to or on the Site. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on this Site or through any of its features, use any of the interactive or public comment features of this Site, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us as specified below.

Summary of Key Points

1. Collection	As a business to business ("B2B") organization, we collect name, contact details, and other Personal Data related to our commercial relationships.
2. Use	We use Personal Data to provide our services and respond to inquiries, to manage accounts and maintain business operations, to provide relevant marketing, and to fulfill other business and compliance purposes.
3. Sharing	We share Personal Data as necessary to provide our services and respond to requests, and to fulfill other business and compliance purposes.
4. Marketing choices	You have control over how we use Personal Data for direct marketing.
5. Cookies	We use cookies on our Site and in our communications, and provide choices on use of cookies, including third-party targeting and advertising.
6. Data subject rights	You have certain rights to request access, rectification, deletion, or other actions regarding your Personal Data where required by applicable law.
7. Data security	We maintain technical and organizational measures to protect Personal Data from loss, misuse, alteration, or unintentional destruction.
8. Cross-border data transfers	We provide appropriate protections for cross-border transfers where specified by law.
9. Notice to California consumers	California consumers may have additional rights with respect to their Personal Data.
10. Other issues	We provide other information in this Privacy & Cookies Policy about: (i) the legal basis for collecting and processing Personal Data, (ii) the consequences for not providing Personal Data, (iii) automated decision-making, (iv) do-not-track (DNT) signals, (v) data retention, (vi) links to third-party websites, (vii) employee and contractor issues; and (viii) changes to this Privacy & Cookies Policy.
11. Contact us	Please contact us as detailed below with any questions.

1. Collection of Personal Data

We collect the following categories of Personal Data:

Basic Data: Name, title, company, job responsibilities, phone number, mailing address, email address, and contact details.
Registration Data: Newsletter requests, subscriptions, downloads, and username/passwords.
Device Data: Computer Internet Protocol (IP) address, unique device identifier (UDID), cookies and other data linked to a device, and data about usage of our Site and communications.

Marketing Data: Data about individual participation in trade shows, investor days and networking events, credentials, associations, services you are interested in, and other preferences.

We collect this information directly from you when you provide it to us, or automatically as you navigate through the Site. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.

2. Use of Personal Data

We use the above categories of Personal Data for the following purposes:

Purpose of Use	Categories of Personal Data
Provide the services you requested, respond to your inquiries, and allow AES to contact you.	Basic Data, Registration Data, Device Data, and Marketing Data
Manage your accounts, maintain our business operations, and allow you access to our proprietary systems.	Basic Data, Registration Data, and Device Data
Make our Site more personal, intuitive, and easy to use.	Device Data
Protect the security and effective functioning of our Site and information technology systems.	Basic Data, Registration Data, and Device Data
Provide relevant marketing about our or our affiliates' services, or promotions that we are developing, and opportunities that may be available to you.	Basic Data, Registration Data, Device Data, and Marketing Data
Address our compliance and legal obligations and exercise our legal rights.	Basic Data, Registration Data, and Device Data

3. Sharing of Personal Data

We share Personal Data with the following categories of recipients:

Affiliates: We share Personal Data within the AES group of companies as necessary for the purposes we described above.

Service providers: We share Personal Data with service providers to enable such parties to perform functions on our behalf and under our instructions in order to carry out the purposes identified above, such as marketing and web hosting. We require service providers to provide reasonable security for Personal Data and to use and process such Personal Data only on our behalf.

Auditors and advisors: We share Personal Data with auditors for the performance of audit functions and advisors for the provision of legal and other advice.

Business reorganization: We share Personal Data with any corporate purchaser or prospect to the extent permitted by law as part of any merger, acquisition, sale of company assets, or transition of service to another provider, as well as in the event of insolvency, bankruptcy, or receivership in which Personal Data would be transferred as an asset of AES.

Mandatory disclosures and legal rights: We share Personal Data in order to comply with any subpoena, court order or other legal process, or other governmental request. We also share Personal Data to establish or protect our legal rights, property, or safety, or the rights, property, or safety of others, or to defend against legal claims.

If you have questions about the parties with which we share Personal Data, please contact us as specified below.

4. Marketing Choices

You have control regarding our use of your Personal Data for directing marketing. If you no longer wish to receive any marketing communications, remain on a mailing list to which you previously subscribed, or receive any other marketing communication, you can choose to not receive such communications at any time. Please follow the unsubscribe link in the relevant communication or contact us as detailed below.

5. Cookies

We use and allow certain trusted partners to use cookies, web beacons, and similar tracking technologies (collectively, "cookies") on our Site.

What are cookies?

Cookies are small amounts of data that are stored on your browser, device, communication, or the page you are viewing. Some cookies are deleted once you close your browser, while other cookies are retained even after you close your browser so that you can be recognized when you return to a website. More information about cookies and how they work is available at www.allaboutcookies.org.

How do we use cookies?

We use cookies to provide the Site and our services, gather information about your usage patterns when you navigate this Site in order to enhance your personalized experience, and to understand usage patterns to improve our Site and services. We also allow certain trusted partners to place cookies on our Site in order to collect information about your online activities on our Site over time and across different websites you visit. This information is used to provide advertising tailored to your interests on websites you visit, also known as interest based advertising, and to analyze the effectiveness of such advertising.

Cookies on our Site are generally divided into the following categories:

Strictly Necessary Cookies: These are required for the operation of our Site. They include, for example, cookies that enable you to log into secure areas. These cookies are session cookies that are erased when you close your browser.

Analytical/Performance Cookies: These allow us to recognize and count the number of users of our Site and understand how such users navigate through our Site. This helps to improve how our Site works, for example, by ensuring that users can find what they are looking for easily. These cookies are session cookies, which are erased when you close your browser. We use Google Analytics, and you can see below for how to control the use of cookies by Google Analytics.

Functional Cookies: These improve the functional performance of our Site and make it easier for you to use. For example, cookies are used to remember that you have previously visited the Site and asked to remain logged into it. These cookies qualify as persistent cookies, because they remain on your device for us to use during a next visit to our Site. You can delete these cookies via your browser settings.

Targeting Cookies: These record your visit to our Site, the pages you have visited and the links you have followed to recognize you as a previous visitor and to track your activity on the Site and other websites you visit. These cookies qualify as persistent cookies, because they remain on your device for us to use during a next visit to our Site. You can delete these cookies via your browser settings. See below for further details on how you can control third party targeting cookies.

What are your options if you do not want cookies on your computer?

You can review your Internet browser settings, typically under the sections "Help" or "Internet Options," to exercise choices you have for certain Cookies. If you disable or delete certain Cookies in your Internet browser settings, you might not be able to access or use important functions or features of this Site, and you may be required to re-enter your log-in details.

To learn more about the use of cookies for Google analytics and to exercise choice regarding such cookies, please visit https://tools.google.com/dlpage/gaoptout.

To learn more about certain cookies used for interest based advertising by third parties, including through cross-device tracking, and to exercise certain choices regarding such cookies, please visit the Digital Advertising Alliance, Network Advertising Initiative, Digital Advertising Alliance-Canada, European Interactive Digital Advertising Alliance or your device settings.

6. Data Subject Rights

Where required by applicable law, you have the right to obtain confirmation that we maintain certain Personal Data relating to you, to verify its content, origin, and accuracy, as well as the right to access, review, port, delete, or to block or withdraw consent to the processing of certain Personal Data (without affecting the lawfulness of processing based on consent before its withdrawal), by contacting at:

Privacy Office
4300 Wilson Blvd.
11th Floor
Arlington, VA 22203
dataprotectionofficer@aes.com

In particular, you have the right to object to our use of Personal Data for direct marketing and in certain other situations at any time. Please note that we may need to retain certain Personal Data as required or permitted by applicable law.

Where provided by applicable law, you may have the right to lodge a complaint or raise a concern with the relevant data protection supervisory authorities in the jurisdiction you reside.

7. Data Security

We maintain technical and organizational measures to protect Personal Data from loss, unauthorized access, misuse, alteration, disclosure, or unintentional destruction. However, no security measure can guarantee against compromise. You also have an important role in protecting your Personal Data. You should not share your username and password with anyone, and you should not re-use passwords across more than one website.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Site. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.

8. Cross-Border Data Transfers

We transfer Personal Data to various jurisdictions as necessary for the purposes described above, including to jurisdictions that may not provide the same level of data protection as your home country. We provide appropriate protection for cross-border transfers as required by law for international data transfers. With respect to transfers originating from the European Economic Area ("EEA"), we implement standard contractual clauses approved by the European Commission, and other appropriate solutions to address cross-border transfers as required by applicable law. Where required by such laws, you may request a copy of the suitable mechanisms we have in place by contacting us as detailed below.

9. Notice to California Consumers

If you reside in California, we are required by California law to provide you with additional information about how we use and disclose your information, and you may have additional rights with regard to how we use your information. We have included this California-specific information below.

CA Personal Information. Consistent with the "Collection of Personal Data" section above, we collect certain categories and specific pieces of information about individuals that are considered "Personal Information" in California ("CA Personal Information"). Specifically, we may collect the following types of CA Personal Information:
- Identifiers: name, address, telephone number, email address, age, date of birth, username and password for our websites, IP address;
- Commercial information: services purchased, obtained, or considered, other purchasing or consuming histories or tendencies, payment information, transaction history;
- Professional or employment-related information;
- Internet or other electronic network activity information: computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information; and
- Geolocation information: physical location information through the use of our services.

Sources. We collect certain categories of CA Personal Information from you and other third parties as described in the "Collection of Personal Data" section above. The categories of third parties from whom we collect CA Personal Information include the following:
- Third-party partners;
- Third party applications (including blogs, chat rooms, or support centers);
- Advertising networks; and
- Other companies or organizations, such as market research firms or data aggregators.

Purposes. We collect the CA Personal Information for the business and commercial purposes described in the "Use of Personal Data" section above. We also share and/or disclose your CA Personal Information as follows:
Sharing your CA Personal Information for business purposes: As described above in the "Sharing of Personal Data" section, we may share the following categories of your CA Personal Information with third party partners, public or government authorities and future business partners for our business purposes:
- Identifiers;
- Commercial information;
- Professional or employment-related information;
- Internet or other electronic network activity; and
- Geolocation information.

As described above, examples of business purposes include service fulfillment, internal operations, prevention of fraud and other harm, and legal compliance.

Sharing your CA Personal Information for other purposes: We may share the following categories of your CA Personal Information with third party partners and in a manner that constitutes a "sale" under California law:
- Identifiers;
- Commercial information;
- Professional or employment-related information; and
- Internet or other electronic network activity.

This information may be shared for the following purposes: marketing, analytics, or service performance measurements.

We do not knowingly share the CA Personal Information of individuals under 16 years of age, in a manner that constitutes a "sale" under California law.

California Consumer Rights. Subject to certain exceptions, as a California resident, you have the right to: (i) request access to your CA Personal Information; (ii) request deletion of your CA Personal Information; (iii) request information about the CA Personal Information about you that we have disclosed and/or "sold" (as such term is defined under California law) to third parties within the past 12 months; and (iv) opt-out of the "sale" of your CA Personal Information, as detailed above.
- Do Not Sell My Information. To opt-out of the "sale" of your CA Personal Information with respect to cookies, please opt-out as described in the “Cookies” section above. To opt-out of other “sales”, please contact us as described below.
- Exercising other California consumer rights. Should you wish to request the exercise of your other rights as detailed above with regard to your CA Personal Information, we will not discriminate against you by offering you different pricing or services, or by providing you with a different level or quality of services, based solely upon this request. Please see the "Contact Us" section below if you have questions or would like to exercise such rights. You also have the option of designating an authorized agent to exercise your rights on your behalf. For authorized agents submitting requests on behalf of California residents, please contact us as described below, with any evidence you have that you have been authorized by a California consumer to submit a request on their behalf.

10. Other Information

(i) What is the legal basis of processing?

Some jurisdictions require an explanation of the legal basis for the collection and processing of Personal Data. We have several different legal grounds on which we collect and process Personal Data, including: (a) as necessary to perform a transaction (such as in order to provide the services you requested); (b) as necessary to comply with a legal obligation (such as when we use Personal Data for record keeping to substantiate tax liability); (c) consent (where you have provided consent as appropriate under applicable law, such as for direct marketing or certain cookies); and (d) necessary for legitimate interests (such as when we act to maintain our business generally, including maintaining the safety and security of the Site). With respect to legitimate interests, given that we are a B2B company, we typically collect, and process limited Personal Data about customer contacts and other individuals acting in their business capacities, as part of our overall effort to reduce the privacy impact on individuals.

(ii) What are the consequences of not providing Personal Data?

You are not required to provide all Personal Data identified in this Privacy & Cookies Policy to use our Site or to interact with us offline, but certain functionalities will not be available if you do not provide certain Personal Data. If you do not provide certain Personal Data, we may not be able to respond to your request, perform a transaction with you, or provide you with marketing that we believe you would find valuable.

(iii) Do we engage in automated decision-making without human intervention?

We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or otherwise significantly affects you.

(iv) Does the Site honor do not track ("DNT") signals sent via browsers?

Given the divergent practices of organizations that offer browsers and the lack of a standard in the marketplace, we do not respond to DNT signals at this time.

(v) How long do we retain Personal Data?

We typically retain Personal Data related to marketing activities for as long as you accept marketing communications from us, and upon request we will securely delete such data in accordance with applicable law. For Personal Data that we collect and process for other purposes described above, we typically retain such Personal Data for no longer than for the period necessary to fulfill the purposes outlined in this Privacy & Cookies Policy and as otherwise needed to address tax, corporate, compliance, litigation, and other legal rights and obligations.

With respect to Personal Data subject to GDPR, to the extent we process Personal Data related to marketing activities based on your consent, we discontinue processing after you withdraw your consent or it becomes no longer applicable. Personal Data related to marketing communications is otherwise retained for no longer than two years after the latest active contact with you. We typically retain Personal Data for no longer than 5 years from when processing starts where necessary for contract, corporate, and litigation-related purposes, and for no longer than 10 years from when processing starts where necessary for tax-related purposes. After the relevant retention period, Personal Data is anonymized or deleted, unless we are required to keep or otherwise process the Personal Data by law, in which case we follow the applicable requirements. We make efforts to ensure that no Personal Data about customers, prospects, distributors, vendors, and end users is stored longer than necessary to achieve the purposes described above.

(vi) Are third-party websites governed by this Privacy & Cookies Policy?

This Site contains links and references to other websites administered by unaffiliated third parties. This Privacy & Cookies Policy does not apply to such third-party websites. When you click a link to visit a third-party website, you will be subject to that website's privacy practices. We encourage you to familiarize yourself with the privacy and security practices of the linked third-party websites before providing any Personal Data on that website.

We are active on social media, including Facebook, YouTube, Twitter, Glassdoor, and LinkedIn (“Social Media”). This Site allows you to connect and share data with Social Media. Anything you post on Social Media is public information and will not be treated confidentially. We may post (or re-post) on the Site and our Social Media pages any comments or content that you post on our Social Media pages. Your use of Social Media is governed by the privacy policies and terms of the third parties that own and operate those websites and not by this Privacy & Cookies Policy.

(vii) How does AES handle employee and contractor privacy issues?

Personal Data about our employees, contractors, and other AES temporary workers is addressed through internal company policies and procedures and is outside the scope of this Privacy & Cookies Policy.

(viii) How will we handle any changes to this Privacy & Cookies Policy?

We may update this Privacy & Cookies Policy from time to time as our services and privacy practices change, or as required by law. The effective date of our Privacy & Cookies Policy is posted above, and we encourage you to visit our Site periodically to stay informed about our privacy practices. We will post the updated version of the Privacy & Cookies Policy on our Site and ask for your consent to the changes if legally required.

11. Contact Us

If you have questions or comments regarding this Privacy & Cookies Policy or our privacy practices, please contact us at:

Privacy Office

4300 Wilson Blvd.

11th Floor

Arlington, VA 22203

dataprotectionofficer@aes.com