This Privacy Notice explains how Moody’s Analytics, Inc. ("Moody’s", "we", "us", "our"), a Moody’s Corporation company, of C/O The Corporation Trust Company, Corporation Trust Center, 1209 Orange Street, Delaware 19801, processes personal data in connection with ESG assessments on demand to unlisted and private companies (the “Product”).
"Personal Data" means information which identifies, or can be used to identify, living individuals, including, depending on applicable law, sole traders and unincorporated partnerships.
The Product provides ESG assessments on demand to unlisted and private companies. If you/your company completes the ESG assessment, Moody’s will collect and process certain data about you/your company, as further described below.
If you/your company choose to fill out the ESG assessment you may provide the following types of data about you/your company:
Trading/company name
Industry classification code
Unique company ID
Country
Employee size
Responses to ESG assessment questionnaire
Contact details of the individual completing the questionnaire (name and email address).
You/your company will provide the information directly. We may also be provided contact details (name and email address) and basic company details (name, unique ID) from our clients which request a Moody’s ESG assessment of your company. We also match basic information about your company (company name, industry classification code, country, employee size, unique ID) from our database Orbis.
1. ESG assessment: The information you provide will be used to conduct the ESG assessment.
2. Use by clients: Our clients who request a Moody’s ESG assessment of your company will use the ESG assessment for their own purposes. We are not responsible for how clients use the ESG assessment.
3. Use within Moody’s Corporation: Moody’s Corporation affiliates may also use Personal Data in the Product for internal purposes, including data analysis. Some Moody’s personnel working on the Product (such as IT support, sales, legal and compliance) have access to Personal Data in the Product as necessary for the completion of their job duties.
4. Business transfers: If Moody’s is part of a business reorganisation, sale, merger or acquisition, Personal Data in the Product may be disclosed as part of the deal, safeguarded by contractual provisions to ensure confidentiality and use of the Personal Data only as described in this Privacy Notice.
5. Legal or regulatory disclosures: We may disclose Personal Data contained in the Product where there is a reasonable requirement to do so, for example, to meet requirements of applicable law and regulation or in response to requests from regulators, courts or government agencies, or to establish or defend our legal rights.
We process Personal Data in the Product under contractual necessity in order to provide the ESG assessment requested by you/your company or with your consent where required under local applicable law.
Personal data is stored in the Product for as long as reasonably necessary to fulfil the purposes we collect it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure, and the applicable legal, regulatory, tax, accounting or other requirements. The Personal Data in the Product will be retained for 10 years after completion of the last ESG questionnaire by you/your company.
The Personal Data in the Product are stored by Moody’s in the US. To transfer Personal Data outside of the EEA, we rely on EU standard contractual clauses to ensure that an equivalent level of data protection applies. To request a copy of these clauses, please email us at privacy@moodys.com.
To access your Personal Data contained in the Product, contact our Data Protection Officer, exercise your rights of correction, objection, restriction or erasure, or any other privacy-related query, please email us at privacy@moodys.com.
You may also have the right to complain to your local data protection authority if you have concerns about how we process your Personal Data. However, we hope we can solve any queries or concerns you may have, so please contact us directly in the first instance.
If you are a resident of California, the California Consumer Privacy Act (“CCPA”) (Civil Code §§ 1798.100 et seq. and its regulations) provides you with specific rights regarding your Personal Data. These include:
You can request information about our collection, use and disclosure of your Personal Data over the past twelve (12) months concerning: (i) the categories of Personal Data we collected about you, (ii) the business or commercial purpose for collecting your Personal Data, (iii) the categories of sources from which your Personal Data is collected, and (iv) the categories of third parties with whom we share your Personal Data. You can request a list disclosing the categories of your Personal Data we have shared in connection with a business purpose.
To exercise the rights described above, it may be necessary for us to verify your identity or authority to make the request and confirm the Personal Data relates to you. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Data. We will not discriminate against you for exercising any of your privacy rights under CCPA or applicable law.
During the past twelve (12) months, we collected the categories of Personal Data described above from California residents. We also disclosed such Personal Data to third parties for the purposes specified above during the past twelve (12) months.
Unless expressly stated in a privacy policy or statement applicable to a specific Moody’s affiliate’s website, product or service:, Moody’s does not sell your Personal Data. and Moody’s does not use or disclose sensitive personal information for purposes requiring notice by CCPA. Moody’s does not have actual knowledge that it sells or shares the personal information of consumers under 16 years of age.
You may exercise any of the rights described in this section by emailing us at privacy@moodys.com.
The most current version of this Privacy Notice will always be available here. You can check the “Last Updated” date posted at the top to see when this Privacy Notice was last updated.