Agricultural Solutions
Agriculture

BASF Privacy Policy

We are delighted that you have visited our website and thanks you for your interest in our company.

We take data protection seriously. This privacy statement describes:

  • the personal data we collect when you visit our website
  • the purposes for which we use such data
  • the legal basis for the processing of personal data
  • the recipients of such personal data
  • the period for which such personal data will be stored
  • whether you are obliged to provide personal data

Furthermore, we would like to inform you about:

  • the existence of your rights regarding the processing of your personal data
  • the controller in the meaning of data protection laws and, where applicable, our data protection officer

1. What Personal Data Do We Collect When You Visit Our Website?

(1) Visiting Our Website

When you visit our website without contacting us or signing in, your browser transmits the following information automatically to our server:

  • IP address of your computer
  • information about your browser
  • website that you were on right before you landed on our website
  • URL or file requested
  • date and time of your visit
  • volume of data transmitted
  • status information, e.g. error messages

What Is the Purpose of Such Processing?

Processing of the information cited above is necessary to send the requested content to your browser. In doing so, we store the complete IP address only to the extent necessary to make available the functionalities of the website requested by you.

Moreover, to protect us from attacks and to safeguard the proper operation of our website, we store transiently and with restricted access for a maximum period of 180 days. Such period may be extended if and to the extend necessary to prosecute attacks and incidents. We will only investigate the user of an IP address in case of an illegal attack.

What Is the Legal Basis for Such Processing?

The legal basis for the handling of personal data results from the fact that such handling is required to make available the functionalities of the website requested by you (Art. 6 (1), lit b.) General Data Protection Regulation). Moreover, storing of personal data cited above takes place to protect our legitimate interest, to defend and protect our website and to investigate in case of illegal attacks (Art. 6 (1), lit f.) General Data Protection Regulation).

(2) Contacting Us

If you contact us by email or by contact form on our website, we receive the following information:

  • name, surname
  • your email address
  • date and time of your message
  • your message

What Is the Purpose of Such Processing?

If you contact us via the contact form on our website or by email, we use the personal information exclusively to process your request.

What Is the Legal Basis for Such Processing?

The legal basis for such processing is Art. 6 (1), lit b.) General Data Protection Regulation. The legitimate interest of BASF is given by the purposes of proccing sited above.

(3) Newsletter

Our website offers the option of subscribing to free newsletters to inform you about the products and services offered by BASF in the field of Crop Protection as well as – as the case may be – about product registrations or information on events. When you register for the newsletter, the data entered into the input screen is transmitted to us as well as the following information:

  • IP address of the accessing computer
  • time of subscription
  • a copy of the confirmation email that you receive after filling in the registration form
  • salutation and title
  • first and last name
  • farm business name
  • postcode
  • email address
  • newsletter topic
  • communication channel (post, phone, email)
  • occupation

We use the so-called double opt-in procedure. After registration for the email newsletter we will send you a message to the indicated email address asking for your confirmation. Newsletters contain an analytics pixel for optimizing our services in regard to your preferences and interests (e.g. article read).

What Is the Purpose of Such Processing?

The purpose of sending newsletters and the processing of this personal information is to inform you about the products and services offered by BASF in the field of crop protection according to your preferences. Our goal is to provide you with the most relevant information by combining the data you have provided with your behavior on our website.

What Is the Legal Basis for Such Processing?

The legal basis for the processing specified in sec. (3) above is your consent (Art. 6 (1), lit a.) General Data Protection Regulation). You may at any time with future effect revoke your consent by unsubscribing from the newsletter.

(4) Giving Feedback

When you provide feedback via the “feedback button” or a questionnaire, the information entered into the input screen is transmitted to us as well as the following information:

  • date and time of feedback
  • feedback content
  • device, OS and browser used
  • URL visited when providing feedback
  • amount of time needed to complete the feedback

What Is the Purpose of Such Processing?

The purpose of the processing of this personal information is to help us to continually optimize our content. Your feedback is treated anonymous.

Feedback responses are only available to those, who have access to Medallia and who have access rights to the connected feedback button. The account can only be accessed with a unique username or email address and password. Medallia will never sell the collected feedback results or share the feedback with others. Furthermore, Medallia will never share the collected feedback with other users of Medallia.

What Is the Legal Basis for Such Processing?

We are interested in your opinion on our products and services. The legal basis for the processing is our legitimate interest according to Art. 6 Sec. 1 lit. f.) GDPR.

2. Are You Required to Provide the Data?

When you visit our website, your browser transmits the information under Section 1 (1) automatically to our server. You are free to transmit such data. Without providing such data we are not able to serve you the requested content.

You are not obliged to let us use your anonymized data for web audience measuring. You are also not obliged to let us use your IP address for mapping with your company or industry information.

If you want to contact us by email or by contact form on our website, you are free to transmit the data under Section 1 (2). We will mark mandatory fields, if any, of a contact form. Without providing the required data you may prevent us from answering and meeting your request properly.

You are free to choose if you want to receive inform you about the products and services offered by BASF in the field of crop protection according to your preferences and subscribe to our newsletter.

3. To What Recipients Do We Transmit Your Data?

We transmit the data mentioned in section 1 to data processors based in the European Union for the purposes determined in section 2. Such data processors process personal data only on instructions from us and the processing is carried out on behalf of us.

Your personal data will only be transferred without your express prior consent if this is legally permissible or necessary.

  • For a deeper understanding of user intentions, we conduct polls with Medallia, a service offered by Medallia Inc., (in the following “Medallia”), Kleyerstraße 79, 60326 Frankfurt am Main. The Medallia headquarters is in the US. 575 Market Street. Suite 1850 San Francisco, CA 94105
  • When you partake in a Medallia campaign (such as questionnaires or feedbacks), your feedback is being transferred to and stored at the Medallia server, located in the EU, on whose service we are dependent for the provision of our services.
  • The data you provide when subscribing to our newsletter will be shared within our group of companies for internal administrative purposes, including joint customer care, as necessary. This transfer is in our legitimate interest to process the data for administrative purposes within the group of companies.
  • Your personal data can be transferred to authorities within the context of their jurisdiction (e.g. tax authorities, police, prosecuting authorities). The data will be transferred because we are legally obliged to transfer the data or it is in our legitimate interest to share the data to detect misuse or to enforce legal claims. When you sign up to our newsletter your personal data will be transferred to the following external companies and external service providers on whose services we are dependent for the provision of our services: SHE Informationstechnologie AG, Donnersbergweg 3, 67059 Ludwigshafen am Rhein/Germany
  • For email newsletter we use Inxmail, a service of Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg/GERMANY (in the following “Inxmail”) for sending the newsletter. By subscribing to our email newsletter your email address, first name, last name, salutation, latitude and longitude provided at the registration is being transferred to, and stored at, the Inxmail server, located in Germany. Trio-interactive IT Services GmbH as technical provider for our email marketing tool is processing the user data to send the newsletters out via email.

We have carefully selected our external companies and external service providers as processors and contractually obliged to process all personal data exclusively in accordance with our instructions.

In transactions where the structure of our company changes, customer information may be shared with the part of the company to be transferred. Any disclosure of personal data is justified by the fact that we have a legitimate interest in adapting our form of business to the economic and legal circumstances as required.

We also work with service providers to fulfil the above-mentioned purposes. Those service providers process personal data of Our Contact Persons in our name and solely according to our instructions. They are contractually obliged to adhere to the applicable data protection regulations.

In some cases, we disclose personal data to service providers or group companies located outside of the European Economic Area (“third-party countries”), in which an adequate data protection level is not guaranteed by applicable laws. In such cases we take suitable measures to safeguard the protection of the personal data of Our Contact Persons and to ensure an adequate level of data protection. Hence, we disclose personal information of Our Contact Persons to recipients outside our group of companies located in a third-party country only if those recipients have concluded the EU Standard Contractual Clauses with us or if those recipients have implemented Binding Corporate Rules.

If you would like further detail on the service providers we use and the country / countries in which your data is stored, please contact data-protection.uk@basf.com

4. How Do We Protect Your Personal Data?

We implemented technical and organizational measures to ensure an appropriate level of security to protect your personal data against accidental or unlawful alteration, destruction, loss or unauthorized disclosure. Such measures will be continuously enhanced in line with technological developments.

5. Data Retention Period

We delete or anonymize your personal data as soon as they are no longer required for the purposes for which we processed them in accordance with the above paragraphs unless deletion or blocking would violate our legal obligations to provide and preserve records (such as retention periods provided by commercial or tax laws).

Personal data processed based on your consent will be stored until you withdraw your consent.

6. Do We Use Cookies and Social Plugins on Our Website?

We will inform you about using cookies in our cookie banner when you visit our website. You accept the use of cookies by further using our website. For further information, please refer to our Cookie Policy:

[retainer OneTrust]

You can configure your browser settings to your preferences and decide which cookies you want to accept and which you want to refuse. We would like to point out that you may not be able to use all the functions of our website if you do not allow the use of cookies as described in this section.

You can prevent AT-Internet from collecting and using cookie-generated data and data about your use of the website (including your IP address) by downloading and installing the browser plug-in available at

Opt-Out interest-based advertising (NAI)

Opt-Out AT-Internet

You can prevent Tealium from collecting and using cookie-generated data and information about your use of the website (including your IP address) by clicking on the following link. Tracking is immediately deactivated when you click on the link and you will not receive a confirmation message.

You have the option to reject any cookie category (except the necessary cookies for the performance of the webiste) by clicking the "cookie settings" button.

Embedded YouTube videos

a. Data processing

We have integrated YouTube videos into our online offering, which are stored on the YouTube platform and can be played directly from our website. YouTube is a service of Google LLC, D/B/A YouTube. 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter as ‘Google’). The videos are all embedded in the so-called ‘2-click-mode’, which means that no data about you as a user is being transferred to Google if you do not activate the video function. Before the video function’s activation, only a preview image loaded from our own web server is being displayed.

Data will only be transferred to Google if you activate such video functions. Once being activated, we have no influence on this data transfer. The data transfer is carried out regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account.

b. Purposes and legal basis

We use YouTube videos on our website to present those to you in an easy way.

The legal basis for the processing of your personal data is your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. You grant this consent by activating the video function. If activated, your personal data will be transferred to Google as described above.

In the course of the data transfer to Google, your personal data will be transferred to servers of Google, which might also be located in the USA. The USA is a country that does not have a level of data protection which is adequate to that of the EU. In particular, this means that personal data can be accessed by US authorities in a simplified manner and that there are only limited rights to such measures. If you activate the YouTube video function, you expressly consent to the transfer of data to Google and to the transfer of your personal data to servers located in the USA.

If you have given your consent, you have the right to revoke it at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

I agree to the transfer of my personal data to Google in order to display contents provided by YouTube.
You can revoke your consent at any time for the future by unchecking the checkbox.

c. Further information

Further information on data processing, in particular on the legal basis and storage period by Google, can be found in the provider's privacy policy (https://policies.google.com/privacy) and in the privacy banner on the YouTube platform. There you will also find further information on your rights and setting options to protect your privacy.

Google may also process your personal information in the United States, a third country without an adequate level of data protection.

Embedded Google Maps

a. Data processing

We have integrated Google Maps into our online offering, which are stored on the Google Maps platform and can be displayed directly from our website. Google Maps is a service of Google LLC, D/B/A YouTube. 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter as ‘Google’). The maps are all embedded in the so-called ‘2-click-mode’, which means that no data about you as a user is being transferred to Google if you do not activate the map function. Before the map function’s activation, only a preview image loaded from our own web server is being displayed.

Data will only be transferred to Google if you activate such maps functions. Once being activated, we have no influence on this data transfer. The data transfer is carried out regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account.

b. Purposes and legal basis

We use Google Maps on our website to present those to you in an easy way.

The legal basis for the processing of your personal data is your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. You grant this consent by activating the map function. If activated, your personal data will be transferred to Google as described above.

In the course of the data transfer to Google, your personal data will be transferred to servers of Google, which might also be located in the USA. The USA is a country that does not have a level of data protection which is adequate to that of the EU. In particular, this means that personal data can be accessed by US authorities in a simplified manner and that there are only limited rights to such measures. If you activate the Google Maps function, you expressly consent to the transfer of data to Google and to the transfer of your personal data to servers located in the USA.

I agree to the transfer of my personal data to Google in order to display contents provided by Google Maps.
You can revoke your consent at any time for the future by unchecking the checkbox.

c. Further information

Further information on data processing, in particular on the legal basis and storage period by Google, can be found in the provider's privacy policy (https://policies.google.com/privacy). There you will also find further information on your rights and setting options to protect your privacy.

Google may also process your personal information in the United States, a third country without an adequate level of data protection.

7. What Rights Do You Have?

You have certain rights under the General Data Protection Regulation including the right to request a copy of the personal information we hold about you, if you request it from us in writing:

7.1. Right to Access: the right to obtain access to your information (if we’re processing it), and certain other information (like that provided in this privacy policy);

7.2. Right to Correct: if your personal is inaccurate or incomplete you have the right to have your personal information rectified;

7.3. Right to Erasure: this is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions. For example, we have the right to continue using your personal data if such use is necessary for compliance with our legal obligations or for the establishment, exercise or defense of legal claims.

7.4. Right to Restrict Our Use of Your Information: the right to suspend the usage of your personal information or limit the way in which we can use it. Please note that this right is limited in certain situations: when we are processing your personal information that we collected from you with your consent you can only request restriction on the basis of: (a) inaccuracy of data; (b) where our processing is unlawful and you don’t want your personal information erased; (c) you need it for a legal claim; or (d) if we no longer need to use the data for the purposes for which we hold it. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for restriction of the use of their personal information to make sure the restriction is respected in future;

7.5. Right to Data Portability: the right to request that we move, copy or transfer (where technically feasible) your personal information in a structured, commonly used and machine-readable format, for your own purposes across different services;

7.6. Right to Object: the right to object to our use of your personal information including where we use it for our legitimate interests, direct marketing;

7.7. Right to Be Informed: you have the right to be provided with clear, transparent and easily understandable information about how we use your personal information; and

7.8. Right to Withdraw Consent: if you have given your consent to anything we do with your personal information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal information with your consent up to that point is unlawful).

The exercise of these rights is free of charge for you, however you are required to prove your identity with 2 pieces of approved identification. We will use reasonable efforts consistent with our legal duty to supply, correct or delete personal information about you on our files.

To make inquiries or exercise any of your rights set out in this privacy policy and/or make a complaint please contact us by emailing or write to us and we will endeavor to respond within 30 days. Contact details can be found in section 9 below.

When we receive formal written complaints, we will contact the person who made the complaint to follow up. We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints that we cannot resolve directly.

If you are not satisfied with the way any complaint you make in relation to your personal information is handled by us then you may refer your complaint to the relevant data protection supervisory authority.

8. Where Can You Lodge a Complaint?

You have the right to lodge a complaint with our Data Protection Representative:

Paul Russell

Data Protection Representative (Controlling)

PO Box 4, Earl Road, Cheadle Hulme, Cheadle, Cheshire, SK7 6QG

data-protection.uk@basf.com

+44 161 485 6222

or with the following competent supervisory authority:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz

Hintere Bleiche 34

55116 Mainz

9. Who Is Controller and Data Protection Officer?

You can find the controller in the meaning of data protection laws here.

Please use the address of the controller above to contact our Data Protection Representative

Top