BASF appreciates your visit to our website and your interest in our company.
The issue of data protection is a top priority at BASF. Therefore, we would like to inform you about it in detail below:
A. Who is responsible for data processing and who is our data protection officer?
B. What data do we process, for what purposes, for how long and on what legal basis?
C. Are you obligated to provide us with this data?
D. With whom do we share your personal data?
E. How do we protect your personal data?
F. What rights do you have?
G. Where can you complain?
H. Data protection for minors
A. Who is responsible for data processing and who is our data protection officer?
The data controller with respect to the operation of this Site can be found at here (hereinafter “BASF” or “we”).
Our data protection officer is:
Alexandra Haug
EU Data Protection Supervisor
67056 Ludwigshafen
+49 (0) 621 60-0
E-mail: data-protection.eu@BASF.com
B. What data do we process, for what purposes, for how long and on what legal basis?
In the following we inform you about the data processing on our site (a), their purposes and legal bases (b) as well as the respective storage period and, if applicable, specific objection and elimination options. (c).
a. Data processing
If you visit our website purely for informational purposes, i.e. do not register or transmit data in any other way (e.g. via a contact form), the following information is automatically transmitted to our server by your browser:
- Name of the website from which you are visiting us
- Name of the visited page (URL) or the opened file
- Date and time of your visit
- Status information such as error messages
- Transferred data volume and access status (file transferred, file not found, etc.)
- Version of your computer’s operating system and name of your access provider
- The IP address of your device
b. Purpose and legal basis
When you visit our website, we use under B.1 the IP address and other information that your browser automatically transmits to our server. a. until
(i) provide you with the requested content
(ii) to ensure the security and stability of our website and to track unauthorized usage
(iii) to enable a comfortable use of our website.
The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the data processing purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.
c. Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses are anonymized by deleting the last eight bits so that it is no longer possible to identify you.
2. cookies
a. Data processing and respective legal basis
We use cookies on our website. This is text information that can be stored in the browser on the viewer’s device about a visited website (web server, server). The cookie is either sent to the browser by the web server or generated in the browser by a script (JavaScript). The web server can read this cookie information directly from the server when the user revisits this page or transfer the cookie information to the server via a script of the website. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware.
In general, we use the following cookies:
Absolutely necessary cookies
These cookies are necessary for the functioning of the website. Generally, these cookies are set only in response to actions you take in response to a service request, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block these cookies or to inform you about these cookies. However, some areas of the website may not function properly.
The legal basis for the processing of these cookies is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the data processing purposes listed under B.1.b.
b. Specific use of cookies, purposes and storage period
In particular, we use the following cookies, depending on the cookie settings you set in the Privacy Preference Center. Only the absolutely necessary cookies are enabled by default. If you also do not want this, you have the option to generally reject cookies in your browser. In this case, the functionality of the visited website may be impaired.
Further details on the respective cookie providers can be found in the Privacy Preference Center under the respective cookie categories.
Contact form and e-mail
a. Data processing
Our web pages contain contact forms as well as links to send us an e-mail directly. If you use one of these contact forms, the data you provide in such forms will be transmitted to us and processed. The mandatory information that must be filled in for electronic contact via the respective contact form is marked with (*). If you provide us with further data, this is done voluntarily.
When you send us an email, we process the associated metadata and the content of the message.
b. Purpose and legal basis
Your data is processed for the purpose of contacting you, processing your inquiry and providing you with our respective services, preventing misuse of the contact form and ensuring the security of our information technology systems.
The legal basis for the processing of data classified as mandatory is Art. 6 para. 1 p. 1 lit. f GDPR. The aforementioned purposes also include a legitimate interest in processing the data. If the purpose of the contact is the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b GDPR. The legal basis for the processing of the data that you have voluntarily provided to us is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR.
c. Duration of storage
The personal data of the data subject shall be deleted or made inaccessible as soon as the purpose of the storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. The data will also be deleted or blocked after the expiry of a storage period prescribed by the aforementioned provisions, unless it is necessary to continue storing the data for the purpose of concluding or fulfilling the contract.
In the case of consent, you have the right to revoke this consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do this, please change the cookie settings.
Data processing within the framework of the KlimaPartner Landwirtschaft project
The KlimaPartner Landwirtschaft project is run by BASF and Raiffeisen Waren-Zentrale Rhein Main eG. Below you will find information about data processing in the context of the project.
Joint responsibility with RWZ as part of the KlimaPartner Landwirtschaft project
In the context of the KlimaPartner Landwirtschaft project, BASF processes personal data in joint responsibility pursuant to Art. 26 DSGVO with Raiffeisen Waren-Zentrale Rhein Main eG, Altenberger Str. 1a, 50668 Cologne (hereinafter “RWZ”). Within this framework, we have entered into a joint responsibility agreement with RWZ pursuant to Article 26 (hereinafter “the Project”). Below you will find information about the main contents of this agreement.
What is the reason for shared accountability?
BASF and RWZ are project partners in the “KlimaPartner Landwirtschaft” project and intend to jointly organize press events, contact journalists and operate a joint website.
For which stages of processing is there shared accountability?
BASF is responsible for the following processing steps:
- Operation of the website “www.klimapartner-landwirtschaft.de, including hosting, range measurement and documentation of consents, where obtained.
- Transmission of anonymous statistics to RWZ, insofar as these are obtained from the reach analysis via the website.
- Sending an initial email to journalists drawing their attention to the project
- Operation of the joint press distribution list with RWZ, including data collection, storage, sending of emails and deletion of personal data.
- Holding joint press conferences with RWZ
RWZ is responsible for the following processing steps:
- Holding joint press conferences with BASF
- Receive anonymous statistics about the website’s reach analysis
- Sending an initial email to journalists drawing their attention to the project
What did the parties agree on?
As part of their joint responsibility under data protection law, the parties have determined which of them fulfills which obligations under the GDPR. This concerns in particular the exercise of the data subject rights and the fulfillment of the information obligations according to Art. 13 and 14 DSGVO.
What does this mean for those affected?
Even if there is joint responsibility, the parties fulfill the data protection obligations in accordance with their respective responsibilities for the individual process stages.
- The parties shall provide the information required by Articles 13 and 14 GDPR to the data subjects free of charge in a precise, transparent, comprehensible and easily accessible form in a clear and simple language. Here, each party sends the other party all the necessary information from its area of activity.
- The parties shall inform each other without delay of the legal positions represented by the parties concerned. They shall provide each other with all information necessary to respond to requests for information.
- Data protection rights can be asserted both with BASF SE and with the partner company. As a rule, data subjects receive the information from the office where rights were asserted.
Joint press distribution list with RWZ
As part of the KlimaPartner Landwirtschaft project, we maintain a joint press distribution list together with RWZ in order to jointly inform journalists about the project via email at irregular intervals.
If you give us your consent and thereby register for the joint press distribution list, the project will process your personal data provided in the respective registration form for the purpose of informing you about the project by email at irregular intervals. The legal basis for this data processing is your consent according to Art. 6 para.1 lit. a) GDPR.
You may revoke your consent at any time with future effect by emailing the project at basf-rwz@klimapartner-landwirtschaft.de. The revocation of consent does not affect the lawfulness of the data processing carried out on the basis of the consent until the revocation. If you withdraw your consent, you will no longer receive information from the project.
Joint press conferences with RWZ
As part of the KlimaPartner Landwirtschaft project, BASF and RWZ hold joint press conferences to share information about the project.
When you register for a joint press conference, the project processes your personal data provided in the registration form for the purpose of holding the press conference.
Within this framework, depending on the type and circumstances of the press conference, information on catering (vegetarian/vegan) as well as further information on travel arrangements (e.g. overnight accommodation, transfer to the train station/airport) can also be processed.
The legal basis for this data processing is the project’s interest in public relations, Art. 6 para. 1 lit. f) DSGVO as well as the contract concluded between you and the project, Art. 6 para. 1 lit. b) GDPR.
C. Are you obligated to provide us with this data?
When you visit our website, the data described in section B.1. mentioned information. a. as well as the information from the cookies classified as strictly necessary are processed automatically. The disclosure of this information is voluntary. Without the provision of this personal data, we cannot display the requested page.
When you
- Allow us to use cookies that are not classified as strictly necessary, or
- get in touch with us and write us an e-mail or use our contact form,
the disclosure of information is voluntary.
If you contact us, we cannot answer your inquiry in the chosen way without providing the personal data required in the individual case. In the case of cookies, the lack of consent may lead to a limitation of the functionality of the website or parts thereof. Embedded videos cannot be played without your consent.
D. With whom do we share your personal data?
Within our company, access to your personal data is only granted to persons and departments that need it to fulfill the above-mentioned purposes.
We also involve service providers. These service providers will only act in accordance with our instructions and are contractually obligated to comply with the applicable data protection requirements.
Otherwise, we will only share your information with third parties if:
- you have given your express consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO have given,
- the disclosure pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
- we have a legal obligation to disclose the data pursuant to Art. 6 para. 1 p. 1 lit. c GDPR exists or
- this is legally permissible and in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO is necessary for the fulfillment of contractual relationships with you.
Your personal data will only be transferred to service providers in a third country if the special requirements of Art. 44 et seq. DSGVO are fulfilled. If and to the extent that service providers are located in a third country, it may be that either the servers of the respective service provider are located in the third country or that the servers are located in the EU but are accessed from a third country in the case of support. Some third countries do not have a level of data protection adequate to that of the EU, e.g., the U.S. or China, as authorities may have simplified access to personal data or that there are limited rights for such actions. If and to the extent you give consent, you expressly give consent to the transfer of personal data to the respective third country.
E. How do we secure your personal data?
BASF uses technical and organizational security measures in order to protect your personal data against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continuously revised in line with technological developments.
F. What Rights Do You Have?
You have certain rights under the General Data Protection Regulation, including the right to request a copy of the personal data we hold about you if you request this from us in writing:
Right of Access: the right to obtain access to your data (when we process it) and certain other information (as provided in this Privacy Policy);
Right to rectification: If your personal information is inaccurate or incomplete, you have the right to have your personal information corrected;
Right to erasure: This is also referred to as the “right to be forgotten” and allows you, in simple terms, to request the deletion or removal of your data if there is no compelling reason for us to continue using it. This is not a general right to deletion; There are exceptions. For example, we have the right to continue to use your personal data if such use is necessary to comply with our legal obligations or to assert, exercise or defend legal claims;
Right to restrict processing: the right to suspend the use of your personal data or restrict the way we can process it. Please note that this right is restricted in certain situations: if we process your personal data that we have collected from you with your consent, you can only request a restriction on the basis of: (a) Inaccuracy of data; (b) if our processing is unlawful and you do not want your personal data to be deleted; (c) you need it for a legal claim; or (d) when we no longer need to use the data for the purposes for which we stored it. If processing is restricted, we may continue to store your data, but we may not continue to use it. We maintain lists of individuals who have asked to restrict the use of their personal information to ensure that the restriction is followed in the future.
Right to data portability: the right to request that we move, copy or transfer (where technically feasible) your personal data in a structured, commonly used and machine-readable format across different services for your own purposes;
Right to object: the right to object to our processing of your personal data, including when we process it for our legitimate interests, direct marketing;
Right to withdraw consent: If you have given your consent to something we do with your personal information, you have the right to withdraw your consent at any time (however, if you do so, it does not mean that anything we have done with your personal information up to that point with your consent is unlawful).
The exercise of these rights is free of charge. However, you must prove your identity using two-factor authentication. We will use reasonable efforts consistent with our legal obligation to provide, correct or delete personal information about you.
To exercise your rights, please contact us, for example by e-mail or post. The contact details can be found in section A.
G. Where can you complain?
You have the right to lodge a complaint with our data protection officer (for contact details, see section A) or with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.
In both cases, you can contact our lead data protection authority:
State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Rear pale 34
55116 Mainz
https://www.datenschutz.rlp.de/de/general-storage/footer/ueber-den-lfdi/kontakt/
E-mail: poststelle@datenschutz.rlp.de
H. Data protection for minors
This website is intended for persons who are at least 18 years old. If a minor submits personal data via this website, we will delete this data and will not process it further as soon as we become aware of it.