Data Protection
Privacy Statement
BASF is delighted that you have visited our website and thanks you for your interest in our company.
BASF takes data protection seriously. This Privacy Statement describes:
- the personal data BASF collects when you visit our website
- the purposes for which BASF uses such data
- the legal basis for the processing of personal data
- the recipients of such personal data
- the period for which such personal data will be stored
- whether you are obliged to provide personal data
Furthermore, we would like to inform you about:
- the existence of your rights regarding the processing of your personal data
- the Controller in the meaning of data protection laws and, where applicable, our Data Protection Officer
1. What personal data does BASF collect when you visit our website?
(1) When you visit our website without contacting us or signing in, your browser transmits the following information automatically to our server:
- IP address of your device
- Information about your browse
- URL or file requested
- Date and time of your visit
- Volume of data transmitted
- Status information, e.g. error messages
(2) If you contact us by email or by contact form on our website or you subscribed to our newsletter, we receive the following information:
- Your email address and further information that you provide by email or contact form
- Date and time of your message
(3) If you consented to such processing of personal data:
- IP address of your device
- Website that you were on right before you landed on our website
- Actions/clicks you've made on the landing pages of the website
- Your behavior as a user of our website
- Actions/clicks you’ve made in our newsletter e-mail
2. To what extent and for what purposes does BASF process such data?
(1) When you visit our website, we use your IP address and the other data that your browser transmits automatically to our server (see Section 1 (1)) in order to:
a) send the requested content to your browser. In doing so, we store the complete IP address only to the extent necessary to serve the requested content to you.
b) protect us from attacks and to safeguard the proper operation of our website. In doing so, we store said data transiently and with restricted access for a maximum period of 180 days. Such period may be extended if and to the extent necessary to prosecute attacks and incidents.
BASF will investigate the user of an IP address only in case of an illegal attack.
(2) If you consented, we process your IP address as well as your behavior on our website to be able to track your internet activity (e.g. pages visited, duration of visit, previous website visited, use of contact form) and creating user profiles for our marketing purposes (returning visitor, ad-channel and type of ads the user clicked on). Further information on this processing activities can be found in Section 7 of this privacy statement.
(3) If you contact us by email or by contact form on our website, we use the data under Section 1 (2) to answer and, if possible, to meet your request.
(4) If you subscribed to our newsletter, we process your personal data that is necessary to provide you with our newsletter service. Further, if you consented to such processing, we track the actions and clicks you made in our newsletter e-mail to be able to analyze and measure the range and relevance of our content and to improve the newsletter. After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data.
3. Are you required to provide the data?
When you visit our website, your browser transmits the information under Section 1 (1) automatically to our server. There is no obligation for you to provide us with the personal data in Section 1 (2) and (3). But please note that without such personal data we are not able to serve you the requested content. For example, if you don’t provide us with your e-mail address, we are not able to answer your request in our contact form or to send you our newsletter.
If you want to contact us by email or by contact form on our website, you are free to transmit the data under Section 1 (2). We will mark mandatory fields, if any, of a contact form. Without providing the required data you may prevent us from answering and meeting your request properly.
4. What is the legal basis for the processing?
The legal basis for the processing of the personal data listed under Section 1 (1) is our legitimate interest according to Article 6 (1) (f) General Data Protection Regulation (“GDPR”). The legitimate interests are to be able to maintain our website and provide you with access to it as well as safeguarding our IT security and protecting us from potential attacks.
The legal basis for the processing of the personal data in connection with the contact form on our website are is our legitimate interest according to Art. 6 (1) (f) GDPR to be able to answer your request and communicate with you.
The legal basis for the processing of the personal data in connection with providing you with our newsletter is your consent according to Art. 6 (1) (a) GDPR.
The legal basis for the processing of the personal data for the purpose of obtaining statistics about the use of our website and creating profiles of our users for direct marketing as described in detail in Section 7 of this privacy statement is your consent according to Art. 6 (1) (a) GDPR.
5. To what recipients do we transmit your data?
We transmit the data mentioned in Section 1 to Data Processors based in and outside of the European Union for the purposes determined in Section 2. Such Data Processors process personal data only on instructions from us and the processing is carried out on behalf of us. Those Data Processors
SysEleven GmbH
Ohlauer Straße 43
10999 Berlin
ACID21 GmbH
Mehringdamm 57
10961 Berlin
Germany
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043
USA
CleverReach GmbH & Co. KG
Mühlenstr. 43
26180 Rastede
Germany
Personalics Ltd
Rotschild Boulevard 6, 66881 Tel Aviv
Israel
We disclose personal data to service providers located outside of the European Economic Area (“third-party countries”), in which an adequate data protection level is not guaranteed by applicable laws. In such cases we take suitable measures to safeguard the protection of your personal data and to ensure an adequate level of data protection. Hence, we disclose your personal data to recipients located in a third-party country only if those recipients have concluded the EU Standard Contractual Clauses with us.
Further information as well as a copy of the measures taken can be obtained from the below specified contacts.
6. How long do we store your personal data?
In general, we store your personal data as long as necessary for the purpose they were collected. If you provided your personal data in the contact form on our website, we store your personal data for the duration of the conversation and delete it at least 6 months after the end of the conversation. We store the personal data you provided us with in order to receive our newsletter until you unsubscribe. Please find the storage periods for cookies in our websites in the table below. We store the personal data we collected via our analyzing and tracking cookies in section 7 only as long as it is necessary for our recording purposes. The storage period will be 12 months.
7. Do we use cookies on our website?
We will inform you about using cookies in our cookie banner when you visit our website. Cookies are text files that are placed on your computer or other mobile or handheld device (such as smartphones or tablets) when you visit certain pages on the internet. They are used to “remember” when your computer or device accesses this website. Cookies are stored in your browser. The cookie will help the website, or another website, to recognise your device the next time you visit. Most cookies won’t collect information that identifies you as a person (personal data), and will instead collect more general information such as how visitors arrive at and use our website. Cookies may, however, be used to create a profile of the visitor's activities on the Internet. We would like to inform you about the cookies we use and how you may decline cookies.
(1) The following cookies are necessary for the smooth operation and specific services of our website:
Cookie | Purpose |
|
||
SessionPersistence (CLIENTCONTEXT and PROFILEDATA) |
Allows us to save preferences that you set during your visit on our website. |
Will be erased as soon as you clear your cache (or one year after your visit) |
||
SessionPersistence (Cookie Layer) |
This cookie stores your consent to the use of cookies. |
Will be erased as soon as you clear your cache (or one year after your visit) |
||
SessionPersistence (Cookie Disclaimer) |
This cookie stores your acknowledgment of and consent to any disclaimers on our website. | Will be erased as soon as you clear your cache | ||
TS<pool_name> | This cookie enables us to distribute the load of requests of our users properly to our servers. It facilitates the stability of our website. | Will be erased as soon as you clear your cache |
trackingEnabled | Saves your cookie consent settings | Will be erased two years after your visit |
Further we set cookies and pixel on your device with your consent for purposes of tracking, statistics and profiling:
Cookie | Purpose | End-of-life |
i | This tool allows the tracking of page visitors after they have been linked to the website of the provider after clicking on a Facebook ad. This makes it possible to analyse the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising campaigns. | 26 months |
Google Analytics (_ga, _gat, _gid)Google Analytics | Allows us to create usage statistics of our site by tracking your behavior | 264 months |
Google Analytics Remarketing | This function makes it possible to connect the advertising target groups generated with Google Analytics Remarketing with the functions of Google AdWords and Google DoubleClick, which work on all devices. This makes it possible to display interest-based customized advertising messages, depending on your prior usage and browsing patterns on a device (e.g. cell phone) in a manner tailored to you as well as on any of your devices (e.g. tablet or PC). | 262 months |
Google AdWords and Google Conversion Tracking | Google and we will be able to recognize that the you have clicked on an ad and link you to this page | 30 days |
Google DoubleClic | DoubleClick is used to show you interest-based ads across the Google Network. Advertisements can be tailored to the interests of the viewer using DoubleClick. For example, our ads may appear in Google search results or in banners associated with DoubleClick. | 264 months |
8. Information on tracking, statistics and profiling as well as plug-ins and tools
Please be provided with further information on tracking, statistics and profiling and the tools we use for these purposes.
8.1 Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called cookies. Cookies are text files, which are stored on your computer and that enable an analysis of the use of the website by users (e.g. pages visited, duration of visit, previous website visited, use of contact form). The information generated by cookies on your use of this website is usually transferred to a Google server in the United States, where it is stored.
You have the option to prevent the recording of your data by Google Analytics by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website: Google Analytics deactivation.
8.2 Google Analytics Remarketing
This website uses the functions of Google Analytics Remarketing in combination with the functions of Google AdWords and Google DoubleClick, which work on all devices. The provider of these solutions is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
This function makes it possible to connect the advertising target groups generated with Google Analytics Remarketing with the functions of Google AdWords and Google DoubleClick, which work on all devices. This makes it possible to display interest-based customized advertising messages, depending on your prior usage and browsing patterns on a device (e.g. cell phone) in a manner tailored to you as well as on any of your devices (e.g. tablet or PC)
If you have given us pertinent consent, Google will connect your web and app browser progressions with your Google account for this purpose. As a result, it is possible to display the same personalized advertising messages on every device you log into with your Google account.
To support this function, Google Analytics records Google authenticated IDs of users that are temporarily connected with our Google Analytics data to define and compile the target groups for the ads to be displayed on all devices.
You have the option to prevent the processing of your personal data by Google Analytics Remarketing by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website: Google Analytics Remarketing deactivation
8.3 Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online promotional program of Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
In conjunction with Google AdWords, we use a tool called Conversion Tracking. If you click on an ad posted by Google, a cookie for Conversion Tracking purposes will be placed. If the user visits certain pages of this website and the cookie has not yet expired, Google and we will be able to recognize that the user has clicked on an ad and has been linked to this page.
You have the option to prevent the processing of your personal data by Google AdWords by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website: Google AdWords deactivation
8.4. Google DoubleClick
This website uses features of Google DoubleClick. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (hereinafter „DoubleClick“).
DoubleClick is used to show you interest-based ads across the Google Network. Advertisements can be tailored to the interests of the viewer using DoubleClick. For example, our ads may appear in Google search results or in banners associated with DoubleClick. DoubleClick must be able to recognize the respective viewer in order to be able to display interest-based advertising to users.
You have the option to prevent the processing of your personal data by Google DoubleClick by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website: Google DoubleClick deactivation
8.5. YouTube
Our website embeds videos of the website YouTube. The website operator is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the expanded data protection mode. This mode ensures that YouTube does not store any information about visitors to this website before they watch the video.
When you display a page that has an embedded video, a connection will be made to the YouTube server and the content will appear on the website via a communication to your browser.
We use YouTube, in “enhanced data protection mode”. Data is only transferred to the YouTube server, in particular which of our websites you have visited, if you watch the video. If you are logged onto YouTube at the same time, this information will be matched to your YouTube member account. You can prevent this from happening by logging out of your member account before visiting our website. Further information about data protection by YouTube is provided by Google under the following link: https://www.google.de/intl/de/policies/privacy/
8.6. Google reCAPTCHA
We use „Google reCAPTCHA“ (hereinafter referred to as „reCAPTCHA“) on this website. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to determine whether data entered on this website (e.g. information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyses the behavior of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g. IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.
9. What rights do you have?
You have certain rights under the General Data Protection Regulation including the right to request a copy of the personal data we hold about you, if you request it from us in writing:
9.1. Right to access: the right to obtain access to your personal data (if we’re processing it), and certain other information (like that provided in this privacy statement);
9.2. Right to correct: if your personal data is inaccurate or incomplete you have the right to have your personal data rectified;
9.3. Right to erasure: this is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions. For example, we have the right to continue using your personal data if such use is necessary for compliance with our legal obligations or for the establishment, exercise or defense of legal claims.
9.4. Right to restrict our use of your information: the right to suspend the usage of your personal data or limit the way in which we can use it. Please note that this right is limited in certain situations: when we are processing your personal data that we collected from you with your consent you can only request restriction on the basis of: (a) inaccuracy of data; (b) where our processing is unlawful and you don’t want your personal information erased; (c) you need it for a legal claim; or (d) if we no longer need to use the data for the purposes for which we hold it. When processing is restricted, we can still store your personal data, but may not use it further. We keep lists of people who have asked for restriction of the use of their personal information to make sure the restriction is respected in future;
9.5. Right to data portability: the right to request that we move, copy or transfer (where technically feasible) your personal data in a structured, commonly used and machine-readable format, for your own purposes across different services;
9.6. Right to object: the right to object to our use of your personal data including where we use it for our legitimate interests, and direct marketing;
9.7. Right to be informed: you have the right to be provided with clear, transparent and easily understandable information about how we use your personal data; and
9.8. Right to withdraw consent: if you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful).
If you are not satisfied with the way any complaint you make in relation to your personal data is handled by us then you may refer your complaint to the relevant data protection supervisory authority.
10. Where can you lodge a complaint?
You have the right to lodge a complaint with our Data Protection Officer (for contact details see below) or with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. Or you can contact:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz
https://www.datenschutz.rlp.de/de/general-storage/footer/ueber-den-lfdi/kontakt/
E-Mail: poststelle@datenschutz.rlp.de
11. Who is Controller and Data Protection Officer?
The Controller of your personal data is:
Our Data Protection Officer is:
Alexandra Haug
EU Data Protection Officer of BASF
67056 Ludwigshafen
+49 (0) 621 60-0