BASF Data Protection Policy

BASF is happy to welcome you on its apps and your interest in our services.
Data protection has the utmost importance for BASF. Thus, we provide a high level of transparency.
That’s why we want to inform you of the following:

-Responsible persons at BASF concerning data protection and how to contact them

-Data collection when you download or use our apps and the purposes of data collection

-Time period of data storage

-The legal basis for data collection

-Parties involved in data processing

In addition, we’d like to inform you of

-Your rights concerning data processing

-Cookies we use

Responsible person/Controller:

[BASF plc] [Ali Richards]

[BASF plc, Earl Road, SK8 6PT Cheadle, United Kingdom] [ali.richards@basf.com]

[0161 488 5241 ]

(in the following referred to as “BASF“)

Data protection officer:

Our Data Protection Officer is Alexandra Haug You can contact our Data Protection Officer at alexandra.haug@basf.com

BASF collects, uses and stores your personal data in accordance with the applicable Data Protection Legislation. Personal data means any information relating to an identified or identifiable natural person. Below we inform you about the type, extent and purpose of the collection and use of personal data.

Collection and Processing of Personal Data when using our App

We will obtain personal data about you including your name, address, phone number and email address when you download and register for the app or complete a form on the app.

We process your personal data to identify you and the accounts which are held by you, to customize the app to your preferences, to improve the service and notify you of the changes to the app and to conduct behavioral analysis.

When you provide BASF personal data by on the app you expressly give your consent that BASF may store and use this data for the purposes referred to above . You have the right to withdraw your consent at any time.

Collection and Processing of Personal Data via Cookies and Logfiles

  1. In accordance with Art. 6 (1) point (f) GDPR, our app uses so-called cookies in order to make available personalized functions and in order to analyze your use of our app. A cookie is a small file which stores certain information about a user’s access device (PC, Tablet, Smartphone etc.) on such device. When such device accesses an app on our server, the server receives such cookies. The server can evaluate the information stored in the cookie by different methods. Cookies enable e.g. personalizing advertisement according to the collected user behavior and collecting statistical data of the use of the app. You may accept or disable cookies via your browser settings. However if you disable cookies you may potentially not be able to use all interactive functions of our app.

  2. Moreover, in accordance with Art. 6 (1) point (f) GDPR, every single app uses log files, i.e. for every page impression, the access data are saved to the server log. The saved data record contains the following details:
  • The date, the time, the file accessed, the status, the request that your browser sent to the server, the amount of data transmitted and the app from which you accessed the requested page (referrer) as well as
  • The product and version information of the browser used, your operating system and your country of origin.

We use the log data only in anonymized form (i.e. without any allocation to or indications about your person) for statistical analyses, e.g. to find out on which days and at what times the offers of our apps are most popular and how much data volume is generated on our apps. Moreover, the log files enable us to detect possible errors, e.g. faulty links or software bugs. Thus, we can use the log files for the further development of our apps. We never associate the use and page impressions that are stored in the server log with individual persons. We reserve the right to use data from log files if certain facts give rise to the suspicion that users use our apps and/or our services in an unlawful or non-contractual way.

Data security

BASF uses technological and organizational security measures in order to protect your data from accidental or deliberate manipulation, loss or destruction or access by unauthorized persons. Our security measures are constantly being adapted to technological development.

Your Rights

You may according to Articles 15 through 18 GDPR request from BASF access to and rectification or erasure of your personal data or the restriction of processing. Moreover you have, subject to Art. 20 GDPR, the right to receive your personal data, which you have provided to BASF, in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller without hindrance requests for access to and rectification or erasure of personal data or restriction of processing may be directed to BASF. Please find our contact details at the top of this Data Protection Policy.

Each data subject has the right to lodge a complaint with a supervisory authority of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the GDPR. The supervisory authority responsible for such complaint according to Article 13 GDPR is:

Der Landesbeauftragte für den Datenschutz und die
Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz

According to Art. 21 (1) GDPR, you also have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Art. 6 (1) GDPR including profiling based on those provisions. BASF shall comply with the aforementioned requests if and to the extent such compliance is required by the applicable statutory laws.

Where personal data is processed for direct marketing purposes, according to Art. 21 (2) GDPR, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Period of Data Storage

We process and store personal data only for the period, which is required to meet the purpose of processing, or as long and to the extent as statutory laws require us to process and/or store such data.
If the purpose of processing does not apply anymore and the applicable statutory retention requirement expires, we will as a matter of routine erase data or restrict the processing of data in accordance with the applicable statutory laws.

Who gets the Personal Data

Within our company only people and bodies who require your personal data for the purposes mentioned above will receive access to it.

We work with service providers to fulfill the purposes referred to above. Those service providers will process personal data in our name and solely according to our instructions. They are contractually obliged to adhere to the application data protection laws

We may transfer personal data to supervisory authorities, courts or law offices as far as necessary to ensure compliance with applicable law or to exercise assert or defend our rights insofar as legally permitted.