Data Protection Statement

Welcome to the Care Chemicals media database. This database is a proprietary BASF application.

Data protection is a top priority for BASF, so we want to make sure you are properly informed about the following:

• The information BASF collects during your visit to our database.
• The purposes of processing this information.
• The legal basis for processing personal data.
• Who gets your personal data.
• How long your personal data is stored.
• Whether you are obliged to give us personal data.

We also want to tell you

• About your rights with regard to the processing of your data..
• Who is responsible under data protection law, and the contact details of our data protection officer, if available.

1. Which information does BASF collect when you visit this website, for what purpose, and on what legal basis?
   1. When you visit our website just to browse (i.e., without registering or using a contact form), your browser automatically sends the following information to our server:
      • Your computer’s IP address
      • Information about your browser
      • The name of the website you are on when you visit us
      • The referrer URL or file you access
      • Date and time of your visit
      • Amount of data transferred
      • Status reports such as error messages

      If you contact us using a contact form we provide or send us an email, we receive the following information:

      • Your email address and other information you send us in your email or enter in a contact form
      • The data and time you make contact
      • Details you knowingly provide during registration or later on in order to use the features provided (i.e. title, first name, last name, email, company/agency/employer, organization code (internal), street, house number, zip code, city, state, telephone number).

      The purpose of processing this data is

      • To be able to provide the content you request. We store your full IP address only if this is necessary for technical reasons in order to be able to show you the page you want to see.
      • To transfer your IP address to a service provider who checks your public IP address against non-personal corporate information. We store this corporate information. Neither we nor our service provider will store your IP address during this processing step.
      • To protect us from attacks and to safeguard the proper operation of our website. We store the said data temporarily and access-protected for a maximum period of three years or, in the case of temporary rights of use, for as long as they apply.

      The legal basis for processing this data is Article 6 (1) (f) of the GDPR. The legitimate interests we pursue are based on the data processing purposes outlined above.

   2. If you contact us via our website or by email, we receive the following information
      • Your first and last name
      • Your email address and other information you send us in your email or enter in a contact form (message)

      At the time when the message is sent, the following data is also stored:

      • The data and time you make contact

      The purpose of processing this data is

      • Only to process your contact attempt.

      Any other personal data processed during the sending process is in order to prevent abuse and to safeguard our information technology systems.

      The legal basis for processing this data is Article 6 (1) (f) of the GDPR. The legitimate interests we pursue are based on the data processing purposes outlined above.
2. Does our website use cookies?

   When you visit our website, our cookie banner tells you that we use cookies. By using our website, you agree to accept that we use cookies. We are providing the information below to tell you which cookies we use and how you can stop us from placing cookies on your computer.

   Cookies are text files stored in the internet browser or by the internet browser on your computer system. When you access our website, a cookie may be placed in your operating system.

   1. The following cookies are important to keep our application and certain services running smoothly:

      Cookie	Purpose	Deletion
      ASP.NET_SessionId	The service can use this cookie to store existing selections and set-tings or information you have already provided.	It is deleted as soon as you close your browser.
      yourAuthCookie	The service uses this cookie to keep you logged into the system.	It is deleted 30 minutes after you close your browser. If you click “Stay logged in”, the cookie is deleted when you log out of the system.

   
   
3. Who gets your personal data?

   We transfer the personal data specified in 1.1 and 1.2 to data processors based in the European Union. Processing is on our behalf and in accordance with our instructions.
4. How do we safeguard your personal data?

   BASF uses technical and organizational security measures to protect your personal data from random or deliberate manipulation, loss, destruction and unauthorized access. Our security measures are revised continuously to keep pace with technological development.
5. What are your rights?

   The General Data Protection Regulation gives you certain rights:

   Right to information: The right to information about your personal data that we process, and certain other details (such as those given in this data protection statement).

   Right to rectification: If your personal data is incorrect or incomplete, you have a right to rectification of the information.

   Right to erasure: On the basis of the “right to be forgotten,” you have the right to request the erasure of your personal data, unless retention of the data is mandatory for legal reasons. The right to erasure is not an absolute right. We have the right for instance to continue processing your personal data if such processing is necessary to meet our legal obligations or to enforce, exercise or defend legal claims.

   Right to restriction of processing: This right includes the right to restrict the utilization of your data or to restrict the way it is used. This right is limited to certain circumstances and applies in particular if: (a) the data is inaccurate; (b) the processing is unlawful and you do not want erasure; (c) we no longer need the data but you need it to enforce, exercise or defend legal claims. If processing is restricted, we can still store the data but not use it. We keep a list of individuals who exercise the right to restriction of processing in order to be able to implement this restriction.

   Right to data portability: This right means that, if technically feasible, we provide you with your personal data in a structured, commonly used and machine-readable format for your own purposes.

   Right to object: You can object to the processing of your personal data if that data is processed for the purposes of legitimate interests, direct marketing in particular.

   Right to information: You have the right to be informed in clear and plain language about how we process your personal data; and

   Right to withdraw consent: If you have given us your consent to process your data, you have the right to withdraw your consent at any time. Any such with-drawal does not affect the lawfulness of consent-based processing that took place before you withdrew your consent.

   Exercising these rights is free of charge for you. However, two-factor authentication is required to prove your identity. We will take appropriate measures in compliance with our legal requirements to transfer, rectify or erase your personal data in our file systems.

   To exercise your rights, submit a complaint or communicate other requests, please contact us by email or write to us. We will make every effort to reply within 30 days.

   You will find the contact details in item 7.

   When we receive a complaint, we will contact the person who submitted the complaint in order to investigate it. If we are unable to resolve a complaint directly, we will cooperate with the relevant authorities as needed, data protection authorities in particular.

   If you are not satisfied with the processing of a complaint concerning your personal data, you have the right to direct your complaint to the competent data protection authority.
6. Where can you make a complaint?

   You have the option to direct your complaint to the data protection officers named in this data protection statement (see below for contact details) or to a supervisory authority, in particular in the Member State where you live or work or in which the suspected violation took place. You can also choose to contact:

   Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (Rhineland-Palatinate Officer for Data Protection and Freedom of In-formation)
   Hintere Bleiche 34
   55116 Mainz

   https://www.datenschutz.rlp.de/de/general-storage/footer/ueber-den-lfdi/kontakt/

   Email: poststelle@datenschutz.rlp.de
7. Who is the controller (person responsible for data processing) and who is our data protection officer?

   The controller is given here.

   The point of contact for matters relating to data protection laws is:

   BASF SE
   Our data protection officer is:
   Alexandra Haug
   EU Data Protection Officer of BASF
   67056 Ludwigshafen
   Tel. +49 (0) 621 60-0

   Please use the address of the point of contact mentioned above to contact our data protection officer Alexandra Haug. Our data protection officer can also be contacted via the email address alexandra.haug@basf.com.
8. Data protection and minors

   This website is for people aged 18 or over. We do not wish to collect personal data from people under 18 years of age.

   Therefore, people under 18 should not provide any personal data on or via this website. As soon as it comes to our attention that a person who has transferred their personal data via this website is a minor, we will erase and cease processing their data.