Data Privacy Statement

This website (hereinafter the "Website") is provided by Bayer Aktiengesellschaft (hereinafter "us" or "we"). For further information regarding the provider of the website, please refer to our imprint. Information on other selected non-website related data processing activities performed by us and all of our affiliates in Germany (e.g. when you give us a business card or we collect your data from publicly available sources) can be found in the privacy information for selected specific processing activities.

Handling of personal data

In the following we wish to provide you with information on how we handle your personal data when you use our Website. Unless otherwise indicated in the following chapters, the legal basis for the handling of your personal data results from the fact that such handling is required to make available the functionalities of the Website requested by you (Art. 6(1)(b) General Data Protection Regulation).

Using our website

Accessing our website

When you call up our Website, your browser will transfer certain information to our web server. This is done for technical reasons and required to make available to you the requested information. To facilitate your access to the Website, the following information is collected, briefly stored and used:

• IP address
• Date and time of access
• Time zone difference to Greenwich Mean Time (GMT)
• Content of request (specific site)
• Status of access/HTTP status code
• Transferred volume of data
• Website requesting access
• Browser, language settings, version of browser software operating system and surface

Moreover, to protect our legitimate interests, we will store such information for a limited period of time in order to be able to initiate a tracking of personal data in the event of actual or attempted unauthorized access to our servers (Art. 6(1)(f) General Data Protection Regulation).

Registration and login

In order to be able to use certain services of our Website, you need to first register an account with us, where you are able to determine your personal login credentials that you need to be able to log into your personal account. For this registration and subsequent login procedure, we collect the following information about you:

• First name and surname
• Gender and title
• Contact data (e.g., postal/email address or phone number)
• User name and password
• Log file of your logins incl. timestamp

We process this personal data in order to provide you with an access to the services of our Website. They are deleted in case you deactivate your user account.

Third party login services/single sign on

Subject to you providing your consent (Art. 6(1)(a) General Data Protection Regulation), we provide you with the possibility to register to our services by using the third-party login service provider Microsoft Azure Active Directory (hereinafter "Login-Service-Provider"). To use this login service, you will be asked to login to Login-Service Provider’s service using your respective login credentials. By doing so, your profile will be connected to our service, which means that Login-Service Provider receives the information that you use our service, and we automatically receive the following information about you:

• The fact that the identity has been authenticated by Login-Service-Provider
• Contact data (e.g., postal/email address or phone number)

We will use this information only for the registration purpose and to identify you during your logins. In case Login-Service Provider transfers more information about you than we need for the login verification purpose, we immediately delete this information. For further information on how Login-Service Provider’s service work and how the Login-Service Provider processes your personal data, please refer to https://privacy.microsoft.com. We delete your personal data in case you delete your user account.

Setting of cookies

What are cookies?

This website uses so-called “cookies”. Cookies are small text files that are stored in the memory of your terminal via your browser. They store certain information (e.g., your preferred language or site settings) which your browser may (depending on the lifespan of the cookie) retransmit to us upon your next visit to our website.

What cookies do we use?

We differentiate between two main-categories of cookies: (1) strictly necessary cookies, which are essential to browse the website and use its features, and (2) optional cookies (e.g., analytic cookies, targeting cookies, functional cookies) used for e.g., website analysis, website personalization and marketing purposes.

Optional cookies

This website does not use optional cookies.

Subject to your consent

We only use optional cookies if we have obtained your prior consent (Art. 6(1)(a) General Data Protection Regulation). Upon your first access to our website, a banner will appear, asking you to give us your consent to the setting of optional cookies. If your consent is given, we will place a cookie on your computer and the banner will not appear again if the cookie is active. After expiration of the cookie’s lifespan, or if you actively delete the cookie, the banner will reappear upon your next visit to our website and again ask for your consent.

Recipients of personal data

Commissioned processing

For the processing of your personal data, we will to some extent use specialized service contractors that process your data on our behalf (e.g., for IT-Support or cloud services). This includes also: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052 stores users' personal data, who login to Bayer Partner Portal. Such service contractors are carefully selected and regularly monitored by us. Based on respective data processing agreements, they will only process personal data in accordance with our instructions.

Affiliates

We may share your personal data with our affiliates from the Bayer Group, where necessary for the purposes described above.

Authorities and state institutions

We may share your personal data with law enforcement agencies or other authorities and state institutions if legally required or necessary for the purposes described above.

External lawyers

To support legal decisions and to pursue or defend against legal claims, we may share your personal data with external lawyers. Prospective buyers in the context of Mergers & Acquisitions We may share your personal data with a prospective buyer in case of an acquisition, merger or any other type of corporate or asset transition involving a change of ownership or control concerning us or our services.

Processing of personal data outside the EEA

Your personal data may be transferred to countries outside the European Economic Area, including such for which the European Commission has not issued an adequacy decision. If no adequacy decision exists for the respective country, we will ensure an adequate level of protection for your personal data by concluding so-called standard contractual clauses - adopted by the European Commission - with the recipient (to obtain a copy, please refer to the contact details below), or we will ask for your explicit consent to the transfer.

Information regarding your rights

The following rights are in general available to you according to applicable data privacy laws:

• Right of information about your personal data stored by us
• Right to request the correction, deletion, or restricted processing of your personal data
• Right to object to a processing based on legitimate interest or public interest, unless we can proof that compelling, warranted reasons superseding your interests, rights and freedom exist, or that such processing is done for purposes of the assertion, exercise or defense of legal claims
• Right of portability of data
• Right to file a complaint with a data protection authority
• Where you have provided your consent to the processing of your personal data, you may at any time withdraw your consent with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the withdrawal.

If you are a resident of California or Nevada in the United States, you may have additional rights regarding your personal data. More information may be found on the US privacy statement addendum.

Contact

For any questions you may have with respect to data privacy, or if you wish to exercise your rights, please address your request to our contact form or contact our company data protection officer at the following address:

Data Privacy Officer
Bayer AG
Kaiser-Wilhelm-Allee 1
51368 Leverkusen, Germany

Amendment of privacy statement

We may update our Privacy Statement from time to time. Updates of our Privacy Statement will be published on our website. Any amendments become effective upon publication on our website. We therefore recommend that you regularly visit the site to keep yourself informed on possible updates.

Declaration as of: 2023-03-02