This website (hereinafter referred to as the "Website") is provided by Bayer Aktiengesellschaft, Kaiser-Wilhelm-Allee 1, D-51373 Leverkusen (hereinafter referred to as "we" or "us"). Further information about the provider of the website can be found in our imprint.

Information about additional selected data processing activities not related to the website, conducted by us and/or affiliated companies (for example, when you hand us a business card or we collect your data from publicly accessible sources), can be found in the Privacy Notices for Selected Processing Activities.

---

Handling of Personal Data

In the following, we would like to provide you with information on how we are handling your personal data when you use our Website. Unless otherwise indicated in the following chapters, the legal basis for handling of your personal data is the necessity for processing to provide the functionalities requested by you on this website (Article 6(1)(b) General Data Protection Regulation).

We use Zendesk's customer satisfaction function to measure the satisfaction of our customers. If you leave us feedback, your data will be stored by Zendesk in a non-anonymized form. This is information such as your name, your e-mail address and your feedback. This data is used to optimize our service quality and to better respond to your concerns. The protection of your privacy is very important to us, which is why we will only use your data in accordance with our data protection guidelines.

Accessing our Website
When you access our website, your browser will transfer certain data to our web server to provide you with the requested information. In order to facilitate your visit to the website, the following information is collected, temporarily stored and used:

• IP address
• Date and time of the access Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Status of access/HTTP status code
• Transferred volume of data
• Website from which the request originates
• Browser, language settings version of the browser software operating system and surface

To protect our legitimate interests, we will store such data for a limited period of time in order to be able to trace the personal data in case of such incidents (Article 6(1)(f) General Data Protection Regulation).

Registration and Login
If you wish to use certain services offered on our website, you are required to register with us. You will need to create a customer account, where you will be asked to set your personal login details for accessing the Website. During the registration and login process, we collect and process the following information about you:

• First and last name
• Email address

We will process your personal data to provide you access to our customer portal, where you can manage your order and/or software licence after a successful purchase of our products. Additionally, the acquired software licence is linked to the corresponding customer account based on the email address provided. If you choose to delete your customer account, this personal data will be erased.

What are Cookies?
This Website uses so-called "cookies." Cookies are small text files that are stored in the memory of your device via your browser. Cookies store certain information (e.g. your preferred language or page settings) which your browser may send back to us when you next visit the Website (depending on the Cookie's lifespan).

What Cookies do we use?
We differentiate between two categories of cookies: (1) functional cookies, without which the functionality of our Website would be limited, and (2) optional cookies, such as those used for website analysis and marketing purposes. The following table contain a detailed description of the optional cookies we use on this Website:

Functional Cookies

Funktionsbezogene Cookies ```html

Name	Purpose and Content	Storage Duration	Provider
magic-shop	This cookie allows the storage of your shopping cart during navigation through the Website.	1 year	Bayer AG, Kaiser-Wilhelm-Allee 1, 51373 Leverkusen, Germany
locale-pref	This cookie stores your preferred language based on your browser language.	1 year	Bayer AG, Kaiser-Wilhelm-Allee 1, 51373 Leverkusen, Germany
cc_cookie	This cookie stores the cookie preferences you have specified.	1 year	Bayer AG, Kaiser-Wilhelm-Allee 1, 51373 Leverkusen, Germany
AWSALBCORS	Ensures that users are always routed to the same server behind the load balancer during an active session.	1 week	Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, United States
AWSALB	Ensures that users are always routed to the same server behind the load balancer during an active session.	1 week	Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, United States
cc_cookie_support	This cookie stores the cookie preferences you have specified.	1 year	Bayer AG, Kaiser-Wilhelm-Allee 1, 51373 Leverkusen, Germany
_zendesk_session	Stores the account ID, route for internal service calls, and the cross-site request forgery token.	8 hours	Zendesk GmbH, Neue Schönhauser Str. 3-5, 10178 Berlin, Germany
_cf_bm	This Cloudflare cookie helps manage incoming traffic that matches bot-associated criteria.	30 minutes	Zendesk GmbH, Neue Schönhauser Str. 3-5, 10178 Berlin, Germany
_cfruid	This Cloudflare cookie is used in cases where multiple users hide behind the same client IP address. Each user has a unique cookie to prevent rate limits for all users when a specific user reaches the rate limit threshold.	Existing Session	Zendesk GmbH, Neue Schönhauser Str. 3-5, 10178 Berlin, Germany
_help_center_session	Stores the unique session key for Help Center functionality.	Existing Session	Zendesk GmbH, Neue Schönhauser Str. 3-5, 10178 Berlin, Germany
articleVotes	[LOCAL STORAGE] Used to track the fact that an anonymous user voted on an article so that they are not repeatedly prompted to vote on an article they have already voted on, and so that they cannot cast multiple votes for an article.	Permanent	Zendesk GmbH, Neue Schönhauser Str. 3-5, 10178 Berlin, Germany
hc: {user_identifier}:recen tly_ visited_articles	[LOCAL STORAGE] To help subscribers understand the resources an end user has accessed when seeking support, this object tracks the recently viewed articles within the Help Center functionality. This cookie allows Zendesk customers to identify the recently viewed articles of an end user. If used exclusively by the subscriber for providing customer support, it could be considered essential.	Permanent	Zendesk GmbH, Neue Schönhauser Str. 3-5 , 10178 Berlin, Germany

Optional Cookies

Name	Purpose and Content	Retention Period	Provider
_ga	Used to distinguish between users in an anonymized manner.	2 years	Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
_fbp	Cookie from Facebook used for website analytics, ad targeting, and ad measurement.	2 years	Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Your Consent Required
We use optional cookies only with your prior consent (Article. 6(1)(a) General Data Protection Regulation). When you visit our Website for the first time, a banner will appear on our Website asking for your consent to use optional cookies. If you give your consent, we store a cookie on your computer, and the banner will not be displayed again for the duration of the cookie's lifespan. After that, or if you actively delete this cookie earlier, the banner will reappear on your next visit to our Website to obtain your consent again.

How to Prevent the Use of Cookies
You can use our Website without cookies. You can configure or disable the use of cookies in your browser settings at any time. However, this may result in limitations to the functionality or user-friendliness of our Website. You can object to the use of optional cookies at any time by using the corresponding opt-out option as indicated above.

---

Website Analysis and Behavior-Based Advertising

Website Analysis with Google
On this Website, we use a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). Google analyses your use of this Website on our behalf. For this purpose, we use cookies, as detailed in the cookie table above. The information collected by Google about your use of this Website (e.g. the referring URL, pages visited on our site, your web browser, language settings, operating system, or screen resolution) is transmitted to and stored on a server of Google in the USA, where it is analysed and the results are provided to us in anonymized form. Your usage data is not connected with your full IP address. We have activated Google's IP anonymization function on this Website, so the last octet (IPv4 type) or the last 80 bits (IPv6 type) of your IP address are deleted after each transmission to Google.

Through specific agreements with Google, we also ensure that there is an adequate level of data protection for the processing of personal data by Google in the USA.

You can revoke your consent to web analysis at any time by either downloading and installing the Google Analytics browser plugin from Google or managing your consents regarding cookies mentioned in the table above and setting an opt-out cookie. Both options prevent web analysis only as long as you use a browser with the plugin installed or as long as you do not delete the opt-out cookie. For more information on Google Analytics, please refer to the Google Analytics Terms of Service, Google Analytics Privacy Policy, and Google's Privacy Policy.

---

Online Shop

Processing of Orders
Through the Website, you can purchase products from us. For processing your order for software and hardware (including the creation of the invoice and handling shipping), we process the following personal data:

• First and Last Name
• Email Address
• Billing and/or Shipping Address
• Payment Data (e.g., credit card information)
• Transaction Number
• Order History
• Phone Number (optional)
• Company Name (optional)
• VAT ID (optional)
• PREMEO Customer Number (optional)

Payment data is especially needed for recurring payments associated with the purchase of a software licence. The data is also used to allow you to manage your order or software licence after a successful purchase. Additionally, we process this data, subject to your consent, by prefilling your data when you next make a purchase in the checkout process.

We only store the above personal data for as long as necessary for processing your order or recurring payments associated with the purchase of a software licence, unless there are other legal obligations. According to accounting and tax regulations, business communication, closed contracts, and booking documents must be kept for up to 10 years. The legal basis for processing your data in the context of your order is the necessity for the performance of the contract concluded with you through your order (Article. 6(1)(b) General Data Protection Regulation).

We share your personal data with trusted third party delivery companies. We currently use the following delivery companies, who will process your personal data under contracts with us: Evri and Exporto.

Customer Database
The following personal data is also stored in our customer database:

• First and Last Name
• Email Address
• Shipping Address
• Phone Number
• Company Name
• VAT ID
• Order History

We use this information to better understand your interests and to provide you with more targeted information about our products and services. In addition, we document and analyse our individual contacts (e.g. through our sales consultants) with you in order to continuously improve our products and services based on your experience. The legal basis for processing your data is our legitimate interest in providing you with better service (Article 6(1)(f) General Data Protection Regulation).

Use of contact forms
You can contact us directly using the contact forms provided on the Website. You have the option of providing us with the following information in particular:

• Email Address
• Topic
• Message

We process the information you provide via the contact form exclusively for the purpose of processing your specific request. We will delete this information as soon as it is no longer required for processing your request or at your request.

Subscription to our newsletter
You have the option of subscribing to our newsletter on the Website. To send you the newsletter, we collect and use the email address you provided when registering on the basis of your prior consent (Article. 6(1)(a) General Data Protection Regulation).

We use the so-called double opt-in procedure to register for the newsletter. After registering on the Website, we will send you a message to the email address you provided asking you to confirm your registration. If you do not confirm your registration, your registration will be automatically deleted.

Disclosure of personal data for processing on our behalf
To process your personal data, we sometimes use specialised service providers as contract data processors. This includes, among other things

• for analysing the use of our Website, the services of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States,
• for the hosting of our Website, the cloud services of Amazon Web Services Inc, 410 Terry Avenue North, Seattle WA 98109, United States,
• for payment processing for purchases, the services of Stripe Inc, 354 Oyster Point Boulevard, South San Francisco, California, 94080, United States.

We carefully select and regularly monitor our contract data processors. They process personal data only on our behalf and strictly in accordance with our instructions on the basis of corresponding data processing agreements.

In addition, our group companies also act on our behalf and in accordance with our instructions as our commissioned data processors.

Information about your rights
You are entitled to the following rights in accordance with the applicable data protection regulations:

• Access to Information:

You have the right to obtain confirmation from us as to whether personal data concerning you is being processed and, if so, access to the personal data and other additional information.

• Correction:

You have the right to request the correction of inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to request the completion of incomplete personal data.

• Deletion:

You have the right to request the deletion of personal data concerning you, and we are obliged to delete personal data if one of the reasons specified in Article. 17(1) General Data Protection Regulation applies. This can be the case, for example, if the data is no longer needed for the purposes for which it was collected or otherwise processed.

• Restriction of Processing:

You have the right to request the restriction of processing if one of the conditions set out in Article. 18(1) General Data Protection Regulation is met. This may be the case, for example, if you dispute the accuracy of your data. For the duration of the verification, you have the right to request the restriction of processing.

• Data Portability:

You have the right to receive the personal data concerning you that you have provided to us in a structured, common, and machine-readable format, and you have the right to transfer this data to another controller without hindrance by us if the processing is based on consent or a contract and the processing is carried out by automated means.

• Revocation of Consent:

If the processing of personal data is based on your consent, you have the right to revoke your consent at any time.

• Objection:

If the processing of personal data concerning you is necessary for the performance of a task carried out in the public interest (Article. 6(1)(e) General Data Protection Regulation) or for the protection of our legitimate interests (Article. 6(1)(f) General Data Protection Regulation), you have the right to object to this processing.

• Complaint:

You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, place of work, or our company headquarters.

Further information can be found in the sections above, which describe the processing of personal data on the basis of your consent. If you wish to exercise your rights, please address your request to the contact person listed below or use our contact form.

If you are a resident of California or Nevada in the United States, you may have additional rights in relation to your personal data. You can find more information here.

Contact Person
If you have any questions about data protection, please use our contact form or contact our company data protection officer at the following address:

• Bayer AG
• Group Data Privacy Officer
• Kaiser-Wilhelm-Allee 1
• 51373 Leverkusen,Germany
• dataprivacy@bayer.com

Changes to Our Privacy Policy
We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g., when introducing new services. The new data protection declaration will then apply to your next visit.

Edition June 2024