# Privacy Policy
This website (hereinafter **"website")** is provided by Bayer Aktiengesellschaft (hereinafter **"us"** or **"we")**. Further information on the provider of the website can be found in our imprint.
For information on other selected data processing activities not related to the website that are carried out by us and any of our affiliated companies based in Germany (for example, if you provide us with a business card or if we collect your data from publicly available sources), please refer to the [data protection notices for selected processing activities.]()
## Handling of personal data
In the following, we would like to inform you about our handling of personal data when using this website. Unless otherwise described in the following sections, the legal basis for a handling of your personal data follows from the necessity of a handling for the provision of the functionalities requested by you on this website (Art. 6(1)(b) General Data Protection Regulation).
### Use of the website
#### Calling up the site
When you call up our website, your browser transmits certain information to our web server for technical reasons in order to provide you with the information you have called up. To enable you to visit the website, the following information is collected, stored for a short time and used in the process:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred
- Website from which the request came
- Browser, language and version of the browser software
To protect our legitimate interests, we will store the above information for 14 days in order to be able to initiate a derivation of the personal data in the event of unauthorized access or attempted access to our servers (Art. 6(1)(f) of the General Data Protection Regulation).
#### Registration and login
If you wish to use certain services on our website, you must register with us or log in. You create a customer account in which you define your personal login data for logging into the website. As part of the registration and login process, we collect and process the following information about you:
- First and last name
- E-mail address
We process this personal data to give you access to our customer portal, where you can manage your order or software license after you have placed an order for our products. In addition, the purchased software license is assigned to the corresponding account based on your e-mail address. If you delete your user account, this personal data will be deleted.
## Use of cookies
### What cookies are
On this website we use so-called "cookies". Cookies are small text files that are stored in the memory of your terminal device via your browser. Cookies store certain information (e.g. your preferred language or page settings), which can be sent back to us by your browser when you visit the website again (depending on the lifetime of the cookie).
### Which cookies we use
We distinguish between two categories of cookies: (1) **function-related cookies**, without which the functionality of our website would be limited and (2) **optional cookies**, e.g. for purposes of website analysis and marketing. In the following table, we describe the optional cookies used on this website in detail:
#### Functional Cookies
| Name | Purpose and content | Retention period | Provider |
| -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| magic-shop | This cookie enables the storage of your shopping cart when navigating through the website. | 1 year | Bayer AG, Kaiser-Wilhelm-Allee 1 51373 Leverkusen, Germany |
| locale-pref | This cookie stores your preferred language based on your browser language. | 1 year | Bayer AG, Kaiser-Wilhelm-Allee 1 51373 Leverkusen, Germany |
| cc\_cookie | This cookie stores your cookie preferences. | 1 year | Bayer AG, Kaiser-Wilhelm-Allee 1 51373 Leverkusen, Germany |
| AWSALBCORS | Ensures that users are always routed to the same server behind the load balancer during an active session. | 1 week | Amazon Web Services Inc, 410 Terry Avenue North, Seattle WA 98109, United Stated |
| AWSALB | Ensures that users are always routed to the same server behind the load balancer during an active session. | 1 week | Amazon Web Services Inc, 410 Terry Avenue North, Seattle WA 98109, United States |
| cc\_cookie\_support | This cookie stores the cookie preferences you specify. | 1 year | Bayer AG, Kaiser-Wilhelm-Allee 1 51373 Leverkusen, Germany |
| \_zendesk\_session | Stores the account ID, the route for internal service calls and the cross-site request forgery token. | 8 hours | Zendesk GmbH, Neue Schönhauser Str. 3-5, 10178 Berlin, Germany. |
| \_cf\_bm | This Cloudflare cookie helps manage incoming traffic that meets criteria associated with bots. | 30 minutes | Zendesk GmbH, Neue Schönhauser Str. 3-5, 10178 Berlin, Germany. |
| \_cfruid | This Cloudflare cookie is used in cases where multiple users are hiding behind the same client IP address. Each user has a unique cookie to prevent rate capping for all users when a particular user reaches the rate capping threshold | Existing session | Zendesk GmbH, Neue Schönhauser Str. 3-5, 10178 Berlin, Germany. |
| \_help\_center\_session | Stores the unique session key for help center functionality. | Existing session | Zendesk GmbH, Neue Schönhauser Str. 3-5, 10178 Berlin, Germany |
| articleVotes | [LOCAL STORAGE] Used to keep track of the fact that an anonymous user has voted on an article, so that they are not repeatedly asked to vote on an article they have already voted on, and so that they cannot cast multiple votes on an article. | Permanent | Zendesk GmbH, Neue Schönhauser Str. 3-5, 10178 Berlin, Germany. |
| hc: {user\_identifier}:recen tly\_ visited\_articles | [LOCAL STORAGE] To help subscribers understand the resources an end user has engaged with when seeking support, this object tracks the most recently viewed articles within the Help Center functionality.
This cookie enables Zendesk customers to identify the most recently viewed articles by an end user. If it is used exclusively by the subscriber to provide customer support, it could be considered essential. | Permanent | Zendesk GmbH, Neue Schönhauser Str. 3-5, 10178 Berlin, Germany. |
#### Optional cookies
| Name | Purpose and content | Retention period | Provider |
| ----------------------------------------------------------------------------- | ----------------------------------------------------------------------------- | ----------------------------------------------------------------------------- | ----------------------------------------------------------------------------- |
| \_ga | Used to anonymously distinguish between users. | 2 years | Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States |
### Assuming your consent
We use optional cookies only with your prior consent (Art. 6(1)(a) of the General Data Protection Regulation). If you are visiting our website for the first time, a banner will appear on our website in which we ask for your consent to the use of optional cookies. If you give your consent to this, we will store a cookie on your computer and the banner will not be displayed again for the lifetime of the cookie. After that, or if you actively delete this cookie beforehand, the banner will be displayed again the next time you visit our website to ask for your consent again.
### How to prevent the use of cookies
Of course, you can also use our website entirely without cookies. You can configure the use of cookies in the settings of your browser at any time or disable them completely. However, this may lead to restrictions in the functions or user-friendliness of our offer. You can object to the use of optional cookies at any time by using the corresponding objection option as indicated in the table above.
## Website analysis and behavior-based advertising
### Website analysis with Google
On this website, we use a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). Google analyzes your use of this website on our behalf. For this purpose, we use cookies, among other things, which are described in detail in the cookie table above. The information collected by Google about your use of this website (e.g. the referring URL, pages visited on our website, the web browser you are using, your language preference, the operating system you are using or your screen resolution) is transferred to a Google server in the USA, stored there, analyzed and the result is made available to us in anonymized form. Your usage data will not be linked to your full IP address. We have activated the IP anonymization function offered by Google on this website, so that the last octet (type IPv4) or the last 80 bits (type IPv6) of your IP address are deleted after each transmission to Google.
By concluding special agreements with Google, we also ensure that a sufficient level of data protection is guaranteed for the processing of personal data by Google in the USA.
You can revoke your granted consent for web analysis at any time by either downloading and installing the [Google browser plugin from Google]()or managing your consents in the table above, whereby an opt-out cookie is set. Both options prevent web analysis only as long as you use a browser on which you have installed the plugin or as long as you do not delete the opt-out cookie. For more information about Google Analytics, please see the [Terms of Use of Google Analytics](), the [Privacy Policy of Google Analytics]()and the [Privacy Policy of Google.]()
## Webshop
### Order processing
Through the website, you can purchase products from us. For the processing of your order of software and hardware (i.e., among other things, for the creation of the invoice and the handling of the shipment), we process the following personal data. In particular, the payment data is also required for recurring payments associated with the purchase of a software license. The data is also used to enable you to manage your order or your software license after an order has been placed. In addition, subject to your consent, we also process this data to facilitate repeat purchases by pre-filling their data in the checkout process.
- First and last name
- E-mail address
- Billing and/or shipping address
- Payment information (e.g. credit card information)
- Transaction number
- Order history
- Phone number (optional)
- Company name (optional)
- Sales tax ID (optional)
- PREMEO customer number (optional)
We store the above personal data only as long as it is necessary for the processing of your order or recurring payments associated with the purchase of a software license, unless otherwise required by law. According to the accounting regulations (§ 257 HGB) and the tax regulations (§ 147 AO as well as § 14b UStG) business communication, concluded contracts and accounting vouchers have to be kept for up to 10 years. The legal basis for the processing of your data in the context of your order is the necessity for the processing of the contract concluded with you through your order (Art. 6(1)(b) of the General Data Protection Regulation).
### Customer database
The above-mentioned personal data (excl. payment data) is also stored in our customer database in order to be able to provide you with more individual and faster support in case of support requests. We delete this data immediately upon request or after 10 years at the latest in the event of inactivity. The legal basis for processing your data is our legitimate interest in being able to provide you with better support (Art. 6(1)(f) of the General Data Protection Regulation).
## Use of contact forms
You can contact us directly via contact forms provided on the website. In doing so, you have the possibility to provide us with the following information in particular:
- E-mail address
- Subject
- Message
We process the information you provide via the contact form solely for the purpose of processing your specific request. We delete this information as soon as it is no longer required for processing your request.
## External services and content on our website
We include external services or content on our website. When you use such a service or when third-party content is displayed to you, communication data is exchanged between you and the respective provider for technical reasons. In addition, the provider of the respective services or content may process your personal data for further, own purposes. We have configured services or content from providers known to process personal data for their own purposes to the best of our knowledge and belief in such a way that either communication for purposes other than displaying the content or services on our website does not take place or communication only takes place when you actively decide to use the service. However, since we have no influence on the personal data collected by third parties and its processing by them, we cannot provide any binding information on the purpose and scope of the processing of your personal data.
For more information about the purpose and scope of the processing of your personal data, please refer to the data protection notices of the respective providers responsible under data protection law for the services or content we integrate:
- [Instagram]()
## Subscription to our newsletter
On the website, you have the option to subscribe to our newsletter. For sending the newsletter, we collect and use the e-mail address you provided during registration on the basis of your prior consent (Art. 6(1)(a) of the General Data Protection Regulation).
For the registration to the newsletter, we use the so-called double opt-in procedure. After registration on the website, we will send you a message to the e-mail address you provided in which we ask you to confirm your registration. If you do not confirm your registration, your registration will be automatically deleted. We log your registration and confirmation in each case to prevent misuse of your personal data. We store the IP addresses used for your registration, the times of your registration and confirmation and our registration notifications as well as the text of your registration and confirmation. You can revoke any consent you have given to receive the newsletter at any time with effect for the future, in which case we will delete the personal data required for sending newsletters. You can declare your revocation by clicking on the link provided for this purpose in each newsletter or to the contact persons named below (see Contact).
## Transfer of personal data for processing on our behalf
To process your personal data, we partly use specialized service providers as our commissioned data processors. This includes, among others.
- for the analysis of the use of our website, the services of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States,
- for the hosting of our website, the cloud services of Amazon Web Services Inc, 410 Terry Avenue North, Seattle WA 98109, United States,
- for purchase payment processing, the services of Stripe Inc, 354 Oyster Point Boulevard, South San Francisco, California, 94080, United States.
Our contract data processors are carefully selected and regularly monitored by us. They process personal data only on our behalf and strictly in accordance with our instructions on the basis of corresponding contracts for commissioned processing.
In addition, group companies of ours also act as our commissioned data processors on our behalf and in accordance with our instructions.
## Processing of personal data outside the EU/EEA.
Your personal data may also be processed in some cases in countries outside the European Union ("EU") or the European Economic Area ("EEA"), where a lower level of data protection could generally prevail than in Europe. In these cases, we ensure, e.g. via contractual agreements with our contractual partners, that a sufficient level of data protection for your personal data is guaranteed (copy available upon request), or we ask for your express consent.
## Information about your rights
You are generally entitled to the following rights in accordance with the applicable data protection regulations:
- The right to obtain information about your personal data stored by us;
- The right to request the correction, deletion or restriction of the processing of your personal data;
- Right to object to processing on grounds of our own legitimate interest, public interest or profiling, unless we can demonstrate compelling legitimate grounds for the existence of your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims;
- Right to data portability;
- The right to lodge a complaint with a data protection authority;
- You may withdraw your consent to the processing of your personal data at any time with effect for the future.
For more information, please see the chapters above describing the processing of personal data based on your consent. If you wish to exercise your rights, please address your request to the contact person below or use our [contact form]().
**If you are a resident of California or Nevada in the United States, you may have additional rights with respect to your personal data. For more information, please visit [here]().**
## Contact
If you have any questions regarding data protection, please use our [contact form]() or contact our Corporate Data Protection Officer at the following address:
Bayer AG
**Group Data Privacy Officer**
Kaiser-Wilhelm-Allee 1
51373 Leverkusen,Germany
dataprivacy@bayer.com
## Changes to our privacy policy
We may update this privacy statement from time to time. Updates to this Privacy Policy will be posted on the Website and will become effective upon such posting. We therefore recommend that you visit the relevant page regularly to keep up to date with any changes that may have been made.