Privacy policy

BASF is pleased about your visit to our website and your interest in our company.

The topic of data protection has the highest priority at BASF. Therefore, we would like to inform you in detail about how BASF processes your personal data on this website.

A. Who is responsible for data processing and who is our data protection officer?

B. What data do we process, for what purposes, for how long and on what legal basis?

C. To whom do we pass on your personal data?

D. How do we secure your personal data?

E. What rights do you have?

F. Where can you complain?

A. Who is the Controller of the data processing?

BASF Gastronomie GmbH

Anilinstraße 12, 67063 Ludwigshafen, Germany

+49621/6078888

Who is our data protection officer?

Our data protection officer is:

Alexandra Haug
 EU Data Protection Officer
 67056 Ludwigshafen
 +49 (0) 621 60-0

e-mail: data-protection.eu@BASF.com

B. What data do we process, for what purposes, for how long and on what legal basis?

In the following, we inform you about the data processing on our site, its purposes and legal basis as well as the respective storage period and, if applicable, specific objection and removal options.

1. Log files

If you visit our website for information purposes only, i.e. if you do not register or transmit data in any other way (e.g. via a contact form), the following information is automatically transmitted from your browser to our server:

• IP address of your device  
• Information about your browser
• Name of the website from which you visit us
• Name of the visited page (URL) or the opened file
• Date and time of your visit
• Status information such as error messages
• Transferred data volume and the access status (file transferred, file not found, etc.)
• Operating system and version of your computer's operating system and the name of your access provider

When you visit the BASF website, we use the IP address and other information automatically transmitted to our server by your browser to

(i) provide you with the requested content

(ii) ensure the security and stability of our website and to trace unauthorized use

(iii) enable a comfortable use of our website.

The legal basis for the data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the above listed purposes for data processing. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. Without this information, displaying this website is not possible.

The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended. In the case of storage of the data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses are anonymized by deleting the last eight bits, so that an identification of you is no longer possible.

2. Cookies 

a.   Data processing and respective legal basis

We use cookies on our website. These are text information that can be stored in the browser on the device of the viewer to a visited website (web server, server). The cookie is either sent from the web server to the browser or generated in the browser by a script (JavaScript). The web server can read this cookie information directly from the server when the user visits this page again or transfer the cookie information to the server via a script of the website. Cookies do not cause any damage to your device, do not contain viruses, trojans or other malware.

Information is stored in the cookie that is related to the specific device used. This does not mean, however, that we obtain direct knowledge of your identity.

We generally use the following cookies: 

-Strictly necessary cookies

These cookies are necessary for the functioning of the website. In general, these cookies are only set in response to actions you take in response to a service request, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block these cookies or to notify you about these cookies. However, some areas of the website may not function properly.

The legal basis for the processing of these cookies is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data processing purposes listed under B.1.b.

-Performance cookies

These cookies enable us to count visits and traffic sources so that we can measure and improve the performance of our website. They help us answering questions about which pages are most popular, which are least used and how visitors move around the site. All information collected by these cookies is aggregated and therefore anonymous. If you do not allow these cookies, we cannot know when you visited our website.

The legal basis for the processing of these cookies is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, which you have given us by making your selection in the cookie banner or in our Privacy Preference Center. You have the right to revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the settings in the Privacy Preference Center.

-Functional cookies

These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third parties whose services we use on our pages. If you do not allow these cookies, some or all of these services may not function properly.

The legal basis for the processing of these cookies is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which you have given us by making your selection in the cookie banner or in our Privacy Preference Center.

You have the right to revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the settings in the Privacy Preference Center.

 - Cookies for marketing purposes

These cookies can be set via our website. They may be used by our marketing partners to profile your interests and show you relevant ads on other websites. If you do not allow these cookies, you will experience less targeted advertising. 

The legal basis for the processing of these cookies is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which you have given us by making your selection in the cookie banner or in our Privacy Preference Center.

You have the right to revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the settings in the Privacy Preference Center.

b.   Specific use of cookies, purposes and storage period

Specifically, we use the following cookies, depending on the cookie preferences you set in the Privacy Preference Center. Only the strictly necessary cookies are activated by default. If you do not want this either, you have the option of generally rejecting cookies in your browser. In this case, the functionality of the visited website may be impaired.

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

These cookies are necessary for the website to function. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but this might cause some parts of the website to malfunction.

• Tealium

  Through our service provider Tealium Inc, 11085 Torreyana Road, San Diego, CA, 92121 USA, we use Tealium iQ Tag Management to assign tags to our websites and manage them. The tag manager can use the tags to specifically apply analysis and tracking tools for us. The tag management system as such does not store any personal data about you. Only anonymous data is generated, which is stored locally in the browser in the cookie "utag_main".

  For further information about Tealium, go to https://tealium.com/

• Cookies from OneTrust, LLC.

  As part of the cookie compliance module of our service provider, OneTrust Technology Limited, Dixon House 1 Lloyd´s Avenue, London EC3N3DQ, UK, we use cookies to manage your preferences in the cookie settings.

  For further information on OneTrust, go to https://www.onetrust.com/

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.    All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.

• Piano Analytics

  We use cookies in connection with the analysis of the usage behavior of visitors of our website by our service provider AT INTERNET, Applied Technologies Internet GmbH Leonrodstrasse 52-58, 80636 Munich. This enables us to improve user-friendliness and quality of our website. To do so, we statistically record and analyze your usage patterns on our website in the following manner: implementation of performance or profitability comparisons of our website, counting visitors, tracing the level of perception of our website content, rich media content or special campaigns, gauging the website areas that are particularly compelling to you, evaluating the origin of online users in order to optimize our offer locally.

  Your IP address is only stored in anonymous form by irreversibly deleting the last eight bits of it. The cookie identifiers / mobile identifiers are rendered anonymous by converting them into a unique visitor ID that can no longer be traced back to the original cookie.

  For further information about AT INTERNET, go to: https://www.atinternet.com/en/data-protection/

  If you do not give us your consent for the use of PIANO (formerly AT Internet), we record the total number of clicks on our pages (name, category, language, product...) on the server side and assign them to the campaign to which the visited website belongs (source, name and ID), as well as the reduced forwarding URL. We process this data for the purposes of ensuring the availability of the website and scaling the technical infrastructure required for the website (e.g. provision of sufficient server capacity), recognising fraud attempts and more efficient management of advertising campaigns as well as determining total click volumes for billing services to third party service providers. This involves the processing of solely anonymous information that does not allow any conclusions to be drawn about individual persons.

Functional Cookies

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

• Tealium Collect Tag

  We use the Tealium Collect Tag service provided by Tealium Inc, located at 9605 Scranton Road, Suite 600, San Diego, CA 92121, USA. This service acts as the primary data collection tag for enabling Tealium's server-side features, EventStream and AudienceStream. These features help us to create and manage a unified view of visitors/customers across channels, segments, audiences for personalized experiences, and uses the data for actions and analysis across our digital marketing stack. The Tealium Collect Tag sends each event tracking call (such as pages viewed, content clicked on or downloads) to our server-side profile for processing. This builds an understanding of our customers unique to our business, enabling differentiated experiences. It helps discover valuable audiences and enhance target audiences, dynamically personalize our website content based on your interactions, and customize email marketing if consent is provided for combining registration data with online usage behavior for email advertising purposes. It also help us to improve performance by removing vendor tags from visitors' browsers or mobile devices. The cookies described below are used for these purposes.

Further details about the respective cookie providers can be found in the Privacy Preference Center, under the respective cookie categories.

3. Contact form and e-mail

If you contact us via a contact form, the data which you provide in such forms will be transmitted to us and processed. The mandatory data that must be filled in for electronic contact via the respective contact form are marked with (*). If you provide us with additional data, this is done voluntarily. 

If you send us an e-mail, we will process the associated metadata and the content of the message.

Your data will be processed to enable us to contact you, to process your request and to provide you with our respective services, to prevent misuse of the contact form and to ensure the security of our information technology systems. The legal basis for the processing of data classified as being mandatory is Art. 6 para. 1 sentence 1 lit. f GDPR. The aforementioned purposes also include a legitimate interest in the processing of the data. If the purpose of the contact is the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR. The legal basis for the processing of the data that you have voluntarily provided us with is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. 

The personal data of the person concerned will be deleted or made unavailable as soon as the purpose of the storage does no longer apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. Data will also be deleted or made unavailable when a storage period prescribed by the above-mentioned provisions expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.

In case of a consent, you have the right to revoke such consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the settings in the Privacy Preference Center.

4. Direct marketing 

If you have given us your consent to do so, we will process your personal data to provide you with personalized information on BASF Gastronomie products, web shop, events and services we consider relevant for you and to conduct customer surveys via the communication channels you have selected.

In order to determine your needs and interests, we combine and analyse the personal data that we have collected about you in the course of your relationship with BASF Gastronomie as a customer or user of BASF Gastronomie products and services (in particular your contract and master data, the products you have purchased,  services, venue rental, hotel booking, events, events and web shops, etc.)The legal basis for the processing of your personal data for the above-mentioned purposes is your consent.

Due to the global nature of BASF’s marketing teams, BASF Gastronomie will share your personal data with the relevant BASF entities and therefore transmit your personal data to the following BASF companies being the regional Marketing Headquarters: 

BASF Gastronomie GmbH, Anilinstraße 12, 67063 Ludwigshafen am Rhein

In addition, BASF Gastronomie will share your personal data between those BASF companies which are responsible for you as a (prospective) customer. Both of the aforementioned transfers serve the purpose of administration of customer data across the BASF Group and preparation of global marketing campaigns and sales-related activities.

The legal basis for this data sharing is our legitimate interest in maintaining your personal data in our company group.

We will share your personal data with other affiliated companies of the BASF Group if they provide IT services for us or if this is necessary for operational reasons, such as follow ups from sales managers or developing personalized marketing materials and content. Furthermore, we will pass on your personal data to the technical IT service providers we use from whom we obtain services. Our IT service providers are carefully selected and regularly checked by us. They process personal data only on our behalf and strictly in accordance with our instructions on the basis of corresponding contracts for order processing. 

We store your personal data collected within the scope of your consent for the above-mentioned purposes until your consent is revoked. 

You can revoke your consent at any time with effect for the future by notifying us of your revocation under our consent preference center. Each marketing mail we will send to you based on this consent will contain a separate link to revoke your consent. 

You are at liberty to grant or withhold consent. This has no effect on your visit of this website and platform. 

If you revoke your consent, we will no longer use your personal data for marketing purposes unless we have another legal basis for this. The revocation of your consent does not affect the legality of the data processing that has taken place up to that point.

C. To whom do we pass on your personal data?

Within our company, only persons and departments are granted access to your personal data as far as they need it to fulfil the abovementioned purposes.

We also involve service providers. These service providers will only act on our instructions and are contractually obliged to comply with the applicable data protection requirements.

Otherwise, we will only pass on your data to third parties if:

• you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• there is a legal obligation for us to pass on the data in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, or
• this is legally permissible and, in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, is necessary for the fulfilment of contractual relationships with you.

A transfer of your personal data to service providers in a third country will only take place if the special requirements of Art. 44 ff. GDPR are fulfilled. If and to the extent service providers are located in a third country, it may be that either the servers of the respective service provider are located in the third country or that the servers are located in the EU, but accessed in cases of support from a third country. Some third countries do not have a level of data protection adequate to that of the EU, e.g. the USA or China, as authorities might have simplified access to personal data in a simplified manner or that there are limited rights to such actions. If and to the extent you give consent, you expressly give consent to the transfer of personal data into the respective third country.

D. How do we secure your personal data?

BASF uses technical and organizational security measures to protect your personal data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously revised in line with technological developments.

E. What rights do you have?

You have certain rights under the General Data Protection Regulation including the right to request a copy of the personal information we hold about you, if you request it from us in writing:

Right to access: the right to obtain access to your information (if we’re processing it), and certain other information (like that provided in this Privacy Policy);

Right to correct: if your personal information is inaccurate or incomplete you have the right to have your personal information rectified;

Right to erasure: this is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions. For example, we have the right to continue using your personal data if such use is necessary for compliance with our legal obligations or for the establishment, exercise or defense of legal claims;

Right to restriction of processing: the right to suspend the usage of your personal information or limit the way in which we can process it. Please note that this right is limited in certain situations: When we are processing your personal information that we collected from you with your consent you can only request restriction on the basis of: (a) inaccuracy of data; (b) where our processing is unlawful and you don’t want your personal information erased; (c) you need it for a legal claim; or (d) if we no longer need to use the data for the purposes for which we hold it. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for restriction of the use of their personal information to make sure the restriction is respected in future;

Right to data portability: the right to request that we move, copy or transfer (where technically feasible) your personal information in a structured, commonly used and machine-readable format, for your own purposes across different services;

Right to object: the right to object to our processing of your personal information including where we process it for our legitimate interests, direct marketing;

Right to withdraw consent: if you have given your consent to anything we do with your personal information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal information with your consent up to that point is unlawful).

Exercising these rights is free of charge. However, you are required to prove your identity by means of a two-factor-authentication. We will engage reasonable efforts consistent with our legal duty to supply, correct or delete personal information about you.

F. Where can you complain?

You have the right to lodge a complaint with our data protection officer (for contact details see Section A) or with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

In either case, you can contact our Lead Data Protection Authority:

State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz)

Hintere Bleiche 34

55116 Mainz

Kontaktformular | datenschutz.rlp.de

E-Mail:  poststelle@datenschutz.rlp.de