Consent declaration
1. Who is responsible for the processing?
Your local Yara company is the controller of the personal data that you provide to us, and is responsible for processing this data in accordance with local data protection law, implementing the EU Data Protection Directive 95/46/EC and in accordance with the General Data Protection Regulation 2016/679 (GDPR) from the date it applies.
2. How and why we process personal data
We collect personal data from you when you fill in a registration scheme that you receive from us, either electronically or through personal interaction. The personal data we process in this regard is your name, address, e-mail, mobile telephone number, agricultural area in production and the type of production you have on that area.
We collect this data for sending you tailored marketing, agronomic and commercial advice, for analytics, sending out newsletters, campaigns and invitations to various arrangements, events as fairs, meetings trainings or webinars. The legal basis on which we rely on to process your personal data for this purpose is your consent, that you have a right to withdraw at any time by contacting us at privacy.global@yara.com. Sometimes our legal basis for the processing is that it is necessary for purposes relating to our legitimate interest in marketing and in creating a profile about our customers for tailoring our offers and services to their needs, as long as this interest is not overridden by the customer’s rights that require protection of personal data. In this regard we process information relating to the Customer's purchase history and preferences for being able to better understand the customer's challenges and needs. You have a right to object to such processing as further described in section 4.
In the cases we enter into a contract with you regarding sale of products or services, our legal basis for the processing is that it is necessary for fulfilling an agreement with you, or for taking measures on your request prior to entering into a contract.
We will only share your personal data with our third-party service providers that perform business operations or work on our behalf and on our instructions as data processors for the purposes indicated in this Privacy Statement and in accordance with the relevant data processing agreement. To the extent necessary, we will also share personal data with other Yara companies and our carefully selected business partners to the extent necessary to provide you with the service that you request or if you have consented to such disclosure for the purposes set out in that consent.
3. How long are your personal data stored?
We store your personal data for as long as you are registered with us for up to 2 years after lack of commercial contact or any other communication, unless we are required by law to retain the data for a longer period. Following that, your personal data are deleted or anonymized.
4. Your rights
You have the right to at any time (free once a year) to get access to the personal data we have registered about you by contacting us at dataprivacy@yara.com. If the personal data we keep about you are wrong, incorrect or irrelevant you can request to have them rectified or deleted. You also have the right to withdraw your consent at any time and/or object to profiling, by contacting us at privacy.global@yara.com.
In order to ensure that we give access to the correct person, we require that the access request is signed by you and filed through mail to our postal address or that identity is verified by other means.
5. Where we store personal data
We store your personal data within the EU/EEA and we use an external service provider established in the USA for processing your data on our behalf. The legal basis for such transfers is the processor’s binding corporate rules and EU-US Privacy Shield. To the extent we transfer your personal data from one Yara subsidiary to another, the legal basis for such transfer is Yara’s binding corporate rules. Download public version of Yara’s Data Privacy Policy for Customer, Supplier and Business Partner Data (.pdf, 1 MB).
6. Information security
We have implemented appropriate technical and organizational measures to protect your personal data from loss, misuse or alteration. We limit access to personal data to personnel that have a clear business need.
7. Changes to this Privacy Statement
We will notify you through e-mail or in another clear way if we make and fundamental changes to this Privacy Statement or changes that may be relevant for and affect your rights, prior to making such changes. Any such change will be published in this Privacy Statement. If you do no longer wish to be registered with us following such changes, you can unregister by contact us at privacy.global@yara.com.
8. Information about the controller
Yara International ASA
Head of Data Privacy
Drammensveien 131, 0277 Oslo, Norway
Org.nr. 986 228 608
E-mail: dataprivacy@yara.com
Telephone: +47 24 15 70 00
This Privacy Statement was last updated 2018-04-23