Effective from: 16th March 2018

This Yara Privacy Policy ("Privacy Policy") applies to personal data that is collected and used by Yara International ASA, Drammensveien 131, 0277 Oslo, Norway ("we") when you use this website (the "Site") or otherwise interact with us as described below. Yara International ASA operates the Site and is the controller for the processing of your personal data when you use the Site.

In the case that we interact with you in ways that are not described below, we will provide you with information regarding use of your personal data in relation to that specific interaction. If you have any additional questions, please contact us at dataprivacy@yara.com.

For more information about how Yara processes personal data and about your rights, please see the public version of Yara's Data Privacy Directive for Customer, Supplier and Business Partner Data (pdf, 0.4 MB) which form a part of Yara's Binding Corporate Rules.

Depending on how you use the Site and how you interact with us, we collect the following categories of personal data through the following sources for the purposes described below:

• When you visit the Site:

As a point of departure, you can use the Site without revealing your identity. When you visit the Site or otherwise interact with us online, we collect information about the device that you use when you visit the Site and information about your use of the Site and applications by using cookies.

We may associate the information we collect from your different devices, which helps us provide consistent service across your devices. This may for example be attributes such as your IP address, operating system, hardware version, device settings, file and software names and types and device identifiers. We may also collect connection information such as the name of your mobile operator or ISP, mobile advertising ID and mobile application ID, browser type, language, geo-location, time zone and date and time of visit on the Site. We may also collect information about your behavior on the Site, such as how long you stay and information about your scrolling and sharing behavior.

We use this information for measuring, at an aggregated level, use of the Site in order to improve its content. We also collect personal data when you use our mobile applications or contact us through the Site or certain applications, such as for customer service purposes. Please see the section below about Cookies and similar technologies.

Note that you can manage how your mobile device can share location information with Yara, as well as how your mobile browser handles cookies and related technologies by adjusting your browser settings or your mobile device privacy and security settings. Please refer to the instructions provided by your mobile service provider or the manufacturer of your device to learn how to adjust your settings.

• When you interact with us:

When you interact with us, we collect different types of personal data depending on why you interact with us, such as when you register a user account and upload information through one of our portals or fill out one of our web forms online, make a purchase or request customer support. Depending on why you interact with us, we collect personal data such as your contact information (name, address and e-mail address) and other information specified in your interaction with us, such as in the online form that you fill out or on the portal where you register a user account.

We use this information for the purposes of meeting your request, processing your orders, providing you with the requested support, products or services and for being able to administer and manage your customer relationship with us. When necessary and relevant, we also use this information to provide other services related to your order, such as product delivery, support, recommendations and maintenance, deliver upgrades, diagnostics and repairs, product safety and recalls. Note that we are legally required to process some information (such as in relation to certain purchases) and sometimes we must ask you to provide certain information in order to be able to enter into and perform a contract with you.

If you have a registered user account, we collect business data that allows us to help you optimize your businesses' operations by actively providing individual reports and/or recommendations derived from the data that you have provided to Yara, that are specifically relevant to you in respect of your business activities to improve customers' productivity, quality and profitability. This includes but is not limited to data relating to the name, location, size of your business, and other business-related information.

When you interact with us or have a registered user account, we also collect relationship information in order to better understand who you are and what you want in order to offer you recommendations, products and services that may interest you, such as property, business information, location and other demographic information in accordance with the rule of law.

When we have an existing customer relationship with you, we also use your personal data to provide you with communications and direct marketing of Yara's products and services, including for creating a user account that we use in order to provide you with targeted marketing offers, product information or invitations that we deem are of your interest. Where required by applicable law, we obtain your consent to send out electronic marketing communications to you. Such communication may be advertisements, newsletters, company magazines, catalogs, announcements, event invites, reminders, etc. You may reserve yourself from such marketing at any time and object to any profiling by following the instructions in those messages.

Please note that we will honor your request to stop receiving promotional electronic communications from Yara. However, we may continue to send you service-related communications such as emails confirming purchases through the Site. We may also keep information for record keeping purposes, such as to ensure that we fulfil customer requests and for complying with applicable record keeping obligations.

To the extent permitted by applicable law and to the extent necessary to achieve our legitimate interests of managing our everyday business needs, we use personal data for managing our websites and services, for analytics, fraud prevention, corporate governance, reporting, for legal compliance and dispute resolution.

• When you apply for a job:

When you apply for a job through the website, we use a job application portal operated by an external service provider on our behalf, for processing and handling your job application. When you apply for a job, the service provider collects your general contact information, CV, information about your education, competencies and skills, career and employment history and other information such as date of birth, gender, age, work and study certificates, references and other relevant information. For some positions, a background check is performed by an external service provider.

We use this information in order to determine your eligibility for the job you apply for and for selecting the right candidate for the position in question. With your consent, we may also retain your data for the purposes of identifying you as a potential candidate for future suitable vacancies and/or to inform you of future suitable vacancies. If there are no suitable jobs listed on our website, you can also sign up to our job alerts by registering your e-mail address, selecting your criteria and submitting the information. We will use this information to alert you of jobs that match your criteria.

• Through our contract management system:

When you use our contract management system, we collect the contact details of suppliers’ representatives and information about the contract in question. We use this data for managing all aspects of our relationship with the supplier in question.

• From our group of companies, dealers, business partners and other third parties:

When you purchase a product, we may collect personal data relating to the transaction from our dealers for fulfilling the transaction. This may include transaction data about how you interact with us, our dealers and business partners, including purchases, inquiries, customer accounts and contact information. This may also include financial account information only as needed to complete your purchase. On your request, we may also import information from our dealers, business partners and other third parties for purposes specified in your request.

• When you subscribe to press releases or newsletters:

When you subscribe to press releases through our press release service, we collect your name, phone number, e-mail address and the name of your organization for being able to provide you with press releases or newsletters about Yara’s activities.

• When you participate in online surveys or promotional events:

On some occasions we conduct online surveys or arrange promotional events to gain a better understanding of the needs and preferences of our visitors and for improving our services and gaining better business insight, for example by collecting leads. Prior to conducting a survey, we will inform you of how we will use your personal data. Participating in a survey and promotional events is voluntary. By participating you consent to the processing for the purposes described prior to your participation. You may withdraw your consent at any time.

• From your equipment:

If you have signed up to use services that allow you to upload information from your device to one of our portals, we collect equipment data that is generated by, collected by, or stored in your equipment (software or hardware) or device interfacing with your equipment. This may include information about the location of your equipment. If the equipment is linked to a user account that you have registered with us or to a mobile application that you have downloaded from us, to we may also receive location data from your smartphone or other geo-aware device. We use this information to provide you with the services requested.

• On some occasions, we process your data when we need to do this to fulfil a contract with you (for example, for customer service or billing purposes) or where we are required to do this by law (for example, to comply with record keeping obligations).

• We also process your data to achieve our legitimate interests in providing the requested services, improving all aspects of our business and for being able to gain better insight in our customers' needs, but only to the extent that these interests are not overridden by your rights to data protection. Such interests are typically achieved by tailoring our services based on our customers' particular preferences and needs.

• On some occasions, we process your data with your consent, for example when you send a job application through our job application portal or sign up for job alerts. We also process your data with your consent when you sign up to receive press releases or marketing material from us. In such cases, you are free to withdraw your consent at any time by sending an email to the relevant Yara department or unsubscribing from our Press releases here: Unsubscribe from press releases. Withdrawal of consent does not affect the lawfulness of the processing that has taken place on the basis of a consent prior to the withdrawal.

We do not sell your personal data to marketing companies outside of Yara. We only share your personal data as follows:

• With other Yara group companies to the extent necessary to fulfil a request from you or for entering into a contract with you, or in other circumstances where sharing is necessary in order to meet your inquiry;

• With our third-party service providers who perform Yara business operations or work on our behalf and on our instructions as data processors for the purposes indicated in this Privacy Policy;

• With your consent, with our carefully selected business partners;

• With prospective buyers or sellers in the event that we sell or buy any business or asset;

• To protect and defend Yara (including enforcing any applicable terms and conditions); or

• For legal reasons to public authorities or governments when required by law, regulation, legal process or enforceable governmental request.

We may also share aggregated data with our business partners and group of companies for various purposes, such as for improving our recommendations for your business, for developing the Site, further developing the equipment, for system administration, statistics, research and analyses.

If you do not wish to provide your personal data to us, we may not be able to provide the products and services you request, or to inform you about other products and services offered by Yara.

We use cookies on our websites. A cookie is a small text file that is stored on your computer when you visit our websites. Cookies help us identify your computer so that we can tailor your user experience.

They also help us observe how our visitors use our web pages, and they enable us to design more usable pages and useful content.

We use first party cookies, third party cookies and third party requests. First party cookies are cookies set by us and can only be read by our site. By default, first-party cookies are allowed in every web browser. If you disable first-party cookies, a web site cannot keep track of your activity as you move from page to page. We use these types of first party cookies: session, http only, secure and persistent.

Third party cookies are set by third parties, mainly advertising networks. These cookies get re-read during a visit on other sites if they do business with these companies as well. For example, we may use cookies for advertising functionality from Facebook.

Third party requests are made from a user to an external service. Despite the fact that these requests don't set any cookies, they can still transfer information to third parties. For example, Google Analytics – a common tool for website analysis – which works through third party requests.

You may manage cookies in the settings of your web browser. Note that blocking cookies might stop our website from functioning properly.

YouTube: This website uses third party cookies when embedded videos are played from YouTube. This mode will set cookies on your computer after you click on the YouTube video player and information collected will be shared with Google for use on their advertising platforms. You can read more about how this information is used in Google’s privacy policy.

Social media plug-ins: If you choose to 'share', ‘like’ or ‘tweet’ content with friends through Facebook, Twitter or other social networks through the social plugins on our website, you might be sent cookies from these websites. We don't control the setting of these cookies, so please check those websites for more information about their cookies and how to manage them.

Google marketing: We use the marketing and remarketing services of Google AdWords and/or Analytics. These services allow us to display advertisements in a more targeted manner in order to present advertisements of interest to users. Through remarketing, ads and products are displayed to users relating to an interest established by activity on other websites within the Google Network.

For more information about Google’s use of data for marketing purposes, please see the summary page: https://www.google.com/policies/technologies/ads, Google’s privacy policy is available at https://www.google.com/policies/privacy.

If you wish to object to interest-based advertising by Google marketing services, you can do so using the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.

When certain conditions are met as set out in applicable data protection legislation, you have the right to request access to, rectification, restriction and deletion of your personal data held by Yara and receive a copy of your personal data in a structured machine-readable format. If you have a registered user account, you may at all times update, correct or delete information you have provided to us by updating your information through the portal. Inquiries regarding processing of personal data and access requests shall be directed to the point of contact provided below.

You also have the right to object to certain processing and a right to withdraw your consent, where we have processed your personal data with your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Where we process your data because we have a legitimate interest in doing so (as explained above), you also have a right to object to this. These rights may be limited in some situations - for example, where we can demonstrate that we are legally required to process your data. For more information about your rights, please see the public version of Yara's Data Privacy Directive for Customer, Supplier and Business Partner Data (.Pdf - 440 KB).

Where we require personal data to comply with legal or contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to manage our contractual relationship, or to meet obligations placed on us. In all other cases, provision of requested personal data is optional.

Your personal data will be retained for the length of any contractual relationship you have with us, and, to the extent permitted, after the end of that relationship for as long as necessary to perform the services set out in this notice. If you have a registered user account, you can at any time contact us through the respective portal and ask us to delete your user account.

Yara is concerned about your privacy and are committed to keeping personal data secure. We have implemented appropriate technical, physical and organizational measures to protect your personal data from loss, misuse or alteration. We limit access to personal data to those who have a business need.

Transfer of personal data to a third country outside of the EEA that does not provide adequate protection will only take place if appropriate safeguards are provided, e.g., by Binding Corporate Rules, entering into EU Standard Contractual Clauses or if the receiving party is certified under the EU-US Privacy Shield.

When disclosing information to other parties as described in Section 3, we sometimes need to transfer personal data to a country outside the EEA, in order to be able to fulfil one of the purposes set out in Section 1. As an example, we may use a sub-processor established in the US when you fill out an online form, in order to meet your request. Such transfer will only take place provided that appropriate safeguards are adduced, as described above.   

If you have any questions relating to this, please contact us at the contact point provided below.

This Privacy Policy only addresses the collection, use and disclosure of personal data by Yara. Other websites that may be accessible through this website have their own privacy policies and practices. Our independent dealers, suppliers, and business partners have their own privacy policies and practices too. We encourage you to familiarize yourself with the privacy policies provided by all third parties prior to providing them with information or taking advantage of an offer or promotion. Although we try to link only to sites that share our high standards and respect for privacy, we are not in any way responsible for the content or the privacy practices employed by other sites.

We will place a separate notice on the Site and/or otherwise communicate to you when we make fundamental changes to this Privacy Policy or changes that may be relevant to and impact upon your rights, in advance of the change .

If you do not want to continue your use of the Site following the said changes, you must discontinue your use of the Site.

This Privacy Policy shall, save for mandatory local law, be governed by and construed in accordance with the laws of Norway and be subject to the non-exclusive jurisdiction of the courts of Norway.

Please contact us if you have any questions or comments about our privacy practices or this Privacy Policy. You can reach us online at dataprivacy@yara.com. You can reach us via mail directed to:

Head of Data Privacy
Drammensveien 131,
0277 Oslo, Norway

If you have unresolved concerns you also have the right to complain to the supervisory authority competent to resolve such concerns according to applicable law or the public version of Yara's Data Privacy Directive for Customer, Supplier and Business Partner Data.