Effective from: 16th March 2018

This Yara Privacy Policy ("Privacy Policy") applies to personal data that is collected and used by Yara International ASA, Drammensveien 131, 0277 Oslo, Norway ("we") when you use this website (the "Site") or otherwise interact with us as described below. Yara International ASA operates the Site and is the controller for the processing of your personal data when you use the Site.

In the case that we interact with you in ways that are not described below, we will provide you with information regarding use of your personal data in relation to that specific interaction. If you have any additional questions, please contact us at dataprivacy@yara.com.

For more information about how Yara processes personal data and about your rights, please see the public version of Yara's Data Privacy Policy for Customer, Supplier and Business Partner Data (pdf, 1 MB) which form a part of Yara's Binding Corporate Rules.

Depending on how you use the Site and how you interact with us, we collect the following categories of personal data through the following sources for the purposes described below:

• When you visit the Site:

As a point of departure, you can use the Site without revealing your identity. When you visit the Site or otherwise interact with us online, we collect information about the device that you use when you visit the Site and information about your use of the Site and applications by using cookies.

We may associate the information we collect from your different devices, which helps us provide consistent service across your devices. This may for example be attributes such as your IP address, operating system, hardware version, device settings, file and software names and types and device identifiers. We may also collect connection information such as the name of your mobile operator or ISP, mobile advertising ID and mobile application ID, browser type, language, geo-location, time zone and date and time of visit on the Site. We may also collect information about your behavior on the Site, such as how long you stay and information about your scrolling and sharing behavior.

We use this information for measuring, at an aggregated level, use of the Site in order to improve its content. We also collect personal data when you use our mobile applications or contact us through the Site or certain applications, such as for customer service purposes. Please see the section below about Cookies and similar technologies.

Note that you can manage how your mobile device can share location information with Yara, as well as how your mobile browser handles cookies and related technologies by adjusting your browser settings or your mobile device privacy and security settings. Please refer to the instructions provided by your mobile service provider or the manufacturer of your device to learn how to adjust your settings.

• When you interact with us:

When you interact with us, we collect different types of personal data depending on why you interact with us, such as when you register a user account and upload information through one of our portals or fill out one of our web forms online, make a purchase or request customer support. Depending on why you interact with us, we collect personal data such as your contact information (name, address and e-mail address) and other information specified in your interaction with us, such as in the online form that you fill out or on the portal where you register a user account.

We use this information for the purposes of meeting your request, processing your orders, providing you with the requested support, products or services and for being able to administer and manage your customer relationship with us. When necessary and relevant, we also use this information to provide other services related to your order, such as product delivery, support, recommendations and maintenance, deliver upgrades, diagnostics and repairs, product safety and recalls. Note that we are legally required to process some information (such as in relation to certain purchases) and sometimes we must ask you to provide certain information in order to be able to enter into and perform a contract with you.

If you have a registered user account, we collect business data that allows us to help you optimize your businesses' operations by actively providing individual reports and/or recommendations derived from the data that you have provided to Yara, that are specifically relevant to you in respect of your business activities to improve customers' productivity, quality and profitability. This includes but is not limited to data relating to the name, location, size of your business, and other business-related information.

When you interact with us or have a registered user account, we also collect relationship information in order to better understand who you are and what you want in order to offer you recommendations, products and services that may interest you, such as property, business information, location and other demographic information in accordance with the rule of law.

When we have an existing customer relationship with you, we also use your personal data to provide you with communications and direct marketing of Yara's products and services, including for creating a user account that we use in order to provide you with targeted marketing offers, product information or invitations that we deem are of your interest. Where required by applicable law, we obtain your consent to send out electronic marketing communications to you. Such communication may be advertisements, newsletters, company magazines, catalogs, announcements, event invites, reminders, etc. You may reserve yourself from such marketing at any time and object to any profiling by following the instructions in those messages.

Please note that we will honor your request to stop receiving promotional electronic communications from Yara. However, we may continue to send you service-related communications such as emails confirming purchases through the Site. We may also keep information for record keeping purposes, such as to ensure that we fulfil customer requests and for complying with applicable record keeping obligations.

To the extent permitted by applicable law and to the extent necessary to achieve our legitimate interests of managing our everyday business needs, we use personal data for managing our websites and services, for analytics, fraud prevention, corporate governance, reporting, for legal compliance and dispute resolution.

• When you apply for a job:

When you apply for a job through the website, we use a job application portal operated by an external service provider on our behalf, for processing and handling your job application. When you apply for a job, the service provider collects your general contact information, CV, information about your education, competencies and skills, career and employment history and other information such as date of birth, gender, age, work and study certificates, references and other relevant information. For some positions, a background check is performed by an external service provider.

We use this information in order to determine your eligibility for the job you apply for and for selecting the right candidate for the position in question. With your consent, we may also retain your data for the purposes of identifying you as a potential candidate for future suitable vacancies and/or to inform you of future suitable vacancies. If there are no suitable jobs listed on our website, you can also sign up to our job alerts by registering your e-mail address, selecting your criteria and submitting the information. We will use this information to alert you of jobs that match your criteria.

• Through our contract management system:

When you use our contract management system, we collect the contact details of suppliers’ representatives and information about the contract in question. We use this data for managing all aspects of our relationship with the supplier in question.

• From our group of companies, dealers, business partners and other third parties:

When you purchase a product, we may collect personal data relating to the transaction from our dealers for fulfilling the transaction. This may include transaction data about how you interact with us, our dealers and business partners, including purchases, inquiries, customer accounts and contact information. This may also include financial account information only as needed to complete your purchase. On your request, we may also import information from our dealers, business partners and other third parties for purposes specified in your request.

• When you subscribe to press releases or newsletters:

When you subscribe to press releases through our press release service, we collect your name, phone number, e-mail address and the name of your organization for being able to provide you with press releases or newsletters about Yara’s activities.

• When you participate in online surveys or promotional events:

On some occasions we conduct online surveys or arrange promotional events to gain a better understanding of the needs and preferences of our visitors and for improving our services and gaining better business insight, for example by collecting leads. Prior to conducting a survey, we will inform you of how we will use your personal data. Participating in a survey and promotional events is voluntary. By participating you consent to the processing for the purposes described prior to your participation. You may withdraw your consent at any time.

• From your equipment:

If you have signed up to use services that allow you to upload information from your device to one of our portals, we collect equipment data that is generated by, collected by, or stored in your equipment (software or hardware) or device interfacing with your equipment. This may include information about the location of your equipment. If the equipment is linked to a user account that you have registered with us or to a mobile application that you have downloaded from us, to we may also receive location data from your smartphone or other geo-aware device. We use this information to provide you with the services requested.

• On some occasions, we process your data when we need to do this to fulfil a contract with you (for example, for customer service or billing purposes) or where we are required to do this by law (for example, to comply with record keeping obligations).

• We also process your data to achieve our legitimate interests in providing the requested services, improving all aspects of our business and for being able to gain better insight in our customers' needs, but only to the extent that these interests are not overridden by your rights to data protection. Such interests are typically achieved by tailoring our services based on our customers' particular preferences and needs.

• On some occasions, we process your data with your consent, for example when you send a job application through our job application portal or sign up for job alerts. We also process your data with your consent when you sign up to receive press releases or marketing material from us. In such cases, you are free to withdraw your consent at any time by sending an email to the relevant Yara department or unsubscribing from our Press releases here: Unsubscribe from press releases. Withdrawal of consent does not affect the lawfulness of the processing that has taken place on the basis of a consent prior to the withdrawal.

We do not sell your personal data to marketing companies outside of Yara. We only share your personal data as follows:

• With other Yara group companies to the extent necessary to fulfil a request from you or for entering into a contract with you, or in other circumstances where sharing is necessary in order to meet your inquiry;

• With our third-party service providers who perform Yara business operations or work on our behalf and on our instructions as data processors for the purposes indicated in this Privacy Policy;

• With your consent, with our carefully selected business partners;

• With prospective buyers or sellers in the event that we sell or buy any business or asset;

• To protect and defend Yara (including enforcing any applicable terms and conditions); or

• For legal reasons to public authorities or governments when required by law, regulation, legal process or enforceable governmental request.

We may also share aggregated data with our business partners and group of companies for various purposes, such as for improving our recommendations for your business, for developing the Site, further developing the equipment, for system administration, statistics, research and analyses.

If you do not wish to provide your personal data to us, we may not be able to provide the products and services you request, or to inform you about other products and services offered by Yara.

We use cookies on our websites. A cookie is a small text file that is stored on your computer when you visit our websites. Cookies help us identify your computer so that we can tailor your user experience.

They also help us observe how our visitors use our web pages, and they enable us to design more usable pages and useful content.

What types of cookies we use?

Strictly Necessary

Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.

List of Strictly necessary cookies

Name Description Duration
ARRAffinity Routes the request made through a web browser to the same machine in the DXC cloud environment. This cookie is deleted when you close your browser. Session
ASP.NET_SessionId Required to identify requests from the same browser during a limited session time window when browsing the website. This cookie is deleted when you close your browser. Session
__cfuid Speeds up page loading times and overrides any security restrictions that may be applied to a browser based on the IP address from which it comes. 1 year from creation
_epiXSRF Protects the user against cross-site request forgery (XSRF). It is used only by the CMS UI. Session

Analysis and Functional

These cookies give us information about how our website is used and give us the possibility to improve the user experience. These cookies also allow the website to remember choices you make to give you better functionality and personal features.

List of Analysis and Functional cookies

Name Origin Description Duration
_hjid Hotjar This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID. 1 year
_hjIncludedInSample Hotjar This session cookie is set to let Hotjar know whether that visitor is included in the sample which is used to generate funnels. 1 year
_gid Google Analytics Used to distinguish users. 24 hours
_ga Google Analytics Used to distinguish users. 2 years
utag_main Tealium The utag_main cookie is a cookie set by Tealium to enable us to use their tag manager solution.
The utag_main cookie is a 1st-party cookie provided by Tealium. This cookie is used to record a time stamp of when you visit to our site has started, the number of pages you have viewed, the number of visits you have had to our site and a unique ID.
This information is used within our analytics tools to enrich the data we’re collecting about your visit on the website to help us understand our visitors usage of the site to provide a better user experience.
1 year
EPiForm_BID EpiServer Identifies the form submission made to the site when a visitor submits data to via an Episerver form. 90 days from creation
.EPiForm_VisitorIdentifier EpiServer Identifies the form submission mase to the site when a visitor submits data to via an Episerver form. 90 days from creation
EPiForm_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx}:{xxxxx} EpiServer Stores partial form submissions so that a user can continue with a form submission upon return. (The xs are replaced by a unique identifier.) 90 days from creation
mai_trk_{connectorId}_{instanceID} EpiServer Identifies current visitor for form auto-fill purposes. Connector-related personalization is through visitor groups. 1 year from creation
Crisis_{PageName} EpiServer Identifies if user visited crisis modal block. This appears only in case we active crisis pages. 30 days


These cookies help us and our partners to display personalized and relevant ads based on your surfing behavior with us, even when you later visit other websites. Cookies in this category are used for targeted marketing and profiling, regardless of which device (s) you have used.

List of Marketing cookies

Name Origin Description Duration
GPS Youtube Registers a unique ID on mobile devices to enable tracking based on geographical GPS location. 1 day
PREF Youtube This cookie stores your preferences and other information, in particular preferred language, how many search results you wish to be shown on your page, and whether or not you wish to have Google’s SafeSearch filter turned on. 10 years from set/ update
VISITOR_INFO1_LIVE Youtube A cookie that YouTube sets that measures your bandwidth to determine whether you get the new player interface or the old. 8 months from set/update
YSC Youtube Registers a unique ID to keep statistics of what videos from YouTube the user has seen. Session


Third party cookies

YouTube: This website uses third party cookies when embedded videos are played from YouTube. This mode will set cookies on your computer after you click on the YouTube video player and information collected will be shared with Google for use on their advertising platforms. You can read more about how this information is used in Google’s privacy policy.

If you wish to object to interest-based advertising by Google marketing services, you can do so using the settings and opt-out options provided by Google: Google Ad Settings.

When certain conditions are met as set out in applicable data protection legislation, you have the right to request access to, rectification, restriction and deletion of your personal data held by Yara and receive a copy of your personal data in a structured machine-readable format. If you have a registered user account, you may at all times update, correct or delete information you have provided to us by updating your information through the portal. Inquiries regarding processing of personal data and access requests shall be directed to the point of contact provided below.

You also have the right to object to certain processing and a right to withdraw your consent, where we have processed your personal data with your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Where we process your data because we have a legitimate interest in doing so (as explained above), you also have a right to object to this. These rights may be limited in some situations - for example, where we can demonstrate that we are legally required to process your data. For more information about your rights, please see the public version of Yara's Data Privacy Policy for Customer, Supplier and Business Partner Data (.pdf, 1 MB).

Where we require personal data to comply with legal or contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to manage our contractual relationship, or to meet obligations placed on us. In all other cases, provision of requested personal data is optional.

Your personal data will be retained for the length of any contractual relationship you have with us, and, to the extent permitted, after the end of that relationship for as long as necessary to perform the services set out in this notice. If you have a registered user account, you can at any time contact us through the respective portal and ask us to delete your user account.

Yara is concerned about your privacy and are committed to keeping personal data secure. We have implemented appropriate technical, physical and organizational measures to protect your personal data from loss, misuse or alteration. We limit access to personal data to those who have a business need.

Transfer of personal data to a third country outside of the EEA that does not provide adequate protection will only take place if appropriate safeguards are provided, e.g., by Binding Corporate Rules, entering into EU Standard Contractual Clauses or if the receiving party is certified under the EU-US Privacy Shield.

When disclosing information to other parties as described in Section 3, we sometimes need to transfer personal data to a country outside the EEA, in order to be able to fulfil one of the purposes set out in Section 1. As an example, we may use a sub-processor established in the US when you fill out an online form, in order to meet your request. Such transfer will only take place provided that appropriate safeguards are adduced, as described above.   

If you have any questions relating to this, please contact us at the contact point provided below.

This Privacy Policy only addresses the collection, use and disclosure of personal data by Yara. Other websites that may be accessible through this website have their own privacy policies and practices. Our independent dealers, suppliers, and business partners have their own privacy policies and practices too. We encourage you to familiarize yourself with the privacy policies provided by all third parties prior to providing them with information or taking advantage of an offer or promotion. Although we try to link only to sites that share our high standards and respect for privacy, we are not in any way responsible for the content or the privacy practices employed by other sites.

We will place a separate notice on the Site and/or otherwise communicate to you when we make fundamental changes to this Privacy Policy or changes that may be relevant to and impact upon your rights, in advance of the change .

If you do not want to continue your use of the Site following the said changes, you must discontinue your use of the Site.

This Privacy Policy shall, save for mandatory local law, be governed by and construed in accordance with the laws of Norway and be subject to the non-exclusive jurisdiction of the courts of Norway.

Please contact us if you have any questions or comments about our privacy practices or this Privacy Policy. You can reach us online at dataprivacy@yara.com. You can reach us via mail directed to:

Head of Data Privacy
Drammensveien 131 
0277 Oslo, Norway

If you have unresolved concerns you also have the right to complain to the supervisory authority competent to resolve such concerns according to applicable law or the public version of Yara's Data Privacy Policy for Customer, Supplier and Business Partner Data (pdf, 1 MB).