Your local Yara company is the controller of the personal data that you provide to us, and is responsible for processing this data in accordance with local data protection law, implementing the EU Data Protection Directive 95/46/EC and in accordance with the General Data Protection Regulation 2016/679 (GDPR) from the date it applies.
Depending on how you interact with us, we collect certain personal data from you in the following ways for the purposes described below:
When you fill out our registration form. The personal data we process in this regard is your name, surname, e-mail address, mobile phone and address.
When you fill out your first Yara product purchase declaration form on Yara P. P. The data we collect in this regard are company name, company identification number, surface and type of your cultivation (optional).
When you fill out each Yara product purchase declaration form on Yara P. P. The data we collect in this regard are name of distributor (optional), name of products and quantity of products.
We collect this data for sending you tailored marketing, agronomic and commercial advice, for analytics, sending out newsletters, campaigns and invitations to various arrangements, events as fairs, meetings trainings or webinars. The legal basis on which we rely on to process your personal data for this purpose is your consent, that you have a right to withdraw at any time by contacting us at email@example.com. Sometimes our legal basis for the processing is that it is necessary for purposes relating to our legitimate interest in marketing and in creating a profile about our customers for tailoring our offers and services to their needs, as long as this interest is not overridden by the customer’s rights that require protection of personal data. In this regard we process information relating to the Customer’s purchase history and preferences for being able to better understand the customer’s challenges and needs. You have a right to object to such processing as further described in section 4.
We will only share your personal data with our third-party service providers that perform business operations or work on our behalf and on our instructions as data processors for the purposes indicated in this Consent Declaration and in accordance with the relevant data processing agreement. To the extent necessary, we will also share personal data with other Yara companies and our carefully selected business partners to the extent necessary to provide you with the service that you request or if you have consented to such disclosure for the purposes set out in that consent.
We store your personal data for as long as you are registered with us for up to 3 years after lack of connection to the Yara Premium Program, unless we are required by law to retain the data for a longer period. After 3 years, your account on the Yara P. P. is considered no longer active and it is deactivated. Following that, your personal data are anonymized.
You have the right to get access to the personal data we have registered about you by contacting us at firstname.lastname@example.org. If the personal data we keep about you are wrong, incomplete or irrelevant you can request to have them rectified or deleted. You also have the right to withdraw your consent at any time and/or object to profiling, by contacting us at email@example.com.
You may also exercise your right to data portability by contacting firstname.lastname@example.org. It means that you have the right to receive the personal data which you have provided in a structured, commonly used and machine-readable format, or to have your personal data transmitted directly from Yara to another data controller, where technically feasible.
In order to ensure that we give access to the correct person, we require that the access request is signed by you and filed through mail to our postal address or that identity is verified by other means.
We store your personal data within the EU/EEA and we use an external service provider established in the USA for processing your data on our behalf. The legal basis for such transfers is the processor’s binding corporate rules and EU-US Privacy Shield. To the extent we transfer your personal data from one Yara subsidiary to another, the legal basis for such transfer is Yara’s binding corporate rules. See public version of Yara’s Data Privacy Directive for Customer, Supplier and Business Partner Data.
We have implemented appropriate technical and organizational measures to protect your personal data from loss, misuse or alteration. We limit access to personal data to personnel that have a clear business need.
We will notify you through e-mail or in another clear way if we make and fundamental changes to this Consent Declaration or changes that may be relevant for and affect your rights, prior to making such changes. Any such change will be published in this Consent Declaration. If you do no longer wish to be registered with us following such changes, you can unregister by contacting us at email@example.com.
Yara UK Ltd.
North East Linconshire,
This Consent Declaration was last updated 2018-06-18