This consent declaration for electronic marketing describes how your personal data are processed and protected when you consent to receive tailored electronic marketing from Yara International ASA, Drammensveien 131, 0277 Oslo, Norway (“we” or “us”). Such marketing may for example consist of agronomic and commercial advice, newsletters, surveys, campaigns and invitations and information about diverse arrangements. By consenting to receive electronic marketing from us, you confirm that you have been informed about how we process your personal data and that you consent to the processing of your personal data for the purposes set out below and as further described in this Privacy statement.
1. Who is responsible for the processing?
Your local Yara company is the controller of the personal data that you provide to us, and is responsible for processing this data in accordance with local data protection law, implementing the EU Data Protection Directive 95/46/EC and in accordance with the General Data Protection Regulation 2016/679 (GDPR) from the date it applies.
2. How and why we process personal data
We collect personal data from you when you fill in a registration scheme that you receive from us, either electronically or through personal interaction. The personal data we process in this regard is your name, address, e-mail, mobile telephone number, agricultural area in production and the type of production you have on that area.
We collect this data for sending you tailored marketing, agronomic and commercial advice, for analytics, sending out newsletters, campaigns and invitations to various arrangements, events such as fairs, meetings trainings or webinars. The legal basis on which we rely on to process your personal data for this purpose is your consent, that you have a right to withdraw at any time by contacting us at email@example.com. Sometimes our legal basis for the processing is that it is necessary for purposes relating to our legitimate interest in marketing and increating a profile about our customers for tailoring our offers and services to their needs, as long as this interest is not overridden by the customer’s rights that require protection of personal data. In this regard we process information relating to the Customer's purchase history and preferences for being able to better understand the customer's challenges and needs. You have a right to object to such processing as further described in section 4.
In the cases we enter into a contract with you regarding sale of products or services, our legal basis for the processing is that it is necessary for fulfilling an agreement with you, or for taking measures on your request prior to entering into a contract.
We will only share your personal data with our third-party service providers that perform business operations or work on our behalf and on our instructions as data processors for the purposes indicated in this privacy statement and in accordance with the relevant data processing agreement. To the extent necessary, we will also share personal data with other Yara companies and our carefully selected business partners to the extent necessary to provide you with the service that you request or if you have consented to such disclosure for the purposes set out in that consent.
3. How long are your personal data stored?
We store your personal data for as long as you are registered with us for up to 2 years after lack of commercial contact or any other communication, unless we are required by law to retain the data for a longer period. Following that, your personal data are deleted or anonymised.
4. Your rights
You have the right to at any time (free once a year) to get access to the personal data we have registered about you by contacting us at firstname.lastname@example.org. If the personal data we keep about you are wrong, incorrect or irrelevant you can request to have them rectified or deleted. You also have the right to withdraw your consent at any time and/or object to profiling, by contacting us at email@example.com.
In order to ensure that we give access to the correct person, we require that the access request is signed by you and filed through mail to our postal address or that identity is verified by other means.
5. Where we store personal data
We store your personal data within the EU/EEA and we use an external service provider established in the USA for processing your data on our behalf. The legal basis for such transfers is the processor’s binding corporate rules and EU-US Privacy Shield. To the extent we transfer your personal data from one Yara subsidiary to another, the legal basis for such transfer is Yara’s binding corporate rules. See public version of Yara’s Data Privacy Directive for Customer, Supplier and Business Partner Data.
6. Information security
We have implemented appropriate technical and organizational measures to protect your personal data from loss, misuse or alteration. We limit access to personal data to personnel that have a clear business need.
7. Changes to this consent declaration
We will notify you through e-mail or in another clear way if we make any fundamental changes to this consent declaration or changes that may be relevant for and affect your rights, prior to making such changes. Any such change will be published in this consent declaration. If you do no longer wish to be registered with us following such changes, you can unregister by contacting us at firstname.lastname@example.org.
8. Information about the controller
Yara UK Limited
This consent declaration was last updated 18 June 2018