Chemetall, an affiliated company of BASF, is pleased about your visit of our website and your interest in our company.

The topic of data protection has the highest priority at Chemetall. Therefore, we would like to inform you in detail about it in the following:

• What data we process when you visit our website
• The purpose for which such data is processed
• The legal basis for the processing of personal data
• To whom we pass such personal data
• For how long personal data is stored
• Whether you are obliged to provide personal data

Furthermore, we would like to inform you about

• the rights you have regarding the processing of data
• the Controller in the meaning of data protection laws and the contact details of BASF’s Data Protection Officer

(1) If you visit our website for information purposes only (i.e. not through registration or via a contact form), the following information is automatically transmitted from your browser to our server:

• IP address of your device
• Information about your browser
• Name of the website from which you visit us
• Name of the visited page (URL) or the opened file
• Date and time of your visit
• Transferred data volumes
• Status information such as error messages

(2) If you contact us by contact form on our website or communicate with us by email, the following information is transmitted to us:

• Your email address and other information that you provide in your email or via the fields of a contact form
• The date and time of your message

(3) BASF-Jobportal

You have the opportunity to apply for job openings at CHEMETALL GmbH electronically via the BASF-Jobportal. To this end, you will be asked to follow the workflow specified in the online applicant portal and provide information. In the framework of the application process, the following personal data will be collected:

• Form of address
• Academic title
• First name
• Last name
• Email address
• Phone number
• Street and number
• ZIP code and city
• Link to your LinkedIn profile
• Link to your Xing profile
• Attachment motivation letter (with the personal data that you wish to disclose for your application)
• Attachment CV (with the personal data that you wish to disclose to us for your application)
• Attachment reference letter (with the personal data that you wish to disclose for your application)
• Attachment further credentials (with the personal data that you wish to disclose to us for your application)
• Further attachments (with the personal data that you wish to disclose for your application, e.g. certificates, etc.).

You are kindly requested not to send us any information that cannot be processed according to the provisions of the German General Equal Treatment Act (AGG) or belong to the group of special personal data in the meaning of Art. 9 General Data Protection Regulation.

In addition, we kindly request you not to give us any company secrets or internal company information of previous or current employers.

If you wish to inspect, correct, update, withdraw or delete your data, kindly send an email stating your request to data-protection.eu@basf.com. You are personally responsible for ensuring that this data is accurate and truthful.

(4) Access to Material Safety Data Sheets or Technical Data Sheets

On our website we offer the possibility of registration with your personal data to gain access to the Material Safety Data Sheets and Technical Data Sheets required for you and/or your company. The personal data has to be entered in a data entry form and will then be transmitted to us and stored by us. The data below is collected as part of the registration process whereby mandatory entry fields are marked as such:

• Last name
• First name
• Email address
• Company
• Street
• ZIP code
• City
• Country
• Phone number
• Fax
• Your request

(1) When you visit the Chemetall website, we use your IP address and the other data that your browser transmits automatically to our server (see Section 1 (1)) in order to provide you with the requested content. We store the complete IP address only as long as this is technically needed to show you the requested web page.

(2) We store the IP address of your computer after having removed the last octet of the IP address, i.e. in an anonymized form, for web audience measuring and use this information to improve our website. We remove the last octet of your IP address immediately after collection. Therefore, we do not collect any personal data about your use of our website.

(3) If you contact us by contact form on our website or by email, we use the personal data listed under Section 1 (2) to answer and, if possible, to meet your request. We store such personal data for the period needed to answer and comply with your request.

(4) If you use the BASF-Jobportal (Section 1 (3)): We will exclusively use the personal data that you provide to us for the purpose of processing your application. Personal data will be collected while using the BASF-Jobportal only if, and to the extent that, you provide the relevant data via the BASF-Jobportal. It must be mentioned that the data provided by you will not be stored in an anonymized form but will be shared internally in the context of the job application process with the pertinent employees from Human Resources and the relevant people in charge of filling the position (e.g. employees of the respective specialized department). Your data will be shared internally only with persons who need access to your personal data in order to fill a position.

If you have given us your consent to using your data for other job openings in the framework of the job application process, your job application will be saved and considered for other vacancies within the BASF Group (BASF-wide pool of applicants).

We will not share your personal data with third parties unless you have given us advance permission to do so or unless a binding official/legal requirement exists.

(5) If you want to gain access and/or receive the Material Safety Data Sheets and Technical Data Sheets (Section 1 (4)) needed for your company, you must register in order for us to be able to provide the requested documents and services.

When you visit our website, the information specified in Section 1 (1) is automatically transmitted by your browser to our server. The transmission of this information is voluntary. Without the provision of such personal data, we cannot display the page you have requested.

You are not obliged to let us use your anonymized data for web audience measuring. You can object to the data processing outlined in Section 2 (2) at any time provided it is related to your person. Your objection has no detrimental consequences for you. If you want to contact us by a) email or by using our contact form or b) via the BASF-Jobportal, transmission of the data set out under Section 1 (2) and/or Section 1 (3) is voluntary. To the extent that a contact form includes mandatory fields, these will be marked as such. Without providing the data that may be needed in a specific case we may not be able to optimally answer your request.

If you need access to the Material Safety Data Sheets or Technical Data Sheets required for your company, you are free to transmit the data set out under Section 1 (4). We will mark any mandatory fields of a contact form. Without providing the personal data that may be needed in a specific case we may not be able to optimally answer your request.

The legal basis for the processing of your personal data as set out under Section 2 paras 1 through 3 and para 5 is Article 6 (1), sentence 1, lit. f of the General Data Protection Regulation (GDPR). The legitimate interest of Chemetall in such processing activities arises from the purposes described under Section 2.

The legal basis for the processing of personal data if the relevant permission has been obtained from the user is Art. 6 para. 1 sentence 1 lit. a of the GDPR.

The legal basis for the processing of your personal data in the framework of the BASF-Jobportal set out under Section 2 para 4 is Art. 6 para. 1 sentence 1 lit. b of the GDPR in conjunction with Art. 88 GDPR and Section 26 para. 1 sentence 1 BDSG of the German Data Protection Act. Such data processing first and foremost serves to establish an employment relationship or to perform pre-contractual activities upon request. The legal basis for the storage of your personal data and for the acceptance into the BASF-wide applicant pool is your consent granted pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Art. 88 GDPR and Section 26 para. 2 of the German Data Protection Act. Any consent granted can be revoked at any time. A consent granted can only be revoked with effect for the future and does not affect the lawfulness of the data processing up until the revocation.

We transmit the personal data set out under Section 1 to data processors based in the European Union for the purposes set out in Section 2 on the basis Art. 28 GDPR. Data processors are IT service providers, hosting providers or providers of job application management systems. The data is processed on instruction from us and according to our instructions.

The personal data set out under Section 1 (3) may in addition also be passed on to those internal functions that need them to comply with our contractual and legal obligations, e.g. human resources department, line manager/employee of the respective specialized department, employee council, representative body for severely handicapped employees, equal opportunities officer.

Otherwise, we will only pass on your data to third parties if:

• you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• there is a legal obligation for us to pass on the data in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, or
• this is legally permissible and, in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, is necessary for the fulfilment of contractual relationships with you.

A transfer of your personal data to service providers in a third country will only take place if the special requirements of Art. 44 ff. GDPR are fulfilled.

Chemetall uses technical and organizational security measures to protect your personal data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously revised in line with technological developments.

(1) To the extent that no explicit storage period is indicated when the personal data is collected (e.g. in the framework of a declaration of consent), the personal data of our contacts will be deleted as soon as it is no longer needed for the purpose for which it was stored and legal retention obligations (e.g. retention periods prescribed by commercial and tax law) do not conflict with a deletion.

(2) In the event of a negative response, your personal data provided to us (Section 1 (3)) in the framework of the BASF-Jobportal will be deleted 6 (six) months after closing of the application process, at the latest.

If you have consented to acceptance into the BASF-wide applicant pool, we will delete your data 6 (six) months starting from the date of your consent, at the latest.

If your job application leads to the conclusion of an employment contract, your data can be stored and processed for the purposes of the usual organizational and administration process in compliance with the relevant legal regulations.

a. Data processing and respective legal basis

We use cookies on our website. These are text information that can be stored in the browser on the device of the viewer to a visited website (web server, server). The cookie is either sent from the web server to the browser or generated in the browser by a script (JavaScript). The web server can read this cookie information directly from the server when the user visits this page again or transfer the cookie information to the server via a script of the website. Cookies do not cause any damage to your device, do not contain viruses, trojans or other malware.

Information is stored in the cookie that is related to the specific device used. This does not mean, however, that we obtain direct knowledge of your identity.

We generally use the following cookies:

• Strictly necessary cookies

These cookies are necessary for the functioning of the website. In general, these cookies are only set in response to actions you take in response to a service request, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block these cookies or to notify you about these cookies. In this case, the functionality of the visited website may be impaired.

• Performance cookies

These cookies enable us to count visits and traffic sources so that we can measure and improve the performance of our website. They help us answering questions about which pages are most popular, which are least used and how visitors move around the website. All information collected by these cookies is aggregated and therefore anonymous. If you do not allow these cookies, we cannot know when you visited our website.

The legal basis for the processing of these cookies is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, which you have given us by making your selection in the cookie banner or in our Privacy Preference Center.

You have the right to revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the settings in the Privacy Preference Center.

• Functional cookies

These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third parties whose services we use on our pages. If you do not allow these cookies, some or all of these services may not function properly.

The legal basis for the processing of these cookies is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which you have given us by making your selection in the cookie banner or in our Privacy Preference Center.

You have the right to revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the settings in the Privacy Preference Center.

• Cookies for marketing purposes

These cookies can be set via our website. They may be used by our marketing partners to profile your interests and show you relevant ads on other websites. If you do not allow these cookies, you will experience less targeted advertising.

The legal basis for the processing of these cookies is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which you have given us by making your selection in the cookie banner or in our Privacy Preference Center.

You have the right to revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the settings in the Privacy Preference Center.

b. Specific use of cookies, purposes and storage period

Specifically, we use the following cookies, depending on the cookie preferences you set in the Privacy Preference Center. Only the strictly necessary cookies are activated by default. If you do not want this either, you have the option of generally rejecting cookies in your browser. In this case, the functionality of the visited website may be impaired.

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

These cookies are necessary for the website to function. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies. In this case, the functionality of the visited website may be impaired.

Tealium

Through our service provider Tealium Inc, 11085 Torreyana Road, San Diego, CA, 92121 USA, we use Tealium iQ Tag Management to assign tags to our websites and manage them. The tag manager can use the tags to specifically apply analysis and tracking tools for us. The tag management system as such does not store any personal data about you. Only anonymous data is generated, which is stored locally in the browser in the cookie "utag_main".

For further information about Tealium, go to

https://community.tealiumiq.com/t5/iQ-Tag-Management/Tealium-Cookies/ta-p/138/

Cookies from OneTrust, LLC.

As part of the cookie compliance module of our service provider, OneTrust Technology Limited, Dixon House 1 Lloyd´s Avenue, London EC3N3DQ, UK, we use cookies to manage your preferences in the cookie settings.

For further information on OneTrust, go to

https://community.cookiepro.com/s/article/UUID-1e75fb0d-bb79-2af8-cb85-f905d16f1220

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.

• Piano Analytics (formerly "AT INTERNET")

We use cookies in connection with the analysis of the usage behavior of visitors of our website by our service provider AT INTERNET, Applied Technologies Internet GmbH Leonrodstrasse 52-58, 80636 Munich. This enables us to improve user-friendliness and quality of our website. To do so, we statistically record and analyze your usage patterns on our website in the following manner: implementation of performance or profitability comparisons of our website, counting visitors, tracing the level of perception of our website content, rich media content or special campaigns, gauging the website areas that are particularly compelling to you, evaluating the origin of online users in order to optimize our offer locally.

Your IP address is only stored in anonymous form by irreversibly deleting the last eight bits of it. The cookie identifiers / mobile identifiers are rendered anonymous by converting them into a unique visitor ID that can no longer be traced back to the original cookie.

For further information about AT INTERNET, go to:

https://www.atinternet.com/en/data-protection/

Cookies Settings

Further details about the respective cookie providers can be found in the Privacy Preference Center under the respective cookie categories.

You have certain rights under the GDPR:

9.1. Right to access: you have the right to obtain access to your personal data processed by us and certain other information (like that provided in this Privacy Policy).

9.2 Right to correct: if your personal data is inaccurate or incomplete, you have the right to have it rectified.

9.3 Right to erasure: Based on the so-called “right to be forgotten”, you can request the deletion of your personal data unless a retention obligation exists. This is not a general right to erasure as exceptions exist. For example, we have the right to continue using your personal data if such use is necessary to comply with our legal obligations or to establish, exercise or defend legal claims.

9.4 Right to restriction of processing: This right includes the restriction of the usage of your personal data or of the way in which we can use it. This right is limited to certain situations and exists in particular in situations where (a) the data is incorrect; (b) processing of the data is unlawful and you object to its erasure; (c) we no longer need the data, but you need such data to establish, exercise or defend legal claims. When processing is restricted, we can still store your data, but may not use it further. We keep a list of people who have asked for restriction of the use of their personal data in order to be able to ensure that this restriction is respected.

9.5 Right to data portability: This right means that we transfer your personal data, where technically feasible, in a structured, commonly used and machine-readable format, for your own purposes.

9.6 Right to object: You can object to the processing of your personal data if we process such data on the basis of legitimate interests, in particular in the case of direct marketing.

9.7 Right to be informed: You have the right to be provided with clear and easily understandable information about how we process your personal data.

9.8 Right to withdraw your consent: If you have given us your consent to processing, you have the right to withdraw your consent at any time. Such revocation does not affect the lawfulness of the processing carried out on the basis of your consent until its revocation.

The exercise of these rights is free of charge for you; however, you are required to confirm your identity with two-factor authentication. We will use reasonable efforts consistent with our legal duty to transfer, correct or delete your personal data in our file systems.

To exercise your rights, file a complaint or transmit other queries, please contact us by email or send us a letter. We will endeavor to respond within 30 days. The contact details can be found in Section 11.

When we receive a complaint, we will contact the person who made the complaint to follow up on the issue. If we cannot resolve a complaint directly, we will work with the appropriate regulatory authorities, especially the data protection authorities, as required.

If you are not satisfied with the way any complaint you make in relation to your personal data is handled by us, you may refer your complaint to the relevant data protection supervisory authority.

You have the possibility to lodge a complaint with the Data Protection Officer stated in this Privacy Policy (for contact details, see below) or with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

In either case, you can contact:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit

Postfach 3163

65021 Wiesbaden

Aufgaben und Organisation | https://datenschutz.hessen.de/

E-Mail: poststelle@datenschutz.hessen.de

You can find the person responsible for data processing here

Data Protection Officer of BASF is:

Alexandra Haug

EU Data Protection Officer

67056 Ludwigshafen

+49 (0) 621 60-0

email: data-protection.eu@basf.com

This website is intended for persons who are at least 18 years old. We do not want to collect personal data from minors. Therefore, persons below the age of 18 should not submit personal data to, or via, this website.

If a minor submits personal data via this website, we will delete this data and not process it further as soon as we become aware of this fact.