Data Privacy Statement for Specific Processing Activities

For the processing of your personal data, we will to some extent use specialized service contractors that process your data on our behalf, e.g., for purposes of operating or supporting IT systems. Such service contractors are carefully selected and regularly monitored by us. Based on respective data processing agreements, they will process personal data only in accordance with our instructions and in compliance with applicable data protection laws/requirements.

We also may share personal data with following categories of recipients if necessary for fulfilling the processing purposes or if legally required 

• Bayer Group affiliates;
• Governmental authorities, state institutions, law enforcement agencies;
• External lawyers to support legal decisions and to pursue or defend against legal claims;
• Prospective buyers in case of an acquisition, merger, or any other type of corporate or asset transition involving a change of ownership or control concerning us or our services.

As part of processing personal data for the purposes as specified above, Bayer may transfer personal data to countries other than those from where the personal data have been collected. Such other countries may have a different (lower) data protection regime than the country of origin. Personal data collected in the European Economic Area (EEA) may therefore be transferred to a country for which the European Commission has not decided that it ensures an adequate level of data protection (“unsafe third countries”).

When transferring data internationally, Bayer takes great care to do this only in compliance with applicable law. This is done, e.g., by concluding specific data privacy contracts with the recipient, or based on a consent. When transferring personal data collected in the EEA to “unsafe third countries”, Bayer generally concludes so-called “standard contractual clauses” adopted by the European Commission as safeguards according to Art. 46 (2) (c) GDPR. A copy of the standard contractual clauses can be provided upon request. The transfer of personal data collected in the EU may also be based on different legal bases as defined in Art. 49 GDPR, e.g., in case this is required for important reasons of public interest in health care, if it is based on an explicit consent, or if it is required to exercise or defend legal claims.

Applicable data privacy laws ensure that individuals have certain privacy rights regarding the processing of their personal data. These rights include the following:

• Request information about personal data processed by Bayer;
• Request the correction of personal data if these are incorrect or incomplete;
• Request the deletion of personal data, e.g., if these are no longer necessary for the purposes for which they have been collected or processed, or if there is no legal basis for their further processing;
• Request the restriction of the processing, e.g., if the accuracy of personal data is contested, or the processing is unlawful;
• Request the transfer of personal data in a commonly utilizable format to the requestor or another controller, e.g., if the processing is based on a consent;
• Object to the processing of personal data as far as such processing is based on Bayer’s legitimate interest;
• Withdraw any consent to processing of personal data that the requestor may have given. Withdrawing a consent does not affect the lawfulness of processing before the consent withdrawal;
• File a complaint with a data protection authority.

Depending on the respective applicable law, additional rights may apply. Information may be available on respective country-specific Bayer websites. 

If you want to exercise your rights, please get on contact with us as explained in the section “Contact”.

For any questions you may have with respect to Bayer’s handling of personal data or if you want to exercise your rights please use the provided contact form or contact our company data protection officer at the following address:

Group Data Protection Officer
Bayer AG
51368 Leverkusen, Germany

Bayer AG is designated as representative in the European Union for our non-European legal entities in accordance with Art. 27 GDPR. You may contact the representative at the following address:

Data Privacy Representative
Bayer AG
51368 Leverkusen, Germany
E-Mail: dp-representative@bayer.com

We may update our Privacy Statement for Specific Processing Activities from time to time. Updates of our Privacy Statement will be published on our website. Any amendments become effective upon publication. We therefore recommend that you regularly visit this site to keep yourself informed on possible updates.