Privacy Policy

1. Name and contact information for the Processor and Data Protection Officer

This privacy notice applies to data processing by:

Agrilution Systems GmbH
Geretsrieder Straße 10
81379 Munich

Tel.: +49 89 215 476 70
Email: privacy@agrilution.com

(hereinafter “Agrilution” or “we”)

All interested parties and visitors to our website can contact privacy@agrilution.com.

2. Information on the processing of personal data

2.1 Visiting the website



2.1.1 The personal data we process


When you visit agrilution.de, the browser installed on your device automatically sends information to our website’s server. This information is temporarily stored in what is known as a log file. The following information is autonomously collected as part of this process and also each time the processing operations described below in paragraphs 2.2 – 2.5 are used, and is stored until it is automatically deleted in accordance with the applicable data protection provisions:

• the IP address of the requesting computer,

• the date and time of access,

• the name and URL of the retrieved file,

• the website from which access is made (referrer URL),

• the browser used and, where appropriate, the operating system installed on your computer and the name of your access provider.

2.1.2 The purposes for which personal data are processed


The aforementioned data are processed by us for the following purposes:

• to establish a smooth connection to the website,

• to ensure that our website is easy to use,

• to evaluate system security and stability, and

• for additional administrative purposes.

We also use cookies and tracking services when you visit our website. Further details can be found below.

2.1.3 Legal basis


The legal basis for the processing of data is the first sentence of Article 6(1)(f) GDPR.

Our legitimate interest derives from the data collection purposes listed above. The provision of data is not legally or contractually required, nor is it necessary to conclude a contract. You are under no obligation to provide data. However, we will be unable to provide the requested website content if you do not consent to providing your data.

2.1.4 Storage period


The data are stored in server log files in a form that allows the identification of the person in question for a maximum period of 7 days, unless a security incident occurs (e.g. a DDoS attack). In the event of a security incident, server log files are stored until the security incident has been remedied and fully investigated.

2.2 Contact form

2.2.1 The personal data we process


Should you have questions of any kind, you can contact us using a form provided on our website. You will need to provide your name and email address so that we can identify where the query came from and to allow us to answer it. If you prefer, you can also give us your telephone number so that we can contact you in connection with answering your query.

2.2.2 The purpose for which personal data are processed


The aforementioned data are processed by us for the purpose of answering your query.

2.2.3 Legal basis


If your query relates to a contract to which you are party or to the performance of contractual measures, data will be processed in accordance with Article 6 (1)(b) GDPR. For all other queries, data provided for the purpose of making contact will be processed on the basis of a weighing of interests (Article 6 (1)(f) GDPR). In this case, our legitimate interest is dealing with your request.

2.2.4 Storage period


We store the aforementioned data for evidential purposes, for the establishment, exercise or defence of possible legal claims, for an additional transition period of three years, starting from the end of the year in which you provide us with the data and in the event of any legal disputes until their conclusion. We also store the aforementioned data in line with any statutory storage obligations, in particular under commercial and tax law. Depending on the type of documents, storage obligations under commercial and tax law may involve a period of six or ten years (Article 147 of the Tax Code (Abgabenordnung – AO), Article 257 of the Commercial Code (Handelsgesetzbuch – HGB)).

2.3 Newsletter

2.3.1 The personal data we process


On our website, you can subscribe to our personalised email newsletter, in which we send you regular updates on our products and activities. Certain information will be collected from you when you subscribe to the newsletter, for example your email address, first name, surname (required), and possibly your telephone number (optional). We use what is known as the double opt-in approach for this, i.e. we only send you the newsletter by email if you first confirm that you are the owner of the email address provided by clicking on a link in our notification email.

2.3.2 The purposes for which personal data are processed


Storage enables us to send you the newsletter and allows us to document your subscription.

2.3.3 Legal basis


A legitimate interest in line with the legal basis for the aforementioned processing (Article 6(1)(f) GDPR) derives from the purposes listed above. The provision of your personal data is optional. Unfortunately, we cannot send you our newsletter without you consenting to this provision of data. Fundamentally, your consent is what constitutes the legal basis for us sending our newsletter to your email address (Article 6(1)(a) GDPR).

You may unsubscribe from the newsletter at any time. A corresponding unsubscribe link is included in each newsletter. Alternatively, you may also send your unsubscribe request by email at any time to privacy@agrilution.com.

2.3.4 Storage period


If you confirm your email address, we store the subscription date, the time of subscription and the IP address used for the subscription until you unsubscribe from the newsletter.

2.4 Webshop

2.4.1 The personal data we process


If you place an order via our website, we collect the following data in the shop:

• your email address,

• your surname and first name,

• your company (optional),

• your address,

• your telephone number,

• your payment information.

We use the Shopify Inc. platform (“Shopify”) for our webshop. If you place an order in our shop, Shopify stores all the data collected in the webshop (see above), as well as your IP address, information relating to your order in our webshop, and information about your device and the installed browser. To this end, your personal data are forwarded to the Shopify data centre located in the United States and processed there. The European Commission has issued an adequacy decision (EU/CAN Privacy Shield) for Canada, under which Shopify is certified. Data are stored and processed in this way in order to support and fulfil your orders, to help authenticate you, to process payment transactions, and to improve the services provided by Shopify. Further information on Shopify’s terms of use and privacy notice can be found at www.shopify.com/legal/privacy.

2.4.2 The purposes for which personal data are processed


These data are collected

• to help us identify you as our customer,

• to help us process, fulfil and execute your order,

• to facilitate correspondence with you,

• for invoicing,

• to help us process any liability claims and establish possible claims against you,

• to ensure technical administration of our website,

• to help us manage our customer data.

2.4.3 Legal basis


In accordance with the first sentence of Article 6(1)(b) GDPR, data processing is performed with reference to your order and/or registration and is required in order to process your order appropriately and for mutual fulfilment of obligations arising from the contract.

2.4.4 Storage period


The personal data we collect to process your order is stored until expiry of the statutory storage period and is then deleted. We also store the aforementioned data in line with any statutory storage obligations, in particular under commercial and tax law. Depending on the type of documents, storage obligations under commercial and tax law may involve a period of six or ten years (Article 147 of the Tax Code (AO), Article 257 of the Commercial Code (HGB)).

2.5 Plantcube

2.5.1 The personal data we process


Information is automatically sent to a cloud server when the Plantcube is connected to a WiFi router. The following information is collected as part of this process and stored in pseudonymous form:

• the device’s sensor data,

• Seedmats with serial numbers,

• settings relating to the device’s functionality,

• the status of individual components in relation to correct functionality.

2.5.2 The purposes for which personal data are processed


These data are collected

• in order to enable the device to function optimally,

• in order to ensure that the device is operated using the correct combination of Seedmats,

• to inspect the Seedmats with regard to shelf life and legal ownership,

• to analyse sensor data with a view to continual optimisation of operation, and

• to provide better support through our Customer Support team in the event of problems.

2.5.3 Legal basis


In accordance with the first sentence of Article 6(1)(b) GDPR, the processing of data is required to ensure the functionality of your Plantcube and for mutual fulfilment of obligations arising from the contract.

2.5.4 Storage period


The personal data we collect to provide the Plantcube is stored until expiry of the statutory storage period and is then anonymised or deleted. We also store the aforementioned data in line with any statutory storage obligations, in particular under commercial and tax law. Depending on the type of documents, storage obligations under commercial and tax law may involve a period of six or ten years (Article 147 of the Tax Code (AO), Article 257 of the Commercial Code (HGB)).

2.6 Accessing the career portal

2.6.1 The personal data we process


When accessing the career portal agrilution-jobs.personio.de, the browser installed on your device automatically sends information to our career portal’s server (“HTTP data”). This information is temporarily stored in what is known as a log file. The following information is autonomously collected as part of this process and is stored until it is automatically deleted in accordance with the applicable data protection provisions:

• the IP address of the requesting computer,

• the date and time of access,

• the name and URL of the retrieved file,

• the website from which access is made (referrer URL),

• the browser used and, where appropriate, the operating system installed on your computer and the name of your access provider.

Cookies are also used when you access the career portal. Cookies are small text files that are stored on the device used to access our career portal. Cookies generally serve the purpose of ensuring secure access to a website (“absolutely vital”), implementing certain functionalities, such as default language settings, for example (“functional”), improving the usability or performance of the website (“performance”) or switching on targeted advertising (“marketing”). We only use cookies that are absolutely vital, functional or performance-related in nature on our career portal, particularly for implementing certain standard settings, such as language, identifying the job advertisement channel, or analysing the performance of a job advertisement via which a user accessed the career portal. To this end, the cookie assigns you a unique visitor ID in order to identify returning visitors. As a result, we collect pseudonymous information about how the career portal is used, in particular the number of times a page is viewed and how frequently it is viewed, and the duration of visits to viewed pages.

2.6.2 The purposes for which personal data are processed


The HTTP data are processed by us for the following purposes:

• to establish a smooth connection to the career portal,

• to ensure that our career portal is easy to use,

• to evaluate system security and stability, and

• for additional administrative purposes.

Cookie data are processed for the purpose of ensuring that our career portal that you have accessed is made available to you in a user-friendly way, particularly for implementing standard settings, such as language, identifying the job advertisement channel, or analysing the performance of a job advertisement via which a user accessed our career portal. In order to improve the career portal and to attain the targets set in relation thereto (e.g. frequency of visits, increase in page views), information relating to the behaviour of users of our career portal is collected and analysed in pseudonymous form. The pseudonymous usage profile is not matched to data relating to the bearer of the pseudonym. The aim of this process is to investigate where users are coming from, which areas of the career portal they are searching for, and how often and for how long which subpages and categories are viewed.

The provision of data is not legally or contractually required, nor is it necessary to conclude a contract. You are under no obligation to provide data. However, we will be unable to provide the requested content on the career portal if you do not consent to the provision of data.

2.6.3 Legal Basis


The legal basis for the processing of HTTP and cookie data is Article 6(1)(f) GDPR.

By processing these data, we are pursuing the legitimate interests of ensuring that the content and information functions that you access on the career portal are provided in a user-friendly manner and are optimised, and of guaranteeing the security of the IT infrastructure used to provide the career portal.

2.6.4 Recipients


UThe technical aspects of our career portal are implemented by the service provider Personio GmbH (Personio GmbH, Buttermelcherstraße 16, 80469 Munich), which processes your data in a function referred to as Processor in our contract.

Your personal data will not be transmitted to a third country for the purposes of this processing.

Further information about the processing of data when accessing the Personio platform can be found at www.agrilution.jobs.personio.de/privacy-policy.

2.6.5 Storage period


The HTTP data are stored in server log files in a form that allows the identification of the person in question for a maximum period of up to 30 days, unless a security incident occurs (e.g. a DDoS attack). In the event of a security incident, server log files are stored until the security incident has been remedied and fully investigated.

The storage period for cookie data is up to 1 month or until the end of the browser session.

2.6.6 Disabling cookies


You can specify whether to enable or disable the use of cookies in your browser settings. Please note that disabling cookies may result in the functions of our career portal being restricted or even blocked completely.

2.7 Submitting a job application via the career portal

2.7.1 The personal data we process


As part of our application procedure, we collect all information required for an application procedure at agrilution, which you upload to the platform and submit to us.

As part of the application, we collect and process the following application data (“application data”):

• your first name and surname

• your email address

• your telephone number

• your application documents (cover letter, CV, etc.)

Although the provision of these data is, in principle, optional, we will be unable to complete the application procedure if the non-optional data are not provided.

Please do not submit any information that we are unable to use under the General Equal Treatment Act [Allgemeine Gleichbehandlungsgesetz]. This includes, in particular, direct or indirect information relating to race, ethnic origin, gender, religious or ideological beliefs, age or sexual orientation. Information relating to illnesses, pregnancy, political views, philosophical or religious convictions, trade union membership, physical or mental health or sex life should also not be submitted. In addition, we ask that you refrain from submitting any information that might infringe third-party rights (in particular copyrights and third-party personal rights). If such data are nevertheless submitted by you, you hereby explicitly give us your consent to use that data.

We welcome applications from candidates with severe disabilities. In cases involving equal suitability, we prefer to incorporate this into our application process.

As part of the application procedure, we also collect and store, where appropriate, additional in-house comments relating to you and your application (e.g. impressions from interviews, feedback and evaluations). These in-house comments cannot be viewed by applicants on the platform.

2.7.2 The purposes for which personal data are processed


These data are collected and processed

• to help us identify you as an applicant;

• to allow us to contact you in writing, in text form (in particular via email) and/or by telephone;

• to help us complete the application procedure.

If your application is successful, the application data you submit to agrilution will also be used to complete the hiring procedure, in particular to conclude an employment contract with you and for administrative matters as part of your employment.

2.7.3 Legal Basis


The legal basis for the processing of data is the first sentence of Article 6(1)(b) GDPR and Article 26 BDSG [Bundesdatenschutzgesetz – Federal Data Protection Act], as the processing is necessary for the performance of contractual measures.

2.7.4 Recipients of the application data


Your application will only be processed and reviewed by our Personnel department (HR & Management), those employees responsible in each individual case for any decision to hire the applicant, and any (other) agrilution employees taking part in the interview as co-interviewer. Your application data will not be forwarded to third parties.

All agrilution employees entrusted with the processing of your application data are obliged to maintain the confidentiality of your application data.

Your application data will not be transmitted to a third country for the purposes of this processing.

2.7.5 Storage period of your application data

We store your application data for the duration of the application procedure.

If your specific application is unsuccessful, we will delete your application data ninety days after the end of the application procedure, to allow us to answer any questions you may have relating to your application and our rejection during this period.

The circumstances may dictate that your application data be stored for a longer period in individual cases, so that we may defend ourselves against any established claims.

If you receive an employment offer from us during the application procedure and you accept that offer, we will store the personal data collected during the application procedure for at least the duration of the employment relationship.

2.7.6 Additional information


When you submit your application, you confirm that the information you have provided is accurate. Please note that any inaccurate information or intentional omission may constitute grounds for rejection or subsequent termination.

Our procedure for processing your application data does not include automated decision-making or profiling pursuant to Article 22(1) and (4) GDPR.

You may withdraw your application at any time.

3. Forwarding of data

We use technical service providers to help operate and maintain our website, who act as Processors on our behalf.

For example, we use the Shopify platform for our webshop (see paragraph 2.4.1 above in this respect). When you place an order in the webshop, we also forward your personal data to our service partners, who assist us with contract processing, such as, for example, the logistics company tasked with delivery and the financial institution that handles payment matters. Finally, the providers of the tracking and/or web analysis tools, as listed in paragraph 5, process the access data on our behalf for the purposes of usage analysis and statistical compilation.

In order to provide our Service Support function, we also transmit, where necessary, any personal data and data from your Plantcube necessary for providing the Service Support function (e.g. name, address, email address, telephone number, sensor data from the device, status of the individual components in relation to correct functionality) to our service partner RTS Elektronik Systeme GmbH (Duisburger Str. 57, 90451 Nuremberg).

The use of service providers located outside the European Union (what are referred to as third countries) to process personal data on our behalf is dependent on whether the European Commission has issued an adequacy decision in respect of that third country, or whether the recipient provides appropriate or adequate guarantees. In addition, we will not transmit your personal data to third parties for any purposes other than those listed below.

In order to offer you Klarna’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Klarna’s own privacy notice.

We will only forward your personal data to third parties if:

• you have given your express consent for us to do this pursuant to the first sentence of Article 6(1)(a) GDPR,

• pursuant to the first sentence of Article 6(1)(f) GDPR, it is necessary to do so to protect our legitimate interests or the legitimate interests of a third party and there is no reason to assume that you have an overriding, legitimate interest in your data not being forwarded to third parties,

• we are subject to a legal obligation to forward your data pursuant to the first sentence of Article 6(1)(c) GDPR, and

• this is permitted by law and, pursuant to the first sentence of Article 6(1)(b) GDPR, is necessary for the performance of contractual relationships with you.

4. Cookies

5. Usage analysis

We use the following analysis measures, which are carried out on the basis of the first sentence of Article 6(1)(f) GDPR. The analysis measures that we use are designed to ensure that our website has a needs-based design and undergoes a continuous optimisation process (e.g. frequency of visits, increase in page views). We also use these measures to evaluate visitor actions (conversion tracking) for the purpose of compiling statistics on and evaluating how our website is used in order to optimise our website for you. To this end, users of the website are tagged in pseudonymous form to allow us to recognise you when you visit the website. Pseudonymous usage profiles are created on the basis of this information. The pseudonymous usage profile is not matched to data relating to the bearer of the pseudonym. The aim of this process is to investigate where users are coming from, which areas of the website they are searching for, and how often and for how long which subpages and categories are viewed. These interests must be regarded as legitimate within the meaning of the aforementioned regulation.

The data processing purposes and data categories in question can be found in the corresponding tracking tools.

5.1 Google Analytics with anonymisation function


In order to ensure that our sites have a needs-based design and undergo a continuous optimisation process, we use Google Analytics, a web analysis service provided by Google Inc.. To this end, pseudonymous usage profiles are created and the following cookies are used on our website:

Name

_utma

Anbieter

google.com

Zweck

This cookie stores the number of visits of each visitor and the time of the first visit, the previous visits and the current visit.

Ablauf

2 years

_utmt

google.com

This cookie is used to throttle the request rate.

10 minutes

_utmb

google.com

This cookie is used to track how long the visitor stays on a website, i.e. when the visit starts and when it ends.

30 minutes

_utmv

google.com

This cookie stores the visitor category to which a user belongs.

2 years

_utmz

google.com

This cookie stores the source or campaign that explains how a user arrived at the website.

6 months

_ga

google.com

This cookie is used to distinguish visitors.

2 years

_gid

google.com

This cookie is used to distinguish visitors.

24 hours

The information relating to your use of our website generated by the cookie, such as

• browser type/version,

• operating system installed,

• referrer URL (the site previously visited),

• host name of the accessing computer (IP address),

• time of the server enquiry,

is transmitted to a Google server in the USA and stored there. The European Commission has issued an adequacy decision (EU/US Privacy Shield) for the USA, under which Google is certified. The information is used to evaluate how the website is used, to compile reports on website activities, and to provide additional services associated with website and internet use, for the purposes of market research and in order to ensure that these websites have a needs-based design. This information may also be transmitted to third parties if this is required by law or if third parties are processing these data on our behalf. Your IP address will never be combined with other data from Google. The IP addresses are anonymised to ensure that matching is impossible (IP masking).

You may disable the installation of cookies using the appropriate setting in your browser software; however, please note that this may result in you not being able to use all the functions of our website in full. You may also disable the collection of data generated by the cookie in relation to your use of the website (including your IP address) and the processing of these data by Google, by downloading and installing a browser add-on. An opt-out cookie is used, which prevents your data being collected during any future visits to our website. The opt-out cookie only works on your browser and only for our website, and is stored on your device. If you delete the cookies on your browser, you will need to reset the opt-out cookie.

Additional information on data privacy in connection with Google Analytics can be found on the Google Analytics-Help page.

5.2 Facebook Pixel


The tracking tool “Facebook Pixel” by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”) is also implemented on our website. Facebook Pixel presents visitors to our website, in the context of the Facebook social network or when visiting websites that participate in the Facebook advertising network, with interest-based advertisements based on information relating to your use of our website (“Facebook ads”). When you visit the website, this tool can prompt the storage of certain information on your device in the form of cookies and trigger the transmission of certain information to a Facebook server in the USA. The European Commission has issued an adequacy decision (EU/US Privacy Shield) for the USA, under which Facebook is certified.

Facebook Pixel is an implemented program code on our website. When you load the website, the program code may prompt the storage of certain information on your device in the form of cookies and trigger the transmission of certain information to Facebook. This includes, on the one hand, information that is created for technical reasons when you visit the website via the Hypertext Transfer Protocol (HTTP), for example your IP address. This may also include additional information that is already stored on your device in the form of cookies, for example your Facebook user ID. When you load the website, Facebook can thus recognise that you visited our website and which website content you accessed. If you have a user account with Facebook, Facebook can match this information to your user account.

The following cookies are used on our website in this respect:

Name

c_user

Anbieter

facebook.com

Zweck

This cookie contains the encrypted user ID of the user currently logged in to Facebook.

Ablauf

3 months

datr

facebook.com

Prevents the creation of fake accounts and spam accounts and lowers the risk of user accounts being taken over by other people. They also protect users' content against theft and prevent DDoS attacks that could make Facebook inaccessible to some users.

6 months

fr

facebook.com

Encrypted Facebook ID and Browser ID to distinguish visitors.

3 months

presence

facebook.com

User's channel partition, chat status and other Facebook functionalities.

7 days

wd

facebook.com

Browser window dimensions.

7 days

xs

facebook.com

Session number and secret ID.

2 months

act

facebook.com

Time stamp and counter of user actions.

n/a

Facebook’s data evaluation allows us to establish how users have navigated the website (user tracking). It is also possible to track which users complete a conversion and/or take action on the website (conversion tracking). These data can also be used to form segments for delivering target group-specific advertising (retargeting).

Additional information on how Facebook collects and uses data, your rights in this respect, and the configuration options you have to protect your privacy can be found in Facebook's privacy notice.

You can object to data collection for these purposes by installing add-ons for your browser and by disabling cookies in your browser or device settings.

5.3 Google Ads

Nature and scope of processing: We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behaviour and recognise users. Google Ads collects information about visitor behaviour on various websites. This information is used to optimise the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioural profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. If you are registered with a Google Ireland Limited service, Google Ads can associate the visit with your account. Even if you are not registered with Google Ireland Limited or have not logged in, the provider may be able to find and store your IP address and other identifying features. In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and legal basis: We process your data with the help of Google Ads for the purpose of optimising our website and for marketing purposes based on your consent pursuant to Article 6(1)(a) GDPR.

Storage period: As soon as the data transmitted to us via the cookies are no longer required to achieve the purposes described above, this information is deleted. This is the case after the session has ended (for queries, refer to the data controller).

5.4 Hotjar


We also use the Hotjar web analysis service provided by Hotjar Ltd. (“Hotjar”), having registered office in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta). This tool allows us to track activity on websites on which Hotjar is installed (what are referred to as heatmaps). For example, it shows how far users scroll and how often users click on which buttons.

The usage data collected is only processed in the EU and only in pseudonymous form, and the data are not used to match usage profiles with your personal data. We can only track which buttons you click on, the movements of your mouse, how far you scroll, your device’s screen size, type and browser information, geographical location (only the country) and your preferred display language for our website.

Hotjar offers each user the possibility of disabling the use of Hotjar using “Do Not Track” headers, meaning that no data relating to your visit to the website in question is recorded. This is a setting supported by the most up-to-date versions of all customary browsers. To this end, your browser sends a request to Hotjar containing an instruction to disable tracking for the user in question. If you access our website using different browsers/computers, you will need to set up the “Do Not Track” header separately for each of these browsers/computers.

Detailed instructions containing information on your browser can be found here. You can also disable the use of Hotjar by customising cookies on our Cookie Dashboard. Additional information on data privacy in connection with Hotjar can be found at www.hotjar.com/privacy.

6. Security

We use the popular SSL (Secure Socket Layer) method for visits to our website. This generally involves a 128-bit encryption. If you wish to know whether an individual page of our website is transmitted in encrypted form, check whether the key or padlock icon in the lower status bar of your browser is in the closed position.

We have also put technical and administrative security measures in place to protect your personal data against loss, destruction, manipulation and unauthorised access. All of our employees and the service providers that we use are bound by the applicable data protection laws. Our security measures are subject to an ongoing improvement process and our privacy statements are regularly reviewed. Please ensure that you have the most up-to-date version.

7. Rights of the data subject

You have the right:

• pursuant to Article 15 GDPR and subject to the restrictions of Article 34 BDSG, to obtain information on your personal data that we have processed;

• pursuant to Article 16 GDPR, to obtain without undue delay the rectification of inaccuracies or omissions in your personal data that we have stored;

• pursuant to Article 17 GDPR, to obtain the erasure of your personal data that we have stored, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims, subject to additional restrictions under Article 35 BDSG;

• pursuant to Article 18 GDPR, to obtain restriction of processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the data, and we no longer need the data but they are required by you for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Article 21 GDPR;

• pursuant to Article 20 GDPR, to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to transmit those data to another controller;

• pursuant to Article 7(3) GDPR, to withdraw your previously given consent from us at any time. This means that we will no longer be able to process the data to which this consent relates in the future, and

• pursuant to Article 77 GDPR, to lodge a complaint with a supervisory authority. Generally speaking, you may refer these matters to the supervisory authority of your habitual residence or place of work or our place of business. A list of the competent supervisory authorities, including addresses, is available here.

If your personal data are processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right, pursuant to Article 21 GDPR, to object to the processing of your personal data if there are grounds therefor relating to your particular situation or to object to the aforementioned data processing for direct marketing purposes. In the latter case, you have a general right of objection that we will implement without the need to detail your particular situation.

Should you wish to exercise your right to withdraw consent or right of objection, all you need to do is send an email to privacy@agrilution.com.

8. Status of and modifications to this privacy statement

This privacy statement was last updated on 20.11.2018

Due to technical developments and/or amended statutory and/or regulatory requirements, it may become necessary to amend this privacy notice.

The most recent version of the privacy statement can be found and printed out at www.agrilution.com/legal/privacy.

*  *  *