Privacy Policy

The topic of data protection has the highest priority at BASF. Therefore, we would like to inform you in detail about it in the following:

A. Who is responsible for data processing?

B. What data do we process, for what purposes, for how long and on what legal basis?

C.  Are you obliged to provide us with this data?

D. To whom do we pass on your personal data?

E. How do we safeguard your personal data?

F. What rights do you have?

G. Where can you complain?

H. Data protection for minors

 

A. Who is responsible for data processing?

This Internet site is provided by BASF Coatings GmbH, Glasuritstraße 1, 48165 Münster, Germany (hereinafter also referred to as"BASF", "we" or "us"). In accordance with Article13 of the EU Basic Data Protection Regulation (DSGVO), we would like to informyou below about the processing of your personal data when you call up and useour website.

Our data protection office can be contacted at:
e-mail: data-protection.eu@BASF.com

B. What data do we process, for what purposes, for how long and on what legal basis?

In the following, we inform you about the data processing on our site (a), its purposes and legal basis (b) as well as the respective storage period and, if applicable, specific objection and removal options (c).

1. log files

a. Data processing

If you visit our website for information purposes only, i.e. if you do not register o rtransmit data in any other way (e.g. via a contact form), the following information is automatically transmitted from your browser to our server:

- IP address of your device  

- Information about your browser

- Name of the website from which you visit us

- Name of the visited page (URL) or the opened file

- Date and time of your visit

- Status information such as error messages

- Transferred data volume and the access status (file transferred, file not found, etc.)

- Operating system and version of your computer's operating system and the name of your access provider

b. Purposes and legal basis

When you visit our website, we use the IP address and other information automatically transmitted to our server by your browser under B. 1. a. to

(i) provide you with the requested content

(ii) ensure the security andstability of our website and to trace unauthorized use

(iii) enable a comfortable use ofour website.

The legal basis for the data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

Our legitimate interest follows from the above listed purposes for data processing. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

c. Storage period

The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended. In the case of storage of the data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses are anonymized by deleting the last eight bits, so that an identification of you is no longer possible.

2. Cookies

a. Data processing and respective legal basis

We use cookies on our website. These are text information that can be stored in the browser on the device of the viewer to a visited website (web server, server).The cookie is either sent from the web server to the browser or generated inthe browser by a script (JavaScript). The web server can read this cookie information directly from the server when the user visits this page again ortransfer the cookie information to the server via a script of the website.Cookies do not cause any damage to your device, do not contain viruses, trojansor other malware.

Informationis stored in the cookie that is related to the specific device used. This doesnot mean, however, that we obtain direct knowledge of your identity.

We generally use the following cookies:

- Strictly necessary cookies

These cookies are necessary for the functioning of the website. In general, these cookies are only set in response to actions you take in response to a service request, such as setting your privacy preferences, logging in, or filling outforms. You can set your browser to block these cookies or to notify you about these cookies. However, some areas of the website may not function properly.

The legal basis for the processing of these cookies is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data processing purposes listed under B.1.b.

- Performance cookies

These cookies enable us to count visits and traffic sources so that we can measure and improve the performance of our website. They help us answering questions about which pages are most popular, which are least used and how visitors move around the site. All information collected by these cookies is aggregated and therefore anonymous. If you do not allow these cookies, we cannot know when you visited our website.

The legal basis for the processing of these cookies is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, which you have given us by making your selection in the cookie banner or in our Privacy Preference Center.

You have the right to revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the settings in the Privacy Preference Center.

- Functional cookies

These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third parties whose services we use on our pages. If you do not allow these cookies, some or all of these services may not function properly.

The legal basis for the processing of these cookies is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which you have given us by making your selection in the cookie banner or in our Privacy Preference Center.

You have the right to revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the settings in the Privacy Preference Center.

- Cookies for marketing purposes

These cookies can be set via our website. They may be used by our marketing partners to profile your interests and show you relevant ads on other websites. If you do not allow these cookies, you will experience less targeted advertising.

The legal basis for the processing of these cookies is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which you have given us by making your selection in the cookie banner or in our Privacy Preference Center.

You have the right to revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the settings in the Privacy Preference Center.

b. Specific use of cookies, purposes and storage period

Specifically, we use the following cookies, depending on the cookie preferences you set in the Privacy Preference Center. Only the strictly necessary cookies are activated by default. If you do not want this either, you have the option of generally rejecting cookies in your browser. In this case, the functionality of the visited website may be impaired.

Further details about the respective cookie providers can be found in the Privacy Preference Center, under the respective cookie categories.

3. Contact form, e-mail

a. Data processing

Our webpages contain contact forms as well as links to send us an e-mail directly. If you use one of these contact forms, the data which you provide in such forms will be transmitted to us and processed. The mandatory data that must be filled infor electronic contact via the respective contact form are marked with (*). If you provide us with additional data, this is done voluntarily.

b. Purpose and legal basis

Your data will be processed to enable us to contact you, to process your request and to provide you with our respective services, to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for the processing of data classified as being mandatory is Art. 6 para.1 sentence 1 lit. f GDPR. The afore mentioned purposes also include a legitimate interest in the processing of the data. If the purpose of the contact is the conclusion of a contract, the additional legal basis for the processing is Art.6 para. 1 sentence 1 lit. b GDPR. The legal basis for the processing of the data that you have voluntarily provided us with is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

c. Storage period

The personal data of the person concerned will be deleted or made unavailable as soon as the purpose of the storage does no longer apply. Furthermore, data maybe stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. Data will also be deleted or made unavailable when a storage period prescribed by the above-mentioned provisions expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling acontract.

In case ofa consent, you have the right to revoke such consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the settings in the Privacy Preference Center.

4. Job Placement Process 

In the following subsequent chapters of this privacy policy, we inform you about the different phases ofthe Job Placement Process we are offering in order to connect potential job applicants with potential employees.

If you apply to this process, you give consent to BASF Coatings GmbH, Glasuritstraße 1, 48165 Münster, Germany, for processing your personal data for the purposes as described below. The legal basis for the processing of personal data is your consent accordingto Art. 6 Sec. 1 lit. a) GDPR.

Right of objection

You have the right to withdraw informally your consent at any time. An e-mail to info@pajoo.eu, for example, is sufficient. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the revocation. Due to the objection of your consent, your application will be cancelled and your personal data deleted immediately

Facebook Lead Generation

We use Facebook lead generation (Facebook pixel), a service of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (hereinafter referred to as “Facebook”) for the purpose of initially collecting your contact data. If you apply to this form on Facebook, Facebook will transmit to us the following ofyour personal data:

·        Name

·        Phone number

·        E-mail-address

 

We process your name and your phone number for communicating with you directly via WhatsApp as described in this privacy policy below. Your e-mail-address will be deleted immediately.

We also process your personal data in the course of the Job Placement Process as described in this privacy policy below.

The legal basis for this processing is your consent, Art. 6 Sec. 1 lit. a) GDPR.

Webform on pajoo.eu for Job Applications 

On our website, we provide an application form for you. Via this form, we create a profile of you as a job applicant which we can transmit to potential employees. We process the following personal data:

·        Name

·        Nationality

·        Occupational status

·        Professional skills and experience

·        Language skills 

We transmit those data to potential employers in the field of your interest (automotive painter,industrial painter or automotive mechatronics technician), if you want to pursue the Job placement process. This transmission will be based on the preferences you communicated to us and those of the companies who have authorized to search for job applicant for them.

 

Communication via WhatsApp

For communication purposes during the job placement, we utilize the communication service WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin2, Irland (hereinafter referred to as “WhatsApp”), in order to directly communicate with you. Especially, we inform you about the job placement process, answer your open questions regarding our services and open the exchange with you to find a job that suits your preferences and needs. 

Duringthe communication via WhatsApp, we process the following personal data:

·        Name

·        Phone number

·        Personal data / documents sent to us on a voluntary basis

 

In the course of the communication via WhatsApp, your personal data will be transferred to servers of the Facebook Group, which might also be located in the USA. The USA is a country that does not have a level of data protection whichis adequate to that of the EU. In particular, this means that personal data can be accessed by US authorities in a simplified manner and that there are onlylimited rights to such measures. If you communicate with us via WhatsApp, you expressly consent to the transfer of data to WhatsApp as part of the Facebook Group and to the transfer of your personal data to servers located in the USA.

You can find further information about the collection of data at Facebook on the following sites:

http://www.facebook.com/help/186325668085084  

http://www.facebook.com/about/privacy/your-info-on-other#applications http://www.facebook.com/about/privacy/your-info#everyoneinfo

Thelegal basis for this processing is your consent, Art. 6 Sec. 1 lit. a) GDPR.

 

5. Social media hyperlink

We have included hyperlinks to the following social media services on our website: Facebook and Instagram.

These hyperlinks are stored on our own server. This means that when our website is loaded forthe first time, no data about you as a user are transferred to the respective provider. You will be directed to the respective website only if you click on the logos. Further data about you may be processed on this website.

We have noinfluence on this data processing on the respective linked websites.

C. Are you obliged to provide us with this data?

When you visit our website, the information specified in section B. 1. a. as well as theinformation from the cookies classified as strictly necessary is processed automatically. The transfer of this information is voluntary. Without theprovision of this personal data, we cannot display the requested page.

If you

- allow us to use cookies that are not classified as strictly necessary,

- want to contact us and send us an e-mail, whatsapp message or use our contact form

- apply tothe Job Placement Process,

the transferof the information is voluntary.

If you contact us, we cannot answer your inquiry in the chosen way without theprovision of the personal data required in the individual case. As far as cookies are concerned, the lack of consent can lead to a restriction of the functionality of the website or parts of it. Embedded videos cannot be played without your consent.

The application to the Job Placement Process does not necessarily lead to a job offer.

D. To whom do we pass on your personal data?

Within our company, only persons and departments are granted access to your personal data as far as they need it to fulfil the abovementioned purposes.

We also involve service providers. These service providers will only act on our instructionsand are contractually obliged to comply with the applicable data protectionrequirements.

Typeform

TYPEFORM SL, C/Bac de Roda, 163 (Local), 08018 –Barcelona (Spain) (hereinafter referred to as “Typeform”) is used as a form provider to collect your voluntarily provided data and create an employee profile. The data we receive from you through Typeform will only be used for the aim of a job placement and to be able to offer our services to you. Your data will not be used or given to third parties for other reasons.

To ensure data protection we hold a Data Processing Agreement between Typeform and us.  

 

Webflow

In the course of visiting our website, which is hosted on Webflow servers, your data will be transferred to servers of Webflow, which are located in the USA. The USA is a country that does not have a level of data protection which is adequate to that of the EU. Inparticular, this means that personal data can be accessed by US authorities ina simplified manner and that there are only limited rights to such measures.

Webflow collects certain technical information from the visitors to our website. The information that the web servers log about visitors include Internet Protocol (IP) address; the date/time a webpage or feature is accessed; the user agent string that identifies the browser oroperating system to the server; installed fonts; mime-types; browser languageand timezone; Silverlight data; installed plugins; HTTP headers; and screen resolution.

Otherwise, we will only pass on your data to third parties if:

- you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,

- the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary forthe assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,

- there is a legal obligation for us to pass on the data in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, or

- this is legally permissible and, in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, is necessary for the fulfilment of contractual relationships with you.

A transferof your personal data to service providers in a third country will only takeplace if the special requirements of Art. 44 ff. GDPR are fulfilled.

E.   How do we secure your personal data?

BASF uses technical and organizational security measures to protect your personal data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously revised in line with technological developments.

F.   What rights do you have?

You have certain rights under the General Data Protection Regulation including the right to request a copy of the personal information we hold aboutyou, if you request it from us in writing:

Right to access: the right to obtain access to your information (if we’re processing it), and certainother information (like that provided in this Privacy Policy);

Right to correct: if yourpersonal information is inaccurate or incomplete you have the right to have your personal information rectified;

Right to erasure: this is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compellingreason for us to keep using it. This is not a general right to erasure; there are exceptions. For example, we have the right to continue using your personaldata if such use is necessary for compliance with our legal obligations or forthe establishment, exercise or defense of legal claims;

Right to restriction of processing: the right to suspend the usage of your personal information or limit the way in which we can process it. Please note that thisright is limited in certain situations: When we are processing your personal information that we collected from you with your consent you can only request restriction on the basis of: (a) inaccuracy of data; (b) where our processingis unlawful and you don’t want your personal information erased; (c) you needit for a legal claim; or (d) if we no longer need to use the data for the purposes for which we hold it. When processing is restricted, we can stillstore your information, but may not use it further. We keep lists of people whohave asked for restriction of the use of their personal information to makesure the restriction is respected in future;

Right to data portability: the right to request that we move, copy or transfer(where technically feasible) your personal information in a structured,commonly used and machine-readable format, for your own purposes across different services;

Right to object: the right to object to our processing of your personal information including where we processit for our legitimate interests, direct marketing;

Right to withdraw consent: if you have given your consent to anything we do with your personal information, you have the right to withdraw your consentat any time (although if you do so, it does not mean that anything we have done with your personal information with your consent up to that point is unlawful).

Exercising these rights is free of charge. However, you are required to prove your identity by means ofa two-factor-authentication. We will engage reasonable efforts consistent with our legal duty to supply, correct or delete personal information about you.

To exerciseyour rights, please contact us, for example by e-mail or by post. You will findthe contact details in section A.

G.   Where can you complain?

You have the right to lodge a complaint with our data protection officer(for contact details see Section A) or with a supervisory authority, inparticular in the Member State of your habitual residence, place of work orplace of the alleged infringement.

In either case, you can contact our Lead Data Protection Authority:

State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz)

Hintere Bleiche 34

55116 Mainz

https://www.datenschutz.rlp.de/de/general-storage/footer/ueber-den-lfdi/kontakt/

E-Mail:  poststelle@datenschutz.rlp.de

 

H.   Dataprotection for minors

This website is intended for persons who are at least 18 years old. If a minor  submits personal data via this website, we will delete this data and not process it further as soon as we become aware of this fact.