Privacy policy

BASF is pleased about your visit to our website and your interest in our company.

The topic of data protection has the highest priority at BASF. Therefore, we would like to inform you in detail about it in the following:

A. Who is responsible for data processing and who is our data protection officer?

You can find the person responsible for data processing here.

Our data protection officer is:

• Alexandra Haug
• EU Data Protection Officer
• 67056 Ludwigshafen

B. What data do we process, for what purposes, for how long and on what legal basis?

In the following, we inform you about the data processing on our site (a), its purposes and legal basis (b) as well as the respective storage period and, if applicable, specific objection and removal options (c).

Log Files

a. Data processing

If you visit our website for information purposes only, i.e. if you do not register or transmit data in any other way (e.g. via a contact form), the following information is automatically transmitted from your browser to our server:

• IP address of your device
• Information about your browser
• Name of the website from which you visit us
• Name of the visited page (URL) or the opened file
• Date and time of your visit
• Status information such as error messages
• Transferred data volume and the access status (file transferred, file not found, etc.)
• Operating system and version of your computer's operating system and the name of your access provider

b. Purposes and legal basis

When you visit our web site, we use the IP address and other information automatically transmitted to our server by your browser under B. 1. a. to:

1. provide you with the requested content
2. ensure the security and stability of our website and to trace unauthorized use

The legal basis for the data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the above listed purposes for data processing. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

c. Storage period

The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended. In the case of storage of the data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses are anonymized by deleting the last eight bits, so that an identification of you is no longer possible.

Cookies and local storage

a. Data processing and respective legal basis

We utilize technologies like local storage and cookies to operate our website and certain of its functionalities.

We use local storage. Local storage is a standardized way to store information in your browser. In general, local storage does not have an expiration data, unless specified otherwise. You can delete your local storage via your browser settings.

The following functionalities utilize local storage:

We use cookies on our website. These are text information that can be stored in the browser on the device of the viewer to a visited website (web server, server). Both cookies and local storage are either sent from the web server to the browser or generated in the browser by a script (JavaScript). The web server can read the stored or written information directly from the server when the user visits this page again or transfer the information to the server via a script of the website. Neither Local storage nor cookies cause any damage to your device, do not contain viruses, trojans or other malware.

We generally use the following cookies:

-Strictly necessary cookies

These cookies are necessary for the functioning of the website. In general, these cookies are only set in response to actions you take in response to a service request, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block these cookies or to notify you about these cookies. However, some areas of the website may not function properly.

The legal basis for the processing of these cookies is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data processing purposes listed under B.1.b.

-Functional cookies

These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third parties whose services we use on our pages. If you do not allow these cookies, some or all of these services may not function properly.

The legal basis for the processing of these cookies is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which you have given us by making your selection in the cookie banner or in our Privacy Preference Center.

You have the right to revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the settings in the Privacy Preference Center.

-Performance cookies

These cookies enable us to count visits and traffic sources so that we can measure and improve the performance of our website. They help us answering questions about which pages are most popular, which are least used and how visitors move around the site. All information collected by these cookies is aggregated and therefore anonymous. If you do not allow these cookies, we cannot know when you visited our website.

The legal basis for the processing of these cookies is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, which you have given us by making your selection in the cookie banner or in our Privacy Preference Center.

You have the right to revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the settings in the Privacy Preference Center.

b. Specific use of cookies, purposes and storage period

Specifically, we use the following cookies, depending on the cookie preferences you set in the Privacy Preference Center. Only the strictly necessary cookies are activated by default. If you do not want this either, you have the option of generally rejecting cookies in your browser. In this case, the functionality of the visited website may be impaired.

CV Matcher - data processing within AI powered job search

To bring you and our jobs together, we use various technologies provided by Textkernel B.V. (Asterweg 15D, 1031 HL Amsterdam, The Netherlands), which are explained below. Textkernel's privacy policy can be viewed here.

First, the documents you upload are analyzed, the data is extracted and converted into a structured form.

The document is subjected to document analysis using artificial intelligence (AI), which means words and phrases of the document are recognized and assigned to individual sections (e.g., personal details, work experience, skills). In addition, AI is used to automatically normalize the extracted text data (e.g., job titles), which means that the data read out is classified and thus prepared for a taxonomy so that it is available in a standardized form. This means that the data read out is enriched with synonyms and translations, and spelling and translation errors are corrected.

In detail: CV matcher maintains a taxonomy for each normalized field. This means that CV matcher holds a set of codes (classes) and synonyms for each of these fields in different languages. These taxonomies are continuously updated based on market feedback and curated by a dedicated team.

Technical details on the taxonomies can be found here.

The normalization is based on an unsupervised learning method for which training data is carefully selected and regularly reviewed.

Gender variations of the same job title are also given the same code. For example, in a CV the word "salesman" will create the same results than the word "saleswoman".

To mitigate the risk of errors in the AI engine's understanding of documents, two methods are regularly used:

• The training datasets used for machine learning are evaluated against a fairness checklist (based on a model from Microsoft). This checklist is used to identify and mitigate potential biases in the training data and model training procedures as early as possible. It is intended to ensure that the demographics associated with the training data adequately reflect the user population and that there are no specific groups for which the software is likely to perform worse than for others.
• In addition, feedback from other Textkernel users is also considered anonymously to eliminate parsing errors.

What happens when you use the CV matcher functions on our web site and what is the legal basis?

1. Using the CV matcher, your data will be sent to Textkernel, proceeded in the above-described way with the purpose to determine and send back the best filter settings for your job search based on your CV content (skills, education, etc.). Your data are not stored after processing at Textkernel but deleted directly from Textkernel servers as soon they are delivered as filter setting proposals.
   
   When you use the CV match functionality, we process your data on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR to safeguard our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of you. If you do not want to upload your data to the AI, you can also set the search filters manually.


2. When you actively click the “submit button”, you will allow us to index your data for further matching between available jobs and your CV (skills, educations, etc.). As long as you do not submit your profile data to BASF application system, CV parsing functionalities will not save any data on Textkernel technology.
   
   The legal basis for submission is your consent according to Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

Contact form and e-mail

a. Data processing

Our web pages contain contact forms as well as links to send us an e-mail directly. If you use one of these contact forms, the data which you provide in such forms will be transmitted to us and processed. The mandatory data that must be filled in for electronic contact via the respective contact form are marked with (*). If you provide us with additional data, this is done voluntarily.

If you send us an e-mail, we will process the associated metadata and the content of the message.

b. Purpose and legal basis

Your data will be processed to enable us to contact you, to process your request and to provide you with our respective services, to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for the processing of data classified as being mandatory is Art. 6 para. 1 sentence 1 lit. f GDPR. The aforementioned purposes also include a legitimate interest in the processing of the data. If the purpose of the contact is the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR. The legal basis for the processing of the data that you have voluntarily provided us with is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

c. Storage period

The personal data of the person concerned will be deleted or made unavailable as soon as the purpose of the storage does no longer apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. Data will also be deleted or made unavailable when a storage period prescribed by the above-mentioned provisions expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.

In case of a consent, you have the right to revoke such consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, please change the Cookie Settings.

Job Alert Service

If you give us your consent to do so, we will process your e-mail-address for the purpose of informing you via email about jobs postings at BASF based on your interests as indicated by your selections. The legal basis for this data processing is your consent, Art. 6 Sec. 1 lit. a) GDPR.

We will share your personal data with other affiliated companies of the BASF Group if they provide IT services for us. Furthermore, we will pass on your personal data to the technical IT service providers we use from whom we obtain services. Our IT service providers are carefully selected and regularly checked by us. They process personal data only on our behalf and strictly in accordance with our instructions on the basis of corresponding contracts for order processing.

We store your personal data collected within the scope of your consent for the above-mentioned purposes until your consent is revoked.

You can revoke your consent at any time with effect for the future by notifying us of your revocation via the unsubscribe link provided in each email of the Job Alert Service. Each email we will send to you based on this consent, will contain a separate link to revoke your consent.

You are at liberty to grant or withhold consent. This has no effect on your visit of this website and platform.

If you revoke your consent, we will no longer use your personal data for marketing purposes unless we have another legal basis for this. The revocation of your consent does not affect the legality of the data processing that has taken place up to that point.

Social media buttons, document uploads and hyperlinks

We have included hyperlinks to the following social media services on our website:

Share Buttons:

On our website, we have implemented ShareButtons of the following social media platforms:

Facebook, LinkedIn, Twitter, WhatsApp and Xing.

If you click on a share button, a new window in your browser will open and you will be forwarded to the website of the respective provider of the social media platform on which you want to share our content.

Upload services:

You can upload documents for your application via the following services:

Google Drive, OneDrive, Dropbox

If you use one of these upload services, a new window in your browser will open and you will be forwarded to the website of the respective provider of the upload service.

Follow Us buttons:

The Follow Us buttons are hyperlinks, which will redirect you to the website of the respective social media platform provider. We have implemented hyperlinks to the following platforms:

LinkedIn, Facebook, YouTube

These hyperlinks are designed in the form of the corresponding logos and are stored on our own server. This means that when our website is loaded for the first time, no data about you as a user are transferred to the respective provider. You will be directed to the respective website only if you click on the logos. Further data about you may be processed on this website.

We have no influence on this data processing on the respective linked websites and services.

Login

On our website you have several options to log in.

1. login by e-mail

If you log in using your e-mail address, we will process it for the purpose of creating an account or to log in to your existing account at BASF web page. In this context, we will send you a one-time security link that you can use to access your login area in a verified manner. The legal basis for this data processing is our overriding legitimate interest in verifying you during the login, Art. 6 para. 1 lit. f) DSGVO.

If you give us your consent via the “stay logged in” function, we store your e-mail address in the local storage of your browser. The e-mail address is stored in the local storage of your browser until you either log in via the one-time security link or until you delete the local storage of your browser. You can delete the local memory in the settings of your browser.

By clearing the local memory of your browser, you can revoke your consent at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. If you delete your local memory, you will have to verify your identity again the next time you log in via e-mail using the security link we send you. Deleting your local storage will not affect your application.

The legal basis for data processing in the context of the "Stay logged in” function is your consent, § 25 Sec. 1 German Telecommunications Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz - TTDSG).

2. log in by Login Services

On this website, you can also log in via one of the login buttons provided by Google, LinkedIn, Microsoft or Apple (hereinafter referred to as “Login Services”). If you use a Login Service, the respective provider of the specific platform will confirm to us your existing account by transmitting a login token as well as your e-mail-address to us by sending this information to our service provider projekt0708 GmbH, Leopoldstrasse 37a, 80802 Munich, Germany (hereinafter referred to as “projekt0708”). In this case, projekt0708 will further process your e-mail-address on our behalf for the purpose of registering you as a user on our website. The legal basis for this data processing is Art. 6 Sec. 1 lit. f) GDPR.

User Account

In your user account, we provide you with the following functionalities:

• You will find an overview of your candidate profile. In this overview, you can manage and maintain your candidate master data (name, gender, country, nationality, e-mail address and phone number) and your application documents. We provide you with this functionality for the purpose of providing you with a space for preparing you application. The legal basis for this data processing is Art. 6 Sec. 1 lit. f) GDPR.
• Furthermore, we will also display the status of your applications for the purpose of informing you about your applications' current status. The legal basis for this data processing is the performance of your application, Art. 6 Sec. 1 lit. b) GDPR. Regarding the legal basis for non-EU countries, please refer to the privacy policy provided to you during the application procedure.
• Also, you will be provided with an overview of the job postings which you have marked as your favorites. If you use the favorites function, we will store the selected favorites in the local storage of your browser. You can find more information about this in the local storage table in this privacy policy. The legal basis for this data processing is § 25 Sec. 2 No. 2 TTDSG.

Direct marketing

If you have given us your consent to do so, we will process your personal data to provide you with personalized information on jobs, career opportunities, company updates, career-focused events and services at BASF we consider relevant for you and to conduct surveys via phone and e-mail.

In order to determine your needs and interests, we analyse the personal data that we have collected about you in the course of your job application at BASF (in particular your CV, certificates, recommendation letters, etc.).

The legal basis for the processing of your personal data for the above-mentioned purposes is your consent.

Due to the global nature of BASF's recruiting teams, BASF will share your personal data with the relevant BASF entities and therefore transmit your personal data to those BASF companies which are responsible for you. This transfer serves the purpose of administration of your data across the BASF Group and preparation of marketing campaigns and recruiting-related activities.

The legal basis for this data sharing is our legitimate interest in maintaining your personal data in our company group.

We will share your personal data with other affiliated companies of the BASF Group if they provide IT services for us or if this is necessary for operational reasons, such as follow ups from recruiting managers or developing personalized marketing materials and content. Furthermore, we will pass on your personal data to the technical IT service providers we use from whom we obtain services. Our IT service providers are carefully selected and regularly checked by us. They process personal data only on our behalf and strictly in accordance with our instructions on the basis of corresponding contracts for order processing.

We store your personal data collected within the scope of your consent for the above-mentioned purposes until your consent is revoked.

You can revoke your consent at any time with effect for the future. Each email we will send to you based on this consent, will contain a separate link to revoke your consent. To withdraw your consent via phone, please inform us accordingly during the phone call or in your user account on this website.

You are at liberty to grant or withhold consent. This has no effect on your visit of this website and platform.

If you revoke your consent, we will no longer use your personal data for recruiting-related marketing purposes unless we have another legal basis for this. The revocation of your consent does not affect the legality of the data processing that has taken place up to that point.

Embedded YouTube videos

a. Data processing

We have integrated YouTube videos into our online offering, which are stored on the YouTube platform and can be played directly from our website. YouTube is a service of Google LLC, D/B/A YouTube. 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter as 'Google'). The videos are all embedded in the so-called '2-click-mode', which means that no data about you as a user is being transferred to Google if you do not activate the video function. Before the video function's activation, only a preview image loaded from our own web server is being displayed.

Data will only be transferred to Google if you activate such video functions. Once being activated, we have no influence on this data transfer. The data transfer is carried out regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account.

b. Purposes and legal basis

We use YouTube videos on our website to present those to you in an easy way.

The legal basis for the processing of your personal data is your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. You grant this consent by activating the video function. If activated, your personal data will be transferred to Google as described above.

In the course of the data transfer to Google, your personal data will be transferred to servers of Google, which might also be located in the USA. The USA is a country that does not have a level of data protection which is adequate to that of the EU. In particular, this means that personal data can be accessed by US authorities in a simplified manner and that there are only limited rights to such measures. If you activate the YouTube video function, you expressly consent to the transfer of data to Google and to the transfer of your personal data to servers located in the USA.

If you have given your consent, you have the right to revoke it at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

You can revoke you consent at any time for the future by deactivating the slider of the category "YouTube" in the Cookie Settings.

c. Further information

Further information on data processing, in particular on the legal basis and storage period by YouTube, can be found in the provider's privacy policy (https://policies.google.com/privacy) and in the privacy banner on the YouTube platform. There you will also find further information on your rights and setting options to protect your privacy.

Google may also process your personal information in the United States, a third country without an adequate level of data protection.

Chatbot/Livechat

a. Data processing and purposes

We have integrated the chatbot "Anilina" on our BASF career website. This is a service of jobpal Ltd, Third Floor, 20 Old Bailey, EC4M 7AN London and optimize-it GmbH, Kehrwieder 9, 20457 Hamburg. The chatbot and the associated data processing will only be started if you have previously either clicked the "Accept All Cookies" button in the cookie banner or activated "Functional Cookies" in the Privacy Preference Center. By default, "Anilina" is not loaded and therefore no personal data is collected from you.

If you reject the use of cookies in the cookie banner or have only activated "absolutely necessary cookies" in the privacy preference centre, we will show you a preview image of "Anilina" on our BASF careers website, but this does not set any cookies and therefore does not process any of your personal data. When you interact with the "Anilina" thumbnail to start the chatbot, we check whether you have consented to the use of "functional cookies". If this is not the case, we will ask you to consent to the use of "functional" cookies, as the "Anilina" chatbot will only work if "functional cookies" are allowed to be used.

Our chatbot supports you around the clock with general questions about applications and about BASF as an employer as well as with the search for suitable job offers as self-marketing. If the chatbot cannot answer your request, it will be passed on to the LiveChat from our BASF Talent Acquisition-Team.

The participation in a chat is voluntary and possible without registration via the BASF career website. You alone decide which personal data you disclose about yourself in the consulting chat. There is no need to tell us your name. The data provided by you will be processed exclusively for the purpose of carrying out the consultation and its quality assurance. Only data which is necessary to provide our consulting service or to handle your request will be used. This data will not be processed by besides anyone else than the service providers mentioned above and us.

The transfer of the data is encrypted. Technical and organizational security measures are used to protect the data from intentional or accidental manipulation, access by unauthorized persons, changes, loss and destruction.

b. Legal basis

The legal basis for the processing of the data you have voluntarily provided us within the chat is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You give us this consent by accepting the necessary cookies.

Insofar as the chat is in connection with a potential application to BASF, the legal basis for processing is Art. 6 Para. 1 sentence 1 lit. b) GDPR. Here we use your personal data only to answer your questions. The chat record will not be linked to a concrete application.

Apart from that, we use your information for quality assurance purposes. As far as possible, we will anonymous them. If this cannot be done, we will process your personal data on the basis of Art. 6 Para. 1 sentence 1 lit. f) GDPR. Our legitimate interest in processing the data collected lies in the continuous improvement of our service within the framework of the chat.

c. Storage period

The chat record and its associated metadata will be deleted or blocked as soon as the purpose for which it was stored ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. Data will also be deleted or made unavailable when a storage period prescribed by the above-mentioned provisions expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.

In case of a consent, you have the right to revoke such consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. Please inform your respective contact partner at our company about this.

C. Are you obliged to provide us with this data?

When you visit our website, the information specified in section B. 1. a. as well as the information from the cookies classified as strictly necessary is processed automatically. The transfer of this information is voluntary. Without the provision of this personal data, we cannot display the requested page.

If you

• allow us to use cookies that are not classified as strictly necessary
• want to contact us and send us an e-mail or use our contact form or
• want to see embedded YouTube videos

The transfer of the information is voluntary.

If you contact us, we cannot answer your inquiry in the chosen way without the provision of the personal data required in the individual case. As far as cookies are concerned, the lack of consent can lead to a restriction of the functionality of the website or parts of it. Embedded videos cannot be played without your consent.

D. To whom do we pass on your personal data?

Within our company, only persons and departments are granted access to your personal data as far as they need it to fulfil the abovementioned purposes.

We also involve service providers. These service providers will only act on our instructions and are contractually obliged to comply with the applicable data protection requirements.

Otherwise, we will only pass on your data to third parties if:

• you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• there is a legal obligation for us to pass on the data in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, or
• this is legally permissible and, in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, is necessary for the fulfilment of contractual relationships with you.

A transfer of your personal data to service providers in a third country will only take place if the special requirements of Art. 44 ff. GDPR are fulfilled. If and to the extent service providers are located in a third country, it may be that either the servers of the respective service provider are located in the third country or that the servers are located in the EU, but accessed in cases of support from a third country. Some third countries do not have a level of data protection adequate to that of the EU, e.g. the USA or China, as authorities might have simplified access to personal data in a simplified manner or that there are limited rights to such actions. If and to the extent you give consent, you expressly give consent to the transfer of personal data into the respective third country.

E. How do we secure your personal data?

BASF uses technical and organizational security measures to protect your personal data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously revised in line with technological developments.

F. What rights do you have?

You have certain rights under the General Data Protection Regulation including the right to request a copy of the personal information we hold about you, if you request it from us in writing:

Right to access: the right to obtain access to your information (if we're processing it), and certain other information (like that provided in this Privacy Policy);

Right to correct: if your personal information is inaccurate or incomplete you have the right to have your personal information rectified;

Right to erasure: this is also known as 'the right to be forgotten' and, in simple terms, enables you to request the deletion or removal of your information where there's no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions. For example, we have the right to continue using your personal data if such use is necessary for compliance with our legal obligations or for the establishment, exercise or defense of legal claims;

Right to restriction of processing: the right to suspend the usage of your personal information or limit the way in which we can process it. Please note that this right is limited in certain situations: When we are processing your personal information that we collected from you with your consent you can only request restriction on the basis of: (a) inaccuracy of data; (b) where our processing is unlawful and you don't want your personal information erased; (c) you need it for a legal claim; or (d) if we no longer need to use the data for the purposes for which we hold it. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for restriction of the use of their personal information to make sure the restriction is respected in future;

Right to data portability: : the right to request that we move, copy or transfer (where technically feasible) your personal information in a structured, commonly used and machine-readable format, for your own purposes across different services;

Right to object: the right to object to our processing of your personal information including where we process it for our legitimate interests, direct marketing;

To exercise your rights, please contact us, for example by e-mail or by post. You will find the contact details in section A.

G. Where can you complain?

You have the right to lodge a complaint with our data protection officer (for contact details see Section A) or with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

In either case, you can contact our Lead Data Protection Authority:

• State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz)
• Hintere Bleiche 34
• 55116 Mainz
• https://www.datenschutz.rlp.de/de/general-storage/footer/ueber-den-lfdi/kontakt/