As of July 2024

1.1 Foreword

Regardless of whether you are a customer, interested party, applicant or visitor to our website: We, AGRAVIS Raiffeisen AG (hereinafter: “AGRAVIS”, “we”) take the protection of your personal data very seriously. But what does this mean in concrete terms?

Below we give you an insight into which personal data we collect from you and in what form we process it. You will also receive an overview of the rights you are entitled to under applicable data protection law. We will also give you details of your contact person if you have any further questions.

1.1.1 Who are we?

As a modern agricultural trading and service company, we support our cooperative sales partners, agriculture and people in rural areas with high-quality products, extensive know-how, expert advice and first-class service in the areas of plants , animals , technology , construction , markets and Energy .
We do everything we can to be the number one partner for our cooperatives , customers and shareholders: We help them to work more profitably, perform more efficiently and achieve higher returns.

As the person responsible for the purposes of applicable data protection laws, we take the following steps all measures required by applicable data protection law to ensure the protection of your personal data.

AGRAVIS Raiffeisen AG
Industrieweg 110
48155 Münster
Germany
Email: info@agravis.de
Telephone +49(0)251 . 682-0
Fax +49(0)251. 682-2534

If you have any questions regarding this data protection declaration, we ask you to contact our data protection officer.

Data protection officer:
2B Advice GmbH
Joseph-Schumpeter-Allee 25
53227 Bonn
Germany
Email: AGRAVIS@2B-Advice.com

1.2 Scope of the privacy policy

The legislature understands the processing of personal data to be activities such as collecting, recording, organizing, arranging, storing, adapting or changing, reading out, querying, using, disclosing by transmission, dissemination or another form of information Providing, comparing or linking, restricting, deleting or destroying personal data.

Personal data is any information relating to an identified or identifiable natural person.

This data protection declaration deals with the personal data of customers, interested parties, applicants or visitors.

1.3 What personal data do we process?

We collect your personal data when you contact us, for example as an interested party or customer. This can happen, for example, when you are interested in our products, register for our online services, contact us via our communication channels, or when you use our products or services as part of existing business relationships.

We process the following types of personal data:

• Personal identification information, e.g. first and last name, address details, email address, telephone number, fax number
• Order data, e.g. customer number, order number, invoice data
• Company-related data, e.g. company name, department, activity
• Data about your online behavior, e.g. IP addresses, user names, data about your visits to our website, customer portals or app, actions carried out on our websites and customer portals, location of access
• Information about your interests and wishes, which you communicate to us, for example via our contact form or via other communication channels
• Information about your professional career, e.g. vocational training, previous employers, other qualifications

and other information comparable to these data categories.

1.3.1 Sensitive data

Sensitive data, i.e. special categories of personal data such as information on religious or trade union membership, are not collected in this way.

1.3.2 Personal data of minors

Personal data from children or minors is only collected if they create a customer account with us, register in the career portal, use our communication channels or use the app.

1.3.3 Use of cookies and data collection of external service providers

1.3.3.1 What are cookies?

Cookies are files that are placed on your computer by our website or customer portals when you access the site. These files store information that makes your use of this site more efficient.

You can manage the setting of various cookies and view further information about these cookies with this link:

We also use the following cookies:

X

This offer uses the buttons and content of the X service. These buttons are offered by X Corp., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. They can be recognized by terms such as "X" or "sequence", combined with a stylized black X. Using the buttons it is possible to share a post or page of this offer on X or to follow the provider on X.

When a user accesses a web page on this website that contains such a button, their browser establishes a direct connection with X's servers. The content of the X button is transmitted from X directly to the user's browser. The provider therefore has no influence on the amount of data that X collects with the help of this plugin and informs the users according to its level of knowledge. Accordingly, only the user's IP address and the URL of the respective website are transmitted when the button is accessed, but are not used for purposes other than displaying the button.

Further information can be found in X's data protection declaration

Youtube

Our website uses plugins from the YouTube site operated by Google. The website is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube's servers is established. The YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of an attractive presentation of our online offerings. This represents a legitimate interest within the meaning of Article 6 Paragraph 1 Letter f GDPR.

Further information on how to handle user data can be found in YouTube's privacy policy at:

Messaging services

By sending a start message to the company specified in the legal notice (hereinafter referred to as the sender), I agree in accordance with Art. 6 Para. 1 lit. Messages) are used for direct communication and the data processing required for this using the selected messenger. To use this service, an existing messaging account with the respective provider is required.

Web fonts

Our pages use so-called web fonts, which are provided by external providers, to display fonts uniformly. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you use must connect to external servers. This gives the respective provider knowledge that our website was accessed via your IP address. The
use of web fonts is in the interest of a uniform and attractive presentation of our online offerings. This represents a legitimate interest within the meaning of Article 6 Paragraph 1 Letter f of the GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
We currently use the web fonts from Google (“Google Web Fonts”). The provider is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
The purpose and scope of data collection and the further processing and use of the data by the providers as well as your related rights and setting options to protect your privacy can be found in the relevant informationData protection informationthe provider.

Jobspreader

We use the ‘Jobspreader’ service from Wollmilchsau GmbH, Koppel 97, 20099 Hamburg, Germany, to optimise and distribute our job advertisements. Jobspreader enables us to efficiently distribute our job adverts on various online platforms and thus achieve a greater reach. Tracking can be used on our website to analyse and optimise the success of the job advertisements. Cookies are also used as part of the tracking process. We only use tracking and cookies if you have consented to this.

Information on the provider's data protection can be found here:

Cookies used

• Cookie: js_clid, Expiry (duration): 30 days, Purpose: This cookie sets a random jobspreader click ID.
• Cookie: js_startqueue, Expiration (duration): Session, Purpose: This cookie is used to track a user's click the button (start application).
• Cookie: js_endqueue, expiry (duration): Session, Purpose: This cookie is used to track a user's click in terms of the end of the application process (end application).
• Cookie: js_end, expiration (duration): Session, Purpose: This cookie is used to end the analysis of the end of the application process recognised by the cookie (js_endqueue).

1.3.4. Creation of log files

1.3.4.1. Description and scope of data processing

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

• Information about the browser type and version used
• Websites from which the user's system accesses our website
• Websites that are accessed by the user's system via our website
• Date and time of access
• The user's IP address

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

1.3.4.2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Article 6 (1) (f) GDPR.

1.3.4.3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. To do this, the user's IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. The data also serves us to optimize the website and to ensure the security of our information technology systems. The data will not be evaluated for marketing purposes in this context.

These purposes also include our legitimate interest in data processing in accordance with Article 6 Paragraph 1 Letter f of the GDPR.

1.3.4.4. Storage and duration

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data is collected to provide the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the users' IP addresses are deleted or altered so that it is no longer possible to assign the calling client.

1.3.4.5. Possibility of objection and elimination

The collection of data to provide the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility for the user to object.

1.3.5. Newsletter delivery by CleverReach

This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that can be used to organize and analyze newsletter distribution. The data you enter to receive the newsletter (e.g. email address) is stored on CleverReach's servers in Germany or Ireland.

Our newsletters sent with CleverReach enable us to analyze the behavior of newsletter recipients. Among other things, it can be analyzed how many and which recipients have opened the newsletter message and who or how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. requesting/downloading information materials or registering for seminars) took place via our website after clicking on the link in the newsletter. Further information about data analysis through the CleverReach newsletter can be found at:https://www.cleverreach.com/de/funktionen/reporting-und-tracking/and underhttps://www.cleverreach.com/de/funktionen/datenschutz-sicherheit.

Data processing is based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

If you do not want analysis by CleverReach, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

The data you provide to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and CleverReach's servers after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. email addresses for the member area) remains unaffected.

For more information, please see CleverReach's data protection regulations at:https://www.cleverreach.com/de/datenschutz/.

We have concluded a contract for data processing with CleverReach and fully implement the strict requirements of the German data protection authorities when using CleverReach.

1.4 What do we process your personal data for – and on which legal basis?

1.4.1 Performance of the contract

We process your data in order to be able to fulfill our contracts. This also applies to information that you provide to us in pre-contractual correspondence. The specific purposes of data processing depend on the respective product and the application made and can also be used to analyze your needs and check which products and services are suitable for you. The data is also processed for warranty measures.

1.4.1.1 Implementation of the contractual relationship

In order to carry out the contractual relationship, we need your name, address, telephone number or email address so that we can contact you.

1.4.1.2 Offering goods and services

We also need your personal data in order to be able to check whether and which products and services we can and may offer you.

Details on the respective purposes of data processing can be found in the contract documents and our general terms and conditions.

1.4.1.3 Conduction of the application process

We process the data you sent to us as part of your application to check whether your professional qualifications are suitable for the advertised position. We only use your information for the application process and transfer it to your personnel file when a contract is concluded. If an agreement cannot be reached, your information will be deleted or destroyed. We will not use your applicant information for any purpose other than to carry out the application process.

1.4.2 After balanced interests: We improve our services and offer you suitable products

1.4.2.1 To strenghten and optimize customer relationships

As part of our efforts to continually optimize our relationship with you, we occasionally ask you to participate in our customer surveys. The results of the surveys are used to better adapt our products and services to your needs.

1.4.2.2 Data processing and analysis for markering purposes

Your needs are important to us and we try to provide you with information about products and services that are right for you. To do this, we use the findings from our mutual business relationship and from market research. The main goal is to adapt our product suggestions to your needs. In this context, we guarantee that we always process the data in accordance with applicable data protection law. Important: You can object to the use of your personal data for this purpose at any time.

What exactly do we analyze and process?

• Results of our marketing campaigns to measure the effectiveness and relevance of our campaigns;
• Information from your visits to our website;
• We analyze the possible needs of our products and services.

1.4.2.4 Measures for your safety

We use your personal data in the following cases, among others:

• In order to protect you or your company from fraudulent activities, we analyze your data. This can happen, for example, if you have become a victim of identity theft or if unauthorized persons have gained access to your user account in some other way
• To improve the reliability of our web applications, our IT support works closely with you in the event of technical problems. In this context, we also evaluate logs of page accesses, actions carried out, etc
• to ensure IT security
• in order to be able to record and provide evidence of facts in the event of possible legal disputes.

1.4.3 Based on your consent

If you have consented to the processing of your personal data for one or more specific purposes, we are permitted to process your data. You can revoke this consent at any time with a view to the future, without incurring any costs other than the transmission costs according to the basic tariffs (costs of your Internet connection). However, the revocation of consent does not affect the lawfulness of the processing carried out before the revocation.

1.4.4 Due to law requirements or in the public interest

As a company, we are subject to a wide variety of legal requirements (e.g. from tax legislation). In order to comply with our legal obligations, we process your personal data.

1.5 Where we transfer data and why

1.5.1 Use of data whithin the company

Within AGRAVIS Raiffeisen AG, only those departments that need it to fulfill our contractual or legal obligations or to protect our legitimate interests have access to your personal data.

1.5.2 Use of data outside the company

We respect the protection of your personal data and only pass on information about you if required by law, if you have consented, or to fulfill contractual obligations.

For example, the following recipients may be legally obliged to pass on your personal data:

• Public bodies or supervisory authorities, e.g. tax authorities, customs authorities
• Judicial and law enforcement authorities, e.g. police, courts, public prosecutor's office
• Lawyers or notaries, for example in legal disputes
• Auditors
• To register the GHG quota, the necessary data is forwarded to the responsible authorities (Federal Environment Agency), which then carry out a conformity check and certification of the GHG quota.

We cooperate with other companies so that we can fulfill our contractual obligations. This includes:

• Transport service providers and freight forwarders
• Manufacturer
• Organizers and training service providers if you have registered for certain trade fairs or events through us
• Banks and financial service providers to handle all financial matters
• own service providers.

In order to run our operations efficiently, we use the services of external service providers who may receive personal data from you to fulfill the purposes described, including IT service providers, printing and telecommunications service providers, debt collection, consulting or sales companies.

Important: We pay close attention to your personal data!

In order to ensure that the service providers adhere to the same data protection standards as our company, we have concluded appropriate contracts for order processing. These contracts regulate, among other things:

• that third parties only have access to the data they need to complete the assigned tasks
• that only employees of the service providers who have explicitly committed to complying with data protection regulations have access to your data
• that the service providers adhere to technical and organizational measures that ensure data security and data protection
• what happens to the data if the business relationship between the service provider and us is terminated.

For service providers based outside the European Economic Area (EEA), we take special security measures (e.g. through the use of special contractual clauses) to ensure that data is treated with the same level of care as in the EEA. We regularly check all of our service providers for compliance with our requirements.

Very important: Under no circumstances will we sell your personal data to third parties!

1.5.3 Data use within the AGRAVIS group

In order to offer you the best possible service, we occasionally exchange data within the group. We ensure that the applicable data protection regulations are adhered to and that your personal data is adequately protected at all times.

For this reason, we have taken appropriate measures to ensure compliance with data protection within the AGRAVIS Group:

We have concluded appropriate contracts with the individual subsidiaries that ensure that personal data exchanged within the group always remains protected.

In accordance with these agreements and applicable data protection law, we transfer personal data to our manufacturing and distribution subsidiaries only for the purposes set out in this privacy policy. We support our subsidiaries both operationally and in complying with the technical and organizational measures that we also use at the parent company to ensure the security of your personal data. If possible, we protect your data through pseudonymization or anonymization measures. If subsidiaries are located outside the EEA, we take appropriate measures to ensure that the personal data processed there is protected in the same way as within the EEA.

1.6 Are you required to provide us with personal data?

In the context of the business relationship between you and AGRAVIS, we require the following categories of personal data from you:

• all necessary data for establishing and implementing a business relationship
• Data required to fulfill contractual obligations
• Data that we are legally obliged to collect
• Without this data it is not possible for us to enter into or carry out contracts with you.

1.7 Deletion period

In accordance with applicable data protection regulations, we do not store your personal data longer than we need it for the purposes of the relevant processing. If the data is no longer required to fulfill contractual or legal obligations, we will delete it regularly, unless it is still necessary to retain it for a limited period of time. The following reasons may exist for further storage:

Retention obligations under commercial and tax law must be adhered to: The retention periods, primarily in accordance with the provisions of the Commercial Code and the Tax Code, are up to 10 years.

To obtain evidence in the event of legal disputes within the framework of the statutory limitation period: In civil law, limitation periods can be up to 30 years, with the regular limitation period occurring after three years.

1.8 Your rights

You also have certain rights when processing your personal data. More details can be found in the relevant regulations of the General Data Protection Regulation (Articles 15 to 21).

1.8.1 Right to information and correction

You have the right to obtain information from us about which of your personal data we process. If this information is no longer correct, you can request that we correct the data or, if the information is incomplete, request that it be supplemented. If we have passed on your data to third parties, we will inform the relevant third parties if the legal situation applies.

1.8.2 Right to deletion

You can request the immediate deletion of your personal data in the following circumstances:

• When your personal data is no longer needed for the purposes for which it was collected
• If you have withdrawn your consent and there is no other legal basis for data processing
• If you object to the processing and there are no overriding legitimate reasons for data processing
• If your data is processed unlawfully
• If your personal data needs to be deleted to fulfill legal obligations.

Please note that before deleting your data, we must check that there is no legitimate reason for processing your personal data.

1.8.3 Right to restriction of processing ("Right to block")

You may request that we restrict the processing of your personal data for one of the following reasons:

• If you dispute the accuracy of the data until we have had the opportunity to satisfy ourselves as to the accuracy of the data;
• If the data is processed unlawfully, but instead of deletion you simply request that the use of the personal data be restricted
• If we no longer need the personal data for the purposes of processing, but you still need it to assert, exercise or defend legal claims
• If you have objected to the processing and it is not yet clear whether your legitimate interests outweigh ours.

1.8.4 Right to objection

1.8.4.1 Individual right to object

If the processing is carried out in the public interest or on the basis of a balance of interests, you have the right to object to the processing for reasons relating to your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for processing your data that outweigh your interests, rights and freedoms, or because your personal data is used to assert, exercise or defend legal claims serve. The objection does not conflict with the lawfulness of the processing carried out up to the objection.

1.8.4.2 Advertising contradiction

In cases where your personal data is used for advertising purposes, you can object to this form of processing at any time. We will then no longer process your personal data for these purposes.

The objection can be made informally and should be addressed to:

AGRAVIS Raiffeisen AG
Industrieweg 110
48155 Münster
Germany
info@agravis.de
Telephone +49(0)251 . 682-0

1.8.5 Right to data portability

You have the right to receive, upon request, personal data that you have given us for processing in a transferable and machine-readable format.

1.8.6 Right to complain to the supervisory authority (Art. 77 GDPR)

We always try to process your inquiries and claims as quickly as possible in order to protect your rights accordingly. However, depending on the frequency of inquiries, it may take up to 30 days before we can inform you further about your concern. If it takes longer, we will inform you promptly about the reasons for the delay and discuss the further procedure with you.

In some cases we may not or cannot provide you with any information. If legally permissible, we will inform you of the reason for refusing to provide information.

If you are still not satisfied with our answers and reactions or believe that we are violating applicable data protection law, you are free to lodge a complaint with both our data protection officer and the responsible supervisory authority. The supervisory authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2-4
40213 Düsseldorf
Germany
Telephone 02 11/384 24-0
Fax 02 11/384 24-10
Email: