Yara Fertilizer Zambia LTD operates the Site and is the controller for the processing of your personal data when you use the Site.
1. How and when we collect personal data
We collect information about you when you use the Site and when you otherwise interact with us, for example if you are a customer or a supplier of Yara. We receive your information from the following sources, depending on how you interact with us:
- From our websites or mobile applications:
- We collect personal data through our websites or mobile applications, for example when you subscribe to a subscribe to one of our mobile applications, set up a user profile or interact with our connected devices.
- As a point of departure, you can use the Site without revealing your identity. When you visit the Site or otherwise interact with us online, we collect information about your computer and your use of our website and applications by using cookies. We use this information for measuring, at an aggregated level, use of the Site, in order to improve its content.
- We also collect personal data when you use our mobile applications or contact us through the website or application, such as for customer service purposes. Please see the section below about Cookies and similar technologies.
- Directly from you:
- We collect personal data directly from you when you interact with us, and choose to submit certain information to us, such as when you sign up to receive a newsletter, login in to one of our websites or apps, fill out one of our digital or physical forms, make a purchase, place an order or upload information to one of our portals.
- We may also collect your personal data when we receive an inquiry from you (for example in relation to customer service), when processing your orders and when you attend our fairs or events. Note that we are legally required to process some information (such as in relation to certain purchases) and sometimes we must ask you to provide certain information in order to be able to enter into and perform a contract with you.
- We also collect personal data directly from you when you act as a supplier in order to be able to perform the contract with the supplier and for supplier relationship management.
- On some occasions we conduct online surveys to gain a better understanding of the needs and preferences of our users, visitors, contacts, leads and customers for example by measuring customer satisfaction and enriching data through net promoter score. Prior to conducting a survey, we will inform you of how we will use your personal data. Participating in a survey is voluntary and where required by applicable law, we will obtain your consent to the processing. You have the right to withdraw your consent at any time.
- From our group of companies, dealers, suppliers, business partners and other third parties:
- When you purchase or sell a product or service, we may collect personal data relating to the transaction for fulfilling the transaction and managing the business relationship. On your request or in order to pursue our legitimate interests in doing segmentation or supplier relationship management, we may also import information from our dealers, suppliers, business partners and other third parties.
- From your equipment:
- From other sources:
- For example through commercial partners and distributors who sell Yara products or use Yara applications such as Request for Quote or Loyalty Program when they share personal data with us to be able to meet your request or fulfil the contract entered into with you or between us and such partners, for example to deliver products sold through our distributors.
2. Types of information and data we collect
When you use the website, we collect personal data and device information to the extent permitted by law. Personal data is information, or a combination of pieces of information, that can be used to identify you on an individual basis. Depending on the services you use and how you use the Site, we may collect the following categories of data:
- Contact information such as your name, address and e-mail address that you provide when you create a user account or fill out one of our digital or physical forms. This information allows us to identify and communicate with you;
- Business data that allows us to help you optimize your businesses' operations, if you have a registered user account. This includes but is not limited to data relating to the name, location, size of your business, and other business-related information which will only be directly linked to you if you have a registered user account;
- Relationship information that helps us understand who you are and what you want in order to offer you products, technologies and services that may interest you, such as property, business information, your general location, and other demographic information in accordance with the rule of law. We collect this information when you interact with us or have a registered user account;
- Recruitment information that helps us determine your eligibility for the job that you apply for if you apply for a job with us, such as general contact information, CV, information about your education, competencies and skills, career and work experiences and other information such as picture, social security number, job certificates, work history, references and other relevant background information.
- Transaction and product information about how you interact with us, our dealers and business partners, including purchases, inquiries and customer accounts, purchase history, product and quantity, crop and preferences;
- ID information about your identity, such as your birthdate and ID document, only when needed to identify you;
- Financial account information only as needed to complete your purchase;
- Device information and analysis such as information about the computers, phones or other devices that you use to visit the Site, depending on the permissions you have granted. We may associate the information we collect from your different devices, which helps us provide consistent service across your devices. This may for example be attributes such as your IP address, operating system, hardware version, device settings, and types and device identifiers. We may also collect connection information such as the name of your mobile operator or ISP, mobile advertising ID and mobile application ID, browser type, language, geo-location, connection time time zone and date and time of visit on the Site together with use trends. We may also collect information about your behavior on the Site, such as how long you stay and information about your scrolling and sharing behavior.
- Equipment data that is generated by, collected by, or stored in your equipment (software or hardware) or device interfacing with your equipment, including but not limited to the location of your equipment.
3. How Yara uses personal data
We use your personal data for the following purposes:
- Provide the functionality of the requested products and services and customer service:
- Provide the functionality, products, technologies and services you request and to provide other services related to your order, such as product delivery, recommendations and maintenance.
- Creating, managing and allowing access to your account, for services/products where you register an account.
- Complete and record your transactions.
- Ship and items and hardware that you order (including items and hardware that you order through our distributors).
- Actively providing tailored reports and/or recommendations/agronomical tips derived from the data that you have provided to Yara that are specifically relevant to you in respect of your business activities to improve your productivity, quality and profitability.
- Provide you with an offer following receipt of request for quote through a distributor in cases of Requests for Quote.
- Provide you with points based on your purchase history which can be exchanged to gifts or discount of other Yara products or services when you are a member of the Loyalty Program.
- Send you administrative information, such as changes to our terms and policies.
Respond to your inquiries and requests, for example when you send us questions or suggestions.
- Product and Customer Support:
- to provide you with support, including to deliver upgrades and product improvement program communications, and for diagnostics and repairs, product safety and recalls;
- to provide you with other technical assistance, such as installation, maintenance and breakdown assistance.
- Supplier relationship management:
- Contract management, such as managing all interactions and transactions with third parties that supply good and/or services to us in order to maximize the value of such interactions and transactions;
- Performance management, such as performance review setup;
- Risk management, such as strategies to respond to supply chain disruptions;
- Data management such as validating supplier requests; and
- To build better relationships and communicate better with suppliers and outside organisations in order to make the business run smoothly and more cost effectively.
- Marketing and communications and offering tailored services:
- Provide you with communications, information and direct marketing of Yara's products, technologies and services, including for creating a profile that we use in order to provide you with targeted marketing offers, personalized offerings, newsletters, product information, company magazines, catalogues, announcements or event invitations etc. that we believe may be of interest to you.
- Provide you with tailored advice and agronomical tips .
- Depending on your choices, we send such marketing through email and/or SMS. Such marketing may for example consist of agronomic and commercial advice, newsletters, surveys, campaigns, invitations and information about diverse arrangements, events at fairs, meetings, trainings or webinars.
- We also sometimes use your personal data to administer and manage surveys, polls, loyalty programs and other promotional events and to allow our customers to participate in polls and surveys, so that we can improve our service offerings.
- We also process personal data for pursuing our legitimate interest in providing our customers with tailored marketing by using information about relating to the customer’s purchase history, preferences, behaviour and other related information, in order to better understand their challenges and needs.
- We further do segmentation and use personal data for analytics in order to improve and offer relevant products, communication and services and for increasing our agronomic knowledge. We also use segmentation and profiling to determine if leads are interested in a specific products or communication from us.
- Share information with other marketers if you want them to send you marketing, depending on your choices.
- Enable the posting of comments and testimonies from you on our websites and mobile applications.
- When required by applicable law, we obtain your consent to such marketing and to surveys that have marketing as purpose. You may at any time reserve yourself from marketing via electronic communication by following instructions in those messages or by contacting us at email@example.com (for physical contracts).
- Providing you with promotional opportunities and facilitate social sharing:
- Allow you to participate in promotions.
- Facilitate social sharing functionality if you choose to do so. Additional rules may apply to such promotions or social sharing. Please make sure to read those rules.
- for recruiting new Yara employees, if you have filed a job application through our job application portal accessible on yara.com or otherwise filed a job application with us.
- We use the information you include in your job application for determining your eligibility for the job that you apply for by assessing whether you are the ideal candidate for the position in question.
- Manage our everyday business needs and conduct business reporting:
- Analyse our customers’ use of our products and services in order to prepare aggregated trend reports.
- Managing our websites and services, contract management, analytics and fraud prevention.
- Business intelligence, such as compiling general market insights.
- Product improvement, to develop new products, or enhance our current products.
- Governance and audit, for example by implementing internal audits, business analysis, controls and reporting (for example, whistleblowing procedures).
- Business transactions, including a reorganization, merger, sale, joint venture, assignment, transfer or other disposition. For example, in a case of a merger with or acquisition by another company, we may be required to disclose personal data to that company.
- Protect Yara assets, for example for health and safety reasons, or to manage access rights and security (to prevent fraud, cyberattacks and identity theft).
- Comply with legal obligations, for example we need to retain invoices for accounting purposes, or disclose some data to comply with requests from public authorities.
4. What is the legal basis on which Yara relies to process your data?
- In the cases when we enter into a contract with you regarding sale, purchase or delivery of products or services, our legal basis for the processing is that it is necessary for fulfilling an agreement with you, or for taking measures on your request prior to enter into a contract.
- This legal basis applies to all processing that is necessary for the administration and performance of such contract, and any processing necessary to enter into such a contract. This may for example include customer service (such as in the form of loyalty program), customer relationship management and billing purposes, and other processing necessary for providing the requested functionality, products and services.
- Where we require personal data to comply with legal or contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to manage our contractual relationship, or to meet obligations placed on us. In all other cases, provision of requested personal data is optional.
- Legal obligation
- In some instances, we process your personal data because we are required to do this by law (for example to comply with accounting and bookkeeping obligations).
- Legitimate interests
- We also process your data when it is in our legitimate interests to do this and when these interests are not overridden by your rights to data protection. Such interests are typically to improve our products, technologies and services in order to increase customer satisfaction and to tailor our services to your particular preferences and needs.
- We also process your data on the basis of our legitimate interests in processing your request when you fill out one of our digital or physical forms and for enabling our customers to apply with applicable legal obligations. We further process personal data about our customers when necessary to pursue our legitimate interest in fulfilling our contract with our distributors by delivering the products and services requested by the customer.
- Sometimes (for example when we do profiling) our legal basis for the processing is that it is necessary for purposes relating to our legitimate interest in marketing and in creating a profile about our customers for tailoring our offers and services to their needs, as long as this interest is not overridden by the customer’s rights that require protection of personal data.
- When we have an existing customer relationship with our customers, we sometimes send out digital marketing about products and/or services corresponding to the ones that the existing customer relationship is based on and rely on our legitimate interest in doing so. Before doing so, we provide you with the possibility of opting out of such digital marketing.
- For segmentation and analytics we rely on our legitimate interest in improving our products and services and in offering relevant products, communication and services to our customers/leads and in increasing our agronomic knowledge, as a legal basis.
- Where we receive personal data from our commercial partners or distributors, for example through Request for Quote or Loyalty Program, our legal basis for processing such data is that it is necessary to pursue our legitimate interest in meeting your request or fulfilling the contract entered into with you or between us and such partners.
- We also rely on legitimate interests as a legal basis when accomplishing some of our business purposes, such as business intelligence, product improvement, governance and audits, business transactions and protecting Yara assets.
- Note that you have a right to object to processing that relies on legitimate interests as a legal basis and also to processing that has direct marketing as a purpose, as further explained in section 8 below.
- On some occasions, we process your data with your consent (for example, when you wish to receive newsletters or other marketing material from us). In such cases, you are free to withdraw your consent at any time by following the unsubscribe instructions set out in the marketing message you receive.
- Withdrawal of consent does not affect the lawfulness of the processing that has taken place on the basis of consent prior to the withdrawal.
5. Why personal data are disclosed by Yara
We do not sell your personal data to marketing companies outside of Yara. We may only share your personal data as follows:
- Optimizing our shared processes. Within a group of companies, it is sometimes necessary to use and leverage resources effectively. In this context, we support each other within our group in optimizing our shared processes.
- Our cross-affiliate initiatives, such as research and development, system administration, statistics, analysis, marketing and finding new prospects, and other purposes as set out in the Yara Data Privacy Directive for Customer Data (pdf, 0.4 MB).
- This can for example be sharing where necessary to meet a request from you, for assessing your job application for recruitment purposes or for entering into an employment contract with you or in other circumstances where sharing is necessary in order to meet your inquiry or for analytics and research to the extent such disclosure is necessary for achieving our legitimate interest in improving our products, technologies and services.
- Service providers to facilitate services they provide to us
- These services include for example hosting data, processing payments, delivering shipments, email delivery, distribution, customer support and technical assistance, web analytics, IT performance monitoring, customer relationship management, evaluating, running an optimizing user experience or our growth campaigns, polls and surveys, legal compliance, as well as to secure our business operations, such as identifying and resolving malfunctions.
- Public authorities or governments where disclosure is appropriate
- To address a dispute with a third party.
- Where we respond to enforceable law enforcement or governmental requests and orders.
- When required by law, regulation or legal process.
- To provide information we believe is important.
- Partners and commercial relationships to accomplish our business with them
- In connection with collaboration initiatives and contracts entered into with such parties, for example as part of the sale and distribution process.
- In connection with a sale or business transaction with prospective buyers or sellers. We have a legitimate interest in disclosing or transferring your personal data to a third party in the event of a business transaction.
- To permit them to send you marketing communications, if you want them to send you marketing, in accordance with your choices.
- Third parties with whom you share personal data through our websites or mobile applications
- Some of our websites or mobile applications enable you to grant access to or share your personal data with other individuals or organizations in relation to the websites or mobile applications, for example to advisors to assist you in decision-making, consultants, distributors, machinery manufacturers and social media.
We also share your personal data to comply with applicable law and regulations, to enforce our (and our representatives’ and group’s) rights, terms and conditions, privacy, safety and property.
6. Cookies and similar technologies
They also help us observe how our visitors use our web pages, and they enable us to design more usable pages and useful content.
We use first-party cookies, third-party cookies and third-party requests. First party cookies are cookies set by us and can only be read by our site. By default, first-party cookies are allowed in every web browser. If you disable first-party cookies, a web site cannot keep track of your activity as you move from page to page. We use these types of first-party cookies: session, http only, secure and persistent.
Third-party requests are made from a user to an external service. Despite the fact that these requests don't set any cookies, they can still transfer information to third parties. For example, Google Analytics – a common tool for website analysis – which works through third party requests.
You may manage cookies in the settings of your web browser. Note that blocking cookies might stop our website from functioning properly.
- Social media plug-ins: If you choose to 'share', ‘like’ or ‘tweet’ content with friends through Facebook, Twitter or other social networks through the social plugins on our website, you might be sent cookies from these websites. We don't control the setting of these cookies, so please check those websites for more information about their cookies and how to manage them.We use conversion tracking pixels and/or services on our website to measure the effectiveness of our online ads such as Google, Facebook and Twitter for market research and statistical purposes. You can read more about how your data is used and how you can opt out from being tracked on the individual websites.
- We use retargeting services such as Google Remarketing and Facebook Custom Audiences that allows us to send you personalized advertising on the respective platforms. If you wish to object to tracking, you can do so using the Digital Advertising Alliance tool at aboutads.info.
- Facebook pixel: We use Facebook Pixel on our website. This allows us to track user behavior and conversions after they have been redirected to our website by clicking on our Facebook ad. This allows us to measure the effectiveness of our Facebook ads for market research and statistical purposes. Facebook may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook’s Data Usage Policy .
- You can choose to change your permissions or opt out of your data being used for advertising on and off Facebook through Facebook’s ad preferences.
- Facebook custom audiences: We use the Custom Audiences services of Facebook. This allows us to create personalized advertisements for our users based on their behavior on our website. You can read more about how Facebook Ads works here. You can choose to change your permissions or opt-out of your data being used for advertising on and off Facebook through Facebook’s ad preferences.
- Twitter: We use the Conversion Tracking service of Twitter on our website. Twitter Conversion Tracking tracks the actions of users after they have viewed ads or interacted with ads on Twitter. Twitter’s Conversion Tracking allows you to assign conversions such as link clicks, retweets or “like” data.
- If you wish to object to tracking, you can do so using the Digital Advertising Alliance tool at aboutads.info.
- Google marketing: We use the marketing and remarketing services of Google AdWords and/or Analytics. These services allow us to display advertisements in a more targeted manner in order to present advertisements of interest to users. Through remarketing, ads and products are displayed to users relating to an interest established by activity on other websites within the Google Network.
- We have enabled the Google Analytics Demographics and Interest Reporting which gives us insight into behaviour information relating to visitor age, gender and interests on an anonymous and aggregate level. This will help us to understand browsing behaviour to give you a better experience whilst visiting our sites.
- If you wish to object to interest-based advertising by Google marketing services, you can do so using the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.
7. Your choices
We give you choices about how we communicate with you.
- Email communications: You can stop receiving promotional email communications from Yara by following the opt-out instructions provided in such messages.
- Please note that we will honor your request to stop receiving promotional electronic communications from Yara. However, we may continue to send you service-related communications such as emails confirming purchases through our websites. And we may keep information for record-keeping, such as to ensure we fulfill the consumer requests and to send particular types of messages.
- Note that you can manage how your mobile device can share location information with Yara, as well as how your mobile browser handles cookies and related technologies by adjusting your mobile device privacy and security settings. Please refer to the instructions provided by your mobile service provider or the manufacturer of your device to learn how to adjust your settings.
8. Your rights
To the extent provided by applicable law, you may be entitled to request:
(a) Right of access
- To obtain confirmation from us as to whether or not we hold personal data about you, access such data and other information in regard to such data.
- To obtain a copy of your personal data.
(b) Right of rectification
- The modification of personal data if they are incorrect or incomplete.
(c) Right to deletion
- The deletion of personal data under certain instances, for example where you consented to their use and have since withdrawn your consent, or where they are illegally used.
(d) Right to restriction
- The limitation of the use of personal data under certain circumstances.
(e) Right to portability
- The receipt of the personal data which you provided to Yara, in a structured, commonly used and machine-readable format.
- Transmitting such personal data, or having them transmitted where technically feasible, to another company responsible for their use, under certain circumstances.
(f) Right to object or opt-out
- To object to the use of your personal data under certain circumstances, including in relation to direct marketing and where your personal data are used based on a legitimate interest of Yara.
- You also have the right to opt-out from any direct marketing, and can do so by clicking on the “unsubscribe” button in the messages you receive.
(g) Right to withdraw consent
- To withdraw your consent at any time if the use of your personal data is based on consent. Note that withdrawing your consent will not make the use of your data before your withdrawal unlawful.
If you would like to exercise your rights, do not hesitate to contact us at firstname.lastname@example.org. Please note that the rights above may be restricted in line with applicable law.
You may also file a complaint with a data protection authority for your country, or where an alleged infringement of applicable data protection law occurs. A list of data protection authorities is available on the European Commission website.
9. How we retain your data
We retain your personal data for as long as needed or permitted in light of the purpose(s) for which they were obtained and consistent with applicable law. The criteria used to determine our retention periods include:
(a) The length of time we have an on-going relationship with you and provide the requested products/services to you (for example, for as long as you have an account with us or keep using the services/mobile applications), or to enable you to conduct your activities and meet your retention requirements. For example, as a rule of thumb regarding customer personal data, we seek to re-asses the need to retain your data couple years after you cease to be a registered customer (for example, to allow us to answer complaints or inquiries that may still arise). However, there are also other factors that may influence that period as set out below.
(b) Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them).
(c) Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).
10. Information security
Yara is concerned about your privacy and are committed to keeping personal data secure. We have implemented appropriate technical, physical and organizational measures to protect your personal data from loss, misuse or alteration. We limit access to personal data to those who have a business need.
11. Transfer of personal data to other countries
Transfer of personal data to a third country outside of the EEA that does not provide adequate protection will only take place if appropriate safeguards are provided, e.g., by Binding Corporate Rules, entering into EU Standard Contractual Clauses or if the receiving party is certified under the EU-US Privacy Shield.
When disclosing information to other parties as described in Section 5, we sometimes need to transfer personal data to a country outside the EEA, in order to be able to fulfil one of the purposes set out in Section 5. As an example, we may use a sub-processor established in the US when you fill out an online form, in order to meet your request. Such transfer will only take place provided that appropriate safeguards are adduced, as described above.
If you have any questions relating to this or want to obtain a copy of the safeguards that we adduce in cases of transfers, please contact us at the contact point provided below.
Yara may transfer aggregated data to third parties (domestic and/or foreign) for the purposes of i) improving or developing the Site or any equipment related to specific services and ii) for the proper functioning of the Site and of the equipment.
12. Privacy Policies of third parties
13. Changes and amendments to this policy
If you do not want to continue your use of the Site following the said changes, you must discontinue your use of the Site and request Yara to close your account by contacting us at email@example.com or through the relevant portal, where applicable.
14. Jurisdiction and applicable law
15. How to contact us
The Company Secretary, Yara Fertilizer Zambia LTD, Sub 32, Farm 4300, Sandy's Creations, Lilayi, Lusaka, Zambia.
If you have unresolved concerns you also have the right to complain to the supervisory authority competent to resolve such concerns according to applicable law or the public version of Yara's Data Privacy Directive for Customer, Supplier and Business Partner Data.
Effective date: 11.09.2019 / Last updated: 22.10.2020