Privacy Statement

This PDF generator app (hereinafter the “App“) is provided by Bayer Public Limited Company, 400 South Oak Way, Reading, RG2 6AD, United Kingdom (hereinafter „us“ or „we“), in its capacity as the controller responsible for the processing of your personal data, wishes to provide you with information on the processing of your personal data when you are accessing and using PDF generator.

Handling of personal data

In the following, we explain the purposes of the processing of your personal data when you are accessing and using the internal platform of Bayer, as well as related to each purpose, the categories of personal data, the legal basis of the processing, the retention period and either the source from which the data originate or, if collected from you, whether the provision is a requirement and the possible consequences of a failure to provide the data:

Using our app

Access & management

When you access and use the platform we process the following personal data of you:

  • Your Concern-Wide ID (CWID)
  • IP address
  • Date and time of access
  • Time zone difference to Greenwich Mean Time (GMT)
  • Operating system information
  • Status of access/HTTP status code
  • Transferred volume of data
  • Language settings, version of app
  • Log-in credentials (username and password)

The purpose of the processing of your data is your identification and the verification of your access rights and following such verification the granting of access to the App and its services, furthermore, the management of the App and its users including the documentation of the usage of the services of the App by the users.

The legal basis for the processing of your data for the aforementioned purposes is the legitimate interest of Bayer to provide an platform with services to its employees, which support the employees in the fulfillment of their tasks and Bayer in the implementation of efficient platform as well as in the fulfillment of its obligations under applicable laws, where applicable, furthermore to ensure the secure operation and functionalities of its internal platform and the network and information security of its IT platforms Art. 6(1)(f) of the General Data Protection Regulation.

In case and to the extent that the access and use of the platform is necessary for the performance of your tasks, the legal basis for the processing of your data for the purpose of authentication and access granting is the fulfillment of our contractual obligations with you, Art. 6(1)(b) of the General Data Protection Regulation.

PDF creation

Our PDF Generator is an online tool designed to help field teams (such as KAMs) quickly create pre-approved materials like invitations, agendas, and certificates from a single platform. You will select a template, complete dropdowns/text fields, and generate a PDF for download.

Other personal data may be processed during this activity.

The generated PDF file will be stored for a period of 7 days after which it will be deleted.

Third party login services/single sign on

Subject to you providing your consent (Art. 6(1)(a) General Data Protection Regulation), we provide you with the possibility to register to our services by using the third party login service provider Microsoft Azure (hereinafter “Login-Service Provider”). In order to use this login service, you will be asked to login to Login-Service Provider’s service using your respective login credentials. By doing so, your profile will be connected to our service, which means that Login-Service Provider receives the information that you use our service and we automatically receive the following information about you:

  • Contact data (e.g. postal/email address or phone number)

We will use this information only for the registration purpose and in order to identify you during your logins. In case Login-Service Provider transfers more information about you than we need for the login verification purpose, we immediately delete this information. For further information on how Login-Service Provider’s service work and how the Login-Service Provider processes your personal data, please refer to Login-Service Provider‘s Privacy Policy. We delete your personal data in case you delete your user account.

Information on side effects and quality complaints

This App is not intended or designed for communications regarding side effects, lack of therapeutic effect, medication errors, grey market products/counterfeit medicine, incorrect or off-label use, quality complaints and/or other issues regarding the safeness or quality of Bayer products. If you wish to report side effects or make a quality complaint, please contact your health care professional (e.g. physician or pharmacist), your local health authority, or use our Website for the report of undesirable side effects.

If you nevertheless report to us undesirable side effects or other issues regarding the safeness or quality of Bayer products, we will be legally bound to deal with your communication and may have to contact you for clarification purposes. Subsequently, we may have to notify the competent health authorities of the issues reported by you. In this context, your information will be forwarded in pseudonymized form, i.e. no information by which you may be directly identified will be passed on. We may also have to forward these pseudonymized notifications to our group companies and cooperation partners, to the extent these are likewise obliged to notify their respectively competent health authorities.

Further information about data privacy and side effect reporting are available in the Bayer Privacy Statement for Pharmacovigilance Data.

Recipients of personal data

Commissioned processing

For the processing of your personal data we will to some extent use specialized service contractors that process your data on our behalf (e.g. for IT-Support or cloud services). Such service contractors are carefully selected and regularly monitored by us. Based on respective data processing agreements, they will only process personal data in accordance with our instructions.

Affiliates

We may share your personal data with our affiliates from the Bayer Group, where necessary for the purposes described above.

Authorities and state institutions

We may share your personal data with law enforcement agencies or other authorities and state institutions if legally required or necessary for the purposes described above.

External lawyers

In order to support legal decisions and to pursue or defend against legal claims, we may share your personal data with external lawyers.

Prospective buyers in the context of Mergers & Acquisitions

We may share your personal data with a prospective buyer in case of an acquisition, merger or any other type of corporate or asset transition involving a change of ownership or control concerning us or our services.

Processing of personal data outside the UK/Republic of Ireland

Your personal data may be transferred to countries outside the United Kingdom and outside of European Economic Area, including such for which the European Commission has not issued an adequacy decision. If no adequacy decision exists for the respective country, we will ensure an adequate level of protection for your personal data by concluding so-called standard contractual clauses - adopted by the European Commission - with the recipient (to obtain a copy, please refer to the contact details below), or we will ask for your explicit consent to the transfer.

Information regarding your rights

The following rights are in general available to you according to applicable data privacy laws:
  • Right of information about your personal data stored by us;
  • Right to request the correction, deletion or restricted processing of your personal data;
  • Right to object to a processing based on legitimate interest or public interest, unless we are able to proof that compelling, warranted reasons superseding your interests, rights and freedom exist, or that such processing is done for purposes of the assertion, exercise or defense of legal claims;
  • Right to data portability;
  • Right to file a complaint with a data protection authority;
  • Where you have provided your consent to the processing of your personal data, you may at any time withdraw your consent with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the withdrawal.

Contact

For any questions you may have with respect to data privacy, or if you wish to exercise your rights, please address your request to our contact form or contact our company data protection officer by e-mail to dataprotection-uk-eire@bayer.com or by post to the following address:

Data Protection Officer
Legal and Compliance Department
Bayer plc
400 South Oak Way
Green Park
READING
Berkshire
RG2 6AD
Telephone: +44 (0)118 206 3000
e-mail: dataprotection-uk-eire@bayer.com
Corporate Data Protection Officer of Bayer AG:
Phone: +49 (0) 30 468 16924

If you believe that your personal data has not been handled correctly, or you are not satisfied with our response to any requests you have made to us regarding our use of your personal data, you have the right to make a complaint:

  1. If you are in the UK: to the Information Commissioner’s Office by telephoning 0303 123 1113 or visiting their website at www.ico.org.uk; or
  2. If you are in the Republic of Ireland: to the Data Protection Commission by contacting them at https://forms.dataprotection.ie/contact or by emailing them at info@dataprotection.ie.

Amendment of privacy statement

We may update our Privacy Statement from time to time. Updates of our Privacy Statement will be published on our App. Any amendments become effective upon publication on our App. We therefore recommend that you regularly visit the site to keep yourself informed on possible updates.

Declaration as of: 05-11-2025