SYNGENTA® SPRAY ASSIST Application Privacy Policy

Version Date: September 5, 2019. Please take a few minutes to carefully review this Privacy Policy which applies to the SYNGENTA® SPRAY ASSIST application (the “App” ). This version of the Privacy Policy supersedes all previous versions. We reserve the right to make changes to the Privacy Policy at any time. If we do so, we will notify you via the email address used to set up your account and, the next time you open the App, ask you to indicate that you have read and understood the updated Privacy Policy.

Controller. The data controller is Syngenta UK Limited ( “Syngenta” ) registered company no. 00849037, registered office address Cpc4, Capital Park, Fulbourn, Cambridge, CB21 5XE (“we”, “us”) .

Contact details. You can contact our Data Privacy Champion via email at dataprivacy.uk@syngenta.com or via post at the registered office address above.

Scope. This Privacy Policy covers personal data that is processed through the App (hereinafter “Personal Data” ). Personal Data is data that identifies an individual, either alone or in combination with other information available to us.

Your use of the App: In order for you to use the App, we need to process Personal Data as set out in this Privacy Policy. Please do not use the App if you are not happy with those practices. The use of the App is further governed by the SYNGENTA® SPRAY ASSIST Application Terms & Conditions which can be downloaded here: Terms & Conditions.

Purpose for the collection and use of Personal Data

Recipients of your Personal Data and data transfers to third countries.

Data processors: We share Personal Data with companies and organizations that perform services on our behalf, for example, companies that we partner with to develop the App, companies that are commissioned with support services such as push notifications, data storage and analytics.

These data processors are required by contract to use the Personal Data we share with them only to perform services on our behalf and to protect the confidentiality and security of your Personal Data. As some of our service providers are not based within the European Union (‘EU’), your Personal Data is transferred to so-called ‘third countries’. Service providers based in third countries not regarded as offering an adequate level of data protection are either bound by Standard Contractual Clauses or, in the case of US firms, certified under the so-called ‘Privacy Shield’. Details about these safeguards can be found here https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en and here https://www.privacyshield.gov/Individuals-in-Europe. For more information, please contact our Data Privacy Champion atdataprivacy.uk@syngenta.com.

Google LLC, 1600 Amphitheater Pkwy., Mountain View, CA 94043, USA (hereinafter “Google” ) is commissioned by Syngenta to provide its web analysis service Google Analytics. Google uses information such as a so-called app-instance ID (a randomized ID number) generated on behalf of Syngenta and related usage data to analyze use of the App, prepare reports about App activities, and provide additional services to Syngenta related to App use. Syngenta uses Google Analytics with the extension “Anonymize IP”. This means that your IP address will be masked within member states of the EU or other signatory states to the Agreement on the European Economic Area before it is transferred to the United States. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and masked there. The IP address transmitted in connection with Google Analytics will not be merged with any other data of Google. Google is certified under the EU-US Privacy Shield program. For further details, see https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. More detailed information about the terms of use and data privacy are available at https://policies.google.com/technologies/partner-sites?hl=de. The legal basis for this data processing is Article 6(1)(f) GDPR.

Third party recipients: For technical functionalities of the App, certain information including your geolocation data is transferred to third parties based outside the EU which provide weather forecasts, satellite imagery and mapping functionalities. The following controllers receive your data on the basis of Article 6(1)(b) GDPR:

Google, providing the “Google Maps” service, will process your data in the United States, where they are adequately protected by virtue of Google’s certification under the EU-US Privacy Shield. For more information, please see https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active#.

One Soil LLC, Office 22, Kirov str. 8, Minsk, Republic of Belarus, and Syngenta have concluded so-called standard contractual clauses, a model contract approved by the European Commission, in order to protect your data in Belarus. For more information, please contact our data champion at dataprivacy.uk@syngenta.com or see here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

Intra-group data transfers: Our parent company, Syngenta Crop Protection AG, is a Swiss corporation based in Basel, Switzerland (“Syngenta Parent”). Syngenta Parent has concluded Intragroup Data Transfer Agreements (IDTAs) with many of its subsidiaries (Syngenta DP Network), including us, to enable the effective transfer and processing of Personal Data. We use web servers, store and otherwise process Personal Data within the Syngenta DP Network in countries within the EU and also in countries outside the EU, including Switzerland, the United States and other countries. However, we only process your Personal Data outside the EU for the purposes described and on the legal bases named in this Privacy Policy.

Business transfers: Your Personal Data may be transferred to a company that may acquire the stock or assets of Syngenta, the Syngenta Parent, one of its affiliates, or one of our businesses, for example, as the result of a sale, merger, reorganization or liquidation. The legal basis for this data processing is Article 6(1)(f) GDPR. If such a transfer occurs, the acquiring company's use of your Personal Data will still be subject to this policy and the privacy preferences you have expressed to us.

Compliance with laws and protection of our rights and the rights of others. We may disclose Personal Data when this is necessary to comply with the law, a court order or a subpoena. In case of obligations under EU or Member State law, the legal basis for this data processing is Article 6(1)(c) GDPR, otherwise Article 6(1)(f) GDPR. We may also disclose Personal Data to prevent or investigate a possible crime, such as fraud or identity theft (the legal basis being Article 6(1)(f) GDPR); to enforce or apply our online terms of use or other agreements with you (the legal basis being Article 6(1)(b) GDPR); or to protect our own rights or property or the rights, property or safety of our users or others (the legal basis being Article 6(1)(f) GDPR).

Aggregate information. We may share aggregated demographic or survey information with third parties, but this information is in anonymous form and does not contain any Personal Data.

How can you exercise your rights in relation to your Personal Data?

You have the following rights:

If you wish to exercise any of your above rights, you can contact us at no cost by sending an email to the Data Privacy Champion at dataprivacy.uk@syngenta.com.

How long do we store your Personal Information?

We intend to store your Personal Data only for so long as you have an account set up to use the App. Please note that removing the App from your smartphone does not delete your account. Your account will remain set up unless you delete it via the user account settings within the App. Deletion of your account will delete your Personal Data including any spray application programs or other information that you have saved. If you want to retain access to such information, you will need to email customer services at digital.services@syngenta.com to request a download before deleting your account.

For evidentiary purposes, in particular to be prepared for legal disputes, we may store your Personal Data for a period of time after you delete your account as long as this is permissible and necessary given the statutes of limitations in your country, so our retention period may vary depending on the circumstances. However, in such cases we will no longer actively process the Personal Data for the originally specified purpose but only for the purpose mentioned above. The legal basis for such processing is Article 6(1)(f) GDPR.

Questions, concerns and complaints concerning our privacy practices. Should you have any question or concern on how we use your Personal Data, you can contact our Data Privacy Champion at dataprivacy.uk@syngenta.com.