Privacy Policy

1. General Information about the Website

This website (hereinafter referred to as "Website") is provided by Bayer AG (hereinafter referred to as "us" or "we"). Further information about the provider of the website can be found in our Impressum.

Information about other selected data processing activities not related to the Website, carried out by us and all affiliated companies in Germany (e.g., when you hand us a business card or we collect your data from publicly accessible sources), can be found in the Privacy Notices for Selected Processing Activities.

Supplementary privacy information for specific countries and/or regions where Bayer operates is also available. Further information about privacy in a specific country and/or region can be found in the List of Local Privacy Statements.

2. Handling of Personal Data

Below, we would like to inform you about how we handle personal data. Unless otherwise described in the following sections, the legal basis for handling your personal data is derived from the necessity of processing for the provision of functionalities requested by you on this Website (Art. 6(1)(b) General Data Protection Regulation).

2.1 Use of the Website

2.1.1 Accessing the Website

When you access our Website, your browser technically transmits certain data to our web server to provide you with the information you have requested. To enable your visit to the Website, the following data is collected, temporarily stored, and used:

• IP address

• Date and time of the request

• Time zone difference to Greenwich Mean Time (GMT)

• Content of the request (specific page)

• Operating system and its access status / HTTP status code

• Transferred data volume

• Website from which the request originates

• Browser, language (to load the language version of our site corresponding to your language settings), and version of the browser software

To protect our legitimate interests, we will store the aforementioned data for a limited time to enable tracing of personal data in the event of unauthorized access or attempted access to our servers (Art. 6(1)(f) General Data Protection Regulation).

2.1.2 Registration and Login

If you wish to use certain services on our Website, you must register with us. You create a customer account where you set your personal login details for accessing the Website. During the registration and login process, we collect the following information about you:

• First and last name

• Gender and title

• Contact details (including email address and phone number)

• Username and password

• Log-in protocol including timestamp

We process this personal data to enable you to access our Website and the services contained therein. If you deactivate your user account, this personal data will be deleted.

2.2 Use of Cookies

2.2.1 What Cookies Are

We use so-called "cookies" on this Website. Cookies are small text files that are stored in your device's memory via your browser. Cookies store certain information (e.g., your preferred language or page settings) that can be sent back to us by your browser upon your next visit to the Website (depending on the cookie's lifespan).

2.2.2 Which Cookies We Use

We distinguish between two categories of cookies: (1) functional cookies, without which the functionality of our Website would be limited, and (2) optional cookies, e.g., for website analysis and marketing purposes. In the following table, we describe the optional cookies used on this Website in detail:

2.2.3 Optional Cookies

2.2.4 Subject to Your Consent

We use optional cookies only with your prior consent (Art. 6(1)(a) General Data Protection Regulation). If you visit our website for the first time, a banner will appear on our website asking for your consent to use optional cookies. If you provide your consent, we will store a cookie on your computer, and the banner will not be displayed again for the lifetime of the cookie. After that, or if you delete this cookie beforehand, the banner will be displayed again on your next visit to our website to obtain your consent once more.

2.2.5 How to Prevent the Use of Cookies

Of course, you can use our website without cookies. You can configure or completely disable the use of cookies in your browser settings at any time. However, this may lead to restrictions in the functionality or user-friendliness of our offerings. You can object to the use of optional cookies at any time by using the corresponding objection option in the Data Privacy Preferences Center.

3. Website Analysis and Behaviour-Based Advertising

3.1 Website Analysis with SitecoreAI Analytics

On our website, we use SitecoreAI Analytics, a web analytics and personalization service offered by Sitecore Deutschland GmbH, 1 Plus Business Center GmbH, 04 4 68161, Mannheim, Germany ("Sitecore"). Sitecore uses cookies to collect and analyze information in connection with your use of our website our behalf.

The information collected by Sitecore includes your IP address, device/browser information like language, operating system, and screen resolution, your time of visit, referring URLs and the web pages you accessed on our website.

The collected information is processed in Sitecore's cloud environment and made available to us in aggregated form. We process the collected information for the purpose of enhancing content and improving the usability and performance of the website.

The legal basis for the processing of your personal data is your prior consent in accordance with Article 6(1)(a) UK GDPR. You may withdraw your consent to the use SitecoreAI Analytics at any time, either by administrating your consents in the Privacy Preference Center or by configurating accordingly your browser settings.

It cannot be ruled out that your personal data is transferred to unsafe third countries (such as the United States). We have entered into a data processing agreement (DPA) with Sitecore that ensures that personal data will only be processed in accordance with our instructions and in compliance with the applicable data privacy laws. Sitecore USA Inc. is further certified under the EU-US Data Privacy Framework incl. the UK Extension to the EU-U.S. DPF, which regulates the secure processing of EU and UK citizens data in the US.

Further information on the privacy policy of Sitecore can be found at: https://www.sitecore.com/legal/privacy-policy

3.2 Website Analysis with Google

We use Google Analytics on this website, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").

Google analyses your use of this website on our behalf. For this purpose, we use cookies, which are described in detail in the Data Privacy Preferences Center.

The information collected by Google about your use of this website (e.g., the referring URL, pages visited on our site, your web browser, language settings, operating system, or screen resolution) is transmitted to a Google server in the USA, stored there, analysed, and the results are provided to us in anonymised form. Your usage data is not connected to your full IP address. We have activated the IP anonymisation function offered by Google on this website, so the last octet (type IPv4) or the last 80 bits (type IPv6) of your IP address are deleted. Through special agreements with Google, we ensure that an adequate level of data protection is established for data at Google in the USA.

You can object to your consent to web analysis at any time by either downloading and installing the available browser plugin from Google or revoking your consent in the Data Privacy Preferences Center, where an opt-out cookie will be set. Both options prevent web analysis only as long as you use a browser on which you have installed the plugin or as long as you do not delete the opt-out cookie.

Further information about Google Analytics can be found in the Google Analytics Terms of Use, the Google Analytics Security and Privacy Principles, and the Google Privacy Policy.

3.3 Use of Contact Forms

You can contact us directly via contact forms provided on the website. You have the option to share the following information with us:

• First and last name, salutation

• Country

• Contact details (e.g., email address)

• Message

We collect, process, and use the information you provide via contact forms exclusively for handling your specific request.

4. Use of the Newsletter

By registering, you agree that Bayer Kultur will share your email address with the technical service provider Kölnticket (DERTICKETSERVICE.DE GmbH & Co. KG) for the purpose of sending newsletters. The data is used exclusively for sending the newsletter. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time. Further information can be found in Kölnticket's privacy notices.

5. External Services and Content on Our Website

We integrate external services or content on our website. When you use such a service or when third-party content is displayed to you, communication data is exchanged between you and the respective provider for technical reasons.

Furthermore, the provider of the respective services or content may process your data for additional, own purposes. Services or content from providers known to process data for their own purposes have been configured to the best of our knowledge and belief so that either communication for purposes other than displaying the content or services on our website does not occur, or communication only takes place if you actively decide to use the service. However, since we have no influence on the data collected by third parties and their processing, we cannot provide binding information on the purpose and scope of the processing of your data.

For more information about the purpose and scope of the collection and processing of your data, please refer to the privacy notices of the respective providers responsible for data protection of the services or content we have integrated:

• YouTube Videos

6. Use of the Online Ticket Ordering Function

Through the Bayer Kultur website, we directly link to our online shop at Kölnticket. There, you can order tickets for our events. For sending the tickets, we collect and use the information you provide for order processing:

• First and last name, salutation

• Address (street, house number, postal code, city)

• Contact details (e.g., email address, phone number)

Additionally, you have the option to voluntarily provide the following information during registration:

• Mobile phone number

7. Use of Precise Seat Booking

On the Kölnticket website, you have the option to make precise seat bookings for events. For sending the tickets, we collect and use the information you provide based on your prior consent for order processing:

• First and last name, salutation

• Address (street, house number, postal code, city, country)

• Contact details (e.g., email address, phone number)

Additionally, you have the option to voluntarily provide the following information during registration:

• Name suffix

• c/o

• Mobile phone number

• Date of birth

8. Notes on Side Effects or Quality Complaints

This website is not intended for reporting adverse side effects, lack of drug efficacy, medication errors, grey market goods/counterfeits, incorrect or off-label use, quality complaints, and/or other aspects related to the safety or quality of a Bayer product. If you wish to report side effects or quality complaints, please contact your healthcare provider (e.g., doctor or pharmacist), the local health authority, or use our website to report adverse side effects.

If you nevertheless report adverse side effects or other aspects related to the safety or quality of medicines or medical devices to us, we are legally obliged to process your report. For this purpose, we may also contact you to clarify questions. We may then need to forward your report to the relevant health authorities, whereby we will only share your information in pseudonymised form so that no directly identifying information about you is shared. These pseudonymised reports may also need to be shared with our other group companies and cooperation partners if they are themselves obliged to make reports to the health authorities responsible for them.

9. Data Processing for Ticket Order Handling

9.1 Processing Purposes and Categories of Personal Data

We process the following personal data for the following purposes:

9.1.1 Handling Your Order

To process your order, including your payment, to create an invoice, and for shipping to you, we need to process the following personal data:

• Contact information (name, address, phone number, email)

• Customer number

• Bank information (bank account details)

• Purchase history in our customer database

We maintain a customer database in which we store our customers' contact information, including the associated individual purchase history. We use this information to better understand your interests and to inform you about other products or services that may interest you. Additionally, this information enables us to provide better support should you need assistance.

9.1.2 Sending Marketing Communications

If you provide us with your consent, we use your email address to contact you via email and send you marketing communications about services, products, or events tailored to your interests.

9.2 Retention Periods for Personal Data

Your personal data related to your purchases and your information material orders with us are stored for a period of 10 years from your purchase/information material order to comply with legal retention obligations under applicable tax law.

9.3 Legal Bases for Processing Your Personal Data

9.3.1 Use of User Surveys

Participation in user surveys conducted on our website from time to time is voluntary. For conducting user surveys, we use function-related cookies. The technical information collected during the user survey corresponds to that collected when accessing the website (see above). Your responses within the user survey are not linked to your personal data, such as your IP address.

10. Disclosure of Data for Processing on Our Behalf

We use specialised service providers to process your data. Our service providers are carefully selected and regularly monitored by us. They process personal data only on our behalf and strictly in accordance with our instructions based on corresponding contracts for commissioned processing.

11. Processing of Data Outside the EU/EEA

Your data is also processed in countries outside the European Union ("EU") or the European Economic Area ("EEA"), where a lower level of data protection may generally prevail compared to Europe. In these cases, we ensure, for example, through contractual agreements with our contractual partners, that an adequate level of data protection for your data is guaranteed (copy available upon request), or we ask for your explicit consent.

12. Information About Your Rights

The following rights are available to you under applicable data protection laws:

• Right to access the data we have stored about you;

• Right to rectification, deletion, or restriction of the processing of your personal data;

• Right to object to processing that serves our legitimate interest, a public interest, or profiling, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defence of legal claims;

• Right to data portability;

• Right to lodge a complaint with a supervisory authority;

You can revoke consents you have given for the collection, processing, and use of your personal data at any time with effect for the future. For more information, please refer to the respective sections above where data processing based on your consent is described.

If you wish to exercise your rights, please address your request to the contact person mentioned below.

13. Contact

For your data privacy concerns, please use our contact form or contact our Corporate Data Privacy Officer at the following address:

Corporate Data Privacy Officer
Bayer AG
51368 Leverkusen

14. Adjustment of the Privacy Policy

We reserve the right to update this privacy policy from time to time. Updates to this privacy policy will be published on our website. Changes are effective upon their publication on our website. We therefore recommend that you visit this page regularly to stay informed about any updates.

As of: June 16, 2026