Privacy Policy

Last updated
March 7, 2026

Privacy Notice for Website Visitors and Newsletters

Below you will find comprehensive information on how we process your personal data when you use our website borougeinternational.com or register for newsletters.

1. Controller

Controller for this website, as per Article 4(7) GDPR is the following entity:

Borouge Group International AG
Mannswörther Straße 28
A-2320 Schwechat, Austria

Telephone: +43 (0) 1 22 400 300
Telefax: +43 (0) 1 22 400 333

You can also contact us via our Contact Form.

2. Contact for data protection matters

Our data protection team is available to assist you with any data protection concerns. You can contact them at the following email address:

privacy@borougeinternational.com

3. Data Processing in the context of providing this website

When you use our website for informational purposes only, we only collect the personal data that your browser transmits to our server.

3.1 Types of personal data

When you visit our website, we collect data, which are technically necessary for us to display our website to you and to ensure stability and security.

Access logs and error logs are enabled on our servers by default. Access log files record the activities of website visitors on the websites. As website operators, we collect this data in order to provide the website properly, detect attacks, and protect ourselves against them. For this purpose, error logs record incorrect page views. Where possible and appropriate, the IP address is pseudonymized by truncation.

For this purpose, we process the following data:

  • IP address
  • Date and time of the server request or website access
  • Browser type and browser version
  • User-Agent
  • Operating system used
  • language
  • Host name of the accessing computer
  • pages accessed
  • Access status/HTTP status code
  • Amount of data transferred
  • Protocol (https, http) and request type (GET, POST, etc.)
  • Firewall logs also record the type of attack.

3.2 Purposes of Processing

The collection of log files serves to log blocked or malicious website accesses, to perform forensic analysis of potential attacks on the website, and to ensure the security and stability of our website.

3.3 Legal Basis

The legal basis is our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR, which lies in the above-mentioned purpose; insofar as absolutely necessary access to information stored on the user's terminal equipment takes place, the legal basis is also § 165(2) TKG 2021 (Austrian Telecommunications Act).

3.4 Duration of data storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is usually the case after one month at the latest. The legal basis for the data retention is our legitimate interest in performing forensic analysis of potential attacks on the website, and to ensure the security and stability of our website pursuant to Article 6(1)(f) GDPR.

4. Contact us by email, phone, or via the contact form

We collect personal data when you voluntarily provide it to us, for example when you contact us (e.g., email address, first name, last name, telephone number). We will, of course, use the personal data transmitted to us in this way exclusively for the purpose for which you provided it to us when contacting us.

The provision of this information is voluntary and, in such cases, initiated by you.

If you contact us by email, your data may be transmitted to us unencrypted.

4.1 Types of personal data

Insofar as this involves information about communication channels (e.g., email address, telephone number), we will use these channels to contact you in accordance with your request.

We have marked information that is required for contacting you with an "*" – this applies to your email address. Any further information is voluntary and is not required for us to contact you.

4.2 Purposes of Processing

The purpose of processing your data is to handle and respond to your request.

4.3 Legal Basis

The legal basis for processing the data you provide to us when contacting us is our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR, which lies in the above-mentioned purpose.

4.4 Duration of data storage

We will delete your data that we have received in the course of contacting you as soon as it is no longer required for the purpose for which it was collected, i.e. once your request has been fully processed and no further communication with you is necessary or desired by you, or we will restrict processing as long as legal retention obligations exist.

4.5 Right to Object and to request deletion

You can object to the data processing and request that the data relating to your inquiry be deleted. However, this may mean that we are unable to process your request, either in whole or in part.

If processing is based on your consent (e.g., voluntarily disclosed data), you have the right to revoke this consent with future effect.

5. Investor Relations newsletter

Via our website you can register to our investor relations newsletter to get investor relevant news right to your mailbox. The registration uses the so-called “double opt-in”, requiring you to confirm your e-mail address by clicking in an initial e-mail sent to you after registering. Only after clicking the link will the registration be completed.

5.1 Types of personal data

In this context we process the following personal data:

  • First and last name
  • E-mail address

5.2 Purposes of Processing

The purpose of processing your data is to provide you with relevant investor information via e-mail.

5.3 Legal Basis

The legal basis for processing the data you provide to us in this context is your consent as per Article 6(1)(a) GDPR and § 174 TKG 2021.

5.4 Duration of data storage

We will process your personal data for this purpose for as long as we have your consent and/or you are a shareholder of Borouge International.

If you do not confirm your registration within 30 days, your information will be automatically deleted.

5.5 Right to withdraw consent

You have the right to withdraw consent at any time, unconditionally, with effect for the future. The processing is based on your consent until withdrawal of the consent.

6. Newsletters, Event Invitations and Surveys

Via our website you can register to our newsletter to corporate and industry news, product information as well as invitations to events and surveys right to your mailbox. The registration uses the so-called “double opt-in”, requiring you to confirm your e-mail address by clicking in an initial e-mail sent to you after registering. Only after clicking the link will the registration be completed.

6.1 Types of personal data

In this context we process the following personal data:

  • First and last name
  • E-mail address
  • Company
  • Department
  • Country

6.2 Purposes of Processing

The purpose of processing your data is to provide you with relevant product, corporate and industry information as well as event invitations and surveys via e-mail.

6.3 Legal Basis

The legal basis for processing the data you provide to us in this context is your consent as per Article 6(1)(a) GDPR and § 174 TKG 2021.

6.4 Duration of data storage

We will process your personal data for this purpose for as long as we have your consent.

If you do not confirm your registration within 30 days, your information will be automatically deleted.

6.5 Right to withdraw consent

You have the right to withdraw consent at any time, unconditionally, with effect for the future. The processing based on your consent remains unaffected until receipt of withdrawal.

7. Use of Cookies

What are cookies? Cookies are data stored on your computer by a website you visit.

Cookies transmit information to the entity that places the cookie on your computer. Cookies can store various types of information, such as your language settings, the length of your visit to our website, or the entries you have made there. This prevents you from having to re-enter the necessary form data each time you use the website, for example.

The information stored in cookies can also be used to identify preferences and tailor content to areas of interest.

The legal basis for the possible processing of personal data using cookies and their storage period may vary:

  • If you have given us your consent, the legal basis is Article 6(1)(a) GDPR and § 165(3) TKG 2021.
  • Where the use of cookies is absolutely necessary (technically necessary cookies), this is done on the basis of § 165(3) TKG 2021 and further data processing in accordance with Article 6(1)(c) or (f) GDPR.

We use cookies to ensure the proper functioning of the website, to provide basic functionality, and—with your consent—to tailor our services to your preferred areas of interest or functions.

A current list of the cookies used on this website is available in our Cookie Policy. You can delete cookies already stored on your device at any time.

If you want to prevent cookies from being stored, you can do so via the settings in your Internet browser. Alternatively, you can also install ad blockers.

Please note that some features of our website may not work if you have disabled cookies.

You can find more information about the cookies used on this website in our Cookie-Consent-Tool. There you can also give, withdraw and modify your consent regarding the use of cookies.

8. Third Party Service Providers

We may share your information with third-party service providers who perform services on our behalf. Such trusted parties may have access to personally identifiable information on a need-to-know basis and will be contractually obliged to keep your information confidential. These partners are prohibited from using your personal information for any purpose other than providing these services to Borouge Group International AG , and they are required to maintain the confidentiality of your information and are subject to data processing agreements.

8.1 Brevo

Brevo, provided by Sendinblue GmbH, located at Köpenicker Str. 126, 10179 Berlin, Germany, is used for newsletter, communication and customer information purposes.

Based on your consent we will process your first and last name as well as your e-mail address to send you newsletters.

The Privacy Notice for Brevo can be accessed here: https://www.brevo.com/legal/privacypolicy/

8.2 Google Analytics

Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), provides to us the Google Analytics service, for the purposes of marketing and advertising as well as website analytics and performance tracking.

Google Analytics uses cookies, which are placed on your computer if you provide consent. Subject to your consent, Google Analytics processes you first and last name, date of birth (in case you are logged in to your Google account), email address and/or phone number, address and city, device ID, IP address, operating system and version, browser fingerprint, real-time location (e.g. GPS), IP-based approximate location, browsing history, browser information and language, interaction logs (e.g., clicks, time spent on pages). This information may also be sent to Google servers in the USA.

The Privacy Notice for Google Analytics can be accessed here:

https://business.safety.google/privacy/?hl=en

8.3 YouTube

Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), provides to us services in the context of YouTube videos embedded in our website. The purpose is to display videos, which are hosted on YouTube.

YouTube uses cookies, which are placed on your computer if you provide consent. Subject to your consent, Google processes your device ID, IP address, operating system and version, browser information and language, interaction logs (e.g., clicks, time spent on pages). This information may also be sent to Google servers in the USA.

The Privacy Notice for YouTube can be accessed here:

https://business.safety.google/privacy/?hl=en

8.4 Mux

Mux, provided by Mux, Inc., located at 50 Beale Street, 9th Floor San Francisco, CA 94105, USA, certified under the EU US Data Privacy Framework, is used for video streaming and storing purposes.

Mux Video collects uploaded media and access log data of media playback requests for the purpose of utilization, performance and security validation from Content Delivery Network (CDN) partners. Based on accepting the necessary cookies you provide us with consent that Mux processes the video content as well as metadata related to the video content, your IP address, the user agent, the low-resolution geolocation data inferred from the IP address, browser and browser version, operating system and version, device information.

The Privacy Notice for Mux can be accessed here: https://www.mux.com/privacy

8.5 Sentry.io

Sentry.io, provided by Functional Software, Inc. d/b/a Sentry, located at 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA, is used for the purpose of monitoring website performance and availability as well as for error monitoring and enhanced identification and resolution of code errors.

Based on our legitimate interest, which consists in ensuring the functioning and availability of our website, Sentry.io may process the following personal data: IP address, e-mail address.

The Privacy Information for Sentry.io can be accessed here:

https://sentry.io/privacy/

9. Data transfer to third parties and outside the EU/EEA

Insofar as external service providers come into contact with your personal data, we have taken legal, technical, and organizational measures and carry out regular checks to ensure that they comply with the provisions of data protection laws. Furthermore, these service providers may only use your data in accordance with our instructions.

In general we process your personal data within the EU/EEA. However, we may use service providers who process data outside the EU/EEA or send personal data to Borouge International companies that are located outside the EU/EEA. In such cases, we will inform you of such transfer and ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient's end before your personal data is transferred. This can be achieved, for example, through EU standard contractual clauses or binding corporate rules or special agreements to which the company can submit.

10. Your Rights

You have the following rights with regard to your personal data:

10.1 General rights

You have the right to information, correction, deletion, restriction of processing, objection to processing, and data portability. If processing is based on your consent, you have the right to revoke this consent with future effect.

10.2 Rights to object to data processing based on legitimate interest

Pursuant to Article 21(1) GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) GDPR (data processing in the public interest) or on the basis of Article 6(1)(f) GDPR (data processing to safeguard a legitimate interest); this also applies to profiling based on this provision.

In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

10.3 Right to object to direct marketing

If we process your personal data for direct marketing purposes, you have the right, pursuant to Art. 21 (2) GDPR, to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to the processing of your data for direct marketing purposes, we will no longer process your personal data for these purposes.

10.4 Right to lodge a complaint with a supervisory authority

You also have the right to complain to a competent data protection supervisory authority about our processing of your personal data.

11. Data security

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

To protect your data, your connection to our pages with the option to enter data is securely encrypted. You can recognize this, for example, by a small padlock or the addition of "https://" in the address bar of your browser.

To increase your security, you can configure your browser to be more privacy-friendly, for example by using extensions.

12. Data transfer and recipients or categories of recipients

Your data will not be passed on to third parties unless we are legally obliged to do so, or the transfer of data is necessary for the execution of a contractual relationship, or you have expressly consented to the transfer of your data in advance.

In these cases, however, the scope of the data transmitted is limited to the minimum necessary. Insofar as our service providers come into contact with your personal data and process it on our behalf in accordance with our instructions, we ensure within the framework of order processing in accordance with Art. 28 GDPR that they comply with the provisions of data protection laws in the same way.

Please also note the respective data protection information provided by the providers.

The respective service provider is responsible for the content of third-party services, whereby we check the services for compliance with legal requirements within the scope of what is reasonable.

13. Use of automated decision making, including profiling

Automated decision-making—including profiling—as per Article 22 GDPR does not take place.

14. Links to other providers' websites

Our websites may contain links to websites of other providers to which this privacy policy does not apply. If the use of other providers' websites involves the collection, processing, or use of personal data, please refer to the privacy policies of the respective providers.

15. Changes to this privacy notice

We will update this privacy notice as soon as changes are made to our website or other reasons make this necessary. The currently valid version is available on this website at any time. We therefore recommend that you visit this page regularly to find out about the current status of the privacy notice.

Borouge International reserves the right to amend this privacy notice at any time without prior notice. Changes take effect upon publication.