PRIVACY POLICY – ARTEM DECLARANT’S CORE

This Privacy Policy explains the processing of your personal data by ARTEM Technologie AG, Sinserstrasse 67, 6770 Cham, Switzerland (“we” or “ARTEM“) as the controller (Art. 4 no. 7 GDPR) when using our software platform Declarant’s Core (“Platform“) and your rights under the GDPR.

Purposes of Processing

Processing of personal data you provide

We process personal data that you provide in the context of registration to and using our Platform. For example, if you contact us by any means, such as email or messenger, we process your personal data to respond to your inquiry. In the context of the registration process for the Platform, we process personal data which are submitted to the Platform, e.g. name, email address, position in the company, for the performance of the contractual relationship.

The legal basis for the above-mentioned processing of your personal data is Art. 6 (1) b) GDPR, if you are the contract partner acting as an individual in a B2B context, or Art. 6 (1) f) GDPR, if you act as a contact person on behalf of a company.

Log data

When using the Platform, certain personal data, including data sent by the browser (e.g., IP addresses, types of cookies, previous website, time and date, content displayed) are temporarily stored. We use this log data to enable you to use our Platform and, if necessary, to check and enforce our rights and the rights of third parties in the event of damage or infringement of legal regulations, our terms of use and the rights of third parties. The legal basis is Art. 6 (1) f) GDPR. The log files are stored for as long as is necessary for the respective purpose, generally no longer than 14 days.

Communication with B2B contact persons

We process contact details of the contact persons of our B2B business partners (e.g., address, telephone number, mobile phone number, e-mail address) and other personal data of the respective contact persons, insofar as the respective business partner makes these available to us in the context of the business relationship.

The processing of the personal data of B2B contact persons serves the following purposes:

• Performance of the contract: Contract negotiations, execution and processing of the contractual relationship between us and our business partners, e.g. contract and payment processing, customer, supplier and invoice management and customer backup. The legal basis for this data processing is the performance of a contract (Art. 6 (1) b) GDPR).
• B2B Marketing: We may use e-mail addresses of contact persons of B2B business partners that we have received in connection with the sale of our goods and services to our B2B customers in order to inform the respective contact persons about similar goods or services of our company. The legal basis for such B2B marketing is our legitimate interest in direct marketing (Art. 6 (1) f) GDPR). The respective contact persons have the right to object to the sending of such advertising e-mails at any time in the future. If the respective contact persons consent to receiving such marketing, the legal basis is their consent (Art. 6 (1) a) GDPR).
• Customer relationship management: The legal basis is our legitimate interest in maintaining customer relationships (Art. 6 (1) f) GDPR).
• Fulfilment of legal obligations: The legal basis for legally required processing of personal data is Art. 6 (1) c) GDPR.

Other purposes for which we process your personal data

We process your personal data:

• To fulfill contracts and in the context of existing or new business relationships. We will retain this personal data at least for the duration of our business relationship. During our business relationship, we may collect contact information and professional qualification data (publications, etc.). Some data is obtained from public sources and websites. Legal basis: Art. 6 (1) b) GDPR.
• To meet our legitimate interests (Art. 6 (1) f) GDPR), including the following:
  • Enter into corporate transactions (e.g., restructuring, asset deals, merger)
  • Protect our rights or property, enforce our terms of use and legal notices, and provide for the establishment, exercise, and defense of legal claims
• To fulfill our legal obligations, court orders or other binding decisions. The legal basis is Art. 6 (1) c) GDPR.
• With your consent (Art. 6 (1) a) GDPR) for other purposes, such as subscription to a newsletter; in this case, you have the option to revoke your consent at any time.

Recipients of Personal Data

In addition to the recipients of personal data mentioned above, we also use other companies to process personal data on our behalf, for example for hosting or technical support of our Platform. Such service providers only process the data on our behalf as so-called processors (Art. 28 GDPR).

Furthermore, we transmit personal data to third parties if this is required by law, if this is necessary for the exercise and defense of legal claims, or if third parties provide certain services for us (e.g., lawyers, tax consultants).

Insofar as we transfer personal data to third countries outside the European Economic Area (“EEA”), we ensure an adequate level of data protection in accordance with European law (this is usually done using EU Standard Contractual Clauses of the European Commission and, where necessary, other appropriate safeguards, e.g. for data transfers to the USA on the basis of the adequacy decision for the EU-U.S. Data Privacy Framework).

Deletion of Personal Data

Unless a specific duration of data storage is specified in this Privacy Policy, we will only process your data as long as this is necessary for the respective purposes or as long as there are legal retention obligations. After the respective processing purpose ceases to apply and retention obligations end, your data will be routinely deleted. In particular, the personal data used to register and maintain a user account for our Platform is generally stored for as long as the account is not deleted.

Your Rights

You can request information about your stored data. If you have provided personal data on the basis of a contract or consent, you have the right to receive this data in a standard and machine-readable format.

To the extent allowed under GDPR, you can also request the deletion, correction or restriction of the processing of your data.

You can revoke your consent at any time without affecting the lawfulness of processing based on your consent before its withdrawal.

You can object to the processing of data processed on the basis of our legitimate interests at any time under the conditions of the GDPR.

Contact; Complaint to Supervisory Authority

Please address your questions or concerns regarding the processing of your personal data to:

ARTEM Technologie AG, Sinserstrasse 67, 6770 Cham, Switzerland

Email address: support_cbam@artem.earth

In case of questions or possible concerns about the data processing, you can also contact a supervisory authority.