Privacy notice

Data controller

The data controller is [to be completed: company name, registered office, VAT number]. Privacy contact: [to be completed: email address]. Data protection officer: [to be completed, if appointed].

What data we process

For account holders: name, email address, role, company, technical access data and the log of operations performed. For those who view a passport without registering: technical browsing data only, without creating profiles. Supply chain data is entered by companies and concerns products, not people.

Why and on what basis

To provide the service to account holders (performance of the contract), for access security and traceability of operations (legitimate interest), and to comply with legal obligations.

Public ledger

Only cryptographic fingerprints, from which the data cannot be reconstructed, are written to the public ledger. No personal data is recorded there. The content of a step can be removed from the platform without affecting the verification of the others.

For how long

Account data is kept for the duration of the relationship and then for [to be completed: period]. Passport data is kept for the expected life of the product. The operations log is kept for [to be completed: period].

Who receives the data

The data is processed by technical service providers appointed as processors: [to be completed: list of providers and data centre locations]. Application data is stored in the European Union. No transfers to third countries are planned [to be completed: confirm].

Your rights

You may request access to your data, its rectification, erasure, restriction of processing and portability, and you may object to processing. You may also lodge a complaint with the supervisory authority of your country.

Write to [to be completed: email address for requests]. We reply within one month; to protect your data we may ask you to confirm your identity. The request is free of charge.