Privacy

GreenYield DAO LLC

Rev/Version:

0002

1. Introduction

1.1 This Data Protection and Privacy Policy (the “Policy”) describes how GreenYield DAO LLC, (company ID), The Republic of Marshall Islands (“us”, ”we” or ”our”) collects and processes personal data when you either purchase our services, participate in events and webinars, sign up for communication, such as newsletters, whitepapers, etc., or otherwise use our website.

1.2 The Policy is prepared and made available to comply with the General Data Protection Regulation (the ”GDPR/FADP”) and the rules included herein on information to be provided to you.

2. Types of Personal Data Processed

2.1 We process personal data about you when this is necessary and in accordance with the applicable legislation. Depending on the specific circumstances, the processed personal data include the following types of personal data:

  • Username

  • IP addresses

  • Telephone number

  • Email

  • Address

  • Name

2.2 Depending on how you use our services, we may also process the following data about you:

  • Communication information, including copies of e-mails, support tickets, messages within our SaaS and feedback data.

  • Engagement history, including information about your participation and engagement in our events, newsletters, campaigns and webinars. If your e-mail account or provider automatically loads images and HTM-files, our engagement data also includes information about your interaction with our newsletters, including whether the newsletters were received in your inbox (or caught in a spam filter) and whether you read the newsletter and the articles therein. The engagement history does not include information about your browsing history, location or similar data that can be collected via cookies. We note that we process these engagement data collected via e-mail pixels based on the marketing consent given by the data subject and that the processing of the data stemming from the pixels is done based on legitimate interests, cf. sections 4.1(d) and 4.1, last paragraph, as we have legitimate interests in measuring the relevance of our newsletters. We do not consider our measuring of your engagement in our articles and campaigns as privacy-invasive, among other things because we only send newsletters to professional e-mail addresses and because our articles and underlying engagement measurement only concerns professional matters. If you do not wish to have data about your interaction with our newsletters collected, you can easily block the e-mail pixels via your e-mail service provider - please contact us for more guidance if needed.

  • Your affiliation with a commercial account or opportunity in our CRM system and the status hereof.

  • Net Promoter Score and other feedback on the use of our services and content.

  • Other CRM data relating to your organisation's commercial relationship with us, including but not limited to company name and job title.

  • Log data and user monitoring for security purposes and to improve our products and services.

  • Business-related information about you, your place of work, business email, business address etc., which is collected from the ZoomInfo database and matched with your IP-address when visiting our website.

2.3 When relevant, personal data is collected directly from you or from external sources. Personal information from external sources is collected from publicly available registers, and service providers with APIs for other public registers and information sources. The personal data collected via such external sources is limited to what is already made publicly available.

2.4 If we need to collect more personal data than specified above, we will inform you by updating this Policy.

3. Purposes of Processing the Personal Data

3.1 We will only process your personal data if we have a legitimate purpose and in that case in accordance with the rules of the GDPR/FADP. The personal data we collect about you is processed for the following purposes:

  • To deliver products or services.

  • To provide service messages and information.

  • To store personal data to comply with applicable legislation requirements such as bookkeeping acts.

  • To provide support and service messages, including responding to questions and complaints and sending updates about our products and services.

  • To send newsletters and direct marketing (such as e-mails, MMS', direct messages on social media, etc.)

  • To send newsletters by e-mail.

  • To prevent fraudulent behavior or misuse of our products, services and website, including the processing of personal data for the purpose of legal actions.

  • To improve our products, services, or website.

  • To facilitate a sales process.

3.2 In addition to the above, we also process for the following purpose(s): Targeted marketing and Optimising marketing

4. Legal Basis for Processing Personal Data

4.1 We only process your personal data when we have a legal basis to do so in accordance with the GDPR/FADP. Depending on the specific circumstances, the processing of personal data is done on the following legal basis:

  • The processing is necessary for the performance of a contract to which the data subject is a party in accordance with GDPR/FADP.

  • The processing is necessary in order to take steps at the request of the data subject prior to entering into a contract in accordance with GDPR/FADP.

  • The processing is necessary to comply with applicable legislation in accordance with GDPR/FADP.

  • The processing is necessary for the purposes of the legitimate interests where such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data in accordance with GDPR/FADP.

  • The legal basis for the processing of such personal data is consent, in accordance with GDPR/FADP. You can withdraw your consent at any time by contacting us via the contact details provided at the end of this Policy. If you withdraw your consent, the personal data processed will be deleted, unless it can or must be processed in order to comply with legal obligations.

When we process your personal data based on our legitimate interests herein, our legitimate interests stem from our interest in handling and safeguarding our role as a professional service provider and to create maximum value for our customers and users. Our legitimate interests pursued namely consist of our interest in operating efficient, relevant and correct marketing and sales activities and in operating our software and service delivery in a secure, professional and efficient way. We ensure on an ongoing basis by conducting ad hoc assessments, that our processing under this legal basis is limited to what is necessary, proportionate and has the most limited privacy impact when taking the legitimate interests into account. If you - irrespective of the reason - object to this assessment or wish not to have your data processed for our legitimate interests, please contact us so we can accommodate such a request.

4.2 If we send you direct marketing, including by email, we will ask for your prior consent in accordance with the applicable rules such as marketing acts.

5. Disclosure and Transfer of Personal Data

5.1 We only transfer personal data to other entities when it is legally permitted or required.

5.2 We transfer personal data to the following recipients from the EU/EEA/CH:

  • Processors

  • Collaborators

  • Suppliers

5.3 We share personal data about you as described in section 2.2 with LinkedIn in order to provide more detailed advertisements.

5.4 We use suppliers to assist in delivering our services. The suppliers will not receive or process personal data unless the applicable law allows for such transfer and processing. When the suppliers are data processors, the processing is always done in accordance with a data processing agreement. When the suppliers are data controllers, the processing is done in accordance with a contract, including applicable privacy policies.

5.5 We transfer personal data to countries or international organisations outside the EU/EEA/CH.

5.6 With reference to section 5.4, please note the following:

  • We use Google Analytics but have set up our account and structure in such a way that personal data is not transferred to Google LLC (USA) and is therefore neither transferred to countries outside of EU/CH.

  • If you are located outside the EU/CH when accessing our website or use our services, then data might be processed outside the EU/CH due to the data centre locations and infrastructure hubs of our suppliers.

6. Erasure and Retention of Personal Data

6.1 In general, we strive to always ensure that personal data is deleted as soon as it is no longer necessary for the processing purposes described above. Personal data is collected and kept to comply with the CH Bookkeeping regulation. Personal data about commercial customers is kept for as long as the customer relationship is active and the data is relevant to operate the customer relationship and ensuring the contractual performance of our obligations. If you are not part of an organization that is a customer with us, personal data about you processed in our CRM system (where you may be saved as a "contact" if you have engaged in our marketing offerings) is erased after 12 months of inactivity. If you have any questions about our retention of personal data, please contact us via the email address mentioned in the last section of this Policy.

7. Data Subject Rights

7.1 As a data subject under GDPR/FADP, you have a number of rights.

  • 7.1.1 You have the right to request access to the personal data we process about you, the purposes we process the personal data, and whether we disclose or transfer your personal data to others.

  • 7.1.2 You have the right to have incorrect information rectified.

  • 7.1.3 You have the right to have certain personal data deleted.

  • 7.1.4 You may have the right to restriction of our processing of your personal data.

  • 7.1.5 You may have the right to object to our processing of your personal data based on reasons and circumstances that pertain to your particular situation. Objection can also be to the processing of personal data for the purpose of direct Marketing.

  • 7.1.6 You have the right not to be subject to a decision based solely on automated means, without human interference unless the decision (1) is necessary for entering into, or performance of a contract between you and the Organization, (2) is authorised by law, or (3) is based on your explicit consent.

  • 7.1.7 If the processing of your personal data is based on your consent, you are entitled to withdraw such consent at any time. Withdrawal of your consent will not affect the lawfulness of the processing carried out prior to your withdrawal.

  • 7.1.8 You are entitled to receive personal data which you have provided to us in a structured, commonly used, and machine-readable format (data portability).

  • 7.1.9 You can always lodge a complaint with the data protection authority.

7.2 Your rights may be subject to conditions or restrictions. Accordingly, there is no certainty that you will be entitled to for example data portability in the specific situation; it will depend on the circumstances of the processing.

7.3 More information about data subject rights can be found in the guidelines of the national data protection authorities.

7.4 Please use the contact details below if you want to use your rights.

7.5 We try to meet your wishes about our processing of personal data, but you can always file a complaint to the data protection authorities.

8. Changes to This Policy

8.1 We reserve the right to update and amend this Policy. If we do, we correct the date and the version at the top of this Policy. If we make significant changes, we will provide notification by way of a visible notice, for example on our website or by direct message.

9. Contact

9.1 You may contact us at the below specified email if you:

  • a) disagree with our processing or consider our processing of your personal data infringes on the law,

  • b) have questions or comments to this Policy, or

  • c) want to invoke one or more of your rights as a data subject described in this Policy.

If you have questions or comments to this Policy or if you would like to invoke one or more data subject rights, please contact us at support@greenyield.co.

//GreenYield DAO LLC

Privacy

Date

Rev/Version:

0002

Posted on:

18-05-2025

GreenYield DAO LLC

GreenYield DAO LLC

GreenYield DAO LLC

GreenYield DAO LLC