Data Protection and Privacy Policy
Effective from 22nd of March 2025
This User Agreement is effective from 22nd of March 2025.
TOC
1. Introduction
1.1 This Data Protection and Privacy Policy (the “Policy”) describes how GreenYield DAO LLC, (company ID), The Republic of Marshall Islands (“us”, ”we” or ”our”) collects and processes personal data when you either purchase our services, participate in events and webinars, sign up for communication, such as newsletters, whitepapers, etc., or otherwise use our website.
1.2 The Policy is prepared and made available to comply with the General Data Protection Regulation (the ”GDPR/FADP”) and the rules included herein on information to be provided to you.
2. Types of Personal Data Processed
2.1 We process personal data about you when this is necessary and in accordance with the applicable legislation. Depending on the specific circumstances, the processed personal data include the following types of personal data:
|
2.2 Depending on how you use our services, we may also process the following data about you:
|
2.3 When relevant, personal data is collected directly from you or from external sources. Personal information from external sources is collected from publicly available registers, and service providers with APIs for other public registers and information sources. The personal data collected via such external sources is limited to what is already made publicly available.
2.4 If we need to collect more personal data than specified above, we will inform you by updating this Policy.
3. Purposes of Processing the Personal Data
3.1 We will only process your personal data if we have a legitimate purpose and in that case in accordance with the rules of the GDPR/FADP. The personal data we collect about you is processed for the following purposes:
|
3.2 In addition to the above, we also process for the following purpose(s): Targeted marketing and Optimising marketing
4. Legal Basis for Processing Personal Data
4.1 We only process your personal data when we have a legal basis to do so in accordance with the GDPR/FADP. Depending on the specific circumstances, the processing of personal data is done on the following legal basis:
|
When we process your personal data based on our legitimate interests herein, our legitimate interests stem from our interest in handling and safeguarding our role as a professional service provider and to create maximum value for our customers and users. Our legitimate interests pursued namely consist of our interest in operating efficient, relevant and correct marketing and sales activities and in operating our software and service delivery in a secure, professional and efficient way. We ensure on an ongoing basis by conducting ad hoc assessments, that our processing under this legal basis is limited to what is necessary, proportionate and has the most limited privacy impact when taking the legitimate interests into account. If you - irrespective of the reason - object to this assessment or wish not to have your data processed for our legitimate interests, please contact us so we can accommodate such a request.
4.2 If we send you direct marketing, including by email, we will ask for your prior consent in accordance with the applicable rules such as marketing acts.
5. Disclosure and Transfer of Personal Data
5.1 We only transfer personal data to other entities when it is legally permitted or required.
5.2 We transfer personal data to the following recipients from the EU/EEA/CH:
|
5.3 We share personal data about you as described in section 2.2 with LinkedIn in order to provide more detailed advertisements.
5.4 We use suppliers to assist in delivering our services. The suppliers will not receive or process personal data unless the applicable law allows for such transfer and processing. When the suppliers are data processors, the processing is always done in accordance with a data processing agreement. When the suppliers are data controllers, the processing is done in accordance with a contract, including applicable privacy policies.
5.5 We transfer personal data to countries or international organisations outside the EU/EEA/CH.
5.6 With reference to section 5.4, please note the following:
|
6. Erasure and Retention of Personal Data
6.1 In general, we strive to always ensure that personal data is deleted as soon as it is no longer necessary for the processing purposes described above. Personal data is collected and kept to comply with the CH Bookkeeping regulation. Personal data about commercial customers is kept for as long as the customer relationship is active and the data is relevant to operate the customer relationship and ensuring the contractual performance of our obligations. If you are not part of an organization that is a customer with us, personal data about you processed in our CRM system (where you may be saved as a "contact" if you have engaged in our marketing offerings) is erased after 12 months of inactivity. If you have any questions about our retention of personal data, please contact us via the email address mentioned in the last section of this Policy.
7. Data Subject Rights
7.1 As a data subject under GDPR/FADP, you have a number of rights.
|
7.2 Your rights may be subject to conditions or restrictions. Accordingly, there is no certainty that you will be entitled to for example data portability in the specific situation; it will depend on the circumstances of the processing.
7.3 More information about data subject rights can be found in the guidelines of the national data protection authorities.
7.4 Please use the contact details below if you want to use your rights.
7.5 We try to meet your wishes about our processing of personal data, but you can always file a complaint to the data protection authorities.
8. Changes to This Policy
8.1 We reserve the right to update and amend this Policy. If we do, we correct the date and the version at the top of this Policy. If we make significant changes, we will provide notification by way of a visible notice, for example on our website or by direct message.
9. Contact
9.1 You may contact us at the below specified email if you:
|
If you have questions or comments to this Policy or if you would like to invoke one or more data subject rights, please contact us at support@greenyield.co.
//GreenYield DAO LLC