Privacy Policy

1. Who we are

Veridian Attributions AG (“we”, “us”) is a company registered in Switzerland that operates the website veridian.id (“Website”) and the Veridian platform for verifiable digital identity and organizational credentials. Our registered address is: Dammstrasse 16, 6300 Zug, Switzerland.

2. Scope of this Privacy Policy

This privacy policy (“Policy”) explains and sets out the basis for why and when we collect personal information about the people who visit our Website, and/or interact with us in any other way. It explains and sets out how we use personal data, the conditions under which we may disclose it to others and the measures we take to keep it secure. Services or products accessible via our Website can be subject to additional terms or policies which supplement or take precedence over this Policy. This Policy covers our Website and our general business communications.

If you transmit or disclose data about other persons such as family members, employees, work colleagues, etc., we assume that you are authorized to do so, that this data is correct and that we may process it as described here. By transmitting such data, you confirm this. Please also ensure that these third parties have been informed of this Policy.

We may amend this Policy from time to time so please check it occasionally to ensure that you are aware of any changes.

3. How you can contact us and our EU representative

Controller. Veridian Attributions AG is the controller responsible for your personal data. You can reach us with any data-protection question or request at privacy@veridian.id, or by post at our registered address above.

EU representative (Article 27 GDPR). Because we are established in Switzerland (outside the EU/EEA) and offer services to individuals in the European Economic Area, we have appointed a representative in the EU under Article 27 GDPR. If you are located in the EEA, you may contact our EU representative on any matter relating to the processing of your personal data, including to exercise your rights such as the right to erasure:

VGS Datenschutzpartner GmbH
Am Kaiserkai 69
20457 Hamburg
Deutschland
https://datenschutzpartner.eu/kontakt/

Contacting our EU representative does not affect your right to contact us directly, or your right to lodge a complaint with a supervisory authority (see section 12).

4. How we collect information about you

We obtain information about you when you use our Website, when you contact us by e-mail, web form, live chat or other means of communication, or if you register to receive one of our newsletters, attend an event or use any other of our services.

You are not obliged to disclose your personal data to us. However, we may need certain information in order to interact with each other. For example, we may not be able to provide certain contractual services or respond to inquiries if we do not receive the necessary information.

We may collect and process the following types of information about you:

4.1. Information you provide us

You may provide us with personal information by filling in forms on our Website (for example our contact form or newsletter sign-up) or by corresponding with us by e-mail, web form, live chat, phone, letter or other means of communication. We collect the data exchanged between you and us, including your contact details and the marginal data of the communication. The personal information you provide may include, in particular, your name, email, messages, address, phone number, IP address, language preference and information regarding the pages you access.

4.2. Information we collect about you

When you visit our Website, we may collect information about your IP address, information about your visit, your browsing activity, and how you use our Website, including log files, date and time at the time of access, URL, amount of data sent in bytes, source/reference from which you reached the page, browser used, operating system used. This information may be combined with other information you provide.

4.3. Information we receive from other sources

We may receive information about you if you use any other websites we, or our partners, operate. We also work with third parties (including contractors, project partners, service providers, analytics providers) and may receive information about you from them. This may be combined with other information you provide to us.

5. How your information is used

We may use personal information about you for the following purposes:

1. to manage relationships with customers, suppliers and other business partners and to fulfill contractual obligations (Article 6 para 1 letters b GDPR if applicable);
2. to send you personalized communications which you have requested and that may be of interest to you, which may be based on your activity on our Website or the website of our partners. These may include information, suggestions and recommendations about new offers, campaigns, activities and events (Article 6 para 1 letters a and f GDPR if applicable);
3. to understand and measure the effectiveness of how we serve you and others (Article 6 para 1 letters a and f GDPR if applicable);
4. to ensure compliance with legal obligations and official orders, including communication with authorities and courts; enforcement of and defense against legal claims (Article 6 para 1 letter f GDPR if applicable).
5. to operate, administer, secure and improve our Website and IT systems, including the prevention and investigation of misuse (Article 6 para 1 letter f GDPR if applicable).

6. Use of cookies

Our Website uses cookies and similar technologies to distinguish you from other visitors, to remember your preferences, and to help us understand how the Website is used. Cookies are small text files stored on your device when you visit a website.

We use strictly necessary cookies, which do not require your consent, and, where applicable, analytics or other non-essential cookies, which we set only with your consent. You can give, withdraw or change your consent at any time through the cookie declaration on our Website, or by adjusting your browser settings. Your consent applies to the domain veridian.id. If you disable non-essential cookies, certain parts of our Website may not function fully.

For the full list of the cookies we use, their purpose and duration, and the third parties involved, and to manage your preferences, please see our Cookie Policy.

7. Who has access to your information

We disclose personal data to third parties only where this is necessary for the purposes described in this Policy, where you have consented, or where we are legally obliged to do so. Recipients or categories of recipients include in particular:

1. service providers acting on our behalf (e.g. IT, hosting, communication, payment and analytics providers);
2. group companies of Veridian Attributions AG;
3. business and project partners;
4. authorities, courts and other public bodies, where required to comply with legal obligations or official orders; and
5. other third parties where this is necessary to establish, exercise or defend legal claims or to prevent abuse.

If we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure.

8. Where we store your personal information

Your personal data is processed and stored primarily in Switzerland, where we are established. Switzerland is recognized by the European Commission as providing an adequate level of data protection, so transfers of personal data from the EEA to Switzerland do not require additional safeguards.

Where we use service providers located outside Switzerland or the EEA, e.g., providers located in the United States, the laws in some countries may not provide the same legal protection for your information as in Switzerland or the EEA. In these cases, we only transfer personal data after we have implemented the legally required measures, such as the conclusion of standard contractual clauses on data protection, reliance on an adequacy decision (including, for transfers to the United States, certification of the recipient under the Swiss-U.S. Data Privacy Framework), or obtaining the consent of the data subjects. If you are interested, the documentation on these measures can be obtained from the contact details above.

9. How long will we keep your data

We will hold your personal information on our systems for as long as is necessary for the relevant activity. It is then either deleted or anonymized, unless we need it for longer in exceptional cases, e.g. due to statutory retention and documentation obligations or our legitimate interests, e.g. to protect rights to which we are entitled or to defend against claims.

10. Links to other websites

Our Website may contain links to other websites run by other organizations. This Policy applies only to our Website, so we encourage you to read the privacy statements on the other websites you visit. We cannot be made responsible for the privacy policies and practices of other websites even if you access them using links from our sites.

If you linked to our Website from a third party website, we cannot be made responsible for the privacy policies and practices of the owners and operators of that third party website and recommend that you check the policy of that website.

11. Security measures to protect your information

We take appropriate administrative, technical and physical safeguards to protect the confidentiality, integrity and availability of personal data. We use strict procedures and security features, including encryption techniques, and take all steps reasonably necessary to ensure that personal data is processed securely and in accordance with this Policy.

Please note that the transmission of information via the internet can never be completely secure. While we strive to protect your personal information, we cannot guarantee the security of information during its transmission to us.

12. Your choices and your rights

You have the right to request a copy of your personal data as well as the right to have your personal data corrected or deleted.

Under certain circumstances, you have the right to request that we restrict processing and the right to object to processing by us in general. In particular, you may object at any time to the processing of your personal data for direct marketing purposes.

If our processing is based on your consent, you have the right to withdraw this consent at any time with effect for the future.

You may also have the right to receive a copy of the personal data in a machine-readable format or to send the personal data to another controller.

You can exercise your rights by contacting us, or, if you are in the EEA, our EU representative (see section 3). We may need to verify your identity before acting on a request. Your rights are subject to the statutory conditions and exceptions (in particular Art. 25 et seq. FADP and, where applicable, Art. 12 et seq. GDPR).

You have the right to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC). If you are located in the EEA, you may also lodge a complaint with the supervisory authority in your country of residence, place of work or the place of the alleged infringement.

13. Review of this Policy

We keep this Policy under regular review. In case of a revised version, we will inform you of the change in a suitable form (e.g. by posting it on our Website or sending you an e-mail) and the new version will become binding upon publication on our Website.