EN HR
Get in touch
EN HR

Privacy Notice

Welcome to the PPA SEE Hub, the PPA Platform available at renew-xchange.com (the "Platform", "PPA SEE Hub").

This document (the "Privacy Notice") explains why and how we collect, use, store, and share your personal data when you interact with us or when you just visit our website. We take your privacy rights seriously and are committed to complying with the EU General Data Protection Regulation ("GDPR"), and other privacy laws.

By registering for and using our services, or simply by visiting our website, you acknowledge that this Privacy Notice has been duly delivered to you, as required by the GDPR.

1 Data Controller

The entity responsible for the collection and processing of your personal data under this Privacy Notice is:

RenewXchange Ltd
Registered Office: Radnička cesta 80, Zagreb, Croatia
Email: info@renew-xchange.com

2 Purpose of Processing; Types of Data

We process your personal data for the purposes listed below:

If you are a Platform user:

  • Provision of services: We process your personal data to provide you with access to and functionality of the PPA SEE Hub. Types of data include name, email, contact details, organisation, account credentials, usage data.
  • Customer support and communication: We use your personal data to communicate with you, provide customer support, address inquiries, and send important notifications.
  • Platform security and integrity: We may process personal data to maintain security, prevent fraud, ensure availability, and detect potential security threats.
  • Service improvement: We may process personal data to improve the performance, functionality, and user experience of the Platform.
  • Compliance with legal and regulatory obligations: We process personal data to comply with applicable laws and regulations.

If you are visiting our website:

  • Website usage and analytics: We collect data about your visit to analyze how visitors use the site and improve user experience.
  • Cookies and tracking technologies: We use cookies and other tracking technologies. You can find out more in our Cookie Policy.

Other purposes:

  • Marketing: If you subscribe to newsletters or promotional communications, we process your data to send you updates and marketing materials. You can opt out at any time.
  • Engagement and communication: We process your information to engage in discussions and explore potential collaboration.

3 Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contractual necessity: We process your personal data as it is necessary to fulfill our contract with you.
  • Legitimate interest: In certain cases, we process your personal data based on our legitimate interests, including ensuring security, improving services, preventing fraud, and engaging in business communications.
  • Legal obligation: We may process your personal data to comply with legal obligations.
  • Consent: For marketing communications and cookies, we will ask for your explicit consent. You have the right to withdraw your consent at any time.

4 Data Retention

We retain your personal data for no longer than is necessary for the purposes for which it was collected. The retention periods are determined based on:

  • Purpose of data processing: We retain your personal data for as long as necessary to fulfill the purposes for which it was collected.
  • Legal and regulatory requirements: Certain types of data may be retained for a period required by law.
  • Contractual obligations: Personal data may be retained for the duration of the contractual relationship and kept for an additional period after contract termination.
  • Legitimate business interests: If we process your data based on legitimate interests, we will retain it for as long as necessary to pursue them.
  • Account activity: Personal data related to your account will be retained for as long as your account is active, and for a reasonable period after deactivation.

5 Data Sharing and Disclosure

We do not sell your personal data. However, we may share it with:

  • Third-party service providers: Who assist us in delivering and maintaining our systems, website, Platform and services.
  • Third-party integrations: If some elements of our Platform can be integrated with other applications or services.
  • Marketing partners and advertising networks: To personalize ads and improve our marketing campaigns.
  • Legal compliance and public authorities: If we are legally required to do so.
  • Professional advisors: Such as legal counsel, accountants, auditors, and other consultants.
  • Affiliates and group companies: Within our corporate group.
  • Business transfers: If our company undergoes a merger, acquisition, or sale of assets.

6 Data Security

We take security and confidentiality of your personal data seriously. We implement appropriate technical and organizational measures to protect your personal information from unauthorised access, loss, misuse, or disclosure. Our measures include using encryption, access controls, and regularly testing the effectiveness of our security systems.

7 International Data Transfers

In principle, your personal data will always stay within the European Economic Area (EEA). However, occasionally it may be transferred to, and stored in, other countries. Whenever this occurs, we use mechanisms such as Standard Contractual Clauses (SCCs) approved by the European Commission.

8 Automated Decision-Making

We do not engage in any automated decision-making processes that produce legal effects concerning you or significantly affect you in a similar way.

9 Your Rights under GDPR

You have multiple rights concerning the personal data we hold about you:

  • Right of access: You can request access to the personal data we hold about you.
  • Right to rectification: You can request that inaccurate or incomplete data be corrected.
  • Right to erasure (right to be forgotten): Under certain conditions, you can request the deletion of your personal data.
  • Right to restriction of processing: You can request that we restrict the processing of your personal data.
  • Right to data portability: You can receive your personal data in a structured, commonly used, machine-readable format.
  • Right to withdraw consent: If we process your personal data based on your consent, you can withdraw that consent at any time.
  • Right to object: You can object to the processing of your personal data at any time.
  • Right to lodge a complaint: You can lodge a complaint with a supervisory authority.

To exercise any of the above rights, please contact us at info@renew-xchange.com.

10 Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our data processing practices, business operations, or to comply with evolving legal and regulatory requirements. When we make any changes, the updated Privacy Notice will be posted on our website with a clearly indicated effective date.