Privacy policy

Last updated: 27 May 2024

1. Introduction

This Privacy Notice explains what you can expect from us and what we need from you in relation to your personal data. The data controller is Jord. AB at Hospitalsgatan 11,
532 40 Skara, Västra Götalands län, Sweden. Our organization number is 559113-3672. We have appointed a Data Protection Officer (“DPO”) to oversee compliance with this Privacy Notice. If you have any questions about how we protect or use your data, please email our DPO at [email protected].

Jord. AB (“Jord” or “we”, “our”, “us”) provides carbon credits and solid biofuels (“Services”). This notice sets out how we collect, use and disclose your data (“Data”) during your interactions with Jord. In this privacy policy, we sometimes refer to “you”. “You” may be a visitor to one of our websites (“Visitor”), a customer of one or more of our Services (“Customer”), have signed up to a newsletter or expressed interest in Jord and/or the Services, or you may be involved with an environmental project which you have discussed with us. This policy does not apply to third-party websites, products, or services even if they link to, or from, our website or Services, and you should consider the privacy practices of those third-parties carefully. If you object to the practices described in this policy, you should (a) remove cookies from your computer after leaving our website, and (b) discontinue your use of our website or Services. We may change this Privacy Notice from time to time. We will provide you with an updated copy of this notice as soon as reasonably practical. We encourage you to retain and review the Privacy Notice to stay informed about our information practices and the ways you can help protect your privacy.

2. How we handle your data

We receive Data from Visitors to our website, Customers using our Services, those expressing interest in Jord and/or our Services, and those discussing environmental projects with us. The collection and use of Data are crucial to providing our Services. Generally, Data can be categorized into data that directly identifies you individually (“Personal Information”) and data associated with your activities (“Activity Information”).

3. Collecting Personal Information

You may have to, be requested to, or otherwise choose to provide us with Personal Information to interact with us or to sign up for, or make use of, our Services. This data may include the following:

Name;
Business email address;
Job title;
Employer information;
Phone number;
Any billing or delivery address provided;
Username or similar identifier; and
Profile Data including your activity in the carbon markets, interests, preferences, feedback, and survey responses.

We may collect Personal Information about you from other sources. For example, your job title and employer information from publicly available sources such as LinkedIn or from your email signature.

4. Collecting Activity Information

We also collect certain Activity Information in the course of your use of our Services or interactions with us. For example, we may collect:

Recordings of calls in which you participate;
Usage data including information about how you use our website, products, and Services;
Marketing and communications data including your preferences in receiving marketing from us and our third parties and your communication preferences;
Information about your visit, including the full URL clickstream to, through and from our websites (including date and time); page response times, download errors, length of visits to certain pages, page interaction information, methods used to browse away from the page; and
Technical data including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

Our website also uses cookies to distinguish you from other users of our websites. This helps us to provide you with a pleasant experience when you use our websites and allows us to improve our websites. For more information about our cookies, please see our cookie policy.

5. Data Use

We will only use your Data when the law allows us to. Most commonly, we will use your Data in the following circumstances: (a) where we need to perform the contract we are about to enter into or have entered into with you; (b) where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; and (c) where we need to comply with a legal obligation. Specifically, we use your Data in the following ways:

To register you as a new customer
To administer our contract with you, if you are a customer (for example, contacting you to discuss an invoice or a user management query)
To manage our relationship with you which will include: some text
- Discussing your interest in and/or use of our Services with us
- Notifying you about changes to our terms or privacy policy
- Asking you to leave a review or take a survey
To enable you to partake in a prize draw, competition or complete a survey
To administer and protect our business and websites (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
To deliver relevant website or newsletter content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you
To use data analytics to improve our website, products/Services, marketing, customer relationships and experiences
To make suggestions and recommendations to you about events, goods or Services that may be of interest to you

Jord will only use your Data for marketing and promotional purposes if you provide your Data for such uses, and you can withdraw this permission at any time. You have the right to ask us not to contact you for marketing purposes by either unsubscribing in the footer of a marketing email from us, updating your preferences in our preference management center or by contacting us at [email protected]. If you do not provide certain information to us when requested, we may not be able to perform the contract we have entered into with you (such as creating log-ins for you or receiving payment from you) or we may be prevented from providing the services that you have requested (for example, delivering a newsletter or setting up a sales call).

6. Data sharing

We may share Data where required by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so.

Jord may share your Personal Information and Activity Information with:

Jord Group Affiliates. We share Data with members of the Jord Group (i.e., entities that are under common control of Jord) to help us with things like customer relationship management and business administration.
Jord Service Providers. We share Data with trusted service providers to help us with things like customer relationship management, website hosting, invoicing, IT services, or email delivery.
Successors-in-Interest. We will share Data with third parties in the event of any actual or potential reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings); and
Safety, Legal Purposes and Law Enforcement. We use and disclose Data as we believe necessary: (i) under applicable law, regulations or payment method rules; (ii) to enforce our terms and conditions; (iii) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (iv) to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include authorities outside your country of residence.

7. How We Protect Your Data

All information you provide to us is stored on our secure servers. We take reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. If you feel your Data has been compromised in any way, please contact us immediately. We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

8. Your Rights UK/EU Related Rights

If you are based in the UK or EU, the following information applies to your Data that we have processed or collected:

Purposes of processing and legal basis for processing: As explained above, we process Data in various ways. We process your Data on the following legal bases: (1) with your consent; (2) as necessary to perform our contract with you; (3) as necessary for our legitimate interests where those interests do not override your fundamental rights and freedom related to data privacy; and (4) as necessary to comply with our legal or regulatory obligations.

Right to lodge a complaint: You have the right to lodge a complaint about our data collection and processing actions with the supervisory authority concerned. Contact details for data protection authorities are available below. Data that we collect may be transferred to, and stored and processed in, the United States or any other country in which we or our affiliates, subcontractors, or partners maintain facilities. The laws in the U.S. and other countries regarding personal information may be different from the laws of your state or country. Any such transfers will comply with safeguards as required by relevant law. By submitting your Data, you agree to this transfer, storing or processing.

Individual Rights: You are entitled to certain rights under the UK General Data Protection Regulation (or any such similar legislation in the EU) (“GDPR”) over Data that we have processed or collected. We have listed below how these rights operate in the context of your employment or contractual relationship with us. You may contact us at [email protected] to request the exercise of these rights. We will make every effort to respond promptly, and in any case within 30 days of your request. We may take measures to verify your identity before processing a request.

Your right of access. Upon request, Jord will provide you with information about whether we hold any of your Data. We will also provide access to one copy of your Data that we may hold free of charge.
Your right of rectification. You may request to review, delete or update your Data to ensure it is accurate.
Your right to be forgotten. You may request to have us erase your Data that we may hold if the data is no longer necessary for the purpose for which it was collected, you withdraw consent and no other legal basis for processing exists, or you believe your fundamental rights to data privacy and protection outweigh our legitimate interest in continuing the processing. We will inform you which of your Data may be erased without violating our legal or regulatory obligations.
Your right to restrict or object to our processing. You have the right to ask us not to process your Data if we are processing your data based on legitimate interests or the performance of a task in the public interest as an exercise of official authority (including profiling); using your data for direct marketing (including profiling); or processing your Personal Information for purposes of scientific or historical research and statistics. You also have the right to ask us not to process your Data while a rectification request is pending.
Your right to data portability. You have the right to request a copy of your Data.
Your rights related to automated decision making and profiling. Jord does not subject you to significant solely automated decisions. However, if you disagree with our decisions with respect to you you may request a review by contacting us.

California Related Rights

Residents of California are entitled to certain rights under the California Consumer Privacy Act (“CCPA”):

Your right of access. You may request access to the Personal Information that we collected and maintained about you (along with information regarding its use and disclosure) over the past twelve (12) months upon appropriate verification. You may only make such requests twice (2) per every twelve (12) months.
Your right of deletion. You have the right to request that we delete Personal Information collected and maintained about you, subject to certain exceptions. Once your request is verified and we have determined that we are required to delete that information in accordance with applicable law, we will delete your Personal Information accordingly. Your request to delete your Personal Information may be denied if it is necessary for us to retain your information under one or more of the exceptions listed in the CCPA. Please note that a record of your deletion request may be kept pursuant to our legal obligations.
“Do Not Sell My Personal Information” You have the right to opt out of “sales” of Personal Information (as such term “sell” is defined under the CCPA). We do not “sell” Personal Information. We do not have actual knowledge of any “sale” of Personal Information of any individual under the age of sixteen (16).
Right against discrimination. You have a right to not receive discriminatory treatment for the exercise of your rights under the CCPA.

How to Exercise Your Rights

You can make exercise your rights pursuant to this section by contacting us at [email protected] We will make every effort to respond promptly, and in any case within 30 days of your request. Only you, or a person that you authorize to act on your behalf, may make a request related to your Personal Information. We must take measures to verify your identity before processing your request. We will ask you to provide sufficient information for verification purposes (including your first name, last name, middle initial, email address, phone number and address), and we may not process your request if we are unable to verify your identity. We will use this information only to verify your request. We will also need to verify the authority of any person acting on your behalf, such as by ensuring they have the proper documentation to validate such authority.

9. Changes to this Policy

Any changes we may make to our Privacy Notice will be notified to you as soon as reasonably practicable.