Traders of Environmental Progress
STX Group is a global environmental commodities trader offering physical and financial solutions across compliance and voluntary systems for energy, fuels, gas and carbon markets.
Vertis Environmental Finance Ltd (“data controller” or “Vertis”), in accordance with Articles 13, 14 and 26 of the Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“General Data Protection Regulation” or “GDPR”), hereby provides information on the processing personal data in the context of organising and holding webinars.
Identity and contact details of the data controller
Name of the controller: Vertis Environmental Finance Ltd.
Seat of the controller: 1124 Budapest, Csörsz utca 45., Hungary
Email: privacy@vertis.com
Data protection officer contact: vertis@dataprotection.eu
Purpose of the processing
Vertis is organising and holding the webinar You are registering at (hereinafter the “Webinar”), with the aim of providing professional content in relation to environmental products and market updates to persons interested in it.
For registering participants accepting the invitation, the data controller sends a form to record the personal data necessary for ensuring the participation.
The purpose of the data processing is therefore the proper organisation of the Webinar.
Legal basis for the processing
The legal basis of the data processing is the legitimate interest of Vertis in holding the Webinar.
Provision of your personal data is not a statutory or contractual requirement in any case, including that it is not necessary to enter into a contract with you, and consequently, you are not obliged to provide the personal data requested at registration to the Webinar, however it may be necessary for ensuring your participation at the Webinar.
Personal data processed
For the above purposes, the data controller is processing the following personal data of the participant:
The period for which the personal data will be stored
Personal data collected explicitly for the organisation of the Webinar will only be stored until the Webinar takes place. We may however retain your name and company data for any post-event duties, and for keeping internal marketing records of the Webinar organised, for three years after the event.
In case of representatives/traders/contact persons of data controller’s clients, the data controller will keep on storing (and processing for other lawful purposes) the name, company, business contact data even after that period, for the data processing purposes relating to the client relationship. Information relating to such data processing is available at https://legal.vertis.com/api/document/169/get_document/.
Rights of the data subject
As a data subject, you can exercise, subject to the conditions as set out by the GDPR,
Recipients of the personal data
For processing the data input for its efficient recording in our own database, we use the services of Zapier, Inc., acting as data processor for us. See more details regarding their privacy terms at https://zapier.com/legal/data-privacy, and subprocessors involved at https://zapier.com/legal/subprocessors.
For data contained in electronic files, in internal communication or data recording processes we may use the data processing services of Microsoft Ireland Operations Limited or other IT service providers. Data of participants may be shared with our tied agents listed at https://legal.vertis.com/api/document/487/get_document/.
Data transfer to third countries / Automated decision making, including profiling
When using Zapier services, data transfer to the US occurs. Such third country data transfer is based on Standard Contractual Clauses (SCCs) as referenced in Zapier’s Data Processing Addendum, as well as on the fact that Zapier is a participant in the EU–U.S. Data Privacy Framework (DPF).
In addition, certain recipients (data processors) established within the European Economic Area may further transfer processed data to third countries, in the course of providing their global services. Details regarding these data transfers are set out in the respective privacy notices of these recipients as follows:
| Microsoft Ireland Operations Limited | According to the information published by Microsoft (https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA), the adequate protection of personal data is ensured by the application of the standard contractual clauses published by the European Commission, as well as by the fact that Microsoft is a participant in the EU–U.S. Data Privacy Framework (DPF). |
Automated decision making, including profiling, does not occur in the context of the processing.
The right to lodge a complaint
As a data subject, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. For a list of the data protection supervisory authorities, see https://edpb.europa.eu/about-edpb/about-edpb/members_en