Privacy notice for the EUDR check

Last updated [date of publication]

Who is responsible

Cnxion Customs and Logistics AB, org. no. 559468-7641, Bräcke Ödsmål 2, 457 41 Fjällbacka, Sweden, is responsible for the personal data described here. Contact us about privacy at support@cnxion.io.

What we collect

• The details you enter in the form: name, work email address, company, job title (if you give it) and country.
• Your answers to the questions about your company's products, supply chain and EUDR preparation.
• Whether you agreed to receive marketing emails, with the wording you agreed to and when.
• Technical data needed to protect the form against abuse: your IP address and the result of the security check.

Why we use it, and on what legal basis

• To send you the checklist you asked for and record that you asked for it. Legal basis: steps taken at your request (GDPR article 6(1)(b)).
• To follow up on your request, for example by contacting you about EUDR compliance and how CNXION can help. Legal basis: our legitimate interest in following up on a business enquiry (article 6(1)(f)). You can object at any time.
• To send you marketing emails, only if you ticked the consent box. Legal basis: your consent (article 6(1)(a)). You can withdraw it at any time through the unsubscribe link in each email.
• To protect the form against spam and abuse. Legal basis: our legitimate interest in keeping the service secure (article 6(1)(f)).

Who processes the data for us

• Microsoft (Azure): hosting of this website and our server.
• Twilio SendGrid: sending the checklist email.
• Cloudflare (Turnstile): checking that the form is filled in by a person, not a bot.
• HubSpot: our customer relationship management system, where your request is stored.
• Datadog: technical logs of our server, used to find and fix errors. They contain no personal data, except when your request could not be completed: then the details you entered are logged so that we can still complete it.

These providers process the data on our behalf under data processing agreements. Some of them are based in the United States or may access data from there. Such transfers are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses. [Check that each provider's current certification or clauses cover this before publishing.]

How long we keep it

• Your request and answers: up to 12 months after your last contact with us, unless you become a customer or give consent to marketing.
• Marketing consent: until you withdraw it.
• Technical security data and server logs: up to 90 days.

Cookies and browser storage

This website does not set cookies and does not use tracking or analytics.

While you take the EUDR check, your answers and the question you are on are kept in your browser's session storage, so reloading the page does not lose them. This is needed for the check you asked for, so it does not require your consent. Your name and email address are never stored this way. The stored answers are deleted when you close the tab, and as soon as you have requested your checklist.

The Cloudflare security check processes information about your browser and device to tell people from bots. [Check in the browser whether the Cloudflare check stores anything, and describe it here before publishing.]

Your rights

You have the right to access your personal data and to have it corrected or deleted. You can also ask us to restrict how we use it, ask for a copy in a portable format, and object to our use of it. You can always object to direct marketing, and we will then stop. To use your rights, email support@cnxion.io.

If you think we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or to the data protection authority where you live or work.