Privacy Policy

In this privacy notice (the “Privacy Notice“) we, SOCAR Trading SA (hereinafter “SOCAR“, “we“, “us” or “our”), explain how we collect and process some personal data in the course of our business and in connection with our website <www.socartrading.com> (the “Website“) in particular. The Privacy Notice may not cover all of our data processing activities and may be superseded by specific information we provide for certain of our processing activities. In this Privacy Notice, the term “personal data” refers to any information that relate to an identified or identifiable individual in the meaning of applicable data protection laws.

If you provide us with personal data of other persons (e.g. about family members or work colleagues), it is your excusive responsibility to ensure that the person concerned is aware of this Privacy Notice and provide us with this personal data only if you are authorized to do so and if such personal data is accurate and up to date.

Who are we?

The party responsible as data controller for the processing of your personal data described in this Privacy Notice is SOCAR Trading SA, rue du Rhône 40, 1204 Geneva, Switzerland.

If you have any questions or requests relating to this Privacy Policy or to the processing of your personal data in connection with your use of the Website, please contact us at the following address:

SOCAR Trading SA, rue du Rhône 40, 1204 Geneva, Switzerland

e-mail: info@socartrading.com

What personal data do we process?

We primarily process personal data about our customers, potential customers, other business partners and private individuals, such as prospects and persons reaching out to us with general inquiries or further to a specific interest, or about users of our website.

We collect personal data directly from the persons concerned.

In addition to the data you have provided directly to us may typically include information from public registers, information relating to your position and professional activities, contact details (e.g. name, address, telephone number, e-mail address, date of birth), data relating to your use of our Website (IP address, MAC address of your smartphone or computer, information about your device and settings, cookies, date and time of your visits, sites and content consulted, applications used, referring website, location data).

Why do we process personal data?

In accordance with applicable law and where applicable, SOCAR may process personal data for the following purposes:

• provide and develop our products, processes, services, and websites (including but not limited to the Website), applications and other platforms on which we operate;
• assessment and processing of job applications from prospects;
• media and press monitoring;
• ensure proper conduct of our business operations, including our computer systems, websites, apps and other applications;
• assert and defend our rights in litigation and legal proceedings.

Do we use cookies, tracking or similar technologies to monitor our Website?

This Website uses cookies and similar technologies to remember your browser, device, browsing activity and preferences. They help enhance user experience on the Website and may enable personalized content or targeted advertising.

For more details on the cookies and other similar technologies we may use, please refer to our cookie banner on our Website.

Do we share your personal data?

In the course of our business activities and in accordance with the purposes described in section 3 above, we may transfer personal data to third parties, insofar as such transfer is authorized and we deem it appropriate, so that these third parties may process the data on our behalf or, as the case may be, for their own purposes. In particular, the following categories of data recipients (“recipients “) may be receive some personal data from us:

• our service providers and subcontractors, which can be affiliates of the SOCAR group or external service providers (such as customer service centres, HR and employment service providers, credit rating agencies, background screening agencies);
• information technology service providers (for telecommunications, data storage and hosting and IT security services purposes in particular);
• marketing and public relationship agencies;
• financial establishments and insurance companies or brokers;
• partners, suppliers and other business associates;
• legal and tax advisors as well as other professional advisors (including but not limited to auditors);
• national and foreign authorities or courts, as well as arbitral tribunals;
• the media;
• the public, including users of our Website and social media; and/or
• other parties involved in possible or pending legal proceedings.

We take necessary measures to ensure that data recipients that process your personal data comply with applicable data protection legislation and protect your information, just as we do. We only disclose personal information that is necessary for them to provide the service they are delivering. Wherever possible, we will endeavour to anonymize your information or use aggregated, non-specific data sets.

Please feel free to contact us (contact details in section 1 above) if you would like further details about the recipients with whom we may share your information.

Where we choose to outsource certain services to carefully selected recipients, we take precautions regarding the practices of such recipient to ensure that your personal data is stored and processed in a lawful and secure manner. We will do our utmost to protect your personal data and will not sell it to third-party companies.

SOCAR is hosting personal data in Switzerland and processes personal data within Switzerland. However, while most recipients are located in Switzerland, others may be located abroad and process personal data in countries such as Germany, the Netherlands and the Czech Republic.

If we transfer personal data to a third country that does not provide for an adequate level of data protection, we will take necessary measures to guarantee an appropriate level of data protection of such personal data despite the data transfer to such third country. Such measures may typically include implementation of binding corporate rules or standard contractual clauses, in each case as approved by the competent supervision authority. We may also rely on statutory derogations such as your consent, contract necessity, the recognition, safeguarding or exercise of rights, an overriding public interest, personal data made public without objection and/or the protection of the integrity of the data subjects.

How long do we keep your personal data?

In principle, we only process and store your personal data for as long as necessary to meet the purposes described in section 3 hereof. As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymized as far as possible. As a general rule, operational data (e.g. system logs) are stored for a shorter period, up to a maximum of twelve months.

Please note that we may retain relevant personal data for a longer period if we are required to (e.g. due to legal or contractual obligations for retention and documentation purposes) or if we have a legitimate interest in doing so (e.g. for evidential purposes in order to assert, exercise or defend our rights). In any event, personal data will not be kept for longer than legally permitted.

How do we protect personal data?

We take appropriate technical and organizational measures in order to avoid accidental or unlawful loss, deletion, destruction or modification or unauthorized disclosure or access to personal data and to protect their confidentiality, integrity, availability and traceability, such as by means of internal regulations, training, IT and network security solutions, physical and logical access controls and restrictions, encryption of data carriers and transmissions and pseudonymization.

Third party links

The website published at www.socartrading.com  includes hypertext links leading off-site to other third party websites or environments. SOCAR Trading SA is not the owner or manager of these websites, and cannot supervise their contents. SOCAR Trading SA therefore assumes no responsibility for the contents of these third party websites and environments, and for the information or any applications included therein, nor for any collection and subsequent processing of information or personal data details that may be collected via those third party websites and environments (such as through the use of automatic tracking mechanisms like cookies and other similar technologies methods).

Any public or privately owned website may include a link to www.socartrading.com  without prior specific authorization of SOCAR Trading SA, under the following conditions:

1. The webpages of the website socartrading.com must not be included for presentation or in any other way copied, implied, represented or reproduced within the webpages (frame) of another such public or privately owned website; and
2. Only the main URL for the home page of the website www.socartrading.com  must be used (no linking to specific webpages within the website)

What are your rights?

In accordance with and within the limits of applicable law, you may exercise your statutory rights to access, rectify, erase or request portability of your personal data, as well as to limit or object to its processing.

It is important that your personal data processed by SOCAR is accurate and up-to-date. It is your responsibility to promptly inform us of any changes to personal data that you have provided us, as well as of any inaccuracies that you may have identified.

Please also note that exercising these rights may conflict with your contractual obligations, as applicable, which may result in consequences such as early termination of the contract or costs. If this is the case, we will inform you in advance, unless this has already been contractually stipulated.

As a general rule, the exercise of these rights presupposes that you can prove your identity (e.g. by producing a copy of your identity papers, if your identity is unclear or cannot be verified in any other way). To exercise these rights, please contact us at the addresses given in section 1 above.

In addition, any data subject may assert his or her rights before a court or lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

Changes to this Privacy Notice

We may amend this Privacy Notice at any time and without prior notice. The current version published on our Website is authoritative. If the Privacy Notice forms part of an agreement with you, we will inform you of any changes by e-mail or other appropriate means.