Privacy notice
Version privacy-draft-0.1
Who is responsible
SokoNexus, operated by Lycias Zembe, YOUR 11 Rue Tavernier, Aubonne , 1170 , Switzerland, is responsible for the personal data described here. Contact for all data-protection questions and requests: lyciasz@sokonexus.com.
What we collect and why
- Pilot applications: your name, work email, organisation, country, role and message, so we can reply about the pilot.
- Accounts: name, email and a securely hashed password, so you can sign in. Sessions use a cookie that expires after 7 days.
- Organisation profiles and documents: business information and evidence you upload, so reviewers can check it and, only with your consent, show it to matched buyers.
- Security records: an audit log of important actions and a one-way hash of your network address, to prevent abuse.
Legal basis
We process data to take steps you request (applications, accounts, matching), with your consent where we ask for it (sharing your profile with buyers), and for our legitimate interest in keeping the service secure. We aim to meet the Swiss Federal Act on Data Protection and, where it applies, the EU General Data Protection Regulation.
Who can see your data
Members of your organisation and SokoNexus reviewers. Buyers see a supplier only after the supplier consents and a reviewer approves a match. Our hosting and email providers process data on our behalf under written agreements. We do not sell personal data.
How long we keep it
Pilot applications: up to 24 months after our last contact. Accounts and organisation records: while the account is active, then deleted or anonymised, except where the law requires us to keep records longer.
Your rights
You may ask to see, correct, export or delete your personal data, and withdraw consent at any time. Withdrawing consent stops future sharing but does not undo sharing that already happened. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local data-protection authority.
International transfers
The pilot involves organisations in Ghana, Kenya, Switzerland and the Netherlands. Where data moves between countries, we will use the safeguards the law requires; these will be listed here before launch.