GDPR Statement

Although Petrair SA is established in Switzerland, we may process personal data of individuals located in the European Union or European Economic Area in the context of our international trading activities. Where the EU General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR") applies, we comply with its requirements.

1. Controller

Petrair SA, Rue du Marché 18, 1204 Geneva, Switzerland, acts as data controller for the personal data it processes. For any GDPR-related request, please contact sales@petrair.org.

2. Legal bases for processing

We rely on the following legal bases under Article 6 GDPR:

• Performance of a contract with the data subject or their employer (Art. 6(1)(b))
• Compliance with a legal obligation, including KYC, AML and sanctions screening (Art. 6(1)(c))
• Our legitimate interests in conducting and developing our business, where these are not overridden by the rights of the data subject (Art. 6(1)(f))
• Consent, where specifically requested (Art. 6(1)(a))

3. Rights of data subjects

Under the GDPR, you have the right to:

• Request access to your personal data
• Request rectification or erasure
• Request restriction of processing
• Object to processing based on legitimate interests
• Receive your data in a portable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with a competent supervisory authority in the EU/EEA

4. International transfers

Switzerland benefits from an adequacy decision of the European Commission. Where personal data is transferred from the EEA to Switzerland, it is therefore considered to be transferred to a country offering an adequate level of protection. For transfers to other jurisdictions, we rely on the appropriate safeguards provided by the GDPR, including Standard Contractual Clauses where required.

5. Retention

Personal data is kept only for as long as necessary in light of the purposes for which it was collected and applicable legal retention requirements, including those arising from anti-money laundering and accounting legislation.

6. Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in line with Article 32 GDPR.

7. Contact

To exercise any of your rights or for any question relating to the processing of your personal data, please contact us at sales@petrair.org.