Last update: 01 August 2025

Open Settle Privacy Notice (Privacy Notice) explains how we use personal data collected by us. Personal data is information that relates to you and may identify you as an individual. This Privacy Notice applies to the Open Mineral Group as detailed in section 1 below, where we are acting as a data controller; in other words, where we determine the purposes and means of the processing of your personal data (excluding employees, non-employee workers, and job applicants to whom a separate privacy notice applies).

We do not have to receive your acceptance of this Privacy Notice, but if we need to receive your consent before using your personal data, we will explain the purpose of such use. You can withdraw your consent at any time by contacting us (see section 1 below).

Our website may contain links to websites or services not controlled by us (third-party services). Such third-party services are provided by other persons (third parties), and their personal data processing practices may differ from ours; we encourage you to read the privacy notices of such third parties to be aware of how they use personal data.

If you have any questions or concerns about our use of your personal data, feel free to contact us at:

📧 data.privacy@openmineral.com

‍

1. Who we are and how you can contact us or relevant authorities

‍

Who we are

Open Mineral Group is made up of Open Mineral AG and all associated group companies. Where this Privacy Notice refers to Open Settle, we, us, or our, this means the particular company that is the controller of your personal data. For the management of the Open Settle website, the controller of your data is Open Mineral AG, registered at Lindenstrasse 4, 6340 Baar, Switzerland.

‍

How to contact us

• By email: data.privacy@openmineral.com
• By post: Open Mineral AG, Lindenstrasse 4, 6340 Baar, Switzerland

If we do not satisfactorily answer your questions, you can contact relevant data protection authorities: the Federal Data Protection and Information Commissioner (FDPIC) or your local data protection authority.

👉 FDPIC contact: https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt.html

‍

‍

2. Information we may collect about you

‍

2.1. Directly from you

When you make inquiries about or purchase our services, subscribe to our newsletters, or otherwise liaise with us, we may collect:

• Name, surname
• Phone number, email, address, billing address
• Financial and compliance-related info (e.g. ID or passport copy)
• Any information from correspondence, contacts, and interactions with us

‍

2.2. Automatically

• Technical information: IP address, browser type, time zone, OS, URLs, clickstream, response times, errors, length of visits.
• Cookies: first-party and third-party cookies for performance, ads, security, user experience. Details available here.

‍

2.3. From other sources

Service providers, clients, partners, or public sources (registers, media, social media).

‍

2.4. Sensitive information

We do not generally process special categories (ethnicity, religion, health, etc.).

‍

2.5. Children

Our services are not intended for individuals under legal age.

‍

‍

3. Purposes and legal bases of processing

‍

3.1. Running our services

Registration, authentication, fraud prevention, recordkeeping.

Legal basis: legitimate interest; legal requirements

‍

3.2. Improving our services

Testing features, analytics, optimisation.

Legal basis: legitimate interest

‍

3.3. Performing our agreements

Transactions, account management, invoicing.

Legal basis: contract

‍

3.4. Customer support

Answering inquiries, bug fixing.

Legal basis: contract; legitimate interest

‍

3.5. Newsletters and communication

Emails about events, products, services.

Legal basis: legitimate interest; consent

‍

3.6. Other reasons

Legal compliance or specific consent requests.

Legal basis: consent; legal requirements

‍

3.7. Summary of legal bases

• Contract – fulfil obligations
• Legitimate interest – security, fraud prevention
• Legal requirements – tax, records, law
• Consent – you may withdraw anytime

‍

4. Providing your personal data to third parties

‍

We may share your data with:

• Service providers (IT, CRM, payment, audit, postal services)
• Other partners (law firms, insurance, banks, auditors)
• Within our group of companies
• During business transitions (mergers, acquisitions, sales)
• When legally required

‍

5. Where, when, and how we store data

‍

5.1. Place

Data may be stored in the EEA, UK, Switzerland, US, Chile, Peru, Colombia, China, Hong Kong, UAE, etc. Adequacy or EU SCCs are used for compliance.

‍

5.2. Duration

We retain data as long as necessary or legally required. Minimal info may be kept to resolve disputes or meet obligations.

‍

5.3. Security

Servers in controlled facilities, encryption, pseudonymisation.

‍

‍

6. Your rights

‍

6.1. Data subject rights

You may have rights to:

• Access your data
• Rectify inaccurate data
• Object to processing
• Request erasure
• Restrict processing
• Data portability
• Withdraw consent

Also, you may complain to authorities if unsatisfied.

‍

6.2. Cookies

You can manage cookie preferences via the consent banner.

‍

6.3. Cookie management

Browsers allow blocking/deleting cookies individually.

‍

‍

7. Changes to this Privacy Notice

‍