Privacy policy.

01Controller

SkewCorp, Geneva, acts as controller within the meaning of Article 4(7) GDPR for all data collected on this site and in the course of relations with its institutional clients and partners.

For any request relating to personal data : dpo@skewcorp.com.

02Data collected

We collect the following categories of data :

Category	Source	Mandatory
Identity & professional contact details	Contact form, direct email	Yes
Role & affiliated entity	Voluntarily entered	Yes — accreditation check
Browsing metadata	Functional cookies (see cookie policy)	No
Authentication data	Partner area	Yes for that area
Written exchanges and briefing recordings	Institutional office	Depending on the nature of the relationship

No sensitive data within the meaning of Article 9 GDPR is collected by this site. Any pre-clearance checks carried out in the course of institutional relations fall under separate procedures, framed by the competent authorities of the jurisdictions concerned. Data arising from participation in the Skeworl# environments falls under a distinct framework, governed by participation charter 4.2, and is not processed by this site.

03Purposes of processing

Data is processed for the following purposes :

• Responding to requests for information sent by visitors.
• Handling requests for an institutional briefing and arranging appointments.
• Checking accreditation prior to technical demonstrations.
• Circulating our publications (Skew Outlook, Insights) to consenting recipients.
• Improving the quality of the site and the relevance of the content circulated.
• Meeting the legal, accounting and compliance obligations to which SkewCorp is subject.

04Legal bases

In accordance with Article 6 GDPR, the processing rests on :

• The legitimate interest of SkewCorp in conducting its institutional and commercial relations.
• The performance of a contract or of pre-contractual measures at the request of the data subject.
• Express consent for subscription to the publications and for canvassing.
• Compliance with legal obligations to which SkewCorp is subject (export compliance, anti-bribery measures, statutory archiving).

05Recipients

Data is accessible only to authorised staff of SkewCorp and of its European offices, strictly to the extent of their duties. No data is passed on to commercial third parties. Certain data may be disclosed to :

• The competent administrative or judicial authorities, upon lawful demand.
• The statutory auditors and mandated external auditors, in the course of their duties.
• The contractually bound technical providers (the Weave infrastructure, operated by SkewCorp).

06Transfers outside the EU

All data is hosted and processed within the European Economic Area and in Switzerland, jurisdictions benefiting from an adequacy decision under Article 45 GDPR. No transfer to a third-country jurisdiction not covered by such a decision is carried out.

07Retention period

Data	Active period	Statutory archiving
Contact not taken further	36 months	—
Briefing request handled	5 years	+ 5 years
Publication subscription	Until unsubscription	3 years
Contractual data	Term of the contract	10 years (accounting obligation)
Partner area authentication	Life of the account + 12 months	—

08Security

SkewCorp implements the appropriate technical and organisational measures to ensure a level of security suited to the risk. The information system runs on the Weave infrastructure and is tested by the ARIA 4.2.1 acceptance protocol. The chain of custody is tier-cryptographic, access is logged, and security incidents are the subject of notification procedures compliant with Article 33 GDPR.

09Your rights

In accordance with Articles 15 to 22 GDPR, you have the following rights :

• Access — to obtain confirmation that your data is processed and to receive a copy of it.
• Rectification — to correct inaccurate or incomplete data.
• Erasure — to request the deletion of your data, under the conditions provided for.
• Restriction — to restrict the processing in certain circumstances.
• Portability — to receive your data in a structured format.
• Objection — to object to processing based on legitimate interest.
• Post-mortem directives — to determine the fate of your data after your death (French law no. 2016-1321).

10Data Protection Officer

11Complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with the competent supervisory authority :

• Switzerland — Federal Data Protection and Information Commissioner (FDPIC), Bern.
• France — Commission nationale de l'informatique et des libertés (CNIL).
• Germany — Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI).
• European Union — European Data Protection Board (EDPB).