1. Introduction

Nereva SA (“Nereva”, “we”, “us”, “our”), a company limited by shares under Swiss law, attaches fundamental importance to the protection, confidentiality and security of personal and operational data processed in connection with the use of its Software as a Service (SaaS) solution. This Privacy Policy aims to inform users in a complete, transparent and compliant manner, in accordance with the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR), where applicable, of the conditions under which Nereva collects, uses, stores, protects and shares data processed in the course of its activities.
Access to and use of the Services imply that users have read and accepted this Privacy Policy.

2. Scope of application

This Policy applies to all data processing operations carried out by Nereva relating in particular to:

users of the web platform and professional mobile applications,
representatives, employees and agents of professional customers,
partners, carriers and service providers using the Services,
visitors to the Nereva website.

It does not apply to services or platforms operated by third parties and accessible via external links, which are governed by their own privacy policies.

3. Definitions

Personal data: any information relating to an identified or identifiable natural person.
Operational data: data generated in the context of the professional use of the Services.
Processing: any operation performed on data, whether automated or not.

4. Role of Nereva with regard to data protection

In the context of operating the Services, Nereva acts as a data controller within the meaning of the applicable legislation for data processed for its own purposes. For certain operational data processed on behalf of its customers, Nereva may also act as a data processor, in accordance with the documented instructions of such customers.

5. Categories of data processed

5.1 Identification data

First name, last name, professional email address, telephone number, role, company.

5.2 Professional and operational data

Schedules, logistics flows, transport documents, photographs, documents, operation histories, traceability data.

5.3 Technical data

IP address, connection logs, device type, operating system, geolocation data where such functionality is enabled.

5.4 Billing data

Data necessary for managing licence billing, processed via secure service providers.

6. Data collection methods

Data are collected:

directly from users,
automatically through the use of the Services,
via authorised integrations or technical partners,
via mobile applications, subject to permissions granted.

7. Purposes of processing

Data are processed in order to:

provide, operate, maintain and improve the Services,
manage accounts, access rights and licences,
ensure planning, traceability and security of logistics operations,
prevent fraudulent use,
provide technical and customer support,
comply with legal and regulatory obligations.

8. Legal bases for processing

Depending on the case, processing is based on:

the performance of a contract,
compliance with legal obligations,
consent, where required,
Nereva’s legitimate interest, in particular with regard to security and service improvement.

9. Artificial intelligence and automated processing

Nereva integrates an artificial intelligence system called EVA, designed to assist users with logistics planning and optimisation.

Processing carried out by EVA:

relies exclusively on data provided by users,
constitutes decision-support assistance,
does not produce automated decisions having legal effects on individuals.

10. Data recipients and sharing

Data may be shared solely with:

technical and hosting service providers,
subcontractors acting on behalf of Nereva,
partners authorised by the user,
payment service providers,
authorities where required by law,
a third-party entity in the context of a restructuring, merger or acquisition.

Data are never sold.

11. Data hosting and security

Since the launch of the Nereva platform and as of the date of the latest update of this Policy, data have always been hosted on cloud computing infrastructures operated by Amazon Web Services (AWS), within data centres located in Switzerland. Nereva implements appropriate technical and organisational measures, including access controls, encryption, logging and internal security procedures.

12. International data transfers

Data are primarily processed in Switzerland.
In the event of a transfer to another country, Nereva undertakes to implement appropriate safeguards in accordance with applicable data protection legislation.

13. Cookies and similar technologies

Nereva uses cookies that are strictly necessary for the operation, security and improvement of the Services.

14. Data retention period

Data are retained for the duration of the contractual relationship and are thereafter deleted, anonymised or retained where required by law.

15. Rights of data subjects

Data subjects have the rights of access, rectification, erasure, restriction, objection and withdrawal of consent, where applicable.

16. Exercising rights

Any request may be sent to privacy@nereva.com. Nereva endeavours to respond within a maximum period of thirty (30) days.

17. Complaints to a supervisory authority

Data subjects have the right to lodge a complaint with the competent data protection supervisory authority.

18. Confidentiality of credentials and user responsibility

Users are responsible for maintaining the confidentiality of their credentials and for any use of the Services carried out via their account.

19. Limitation of liability

Nereva implements reasonable measures to protect data but cannot guarantee absolute security. Nereva shall not be held liable for damage resulting from events beyond its control.

20. Amendments to the Privacy Policy

Nereva reserves the right to amend this Policy at any time. Continued use of the Services constitutes acceptance of the amendments.

21. Entirety of the Policy

This Policy constitutes the entirety of Nereva’s commitments regarding data protection.

22. Independence from contractual documents

This Privacy Policy is legally independent from the Terms and Conditions of Use, which remain applicable to contractual matters.

23. Governing language

The French version shall prevail.

24. Contact

Nereva SA
Rue de Rive 22D
CH-1260 Nyon – Switzerland
privacy@nereva.com

Legal notice

Privacy policy