GreenAnt Privacy & Grievance Policies

GREENANT PRIVACY POLICY

Effective Date: June 30th, 2025

GreenAnt B.V. ("GreenAnt", "we", "our", or "us") is committed to protecting the privacy and personal data of our
clients, users, partners, and website visitors ("you"). This Privacy Policy outlines how we collect, use, share, and
protect your information in compliance with the General Data Protection Regulation (GDPR) and applicable data
protection laws.

1. Who We Are

GreenAnt B.V. is a climate risk analysis company based in the Netherlands, providing services such as
environmental monitoring, flood risk analysis, and land use change assessments through satellite data and artificial
intelligence.

For data protection queries, you can contact us at:

Email: info @greenant.farm

Address:Fluwelen Burgwal 58, 2511 CJ Den Haag

DPO Contact: Mario Edoardo Simmaco

2. What Data We Collect

We may collect the following categories of personal data:

  • Identification data: name, email, phone number, company name

  • User activity: IP address, browser type, device identifiers, usage logs, location data

  • Account data: login credentials, preferences, service usage history

  • Communications: emails, feedback, support requests

We do not knowingly collect data on children under the age of 16.

3. How We Collect Your Data

We collect data:

  • Directly from you (e.g., when signing up, contacting us, or completing a form)

  • Automatically through cookies and analytics tools on our websites

  • Through our services if you are a client or user of our platform

4. Legal Bases for Processing

We process your data based on one or more of the following legal bases:

  • Your consent

  • The performance of a contract

  • Our legitimate interests (e.g. service improvement, security)

  • Compliance with a legal obligation

5. Why We Use Your Data

We use your personal data to:

  • Provide and manage our services

  • Communicate with you (e.g., updates, offers, responses to inquiries)

  • Improve and personalize our platform

  • Ensure security and detect fraud or misuse

  • Comply with legal obligations

6. Sharing of Your Data

We may share your data with:

  • Our service providers (e.g., cloud hosting, analytics, CRM tools)

  • Legal authorities when required

  • Affiliates and subsidiaries under strict data protection controls

We do not sell your personal data to third parties.

7. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards such as:

  • Standard Contractual Clauses (SCCs)

  • Transfers to countries with adequate protection under GDPR

8. Data Retention

We retain your data only as long as necessary for the purposes stated in this policy, unless a longer retention is
required by law.

9. Your Rights

Under GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request deletion ("right to be forgotten")

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with the Dutch Data Protection Authority

To exercise your rights, email us at: info@greenant.farm

10. Cookies and Analytics

We use cookies and similar technologies for functionality and analytics. You can manage your cookie preferences
through your browser settings.

11. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access,
alteration, disclosure, or destruction.

12. Changes to This Policy

We may update this policy from time to time. We encourage you to review it periodically. Significant changes will be
communicated directly.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:info@greenant.farm

GREENANT GDPR POLICY

Last Updated: June 30th, 2025

1. Personal Data

1.1 Data Controller

GreenAnt B.V. (“GreenAnt”) acts as the data controller for any personal data processed through the use of the
Desidera platform.

1.2 Types of Data Collected

In connection with your use of Desidera, we may collect and process the following categories of personal data:

  • Identification details (e.g., name, email, organization)

  • Login and authentication data

  • User interaction logs and preferences

  • Geolocation or project metadata that, when linked with user credentials, may qualify as personal data

1.3 Purpose and Legal Basis

Personal data is collected and processed to:

  • Provide you access to Desidera and its services

  • Administer user accounts

  • Communicate updates or respond to your inquiries

  • Analyze platform usage and improve performance

  • Our processing is based on the performance of our contractual obligations, legitimate interest, and, whereapplicable, your consent.

1.4 Data Sharing and Transfers

We do not sell your personal data. Data may be shared with service providers (e.g., cloud infrastructure, analytics)
under strict confidentiality and only for the purposes mentioned above. Where data is transferred outside the
European Economic Area (EEA), we apply appropriate safeguards such as Standard Contractual Clauses.

1.5 Retention and Security

Personal data is retained only as long as necessary to fulfill its purpose or comply with legal obligations. We
implement technical and organizational measures to protect your data against loss, misuse, or unauthorized
access.

1.6 Your Rights

As a data subject, you have rights under the GDPR including access, rectification, deletion, and data portability. To
exercise these rights, contact: info@greenant.farm

GREENANT THIRD PARTY GRIEVANCE POLICY

1. Purpose

At GreenAnt, we are committed to building transparent, respectful, and responsive relationships with all our
external stakeholders. This policy outlines how clients, partners, or other external parties can raise concerns or
grievances, along with how they will be handled.

2. How to Raise a Grievance

Grievances can be submitted in writing via email to: info@greenant.farm

Please include:

  • Your name and contact information

  • A clear description of the issue

  • Any relevant dates, documents, or communication

3. Response Process

  • Acknowledgement: We will acknowledge receipt of your grievance within 3 business days.

  • Review: A member of our leadership team will review your concern and may contact you for more information.

  • Resolution: We aim to resolve grievances within 10 business days. If more time is needed, we will inform you of
    the expected timeline.

  • Outcome: You will receive a written response outlining the outcome and any next steps.

4. Confidentiality

All grievances will be handled confidentially and with sensitivity. Information will only be shared on a need-to-know
basis.

5. Continuous Improvement

We view grievances as an opportunity to improve our services and relationships. All feedback is taken seriously
and used to help us do better.

6. Contact

If you have any questions about this policy, please contact us at info@greenant.farm or anya@greenant.farm.