Definitions
(a) “Contracting Customer” means the entity that has a paid subscription with Coolset for the relevant use of the Platform. (b) “Supply Chain” means, in relation to a specific order or material flow, the Contracting Customer and any entities it invites to the Platform, including upstream suppliers and downstream customers, and any further upstream entities invited in accordance with these Terms. (c) “Supply Chain Member” means any entity within the Supply Chain other than the Contracting Customer. (d) “Upstream Member” or “Supplier” means a Supply Chain Member that is invited to submit data in response to a Platform request. (e) “Downstream Member” means a Supply Chain Member that is invited by the Contracting Customer solely to receive or view compliance-related data shared through the Platform and that does not submit data or send data requests through the Platform.(f) “Requesting Entity” means the Contracting Customer or an Upstream Member that sends a data request through the Platform for a specific order or material flow.
Section 1. Acceptance of Terms
1.1 Account creation. By creating an account, accessing the Platform, submitting data, or viewing data shared through the Platform, the Supply Chain Member agrees to these Terms. Supplier may invite their own suppliers to respond to a request. Each invitee becomes part of the relevant Supply chain and is bound by these Terms when they create an account or submit data. If Supplier invites others, Supplier is the Requesting Entity for that onward request.
1.2 Scope. The Platform is provided to enable Contracting Customers to collect, manage, and share supply-chain-related data required for compliance with applicable sustainability and trade regulations, including without limitation the European Union Deforestation Regulation (“EUDR”) and the Carbon Border Adjustment Mechanism (“CBAM”). By creating an account, Supplier acknowledges that its provision of accurate and timely data is essential to enable the Contracting Customer's compliance.
Section 2. Access Rights
2.1 Upstream Members. Coolset grants each Upstream Member a limited, non-exclusive, non-transferable, revocable right to use the Platform solely to (i) submit data in response to requests from a Requesting Entity within the relevant Supply Chain, and (ii) where applicable, invite its own upstream suppliers to fulfill such requests.
2.2 Downstream Members. Coolset grants each Downstream Member a limited, non-exclusive, non-transferable, revocable right to access and view compliance-related data shared by the Contracting Customer through the Platform. Downstream Members have no right to request data, invite other entities, modify data, or access data beyond what is explicitly shared with them.
2.3 Rights. No rights are granted beyond those strictly necessary for the relevant order or material flow.
Section 3. Supplier Data
3.1 Ownership. Supplier retains ownership of all data, information, and materials it submits through the Platform (“Supplier Data”).
3.2 License. Supplier grants Coolset and the Customer a non-exclusive, worldwide, royalty-free license to host, process, transmit, and display Supplier Data for: (i) Contracting Customer’s compliance obligations, (ii) Platform operation and improvement, and (iii) aggregated and anonymized analyses. To the extent the Contracting Customer shares derived compliance outputs with a Downstream Member (“Shared Compliance Data”), the Supplier grants the Downstream Member a limited, non-exclusive, non-transferable license to use such Shared Compliance Data solely for its own internal compliance, reporting, or regulatory obligations. Downstream Members may not further disclose, reuse, or repurpose Shared Compliance Data except as required by law. Viewing of raw geolocation and legality documents is limited to the Contracting Customer; other members of the Supply chain may see status and validity results only.
3.3 Warranties. Supplier warrants that it has the rights to submit Supplier Data and that Supplier Data does not infringe third-party intellectual property or violate law. If Supplier acts as a Requesting Entity, it warrants it has a lawful basis to request the data and to invite further suppliers. Supplier will only request data that is necessary for the relevant order or material flow. The warranties in this Section 3.3 apply solely to Upstream Members submitting Supplier Data. Downstream Members make no representations or warranties regarding the accuracy, completeness, or legality of Supplier Data and acknowledge that such data is provided “as shared” by the Contracting Customer.
3.4 Retention Right. Coolset has no obligation to provide custom exports of Supplier Data beyond features made available in the Platform. Supplier remains responsible for retaining its own originals. Data handling is governed solely by the Contracting Customer’s license with Coolset.
3.5 Supply Chain. Supplier acknowledges that the Contracting Customer and other Supply Chain Members may rely on Supplier Data for regulatory compliance purposes. Supplier will provide complete, accurate, and timely data and will promptly correct or update Supplier Data if it becomes aware of any inaccuracy or omission.
3.6 Delegation and pass-through. Supplier is responsible for invitations issued from its account. Each invitee is independently bound by these Terms once onboarded, and Supplier will not be liable for their subsequent misuse.
Section 4. Intellectual Property
4.1 Coolset IP. All intellectual property rights in the Platform and related materials remain owned by Coolset.
4.2 Restrictions. Supplier may not copy, modify, reverse engineer, distribute, or create derivative works of the Platform.
4.3 Feedback. Any feedback provided by Supply Chain Member may be freely used by Coolset without restriction, including to improve features for the Contracting Customer and its Supply Chain.
Section 5. Confidentiality
5.1 Supplier will keep non-public information of Coolset or the Contracting Customer confidential. Disclosures to other members of the relevant Supply chain that are necessary to fulfill a request are permitted, subject to the visibility limits in Section 3.2.
5.2 Downstream Members shall treat all data accessed through the Platform as confidential and shall not disclose such data to any third party except as expressly permitted by the Contracting Customer or required by law.
5.2 Exceptions apply for information that is publicly known, independently developed, or required by law.
5.3 Confidentiality obligations survive termination of Supply Chain Member’s account.
Section 6. Acceptable Use
Supply Chain Member will not:
(a) use the Platform in violation of applicable laws;
(b) share login credentials;
(c) upload unlawful, malicious, or infringing content;
(d) attempt to disrupt or gain unauthorized access to the Platform;
(e) use the Platform to benchmark or develop competing services;
(f) provide access to Coolset competitors;
(g) misrepresent its role in a Supply Chain or send requests outside the relevant order or material flow;
(i) invite entities that are not part of the relevant Supply Chain for the order or material flow;
(j) Downstream Members shall not use data accessed through the Platform to negotiate commercial terms, exclude suppliers, benchmark suppliers beyond compliance purposes, or infer non-shared Supplier Data.
These obligations flow down directly from the Coolset Master Subscription Agreement (“MSA”).
Section 7. Privacy & Security
Supplier Data will be processed in accordance with Coolset’s Privacy Policy and the security and compliance standards published in the Trust Center. Supplier agrees not to upload personal data beyond what is strictly necessary for compliance purposes.
Section 8. Flow-Down Obligations from MSA
For each Supply Chain, the Contracting Customer’s MSA governs Coolset’s services to that Contracting Customer. These Terms apply to Supply Chain Member participation in that Supply chain. Supply Chain Member agrees to comply with the following obligations incorporated by reference from the Coolset MSA:
Section 9. Indemnification
9.1 Each Upstream Member (Supplier) will indemnify, defend, and hold harmless Coolset, the Contracting Customer, and any applicable Requesting Entity from and against any third-party claims, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of or relating to:
(a) Supplier Data infringing, misappropriating, or otherwise violating any third-party intellectual property, proprietary, or other rights;
(b) the Upstream Member’s breach of these Terms, including any representations or warranties made herein;
(c) the Upstream Member’s violation of applicable law; or
(d) any invitations, data requests, or onward sharing initiated by the Upstream Member as a Requesting Entity, including claims that the Upstream Member lacked authority to request, submit, or share data, or requested data beyond what was necessary for the relevant order or material flow.
9.2 Each Downstream Member will indemnify, defend, and hold harmless Coolset, the Contracting Customer, and relevant Supply Chain Members from and against any third-party claims, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of or relating to:
(a) the Downstream Member’s misuse of Shared Compliance Data, including use beyond permitted compliance or reporting purposes;
(b) unauthorized disclosure or onward sharing of Shared Compliance Data;
(c) the Downstream Member’s breach of these Terms; or
(d) the Downstream Member’s violation of applicable law in connection with its access to or use of the Platform or Shared Compliance Data.
For clarity, Downstream Members do not indemnify any party for the accuracy, completeness, or legality of Supplier Data submitted by Upstream Members.
9.3 The indemnified party will promptly notify the indemnifying party of any claim subject to indemnification under this Section 9, provided that failure to give prompt notice will not relieve the indemnifying party of its obligations except to the extent materially prejudiced.
The indemnifying party will have sole control over the defense and settlement of the claim, provided that no settlement may impose any liability, admission of wrongdoing, or obligation on an indemnified party without its prior written consent (not to be unreasonably withheld).
Section 10. Liability
10.1 Disclaimer. The Platform is provided “as is” for Supply Chain Member's access.
10.2 Limitation. To the maximum extent permitted by law, Coolset disclaims liability to Supply Chain Member for indirect, incidental, or consequential damages.
10.3 Nothing limits liability for gross negligence, willful misconduct, or liability that cannot be excluded under law.
11. Termination
Coolset may suspend or terminate Supply Chain Member's access at any time, including to protect the integrity of the Platform, for breach of these Terms, or at the request of the Contracting Customer. Upon termination, Supply Chain Member Data may be deleted or retained as required by Contracting Customer agreements and applicable law.
Upon termination of a Downstream Member’s access, all rights to view or access Shared Compliance Data immediately cease, subject to mandatory legal retention requirements.
12. Governing Law & Jurisdiction
These Terms are governed by the laws of the Netherlands. Any disputes shall be subject to the exclusive jurisdiction of the competent courts in Amsterdam, the Netherlands.