The Company, as Controller, shall adhere to the GDPR principles as stipulated in Article 5(2) of the GDPR where the "Controller shall be responsible for, and be able to demonstrate, compliance with the principles." The Personal Data must be processed fairly and lawfully; be obtained only for specific and lawful matters; be adequate and up to date; not to be held for any longer than necessary; and be protected in appropriate ways.The Company shall be accountable and must disclose information held to the Data Subject when requested and shall not transfer Personal Data outside of the European Economic Area (EEA), unless that country or territory also ensures an "adequate" level of protection. The Processing of Data must be carried out in accordance with the rights of the Data Subjects.
Information provided by the Participant: when acquiring, holding and/or using the Token, using the Services, subscribing to the Company's updates, responding to a survey or when filling enquiry forms on the Website and when corresponding by phone, e-mail or other communication services, you may be asked to provide certain information. The information may include Personal Data such as name, address, e-mail address, phone number, financial and/or credit card information, cryptocurrency address, personal description, ID or Passport copy, date of birth, passport number, or other data which can be used for personal identification purposes and required for 'know your customer' that may be required to comply with applicable laws. Information, collected automatically by the Company: on each visit to the Website, the Company will automatically collect the following:
this includes, but is not limited to the Company partners, sub-contractors in technical, payment services, advertising networks, search information providers, credit reference agencies, or other third parties who may provide information, for the purpose of fulfilling the Services or to comply with legal requirements. The Company shall endeavour that these third parties are to provide the same level of data protection and that they shall only carry out their contractual obligations towards the Company or upon the instructions of the Company and not for any other purposes. In case of using a location-enabled device: the Company may collect location data or use various means to determine the location.
The Company may use your Personal Data when acquiring, holding and/or using the Token, to supply you with the Services required, to bill you and to contact you when required. The Company may also analyse the Personal Data provided to help in administering, supporting and improving the business, as per the following ways:
Your Personal Data may be processed only if you have unambiguously given your consent or, the processing is necessary for the performance of the Services you request or, for compliance with legal obligations as in the case of Anti Money Laundering and Terrorist Financing Regulations (AML/TF) or, pursuant the public interest or, requested in the exercise of official authority vested in the Company or a third party with whom the Personal Data is disclosed except where such interest is overridden by the interest to protect the fundamental rights and freedoms that arise from the right of privacy.As an individual you may exercise your right to access your Personal Data held about you by the Company by submitting your request in writing to the following email address: firstname.lastname@example.org
The Company shall at your request immediately rectify, block or erase your Personal Data that has not been processed according to the GDPR and Data Protection Act or processed unlawfully and where applicable proceed with notifying any third party about the measures undertaken. Although all reasonable efforts will be made to keep your information updated, you are kindly requested to inform us of any change referring to the Personal Data held by this Company. In any case if you consider that certain information about you is inaccurate, you may request rectification of such data.Provided that no such notification shall be implemented if it is shown to be impossible or it will entail a disproportionate effort on the part of the Company.
You have the right to receive, upon request, a copy of the Personal Data that you have provided to the Company in a structured, commonly used and machine-readable format and to transmit such data to another controller, for free. The Company shall endeavour to ensure that such requests are processed within one month for free, subject that this request is not excessive and does not affect the rights of other individuals' Personal Data.
Upon request, you have the right to have your Personal Data erased by the Company. The Company acting reasonably will take all necessary actions (including technical measures) to inform third-party data Processors to comply with the request unless your Personal Data needs to be retained to comply with legal obligations or court orders.
The Company may share the Participants' data with others as follows:
The Company protects information collected using physical, technical, and administrative security measures to reduce the risks of disclosure, unlawful processing, accidental loss, destruction, damage and unauthorized access. Should a security breach occur, the Company will use reasonable endeavours to try to fix it.
When sharing the Website, Services or other Company's information on social websites, this will enable the sharing of information with your contacts or the public, depending on the settings you establish with the entity that provides the social sharing feature. Service links to third party websites may be made available to you, and that are not owned or controlled by the Company. Please be aware that the Company is not responsible for the privacy practices of such websites. For more information about the purpose and scope of data collection and processing in connection with social sharing features and links to third party websites, the Company encourages you to visit the privacy policies of the entities that provide these features.Furthermore, you are advised to conduct yourself appropriately when engaging with the Company on social media or when sharing the Website, Services or other Company's information.
The Company will retain your Personal Data and that of visitors of the Website for a reasonable period or as long as the law requires. The Company will retain your data as long as needed for acquiring, holding or using the Token and/or for the provision of the Services.
When the Company receives requests to dispose of Personal Data records by Data Subjects, the Company shall ensure that these requests are handled within a reasonable time frame. The Company shall also strive in obtaining adequate disposal mechanisms to ensure no Personal Data is leaked outside of the Company.
When the Company learns of a suspected or actual Personal Data breach, the Company shall perform an internal investigation and take appropriate remedial measures in a timely manner. Where there is any risk to the rights and freedoms of Data Subjects, the Company will notify the relevant Supervisory Authorities without undue delay and, when possible, within 72 hours from when it learns of such breach. Data Subjects will be informed when the Personal Data breach is of a "high" level.
By participating in the Token Offer and/or using the Services, or otherwise providing information to the Company, you consent to the processing and transfer of information in accordance with Swiss law.
This document was updated on 26 March 2021 and is effective from that date.