ARTICLE 1. Definitions

1.1.    In addition to the definitions contained elsewhere in the text of this Policy, the following terms and expressions shall have the following meaning ascribed to them for use in this Policy:

"Service Provider" means NFT Stars, its respective past, present and future employees, officers, directors, contractors, consultants, attorneys, accountants, financial advisors, equity holders, suppliers, vendors, service providers, parent companies, subsidiaries, affiliates, agents, representatives, predecessors, successors and assigns. 

"Consent" has the meaning set out for this term in Article  5.1. hereof.

"Controller" or "controller responsible for the processing" means the natural or legal person, public authority, agency or another body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by EU legislation.

"Cookies" means a text file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.    Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed. Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies. For more information on managing cookies, please go to www.allaboutcookies.org, or visit www.youronlinechoices.com. 

"Data Subject" means any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.

"EU Persons" means Personal Data subjects who are in the European Union.

"GDPR" means Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

"Personal Data" means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. "Process", "Processed" and other similar terms shall be construed accordingly.

"Processor" means a natural or legal person, public authority, agency or another body which processes personal data on behalf of the controller.

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular, to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

"Recipient" means a natural or legal person, public authority, agency or another body to which the personal data is disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of that data by those public authorities shall be in compliance with the applicable data protection rules, according to the purposes of the processing.

"Restriction of processing" means the marking of stored personal data with the aim of limiting their processing in the future.

"Terms of Use" means the document describing the terms of use for the Website available at btcnext.io (as may be amended from time to time).

"User Account" means an account that may be provided to you by the Service Provider for the purpose of improving your experience at the Website and use of the Services, as well as obtaining access to specific additional products, utilities and offerings provided by the Service Provider.

ARTICLE 2. Applicability and Acceptance of Policy

2.1. This Policy defines the Personal Data, explains how Personal Data is used and Processed, and in instances when the Service Provider shares or permits collection of the Personal Data by the Service Provider or state authorities.

2.2. This Policy shall come into effect at the moment you first access the Website or commence use of any of the Services. By accessing, browsing or using the Website and/or any of the Services, you irrevocably and unconditionally accept and adhere to the provisions of this Policy without any exemptions, limitations and/or exclusions.

If you access the Website or use any of the Services on behalf of a business (whether registered or operating without registration), that business hereby accepts this Policy.

2.3. In the event you disagree with any provision of this Policy or would not like to provide your consent for Processing of your Personal Data, you shall cease using the Website or any of the Services immediately.

ARTICLE 3. Information about the Data Controller

3.1. The data controller of this Website is NFT Stars. Contact details: [email protected].

ARTICLE 4. Legal Grounds for Personal Data Processing

4.1. Processing of Personal Data is permitted only on the following legal grounds:

4.1.1. Consent to Personal Data Processing when the data subject has given Consent to the Processing of his or her Personal Data for one or more specific purposes;

4.1.2. contractual relationships, where Personal Data Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract;

4.1.3. controller's legal obligation, when Processing is necessary for compliance with a legal obligation to which the controller is subject;

4.1.4. vital interests protection, when Processing is necessary in order to protect the vital interests of the data subject or of another natural person;

4.1.5. public interest compliance, when Processing is necessary for the performance of a task carried out in the public’s interest or in the exercise of an official authority vested in the controller;

4.1.6. controller's legitimate interests, when Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of Personal Data, in particular where the data subject is a child.

4.2. We Process your Personal Data on the basis that it is:

4.2.1. necessary for the performance of a contract, therefore, where we have a contract with you, we will process your Personal Data in order to fulfill that contract (in particular, to provide you with the Services);

4.2.2. authorized by your Consent, which you give us as it is set out in Article 5 (Consent to Personal Data Processing) hereof;

4.2.3. necessary for compliance with our legal obligation, in particular, when we are obliged to respond to a court order or a regulator;

4.2.4. necessary for the performance of our legitimate interests, as it is described in more detailed in Article 4.3 hereof; or

4.2.5. permitted by applicable legislation, if the respective legal ground for Personal Data Processing is not mentioned in, or contradicts, the provisions of this Policy.

4.2.6. You are welcome to contact us for further details on the legal grounds that we rely on, in relation to any specific Processing of your Personal Data.

4.3. We Process the Personal Data for a number of legitimate interests, including to provide and improve the Services, administer our relationship with you and our business, for marketing and in order to exercise our rights and responsibilities. In particular, we Process the Personal Data to:

4.3.1. set up and administer your User Account, provide technical and customer support and training, verify your identity and send important account, subscription and Service information;

4.3.2. administer our relationship with you, our business and our third-party providers (e.g. to send invoices);

4.3.3. deliver and suggest tailored content such as news, research, reports and business information. We analyze the way you use our Services to make suggestions to you on the features or Services that we believe you will also be interested in and so that we can make our Services more user-friendly;

4.3.4. personalize your experience with our Services. We may retain your browsing and usage information to make your searches within our Services more relevant and use those insights to target advertising to you online on our Website;

4.3.5. share your Personal Data across our Services so that we can make all the Services we deliver to you more intuitive (e.g. rather than requiring you to enter the same data many times);
4.3.6. contact you in relation to and to conduct surveys or polls you choose to take part in and to analyze the data collected for market research purposes;

4.3.7. display information you choose to post, share, upload or make available in chat rooms, messaging services, community and event forums (including in community and event profiles) and for related collaboration, peer connection, games and information exchange;

4.3.8. conduct internal research and development and to improve, test and enhance the features and functions of our Services;

4.3.9. provide you with marketing materials as permitted by law;

4.3.10. meet our internal and external audit requirements, including our information security obligations;

4.3.11. exercise, protect and/or enforce our rights, privacy, safety, networks, systems and property, or those of other persons;

4.3.12. prevent, detect or investigate a crime, fraud or another breach of law or requirement;

4.3.13. prevent or detect any loss incurred by the Service Provider or third persons;

4.3.14. comply with requests from courts, law enforcement agencies, regulatory agencies and other public and government authorities, including where they are outside your country of residence;

4.3.15. defend the Service Provider from claims;

4.3.16. comply with laws and regulations that apply to us or third parties with whom we work.

Where we rely on legitimate interests as lawful ground for processing your Personal Data, we balance those interests against your interests, fundamental rights and freedoms. For more information on how this balancing exercise has been carried out, please contact us by sending an email to [email protected].
 

ARTICLE 5. Consent to Personal Data Processing

§1. EU Persons Consent to Personal Data Processing

5.1. If you are an EU Person and to Process your Personal Data we need to receive your consent, as it is prescribed by GDPR, we will process your Personal Data only in the case where we have received from you a freely given, specific, informed and unambiguous indication of your wishes by which you signify agreement to the processing of your Personal Data ("Consent").

5.2. You may give your consent by ticking a box when visiting the Website. In the case where you tick the respective box, you irrevocably and unconditionally consent and agree that the Service Provider shall be entitled to process your Personal Data as indicated by your Consent.

5.3. Your Consent covers all Processing activities with your Personal Data carried out for the same purpose or purposes. When the processing has multiple purposes, your Consent should be deemed given for all of them.

5.4. You have the right to withdraw your consent at any time. You can submit such a request by sending us an email to [email protected]. Your withdrawal of consent shall not affect the lawfulness of your Personal Data Processing based on consent before its withdrawal.

5.5. Except as required or enabled by law (including, for the avoidance of doubt, the laws of the member states of the European Union), we will not use or disclose your Personal Data for any purpose for which you refuse consent or later withdraw your Consent. If you withdraw Consent, you agree that in spite of this withdrawal, we may continue to use thee Personal Data previously provided to us to the extent that we are contractually or otherwise legally obliged to do so and to the extent necessary to enforce any contractual obligation you may have towards the Service Provider or in any other way permitted by law. You also understand that although you can use the Website for some purposes without providing your Personal Data, we need certain Personal Data, including data linked to payment or involving an ongoing relationship with the Service Provider or our partners. If you refuse to provide us with Personal Data we require or later withdraw your consent, we may no longer be able to provide you with certain Services or access to the Website.

§2. Non-EU Persons Consent to Personal Data Processing

5.6. If you are not an EU Person, by transferring to us your Personal Data via the Website or otherwise, you irrevocably and unconditionally consent and agree that the Service Provider shall be entitled to use your Personal Data in accordance with this Policy:

5.6.1. To Process in any manner, including to collect, store, use, disclose, share and transfer (including cross-border), your Personal Data so provided to us, as well as your Personal Data collected from your use of the Website and the Services (i.e. your Personal Data which we collect automatically and/or from other sources); and

5.6.2. to use cookies and web beacons (pixel tags) to collect your Personal Data and associate the Personal Data with your computer and web browser, as well as, in the event you access the Website and/or the Services logged in to your User Account, with your User Account.

ARTICLE 6. Collection of Personal Data

§1. General Provisions

6.1. The type of Personal Data we collect depends on how you are interacting with us and which Services you are purchasing or using. In many cases, you can choose whether or not to provide us with Personal Data but if you choose not to, you may not get full functionality from the Website or its additional Services.

6.2. When you visit the Website, you may provide us with the following types of Personal Data:

(i) Personal Data that you voluntarily disclose that is collected on an individual basis;

(ii) Personal Data collected automatically when you use the Website and its Services; and

(iii) Personal Data which we collect from sources other than the Website.

6.3. You may always refuse to supply your Personal Data, though this may prevent you from engaging in certain activities and/or obtaining certain Services.

6.4. The Website contains links to other third-party websites or apps that may collect Personal Data about you, including through cookies or other technologies. If you use our links to visit other websites or apps, you will exit the Website and this Policy will not apply to your use of and activity on those other websites. You should consult these other websites' or apps’ privacy policies as we have no control over them and are not responsible for any information that is submitted to or collected by these third parties.

§2. Personal Data You Provide to Us

6.5. In order to perform the Services and the functionality of the Website, we are entitled to ask you to provide the Service Provider with your Personal Data, including (but not limited to):

6.5.1. full name or the name of an entity you represent;

6.5.2. username password;

6.5.3. email address;

6.5.4. phone number;

6.5.5. cryptocurrency wallet address;

6.5.6. mailing address and country of residence;

6.5.7. personal identification document details, including a photo with your ID document;

6.5.8. payment information, such as payment card number (credit or debit card) and the security code associated with your payment instrument, if you make a payment; and

6.5.9. other Personal Data you choose to provide, such as your public LinkedIn account, your public Twitter account, your professional background, your thoughts on how you can contribute to our ecosystem.

6.6. Personal Data set out in Article 6.5. hereof is collected only when voluntarily offered and solely for purposes that are clearly identified on the Website or in this Policy.

6.7. Without prejudice to the provisions set out in the Terms of Use for the Website, in the case you do not provide the Service Provider with the Personal Data set out in Article 6.5. hereof or provide them with inaccurate, misleading or incomplete Personal Data, the Service Provider at its sole discretion shall be entitled, without giving any notice to you, to:

6.7.1. impose limitations and restrictions on your use of the Website and/or the Services; and/or

6.7.2. suspend or terminate your access to the Website, your User Account or the Services.

§3. Personal Data We Collect Automatically

6.8. The Service Provider may collect the Personal Data from you in a variety of ways and circumstances, including, but not limited to, registration to the Website, placement of an order or a request (if applicable), subscription to a newsletter, response to a survey, filling out a form, use of a live chat (if applicable), providing us with feedback on our products or Services. The Service Provider shall be entitled to combine Personal Data collected in the course of your interaction with different sections of the Website or the Services with any other relevant available information.

6.9. Personal Data collected by or transmitted to the Service Provider in the course of accessing, interacting and operating of the Website and provision of the Services may include, without limitation, the following Personal Data:

6.9.1. device information, which may include (but is not limited to) information about the computer or mobile device you use to access the Website, including the hardware model, operating system and version, the web browser you use and other device identifiers;

6.9.2. usage information and browsing history, such as information about how you navigate within the Website, your browsing history and which elements of the Website or which Services you use the most;

6.9.3. location data, for Services with location-enhanced features. If we need your consent to collect geo-location data, we will collect this separately;

6.9.4. demographic information, such as your country and preferred language;

6.9.5. server log information, which may include (but is not limited to) your login details, the date and time of your visits, the pages viewed, your IP address, time spent on the Website and the websites you visit just before and just after the Website;

6.9.6. usage information. If you use the Website, we will collect metadata about the files you upload for storage and we will record instances in which you have used your private key to authenticate communications;

6.9.7. information collected by cookies and other tracking technologies. We and our service providers use various technologies to collect information when you interact with the Website, including cookies and web beacons. ‘Cookies’ are small data files that are stored on your device when you visit a website or app, which enables us to collect information about your device identifiers, IP address, web browsers used to access the Website, pages or features viewed, time spent on pages, mobile app performance and links clicked. Web beacons are graphic images that are placed on a website or in an email that is used to monitor the behavior of the user visiting the website or sending an email. They are often used in combination with cookies.

6.10. Invitations. If another user sends you an invitation through the Website, the Service Provider may receive certain personal information, such as your name, email address or phone number. If you are an invited guest, we will automatically send you an invitation to our Platform and, if unanswered, a one-time follow-up invitation. The Service Provider stores this contact information only to send these invitations and evaluate their success. You may unsubscribe from future invitations using the instructions in those messages. You may also contact us at [email protected] to request that we remove this information from our database.

6.11. Personal Data collected hereunder in the course of operation of the Website and provision of the Services may differ, depending on whether you access the Website and the Services logged in to your User Account or without logging in.

6.12. The Website uses the cookies described in Cookies Policy.

6.13. The data subject may, as stated above, prevent the setting of cookies through our Website at any point in time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. For example, most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser and from version to version. You can, however, obtain up-to-date information about blocking and deleting cookies via these links:

https://support.google.com/chrome/answer/95647?hl=en (Chrome);

https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Firefox);

http://www.opera.com/help/tutorials/security/cookies/ (Opera);

https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);

https://support.apple.com/kb/PH21411 (Safari); and

https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy (Edge).

6.14. You may also act according to the following:

• Opting-Out

As part of our commitment to fair information practices, the Service Provider allows you to opt-out of the use of information about your activities on other websites to provide you with interest-based advertising. You can opt-out of Google Analytics by installing Google’s opt-out browser add-on and out of interest-based Google ads, using Google’s Ads Settings. Even if you opt-out, you may still receive the Service Provider`s advertising. It just means that the advertising you see will not be customized for you.

• Refusing Cookies

We and our affiliates honor Do Not Track (DNT) signals and Do Not Track, plant cookies or use advertising when a Do Not Track browser mechanism is in place. You can limit the collection of your information by disabling cookies on your browser. You may also be able to modify your browser settings to ‘require your permission’ each time a site attempts to set a cookie. However, our Website (and many other web caution regarding automatic Cookie Functionality
sites) rely on cookies to enable certain functionality. If you choose to disable cookies, some of the Services available on our Website may not work properly.

• Browsers such as Microsoft Internet Explorer allow you to store passwords and login IDs so you do not need to re-enter this information each time you access a web site. The Service Provider strongly urges you NOT to use this functionality to prevent unauthorized use of your online banking access code(s).

6.15. The user is notified that blocking all cookies will have a negative impact upon the usability of many websites. If you block cookies, you will not be able to use all or certain features in our Website
 

§4. Data We Collect from Other Sources

6.16. We may also receive information about you from other sources, such as when you log in to your User Account by using your account credentials for a separate third-party service. We will receive information from that service as indicated in the relevant third party's authorization screen.

ARTICLE 7. Use of Personal Data

7.1. We use Personal Data to provide and improve the Website and its Services and for other purposes that are in our legitimate interests, as well as for compliance purposes.

7.2. We will use the Personal Data for purposes of:

7.2.1. providing, maintaining, delivering or improving the Website, the Services or other products or services provided through the Website;

7.2.2. verifying that you are a unique individual or entity;

7.2.3. analyzing and tracking Personal Data to determine the usefulness or popularity of certain content and to better understand the online activity of the Website users;

7.2.4. fulfilling our legal or regulatory requirements;

7.2.5. providing you with the information, products or services that you have requested;

7.2.6. answering your inquiry or responding to a communication from you;

7.2.7. developing new products or services;

7.2.8. sending you technical notices, support or administrative notifications;
7.2.9. communicating with you about news, products, services, events and other information we think will be of interest to you;

7.2.10. monitoring and analyzing trends, usage and activities in connection with the Website;

7.2.11. detecting, investigating and preventing fraudulent transactions or unauthorized or illegal activities;

7.2.12. protecting the rights and property of the Service Provider;

7.2.13. linking, connecting or combining Information we collect from or about you with other information; and

7.2.14. carrying out any other purpose or reason for which Personal Data was collected.

ARTICLE 8. Disclosure of Personal Data

8.1. The Service Provider treats Personal Data as confidential and may not pass on or use any such data without valid legal grounds.

8.2. We will only disclose your Personal Data in the following circumstances:

8.2.1. with your consent or at your instruction;

8.2.2. with companies under common control or ownership with us or our offices internationally;

8.2.3. for everyday business purposes, such as to process transactions, maintain accounts, respond to court orders and legal investigations or report to credit bureaus;

8.2.4. certain information you may choose to share may be displayed publicly, such as your username and any content you post when you use interactive areas of the Website like our online forums;

8.2.5. in connection with a merger or sale of our company assets, or if we do financing or are involved in an acquisition or any other situation where Personal Data may be disclosed or transferred as one of our business assets;
8.2.6. in response to a request for information if we believe disclosure is in accordance with or required by any applicable law, regulation or legal process;

8.2.7. if we believe your actions are inconsistent with our user agreements, policies or legislation, or to protect the rights, property and safety of any assets of the Service Provider or third parties;

8.2.8. with third parties, where aggregate Personal Data is disclosed which cannot be reasonably used to identify you.

8.3. Please note that third parties that support our customer identification and anti-fraud controls may retain and use information about you to perform services on our behalf and to improve their services. By using our Services, you consent to the retention and use of such information by these service providers to improve their services.

8.4. Service providers may, without limitations, share aggregated or de-identified information, which cannot reasonably be used to identify you.

ARTICLE 9. Transmission of Personal Data

9.1. The transmission of Personal Data or any other information (including communications by email) over the Internet or other publicly accessible networks is not one hundred percent secure. The Service Provider is not liable for the security of any Personal Data or any other information you are transmitting over the Internet, or for third-party content.

9.2. The Service Provider is based in the Seychelles. Information about you may be transferred to and processed in the Seychelles and countries other than the country in which you are a resident. We have implemented appropriate safeguards to require that your information will remain protected in accordance with this Privacy Policy.

9.3. Transmission of Personal Data of European Union (EU) Persons to recipients, both internally or externally, is subject to the authorization requirements and pursuant to defined purposes. Personal Data of EU Persons transmitted to a recipient outside the European Economic Area must be subject to protection, at least equivalent to that sought by the General Data Protection Regulation (GDPR). It may be processed by a staff member operating outside the European Economic Area (EEA) who works for us or for one of our suppliers. Such staff may be engaged in, amongst other things, the fulfillment of your order, the processing of your payment details and the provision of support services. By submitting your Personal Data, you agree to this transfer, storing or processing. We will take all reasonable steps necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

ARTICLE 10. Protection of Personal Data. Security Measures.

10.1. We take appropriate security, administrative and technical measures to protect any Personal Data you provide regarding the collection, storage and processing of Personal Data, as well as security measures to protect your User Account against unauthorized access, modification, disclosure or destruction of your Personal Data.

10.2. Personal Data is safeguarded from unauthorized access and unlawful processing or disclosure, as well as accidental loss, modification or destruction, through state-of-the-art technical and organizational measures. These are adjusted and updated continuously in tandem with technological developments and organizational changes. Additionally, Personal Data protection audits and other controls are carried out on a regular basis. These security measures include, but are not limited to: Password protected directories and databases that use Secure Sockets Layered (SSL) technology to ensure that your information is fully encrypted and sent across the Internet securely; limited access to hosting servers using 2FA and traffic encryption; all financially sensitive and/or credit information is transmitted via SSL technology and encrypted in our database; only authorized Company personnel are permitted access to your Personal Data and this personnel is required to treat the information as highly confidential. The security measures will be reviewed regularly in light of new and relevant legal and technical developments.

10.3. We take reasonable steps to protect the security of Personal Data communicated through the Website. However, no computer security system is entirely foolproof and the Internet is not a secure method of transmitting the information. As a result, we do not assume any responsibility for the Personal Data you submit or receive from us through the Internet, or for any unauthorized access or use of that information and we cannot and do not guarantee that information communicated by you to us or sent to you by us will be received or that it will not be altered before or after its transmission to us. You agree to not hold the Service Provider liable for any loss or damage of any sort incurred as a result of any misappropriation, interception, modification, deletion, destruction or use of information provided through the Website.

10.4. Most web browsers are set to accept cookies by default. You may wish to opt-out by turning off cookies (please refer to the help menu on your browser); however, switching off cookies may restrict your use of the Website. You may also opt-out of receiving promotional communications from us at any time by following the instructions in those communications. If you opt-out, we may still send you non-promotional communications, such as technical notices, support or administrative notifications or information about your User Account (if you have one).

10.5. Personal Data provided to us is stored in accordance with the applicable laws of the jurisdiction of the Service Provider. The period for which the Personal Data will be stored is determined by the applicable laws of the jurisdiction of the Service Provider. The Service Provider has ensured that appropriate security standards are in place regarding the safeguarding, confidentiality and security of Personal Data.

ARTICLE 11. Retention of Information

11.1. In accordance with applicable laws and as needed to provide the Services to our users, the Service Provider may hold your Personal Data. This requirement is conditioned by a need to comply with legal obligations and resolve possible disputes.

11.2. The Service Provider may retain your Personal Data as long as your User Account is active. Moreover, your Personal Data may be held beyond the above-mentioned period for as long as it is indispensable, in the case of the Service Provider having relevant information to respond to any issues that may arise later.

ARTICLE 12. EU Persons' Rights

12.1. The Service Provider values protection of all Website and Services users' rights relating to their Personal Data, hence, the Service Provider is committed to making sure you can exercise your respective rights effectively and free of charge. The Service Provider will ensure that each request you make related to your Personal Data be reviewed in a timely fashion.

12.2. EU Persons shall acknowledge that their rights relating to Personal Data are provided in the GDPR and other applicable laws of the member states of the European Union. In particular, EU Persons have the following rights relating to their Personal Data:

12.2.1. right to access. You can request access to your Personal Data and obtain a copy of such Personal Data in a format acceptable to you (e.g. PDF, DOC, DOCX, etc.). You can submit such a request by sending an email to [email protected]. After your request is received, our privacy team reviews the form and conducts the requestor's identity verification, without undue delay. Upon successful verification, you are provided with a copy of your Personal Data;

12.2.2. right to data portability. You have the right to receive your Personal Data, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit that data to another service provider (controller) without hindrance from us;

12.2.3. right to erasure ("Right to be forgotten") and right to rectification. You are entitled to request erasure or rectification of your Personal Data by sending us a respective request to [email protected]. We will handle requests for Personal Data to be rectified or deleted unless there is a legal requirement that prohibits such a request to be fulfilled. When a request is fulfilled, you will be informed that your Personal Data is changed or erased and is no longer collected, however, to fulfill our legal requirements, the Service Provider will store information about each requestor for the purposes of providing evidence that a request has been fulfilled;

12.2.4. right to object. At all times, you are entitled to object to the Processing of your Personal Data. The right to object can be exercised by sending an email to [email protected]. Upon receipt of the request, the Service Provider ceases the Processing, unless there is a legal or statutory ground for such Processing;

12.2.5. right to be informed. If you are inquiring about Processing activities conducted with respect to your Personal Data, the Service Provider, without undue delay, will provide information about:

(I) purposes of Processing;

(II) categories and types of Personal Data;

(III) the recipients or categories of recipients to whom the Personal Data has been or will be disclosed to, in particular recipients in third party countries or international organizations

(IV) retention period;

(V) source of the relevant Personal Data;

(VI) privacy rights and information on data portability;

(VII) where the Personal Data is not collected from the data subject, any available information as to their source;

(VIII) the existence of automated decision-making, including profiling as referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject;

(IX) information as to whether Personal Data is transferred to a third-party country or to an international organization. Where this is the case, the subject of the data shall have the right to be informed of the appropriate safeguards relating to the transfer. However, all information about the categories of Personal Data and Processing operations conducted by the Service Provider is available in this Policy; and

12.2.6. the right to lodge a complaint with a supervisory authority. Supervisory authority means an independent public authority which is established by an EU member state pursuant to Article 51 GDPR.

ARTICLE 13. Children's Privacy

13.1. The Website and any products or services available on the Website are not intended to solicit information of any kind to and from persons under 18 years of age.

ARTICLE 14. Alterations to Policy

14.1. We have the right, at our discretion, to update this Policy at any time. We recommend that you frequently check this Policy to find any changes and stay informed about how we help protect Personal Data.

14.2. By using the Website, you acknowledge and agree that it is your responsibility to periodically review this Policy and be aware of the changes.

14.3. The subsequent use of the Website or Services after changes to this Policy will also be considered as your acceptance of these changes.

14.4. This Policy may from time to time be translated into other languages. To the extent that any discrepancy may exist between the English version of this Policy and its version in another language, the English version prevails.

ARTICLE 15. Data Protection Officer

15.1. The Service Provider may appoint an expert on data privacy who works independently to ensure that the Service Provider is adhering to the policies and procedures set forth in the GDPR (data protection officer). A Data protection officer assists the Service Provider to monitor internal compliance, inform and advise on data protection obligations, provide advice regarding data protection impact assessments (DPIAs) and act as a contact point for data subjects and the supervisory authorities.

15.2. In the case of the Service Provider appointing such a data protection officer, it will publish their contact details on the Website.

ARTICLE 16. Feedback

16.1. We welcome your questions and suggestions with respect to the implementation or amendment of this Policy. Please use this address for communicating your feedback to us: [email protected].