Summary of Changes
26 June 2019
We understand the importance of protection of your privacy and personal data and commit a lot of efforts to develop and maintain high standards of our inner security measures and technologies to provide you with secure processing and storage of the data we collect from you; and keep your data safe against unauthorized or unlawful processing and against accidental loss, destruction or damage.
1. PERSONAL DATA WE PROCESS AND ITS OBJECTIVE
When registering for an account via Transcrypt we may collect and further process (see chapter 2 below) the following categories of data:
Information requested during the registration of the Account that identifies you, for example your name, date of birth, citizenship, etc.
When you go through the registration process, you shall provide an e-mail address and create a password. You may also choose to log in via supported third-party service provider (for example, Twitter, Facebook and Google+). You can also choose to add a Google Authenticator account to be used for 2FA verification for improved security.
Financial information, including your income, source of income / funds, taxation residence information, etc.
Information, which we may collect through automated means. Through your use of Transcrypt and its exchange tools, we also monitor and collect tracking information related to usage such as access date & time, device identification, operating system, browser type and IP address. This information may be directly obtained by Transcrypt or through third party services.
с) Your identity and residency verification documents, for example passport and/or ID card, utility bill, insurance contract, tax statement, rental agreement etc.
Contact information, i.e. your phone number, e-mail address, etc.
(information described above under a), b), c) and d) is hereinafter separately or collectively referred to as “Personal Data”)
We do not collect any information that may identify you without your permission.
We use Google Analytics on our Website. If You want to know more about Google Analytics and its “do not track” policy, please visit https://www.google.com/analytics/terms/us.html
We do not intend to solicit or collect Personal Data from anyone under the age of 16 or under the legal age of your country, if it is higher. If you are under 16 or are not of a legal age of your country, do not enter any Personal Data on our Website.
1.3. We collect and process the Personal Data to fulfil our contractual obligations and legitimate interest before you, namely:
provide services, including execution of requested transactions and related maintenance of the services you registered for and manage the account you hold;
provide you with the information about your activities on the account;
inform on any changes and updates to the services you are provided with;
assess and mitigate risks related to anti-money laundering and terrorism financing regulations as well as transaction related risks;
comply with applicable legislation;
maintain actions in relation to legal claims;
provide additional or supportive services, as well as perform Client surveys, statistical analysis;
to ensure marketing activities (send you news, updates, promotions, product information, event announcements, and other).
improve the performance and functionality of our services.
The above list may be extended depending on the development of the services.
2. PROCESSING OF YOUR PERSONAL DATA
2.1. Your personal data may be received and processed:
(a) by Transcrypt within our inner systems of processing, which complies to technical and organizational measures in a manner that meets applicable requirements of the Regulation and security standards; and/or
(b) at outsource service providers and processors who access and use the data only to the extent required to perform the obligations subcontracted to them by Transcrypt (hereinafter ”subprocessors”).
2.2. Those subprocessors perform tasks on our behalf and are contractually obligated not to disclose or use collected information for any other purposes, then storage, help in facilitation of technical aspects of our services or perform functions related to the administration of services (collection and analysis) or other indicated under contractual closes.
2.4. If such subprocessors are located outside of Swiss Confederation or the European Union or European Economic Area, the processing of personal data is done or will be done in accordance with applicable laws.
2.5. Subprocessors remain fully liable for all obligations subcontracted to, and all acts and omissions of, Transcrypt is not responsible in the event that information is disclosed at a result of a breach or security lapse at any such subprocessors, or for such subprocessors' non-compliance with the foregoing requirements.
3. INCIDENTS NOTIFICATION
3.1. If Transcrypt becomes aware of any breach of our security leading to the accidental or unlawful destruction, loss, alteration or unauthorized disclosure of, or access to (excluding unsuccessful attempts or activities) personal data of Clients on systems managed or otherwise controlled by us we will notify you promptly and without undue delay and in compliance to the procedure prescribed under Regulation or applicable laws.
3.2. The notification will be made to your e-mail address at the discretion of Transcrypt or by other direct communication available to Transcrypt and allowed by Client (for example, by phone or e-mail). It is sole responsibility of the Client to provide us with the e-mail address and ensure that this e-mail address is valid and current.
3.3. None of Data Incidents notification from Transcrypt may not be and will not be construed as an acknowledgment of any fault or liability with respect to data incident by us.
4. CLIENT’S SECURITY COMMITMENTS
4.1. Client agrees that without prejudice to our security measures and data incidents that it is Client’s responsibility to make appropriate use of our services to ensure a level of security appropriate to the risk in respect of your Personal Data and securing your authorization credentials, system and devices which you use to access to our services.
4.2. We are not obligated to protect your Personal Data that you choose to store or transfer outside Transcrypt and our subprocessors’ systems, and cannot be held responsible for any negative consequences you may suffer as a result thereof.
5. CLIENT’S RIGHTS IN RESPECT TO ITS PERSONAL DATA
5.1. You have the following rights in relation to your personal data:
5.2. We will not ordinarily charge you in respect of any requests we receive to exercise any of your rights detailed above, however, if you make excessive, repetitive or manifestly unfounded requests, we may charge you a reasonable fee taking into account the administrative costs in order to process such requests or we may refuse to act on such requests.
5.3. Client may also send a request to receive information which Personal Data has been processed, amended, deleted or locked and information about any parties to which we transmit your Personal Data.
5.4. In some cases we may charge a fee (based on our reasonable costs) if your requests related to Personal Data are excessive considering the nature of the request itself or the nature and functionality of our services.
6. COOKIE & SIMILAR TECHNOLOGIES
6.1. We also collect Cookie and similar technologies for collecting technical information, which contains unique identifiers from you. In brief words we automatically receive the web address of the site that you came from and the IP address of the computer or device that you are using to access. This information helps to understand your preferences, navigate website efficiently, and allows to develop and improve our services, and to manage the load on our servers.
6.2. If you prefer not to allow cookies, please use your browser settings, most browsers give you an ability to manage your cookies or provide you with “incognito mode” or similar options, which allows you not to record your visits and downloads in your browsing and download histories. In this mode any cookies created while this type of session are deleted after you close all “incognito” windows.
8. CONFIRMATION AND CONSENT
9. CONTACT DETAILS
you require any additional information or have any further questions
regarding your Personal Data, please contact us at
The supervising authority for privacy issues in Estonia is Estonian Data Protection Inspectorate
Postal address: Tatari 39, Tallinn 10134, Estonia
Telephone: +372 627 4135
Email: [email protected]
The EU's independent data protection authority is European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
Telephone: +32 2 283 19 00
Email: [email protected]
10. OFFICIAL COMPLAINTS
If you are not satisfied with our answers, or you still have questions or pretentions related to your Personal Data, you may also contact Estonian Data Protection Inspectorate (in Estonian Andmekaitse Inspektsioon) at the phone +372 627 4135, e-post [email protected] or postal address Tatari 39, Tallinn 10134, Estonia. Should you feel that your rights related to the Personal Data are or may be violated, you may also submit an official complaint to aforementioned Inspectorate. If your complaint will fall under jurisdiction of other EU member state (other than Estonia), Estonian Data Protection Inspectorate will advise you and provide you with all necessary directions to address your complaint to a competent data protection authority of such other state.