General Information Regarding GDPR Policies and Data Protection

In relation to the GDPR provisions, the personal data is the personal information of Users that we gather for the purpose of our lawful business activities and legitimate interests in connection to the operation of the Platform, Terms of Use (the Agreement) and Privacy policy. We gather and process the following information: - Email, First name, Telegram ID and phone number (provided by the User); - Cookies (collected by the Site automatically for entering and using the Platform). For the purpose of data control, Defirex OU assigned an AML officer to act as a Data Controller. You may contact Data Controller at defirex.ou@gmail.com Data Controller shall provide information only to the data subject or his/her legal representative and may demand information and documentation that allow to identify the data subject prior to disclosure of information or providing access to the information. Defirex OU gathers and processes data for the following purposes: - Conclusion of the Agreement with the User; - Control of the provided information; - Marketing purposes; - Notification on relevant events in User account; - Improvement of the Platform, including surveys; - Transfer outside European Union (Russia). Data is collected for the period of the User account remains active. Processing shall be lawful only if and to the extent that at least one of the following applies: - the data subject has given consent to the processing of his or her personal data for one or more specific purposes; - processing is necessary for the performance of the Agreement to which the data subject is party or in order to take steps at the request of the data subject prior to entering into the Agreement; - processing is necessary for compliance with a legal obligation to which the Data controller is subject; - processing is necessary in order to protect the vital interests of the data subject or of another physical person; - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; - processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. For the fulfillment of the data collection purposes the gathered data may be provided to the following data recipients: - Our partners and affiliates, for the purpose of Platform maintenance/improvement, marketing or data processing. We ensure that our partners and affiliates have the valid Privacy Policies drawn up in accordance with the GDPR. - State regulatory authorities, including the Financial Inspection of Estonia and the Estonian Police and Customs board. NB! Any persons, whose data was gathered and processed has the right to request access to their personal data, the right for rectification, erasure or restriction of processing of such data, the right to object to data processing in the events and cases as stated by GDPR and the right to form and present a complaint to the state supervisory authority. Any User understands that should he demand the restriction of his personal data processing, Defirex OU may terminate any cooperation with the Agreement if such a demand makes it impossible for Defirex OU to carry out its legal obligations, including obligations in the field of money laundering prevention. Any client who gave his consent to data gathering and processing may withdraw his consent at any time by sending the message with the withdrawal at defirex.ou@gmail.com Any data processing that was carried out prior to the withdrawal shall be deemed lawful.