Privacy Policy (EU / GDPR)
1. General Information
This Privacy Policy describes how X wallet, registered at [legal address, EU country] (hereinafter - "Company", "we", "us"), collects, uses, stores, and protects personal data of users of the website.
We process personal data in accordance with:
- Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR)
- Applicable EU and local data protection laws
By using the Website, you agree to this Privacy Policy.
2. Data Controller
The data controller responsible for processing your personal data is:
3. Personal Data We Collect
We may collect and process the following categories of personal data:
- Identification data (name, surname, date of birth)
- Contact data (email address, phone number)
- Account information
- Payment and transaction data
- KYC/AML data (identity documents, selfies, proof of address)
- Technical data (IP address, device data, browser type)
- Cookies and usage data
4. Legal Basis for Processing (GDPR Article 6)
We process personal data on the following legal grounds:
- Performance of a contract
- Compliance with legal obligations (KYC/AML laws)
- Legitimate interests (fraud prevention, security)
- User consent (marketing, cookies where applicable)
5. Purposes of Processing
Personal data is processed for the following purposes:
- Providing cryptocurrency purchase and exchange services
- User identification and verification (KYC/AML)
- Processing payments and transactions
- Ensuring security and preventing fraud
- Customer support and communication
- Compliance with legal and regulatory requirements
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by law, including AML regulations. After the retention period, data is securely deleted or anonymized.
7. Data Sharing and Transfers
We may share personal data with:
- Payment service providers
- KYC/AML verification providers
- Cloud and hosting providers
- Regulatory and governmental authorities when legally required
If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, including Standard Contractual Clauses (SCCs).
8. Data Subject Rights
Under GDPR, users have the right to:
- Access their personal data
- Rectify inaccurate data
- Erase personal data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
9. Cookies
The Website uses cookies and similar technologies to:
- Ensure proper functionality
- Improve user experience
- Analyze traffic
Users can manage cookie preferences through browser settings or cookie consent tools.
10. Security Measures
We implement appropriate technical and organizational measures to protect personal data, including encryption, access control, and secure infrastructure.
11. Cryptocurrency Risk Disclosure
Users acknowledge that cryptocurrency transactions involve significant risks, including price volatility and regulatory uncertainty. The Company is not responsible for financial losses due to market fluctuations.
12. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. The current version will always be available on the Website. Continued use of the Website constitutes acceptance of the updated Policy.