4 Collection, processing and use of personal data

4.1 Processed data categories

The following categories of data are processed:

– Communication data (e.g. name, phone, e-mail, address, IP address)

4.2 Principles

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, the names, addresses, telephone numbers and e-mail addresses you provide. We collect, process and use personal data only if there is either a legal basis for doing so or if you give your consent to the processing or use of personal data by signing this document.

4.3 Processing purposes and legal basis

4.3.1 Provision and performance of our services.

4.3.2 Rectification of service interruptions and for security reasons. (Legal basis: fulfillment of our legal obligations in the context of data security and legitimate interest in remedying service disruptions as well as in preserving our offers).

4.3.3 Sending an e-mail or SMS/MMS newsletter about new offers.

(Legal basis: fulfillment of contractual obligations).

4.3.4 Preservation and defense of our rights. (Legal basis: Legitimate interest on our part to preserve and defend our rights).

4.4 Log files

Every time you use the Internet, your browser transmits certain information that is stored in log files by our hosting provider. We store log files for a period of 60 days to detect service interruptions and for security reasons (e.g. to investigate attempted attacks), after which they are deleted. Log files that must be retained for evidentiary purposes are excluded from deletion until the incident in question is resolved and may be disclosed to investigative authorities on a case-by-case basis. Log files are also used for analysis purposes (without the IP address or without the full IP address).

The following information is stored in log files:

• IP address (internet protocol address) of the terminal device used to access the online offer;
• Internet address of the website from which the online offer was accessed (so-called source URL or referrer URL);
• Name of the service provider via which the online offer was accessed;
• Name of the retrieved files or information;
• Date and time as well as duration of the retrieval of the data;
• Amount of data transferred;
• Operating system used and details of the Internet browser used, including installed add-ons (e.g. Flash Player);
• Http status code (e.g. “request successful” or “requested file not found”).

4.5 Children

The (online) offer of Funds On Chain GmbH is not intended for children under the age of 18.

4.6 Data transfer to other controllers

In principle, your personal data will only be transferred to other controllers if this is necessary for the fulfillment of a contractual obligation or if we ourselves or a third party have a legitimate interest in the transfer of data or if you have given your consent. Information on the legal basis and the recipients or categories of recipients can be found in the section “Processing purposes and legal basis” (see section 4.3).

In addition, data may be transferred to other data controllers if we are obliged to do so by law or by enforceable official or court orders.

4.6.1 Service providers (general)

We involve external service providers with tasks such as marketing services, contract management, programming and data hosting. We have carefully selected these service providers and monitor them regularly, particularly with regard to the careful handling and protection of data they store. All service providers are obligated to maintain confidentiality and to comply with legal requirements.

4.7 Duration of storage, retention periods

In principle, we store your data for as long as it is necessary to perform our services or for as long as we have a legitimate interest in storing the data. In all other cases, we will delete your personal data with the exception of data that we are required to retain in order to fulfill legal obligations (e.g., we are required to retain documents such as contracts and invoices for a certain period of time due to retention periods under tax and commercial law).

5 Security

We take all necessary technical and organizational measures to ensure an appropriate level of security and to protect your data managed by us, in particular against the risks of accidental or unlawful destruction, manipulation, loss, alteration or unauthorized disclosure or access.

6 Use of cookies

We distinguish between cookies that are absolutely necessary for the technical functions of the online service and such cookies and tracking mechanisms that are not absolutely necessary for the technical functions of the online service. Use of the online service is generally possible without cookies that do not serve technical purposes.

6.1 Technically necessary cookies

By technically necessary cookies we mean cookies without which the technical provision of the online service cannot be guaranteed. This includes, for example, cookies that store data to ensure smooth playback of video or audio material. Such cookies are deleted when you leave the website.

6.2 Cookies and tracking mechanisms that are not technically necessary

Currently, we do not use cookies and tracking mechanisms that are not technically necessary and are used, for example, for marketing purposes.

7 Newsletter

Occasionally, we offer e-mails inviting you to contact us again or informing you about offers that may be of interest to you.

8 User rights

To enforce your rights, please use the information in the “Contact” section (No. 3). Please make sure that a clear identification of your person is possible.

8.1 Right to information

You have the right to obtain confirmation from us as to whether or not your personal data is being processed and, if so, to obtain access to your personal data.

8.2 Right to rectification and erasure

You have the right to request that inaccurate personal data be corrected. Where legal requirements are met, you have the right to request that your data be completed or deleted. This does not apply to data that is required for billing or accounting purposes or that is subject to a legal retention period. However, if access to such data is not required, its processing is restricted (see below).

8.3 Restriction of processing

Insofar as legal requirements are met, you have the right to request restriction of the processing of your data.

8.4 Data portability

Insofar as legal requirements are met, you may request that data provided to us by you be made available in a structured, commonly used format.

8.5 Objection to data processing on the legal basis of a “legitimate interest”

In addition, you have the right to object to the processing of your personal data at any time. We will immediately terminate the processing of your data in this case, unless we can demonstrate compelling legitimate grounds arising from legal provisions that outweigh your rights.

8.6 Withdrawal of consent

You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing prior to your withdrawal remains unchanged.

8.7 Right to complain to the supervisory authority

You have the right to file a complaint with a supervisory authority. You can file a complaint with the supervisory authority responsible for your place of residence or your country of residence, or with the supervisory authority responsible for us. State Commissioner for Data Protection and Freedom of Information:

Contact:

Phone: 0711/615541-0

E-Mail: poststelle@lfdi.bwl.de

Address:

Königstraße 10a

70173 Stuttgart

Germany

Mailing address:

P.O. Box 10 29 32

70025 Stuttgart

Germany

9 Changes to the data protection notice

We reserve the right to change our security and data protection measures. In such cases, we will adapt our data protection notice accordingly. Therefore, please always refer to the current version of our data protection notice, as it may be subject to change.

Effective date: 23.09.2021