PRIVACY POLICY

of Coinzix.com website

We enjoy your visit to our web pages and would like to provide you with some key information regarding our commitment to the security and privacy of your personal data.

Please check this section regularly as the policy may be subject to change or update. Any significant changes to this policy will be notified.

By using this site you agree to the collection, processing and transfer of your data as described in this privacy policy.

In completing this notification, please see the Terms and Conditions and Cookies Policy.

About us

We, SERVOTECH INOVATION SRL ('Coinzix'), owners of the coinzix.com website, have been working with blockchain technology since 2013 and, believing in its power, we want everyone to enjoy the benefits of cryptocurrencies through our exchange services.

Professionalism defines every service we offer, which is why we pay special attention to protecting your data.

Information about our company

Coinzix is based in Oradea, Romania and is registered in the Trade Register under no. J5/440/2018, having tax no. 38920180.

Contacts

Using the online platform, the application or the ATM network.

By accessing or using any part/feature of the coinzix.com platform, our mobile application or our ATMs, it means you agree to accept and respect the terms, conditions and policies mentioned and/or available through hyperlinks and you are at least of legal age according to Romanian laws. If you do not accept the terms, conditions and policies set out in this documentation, then you should not continue to access our site and/or use our services.

Where do we collect data about you from

In general, the personal data we collect is provided by you via e-mail, through this site, the dedicated application, social media networks, or through your interaction with our network of partners or with the Coinzix ATMs.

Occasionally, when we are in the process of recruiting, we may collect data about you from specialized online platforms (eJobs, LinkedIn, etc.) or from the CVs you send us.

Also, when you interact with us on social networks (i.e. likes, shares, comments, reviews, etc.), we will inevitably have access to information about you, especially data that you have made public on your social media profile.

How do we use personal data.

Please find below the purposes for which we process your personal data, the people who have access to your data, and how we store it.

When you interact with us through the contact channels available on the site or social media.

If you interact with us using the contact details available in the footer of our website, or interact with us through social networks (e.g. like, share, review, feedback, notifications, requests for information, etc.), we will use your contact details and the data you communicate to us in order to resolve the reported situation, to evaluate the degree of satisfaction of our customers and to continuously improve the services we offer.

Personal data	Last name, first name, phone number, email address, data you have made public on your social media profile, and any other data you voluntarily send us, such as articles, pictures, feedback, etc.
Legality of processing	We process your data in order to take action at your request, before concluding a contract (Art. 6/1/b of Regulation (EU) 2016/679). In pursuit of our legitimate interest, in order to answer any questions, complaints or recommendations you send us and to improve the services and experience we offer to our customers (Art. 6/1/f of Regulation (EU) 2016 / 679).
Who we can share your data with	Providers of IT services for our company (hosting and data storage), providers to whom we outsource certain technical support services for our site, or providers of customer relationship management systems. Social media platforms: Facebook, Instagram, LinkedIn, Twitter. Regulatory and other state authorities, if required by legal or statutory requirements.
How long we will store the data	We will not keep in our database communications older than 1 year from the date of the last interaction. The data transmitted through social media networks will be stored by them according to their own policies.
Where data is stored	The data registered through the coinzix.com website or the mobile application will be stored on the hosting provider's servers, located in the European Union. The data transmitted through social media networks will be stored by them according to their own policies. The data that we download locally, we will store on our secure, local and cloud servers.

We collect information about you when you register an account on our platform or when you trade in our ATM network.

We use this information to facilitate your access to the Cryptocurrency Exchange services we offer through our platform. From your account you will be able to track the exchange rate, see the history of transactions made and much more.

Personal data required to register an account in the online platform	Last name, first name, e-mail, password and online identifiers (IP, cookies).
Legality of processing	We process your data in pursuit of our legitimate interest, respectively in order to facilitate your access to the services offered through the online platform and to the functions associated with your account, such as: analyzing the history of transactions (art. 6/1/f of the Regulation (EU) 2016/679).
Who we can share your data with	IT service providers for our company (hosting and data storage), providers to whom we outsource certain technical support services for our site, or providers of customer relationship management systems. Regulatory and other state authorities, if required by legal or statutory requirements.
How long will we store the data	We will keep the data recorded in your account until you decide to close your account or until your account is automatically deleted if more than 5 years have passed since you last logged in to your account.
Where data is stored	The data registered through the coinzix.com website or the mobile application will be stored on the hosting provider's servers, located in the European Union. The data that we download locally, we will store on our secure, local and cloud servers.

We recommend that you consider the following features when setting passwords:

Contain both uppercase and lowercase (e.g. a-z and A-Z);
Contain special numbers and characters (e.g. [email protected]#$%^&*()_+=}{:"?><);
Contain at least six alphanumeric characters;
Not to be a word in any language, jargon, dialect, etc.;
Not to be made based on personal information, last names, etc..

Identity verification

The services offered by our platform are addressed to users who have turned 18 years old. Moreover, in order to benefit from our services, we must have the certainty of your identity in order to comply with the applicable legal provisions.

Thus, we implemented a two-level identity verification system, depending on the type of service you want to benefit from and the value of the transaction.

Level 1 trading will allow:
- Deposit and withdraw of cryptocurrencies until the value threshold equivalent to 25 BTC/day is reached
- Deposit and withdraw Fiat currency until the value threshold of EUR 10,000/month is reached
Level 2 trading will allow:
- Deposit and withdraw of cryptocurrencies until the value threshold equivalent to 50 BTC/day is reached
- Deposit and withdraw Fiat currency until the value threshold of EUR 500000/month is reached

At the ATM there are also 2 levels depending on the value of the transaction:

Level 1 trading will allow:
- Sale of cryptocurrencies up to the trading value threshold of RON 5,000 / day
- Purchase of cryptocurrencies up to the trading value threshold of RON 5,000 / day
Level 2 trading will allow:
- Sale of cryptocurrencies up to the trading value threshold of RON 10,000 / day
- Purchase of cryptocurrencies up to the trading value threshold of RON 10,000 / day

Personal data required to verify the identity on the site	Level 1 trading: identification data: age, sex, phone no., address, city, region (county), country; bank details: bank, account number (IBAN) and SWIFT code; identification document: uploading the identity document selfie video proof of address phone number Level 2 trading: Document on the source of funds.
Personal data required to verify identity at the ATM.	Level 1 trading: phone number Level 2 trading identification data: last name, first name, phone no., email identification document: uploading the identity card selfie picture
Legality of processing	We process your data in order to establish the user's identity in order to facilitate access to those services, in accordance with applicable international rules (art. 6/1/b of Regulation (EU) 2016/679), but also in order to prevent fraud, combat money laundering and terrorist financing and in order to comply with the relevant tax legislation (art. 6/1/c of Regulation (EU) 2016/679).
Who we can share your data with	IT service providers for our company (hosting and data storage), providers to whom we outsource certain technical support services for our site, or providers of customer relationship management systems. The provider to whom we outsourced the user identity verification service, Sum and Substance LTD. Regulatory and other state authorities, if required by legal or statutory requirements.
How long we will store the data	We will keep the data you provided to us in order to verify your identity: Throughout the life of your account (subject to the need to periodically update this data; If you decide to close the account, for 5 years from the last Transaction, according to the legal regulations on preventing and combating money laundering and terrorist financing Until the automatic deletion of the account if more than 5 years have passed since the last authentication in the account.
Where data is stored	The data registered through the coinzix.com website or the mobile application or to the ATM network will be stored on the hosting provider's servers, located in the European Union. The data that we download locally, we will store on our secure, local and cloud servers.

Making transactions

Carrying out any type of transaction through our platform involves the processing of personal data and the sharing of this data with our business partners, who facilitate the processing of payments and we have ensured that they offer a high standard on the protection and confidentiality of personal data.

The payment for the purchase of cryptocurrencies can be made:

by SEPA transfer to the partner bank in Lithuania;
by paying by card to a partner payment processor;
in cash at our ATM in RON.

The collection of the amounts resulting from the sale of cryptocurrencies can be made

by SEPA transfer (EUR);
at the Coinzix ATM, by withdrawing cash (RON).

Personal data required for making transactions	The data registered in your account following the identity verification.
Legality of processing	We process your data in order to provide the service you requested, i.e. to complete the transaction (art. 6/1/b of Regulation (EU) 2016/679).
Who we can share your data with	IT service providers for our company (hosting and data storage), providers to whom we outsource certain technical support services for our site, or providers of customer relationship management systems. Our business partners whose services we rely on for payment processing* MoonPay.com (Malta/UK) – card payment processing; Partner bank - Next Pay UAB (Lithuania) – SEPA transfers. General Bytes s.r.o The provider to whom we outsourced the user identity verification service, Sum and Substance LTD Regulatory and other state authorities, if required by legal or statutory requirements. * We have taken all necessary measures to ensure that external service providers who have access to your data have implemented physical, electronic and managerial security measures to protect your data.
How long we will store the data	We will keep the data you provided to us in order to verify your identity: throughout the life of your account (subject to the need to periodically update this data; if you decide to close your account, for 5 years after your last transaction, in accordance with the legal regulations on preventing and combating money laundering and terrorist financing; until the automatic deletion of the account if more than 5 years have passed since the last authentication in the account.
Where data is stored	The data registered through the coinzix.com website or the mobile application or at our ATMs will be stored on the hosting provider's servers, located in the European Union. The data that we download locally, we will store on our secure, local and cloud servers.

Technical support

We will provide you with technical assistance to support you in any problem you encounter regarding the use of our platform.

We will use the situations you report to us to improve the functionality of the platform and to better respond to the needs of users, our goal being to improve the experience for the users of our platform.

Personal data	The data registered in the user's account, IP, user actions, reported situation, any other materials that you send us voluntarily.
Legality of processing	We will process the data to facilitate technical support (Article 6/1/b of Regulation (EU) 2016/679). We will process the information about the problems you encounter in using the site in order to pursue our legitimate interest in improving the functionality of our platform and the user experience (Art. 6/1/f of Regulation (EU) 2016/679).
Who we can share your data with	Providers of IT services for our company (hosting and data storage), providers to whom we outsource certain technical support services for our site, or providers of customer relationship management systems. Regulatory and other state authorities, if required by legal or statutory requirements.
How long we will store the data	We will keep the data recorded in your account until you decide to close your account or until your account is automatically deleted if more than 5 years have passed since you last logged in to your account.
Where data is stored	The data registered through the coinzix.com website or the mobile application will be stored on the hosting provider's servers, located in the European Union. The data that we download locally, we will store on our secure, local and cloud servers.

Commercial and marketing communications

We may send you information about the services we offer if you have requested this information (via email, contact page or newsletter subscription) or if you are already our customer, and this information may be of particular interest to you.

Personal data	Last name, first name, phone number, e-mail address.
Legality of processing	We process your data in order to take steps at the request of the data subject before concluding a contract (Art. 6/1/b of Regulation (EU) 2016/679). We process the data based on your consent (Art. 6/1/a of Regulation (EU) 2016/679), for marketing communications. We will process the data in a legitimate interest if you are our customer and we consider that the information could be of great interest to you (Art. 6/1/f of Regulation (EU) 2016/679).
Who we can share your data with	Providers of IT services for our company (hosting and data storage), providers to whom we outsource certain technical support services for our site, or providers of customer relationship management systems. The newsletter service provider (company name and link). Regulatory and other state authorities, if required by legal or statutory requirements. We will only disclose your personal data to the extent that they are strictly necessary to ensure the effectiveness of the communication.
How long we will store the data	We will not keep communications older than 1 year from the last interaction. In case of subscription to the newsletter, the data processing will continue until you request unsubscription or until the automatic deletion of the account if more than 5 years have passed since the last authentication in the account. In the case of processing carried out in the legitimate interest, when you are already our customer, we will continue to process your data until you decide to close your account or until the automatic deletion of the account if more than 5 years have passed since the last login.
Where data is stored	The data that we download locally, we will store on our secure, local and cloud servers.

Important:

If you no longer wish to receive newsletters or informational materials from coinzix.com, all you have to do is press the 'Unsubscribe' button (or send an email stating your wish to unsubscribe to [email protected]) and you will be unsubscribed from those communications.

Using social plugins

It is the responsibility of coinzix.com and the social platform (as associated operators), in accordance with EU policies, to process active display data (e.g. cookie ID) when a user of our site interacts with social networks through embedded buttons and widgets;

On our site, we have integrated the social plugins of Facebook, Instagram, LinkedIn, Twitter.

Personal data	Name, image, any publicly accessible information in your social media profiles, or voluntary communicated by you.
Legality of processing	We will process your data in pursuit of our legitimate interest in facilitating the easy sharing of the content of our platform (Art. 6/1/f of Regulation (EU) 2016/679).
Who we can share your data with	IT service providers for our company (hosting and data storage), providers to whom we outsource certain technical support services for our site, or providers of customer relationship management systems. Online platforms: Facebook, Instagram, LinkedIn, Twitter. Regulatory and other state authorities, if required by legal or statutory requirements.
How long we will store the data	The data shared with social media networks will be stored by them according to their own policies.
Where data is stored	The data is stored on the servers of social networks, located in the European Union. The data that we download locally, we will store on our secure, local and cloud servers.

Facilitating an easy and pleasant navigation on our site

When you visit our site, we collect data about you through online identifiers (cookies and IP), which are stored in log files.

We use this information to be able to design our site so that we can better adapt to the needs of our users. We may also use your IP address to help diagnose any malfunctions in our servers and to manage our site, analyze trends, track visitor movements, and collect general demographic information to help identify visitor preferences.

You can find more information about cookies, as well as how to delete cookies and deactivate tracking by accessing the Cookies Policy available on our website.

Personal data	Internet Protocol (IP), general location of the computer, device (country level), website viewing history, timestamp, request / action.
Legality of processing	We use cookies that make your browsing on our site easy and pleasant, in our legitimate interest (Art. 6/1/f of Regulation (EU) 2016/679). Non-essential cookies are not used without your consent (Art. 6/1/a of Regulation (EU) 2016/679).
Who we can share your data with	IT service providers for our company (hosting and data storage), providers to whom we outsource certain technical support services for our site, or providers of customer relationship management systems. Third parties who place cookies: MoonPay.com. Regulatory and other state authorities, if required by legal or statutory requirements.
How long we will store the data	There are session cookies and persistent cookies. If the session ones are deleted when the browser is closed, the persistent ones may have a different lifespan, related to the purpose they serve. More information about the duration of use of the cookies we use can be found in the Cookies Policy.
Where data is stored	The data is stored on servers located in the European Union. (e.g. Google/Facebook servers - Ireland for cookies placed by third parties).

Is the data collected and processed by coinzix.com safe?

We have implemented physical, electronic and managerial security measures to protect and secure the information we collect and process.

Remember, however, that no data transmission is guaranteed 100% secure.

If you suspect a breach of privacy of your data, please contact us immediately at: [email protected]

Important: After the data retention period ends, your data will be deleted. If we believe that this data could help us to improve the quality of our products or services, we will continue to use this data only after their irreversible anonymization.

Data processing of underage persons

Coinzix.com is not intended and does not knowingly collect information from children under 18 years of age. If we discover that a minor has used our site, we will delete all personal data about him/her.

The rights you enjoy

As a data subject, you have specific legal rights with respect to your personal data that we collect and process. Coinzix.com respects your rights and ensures that it takes due account of your interests.

Withdrawal of consent: If the processing is carried out on the basis of your consent, you can withdraw your consent for such processing at any time.
Rectification of data: If you notice that we have erroneous personal data, you can ask us at any time to rectify the personal data concerning you. We make reasonable efforts to keep personal data - which are used continuously and in our possession or control - accurate, complete, current and relevant, based on the latest information available to us.
Restricted processing: If you are in one of the following situations, you can ask us to restrict the processing of your data:
- challenge the correctness of personal data for the period in which we must verify the accuracy,
- the processing is illegal and you request the restriction of the processing rather than the deletion of personal data,
- we no longer need your personal data, but you request it in order to establish, exercise or defend a right, or
- you object to the processing while we verify that our legitimate reasons take precedence over your rights.
Access to your data: You can ask us for information about the personal data we hold about you, including information about what categories of data, what they are used for, where we collected them, if they are not collected directly from you and to whom they were disclosed, if applicable. You can obtain a copy from us, free of charge, containing the personal data we hold about you. We reserve the right to charge a reasonable fee for abusive requests.
Right to portability: Upon request, we will transfer personal data to another operator, where technically possible, provided that processing is necessary for the performance of a contract. Instead of receiving a copy of your personal data, you can request that we transfer your data directly to another operator specified by you.
Right of deletion: You can obtain the deletion of personal data from us, if:
- we no longer need your data in relation to the purposes for which it was processed;
- you object to the further processing of personal data (see Right of Opposition below);
- the personal data have been processed illegally;
- you withdraw your consent on the basis of which the processing takes place.
Unless processing is required:
- in order to fulfill a legal obligation that requires the processing of those data by us;
- in particular for the legal requirements regarding the data retention deadlines;
- to establish, exercise or defend a right in court.
Right of opposition: You can object at any time to the processing of personal data due to the special situation you are in. In this case, we will no longer process personal data if we cannot demonstrate well-founded, legitimate reasons and a major interest in the processing or for establishing, exercising or defending a right. When you object to the processing, please indicate whether you wish to delete personal data or restrict the processing of such data.
Right to lodge a complaint: In the event of an alleged breach of the law in force on confidentiality, you can lodge a complaint with the data protection supervisory authority:
- National Authority for the Supervision of Personal Data Processing by filling in the online form available at the address: Plângeri ANSPDCP (ANSPDCP Complaints).

Remember!

Time period: We will try to resolve your request within 30 days. However, the period may be extended for reasons of specific legal right or the complexity of the request.

Restricting access: In certain situations, we may not be able to grant you access to all or part of your personal data due to restrictions provided by law. If we deny your request for access, we will notify you of the reason for the denial.

Impossibility of identification: In some cases, we may not be able to identify personal data due to the lack of identification elements provided in the application you send us. In such cases, if you do not provide additional information to identify you, we will not be able to process your request to exercise your legal rights as described in this section.

Exercising your rights

To exercise your legal rights or for any additional information on how we use your data, please contact our Data Protection Officer, in writing or in text form, at [email protected]

Thank you for reading our privacy policy and we would be happy if you would give us your feedback so that we can improve this policy!