How long will my data be stored?

As far as necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and execution of a contract.

In addition, we are subject to various storage and documentation obligations, which result from the minimum statutory retention periods. The retention and documentation periods specified there are 2 to 10 years.

We will cease to retain your Personal Data or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the Personal Data was collected and is no longer necessary for legal or business purposes.

Automated decision-making in individual cases

As a matter of principle, we do not use fully automated decision-making pursuant to Article 22 of the GDPR for the establishment and implementation of the business relationship. Should we use such procedures in individual cases, we will inform you of this separately, insofar as this is required by law.

Where we store your data

The Personal Data that we collect may be transferred to, and stored at, our secure servers in the United Arab Emirates as well as on our hosted Database in the EU. It may also be processed by staff who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your services ordered by you, the processing of your payment details and the provision of support services. By submitting any Personal Data to us, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your Personal Data is treated securely and in accordance with this privacy policy.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted to our Platform; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

Uses made of the information

We use information held, including Personal Data, in the following manner:

• to ensure that content from our Platform is presented in the most effective manner for you and for your computer;
  
• to provide you with information or services that you request from us, and to otherwise carry out our obligations arising from any contracts entered into between you and us;
  
• to provide you with information or services which we feel may interest you, where you have consented to be contacted for such purposes;
  
• to allow you to participate in interactive features of our service, when you choose to do so;
  
• to notify you about changes to our services;
  
• to investigate any complaints relating to the use of our Platform or any suspected unlawful activities;
  
• complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority;
  
• any other purposes for which you have provided the information; and
  
• carrying out whatever else is reasonable or related to or in connection with the above and our provision of services to you.

What data protection rights do I have?

Every data subject has

·       the right to information according to Art. 15 GDPR,

·       the right to rectification according to Art. 16 GDPR,

·       the right to deletion according to Art. 17 GDPR,

·       the right to restriction of processing pursuant to Art. 18 GDPR, and

·       the right to data portability under Art. 20 GDPR.

Further, you can revoke consent, in principle with effect for the future.

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Finally, you also have a right to object according to Art. 21 GDPR. This applies, on grounds relating to data processing on the basis of our legitimate interest and also to profiling.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Access and Correction

The PA and the GDPR give you the right to access your Personal Data. Your right of access can be exercised in accordance with the PA and the GDPR. Any access request may be subject to a fee of an administrative fee at our rates then in force to meet our costs in providing you with details of the information we hold about you.

In the event that you wish to correct and/or update your Personal Data in our records, you may inform us in writing of the same by sending us an email at [email protected].

We will respond to requests regarding access and correction as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any Personal Data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so except where we are not required to do so under the PA and the GDPR.

Accuracy

We endeavor to ensure that all decisions involving your Personal Data are based upon accurate and timely information. However, we rely on you to disclose all relevant information to us and to inform us of any changes in your Personal Data. As such, please disclose all relevant information necessary for us to provide services to you and ensure all information submitted to us is up-to-date, complete, and accurate. Kindly inform us promptly if there are any changes in your Personal Data.

Consent

By providing your Personal Data to us, you consent to the collection, use and disclosure of your Data by us for the purposes set out in this privacy policy.

Where any Personal Data relates to a third party, you represent and warrant that the Personal Data is up-to-date, complete, and accurate and that you have obtained the third party’s prior consent for our collection, use and disclosure of their Personal Data for the Purposes. You agree that you shall promptly provide us with written evidence of such consent upon demand by us.

Each use of our services by you shall constitute a fresh agreement for us to collect, use and disclose the Personal Data in accordance with this privacy policy.

You may withdraw your consent and request us to stop using and/or disclosing your Personal Data for any or all of the Purposes by submitting your request to us in writing to [email protected]. Should you withdraw your consent to the collection, use or disclosure of your Personal Data, it may impact our ability to proceed with your transactions, agreements, or interactions with us. Prior to you exercising your choice to withdraw your consent, we will inform you of the consequences of the withdrawal of your consent. Please note that your withdrawal of consent will not prevent us from exercising our legal rights (including any remedies) or undertaking any steps as we may be entitled to at law.

Is there an obligation for me to provide data?

Within the scope of our business relationship, you are only required to provide personal data that is necessary for the establishment, implementation, and termination of a business relationship or that we are legally obliged to collect. Without this data, we will usually have to refuse to conclude the contract or will no longer be able to perform an existing contract and may have to terminate it.

Contacting us

When contacting us, your details will be processed for the purpose of handling the contact enquiry. Your details will be stored in our customer relationship management system ("CRM system").

Access data and log files

We collect data on each access to the server on which our website is located (so-called server log files) on the basis of our legitimate interests. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the operating system you are using, referrer URL (previously visited page), IP address and the requesting provider. This is used to defend against third-party claims and to enforce our own claims.

Log file information is stored for security reasons (e.g., for the clarification of abuse or fraud) for a maximum of seven days and then deleted. Data whose further storage is necessary for evidentiary purposes is exempt from deletion until the final clarification of the respective incident.

Cookies & Reach Measurement

Cookies are pieces of information that are transmitted from our web server or third-party web servers to the user's web browser and stored there for later retrieval. Cookies may be small files or other types of information storage. We use performance and Analytic cookies to collect statistics and information in relation to traffic derived through our site to help improve the development of our services. Cookies may be used in order to improve the development of our functionality for our websites and services including but not limited to checking if you have visited the Vault Wallet website previously, handled sessions and security. Cookies and technology including but not limited to scripts, beacons and more are used to monitor the activity of our services which is used to analyze data in order to improve the development of our services. In definition, a Cookie is a piece of data which is obtained from visiting a website which stores within a browser that can later retrieve this information. Cookies can tell the website if the user has returned to the particular website and more. Vault Wallet may use two different types of cookies which including Third-party cookies and First-party cookies. First Party cookies belong to us which are set, controlled and used by us whereas, third-party cookies are issued by third-party providers on our website in order to allow them to recognize your device and deliver services which they're offering. Cookies also form in two types which one is formed of temporary cookies that remain until the browser is closed and the other which is stored permanently within your device's drive until it is deleted or expired. 

Restricting of Cookies

There is an option within most browsers to restrict cookies within the settings of your selected browser. If you decide to restrict cookies it may cause you to be unable to access certain parts of our website which, you will find out more information relating to the disabling of cookies within the support section outlined with the browser you intend to use.

Personal data and Minors (Children)

The services available on our website are aimed at people aged 18 and over. We will not knowingly collect, use or disclose personal data from minors under the age of 18 without first obtaining consent from a legal guardian through direct offline contact. The parent or guardian will be provided with (i) information about the specific type of personal data being collected from the minor, (ii) the purpose for which it will be used, and (iii) the opportunity to object to any further collection, use or storage of such information. We comply with youth protection laws.

Integration of third-party services and content

Within our platform, we use content or service offers of third-party providers on the basis of our legitimate interests (i.e., interest in the analysis, optimization and economic operation of our platform within the meaning of our legitimate interest in order to integrate their content and services (hereinafter uniformly referred to as "content"). This always requires that the third-party providers of this content are aware of the IP address of the user, as without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the display of this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this platform. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring platforms, time of visit and other information about the use of our platform, as well as being linked to such information from other sources. Our Platform may, from time to time, contain links to and from the websites of our partner networks, business partners and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any Data to these websites. We would like to make it explicitly clear that our website, application and services, may contain links directly or indirectly from and to websites of our partners, affiliates, government, online security protecting services, advertisements, newsfeeds. If you decide to follow any of these links to any website, we again make it explicitly clear that any other website aside from Vault Wallet, carry their own Privacy Policy, Terms and conditions, and any other policies and procedures which we accept no responsibility under any circumstances for them. External Links and Third Parties may concern malware, trojans, viruses, harmful content, inaccurate information, automatic downloads, downloads in which contain spyware, malware, trojans, viruses, in which if you decide to follow any of these links to any websites, we would again like to make it explicitly clear that we have no control over these websites, it is your own decision to visit these websites in which you will take full and sole responsibility. It is always advised that you are careful before visiting any website, if you're unsure of the website you should not visit it, and you should carefully read each websites policies and procedures before submitting any data including but not limited to personal data to these websites. You should always keep your device secure and safe by only visiting sites which are regarded to be safe and secure, you should always complete regular virus scans of your device to ensure that you have not transmitted a virus. 

Vault Wallet Company

Vault Wallet, reserves the full rights at any time, to sell, merge or acquire of any other company in which you will be notified thirty (30) days prior to any of the above arrangements. In the event of a sale or merger, we reserve the full rights to transfer all the personal data and information which is stored with us to the new entity or company which we have formed with. In the event of an acquisition, we reserve the full rights to share any personal data and information with the company which has been acquired including but not limited to employees, partners, affiliates, third party contracts, suppliers and more. 

IP Addresses

We may also collect and process information about your Mobile Device, Device ID, computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our business partners. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.

Contract fulfilment

We process various data within the framework of the provision of my services and for the initiation and processing of the existing contractual relationship between you and us. If you have commissioned us to provide a service, we process your data and all other information that is necessary in the context of fulfilling the services, exclusively for the purpose of processing and handling the contractual relationship. Accordingly, the data is processed on the basis of a contract as well as to fulfil our legal obligations such as taxation and archiving.

Collection and use of information when you are using our services

In order to provide our services, Vault Wallet collects certain types of data. Data entered or transferred to Vault Wallet by Users such as texts, questions, contacts, media files, etc., remain the property of the User and may not be shared with a third party by Vault Wallet without express consent from the User.

Vault Wallet will process your account data you provide when you open Vault Wallet account, perform transactions on the Vault Wallet website, or use other Vault Wallet Services. This information may include:

·       Contact information, such as name, home address, email address, date of birth.

·       Account information, such as username and password.

·       Identity verification information, such as an image of your government issued ID, passport, national ID card or driving license, and under special conditions also a social security number.

·       Residence verification information, such as utility bill details, phone bill or similar document.

·       The source of the account data is a user who opens an account. The account opening data will be used and processed for the purposes of performing a detailed Know Your Customer (KYC) procedure according to necessary Anti-Money Laundering Regulations.

We may need to process sensitive information about you. This is information that can reveal a person's:

·       racial or ethnic origin

·       political opinions

·       religious or philosophical beliefs

·       trade union membership

·       genetic or biometric data (if used for identification purposes)

·       information concerning a person's health, sex life or sexual orientation

According to the PA and the GDPR we need a second lawful basis to use special category data. This is typically your explicit consent, or exercising legal rights establishing, defending, or exercising legal claims or reasons of substantial public interest.

Vault Wallet will process the information we collect or generate when you use our services

·       details about payments to and from your account;

·       details about services from us and our partners that you show interest in; and

·       details about how you use our services;

 When you sign up for an account, we may search your record at:

·       credit reference agencies to verify your identity);and

·       fraud prevention agencies, KYC (Know Your Customer) and AML (Anti Money Laundering) service providers to fulfil our legal duties.

When you send a data subject access request

The legal basis for the processing of your personal data in the context of handling your data subject access request is our legal obligation and the legal basis for the subsequent documentation of the data subject access request is both our legitimate interest and our legal obligation. The purpose of processing your personal data in the context of processing data when you send a data subject access request is to respond to your request. The subsequent documentation of the data subject access request serves to fulfil the legally required accountability. Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the processing of a data subject access request, this is three years after the end of the respective process. You have the possibility at any time to object to the processing of your personal data in the context of the processing of a data subject access request for the future. In this case, however, we will not be able to further process your request. The documentation of the legally compliant processing of the respective data subject access request is mandatory. Consequently, there is no possibility for you to object.

Internal Administration

We may transfer your personal data within Vault Wallet for internal administrative purposes (e.g., accounts receivable management, controlling, risk management, indirect purchasing, compliance with legal obligations such as tax returns, money laundering). Employees of Vault Wallet are trained on the data protection regulations of Vault Wallet within the scope of an online training and are obliged to maintain the confidentiality of personal data or security measures in accordance with internal guidelines if they participate in the processing. At Vault Wallet, personal data is processed automatically by means of computer technology and manually in the form of a paper file or a file by individual authorised employees who need this data for their work (need-to-know principle).Within the framework of the processing of personal data, technical and organizational measures have been taken to ensure the protection of personal data.

Using the App

When you use our App, you may be able to provide certain personal and non-personal information including your Phone Number and E-Mail Address. To protect your privacy, we send you an OTP for registration and identification in the system.

Downloading the APP

The APP can be downloaded from the "Google Playstore" a service offered by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, US, if you are resident outside the EU and Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland if you are a resident within the EU, or the Apple App service "App Store" a service of  Apple Inc., 1 Infinite Loop, Cupertino, CA 95014, US, if you are resident outside the EU and  Apple Distribution International Ltd, Hollyhill Industrial Estate, Hollyhill Ln, Knocknaheeney, Cork, Ireland, if you are a resident within the EU, to install our APP.

Downloading it may require prior registration with the respective App store and/or installation of the respective App store software.

Installing the APP

As far as we are aware, Google collects and processes the following data: License check, network access, network connection, WLAN connections, and location information. However, it cannot be ruled out that Google also transmits the information to a server in a third country. We cannot influence which PII Google processes with your registration and the provision of downloads in the respective App store and App store software. The responsible party in this respect is solely Google as the operator of the Google Play Store.

As far as we are aware, Apple collects and processes the following data: device identifiers, IP addresses, location information, it cannot be excluded that Apple also transmits the information to a server in a third country. This could in particular be Apple Inc. One Apple Park Way, Cupertino, California, USA, 95014. We cannot influence which PII Apple processes with your registration and the provision of downloads in the respective app store and app store software. The responsible party in this respect is solely Apple as the operator of the Apple App Store.

Device information

We or rather Google and Apple on our behalf collects information from and about the device(s) you use to access the APP, including hardware and software information such as IP address, device ID and type, device-specific and APP settings and properties, APP crashes, advertising IDs (AAID), information about your wireless and mobile network connection such as your service provider and signal strength; information about device sensors such as accelerometer, gyroscope, and compass and Payment Data and Billing confirmations.

Authorizations and Access

We may request permission to access the following:

·       Camera, Gallery/Files, Hardware.Camera.Autofocus during the Verification process, uploading a QR code, Scanning of a QR Code, “Share” your account details

·       Device Biometric Features (If you wish to enable biometrics which can be used to unlock your device if you choose to select “Remember me” and enable permissions of biometrics),

·       Internet (We will require internet permissions in order for you to be able to access our Customer Support/FAQs ETC),

·       Vibrate (If you have opted to receive Notifications from us and your device is set to vibrate, your device will vibrate when receiving a notification from us),

·       Full Screen Intent (This permission is granted in order for us to display the application in a full screen intent)

·       Flashlight (If you have enabled the optional permissions for us to access your camera whilst completing a “Scan” of a QR Code,)

·       Read External Storage (In order for our application to run and function we require to read external storage)

·       Write External Storage (In order for our application to run and function we require to read external storage)

·       Device ID (UQI for Android and UDID for IOS) we take this in order for us to be able to implement Security Measurements and features 

The legal basis for data processing is our legitimate interest and the provision of contractual or pre-contractual measures. You can deny access on your device via the Settings/Notifications/ options of your device; however, this means that our APP may not function as intended.

Disclosure of your information

We may disclose your Personal Data to any member of our group, which means any corporation deemed to be related to us.

We may disclose your Personal Data to third parties:

·       for the purposes of providing our services that you request from us, fulfilling our obligations arising from any contracts entered into between you and us, processing payments in connection therewith or otherwise in connection with your use of our Platform;

·       in the event that we sell or buy any business or assets, in which case we may disclose your Personal Data to the prospective seller or buyer of such business or assets; or

·       if we or substantially all of our shares or assets are acquired by a third party, in which case Personal Data held by us about our customers will be one of the transferred assets.

We may also disclose your Personal Data to a governmental or regulatory body, law enforcement, or other authorities, in order to enforce our terms of use for the Platform, to cooperate with any direction, request or order from such parties or to report any suspected unlawful activity.

We will reveal user’s personal data without his/her prior permission only when we have reason to believe that the disclosure of this information is required to establish the identity of, to contact or to initiate legal proceedings against a person or persons who are suspected of infringing rights or property belonging to Vault Wallet or to others who could be harmed by the user’s activities or of persons who could (deliberately or otherwise) transgress upon these rights and property. We are permitted to disclose personal data when we have good reason to believe that this is legally required and when the competent authorities have required to present them with such Personal Data.

Data Intermediary

Where we process your Personal Data as a data intermediary on behalf of a third party, we will process your Personal Data in accordance with the instructions of the third party and shall use it only for the purposes agreed between you and the third party.

All such Personal Data will be protected and retained in accordance with this privacy policy and the terms of the PA and GDPR. We will take steps to inform the third party of any requests, complaints or questions that you may have regarding such Personal Data.

Do Not Sell

We do not sell data to third parties. However, we might, making available, transfer, communicate electronically, consumer’s personally identifiable information by the business to a business affiliated inclusive with a third party but not for monetary but for other valuable consideration.

Changes to our privacy policy

Any changes we may make to our privacy policy in the future will be posted on our Platform and, where appropriate, notified to you by e-mail.

Contact

Questions, comments and requests regarding this privacy policy are welcome and should be addressed to [email protected].