Updated on 23 November 2020
Security and privacy are our priorities.
We are committed to protecting our customers’ Personal Information and being compliant with all data protection laws including the Regulation EU 2016/679 of the European Parliament and of the Council
What types of personal information do we collect?
When you are entering in relationship with us, you should be aware that we collect the following types of information:
Personal Information, including personal data, you provide online and on applications or other forms, or through discussions we have with you or your representatives, such as your name, address, date of birth, country of residence, contact information and any information that is provided through your communications with Tokeny. Some of the Personal Information we collect is considered to be sensitive personal data as defined in article 9 of GDPR, by accepting the terms of service (available here) and using Tokeny services you explicitly consent to the collection of this data. If you do not consent to this collection please contact our data officers at email@example.com and they will comply with any of your requests to delete, edit, or audit your data.
We also collect aggregate and anonymise data that does not identify you specifically, including data collected automatically when you enter our Site. This may include cookies, pixel tags, web beacons, browser analysis tools and web server logs. This also includes information from the devices you use to access our Site or mobile platform, your operating system type or mobile device model, browser type, domain, and other system settings, as well as the language your system uses and the country and time zone of your device, among other information. If you would like more information regarding this data please feel free to contact us at firstname.lastname@example.org and we would be more than happy to assist with your questions and requests.
Why do we collect personal information?
We use and disclose Personal Information only for the purposes that we disclose to you. We will request your consent before we use or disclose your Personal Information for any materially different purpose. We specifically disclose your data to the Offering organizers and their agents who use the Tokeny portal in order for you to have the opportunity to participate in the Offerings or for administering the corresponding Digital Asset after its initial issuance. In addition, unless specifically described below, consent may be obtained in any legally sufficient method.
We collect, use and disclose Personal Information to meet the needs of our customers and users to better our business purposes for their benefit, including:
– to provide the products and services you request;
– the day-to-day operation and maintenance of accounts and services;
– collection of amounts outstanding from you;
– to tell you about services or other related products and services offered by us;
– to manage our Site and services;
– to understand our customers and users needs;
– to learn about our markets and design and improve our services and related products;
– to administer and process any request for information or job application;
– to comply with our regulatory and legal obligations, including but not limited to warrants, subpoenas and court orders or to meet government tax reporting requirements;
– to contact you (including by way of e-mail), including:
– in response to your inquiries and comments, and to safeguard your interests;
– to provide you with information about our products and services, or those of others, that you may be interested in;
– to investigate suspicious activities; and
– to protect our rights and property.
We may cooperate with governments and law enforcement officials or private parties to enforce and comply with applicable laws and regulations. We may disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate: to respond to claims, legal process, subpoenas; to protect our intellectual property, rights and safety and the property, rights and safety of a third party or the public in general; and to stop any activity we consider illegal, unethical or legally actionable activity.
Where do we store personal information?
It is important to note that some or all of your Personal Information provided to third party service providers may be held in third countries which are considered as not providing the same level of data protection as the EU country in which you provided your Personal Information. You acknowledge and understand that your Personal Information will be subject to the applicable laws of each such jurisdiction, which may not provide for the same level of data protection as your country of residence. If you have questions about our policies and practices with respect to service providers outside your jurisdiction, including the collection, use, disclosure or storage of such Personal Information by our service providers worldwide, you may contact us at email@example.com.
What third parties do we work with?
In order to participate in an Offering, you will have to provide Personal Information to pass Know Your Customer (KYC) and Anti-Money Laundering (AML) verifications as required by law. Tokeny provides this data to third-party companies designated by the Digital Asset Issuer as their agent(s) to verify all KYC/AML information and/or more broadly to administer the Digital Asset during its existence. When you participate in a company’s Offering your Personal Information including personal data is shared with the offering company or its designated agent. Be aware that when you participate in an Offering, the Offering company may use a different KYC/AML service than the service Tokeny uses. Tokeny also provides your anonymized data to the company Analytics Solutions in order to do analytics to better operate our company for our users.
When you subscribe to purchase tokens from an Offering that uses our platform, you will be asked to provide financial data and information to verify your status and successfully make financial transactions. Depending on how you wish to purchase tokens you may be required to provide financial data, such as your bank routing number and bank account number, to enable the offering company to utilize your bank account to originate funds transfers and make subsequent investment transfers to you if necessary.
We may collect certain information through cookies or other automated means. A cookie is a small text file that will be stored in your device via your browser primarily to enhance the convenience of using the Site or to enable certain functions. A cookie allows its sender to identify the device on which it is stored during the period of validity of consent which does not exceed 13 months.
Some cookies are essential in order to enable you to use our Site, others are functional cookies or may be performance cookies or advertising cookies.
The default cookies we are using are essential in order to enable you to use our Site and use its features. Without these cookies, we would not be able to provide you with the services you have asked for.
The functional cookies enable us to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added. If you do not allow these cookies then some of all of our services may not function properly.
The performance cookies collect information about how you use our Site, which page do you go more often or if you get error messages from our Site. Tokeny may share the data collected via these cookies with third party providers.
The advertising or targeting cookies are used to deliver adverts more relevant to you and your interests. They remember that you have visited our Site and this information is shared with other organizations such as advertisers.
Except for functional or default cookies, the use of a cookie on a device depends on your choice, which can be made and modified freely and at any time. You can manage cookies by setting your browser to accept or reject cookies on your device, either globally or cookie by cookie.
To manage cookie settings in your browser, please go to the “Help” menu of your browser, where you will be provided with all the necessary information about how to set your preferences:
For Microsoft Internet Explorer 8.0 and more:
- Go to “Tools” menu, then “Internet Options”
- Click on “Confidentiality”
Select your preferred level of confidentiality
For Mozilla Firefox:
- Go to “Tools” then “Options” menu
- Click on the “Privacy” settings
Select your preferred option on the “Cookie” menu
- Go to “Files” > “Preferences”
- Click on “Privacy”
Select your preferred options
For Android browser:
- Click on the upper right button
- Go to “Settings” then “Privacy & security menu”
Select your preferred option
For Dolphin Browser on Android:
- In the Menu, go to “More” then “Settings”
- Select the “Privacy & security settings” menu
Select you preferred option in the “cookies” menu
For Safari on iOS:
- In the “Settings” app, go to “Safari” menu
- Go to “Accept cookies” entry under “Privacy”
Select your preferred option
For Google Chrome:
- Click the Chrome menu on the browser toolbar
- Select “settings” then click “show advanced settings”
- In the “Privacy” section, click the “Content settings” button.
In the “Cookies” section, you can change cookies settings
How do we protect the confidentiality and security of personal information?
We will provide an adequate level of protection for the Personal Information and make sure that appropriate technical and organizational security measures are in place to protect the Personal Information against accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or access, ad against all other unlawful forms of processing. We have a data protection audit and recovery system in place. We track and maintain strict records for all of our data processing activities. We place your account information on the secure portion of our Site, using firewalls and other security technology to protect our network and systems from external attacks, and we require you to enter a unique and confirmed email and password to access your account information online. Our servers are enabled with Secure Sockets Layer (SSL) technology to prevent unauthorized parties from viewing the Personal Information that you provide or access during a secure session (look for the padlock icon on your browser). In addition, if you access information online, we use digital certificate services to authenticate that you are transacting with our Site and not the Site of an impostor.
However, to the extent that the internet is not completely secure, we cannot guarantee that any of your Personal Information stored or sent to us will be completely safe. We encourage you to use caution when using internet to access our Site.
When you provide personal data to our Site you retain the right to access to the personal data, we maintain about you. If you request such access, we will provide you with all the information as required by law on the purposes of the processing categories of data processed, categories of recipients, data retention term, etc…
You may also obtain a copy of any personal data that we hold on you in our records in a format compatible and structure to allow you to exercise your right to data portability when the processing is based on your consent or on the performance of an agreement between you and us.
You may also request that we correct, amend, erase, any personal data which is incomplete, out of date or inaccurate.
You can request deletion of your personal data if (i) your personal data is no longer necessary for the purpose of the data processing, (ii) you have withdrawn your consent on the data processing based exclusively on such consent, (iii) you objected to the data processing, (iv) the personal data is unlawful, (v) the personal data must be erased to comply with a legal obligation applicable to Tokeny.
You can request the restriction of the processing, (i) in the event the accuracy of your personal data is contested to allow Tokeny to check such accuracy, (ii) if you wish to restrict your personal data rather than deleting it despite the fact that the processing is unlawful, (iii) if you wish Tokeny to keep your personal data because you need it for your defence in the context of legal claims, (iv) if you have objected to the processing but Tokeny conducts verification to check whether it has legitimate grounds for such processing which may override your own rights.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or significantly affects you, except if you explicitly consent to it or if it is necessary to enter into or perform a contract between you and us.
You also have the right to lodge a complaint with the competent supervisory authority. In Luxembourg the competent authority is the National Commission for Data Protection (CNPD).
When your personal data processing is based on your consent, you may withdraw it at any moment, without affecting the lawfulness of processing based on your consent before withdrawal.
When your personal data is processed to pursue our legitimate interests, you may object to such processing, if our legitimate interest may be overridden by your interests and freedom.
To exercise your rights, you should contact us at firstname.lastname@example.org. We will respond to your requests without undue delay and at the latest within 1 month.
We will not retain data longer than is reasonably considered necessary to fulfil the purposes for which it was collected, processed or as required by applicable laws or regulations. When a user makes a request to have their account deleted and all data deleted, all personal Data collected through the platform will be deleted, as permitted by applicable law.
Controlling your data
We want to make it clear to our Users that you have control of your data. If you wish to have your personal data edited, deleted, or audited please contact us anytime at email@example.com and our data collection officers will be able to accommodate your requests as permitted by applicable law.
No users under 18 years of age
Our Site is not targeted to persons under the age of 18 and we do not knowingly collect Personal Information from persons under the age of 18. Any user that attempts to submit information revealing their age to be under 18 will be blocked and their information deleted.
Updates to this policy