General Provisions.
The present agreement on personal data processing is a public contract (hereinafter referred to as the agreement) entered into between the owner of the digital (electronic) currency exchange service – https://crystal-trade.org/ (hereinafter referred to as the Operator) and the user, in accordance with the data protection article in the British Virgin Islands, based on the Law of the British Virgin Islands “On Personal Data and Their Protection,” as well as the provisions of the Federal Law “On Personal Data,” and applies to all information containing personal data of Users that the Operator may obtain about Users during their visit to the website: https://crystal-trade.org/.
1.Basic Concepts and Terms Used in the Agreement.
1.1. Personal data – information, any information directly or indirectly related to a specific or identifiable user of the website https://crystal-trade.org/, recorded on electronic, paper, or other material carriers.
1.2. Website – a collection of graphic and informational materials, as well as computer programs and databases, accessible on the Internet at the network address: https://crystal-trade.org/, providing services for the exchange of tokens.
1.3. User – any visitor of the website https://crystal-trade.org/.
1.4. Operator – an individual, the owner of the digital (electronic) currency exchange service – https://crystal-trade.org/, who independently or jointly with other individuals organizes and/or carries out the processing of personal data, determines the purposes of processing personal data, the composition of personal data subject to processing, actions (operations) performed with personal data.
1.5. Automated processing of personal data – processing of personal data using computer technology.
1.6. Collection of personal data – actions aimed at obtaining personal data.
1.7. Provision of personal data – actions aimed at disclosing personal data to a specific person or a specific group of persons.
1.8. Distribution of personal data – any actions aimed at disclosing personal data to an indefinite circle of persons (transferring personal data) or acquainting an unlimited circle of persons with personal data, including publication of personal data in the media, placement in information and telecommunication networks, or providing access to personal data in any other way.
1.9. Anonymization of personal data – actions that make it impossible to determine the belonging of personal data to a specific user or other subject of personal data without using additional information.
1.10. Blocking of personal data – temporary suspension of personal data processing (except for cases when processing is necessary to clarify personal data).
1.11. Destruction of personal data – any actions that result in the irrevocable destruction of personal data with the impossibility of further restoring the content of personal data in the personal data information systеm and/or result in the destruction of material carriers of personal data.
1.12. Processing of personal data – any action (operation) or a set of actions (operations) performed with personal data, with or without the use of automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data.
1.13. Website Services – all services available for use on the site https://crystal-trade.org/.
1.14. Cookies – small text files in which the browser records data from visited websites. Cookies perform a range of functions, such as allowing users to navigate between pages efficiently by remembering their preferences and enhancing their experience with the website. They can also ensure that the online advertisements users see correspond to their interests.
1.15. IP address – a unique network address of a node in a computer network built on the IP protocol, allowing the determination of the user’s location. The website does not track location more precisely than city and region.
1.16. Non-personal data – information automatically transmitted during the viewing of advertisements by the user and when visiting pages where the statistical sсript of the systеm is installed: the address of the requested page, coоkie information, IP address, information about the browser, referrer (address of the previous page), access time.
1.17. Personal data protection – a set of measures, including legal, organizational, and technical measures, implemented to achieve the goals established by the Law of the BVI “On Personal Data and their Protection.”
1.18. Cross-border transfer of personal data – the transfer of personal data to the territory of a foreign state to the authorities of a foreign state, a foreign individual, or a foreign legal entity.
2. Privacy Policy.
2.1. The website respects the user’s right to privacy and complies with the Privacy Policy, thereby establishing the Operator’s obligations regarding the non-disclosure and protection of the confidentiality of personal data provided by the user upon request of the Operator during registration on the website and/or when using the website services.
2.2. Personal data permitted for processing under the Privacy Policy is provided by the user through the completion of registration and other forms on the website and includes the following information:
2.2.1. Last name, first name, patronymic of the user;
2.2.2. Contact phone numbers of the user;
2.2.3. Email address;
2.2.4. Identification document details, including individual identification number (IIN), year, month, date, and place of birth;
2.2.5. Photographs;
2.2.6. Front side photo of the bank card and the cardholder’s full name;
2.2.7. User’s phone number linked to the bank card;
2.2.8. Wallet numbers and addresses of the user in payment systems.
2.3. The website collects and processes anonymized data about users (including “coоkie” files) using internet statistics services (Yandex.Metrica, Google Analytics, and others). Anonymized user data collected through internet statistics services is used to collect information about user actions on the site, improve the quality and content of the site. The Operator processes anonymized data about the user if it is allowed in the user’s browser settings (enabling the storage of “coоkie” files and the use of JavaScript technology). The above-mentioned data is collectively referred to as Personal Data.
2.4. Any other personal information not specified above (services history, browsers used, operating systems, etc.) is also subject to secure storage and non-disclosure, except as provided in clauses 4.3 and 4.4 of this Agreement.
3. Purposes of Collecting and Processing Users’ Personal Data.
3.1. The Operator collects and processes personal data of the user only if they are filled in and/or submitted by the user independently through special forms located on the website: https://crystal-trade.org/. By filling in the corresponding forms and/or submitting personal data to the Operator, the user expresses their consent to conclude this Agreement.
3.2. The Operator uses the personal data of the user for the following purposes:
3.2.1. User identification during registration on the website to provide services on the website;
3.2.2. Processing and receiving payments from the user;
3.2.3. Fulfillment of the Operator’s obligations to the user;
3.2.4. Providing effective customer support to the user;
3.2.5. Providing the user with personalized services;
3.2.6. Communication with the user, including sending notifications, inquiries, and information related to the use of services, provision of services, and processing user requests;
3.2.7. Improving the quality of services, user convenience, development of new services and products;
3.2.8. Informing the user about events and promotions;
3.2.9. Conducting statistical and other research based on non-personal data, as well as optimizing advertising messages;
3.2.10. User identification (verification) for the purpose of combating money laundering and the financing of terrorism, in accordance with the applicable laws and regulations.
4. Rights and Obligations of the Parties
4.1. The User shall:
4.1.1. Provide the necessary information about personal data to use the website;
4.1.2. updаte and amend the provided information in case of any inaccuracies while using the website;
4.1.3. Cease using the website in case of disagreement with the terms of this agreement.
4.2. The User has the right to:
4.2.1. Access and edit personal data information at any time through the web interface provided within the services;
4.2.2. Opt-out of receiving informational messages by sending a request to the Operator via email at [email protected] with the subject line “Opting out of notifications about new products, services, and special offers”;
4.2.3. Withdraw their consent to the processing of personal data at any time by notifying the Operator via email at [email protected] with the subject line “Withdrawal of consent to the processing of personal data.”
4.3. The Operator shall:
4.3.1. Use the received information solely for the purposes specified in Section 3 of this agreement;
4.3.2. Ensure the confidentiality of the provided personal data and not disclose it to third parties without the User’s prior written permission, except for the transfer of data to authorized state bodies of the BVI in accordance with the legislation of the BVI;
4.3.3. Take precautions to protect the confidentiality of the User’s personal data in accordance with the standard procedures used to protect such information.
4.4. The Operator has the right to:
4.4.1. Provide access to collect and analyze non-personal user data to third parties for statistical purposes and optimization of advertising messages. The use of non-personal data by third parties is regulated by their own privacy policies, and the website is not responsible for their use.
5. Procedure for the Collection, Storage, Transfer, and Other Types of Processing of Personal Data.
5.1. The Operator stores only the personal data necessary for providing the services of the website.
5.2. Personal data of Users are processed directly by the Operator, stored exclusively on electronic media of the website hosted on a server located in Estonia, where proper protection of personal data is ensured, resulting in the cross-border transfer of users’ personal data.
5.3. The security of personal data processed by the Operator is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with the requirements of the current legislation on the protection of personal data.
5.4. The Operator ensures the security and takes all possible measures to prevent unauthorized access to personal data.
5.5. The processing period for personal data is unlimited.
6. Other Conditions.
6.1. The use of the website by the User implies their agreement with the content of this agreement, the privacy policy stated in this agreement, the conditions for processing and storing personal data of Users, and the cross-border transfer of personal data.
6.2. This Agreement applies only to the website https://crystal-trade.org/. The website is not responsible for third-party websites that the User may access through links available on the website.
6.3. Disabling cookies may result in the inability to access certain parts of the website that require authorization.
6.4. The website collects statistics on IP addresses of its Users. This information is used to identify and resolve technical issues, as well as to monitor the legality of financial transactions.
6.5. This Agreement and the relationship between the User and the Operator are governed by the current legislation of the BVI.
6.6. The Operator reserves the right to unilaterally amend this Agreement for further improvement of the security systеm in accordance with the applicable legislation of the BVI.
6.7. All suggestions or questions regarding this Agreement should be sent to the Operator’s email address: [email protected].
The current version of the Agreement is freely available online at: https://crystal-trade.org/tos
