Privacy Policy

Veserus privacy policy

Veserus is committed to protecting the privacy, confidentiality and security of personal data we process. This privacy policy explains what personal data, on which purposes and for how long is processed by Veserus and what are your rights and how you can use these rights with regard to your personal data. By visiting and using Veserus website, Veserus Platform and Services and Veserus products at www.veserus.com (hereinafter Veserus Services) you are accepting the practices described in this privacy policy. If you do not wish to share your personal data with Veserus and its partners please refrain from using Veserus Services. If you have any questions, please contact Veserus via our published support channels.

Content of the privacy notice

1. Introduction
2. What personal data is Veserus processing
3. Where does Veserus get your personal data from
4. Why Veserus processes your personal data (purpose)
5. Legal basis of the processing
7. To whom Veserus discloses your personal data
8. Storing your personal data
9. Your rights and how you can use them.

Introduction

Veserus OÜ is Estonian company (registry code 14643061; address at Punane tn 56, 13619 Tallinn, Estonia) and the latter is the controller, i.e. person who is deciding what kind of personal data and on which purposes to collect with regard to providing you Veserus Services.

Veserus processes your personal data to be able to provide you Veserus Services:
- virtual currency wallet service
- service of exchanging a virtual currency against a fiat currency

Veserus would also like to notify you that with regard to your personal data you have many rights: you may ask from Veserus access to, rectification or erasure of your personal data. If the conditions are met you may also restrict the processing of your personal data and object to such processing. You also have the right to lodge a complaint to supervisory authority. All the listed rights and how to use them are explained in more detail below in section 8.

2. What personal data is Veserus processing

Veserus would like to explain that “personal data” is any information related to you, such as name, e-mail address etc.

Here are the examples of what kind of personal data Veserus may process: your name; date of birth; gender; ID documentation information, such as passport number; non-signature IDs; nationality; signature; photographs; employment related information; tax ID number; contact information; financial information such as, credit and debit card numbers, PANs, IBANs, bank account numbers and details, sort codes and other payment details, pay slips; communication data such as, records of our communications with you, including any messages you send to Veserus; transaction information like transactions you make on Veserus platform; Veserus account data; online identifiers like geolocation, IP address, browser fingerprint, browser name and version and OS; information collected via cookies (see our cookie policy).

3. Where does Veserus get your personal data from

Mainly Veserus gets your personal data directly from you. For example, when you register for a Veserus account or Veserus newsletter on the website; send Veserus an e-mail; respond to Veserus surveys or use any of Veserus Services.

Veserus also gets your personal data from other sources. Such sources may be ID identity verification service providers, IT service partners etc.

Veserus also collects personal data from public sources like media and government databases etc.

4. Why Veserus processes your personal data (purpose)

Veserus processes your personal data for various legitimate purposes and the examples are hereby explained.

Veserus processes your personal data to provide you services, such as
- virtual currency wallet service
- service of exchanging a virtual currency against a fiat currency

Without the personal data listed above it is not possible to provide you Veserus Services (or with all the features and functionalities).

Veserus also processes your personal data to maintain and better the services that Veserus offers. For example, by processing your personal data Veserus may improve its web-page by offering the information in more languages. Additionally, Veserus would like to offer you personalized services, including content and ads and for that reason Veserus may process your personal data.

Veserus processes your personal data to ensure and improve safety of Veserus Services and among others to prevent and respond to fraud, offences against Veserus.

Veserus processes your personal data to communicate with you with regard to services provided by Veserus. For example, Veserus may communicate with you via e-mail to respond to your inquiries.

5. Legal basis of the processing

Veserus ensures that all the processing of personal data has a legal basis.

Veserus processes your personal data to enter into a contract with you, based on and to fulfill such contract you have entered into with Veserus to use Veserus Services. The contract is deemed to be concluded by opening the Veserus Account.

Veserus also may process your personal data based on Veserus legitimate interest. Such legitimate interest is to maintain and better the Veserus Services as described above in section 4 and also improve user experience. Veserus will make sure that your interests and fundamental rights and freedoms will be protected and considered as primary in that process.

Veserus may also have an obligation deriving from the law to process your personal data. For example, preventing fraud and other offenses, like money laundering.

Where appropriate Veserus also processes personal data based on your consent. Veserus would like to remind you that you are free to give your consent and also take it back whenever you want. However, withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

6. To whom Veserus discloses your personal data

Veserus may disclose your personal data to such service providers, without whose services Veserus cannot offer you Veserus Services. Veserus has contractual relations with third parties, inter alia, to get following services: e-mail service; website analytics; liquidity; data hosting; legal counselling and debt collection. In the course of providing Veserus Services third party service providers may gain access to your personal data. Veserus does not guide the third-party service providers to use your personal data in any other way than in connection with providing their services.

Veserus Services may also be provided through or linked to third party platforms or third- party service providers (for example ….). Therefore, Veserus encourages you to familiarize third party service provider’s privacy statements as they may be different from this privacy notice.

Veserus also may disclose your personal data in connection to any business transfer, such as restructuring, merger, sale, etc. In the described situation Veserus does everything to ensure that your personal data is processed in accordance with this privacy notice.

Veserus may also be obliged to disclose your personal data to governmental and administrative bodies (data protection authorities, police, courts, tax and customs boards, etc.) as such an obligation may derive from the law.

In case Veserus has to disclose your personal data to countries or companies outside European Economic Area, Veserus will follow all necessary requirements provided by the applicable law.

7. Storing your personal data

Veserus does not store your personal data longer than it is necessary for the purposes for which the personal data is processed.

Veserus follows the applicable law when determining for how long Veserus has to store your personal data.

In case the applicable law does not provide any mandatory storage time period, Veserus will store your personal data throughout the time limit you or Veserus may file any claims against the other party or the supervisory authority, but no longer than 10 years as of the end of our relationship (contractual or other) or any other transaction.

8. Your rights and how you can use them

With regard to your personal data you have the following rights:

Right to access – this means that you can ask Veserus to confirm that Veserus is processing your personal data. If Veserus is processing your personal data, then you may ask for the following information from Veserus: purpose of processing; what kind of data Veserus is processing; to whom Veserus has or will disclose your personal data; criteria used to determine the storage period; information about your rights; source of your personal data and copy of your personal data stored by Veserus.

Right to rectification – this means that you may let Veserus know that the personal data Veserus is processing is not accurate and you may ask Veserus to rectify such inaccurate information.

Right to erasure – this means that if the conditions provided by the law (for example the personal data is no longer necessary in relation to the purposes for which it was processed; the personal data has been unlawfully processed; the personal data has to be erased to comply with the applicable law) are met, you may ask Veserus to erase your personal data. Veserus adds that right to erasure is not without its limits and Veserus does not have to erase your personal data if the personal data must be kept due to obligations deriving from the law or for the establishment, exercise or defense of legal claims.

Right to restriction of processing – this means that if the conditions provided by the law are met (for example the accuracy of the personal data is contested; the processing is unlawful, but you do not wish the data to be erased; Veserus does not need the personal data for the purposes of the processing, but you might need it to handle claims) you may ask Veserus to refrain from processing your personal data. If you have lawfully restricted the processing, Veserus still has the right to process your personal data to handle claims and based on your consent.

Right to data portability – this means that you may ask Veserus to transmit the personal data you have provided Veserus to another controller, if the processing is based on your consent or contract and is carried out by automated means and if such operation is technically possible.

Right to object – this means that you may object to processing of your personal data which is based on legitimate or public interests and Veserus will stop processing your personal data if there are no legitimate grounds for continuing the processing. You may also let Veserus know that you no longer wish Veserus to process your personal data for direct marketing purposes.

To exercise any of the above described rights please contact Veserus via [*] and Veserus will respond to your request within 30 days.

Right to lodge a complaint to the supervisory authority – this means that if you are of opinion that the processing of your personal data infringes general data protection regulation as provided in regulation (EU) 2016/679, then you have the right to file a claim to the supervisory authority in the European Union Member state where you reside, where you work or where the alleged infringement took place.

Veserus may change this privacy notice due to changes in applicable law and practice. Veserus will always publish up to date version of this privacy notice on its website, where it is always accessible for you.