GDPR Compliance Statement
This GDPR Compliance Statement sits in line with our Privacy Policy, is supplemental and applies toall European Union Citizens that are using our services. As such Rabbit Company LLC proceeds withall data processing procedures (e.g., collection, processing, and transmission) in accordance withRegulation (EU) 2016/679 (General Data Protection Regulation).
Nothing in this Statement is intended to contradict or limit the applicability of the information
provided in our Privacy Policy.
The following provides you with an overview of the type of data collected and how it is used andpassed on, the security measures we take to protect your data and how you can exercise your rights.
Personal data is information that makes it possible to identify a natural person. This includes inparticular, your name, date of birth, address, telephone number, e-mail address, but also your IPaddress. Anonymous data as such only exists if no personal reference to the user can be made.
The Data Controller
In accordance with Art. 24 GDPR, the person responsible for processing of personal data when using
our website and our services is:
PasskyRabbit Company LLC
1603 Capitol Avenue, Suite 413A,
Cheyenne, WY, Laramie, 82001,
United States
Web: www.passky.org
E-mail: info@passky.org
Twitter: https://twitter.com/RabbitCompany66
GitHub: https://github.com/Rabbit-Company
Discord: https://discord.com/invite/tCCjnuQ2Pn
Categories of data subjects and types of data processed
During the course of using our Platform and services, we process the following types of data fromvisitors and users inventory data, contact data, content data, usage data, and meta/communication data
(e.g., device information, IP addresses).
Purpose of the processing
The Purpose of processing personal data are:

provision of the online offer, its functions, and contents,responding to contact requests and communicating with users, andsecurity measures.

Relevant legal basis
The following legal basis, unless specifically described below apply to the processing of yourpersonal data:

the legal basis for obtaining consent is art. 6(1)(a) and art. 7 GDPR,
the legal basis for processing in order to fulfil our services and carry out contractual measuresand respond to enquiries is art. 6(1)(b) GDPR,
the legal basis for processing in order to fulfil our legal obligations is art. 6(1)(c) GDPR, andthe legal basis for processing in order to protect our legitimate interests is art. 6(1)(f) GDPR.

GDPR Compliance Statement
Security of your personal data
We take appropriate technical and organizational measures in accordance with Art. 32 GDPR, taking
into account the state of the art, the implementation costs and the nature, scope, circumstances andpurposes of the processing, as well as the varying likelihood and severity of the risk to the rights andfreedoms of natural persons, in order to ensure a level of protection appropriate to the risk.
The measures include, in particular, ensuring the confidentiality, integrity and availability of data bycontrolling physical access to the data, as well as access to, input, disclosure, ensuring availability andsegregation of the data. We also have procedures in place to ensure the exercise of data subjects'
rights, deletion of data and response to data compromise. Furthermore, we already take the protectionof personal data into account during the development and selection of hardware, software andprocedures, in accordance with the principle of data protection through technology design and throughdata protection-friendly default settings (Art. 25 GDPR).
Cooperation with processors and third parties
If, in the course of our processing, we disclose data to other persons and companies, transmit it tothem or otherwise grant them access to the data, this will only be done on the basis of a legalpermission (e.g. if a transmission of the data to third parties is necessary for the performance of thecontract, you have consented, a legal obligation provides for this or on the basis of our legitimate
interests (e.g. when using agents, web hosts, etc.). If we commission third parties to process data on
the basis of a so-called "processing agreement", this is done on the basis of Art. 28 GDPR.
Transfers to third countries
Our main operations are based in the USA and your personal data is generally processed, stored andused within in the USA. In some instances, your personal data may be processed outside the USA. Ifand when this is the case, we take steps to ensure there is an appropriate level of security, so yourpersonal data is protected in the same way as if it was being used within the USA.
Your rightsThese rights are standardized in the GDPR. This includes:

the right to information (Art. 15 GDPR),
the right to rectification (Article 16 GDPR),
the right to erasure (Article 17 GDPR),
the right to restriction of data processing (Article 18 GDPR),
the right to data portability (Article 20 GDPR),
the right to object to data processing (Article 21 GDPR),
the right to revoke any consent you have given (Art. 7 (3) GDPR), andthe right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR).

Please contact us at any time with questions and suggestions regarding data protection and to enforce
your rights as a data subject.
Cookies
Cookies" are small files that are stored on your device. Different information can be stored within thecookies. We may use temporary and permanent cookies and will explain this in our Cookie Policy.
The legal basis for the use of cookies is either your consent or our legitimate interest.
Deletion of data
The data processed by us will be deleted or its processing restricted in accordance with Articles 17and 18 GDPR. Unless expressly stated in this data protection declaration, the data stored by us will bedeleted as soon as it is no longer required for its intended purpose and the deletion does not conflict

GDPR Compliance Statementwith any statutory retention obligations. If the data is not deleted because it is required for other andlegally permissible purposes, its processing will be restricted. I.e., the data is blocked and notprocessed for other purposes. This applies, for example, to data that must be retained for reasons ofcommercial or tax law.
Business-related processing
In addition, we process Contract data and Payment confirmations of our customers, prospective
customers for the purpose of providing contractual services and customer care. When processing thedata provided to us within the scope of providing our services, we act in accordance with theinstructions of the client as well as the legal requirements of order processing pursuant to Art. 28
GDPR and do not process the data for any other purposes than those specified in the service. For
further information please refer to our Data Processing Addendum.
We delete the data after the expiry of statutory warranty and comparable obligations. The necessity ofstoring the data is reviewed every three years; in the case of statutory archiving obligations, thedeletion takes place after their expiry.
In the case of data disclosed to us by the user within the scope of a service, we delete the data inaccordance with the specifications of the service, in principle after the end of the service.
Changes
Because we’re always looking for new and innovative ways to improve our Platform and services,
this policy may change over time. We will notify you before any material changes take effect so thatyou have time to review the changes.
PasskyRabbit Company LLC
1603 Capitol Avenue, Suite 413A,Cheyenne, WY, Laramie, 82001,
United States
Web: www.passky.org
E-mail: info@passky.org
Twitter: https://twitter.com/RabbitCompany66
GitHub: https://github.com/Rabbit-Company
Discord: https://discord.com/invite/tCCjnuQ2Pn
This GDPR Compliance Statement was last updated on Sunday, August 28, 2022