Source: https://www.bitwala.com/privacy-policy/
Timestamp: 2019-12-10 11:03:55
Document Index: 526088450

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 21']

Privacy Policy - Bitwala
You can, as described above, configure your browser in a manner that no personal data is processed.
On our Website and our App, we use Jetpack on the basis your consent. Jetpack is a visitor access statistics evaluation tool provided by Automattic, Inc. 132 Hawthorne Street, San Francisco, CA 94107, USA, using the tracking technology of Quantcast Inc., 201 3rd St, Floor 2, San Francisco, CA 94103-3153 , USA. WordPress.com-Stats uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about the use of this website is stored on a server in the USA. The IP address is anonymized immediately after processing and prior to its storage. You may refuse the use of cookies by selecting the appropriate settings on your browser software. However, we point out that in this case you may not be able to use all the features of this website in full. You can survey and use the data through Quantcast with effect for the future, by placing an opt-out cookie in your browser by clicking on the link "Click here to opt-out“: https://www.quantcast.com/opt-out. If you delete all cookies on your computer, you must set the opt-out cookie again.
Wordpress has committed to self-certification with the US Department of Commerce to uphold the principles of the EU-US Privacy Shield. Further information on the privacy of Wordpress can be found here.
On the basis of your consent, we use the marketing tool customer.io for contextual e-mailing. Customer.io is a service of Peaberry Software Inc. d / b / a Customer.io, 921 SW Washington Street, Suite 820, Portland, Ore., 97205, USA. Your personal data (e-mail address, name) provided upon the registration for the Pre-Signup process will be transmitted to a server of the company Peaberry Software Inc. in the USA and stored there. Customer.io has committed to self-certification with the US Department of Commerce to uphold the principles of the EU-US Privacy Shield. Further information on Customer.io's privacy can be found at: https://customer.io/legal/privacy-policy/
On the basis of your consent, we use Mailgun Technologies, Inc., a Delaware corporation headquartered at 535 Mission St. San Francisco, CA 94105 USA for sending and tracking emails. Mailgun is a marketing tool for sending emails for promotional purposes.
Mailgun Technologies Inc., a Delaware corporation, has committed itself to upholding the principles of the EU-US Privacy Shield by self-certification with the US Department of Commerce. For more information on the privacy of Mailgun Technologies Inc, a Delaware Corporation, please visit: https://customer.io/legal/privacy-policy/
On the basis of your consent, we use Intercom, headquartered at 55 2nd St. San Francisco, CA 94105, USA for sending messages in sales and after-sales service. Intercom is a customer service tool for communicating with customers. Your personal data (name, e-mail address, possibly provided documents) will be transmitted on Intercom's servers in the USA and stored there.
Intercom has committed itself to self-certification with the US Department of Commerce to uphold the principles of the EU-US Privacy Shield. Further information on the privacy of Intercom can be found at: https://www.intercom.com/de/terms-and-policies
On the basis of your consent, we use Mixpanel Inc, headquartered at 405 Howard Street, San Francisco, CA 94105, USA for analyzing mobile data service provider. Mixpanel is a tool for understanding user behavior in the interface and in the mobile application. Your personal data (name, e-mail address, IP address, personal data that you have provided us with) will be transmitted to the servers of Mixpanel Inc. in the USA and stored there.
Mixpanel has achieved self-certification with the US Department of Commerce to uphold the principles of EU-US Privacy shield. For more information about Mixpanel's privacy, please visit: https://mixpanel.com/legal/privacy-policy/
Our website uses social-media plug-ins of the following social networks Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA ("Facebook"). Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA, 94043, USA Reddit Inc., 101 New Montgomery St, San Francisco, CA 94105, USA
The legal basis is Art. 6, para. 1, lit. f) GDPR, based on our legitimate interest in you sharing our contents via social media and in our expanding our reach in this way. Should personal data be transmitted to the USA, these social networks have acceded to the EU-US Privacy shield. The social network may receive the information that you have called up the corresponding page of our online site. This will be done irrespective of whether you have an account with the provider and are logged-in there. If you are logged-in, these data will be assigned directly to your account. If you turn on the activated plug-in and e.g. link the page, the social network may also store this information, including data and time, in your user account and inform your contacts of this publicly if you have activated the relevant function. If you do not wish for assignment with your profile at the respective social network, you must log-out before activating the plug-in.
The providers may store these data as usage profiles and use them for purposes of advertising, market research and/or needs-based design of its website. Such an evaluation will be made in particular (for users not logged-in, too) for the display of needs-based advertising and to inform other users of the social network about your activities on our website.
You may object to being profiling by social media providers:
as a Facebook user you can disable advertising on the basis of social actions in the Ad preferences. You can also completely prevent the loading of Facebook social media plug-ins by using supplementary programs for your browser, e.g. Facebook Blocker. You will find more detailed information in Facebook’s Privacy Statement.
as a Twitter user you can disable advertising on the basis of social actions in the Ad preferences. You can also completely prevent the loading of Twitter social media plug-ins by using supplementary programs for your browser. You will find more detailed information in Twitter’s Privacy Statement.
as a Reddit user you can disable advertising on the basis of social actions in the Ad preferences. You can also completely prevent the loading of Facebook social media plug-ins by using supplementary programs for your browser. You will find more detailed information in Reddit’s Privacy Statement.
*as a LinkedIn user you can disable advertising on the basis of social actions in the Ad preferences. You can also completely prevent the loading of LinkedIn social media plug-ins by using supplementary programs for your browser. You will find more detailed information in LinkedIn’s Privacy Statement.
II. Data Processing for the purposes of our Banking Platform
If you use our Banking Platform, Bitwala and Partner Bank will be considered Joint Controllers within the meaning of the EU data protection regulation (GDPR) and the federal data protection law (BDSG) for any processing related to your use of the Platform.
1. Responsibility for Platform related requests and inquiries
As Joint Controllers both Bitwala and Partner Bank are responsible for any Platform related request and inquiries. Please address any privacy related matters to: dataprotection@bitwala.com or privacy@solarisbank.de As our Bitwala Customer Support Team has a special division for privacy related issues, your request is most likely processed faster if you contact us on dataprotection@bitwala.com.
While you can reach out to either Bitwala or Partner Bank, we have shared privacy related tasks according to our contribution to the Platform. Therefore, any banking and crypto related request will redirected to and handled by Partner Bank, even if you contact Bitwala. Vice Versa, inquiries regarding the technical provision and marketing use of the Platform will effectively be processed by Bitwala. Bitwala and Partner Bank work closely together in any case to provide the best service to you.
2. Overview over data processing for our services
Our Platform provides you the opportunity to create and manage a bank account and a wallet, which allows you to easily connect your crypto funds to the fiat world. To perform these services, we need to process your personal data, including:
Banking Information (IBAN, BIC, transaction history, personal data)
Crypto Information (public keys, transaction history)
Trading Information (order information, transaction history)
Card Payment Data (transaction data, transaction history)
Account Information (Address Data, Contact Information, Identification Documentation, Tax Information)
3. Processing of data for your User Account
Bitwala will be considered the responsible Joint Controller for processing of personal data for the provision of your User Account and will therefore handle any of your account related requests.
To use our Platform you need a User Account. For this reason and based on Art. 6 para. 1 lit. b) GDPR, we process your Account Information.
4. Processing of data for our Blockchain Interface
The Partner Bank will be considered the responsible Joint Controller for processing of personal data for the provision of our Blockchain Interface and will therefore handle any of your blockchain related requests.
Core feature of our banking services is a Blockchain Interface that allows you to interact with your Wallet and the respective Blockchain. While we have no control over processing of personal data on the respective Blockchain, we are processing your data to create and manage the access to your wallet.
Your wallet will be provided by a third party service provider. For the creation process you have to generate a pair of keys which will be used to access your wallet. The original generation of the keys takes place exclusively on your own end device. At no point will Bitwala or BitGo have access to the funds in your wallet.
Please remember to save guard your keys with the appropriate measures and to always use strong password encryption. Bitwala will not be able to help with lost access to wallets and/or lost funds. As the wallet provider is located in the USA, Crypto Information in will be transferred to the US upon any of your interactions with the wallet, including its creation.
Initiating and receiving transactions
Any incoming or outgoing transactions will be initiated on our Platform and sent via your Wallet to the respective Blockchain. Therefore, for each transaction, one of the addresses stored in your wallet will be published to the respective open public blockchain and be publicly available over the internet. While the transaction data may not seem to be personally identifiable information it is still considered personal data under GDPR as it is possible for us to match single addresses to our users for the provision of our services.
While we are not able to control any processing that happens on the Blockchain, we take industry standard precautions to ensure that your privacy is protected.
Our Platform provides you an overview over any transaction sent or received from both your wallet and bank account. To maintain an overview of your crypto transaction we keep a history of all incoming and outcoming transactions on your wallet.
Blockchain Security Aspects
Your digital assets are stored on the blockchain and can be accessed or transferred using the wallet. Neither Bitwala or Partner Bank nor the wallet provider can cause transactions from your wallet except on your request. Any request issued via our Blockchain Interface to the wallet provider must be signed with a private key which is exclusively known to you and serves as you “wallet password”.
To further increase security, our Blockchain Interface is whitelisted with the wallet provider. Therefore, any interaction from another interface with your wallet will be blocked by default. If you wish, however, to transfer your wallet and make it accessible from third party interfaces, you may transfer your wallet by following the instructions in the Bitwala Help Center.
5. Processing of data for our Banking Interface
Partner Bank will be considered the responsible Joint Controller for processing of personal data for the provision of our Banking Interface and will therefore handle any of your banking related requests.
Please refer to the Privacy Policy of Partner Bank for further information.
6. Hosting of Web- and Mobile-Applications
Partner Bank will be considered the responsible Joint Controller for processing of personal data for the hosting of the applications that enable you to interact with your bank accounts and wallet and will therefore handle any of your requests related to the technical provision of the Banking and Blockchain Interface.
In addition to the data processed to provide the functionality of our Blockchain and Banking Interfaces, whenever you access our Platform via the Website or Bitwala Mobile App, we will process the above mentioned technical data to establish the communication between your end-device and our applications.
Accessing our Platform via the Bitwala Mobile Application
Additionally, when you access our Platform via the Bitwala Mobile Application, we collect certain App Specific Data to provide our Services, based on on Art. 6 para. 1 lit. b) GDRP, as well as to optimize and market our product, based on our legitimate interest to do so, Art. 6 para. 1 lit. f) GDPR.
If you enable push notifications, we will process your App ID in order to send you relevant information which may be triggered by certain events on your account, wallet or mobile device. This Processing is based on your implicit consent given when you chose to which extent you would like to receive notifications, Art. 6 para. 1 lit. a GDPR.
In our App, we also use tracking devices for performance and marketing analytics purposes. While technically different, effectively these tracking devices work similar to cookies by enabling us to assign a pseudonymous identifier to a certain device. Based on your consent, provided when first accessing our App, we use Google Analytics, Customer.io and Mixpanel for mobile devices. Please see above for relevant information on how we transfer data to these services and how we protect your data when doing so or how you can prevent these services from tracking you.
Hosting our Applications
The web and mobile applications on which our Platform runs are hosted on servers provided by Amazon Web Services Inc., 410 Terry Avenue North, Seattle, Washington 98109, USA (“AWS”). The servers we use are located within the European Economic Area. For certain technical services, however, data may be processed outside the EEA, especially in the USA.
AWS is Privacy Shield certified, asserting an adequate level of protection according to the adequacy decision of the European Commission 2016/1250. Additionally, AWS is bound to our instructions by a data processing agreement, implementing Standard Contractual Clauses of the European Commission.
You have given an express declaration of consent for this, pursuant to Art. 6, para. 1, lit. a GDPR,
Further transmission is necessary, pursuant to Art. 6, para. 1 lit. f) GDPR, for bringing, exercising or defending legal claims, and no reason exists to suppose that you have a predominant and properly protected interest in preventing your data from being passed on,
We have a legal duty to pass on your data pursuant to Art. 6 para. 1 lit. c) GDPR, or
This is legally permissible and requisite, pursuant to Art. 6 para. 1 lit. b) GDPR, for the handling of contracts with yourself or for the execution of precontractual actions which are being carried out at your request.
We store personal data only as long as necessary to fulfil our contractual or statutory duties. This means that, as long as your account is active, we will keep any data required to provide our Services. Upon your deletion of your account, we will delete any of your data, provided it is not required for purposes of evidence, in which case we keep it until expiration of statutory periods of limitation, or for statutory retention periods.
You have the right to information about the processing of your personal data at any time and free of charge. This information includes an overview of the data relating to you, as well as a copy of such data (Right to Access). Should data be or become inaccurate, we are obliged to correct the information on your request (Right to Rectification). You may at any time request the deletion of data (Right to Erasure). Wherever we are not able to delete your data, as may be the case when we are subject to statutory retention periods, data processing will be restricted. Processing will also be restricted upon your request, if you believe that the data we have stored are not correct or if there is a dispute over the legality of the processing (Right to Restriction of Processing). You may at any time request us to transfer your personal data to you or a third party of your choice (Right to Data Portability).
You can exercise your rights with either Joint Controller, i.e. Bitwala or Partner Bank, by using the above contact details. However, for your convenience we have implemented a special data privacy team at Bitwala which will handle and, where necessary, forward all requests, which can be reached at:
dataprotection@bitwala.com
Under Art. 7 para. 3 GDPR you have the right to withdraw any consent you may have given to us at any time. In this case, data processing will no longer take place based on your consent. The withdrawal however does not affect the lawfulness of past processing activities. If you would like to withdraw any consent given to us, please contact either of the Joint Controllers using their contact details provided above or direct your request to:
Alternatively you may use features provided within our applications to withdraw your consent.
Wherever we process your data on the basis of legitimate interests under Art. 6 para. 1 lit. f) GDPR you have the right to object to the processing of your data according to Art. 21 GDRP.
If you would like to object to any of our performance or marketing analytics purposes, please use one of the above listed opt-out methods or contact: