Introduction
This Privacy Policy (“Policy”) is stating the details relating to personally identifiable information DRPC (the term “DRPC” in this Policy refers to DRPC Staking, a legal entity incorporated under the laws of Cayman Islands, and its Affiliated Parties, whether together or separately («we», «us», «our»)), collects and uses and to the User’s («you», «your», «user») rights hereunder. This Privacy Policy applies to: all means of access to dRPC website, including all subdomains (collectively, the “Website”) and/or the use of DRPC services or any other features, technologies or functionalities, websites, software and copyright assets and other services which DRPC have or have licensed to Users and/or which are offered by DRPC through the Website or any other means (collectively, the “Services”). This Policy should be considered an integral part of, and should be read together with DRPC Terms (Terms of Use, other Terms located at the Website depending on application) (the “Terms”). Should the User have any questions about our processing of Personal Data or about this Privacy Policy, please refer to the last section of the document for information on how to get in touch with us.
The term “Personal Data” in this Policy refers to personally identifiable information the User provides when using the Website and/or the Services and/or the content and/or in any other contact with DRPC, its affiliates and their shareholders, members, directors, officers, employees, any company authorized by it, and representatives, except for any anonymized Personal Data. The term “Affiliated Parties” in this Policy refers to DRPC partners, affiliated companies and third parties.
PLEASE READ THIS POLICY BEFORE USING THE WEBSITE AND/OR THE SERVICES. IF YOU DO NOT AGREE WITH THIS POLICY AND TERMS, PLEASE DO NOT USE THE WEBSITE AND/OR THE SERVICES.
What Personal Data does DRPC collect?
DRPC collects and processes the following types of the User’s Personal Data:
Identification Data, such as the User’s name, date of birth or any other Identification Data provided by the User;
Contact Data, such as the Users’ email address;
Telephone number;
Transaction Data such as the details about Users’ actions on or relating to the Website and/or the Services;
Technical Data such as Users’ login data, internet protocol addresses, browser types and versions, operating systems and platforms and other technologies on the devices Users use to access the Website and/or the Services;
Usage Data such as the information about how User uses the Website and/or the Services; and
Marketing and communications Data such as the User’s preferences in receiving marketing communications from DRPC and User’s communication preferences.
DRPC does not collect any sensitive data about Users that includes details about their religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about Users’ health and genetic and biometric data. DRPC only collects Personal Data that it deems to be reasonably necessary to fulfill Users’ requests and DRPC legitimate business objectives. Personal Data does not include any publicly available information from government records and de-identified or aggregated consumer information.
Correcting personal information
Users are required to review and update their personal information to ensure that the information provided to DRPC is correct.
How and why does DRPC use Users’ Personal Data?
Set out below is the description of the ways DRPC intends to use its Users’ Personal Data and the legal grounds on which DRPC will process such data. Where relevant, we also explain what our legitimate interests are.
The most common legal/lawful grounds for DRPC processing of Users’ Personal Data are:
Where DRPC needs to enter into and/or perform a contract with User;
Where it is necessary for our legitimate interests (or those of a third party), and the User’s interests, provided, however, that these legitimate interests do not infringe on User’s fundamental rights;
Where DRPC needs to comply with a legal or regulatory obligation.
DRPC may process Users’ Personal Data on more than one lawful ground, depending on the specific purpose for which DRPC is using Users’ data. Please do not hesitate to email us for details about the specific legal grounds DRPC is relying on to process Users’ Personal Data if more than one ground has been set out in the table below:
The Users’ history
For security and operations purposes DRPC may at its sole discretion maintain records of the User’s activity on the Website, including, the Website browsing history, records of the User’s transactions, and other information related to the User’s activity on the Website.
Marketing communications
The User will receive marketing communications from DRPC if the User has:
Requested information from DRPC or obtained access to the Website and/or the Services; or
If the User provided DRPC with its details and checked the box when entering their details for DRPC to send the User marketing communications, e.g. when the User obtained access to the Website and/or the Services, or when the User signed up for a subscription (if any); and
In each case, the User has not opted out of receiving DRPC marketing communications.
DRPC will obtain the User’s express opt-in consent before DRPC shares the User’s Personal Data with any third party for such third party’s marketing purposes. Generally, DRPC does not rely on consent as a legal ground for processing the User’s Personal Data, other than in relation to sending marketing communications to the User via email. The User has the right to withdraw consent to marketing communications at any time. The User can ask DRPC to stop sending them marketing emails by following the opt-out or “unsubscribe” links on any marketing message sent to the User or by emailing at [email protected].
Where the User opts-out of receiving our marketing communications, this will not affect Personal Data provided to DRPC in the course of accessing or using the Website and/or the Services or any other experience referring to and/or applying to the Website and/or the Services.
Change of purpose
DRPC will only use the User’s Personal Data for the purposes for which DRPC collected it, unless DRPC reasonably believes that DRPC needs to use it for some other reason and that reason is consistent with the original purpose. If you wish to find out more about how the processing for the new purpose is consistent with the original purpose, please do not hesitate to email us for details. If DRPC needs to use the User’s Personal Data for a purpose unrelated to the purpose for which DRPC collected such data, DRPC will notify the User and explain the legal grounds for processing. DRPC may process the User’s Personal Data without the User’s knowledge or consent where this is required or permitted by law.
Cookies and logs
A cookie is small stream of information a website places on a user’s computer hard drive so that the website is able to remember the user’s preferences and/or the pages the user visited on the website in order to make the user’s visit more efficient and enjoyable. DRPC may use cookies to determine the number of unique visitors to the Website over a given period, or to remember the User actions on the Website. DRPC may combine the information collected through cookies with any Personal Data submitted online when using the Website to help personalize the User’s access to and the use of the Website and/or the Services. Users may decline the use of cookies by checking the appropriate option in the preferences or options menus in their browser. DRPC may collect data in the form of logs. Log data collected on web servers supplies DRPC with aggregate information about the number of visits to different pages on the Website and other navigational data. The variety of technical data DRPC may log includes:
IP address;
Device information, including device name and ID, hardware model, operating system and version, and mobile network information;
Browser information;
Cookie information;
Date/time of access;
Requested page(s); and
Referring page(s).
Please notice that we may use these types of Cookies:
If you do not agree with these cookies, you may manage cookies in your web browser settings. You can find more information at aboutcookies.org.
Pixel Data
Depending on the User’s interaction with the Website and/or the Services, DRPC may use (or have others use on our behalf) pixels, SDKs and other storage technologies, which operate similar to cookies, to collect or receive information from DRPC, the Website and/or the Services and apps to provide metrics services and target ads. In this case we implement the same rules as we implement to Cookies.
Information from other sources
As part of DRPC due diligence process, where it is required by applicable laws, DRPC may transmit and receive personal information about the User for the purposes of assessing the User fitness to use the Website and/or the Services and to prevent fraud and identity theft.
Users’ rights on the collection, use and distribution of Personal Data
Opt-In/Opt-Out
DRPC allows Users to monitor the way in which DRPC uses their personal information obtained by DRPC. All promotional materials P2@ sends to Users (e.g. “newsletters” or “information bulletins”) contain internal mechanisms that allow Users to block future mailings (Opt-out, or “unsubscribe”).
Right to access, rectify, modify, erase and object
Users have the right to request access, rectification, or erasure of their data that DRPC has collected. Personal Data that was used or is being used for performance of a contract with the User, for data verification purposes cannot be erased upon User’s demand, and it will be handled in accordance with the governing laws. The User also has the right to object or restrict, for legitimate purposes, the processing of the User’s Personal Data, as well as the right to data portability. If the User chooses to restrict DRPC access to Personal Data, DRPC may be unable to provide certain Services to the User. The User may also withdraw its consent to receive marketing communications and/or share their Personal Data with DRPC. Users who wish to deactivate their account may do so in accordance with the Terms. Removed information may survive in backup copies for a reasonable period of time but will not be generally available to DRPC and/or other third parties via the Website and/or the Services. The removal of the information and/or Personal Data that was used or is being used for performance of a contract with the User, for data verification purposes cannot be accomplished upon the User’s demand, and such Personal Data will be handled in accordance with the governing law.
Removed information is retained for DRPC internal statistic purposes along with the User’s history of actions and requests relating to the Website and/or the Services. The User will not have to pay a fee to access their Personal Data (or to exercise any of the other rights relating to its Personal Data on the Website and/or the Services). However, DRPC may charge a reasonable fee if the User’s request is clearly unfounded, repetitive, or excessive. Alternatively, DRPC may refuse to comply with the User’s request in such circumstances. DRPC may need to request specific information from the User to help DRPC confirm the User’s identity and ensure their right to access their Personal Data (or to exercise any of the User’s other rights). This is a security measure to ensure that Personal Data is not disclosed to any unauthorized person. DRPC may also contact the User to ask the User for further information in relation to the User’s request to speed up the response. DRPC will try to respond to all legitimate requests within three month. Occasionally it may take longer if the User’s request is particularly complex or the User has made a number of requests. In this case, DRPC will notify the User and keep the User updated. If you wish to exercise any of the rights set out above, please email us.
Data retention
DRPC will only retain the User’s Personal Data for as long as necessary to fulfil the purposes DRPC collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate Personal Data retention period, DRPC considers the volume, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of the User’s Personal Data, the purposes for which DRPC processes the User’s Personal Data, whether these purposes could be achieved through any other means, and the applicable legal requirements. By law, for accounting and tax purposes DRPC has to keep basic information about our Users (including contact, identity, and transaction data) for seven (07) years after they cease being Users. In some circumstances DRPC may anonymize the User’s Personal Data (so that it can no longer be associated with the User) for research or statistical purposes, in which case DRPC may use this information indefinitely without further notice to User.
Sharing and disclosure of Personal Data
Sharing and disclosure of Personal Data. DRPC does not sell its Users’ data to any third party for marketing purposes. Generally, DRPC will not share Users’ Personal Data with third parties without its Users’ permission. However, since in provision of its Services DRPC collaborates with various partners, affiliated companies, and third parties, DRPC may have to share Users’ Personal Data with them. DRPC may also disclose or share Users’ data with:
Service providers who provide IT and system administration services, data sourcing or verification services;
Subsidiaries or other group companies;
Affiliated parties;
Professional advisers, including lawyers, bankers, auditors, and insurers who provide consulting, banking, legal, insurance, and accounting services; and
Authorities.
DRPC only allows such third parties to process its Users’ Personal Data for specified purposes and in accordance with its instructions and applicable data protection laws.
DRPC works with trusted partners who perform certain key operational functions for it. The partners DRPC works with include website hosting, marketing and transactional communications, customer service, product analysis, business intelligence, and electronic payment and signature providers. DRPC may work with other service providers or third parties to undertake other functions. User information may be shared with these partners in order to maintain and develop the Website and/or provide Services. When DRPC shares its Users’ personal information with vendors and service providers who perform functions on DRPC behalf, DRPC mandates such parties to maintain the security and confidentiality of its Users’ information, as well as limit the use of the information to what’s reasonable and necessary to carry out their collaboration with DRPC, and in doing so, to comply with all applicable laws and regulations
Advertisers
DRPC may share its Users’ personal information with third-party marketers who provide advertising services on DRPC behalf. In order to deliver offers and advertisements that may be of interest to the User, DRPC displays targeted advertisements and DRPC content on the Services and on other digital properties or applications, and such targeted advertisements and content are based on the information provided to DRPC by its Users and the information sourced by DRPC from third parties who have independently collected such information. These advertisers collect and use the information gathered through cookies and other technology, including personal information about User and their devices, in order to provide advertisements about goods and/or services (including our own) that may be of interest to the User. These companies typically use tracking technologies to collect this information, and their use of such technologies is subject to their own terms and privacy practices.
Legally mandated disclosures
DRPC may disclose its Users’ Personal Data if required to do so by law or if DRPC believes that such actions are necessary to:
Conform to the law, comply with a judicial or court order, or comply with the legal process served on DRPC or its Affiliated parties;
Protect and defend DRPC rights and property, the services, the users of the services, and/or our Affiliated parties;
Act under the circumstances to protect the safety and security of the Users of the Website and/or the Services.
When legally required by a law enforcement or government agency to do so, DRPC will share its Users’ information. Additionally, DRPC reserves the right to disclose any of the User’s Personal Data that it believes is necessary to mitigate liability, comply with audit, regulatory or compliance requirements, defend against claims of third parties, assist government law enforcement agencies, protect the security of the Website and/or the Services, or protect the rights of the Users, DRPC and Affiliated parties or other parties. Finally, Personal Data may be disclosed or transferred as part of, or during negotiations on, a merger, consolidation, sale of DRPC assets, as well as equity financing, acquisition, strategic alliance, or in any other situation where Personal Data may be transferred as one of the business assets of DRPC.
International data transfers
Users’ Personal Data is collected and processed in accordance with the applicable privacy laws and the EU General Data Protection Regulation. DRPC may share, store, process or attempt to process all Users’ data worldwide. When Personal Data is shared or transferred, DRPC will ensure that the transfer will be subject to appropriate safeguards in accordance with applicable data protection legislation and corresponding level of protection.
Security
DRPC has taken steps to ensure that the Personal Data collected by DRPC is secure. DRPC has also taken a range of technical and organizational measures to protect the confidentiality, security, and integrity of the Personal Data collected from Users, including protecting Users’ data from unauthorized access, loss, change, or deletion. Personal Data is stored in secure operating environments that are not available to the public and that are only accessible to authorized employees, consultants and/or service providers. DRPC also has security measures in place to protect the loss, misuse, and alteration of the information under our control. Such actions include but are not limited to, physical controls, encryption, eligibility restrictions, policies, etc. DRPC has put in place procedures to deal with any suspected Personal Data breach and will notify Users and any applicable regulator of a breach where DRPC is legally required to do so.
Privacy of minors
The Website is not meant to be used by anyone under the age of 18. DRPC does not knowingly collect Personal Data, such as name and email address, from children under 18 years old, unless expressly permitted by their parent or guardian. DRPC believes it is important to safeguard the privacy of children and encourages parents to regularly take an interest in their children’s online activities.
Governing law
Any dispute, controversy, or claim arising out of or in connection with this Policy, or the breach, termination or invalidity thereof, shall be governed by the laws and venue as stated in the Terms.
Changes of Policy
This Policy may be subject to change from time to time. If substantial changes are made to the Policy, DRPC will notify the User of these material changes by posting them on the Website. Users are encouraged to check back and review this Policy from time to time so that they will always are informed of what information is being collected, how it is used, and to whom it is being disclosed. The User’s continued use of the Website and/or the Services, the User content and/or intellectual property subject to this Policy will signify the User’s acceptance of the Policy changes.
Contact
If you have any questions about this Policy, please contact DRPC at [email protected]