TOL Token Privacy and Policies


This Privacy Policy applies to the rules of using our webside operating at www.tokloktoken.com, which is hereinafter referred to as the "Service".


The purpose of our Privacy Policy is primarily to explain to you why we need all the information that we require from you, to indicate exactly what data we collect from you, what rights you have and to provide you with all the information that you are required to provide, among others, Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC), hereinafter also referred to as "GDPR".


1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA:



The controller of your personal data is Blue TOL Limited BVI COMPANY NUMBER: 2096012 [hereinafter: Administrator]


You can contact the Administrator by writing to the above address, by e-mail at admin@tokloktoken.com.



2. WHY DO WE COLLECT YOUR DATA?



Visiting and using our Service due to its specificity is connected with the necessity to collect your personal data from you. We keep all your data strictly confidential and use them only for the purposes of which we informed you at the time of their collection or in this Privacy Policy.


When you use our stock exchange, we collect and process data that you provide us directly when creating and verifying your account on our Website (these are the data that you enter on the forms provided by us and those contained in the documents sent to us) and those that you generate using the services offered by our Website.


We need to collect such a wide range of information in order to comply with the legal provisions that are binding on us on customer identification, monitoring, combating and assessing the risk of fraud, combating money laundering, financing terrorism. Therefore, if you do not provide the data requested in the course of registration and verification, or if the data prove to be false or you object to their processing, we will not be able to continue to provide you with our services.


If you wish to use the additional services offered by us, we will process your data that we have collected for the purpose of providing them, in accordance with their description in the Terms and Conditions or provided to you separately. These services may include, among others: Newsletter service, contests, sending informational messages.


During your visit to our Service, certain data about your activity on the Service will be collected automatically. In this way we collect and collect information such as: your IP address, request URL, domain name, device identifier, browser type, browser language, number of clicks, amount of time spent on particular pages, date and time of using the Service, type and version of operating system, screen resolution, data collected in server logs and other similar information.


The services offered by us are intended for adults. Accounts that do not meet this requirement will be deleted.


3. PROCESSING OF PERSONAL DATA



In order to be able to process your data each time we must be entitled to do so (in accordance with the Privacy Policy and the GDRP) on one of the following legal grounds:


Your consent


A contract concluded between us (concerning the maintenance of an account on our Service, execution of purchase/sale transactions, settlements, sending newsletters, mailing).


a legal obligation, i.e. an obligation arising from legal regulations to the extent necessary to comply with the regulations that bind us;


our legitimate interest (unless your interests or your fundamental rights and freedoms prevail over our interests).



To the extent that the processing is carried out on the basis of your consent, we use the data you provide only for the purposes covered by your consent. On this basis, we will primarily implement information and marketing campaigns. Remember that you can change your mind at any time and revoke your consent.


We will also process your data for the purpose of performing the contract concluded with you (mainly concluded as a result of registration and acceptance of the Terms and Conditions of the contract for maintaining an account on our Service) in order to be able to properly provide the services that you want to use.


We will also have to process your data in order to fulfil our legal obligations. These will be situations in which, for example, we must store data resulting from transactions for tax and accounting reasons; as well as situations in which we are obliged to verify and analyse your data (including your actions taken on the Service) in accordance with applicable regulations on anti-money laundering and anti-terrorist financing.


Your personal data may also be processed if necessary at the legitimate request of the law enforcement or regulatory authorities under whose authority we are competent.


On the basis of our legitimate interest, we will process your data for the purpose of publishing advertisements for our goods and services, as well as for the purpose of asserting rights and defending against claims, for evidentiary and archival purposes.


4. HOW WE SHARE YOUR DATA WITH OTHER ENTITIES


We may share your data with other entities, among others, by..:


maintain your account in accordance with the Terms and Conditions


send messages that you have agreed to receive


comply with our legal obligations


to pursue our legitimate interest



We always provide only the data that is necessary to perform a given activity or task and only for the time needed to perform it.


In accordance with the above, we share your personal data:


entities to which we outsource services related to the processing of personal data to which we are entitled


entities processing your data on our behalf


public authorities, at their request, such as financial supervision, tax and law enforcement authorities


our authorized employees and associates to whom your personal information is disclosed so that they can perform their duties.


When entrusting your data to us, we make sure that the entities we cooperate with ensure the implementation of technical and organizational measures to ensure proper protection and protection of the transmitted data and that they process them in accordance with the applicable regulations, including the provisions of the GDPR


5. HOW LONG WE STORE YOUR DATA



The storage period of your data is related to the purposes and basis of their processing. This means that we only store and process your data for as long as it is necessary for the purpose for which it was obtained.


As our services are subject, among other things, to Directive 2015/849 of the European Parliament and of the Council of 20 May 2015 on the prevention of the use of the financial system for the purpose of money laundering or terrorist financing, we are required by law to keep them for at least five years after the end of our business relationship with you.


The retention period of your data required by law may change with changes in applicable law.



6. THE CONSEQUENCES OF NOT PROVIDING US WITH YOUR DATA:



In case of registration and verification of your account, we process only those data without which the contract concluded with you cannot be performed due to "technical" or legal reasons. If you do not provide us with the required data, we will not be able to open or maintain an account with you, let alone carry out transactions as part of the account.


Whenever we obtain your consent to the processing of your personal data, it is entirely voluntary. If you do not agree with the consent we ask for (or revoke it), we will not take the actions to which the consent applies.


7. YOUR RIGHTS:


The right to request access to your personal data - both those that you have provided us with and that we process, as well as those that have arisen in the course of our cooperation (e.g. transaction history);


The right to request that we rectify your personal data immediately if it is incorrect;


The right to request that incomplete personal data be supplemented, including by providing an additional statement.


The right to request the immediate deletion of your data ("the right to be forgotten"); - in this case, we will delete your data without undue delay (provided that we leave the data which we must retain in accordance with the law);


The right to demand a restriction of processing;


The right to receive the data you have provided to us in a structured, commonly used machine-readable format and you have the right to forward the data to another controller;


The right to object to the processing of personal data for the purposes of direct marketing which causes us to stop processing your data for the purposes of direct marketing;


The right to object on grounds relating to your specific situation if we process your personal data on the basis of a legitimate interest. However, we will continue to process personal data to the extent necessary if there is a particularly legitimate reason on our part to do so.


If the processing of personal data is based on your consent, you have the right to withdraw your consent at any time. However, the withdrawal of consent does not affect the lawfulness of the processing of your personal data by us, which we carried out on the basis of consent prior to the withdrawal of consent.


Withdrawal of consent with respect to the Terms of Use and Privacy Policy will mean deletion of your account on the Website and deletion of personal data provided by you.


8. PROFILING


Profiling involves the automated processing of personal data in order to assess the personal factors of an individual, and in particular to analyse or forecast aspects relating to the economic situation, personal preferences or interests, reliability or behaviour of the data subject.


On our Website, we process your personal data, including your activities on the Website, in order to assess the possibility of offering you our services. Our profiling comes down to two aspects:


iIdentify your preferences and needs in order to better tailor the Service to your needs;


verify the accuracy of the information you provide and assess the risk of money laundering or terrorist financing in order to comply with the obligations imposed on us by Directive 2015/849 of the European Parliament and of the Council of 20 May 2015.


9 COOKIES FILES:


Cookies are small text information in the form of text files sent by a server and saved on the website of a visitor to the Website. 


The Administrator may process data contained in cookie files when visitors use the Service for the following purposes:


Identify users as logged in the Service and show that they are logged in;


Storing data from completed forms, surveys or logging into the Service;


Customize the content of the Service to your individual preferences (e.g. color, font size, page layout) and optimize your use of the Service;


Keeping anonymous statistics showing how you use the Service.


By default, most web browsers available on the market accept cookies by default. Everyone has the ability to determine the terms of use of cookies using the settings of their own web browser.


The Administrator also processes anonymized exploitation data related to the use of the Service (so-called logs, domain) to generate statistics helpful in administering the Service. For this purpose, we use the services of third parties. The data processed by these entities are of aggregate and anonymous character, i.e. they do not contain identification features of persons visiting the Website.


10. DATA SECURITY:



We store, use and transmit your data in a manner that ensures that it is properly protected, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, by appropriate technical and organisational measures.


We have put in place a number of security measures to ensure that your information is not lost, used or altered.


Notwithstanding the above, please remember that it is impossible to guarantee 100% secure data transmission over the Internet or a method of electronic data storage. Therefore, we ask that you also take appropriate precautions to protect your personal data. If you suspect that your personal information has been compromised, in particular account information or password, please contact us immediately.



11. CHANGE THE PRIVACY POLICY:



Our services will change over time as we adapt them to the needs identified and our ability to operate. Technologies, standards and legal requirements related to the provision of our services will also change. This means that in the future we will be able, and sometimes will have to, make changes to our Privacy Policy. With each change, a new version of the Privacy Policy will appear on the Website together with an appropriate announcement and will be in force in a new wording, from the date of notification of the change. Significant changes to the Privacy Policy will be communicated directly to your e-mail address.