Privacy Policy

Data We Collect

Effective Date: December 01, 2024

At InstaDimes, we take the protection of your personal data seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

We collect the following types of personal data when you use our services:

• Identification Information: Name, email address, date of birth, address, and any other identifying information provided during the registration or verification process.
• Transaction Information: Data about your transactions, including the type of transaction, amounts, currencies involved, and payment details.
• Verification Data: Documents such as ID cards, passports, proof of address, and other information required for compliance with AML/CTF regulations.
• Communication Data: Emails and other communications you send to us.

Purpose of Data Processing

We process your personal data for the following purposes:

• To Provide Services: We process your data to offer the services you request, such as exchanging virtual currencies and processing payments.
• To Comply with Legal Obligations: We are legally required to collect and store data for AML/CTF compliance and to prevent fraud.
• To Improve Our Services: We may use your data to improve our services and to communicate with you regarding updates or changes.

Legal Basis for Processing Data

We rely on the following legal grounds for processing your personal data:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (providing services such as currency exchange).
• Legal Obligations: Compliance with legal obligations, such as AML/CTF laws.
• Legitimate Interests: For activities that are in our legitimate interest, such as improving services and communicating updates (as long as they do not override your privacy rights).

Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access: You can request a copy of the data we hold about you.
• Rectification: You can request corrections to inaccurate or incomplete data.
• Erasure: You can request the deletion of your data when it is no longer necessary, except when we are legally required to retain it (e.g., AML/CTF obligations).
• Data Portability: You can request a copy of your data in a machine-readable format.
• Restriction of Processing: You can request that we limit the processing of your data in certain situations.
• Objection to Processing: You can object to the processing of your data based on our legitimate interests or for marketing purposes.

To exercise any of these rights, please contact us at info@instadimes.com. We aim to respond to all requests within 30 days.

Data Retention

We will retain your personal data for a period of 5 years following the termination of our business relationship or the completion of the last transaction, as required by AML/CTF regulations. After this retention period, your data will be securely deleted or anonymized unless otherwise required by law.

Data Sharing and Transfers

We do not share your personal data with third parties unless:

• It is necessary to provide our services (e.g., payment processors, regulatory bodies).
• You have provided consent for us to share your data.
• We are legally required to share it (e.g., to comply with AML/CTF laws or government requests).

We may share your data with the following third parties:

• Payment processors: to facilitate transactions.
• Regulatory authorities: to comply with legal and compliance obligations.
• External service providers: to support our operations (e.g., cloud storage providers, marketing services).

If we transfer your data outside of the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as using Standard Contractual Clauses or other mechanisms approved by the European Commission.

Data Security

We implement technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure. These measures include encryption, firewalls, secure storage, and regular security audits. We take the privacy of your data seriously and strive to ensure that it is kept safe.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights under GDPR, please contact us at:

InstaDimes s.r.o.
Email: info@instadimes.com
Address: Příčná 1892/4, Nové Město, 110 00 Praha 1, Czech Republic

Complaints to Data Protection Authorities

If you believe that we have infringed upon your privacy rights or have not properly complied with GDPR, you have the right to lodge a complaint with the Czech Data Protection Authority (ÚOOÚ) or the data protection authority of your country of residence. For more information, please visit https://www.uoou.cz.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date." We encourage you to review this policy periodically to stay informed about how we protect your data.