Holdstation Wallet(“HOLDSTATION”), a company incorporated in Vietnam, is committed to protecting and respecting your privacy, managing your personal data transparently and in a fair and lawful manner. This policy is adapted from EU Regulation 2016/679 which provides guidance on the personal information processing rules within the context of General Data Protection Regulation
Your Personal Data
We may collect and process personal data provided directly by you; we also process, insofar as necessary, personal data provided to us by third parties, including publicly accessible data, personal data legitimately provided by other group companies and personal data provided by other trusted third parties. You are responsible to provide us with personal data that is correct and inform us of any changes occurring in your data in writing, so that we may take all reasonable measures to keep our records in your regard correct and up to date. You have the choice, at any time, not to provide your Personal Data to HOLDSTATION; however, do note that failure to provide such Personal Data for us to process may result in HOLDSTATION being unable to continue to provide our products or services to you or pursue any contractual relationship which may be in place between us.
Personal Data you give us
You may give us personal data about you by filling in forms on the platform or by corresponding with us by phone, e-mail, discord, decentralize apps or otherwise. This includes personal data you provide when you register on the platform, use our services, or when you report a problem with the platform. Examples of such Personal Data you may provide to us may include (depending on the nature of your interaction with us) your name, passport or other identification number, telephone number, mailing address, email address, identification data (such as copies of your identification document or personal photograph) and financial and credit card information, and any other information relating to any individuals which you have provided us in any forms you may have submitted to us, or via other forms of interaction with you. You may also provide us with Personal Data of your officers, employees, agents and customers in order for us to provide you with our products and services.
Personal Data and information we collect about you
With regard to each of your visits to our site we may automatically collect the following information:
- technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform. An IP address is a number that is automatically assigned to your computer when you signed up with an Internet Service Provider. When you visit our website, your IP address is automatically logged in our server. We use your IP address to help diagnose problems with our server, and to administer our website.
- Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and
methods used to browse away from the page and any phone number used to call our customer service number.
- If you contact us or we contact you using the telephone, we may monitor or record the phone call for quality assurance, training and security purposes.
Personal Data we receive from other sources
We may receive personal data about you if you use any of the other websites we operate or other services we provide. In this case, we will have informed you when we collected that data that it may be shared internally and combined with data collected on this site. We are also working closely with third parties (including but not limited to, business partners, sub- contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.
Apart from personal data, we may collect other types of information which is not related to an individual and which is anonymous. For example, the number of website visitors and the number of website users using a particular service. In this way, we hope to improve our customer services.
Processing your personal data
We collect and process your personal data, including data provided by you, data we collect about you and data provided by third parties in the following ways and upon the following grounds:
- for the fulfilment of contractual obligations entered into between you and us and to provide you with the information, products and services that you request from us;
- for the fulfilment of legal obligations and legal compliance;
- to notify you about changes to our service;
- to ensure that content from our site is presented in the most effective manner for you and for your computer;
- to provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about;
- to provide you, or permit specific third parties to provide you, with information about goods or services we feel may interest you. If you are an existing customer, we will only
contact you by electronic means (e-mail or SMS or others) with information about goods and services like those which were the subject of a previous sale or negotiations of a sale to you, subject to your consent. If you are a new customer, and where we permit selected third parties to use your data, we (or they) will contact you by electronic means only subject to your consent.
If you do not want us to use your data in this way, or to pass your details on to specific third parties for marketing purposes, you have to the right to withdraw your consent at any time by writing to our Data Protection Officer. Withdrawal of consent does not affect the legality of data processed prior to such withdrawal.
To safeguard legitimate company interests which require processing beyond the fulfilment of contractual obligations such as:
+ Processing of personal data for the purposes of our daily operations including billing and debt collecting;
+ Processing of personal data for market research, statistical purposes and service and product development;
+ Processing of your data for the protection of the company’s legal position in the event of legal proceedings;
+ Processing for the purposes of ensuring network and information security, including preventing unauthorised access to electronic communications networks and stopping damage to computer and electronic communication systems;
+ Processing for the purpose of reporting possible criminal acts or threats to public security to competent authorities;
+ To administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
+ To improve our site to ensure that content is presented in the most effective manner for you and for your computer;
+ To allow you to participate in interactive features of our service, when you choose to do so;
+ To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
+ To make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them;
+ For accurately carrying out and confirming your instructions, for training purposes and/or in order to improve the quality of our customer services. Such data shall include calls, email communication and online chats.
You shall have the right to object to any of the above-mentioned legitimate company interests as a basis for the processing of personal data by contacting our Data Protection Officer. If you submit an objection, we will no longer process your personal data unless we can give evidence of mandatory or legitimate reasons for processing, or processing serves the enforcement, exercise, or defense of our company’s legitimate interests.
Disclosure of your personal data
We may share your personal data with any member of our group of companies, which means our subsidiaries and our ultimate holding company and its subsidiaries.
We may share your personal data with selected third parties including:
- Business partners, suppliers and sub-contractors for the performance of any contract we enter into with them;
- Analytics and search engine providers that assist us in the improvement and optimisation of our site;
- Credit reference agencies, due diligence agencies or ID verification agencies or service providers for the purpose of Anti-Money Laundering and Counter-Financing Terrorist.
We may disclose your personal data to third parties for the purpose of fulfilling legitimate company interests:
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
- If HOLDSTATION or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets;
- For the purposes of billing, debt collecting credit rating and verification and fraud prevention;
- For the protection of the company’s legal position in the event of legal proceedings.
We will ensure that all companies to which we disclose your Personal Data will only process it in accordance with our instructions and on our behalf, and may only use such data to the extent to which we ourselves are entitled. All such companies and third parties will further be required by us to meet the requirements of data protection legislation and our strict privacy and retention policies to keep your data secure at all times.
We may, if necessary or authorised by law, provide customer data to law enforcement agencies, regulatory organisations, courts or other public authorities. We attempt to notify our customers about legal demands for their Personal Data unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe that the requests are disproportionate, vague or lack proper authority, but we do not promise to challenge every demand.
Your personal data shall not be processed for purposes other than those it was collected for; should further processing be required, you will be informed of that purpose and provided with all necessary information.
You shall have the right to object to any of the above-mentioned legitimate company interests as a basis for the processing of personal data and to forward any queries you may have by contacting our Data Protection Officer. If you submit an objection, we will no longer process your personal data unless we can give evidence of mandatory, legitimate reasons for processing, which outweigh your interests, rights, and freedoms, or processing serves the enforcement, exercise, or defence of interests.
Storing of data
Where we store your personal data
The security of your Personal Data is our top priority. HOLDSTATION takes all physical, technical and organisational measures needed to safeguard Personal Data. We will use all reasonable efforts to protect your information in a highly secure data centre, adhering to strict computer security standards. We have put in place, privacy protection control systems designed to ensure that our customers’ information remains safe, secure and private.
All personal data you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your data, we will use strict procedures and security features to try to prevent unauthorised access.
In line with applicable law, we shall, where lawfully obliged, notify the competent authorities and/or you in cases of personal data breach and will keep a log of any such breaches.
For how long will your data be stored?
We will process and store your personal data for as long as it is necessary in order to fulfill our contractual, regulatory and statutory obligations. We will assess and respond to requests to delete data and we shall accordingly delete data provided that the data is no longer required in order to fulfill contractual, regulatory or statutory obligations, or the fulfillment of any obligations to preserve records according to law.
We will normally retain your records for a minimum of five years to comply with legal, regulatory and contractual requirements unless there is a particular reason to hold the records for longer; your personal data may be retained for longer periods in the event of prospective or pending debt collecting, legal or law-enforcement proceedings and until such proceedings are formally and definitively concluded.
In relation to your personal data, you have the right to:
- access to your personal data;
- the rectification of your personal data;
- restrict processing;
- object to processing;
- data portability;
- request erasure of your personal data.
You shall also have the right to ask us not to process your personal data for marketing purposes. We will seek your explicit consent (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also withdraw your consent by contacting our Data Protection Officer.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Access to Data
You have the right to request, free of charge, access to and a copy of your personal data as processed by us.
Automatic Decision Making
In establishing and carrying out our business relationship, we generally do not make use of fully automated decision making. If we use this procedure in individual cases, we shall inform you of this separately, provided it is a legal requirement.