PRIVACY POLICY

EFFECTIVE DATE: March 1st, 2023

LAST UPDATE: September 18th, 2024

Definitions

The term "personal data" means any information by which a natural person can be identified, directly or indirectly.

The term "data controller" means the natural or legal person which, alone or jointly with others, determines the purposes and means of the data processing and is responsible for processing such data in a manner consistent with the applicable legislation.

The term "data processor" means the natural or legal person which processes personal data on behalf of a data controller.

Calimero Network Group companies, hereinafter “we” or Calimero, (Calimero Limited and Calimero Trading Limited, Kalimera Consulting d.o.o.) are joint data controllers of your personal data based on joint controllership agreement between affiliated companies.

Information Sharing and Usage

When you use our online services (our website and platform available on: https://www.calimero.network/ and its associated subdomains), you will share some information with us. We want to be transparent with the data we collect, how we use it, whom we share it with, and the controls we give you to access, update, and delete your information.

Categories Explained

When you interact with our services, we collect information that you provide to us. For example, most of our services require you to set up an account, so we might need to collect a few important details about you, such as your IP address, from which we may conclude information about your usage of services. This however is not a general practice, but might be required from specific users for testing purposes. We may also request to ask your personal or business address to ensure the timely and effective provision of our services.

Other services, such as commerce products, may require you to provide us with a debit or credit card number and its associated account information, such as IP address of your device, purchases, phone number and billing/delivery address.

When you contact customer support or communicate with us in any other way, we’ll collect whatever information you provide or that we need to resolve your question/issue.

Information We Get When You Use Our Services

When you use our services, we collect information about which of those services you’ve used and how you’ve used them.

We collect information about your activity through our services. For example, we may collect information about how you interact with our services, such as number of console users and number of transactions and overall performance analytics.

While the online services are running, we might use following information for monitoring purposes:

This information is not collected or stored on our servers.

Log Information

We also might collect log information when you use our website, such as:

How We Use Information

What do we do with the information we collect:

Cookies

Cookies are small text files that we place on your device (e.g. computer or mobile device) when you visit our website. We will always ask your consent to set cookies e.g., to remember your preferences or personalize content that is more relevant to you. However, we won’t ask your consent for cookies that are strictly necessary for specific functionalities of our services, i.e. without which you wouldn’t be able to undertake certain activities.

In addition, we also use temporary cookies that are stored on your end device for a specified period of time to optimize user-friendliness. If you visit our site again to use our services, it will automatically recognize that you have already been with us and what entries and settings you have made so that you do not have to enter them again.

Necessary Cookies

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information. Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Managing Cookies

When you first visit our website, you will see our Cookie Declaration/Banner where you can accept all the cookies or manage your cookie settings. You can withdraw your consent at any time.

Information about procedure on how to enable, disable or remove cookies can be found on your Internet browser provider's website via your help screen. If you wish to learn more on this matter, we invite you to visit the following address: https://www.youronlinechoices.com.

Links to popular browsers are listed below for your convenience. Some of the listed browsers block third party cookies by default. For other browsers, please consult your browser settings for managing cookies.

We use third party cookies to optimize marketing performance and to measure the effectiveness of our advertising on other websites and social networks.

Pixel Tags/Web Beacons

A pixel tag (also known as a web beacon) is a piece of code embedded in our services that collects information about engagement on our services. The use of a pixel tag allows us to record, for example, that a user has visited a particular web page or clicked on a particular advertisement. We may also include web beacons in e-mails to understand whether messages have been opened, acted on, or forwarded.

For more details regarding privacy and personal data protection on social networks, please read:

How We Share Information/Data

We may share information about you, your personal data, in the following ways:

With all Calimero users, our business partners, and the public

We share the following information with all Calimero user as well as with our business partners and the public:

With third parties:

We share information about you for legal, safety, and security reasons

We may share information about you if we reasonably believe that disclosing the information is needed to:

We may share information about you as part of a merger or acquisition

If Calimero companies get involved in a merger, asset sale, financing, liquidation or bankruptcy, or acquisition of all or some portion of our business to another company, we may share your information with that company before and after the transaction closes.

We may also share with third parties that provide services to us or perform business purposes for us aggregated, non-personally identifiable, or de-identified information.

We process personal data for marketing purposes

When you subscribe to our newsletter, or you purchase our products. For this purpose, we process data, such as, name, surname, country, email address and we send our newsletter by using Sendgrid services.

Data Retention

We store your basic account information—like your wallet identification number. Keep in mind that, while our systems are designed to carry out our deletion practices automatically, we cannot promise that deletion will occur within a specific timeframe. We will keep your profile information for several months after the deletion, as a deactivated account. There may be legal requirements to store your data for a longer period and we may need to suspend those deletion practices if we receive valid legal process asking us to preserve content, if we receive reports of abuse or other terms of service violations, or if your account or content created by you is flagged by our automated systems for abuse or other terms of service violations. After these timeframes, your personal data will be deleted or anonymised.

In any case you can object to direct marketing activities, and you may unsubscribe from our newsletter by clicking the link in our email or responding to us with your claim. In such case we will stop with marketing activities and store your data in an unsubscribed list for three years from the day of unsubscribing, based on our legitimate interest to prove facts on compliance steps we need to take.

Finally, we may also retain certain information in backup for a limited period or as required by law and for security reasons.

Control Over Your Information/Data

We want you to be in control of your information, so we provide you with the following tools:

Access, Correction, and Portability

Because your privacy is important to us, we will ask you to verify your identity or provide additional information before we let you access or update your personal information. We may also reject your request to access or update your personal information for several reasons, including, for example, if the request risks the privacy of other users or is unlawful.

Revoking permissions

In most cases, if you let us use your information, you can simply revoke your permission by changing the settings. Of course, if you do that, certain services may lose full functionality.

Deletion

While we hope you will remain a Calimero user, if for some reason you ever want to delete your account, it is possible to do so through the website. In any case you can object to our direct marketing activities, and you may unsubscribe from our newsletter by clicking the link in our email or responding to us with your claim. In such case we will stop with marketing activities and store your data in an unsubscribed list for three years from the day of unsubscribing, based on our legitimate interest to prove facts on compliance steps we need to take.

You can request us to confirm whether personal data concerning you is being processed by us at any moment, as well as request from us to clarify the purposes for which the personal data are processed; the categories of personal data being processed; the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed; any available information on the origin of the data if the personal data are not collected from you as the data subject.

Security

We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy. Unfortunately, no system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us. While processing personal data, we conduct necessary technical and organizational measures. We engage appropriate data processors, and we analyze risk in case of a data breach. If a data breach results in high risk, we will notify relevant data protection authority and data subject. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure.

While this Website may include links to third-party websites, plug-ins and applications, linking to a third-party site does not necessarily mean that we endorse the site, any products or services described on the site, or any other material contained in a third-party site. To the extent any linked websites you visit are not owned or controlled by us, we are not responsible for the sites' content, any use of the sites, or the privacy practices of the sites. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their Privacy Policy, so please review the Privacy Policy on those other websites to see how they handle your information.

Supplemental Notice for California Residents

The California Consumer Privacy Act (“CCPA”), which is effective as of January 1, 2020, regulates how we handle personal data of California residents and gives California residents certain rights with respect to their personal data. This supplemental privacy policy shall apply only to residents of California and may be subject to change.

The general Privacy Policy shall continue to apply to the extent that it applies to you as a resident of California. If you are a resident of California, we are required to disclose certain uses and disclosures in a certain format, as well as to inform you of certain rights you may have. Any term used in this supplemental privacy policy shall have the same meaning as in the general privacy policy.

The CCPA requires disclosure of the categories of personal information collected over the past 12 months. While this information is provided in greater detail above, the categories of personal information that we have collected – as described by the CCPA – are:

We collect and use these categories of personal information for our business and commercial purposes that are previously described, including planning and organizing business activities between affiliated companies, providing and improving our services, maintaining the safety and security of our services, processing purchase and sale transactions, and for advertising and marketing services. We share personal data as described above under Sharing data with third parties.

Category of Personal Information

Purpose of Sub-processing:

We may access, preserve, and disclose each of the categories listed above to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; protect your, our, or others’ rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.

“Sales” of Personal Information under the CCPA

For the purposes of the CCPA, we do not "sell" personal information, nor do we "sell" personal information of minors.

To opt-out of receiving interest-based advertising, you can exercise your choice by using your privacy settings.

Additional Privacy Rights for California Residents

Non-Discrimination: California residents have the right not to receive discriminatory treatment by us for the exercise of their rights conferred by the CCPA.

Authorized Agent: Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. To designate an authorized agent, please contact us.

Verification: To protect your privacy, we will take steps the following steps to verify your identity before fulfilling your request. When you make a request, we will ask you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which may include contact information. We will only ask for the minimum data and only what is relevant in the given context.

Rights of Access, Deletion, Correction, and Portability

You can exercise your rights of access, deletion, correction, and portability as described in the Control Over Your Information section above. You also have the right to object to data processing and right not to be subject to a decision, which may include a measure, evaluating personal aspects relating to you which is based solely on automated processing, and which produces legal effects concerning you.

You also have the right to lodge an appeal to your data protection authority.

Bases for Processing Personal Data

We process your personal data when certain conditions apply. These conditions are called "legal bases" and we typically rely on one of four:

Contract

One reason we might use your personal data is because you've entered into an agreement with us. For example, when you buy our service and accept our terms of service, we need to use some of your personal data to collect payment and provide the service. If you do not wish to provide your personal data, we will not be able to enter into an agreement with you.

Legitimate Interest

Another reason we might use your information is because we have—or a third party has—a legitimate interest in doing so. For example, we need to use your personal data to provide and improve our services, including protecting your account, communicate with you electronically, and providing customer support. An important point to understand about legitimate interest is that our interests do not outweigh your right to data protection and privacy, so we only rely on legitimate interest when we think the way we are using your data does not significantly impact your right to personal data protection and right to privacy or would be expected by you, or there is a compelling reason to do so.

Consent

In some cases, we will ask for consent to use your personal data for specific purposes, for example we ask for the consent for sending our newsletter.

If we ask for the consent, we will make sure you can revoke your consent in our services or through your device permissions. Even if we are not relying on consent to use your personal data, we may ask you for permission to access data like contacts and location.

Legal Obligation

We may be required to use your personal data to comply with the law, like when we respond to valid legal process or need to take action to protect our users. For example, when we issue an invoice or place a cookie banner on our website, we do that because we are legally obliged to do so.

Your Right to Object

You have the right to object to our processing of your personal data. With many types of personal data, we have provided you with the ability to simply delete it if you do not want us processing it anymore. For example, you always have the right to object to our legitimate interest for performing direct marketing activities and you always have the right to withdraw your consent.

For other types of data, we have given you the ability to stop the use of your data by disabling the feature altogether. If there are other types of personal data you don’t agree with us processing, you can contact us.

You also have the right to lodge a complaint to supervisory data protection authority (in the UK the Information Commissioner's Office (ICO)).

If you have exercised your right to have us correct, delete or limit the processing, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.

You have a right of rectification and/or completion if the personal data processed concerning you are incorrect or incomplete. We shall make the correction promptly.

International Transfers

We may collect your personal data from, transfer it to, and store and process it in other countries outside of where you live.

We are based in the UK. Therefore, we process and store information on servers in the UK and servers located in the EU. We may also store information on servers and equipment in other countries depending on a variety of factors, including the locations of our users and service providers. These data transfers allow us to provide our services to you. By accessing or using our services or otherwise providing information to us, you understand that your information will be processed, transferred, and stored in the UK and other countries, where different data protection standards may apply.

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission and the UK’s Information Commissioner's Office (ICO). In case data is stored on servers located in the EEA, when transferring data outside the EEA, we use standard contract clauses and additional technical and organizational measures. We rely on the European Commission's adequacy decisions about certain countries, as applicable, or other legally compliant mechanisms or conditions for such data transfer. You consent to the transfer of your information, including personal information, to countries outside the EEA as set forth in this Privacy Policy by visiting our website or using our service.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees in connection with the transmission.

Children

Our services are not intended for—and we do not direct them to—anyone under 18 years old. And that's why we do not knowingly collect personal data from anyone under 18. If we need to rely on consent as a legal basis for processing your personal data and your country requires consent from a parent or a guardian, we may require your parent's or guardian's consent before we collect and use such data. In the event that we learn that we have collected personal information from a child under age 13 without consent, we will delete that information as quickly as possible.

For this purpose, we use efforts to verify the age of the users of our services.

Revisions to the Privacy Policy

We may change this Privacy Policy from time to time. But when we do, we'll let you know one way or another. Sometimes, we'll let you know by revising the date at the top of the Privacy Policy that's available on our website and mobile application. Other times, we may provide you with additional notice (such as adding a statement to our websites' homepages or providing you with an in-app notification).

We inform registered customers about the new version of Privacy Policy, if the changes are substantial and are not only connected with the grammar, style, corrections etc. Your continued use of any portion of our sites following the updated Privacy Policy will constitute your acknowledgment of the changes.

If you have any questions about this Privacy Policy, the personal data/information we hold from you, or you would like to exercise one of your privacy and data protection rights, please do not hesitate to contact us at info@calimero.network.