Privacy policy

The present policy regarding the processing of personal data (hereinafter referred to as the " Privacy Policy ") aims to inform the clients regarding the processing of personal data by Chidori Technologies SRL, as a personal data operator.

The information that is the subject of the privacy policy is obtained on the occasion of the conclusion and conduct
of the contractual relations in accordance with the conditions of use of the company's website. The terms and
expressions written in capital letters in this privacy policy will have the meaning assigned under
the conditions of use published on the company's website.

The information presented below refers mainly to:

• types of personal data collected and processed;
• The goals for which personal data are collected;
• situations in which personal data can be disclosed to third parties and the term in
• the rights of the company's clients.

The display of the presence of the privacy policy on the company's website/ POS display
represents the execution of the legal obligation to inform the clients by the company, in accordance
with the provisions of Regulation (EU) 2016/679 of the Parliament and of the Council on the
natural persons regarding the processing of personal data and on the free
movement of these data ("GDPR).

1. The categories of personal data targeted

Represents "personal data" any information that contributes to the identification of a natural person.

In this regard, the company will collect, store and process the following types of data, without this enumeration having an exhaustive character:

• name, first name;
• phone number;
• Public key (alphanumeric address);
• billing data;
• sex;
• date of birth;
• any other information that can be obtained from the identity document presented;
• photos;
• copies of the identity document presented.

2. The basis of processing personal data by society

Prior to the conclusion of the contract, the client's action to present or introduce personal data when using the company's website represents its consent to the collection, storage and processing of personal data under the present confidentiality policy.

After the conclusion of the contract in accordance with the conditions of use, the company is authorized to collect, store and process the personal data of the client under the respective contract, according to the provisions of the GDP Regulation.

3. Purpose of personal data processing

The company collects, stores and processes the customer information for:

• the conclusion and execution of the contract, according to the conditions of use;
• prevention and monitoring of fraud, money laundering, economic sanctions or terrorist financing;
• verifying the fulfillment of the contracting conditions as they are presented under the conditions of use;
• Assistance offered to the customer for the use of the website/ POS
• fulfilling the legal obligations of the company;
• drawing up statistics, reports or anonymous analyzes.

4. DISLULATION OF DATA TO THERE PERSONS AND THE STORAGE PERIOD

The company has the possibility to allow access to the personal data of the client of some categories determined by persons, namely: public authorities, affiliated companies Chidori Technologies, third parties with whom the company has contracted as a beneficiary of maintenance services or technical assistance of ATMs, third parties who perform reports and statistics. These third parties either are empowered by the data operator, acting on the basis of his instructions, or are authorized by law to request such information.

The personal data are stored for the period necessary to meet the purposes for which they were collected. The client has the right to request the deletion of this information from the database of the data operator if he considers that their preservation is no longer necessary.

In order to establish the adequate period for the preservation of personal data, the company takes into account the volume, nature and privileged character of the personal data, the potential risk of prejudice caused by the unauthorized use or disclosure of the data of the personal customer, the purpose for which the personal data is processed and the fact, as well as the fact, as well as the fact,

5. Customer's rights

As a result of the collection, storage and/or processing of personal data and in connection with them, the client acquires the following rights:

• The right of access : the right to obtain information on the processed data. This information includes the source of personal data, the purpose of data processing, details about the data operator, its powers or third parties to whom the data can be transmitted;
• the right to withdraw its consent , when it is necessary for performing operations on personal data;
• the right to rectification : the possibility to request the modification or completion of its data;
• The right to delete data : this right can be exercised in the event that the client considers that their preservation is no longer justified for fulfilling the accepted goals;
• the right to restrict the processing : the client may request such a limitation in certain circumstances (EG: if he exercised his right to rectification, within the time interval between his request and the data update);
• The right to formulate a complaint : this is addressed to the National Society or Supervisory Authority for Personal Data Processing and refers to the violation of this privacy policy or the relevant legislation by the company or by third parties who have had access to data.