Privacy Notice

With this Privacy Notice we provide you information about why and how we process your personal data in Vanilla Defi.

1. WHAT TERMS ARE USED IN THIS PRIVACY NOTICE?

Controller means the party responsible for processing the personal data of the data subject.

Data subject is a term for a human being in accordance with data protection laws.

GDPR means the EU’s General Data Protection Regulation (679/2012).

Legal basis for processing means the legal ground on which the controller processes the data subject's personal data. The lawfulness of processing is described in Article 6 of the GDPR.

Personal data means any information concerning the data subject or information by which the data subject can be identified.

Privacy notice means a document drawn up in accordance with Articles 13 and 14 of the GDPR, through which the controller informs data subjects of the ways their personal data is processed.

Purpose for processing means the reason why the controller processes the data subject's personal data.

Service means our decentralized trading platform on the Ethereum blockchain.

2. OUR CONTACT DETAILS

Convoluted Labs Oy (business ID 2891403-1)
Linnankatu 3 A 2, 20100 Turku, Finland

If you have any questions regarding the privacy notice, please contact us at hello@vanilladefi.com.

3. WHY DO WE PROCESS YOUR PERSONAL DATA?

We process personal data solely to provide our Service (purpose for processing). In the provision of our Service, we process our customers’ and their trading partners’ (categories of data subjects) data on the Ethereum network related to transactions carried out with our Service (categories of personal data). Our legal basis for processing personal data is the performance of our contractual obligation under the Terms of Service (legal basis for processing).

4. FROM WHERE DO WE COLLECT YOUR PERSONAL DATA?

We collect your personal data only from yourself via a device you choose to use.

5. DO WE TRANSFER YOUR PERSONAL DATA?

We do not transfer your personal data. If you choose to use our service, you are able to transfer your own personal data to your trading partner.

6. HOW LONG DO WE RETAIN YOUR PERSONAL DATA?

We retain your personal data only for as long as our service is actively used. Once a trade has been carried out with our service, we stop retaining personal data.

7. WHAT DATA PROTECTION RIGHTS DO YOU HAVE?

You may have the right to use the data protection rights under the EU’s General Data Protection Regulation’s (GDPR) Articles 12 – 22.

The contacts concerning the rights shall be submitted to the controller’s contact person. Your rights can be put into action only when you have been satisfactorily identified.

You may also have a right to lodge a complaint to the supervisory authority, if you think that the processing of your personal data infringes the data protection laws.

8. CAN THIS PRIVACY NOTICE BE AMENDED?

We may unilaterally amend this privacy notice. We update the privacy notice as necessary, for example, when there is a change in legislation. Amendments to this privacy notice will take effect immediately when we post an updated version on our website.

If we make significant changes to the privacy notice, or if there is a significant change in the way it is used, we will notify the data subjects.

(Last update 24.03.2021)