1.1 This Privacy Policy (“Privacy Policy”) describes and summarizes the policies and procedures of Minima GmbH. (“Minima ”, ”we”, ”our”, ”us”) with respect to the collection, use, storing, processing, disclosure, sharing and protection of personal data provided or acquired through use of (i) our website located at www.minima.global and all related subdomains (collectively, the ”Website”), and (ii) the functionality enabling access to the token offering platform, delivered via application programming interfaces, software development kits, and any other services, content, tools and features as made available by Minima from time to time (collectively, the ”Services”), whether the Website or Services are accessed via a computer, mobile device, or other technology or means.

1.2 Minima takes the privacy of individuals very seriously. We are committed to maintaining the security, confidentiality and integrity of the personal data in our custody or control, and protecting such data in accordance with the applicable legislation. Minima regularly re-evaluates its privacy and security practices and adapts them as necessary to deal with new regulatory requirements, changes in legislation and/or security standards.

2.1 For the purposes of this Privacy Policy, in addition to the capitalized terms defined elsewhere in this Privacy Policy, the following terms shall have the meanings ascribed to them as follows:“Consent of User” means any freely given, specific, informed and unambiguous indication of the User’s wishes, given by a statement or by a clear affirmative action, by which User signifies agreement to the processing of their Personal Data.“Controller” shall have the meaning given to such term in the GDPR.“Data Protection Laws” means, as applicable, the Federal Act on Data Protection 1992 (FADP), the GDPR or any similar or equivalent law, regulation, statute, legislation, directive or ruling, of any government, legislature, parliament, regulatory authority, agency or commission having or purporting to have jurisdiction on behalf of any nation, or province or state or other subdivision thereof, in force from time to time in User’s jurisdiction with respect to the privacy, protection, processing, collection, use or disclosure of Personal Data.“GDPR” means the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC.“Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal Data includes without limitation Registration Information, Financial Financial Data and Financial Account Credentials, but excludes publicly available business information.“processing” shall have the meaning given to such term in the GDPR.“Processor” shall have the meaning given to such term in the GDPR.“Special Categories of Personal Data” means Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and genetic data, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation.“Supervisory Authority” shall have the meaning given to such term in the GDPR.

3.1 Minima recommends that Users read this Privacy Policy carefully and entirely to ensure that Users are aware of all the practices and policies of Minima in respect of Personal Data collection, use, disclosure, processing and protection.

This Privacy Policy applies to:

4.1 By accessing and using the Website and/or Services (together, the ”Services”) User hereby: (i) acknowledges and confirms that User is at least eighteen (18) years old, or of the legal age of majority in the jurisdiction in which User resides; and (ii) consents to the collection, use, and processing of their Personal Data as described in this Privacy Policy. Except as set forth in this Privacy Policy, Minima will not use User’s Personal Data for any other purpose without User’s Consent. Minima will only disclose User’s Personal Data to third parties strictly for the purposes described in this Privacy Policy. Minima does not, and will not, sell, lease, license or rent User’s Personal Data to any third party, nor does Minima use the collected Personal Data for advertising or marketing purposes.

5.1 When User uses the Services Minima will collect information, including Personal Data, for the purpose of providing, maintaining and improving the Services, as well as complying with applicable laws or regulations. Minima collects Personal Data primarily in three (3) ways:

5.2 Information user voluntarily provides to minima: When User contacts Minima’s support team (by email, phone or contact form on the Website) with respect to the Website or Services related issues or communicates with Minima in any way, User voluntarily gives Minima information that Minima collects and processes and this Privacy Policy. The Minima information may include Personal Data such as: name, email address, phone number, and address. When User voluntarily submits Personal Data with their inquiry or request pertaining to the Services, Minima will process any such Personal Data in accordance with this Privacy Policy. In some cases, Minima may require additional information, including Personal Data, in order to identify User while processing their inquiry or request. Minima may also maintain a record of such communications with Users, including any follow-ups and subsequent feedback, for internal purposes.

5.3 Some of the Services require registration. When creating an account with Minima, Account Users and Direct Users will have to provide Personal Data, including name, email address and password (together, ”Registration Information”), in order to be able to use the respective Services.

5.4 Subscribers will have to provide their email address for the purpose of receiving the communications to which they have subscribed.

5.5 Information minima collects through user’s use of the services: Information Minima collects automatically. Each time Users use the Services, Minima collects information relating but not limited to: (i) which Services are used; (ii) all the areas within the Services that User visits; (iii) the time of day when User accesses and uses the Services; (iv) actions taken by User when using and interacting with the Services; (v) which Services or parts thereof generate error messages; and (vi) User’s browser, operating system and internet protocol (“IP”) address. Minima collects this information automatically as part of its technical log files or other metadata, as well as through the use of cookies, web beacons and other similar tracking technologies. All personally identifiable information collected through User’s use of the Services is treated as Personal Data in accordance with the terms of this Privacy Policy. Minima may also use the collected information in an anonymous and/or aggregate way (i.e., it is not personally identifiable in this state) for a variety of purposes, including but not limited to improving user experience, enhancing the Services and developing new services (see “Use of Non-Personal Data”).

5.6 Information collected by Cookies: A cookie is a data file placed on a device when it is used to access a service. Cookies or similar technologies may be used for many purposes, including without limitation remembering the User and User’s preferences and tracking User’s visits to the Website or access to the Services. Cookies work by assigning a number to User that has no meaning outside of the assigning website or application. Minima uses cookies for various purposes, including without limitation tracking User’s movements within the Website, analyzing trends, gathering statistical data and improving user experience and the overall quality of the Services. Minima encodes and encrypts the cookies so that only Minima can interpret the information stored in them. Cookies can be disabled or controlled by setting a preference within User’s web browser or on User’s device. Thus, if User does not want information to be collected through the use of cookies, User can restrict or limit the use of cookies at the individual browser or device level. However, if User chooses to disable cookies some features of the Services may not function properly or Minima may not be able to customize the delivery of information to User.

5.7 First-Party Cookies: Minima uses session cookies and persistent cookies when User uses the Services. These are essential to the operation of the Website and the provision of Services. The session cookie is stored in temporary memory and is not retained after the browser is closed. Session cookies do not collect information from User’s computer. They store information in the form of a session identification that does not personally identify the User. The persistent cookies are set with expiration date and are stored on User’s hard drive until they expire or User deletes them. Minima does not collect any Personal Data in the session and persistent cookies. Minima uses session and persistent cookies for technical purposes, including but not limited to verifying the origin of requests, distributing requests among multiple servers, authenticating Users and determining what functionality of the Services such Users are allowed to access.

5.8 Third-Party Cookies: Minima also uses third-party cookies. These third-party service providers with whom Minima has contracted help analyze certain online activities and provide analytics services.

6.1 Use of Personal Data: Minima may use the collected Personal Data for the following purposes:

6.2 Use of Non-Personal Data: Minima may generate anonymous data derived from or based on Personal Data collected from User so that the results are no longer personally identifiable with respect to that User (“Anonymized Data”), and combine or incorporate such Anonymized Data with or into other similar data or information collected from other Users or derived from other Users’ use of the Services (“Anonymized Aggregate Data”). Minima may use such Anonymized Data and Anonymized Aggregate Data for various business purposes, including but not limited to:

7.1 By using the Services and submitting any Personal Data to Minima, User acknowledges and agrees that their Personal Data may be processed in and transferred to jurisdiction(s) other than User’s country of residence which may have different Data Protection Laws than those in User’s country. Personal Data may be accessed by authorized staff from Minima offices in Switzerland and UK for the purposes of troubleshooting and debugging. [The Personal Data of Minima User residing in the EU/EEA will only be stored in EU and will only be transferred outside EU as set forth in the GDPR.] Minima will take all steps reasonably necessary to ensure that Personal Data is at all times treated securely and in accordance with this Privacy Policy.

7.2 Minima will only transfer and/or disclose Personal Data as specified in this Privacy Policy unless User gives Consent to the disclosure and/or transfer to any other third party.

7.3 Disclosure and/or Transfer to Third-Party Providers: Minima has put in place contractual (including data protection, confidentiality and security provisions) and other organizational safeguards with third-party service providers engaged by Minima in connection with the provision, operation, hosting, security or maintenance of the Services, including cloud-based email service, data hosting and storage providers (“Third-Party Providers”). Such safeguards aim to ensure an adequate level of protection of Personal Data. Minima may disclose or transfer Personal Data to such Third-Party Providers solely for the identified purposes and solely in connection with the Services. Minima will restrict access to Personal Data to what is strictly necessary for the performance of such Third-Party Provider’s contractual obligations. Such Third-Party Providers may process, store and/or have access to Personal Data. Any transfer of Personal Data of EU/EEA Users to a Third-Party Provider located in a third country will be subject to articles 45 and 46 of the GDPR and will take place either (i) on the basis of an adequacy decision by the European Commission, or (ii) by entering into the standard data protection clauses adopted by the Commission, or by ensuring the respective Third-Party Provider has signed up to the EU-US Privacy Shield. At the date of this Privacy Policy Minima uses the following Third-Party Providers:

7.4 Disclosure for Legal Reasons: Minima may disclose Personal Data without User’s Consent when Minima believes in good faith that the disclosure of such information is reasonably necessary or appropriate:

7.5 Transfer of Ownership: User’s Personal Data may be disclosed and/or transferred upon change of control as a result of a sale of all or a substantial portion of Minima’s assets or stock, merger, acquisition or reorganization, including any due diligence process carried out in relation to the same, provided that the Personal Data disclosed continues to be used solely for the purposes permitted by, and subject to the provisions in, this Privacy Policy by the entity acquiring access to such information. If the entire or substantial ownership of Minima or Services were to change, User’s Personal Data may be transferred to the new owner to ensure continuity of the Services. In any such transfer of ownership User’s Personal Data will remain subject to the promises of the then and current Privacy Policy. Minima will provide reasonable advance notice to User via the Website of any such change in ownership or control of User’s Personal Data or in case such Personal Data becomes subject to a different privacy policy.

8.1 In providing the Services to Visitors, Direct Users and Account Users, Minima acts as Controller of Personal Data collected from such Users. In the case of Indirect Users, Minima acts as a Processor and the respective Developer acts as Controller of collected Personal Data. In performing its obligations as Processor Minima will at all times act on Controller’s behalf and according to Controller’s lawful instructions.

8.2 Furthermore, Minima adheres to the following general principles with respect to Personal Data processing:

9.1 In the case of Users from the European Union (EU) and European Economic Area (EEA), Minima’s legal basis for processing the Personal Data collected as described in this Privacy Policy will depend on the type of Personal Data and the circumstances under which it is collected. Minima will collect and process Personal Data in its capacity as Controller based on the following legal bases:9.1.1 processing is necessary for the performance of a contract to which the User is a party, particularly for the provision of the Services under the user terms;

9.2 If there is another legal basis for Minima to collect and process Personal Data in its capacity as Controller, Minima will provide the required notification to User at or before the time the Personal Data is collected.

9.3 If User voluntarily provides Personal Data to Minima when contacting Minima with respect to the Services, such User will be deemed to have given Consent to the collection, use and processing of Personal Data by Minima as reasonably necessary to carry out the specific purpose(s) for which User has provided the Personal Data. Minima will rely on such implied Consent as if it were given to Minima under normal circumstances.

10.1 Minima does not solicit from Users, nor does it knowingly collect or process, any Special Categories of Personal Data. Users are requested at all times to refrain from voluntarily providing any Special Categories of Personal Data to Minima.

10.2 ANTI-SPAM LEGISLATION

10.3 Minima is committed to controlling unsolicited commercial e-mail, or “spam”. In this respect, Minima includes an “unsubscribe” or “opt-out” link in any informational emails sent to Users. Users wishing to opt-out of receiving such informational emails may do so at any time by following the instructions included in such emails. Minima will not sell, lease or rent its e-mail Subscribers lists to any third party, nor will Minima use the collected email addresses for purposes other than that for which they were initially collected. User can’t opt-out of receiving emails that Minima is required by law to provide to User in connection with the Services, such as system notification emails, notification on changes or updates to this Privacy Policy or the General Terms of Service, or other important mandatory notifications relating to User’s access to and use of the Services.

10.4 THIRD-PARTY WEBSITES

10.5 The Services may include links to, or otherwise direct User’s attention towards, websites operated by third parties and not by Minima. Such links are provided solely for User’s convenience and informational purposes. The inclusion of any link does not imply an association, support, endorsement, consent, examination, or approval by Minima of such third party and third-party website (including without limitation any content on such website). Minima shall not be liable for the information and content contained in any third-party website or for User’s use of or incapacity to use such website. Access to any third-party website is at User’s own risk, and User must be aware of the fact that linked websites have terms and privacy policies different from those of Minima and Minima does not control them. If User elects to use any third-party website and/or provide any Personal Data when using such website, User is solely responsible for evaluating the terms and privacy policy that apply. Minima will have no liability for any loss or damage that User may incur through providing any Personal Data on such third-party websites.

11.1 Taking into account the nature of the processing, Minima will respond (or, when acting as Processor, provide reasonable assistance to Developer for the fulfilment of Developer’s obligation to respond) to requests for exercising User’s rights under GDPR as set forth below:

12.1 Minima will retain Personal Data for no longer than strictly necessary for the purposes for which such Personal Data is collected and processed. The retention period depends on the requirements of the applicable laws or regulations Minima must comply with, the purposes of the collection and processing of Personal Data, and the legitimate interests of Minima to establish, exercise or defend its legal rights. When Minima acts as a Processor of Personal Data, Minima may apply a different retention period if so required by the Controller on whose behalf the Personal Data is being processed by Minima.

12.2 Minima will delete User’s Personal Data from its production servers when:

12.3 As a result, User’s Personal Data will be deleted and excised permanently from Minima’s production servers, subject to Minima’s right to generate Anonymized Data and Anonymized Aggregate Data prior to such deletion. Further use of the corresponding Services will be impossible. Notwithstanding anything to the contrary in this Privacy Policy, Minima will retain User’s Personal Data or portions thereof:

12.4 Backups and log files containing Personal Data are stored separately from the production servers. All Personal Data retained in backup files and log files will be treated in accordance with the terms of this Privacy Policy for as long as it is retained before being automatically deleted after the retention period has elapsed.

12.5 Backup files are stored using strong asymmetric encryption and Minima’s authorized personnel does not access such files in the ordinary course of business operations, nor will Minima actively process any Personal Data retained in backup files anymore.