1. Terms and definitions

For the purposes of this Policy, the following terms are used:

• Personal data — any information relating to a directly or indirectly identified or identifiable individual.
• Operator — a legal entity that independently or jointly with other persons organizes and carries out the processing of personal data for the Bitfm service, determines the purposes of such processing, the composition of personal data and the actions performed with them.
• Processing of personal data — any action or set of actions with personal data performed both with and without the use of automation, including collection, recording, systematization, accumulation, storage, clarification, updating, modification, extraction, use, transfer, provision, access, depersonalization, blocking, deletion and destruction.
• Site — a set of software, graphic, informational and other materials available on the Internet under the domain name of the Bitfm service.
• Automated personal data processing system — a set of technical and software tools designed for processing personal data using computer technology.
• Blocking of personal data — temporary suspension of personal data processing, except when such processing is required for clarification.
• Personal data information system — a set of personal data contained in databases and information technologies and technical means ensuring their processing.
• Depersonalization of personal data — actions as a result of which it is impossible to determine the ownership of personal data to a specific subject without the use of additional information.
• Provision of personal data — actions aimed at disclosing personal data to a specific person or a limited circle of persons.
• Dissemination of personal data — actions aimed at disclosing personal data to an indefinite circle of persons, including by posting on the Internet, publishing in the media or otherwise.
• Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to a foreign government body, individual or legal entity.
• Destruction of personal data — actions as a result of which personal data are destroyed without the possibility of restoring their content, including the destruction of material carriers.

2. General provisions

For the Bitfm service, the protection of information, including personal data, is an essential element of safe operation and service provision. Ensuring the confidentiality and security of personal data is among the priority tasks of the service.

The Bitfm service treats its current and potential Users, as well as visitors to its web resources, with respect and recognizes the importance of proper protection of information that may relate to personal data.

Acceptance of the terms of the User Agreement, as well as actual use of the site and services, constitutes the User's consent to the provisions of this Policy and confirmation that they understand and accept the terms of processing of their personal data, including their collection, storage, use and protection, as well as the possibility of receiving informational and promotional messages.

If the User disagrees with the provisions of this Policy, they must cease using the site and services.

The service assumes that a person using its web resources:

1. acts on their own behalf;
2. provides reliable information about themselves when necessary;
3. independently manages the settings of the software used;
4. has the opportunity to familiarize themselves with the Privacy Policy via the link posted on the site.

3. What information constitutes personal data

Personal data includes any information that allows direct or indirect identification of an individual.

Such data may include information that the User provides when filling out forms on the site, when submitting applications, transmitting documents or their copies, including in electronic form, as well as when contacting via online chat, email or other communication channels.

In particular, the Bitfm service may process the following data:

1. surname, first name, patronymic;
2. phone number;
3. email address;
4. registration address;
5. postal address;
6. identity document details and information contained therein;
7. bank details and bank account information;
8. photo and video images of the client;
9. other data provided by the User in connection with the use of the service.

For identification and fulfillment of service requirements, the following may also be requested:

1. information from an identity document;
2. addresses of cryptocurrency wallets from which funds were sent;
3. utility bills, bank statements or constituent documents of a legal entity;
4. technical data automatically transmitted by the server when accessing the site, including IP address, requested page address, date and time of access, browser, operating system and referral page information;
5. data obtained using cookie files.

4. Purposes of personal data processing

The Bitfm service processes personal data, including for the following purposes:

1. identification of the User;
2. prevention of fraud, abuse and other unlawful actions;
3. informing about service news, new features, changes in the list of services, special offers and promotions;
4. consulting Users on matters related to the service's activities;
5. conducting advertising, marketing and analytical activities, surveys, questionnaires and research;
6. maintaining accurate User databases;
7. analysis of site usage statistics, its efficiency and quality of service to improve the products and services offered.

5. Principles of processing, storage and protection of personal data

The processing of personal data in the Bitfm service is carried out on the basis of the following principles:

1. lawfulness and fairness of processing;
2. processing exclusively for predetermined and legitimate purposes;
3. compliance of the volume and nature of processed data with the stated purposes;
4. accuracy and relevance of personal data;
5. inadmissibility of processing excessive data;
6. inadmissibility of combining databases created for incompatible purposes;
7. storage of data no longer than necessary to achieve the purposes of processing, unless otherwise provided by law or contract;
8. deletion or destruction of data upon achievement of processing purposes or upon loss of necessity in their achievement, unless otherwise established by law.

The Bitfm service has the right to process personal data both with and without the use of automated means. For this purpose, information systems, computer technology, means of transmission and storage of information, software, databases, information protection systems and other technical solutions may be used.

The service has the right to transfer personal data to subsidiaries and affiliates, banks, agents, payment intermediaries and other organizations cooperating with the service, exclusively to the extent necessary for consideration and execution of User applications, as well as provision of relevant services. Such persons are obliged to comply with confidentiality requirements and ensure the necessary protection of the information received.

Transfer of personal data to other third parties not belonging to the specified categories is allowed only upon receipt of a properly executed request from authorized administrative, judicial, law enforcement or other government bodies.

The Bitfm service provides access to personal data only to those employees, agents, representatives and partners who objectively need such information to perform their functions and ensure the activities of the service, including interaction with banking and financial organizations.

Placing personal data in the public domain without the prior consent of the personal data subject is not allowed.

The service has the right to disclose information about the User to government regulatory and law enforcement agencies within the jurisdiction applicable to the service, in the presence of legal grounds, including properly executed requests, court decisions, subpoenas and other documents mandatory for execution.

To protect personal data, the Bitfm service takes organizational and technical measures aimed at preventing unlawful or accidental access, modification, disclosure, destruction, blocking and other unauthorized actions. Such measures include, in particular, internal control of data processing processes, application of information protection means, encryption, as well as physical security measures in relation to data storage locations.

6. Links to third-party web resources

The Bitfm website may contain links to websites and services of third parties that are not under the control of the service. By following such links, the User leaves the Bitfm site.

The service is not responsible for the content, methods of processing personal data and privacy policy of third-party resources. Users are advised to independently familiarize themselves with the terms of personal data processing on third-party websites before transmitting any information to them.

7. Inquiries and correspondence

Any inquiries sent by Users or visitors to the Bitfm service, including letters, electronic messages, comments and other materials, are considered as information of limited access and are not subject to publication without the prior written consent of the sender.

Contact data of the sender, including address, phone and other personal information, are not used otherwise than for responding to the substance of the inquiry received, unless otherwise separately agreed with such person.

8. Use of cookies and consent to data processing

By using the Bitfm website, regardless of registration, the User confirms their consent to the processing of personal data, including collection, recording, systematization, accumulation, storage, clarification, modification, extraction, use, transfer, depersonalization, blocking, deletion and destruction of information that directly or indirectly relates to them, their transactions and payments.

The User also confirms that:

1. they understand the purposes of processing their personal data;
2. processing may be carried out both with and without the use of automated means;
3. processing may be carried out both by the Bitfm service itself and by other persons engaged on the basis of confidentiality agreements and liability for disclosure of personal data;
4. personal data may be used for provision of services, preparation for conclusion, conclusion, execution, modification and termination of contracts, proper identification of the User, preparation of applications, notifications, agreements and other documents, as well as for informing, consulting, conducting surveys, marketing and advertising activities.

The User's consent to the processing of personal data is provided for a period of 10 years and may be withdrawn by sending a written notice to the service. Such consent is deemed terminated upon the expiration of 30 calendar days from the date of receipt by the service of the relevant notice, with the day of receipt not included in the specified period.

9. Final provisions

This Policy is an open and publicly available document and is posted on the official website of the Bitfm service.

The service has the right to make changes and additions to this Policy. The current version shall be published on the relevant page of the site. In case of significant changes, the service may additionally notify Users by other available means, including by email.

This Policy shall be updated in case of changes in legislation, adoption of new regulatory legal acts, as well as the emergence of special requirements in the field of processing and protection of personal data.