IDENTIFICATION Owner: CRIPTAN TRADE S.L. (hereinafter, “CRIPTAN”) Registered office: C/ Almirante Cadarso 26, 46005 Valencia (Spain) N.I.F .: B-98992738; Public Registry: Valencia Mercantile Registry, Volume 10523, Book 7804, Folio 110, Section 8, Page V-182811 E-mail: atencion@criptan.com

INFORMATION

Through this Privacy Policy, the user (from now on, the “User”) is unequivocally informed that the personal data provided through the website https://www.criptan.es (from now on, the “Site Web ”), as well as (ii) the Criptan mobile application (from now on, the“ Application ”) and (iii) similar environments such as forms or contact e-mail, will be treated by CRIPTAN in accordance with the provisions of this Privacy Policy.

The user must carefully read this Privacy Policy, which has been written in a clear and simple way, to facilitate its understanding.

OBLIGATION TO PROVIDE PERSONAL DATA

The data requested in the forms of the Website and the Application are generally mandatory (unless otherwise specified in the required field) to fulfill the purposes for which they are being collected.

Therefore, if they are not provided or are not provided correctly, CRIPTAN will not be able to provide its services adequately.

PERSONAL DATA COLLECTED ON THE WEBSITE AND THE APPLICATION The personal data that may be collected by CRIPTAN on the Website and the Application are the following:

• Copy of the DNI or identification document;

• Facial photography;

• Email;

• Phone number;

• Full personal or fiscal postal address;

• Name and surname;

• Bank account number;

• Photograph of bank card.

PURPOSE OF PROCESSING USER DATA BY CRIPTAN

The personal data provided through the Website and the Application will be processed by CRIPTAN in accordance with the following purposes:

Identification and Onboarding of Users for the provision of services

To be able to identify the user so that he can access the services provided on the Website and the Application, as well as the necessary data to be able to carry them out.

Respond to the questions raised in the contact forms and email

Manage, process and respond to requests, requests, incidents or inquiries from the user. Attend to the exercise of Users’ rights

Process, analyze, answer and, where appropriate, execute the exercise of rights requested by the User in accordance with the provisions of this Privacy Policy. Carrying out quality and satisfaction surveys

Making inquiries to users regarding the quality and their satisfaction with the services provided by CRIPTAN. Analysis of the reports and statistics obtained from the responses of the users.

Sending commercial communications

Sending commercial communications through telematic or conventional means on CRIPTAN.

BASIS OF LEGITIMATION OF THE PROCESSING OF USER DATA BY CRIPTAN

The legitimacy of the processing of the user’s personal data will be the following:

Identification and Onboarding of users for the provision of services The processing of data derived from this purpose is the fulfillment of the contractual relationship or for the application at the request of the user of pre-contractual measures, as well as on certain occasions for the fulfillment of a legal obligation when the applicable regulations provide it.

Respond to the questions raised in the contact forms:

The treatment of data derived from this purpose is the fulfillment of the contractual relationship or for the application at the request of the user of pre-contractual measures.

Attend to the exercise of users’ rights

All the treatments derived from this purpose will have as a basis of legitimation the fulfillment of legal obligations, in accordance with the provisions of the applicable regulations on data protection.

Carrying out quality and satisfaction surveys

The treatments derived from the realization of quality and satisfaction surveys will have as a basis of legitimation the legitimate interest, recognized to the person responsible for the treatment by the regulations.

This legitimate interest is based on being able to offer the users the services of CRIPTAN, both on the Website and in the Application with the highest quality and best possible experience for the user.

Sending commercial communications

The treatment derived from this purpose will have as a basis of legitimation the consent, recognized to the person responsible for the treatment by the regulations.

The user has the right to oppose the processing of their personal data in order to send personalized commercial communications, at any time and at no cost. The user may express said opposition by clicking on the link established to unsubscribe from commercial communications or by sending an email to the following email address: atencion@criptan.com

Likewise, in the event that the User gives their consent for CRIPTAN to process their data for any purpose other than those mentioned in this Privacy Policy, the User will be duly informed of said treatment, the User himself being empowered to revoke said consent. contacting CRIPTAN through the following email: atencion@criptan.com

TO WHOM WILL THE USER DATA BE SHARED?

User data may be communicated to:

• Public Administrations in the cases provided by law.

• Courts and Tribunals in the cases provided by law.

• The State Security Forces and Bodies in the cases provided by law.

• The companies that are part of the CRIPTAN group of internal administrative purposes.

• The companies with whom CRIPTAN carries out commercial operations, provided that the treatments are necessary for the successful end of the operation and guarantee, where appropriate, the continuity in the provision of the services offered to the users.

INTERNATIONAL DATA TRANSFERS

CRIPTAN does not intend to transfer the personal data of users to a third country or international organization. However, in the event that this were the case, Users would be expressly informed of this circumstance, indicating the existence or absence of an adequacy decision of the European Commission, or of the appropriate guarantees and the means to obtain a copy of these.

DATA CONSERVATION

User data will be kept for the following periods:

• Identification and Onboarding of the Users for the provision of services will be kept for the period necessary for the provision of services from the Website or the Application at the request of the User and, once they have ended, during the statute of limitations for legal actions. derived from the aforementioned provision of services.

• Data provided through contact forms will be kept for the period necessary to process and answer your request and, once it is completed, during the statute of limitations for legal actions derived from the aforementioned request.

• Data used to attend to the exercise of Users’ rights will be kept for the period necessary to carry out the right requested by the User and, once said right has been fulfilled, they will be kept until the prescription of any responsibilities derived from this treatment.

• Carrying out quality and satisfaction surveys, will be kept for as long as necessary to provide services to Users and until it opposes or is no longer necessary to fulfill the established purpose and the eventual responsibilities derived from the provision have been prescribed of the services.

• Data used to send commercial communications will be processed until the User objects or revokes their consent.

  • In any case, CRIPTAN will duly block the personal data of the Users, not having access to them at the moment in which they are no longer necessary to fulfill the purpose for which they were collected, being only processed in the event that this is the case. required by the competent judicial or administrative authority in the cases expressly established in the Law.

USER’S RESPONSIBILITY

The user:

• You guarantee that you are over eighteen (18) years old and that the information provided by CRIPTAN is true, accurate, complete and up-to-date. For these purposes, the user is responsible for the veracity of all the data that he communicates and will keep the information provided suitably updated, in such a way that it responds to his real situation.

• You guarantee that you have informed the third parties of whom you provide your data, if you do so, of the aspects contained in this document. Likewise, it guarantees that it has obtained your authorization to provide your data to CRIPTAN for the indicated purposes.

• You will be responsible for the false or inaccurate information that you provide through the Website and the Application and for the damages, direct or indirect, that this causes to CRIPTAN or to third parties.

EXERCISE OF RIGHTS

The User can send a letter to CRIPTAN, to the address indicated in the heading of this Privacy Policy, or by means of an email to the address: atencion@criptan.com attaching a photocopy of their identity document, in any moment and free of charge, to:

• Revoke the consents granted.

• Obtain confirmation about whether CRIPTAN is treating personal data concerning the User or not.

• Access your personal data.

• Rectify inaccurate or incomplete data.

• Request the deletion of your data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

• Obtain from CRIPTAN the limitation of data processing when any of the conditions provided in the data protection regulations are met.

• Request the portability of the data provided by the user in those cases provided for in the regulations.

Likewise, you may file a claim regarding the protection of your personal data before the Spanish Agency for Data Protection at the address C / Jorge Juan 6, 28001 – Madrid, when the interested party considers that CRIPTAN has violated the rights that are recognized by the applicable regulations on data protection.

SECURITY MEASURES

CRIPTAN will treat the user’s data at all times is kept by an absolutely confidential way and keeps the mandatory duty of secrecy regarding them, in accordance with the provisions of the applicable regulations, adopting the necessary technical and organizational measures to guarantee the security of your data and prevent its alteration, loss, treatment or unauthorized access, taking into account the state of technology, the nature of the stored data and the risks to which they are exposed.

CHANGES

CRIPTAN reserves the right to review its Privacy Policy at the time it deems appropriate, in which case it will be communicated to users. For this reason, we ask that you regularly check this privacy statement to read the most recent version of the CRIPTAN Privacy Policy.

ACCEPTANCE, CONSENT AND UNDERSTANDING

The user declares to have been informed of the conditions on protection of personal data, accepting and understanding the content of this Privacy Policy. Otherwise, please do not accept the Privacy Policy and / or do not use the Website and the Application.

Last update: April 15, 2021.