1. Terms and Definitions

The privacy policy of AIO EXCHANGE is based on GDPR. We want the policy we apply to be clear, and understandable to the visitors of out site. To ensure that this is the case, we explain the most important terms here:

1.1 Data subject: Identified or identifiable natural person whose data is processed;

1.2 Personal data: Any information concerning an identified or identifiable natural person (“data subject”); identifiable natural person means a person who can be identified directly or indirectly, in particular on the basis of identifying attribute, including name, personal identification code, location information, network identifier, or on the basis of one or more physical, physiological, genetic, mental, economic, cultural or social characteristics of the natural person;

1.3 Processing of personal data: Automated or non-automated operation or set of operations, including collection, documentation, organizing, structuring, storing,customizing and modifying, querying, reading, using, transferring, distributing, or making otherwise available, joining or combining, restricting, deleting or destructing of personal data or set of them;

1.4. Profile analysis: Any automated processing of personal data involving the use of personal data for the assessment of certain personal aspects of the natural person. In particular, for analyzing or forecasting aspects related to the performance, financial situation, health, personal preferences, interests, reliability, behaviour, location or movement of the natural person concerned;

1.5. Controller: Natural or legal person, public entity, agency or other body which alone or in cooperation with others determines the objectives and means of the processing of personal data; if the objectives and means of such processing are determined in the law of the Union or the Member State, the specific criteria for the Responsible Processor or for assigning the one may be established in the law of the Union or the Member State;

1.6. Processor: Natural or legal person, public entity, agency or other body processing personal data on behalf of the controller;

1.7. Set of data: Any organized set of personal data from which data can be derived on the basis of certain criteria, regardless of whether the set of data is functionally or geographically centralized, decentralized or distributed;

1.8. Recipient: Natural or legal person, public entity, agency or other body to whom personal data is disclosed, whether or not it is a third party. The public entities which can obtain personal data as a result of specific inquiry in accordance with the law of the Union or the Member State, are not deemed to be recipients; these public entities process such data in accordance with applicable data protection standards in the basis of the processing purposes;

1.9. Third party: Natural or legal person, public entity, agency or body, excluding the Data Subject, Controller, Processor and persons who can process personal data under the direct responsibility of the Controller or Processor;

2.0. “Consent” of the data subject: Voluntary, specific, conscious and unambiguous statement by which the Data Subject in the form of an application or by explicit consent, agrees with the processing of his/her personal data.

2. How and why we get personal information

2.1. We may ask you to provide us with documents including ID’s, passports, utility bill in order to comply with financial services regulatory requirements (GDPR Art 6(1)(c))

2.2. If you want use AIO EXCHANGE trading services, then sharing personal data with us is necessary. Queries can be sent to [email protected]

2.3. Before entering a contractual relationship with you, we are required to carry out a know-your-client (KYC) procedure, as this is obligatory due to the relevant anti-money-laundering and terrorism prevention related legal acts. For carrying out the KYC procedure, we process the following data about you: copy of identification document (passport or ID), proof of address (copy of utility bill or a certificate of residence for the last 3 months), proof of source of funds/proof of source of wealth (bank account statements, tax declaration filings, or similar). The legal basis for the processing of your personal data in this case is Art 6(1)(c) in the GDPR.

2.4. In order to be able to respond to queries, we may collect the following data: name, nationality, contact details, address.

2.5. The legal basis for such processing of the personal data for the performance of the contract entered into with the data subject, or for taking measures prior to the conclusion of a contract in accordance with the data subject’s request (GDPR Art 6(1)(b)).

2.6. Access to personal data is granted for employees of AIO Exchange (AIO EXCHANGE Staff).

2.7. We process the personal data of our current customers during the customer relationship and the personal data of our former customers for 3 years after the end of the customer relationship.

3. Cookies

To the extent any personal information is collected through first-party Cookies, our Privacy Policy applies and complements this Cookie Policy. Personal information collected through a third-party Cookie is subject to the privacy policy of that third party, and not our Privacy Policy.

3.1. Essential Cookies

Essential Cookies enable you to navigate the Site and to use its services and features. Without these necessary Cookies, the Site will not perform as smoothly for you as we would like it to and we may not be able to provide the Site or certain services or features.

3.2. Preference Cookies

Preference Cookies collect information about your choices and preferences, and allow us to remember language or other local settings and customize the Site accordingly.

3.3. Social Media Cookies

Social media Cookies are used to enable you to share pages and content you find interesting on our Site through third-party social networking and other websites. These Cookies may also be used for advertising purposes.

3.4. Advertising Cookies

Advertising Cookies are set to manage our advertising. These Cookies collect information about your activities on this Site and other websites to provide you targeted advertising. In the E.E.A. advertising is not personalized or targeted based on your activities. How to disable or delete cookies User can disable or restrict storing of cookies on his/her computer. Furthermore, you can delete all the cookies that have been previously saved on your computer. To do this, you need to change privacy settings of your web browser. Please note that if you do this, you may need to adjust certain preferences manually every time when you visit the websites, and certain services and features may not work. 3.5. How to disable or delete cookies

User can disable or restrict storing of cookies on his/her computer. Furthermore, you can delete all the cookies that have been previously saved on your computer. To do this, you need to change privacy settings of your web browser. Please note that if you do this, you may need to adjust certain preferences manually every time when you visit the websites, and certain services and features may not work.

4. Disclosure of personal data

We do not sell, trade, or otherwise transfer to outside parties your personally personal data unless we provide you with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or servicing you. Those parties will sign a confidentiality agreement before personal data is disclosed to them. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

5. Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at [email protected] if you wish to make a request.