Your personal data collected through the use of the Services of RealFin Blockchain is stored and processed on the territory of the Republic of Bulgaria or in another state in which it operates within the European Economic Area (EEA).To the extent that We may transfer and store personal data to a third country outside the EEA that does not provide an adequate level of protection, in any such case We shall implement appropriate safeguards to protect the personal data as per the applicable data protection rules and regulations. In the event of any need to transfer collected personal data outside the EU, We guarantee a high level of data protection through contractual clauses or other instruments recognized by applicable law.We ensure all required technical and organizational measures, including but no limited to data encryption, in order to protect the data from accidental or illegal destruction or from accidental loss, from unauthorized access, amendment or distribution, as well as other illegal forms of processing. There are policies and procedures designed to protect information from loss, misuse and improper disclosure. Although We work hard to protect your personal information, We cannot guarantee that our actions will prevent any unauthorized attempt to access, use or disclose personal information. However, if you consider that there is a threat to the security of your personal data, please contact us immediately via the contact options specified in Art. 12 of this Privacy Policy.We ensure additional information security measures, including access control, strict physical protection and reliable practices for collecting, storing and processing information. Data processing is further ensured by using measures that are consistent with the modern technological achievements as via SSL technology.If you wish to access or change any personal data We store about you or to request that We delete any piece of information about you that We have obtained through the use of our Services, you may contact us at any time (See forms of contact in Art. 12 of this Policy). Users can update or correct their account information. When updating your personal information, We may ask you to verify your identity before We can act on your request. Users can request deletion of their user account from the Data controller. If Users have obligations concerning active pending transactions and other obligations related to the provision of the respective Services, the Data controller shall delete their accounts only after full performance of the contractual obligations. In these cases, regard must be had to the respective AML/CFT laws and regulations.Please note that although the changes you make are immediately reflected in active user databases or within a reasonable period of time, We may retain information you provide to prevent fraud, abuse or other for fulfilling legal obligations, or when We consider that there are reasonable grounds thereby. If you refuse to provide personal information, We may not be able to provide some of the features of the Blockchain and its Services.

Controlling authority for data protection in Bulgaria is the Commission for Data Protection at address: 1592 Sofia, 2 Blvd. Tsvetan Lazarov; telephone number: 02 915 3555. More information about data protection can be found on the website of the controlling authority at (URL) www.cpdp.bg.

We may amend this Privacy Policy from time to time. You can find the most recent version with amendments published on our Website or it may be communicated to the users when required by law. In case you disagree with the changes, you should cease using our Services.

We shall respond to your request or inform you, in writing, of the action we take in relation to the request within one month of receipt of the request. This period may be extended with additional two months when required due to complexity or the number of requests, of which you will be duly notified.

We only store personal data collected from the user while his or her user account is active, or otherwise We store data for a limited period of time while We need it to fulfill the purposes for which We have originally collected it, unless otherwise provided by law. We shall retain and use the information necessary to comply with our legal obligations or to resolve disputes or to enforce our contractual obligations and agreements as follows and with some terms being, non-exhaustively: (a) Payment information is retained for 10 years in accordance with accounting and tax laws; (b) Information on legal transactions shall be retained for 10 years in accordance with the general limitation period set for civil actions.

We do not collect or process personal data, which is provided by users under the age of 18 without the consent of their parents or legal guardians. The Controller will delete all information provided by or regarding users who are under the age of 18 and did not receive the consent of their parents or legal guardians for the use of the Blockchain, its Services and content.