Version 1.0 as of July 2022

This Privacy Notice explains the processing of your personal data by NFTfolio GmbH, Wellingstr. 19, 70619 Stuttgart, info@nftfolio.io ("we", "us" or "NFTfolio") and your rights under the GDPR.

1. Data categories, purposes of processing your data, legal bases

We process your personal data in particular to provide you with the NFTfolio website as well as the NFTfolio services.

We process your personal data for the performance of a contract with you (legal basis is Art. 6 (1) lit. b GDPR):

• For the provision of the NFTfolio website (this includes information that is automatically collected and processed by our webserver such as your IP address, date and time of your visit, the website you are coming from, the subpages visited on our website, the browser type and version used, etc.).
• For the provision of the NFTfolio services (this includes information about your crypto wallet that NFTfolio needs to provide its services as well as information associated with that wallet, e.g., about your assets, transaction details, statistical information generated from that information, etc.).
• For the provision of a membership access to our services (this includes identification and login data such as names, usernames, e-mail addresses, passwords, payment information such as bank account details as well as information about the relevant subscription model, term, start and end date of the subscription).

We also process your personal data for our legitimate interests (Art. 6 (1) lit. f GDPR):

• For the detection and prevention of misuse of our website and services (this in particular includes the information that is automatically processed by our webserver when you visit our website (see above) as well as other user data that is required pursuant to a case-by-case consideration to detect and prevent a misuse).
• For the optimization of our website and services (this in particular includes the information that is automatically processed by our webserver when you visit our website, see above).

Any other data that you enter, e.g., into contact forms, newsletter subscription forms or that you send to us via e-mail or other means, will be processed by us to execute the respective request either on the basis of your consent (legal basis is Art. 6 (1) lit. a GDPR) or for the fulfillment of our contractual obligations to you (legal basis is Art. 6 (1) lit. b GDPR).

2. Recipients of your data

Your personal data will be transferred to our service providers that process your personal data on our behalf, e.g., to host and manage our website or to provide us with information about your wallet and NFTs. Should this involve transfers of your personal data to third countries outside the EU, we ensure an appropriate level of data protection through contractual measures. You have the right to receive copies of such contracts.

3. Duration of the data processing

We will only process your personal data as long as this is necessary for the respective purpose or as long as there are legal retention obligations. After the respective processing purpose ceases to apply and retention obligations end, your data will be routinely deleted.

4. Your rights

Under the conditions of the GDPR, you can request information about and access to your personal data and have the right to receive personal data in a standard and machine-readable format. In addition, under the conditions of the GDPR, you can also request the deletion, correction or restriction of the processing of your personal data.

If you have given your consent to the processing of your personal data (legal basis is Art. 6 (1) lit. a GDPR), you can withdraw your consent at any time with effect for the future. You can also object to the processing of personal data processed on the basis of our legitimate interests (legal basis is Art. 6 (1) lit. f GDPR) at any time under the conditions of the GDPR.

5. Contact; complaint to supervisory authority

Please address your questions or concerns regarding the processing of your personal data to: privacy@nftfolio.io

In case of questions and possible concerns about the data processing, you can also contact the competent supervisory authority.

‍