Website Privacy Notice

The privacy of users of the website is paramount for the Tezos Foundation, Dammstrasse 16, 6300 Zug, Switzerland (“we” or “us”). We greatly appreciate the trust that you have placed in us and will do our best to protect your personal data.

We will process your personal data in accordance with the Swiss Federal Act on Data Protection (“FADP”) and the European Union (“EU”) General Data Protection Regulation (“GDPR”), which is considered by many as the world’s strictest data protection regime.

Personal data is any information that relates to an identifiable natural person and includes inter alia name, address, e-mail address and user behaviour. The collection, use and disclosure (“processing”) of your personal data by us or any third-party recipient at all times will be in accordance with the terms of this Privacy Note.

1. Our commitment to data protection principles

We are responsible for the processing of your personal data (as a “data controller” pursuant to the GDPR / FADP). In order to protect your personal data in connection with the usage of the website, we are committed to adhere to the GDPR / FADP principles below.

Every individual working for us must also adhere to these principles in performing his or her day-to-day duties. We will therefore make sure that your personal data is:

• processed lawfully, fairly and in a transparent manner (lawfulness, fairness and transparency);
• collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes (purpose limitation);
• adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed (data minimisation);
• accurate and, where necessary, kept up to date; every reasonable step will be taken to ensure that your personal data that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay (accuracy);
• kept in a form which permits your identification for no longer than is necessary for the purposes for which personal data is processed (storage limitation); and
• processed in a manner that ensures appropriate security of your personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage using appropriate technical or organisational measures (integrity and confidentiality).

The controller of your personal data is the Tezos Foundation. If you have any question, you can reach out to support@tezos.com.

2. Disclosure and transfer of your personal data

We will not share any of your personal data with any government authorities, except in order to comply with legal or regulatory requirements. If we receive a request to disclose your personal data to a government authority, we will thoroughly assess the request and will in particular consider possible legal challenges against such request. We will only comply with any such request that is binding, enforceable and issued in full compliance with applicable law.

We disclose your personal data to IT and other third-party service providers in Switzerland, the EU and the USA, which are under strict confidentiality obligations and are obliged to protect data privacy to the same extent as we ourselves.

3. Collecting of personal data when visiting our website

If you merely use this website for informational purposes, we will only collect your personal data that is transferred by your browser to our server. We collect online properties, identification data, professional life data, personal life data, connection data and localization data (including IP addresses), which is technically necessary for us to show you our website and ensure security and stability. The data collected is not linked to or stored with any personal data.

We evaluate the IP addresses together with other data, in case of attacks on our infrastructure or where unauthorized or abusive use of our website is suspected, for the purpose of intelligence and protection, and if appropriate, used in criminal proceedings for identification and civil and criminal proceedings against the relevant users. This is our legitimate interest in the processing of data in the sense of the relevant laws.

Our website provider is Blokhaus Inc, who uses Amazon Web Services as a hosting provider, Cloudflare as content distribution network and Google Inc. as analytics provider. The transfer of data is for the purpose of providing and maintaining the functionality of our website.

4. Collecting of personal data when signing up for the Newsletter

When signing up for the Newsletter on our website, you need to enter your email address.

You must enter the email address voluntarily, in order for us to be able to contact. Therefore, the processing of this data is in our legitimate interest in accordance in the sense of the relevant laws.

5. Use of Google Analytics

We use Google Analytics, a web analysis service of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies, i.e. text files, which are stored on your computer and allow Google to analyse the use of our website. The information recorded by the cookie on the use of this website (including your IP address) is usually transferred to a server of Google in the USA and stored there.

Google Analytics is extended on our web pages with the code “gat._anonymizeIp();;” to ensure that IP addresses are collected anonymously (IP masking). Your IP address is only recorded by Google in abbreviated form, which ensures anonymity and prevents any conclusions being drawn about your identity. In the event of the activation of the IP anonymisation on this website, your IP address is first shortened by Google within Member States of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of our website, to compile reports on the website activities and to perform further services associated with the use of website and the internet for us. The IP address transmitted by your browser as part of Google Analytics will not be compiled with any other data held by Google. Google transfers this data to third parties only due to legal regulations, or in the context of order data processing. By using this website, you agree to the processing of data collected about you by Google, and in the manner described and for the aforementioned purpose. You can prevent the storage of cookies by selecting the corresponding setting in your browser software. However, please note that in this case you may not be able to use all the functions on our website. Furthermore, you can prevent Google’s collection and use of data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link. For more information about Google Analytics and privacy, see https://tools.google.com/dlpage/gaoptout?hl=en.

6. Securing your data

We have implemented various technical and organizational security measures to ensure that your personal data is adequately protected from unauthorized access or other unlawful use. We use CloudFlare Inc. to secure and ensure reliability of our website.

We have contractual arrangements with all of our IT and other third party service providers in place, which require them to also implement the necessary security measures.

Our commitment to security also means that we have imposed strict confidentiality obligations on all of our staff and that we have implemented various data security policies to protect your personal data.

7. Data retention

Your personal data collected is deleted or blocked as soon as the purpose for the saving no longer applies. Further, the personal data can be saved, if this is intended by an act, law or other provisions, which the responsible person is subject to.

8. Your rights in connection with your data

You are entitled to the following under the conditions set out in applicable law:

• to request access to your personal data, including to obtain a copy of such data;
• to request correction of inaccurate personal data or to have incomplete personal data completed;
• to request deletion of your personal data in certain circumstances, such as if the data has been processed in non-compliance with applicable requirements;
• to request us to restrict the processing of your personal data;
• to object for legitimate reasons to the processing of your personal data when we process it on the basis of a legitimate interest;
• to revoke any consent previously granted (if applicable) for the processing, but this will not affect the lawfulness of the processing until the revocation;
• to request data portability where the data is processed on the basis of your consent or the necessity for the performance of a contract concluded with you; and
• to lodge a complaint with the competent authority.

9. Contact

If you would like to exercise your rights listed under point 8 above or if you have any request regarding our use of your personal data you may contact us by emailing support@tezos.foundation or by letter to:

Tezos Foundation

Attention: Data Protection

Dammstrasse 16

6300 Zug

Switzerland

If you are an individual in the EU, you can also contact VeraSafe, which has been appointed as Tezos Foundation’s representative in the EU pursuant to Article 27 GDPR, only on matters related to the processing of personal data. To make such an inquiry, please contact VeraSafe using this contact form:https://www.verasafe.com/privacy-services/contact-article-27-representative.

Alternatively, VeraSafe may be contacted at:

Matthew Joseph

Zahradníčkova 1220/20A

Prague 15000

Czech Republic

or

VeraSafe Ireland Ltd

Unit 3D North Point House

North Point Business Park

New Mallow Road

Cork T23AT2P

Ireland