Last updated 16 June 2020 Bitcoin Association for BSV (which operates as Bitcoin Association) (the “Association”) is committed to maintaining strong privacy protection for its users. This “Privacy Notice” is designed to help you understand how we collect, use, and safeguard the information you provide to us and to assist you in making informed decisions when using our services.

1. Who we are

The controller of your personal data is Bitcoin Association for BSV, Grafenauweg 6, 6300 Zug, Switzerland (email: privacy@bitcoinassociation.net ; telephone: +41 (0)41 552 29 00). References in this Notice to the “Association”, “we”, “us” or “our” are references to Bitcoin Association for BSV. We have appointed the following EU representative: CMS Hasche Sigle Kranhaus 1 Im Zollhafen 18 50678 Cologne Germany email: eu-representative-201@cms-hs.com We have appointed the following Data Protection Officer: Aline Steffen CMS von Erlach Poncet Ltd. Dreikönigstrasse 7 PO Box 8022 Zurich Switzerland email: DPO@bitcoinassociation.net

2. Personal data we process

Personal data we process about you includes:

• your name and contact details (for example name, address and email address), information about the company you work for, your position or title, and other basic information;
• identification and background information provided by you or collected as part of our membership process, registration to participate in our events or activities, and other purposes;
• financial information, for example payment-related information;
• information provided to us by or on behalf of our users or generated by us in the course of providing services to users;
• information in relation to materials and communications we send to you electronically, for example your use of our marketing e-mails;
• any other information relating to you which you may provide to us.

We collect this information when you interact with us, for example when you communicate with our staff, sign up to receive information by e-mail, or participate at an event, program or activity or apply to become a member or affiliate. We may also collect personal data from other sources, for example to keep your information up to date using publicly available sources.

3. How we use your personal data

We use your personal data:

• to communicate with you;
• to provide and improve our services to you and our users, including personal data of others provided to us or collected by us on behalf of our members or clients, for example processing identification and background information as part of our membership, finance, administration and marketing processes;
• to administer our relationship with you and with our users;
• to provide and improve our websites, including monitoring and evaluating its use (see “Cookie Notice; Use of our websites and e-mails” section below for additional information);
• to promote our events, programs, activities and services, including by sending alerts, updates, event invitations etc.;
• to comply with our legal, regulatory and risk management obligations, including establishing, exercising or defending legal claims.

4. Cookie Notice; Use of our websites and e-mails

To improve the quality of the website, we may track information provided to us by your browser or by your software applications when you view or use the website, such as the website you came from (known as the “referring URL”), the type of browser you use, the device from which you connected to the website, the time and date of access, and other information that does not personally identify you. We track this information using cookies, or small text files, which include an anonymous unique identifier. Cookies are sent to a user’s browser from our servers and are stored in the user’s computer hard drive. Sending a cookie to a user’s browser enables us to collect Non-Personal Information about that user and keep a record of the user’s preferences when utilizing our services, both on an individual and aggregate basis. The Association may use both permanent cookies and functional, session cookies: permanent cookies remain on your computer after you close your session and until you delete them, while session cookies expire when you close your browser. You may refuse the use of cookies by selecting the appropriate settings on your browser. Note however that this may affect your experience of our websites. To find out more about cookies, including how to manage, reject and delete cookies, visit www.allaboutcookies.org. This Privacy Notice does not limit our use or disclosure to third parties of Non-Personal Information and we reserve the right to use and disclose such Non-Personal Information to our partners, advertisers, and other third parties at our discretion. We may use your name and e-mail address(es) to send you alerts, updates, event invitations and other information by e-mail, but will ask for consent first unless we have obtained your contact details from you in the context of our services. You have the right at any time to prevent us from contacting you for these marketing purposes. When we send any promotional communications to a user, the user can opt out of further promotional communications by following the unsubscribe instructions provided in each promotional email.

5. On what basis we use your personal information

We process personal data on the following grounds: to perform a contract, such as engaging with an individual to provide events, programs, activities or services; for the establishment, exercise or defense of legal claims or proceedings; to comply with legal and regulatory obligations; and for legitimate interests. Please see “How we process your personal data” above for additional details.

6. Who we share your personal data with

We will share your personal data with trusted third parties including:

• IT service providers;
• Vendors who are performing services for the Association, such as the servers for our email communications;
• Our auditors;
• Third parties involved in hosting or organizing events, programs, activities and other services offered or supported by the Association.

With such third parties, appropriate data processing agreements are concluded. If you would like to receive a copy of these agreements, please contact us at the address indicated above. These agreements are usually based on the EU standard clauses, which you may review here. For the purposes set out in this Privacy Notice and where necessary, we may share personal data with courts, regulatory authorities, government agencies and law enforcement agencies. While it is unlikely, we may be required to disclose your information to comply with legal or regulatory requirements. We will use reasonable endeavors to notify you before we do this, unless we are legally restricted from doing so.

7. Countries we transfer your personal data to

We may transfer your personal data to recipients abroad, including in countries that do not provide the same level of protection as the EU law. Before we do so we will implement appropriate measures to protect your personal data, for example by requiring the recipient to agree to data processing agreements (if you would like to receive a copy of these agreements, please contact us at the address indicated above). We may also transfer personal data with your explicit consent and in certain other situations as permitted by applicable law.

8. How we retain your personal data

We retain your personal data for as long as it is necessary for the purposes for which the data is collected, and as long as we have a legitimate interest in keeping personal data, for example to enforce or defend claims or for archiving purposes and IT security. We also retain your personal data as long as it is subject to a legal retention obligation.

9. How we protect your personal information

We protect your information from unauthorized access, use, disclosure, alteration or destruction by implementing various organizational and technological security measures including encryption, firewalls and secure socket layer technology. However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our service, you acknowledge that you understand and agree to undertake these risks.

10. Your rights

You are entitled to ask for details of the information we hold about you and how we process it and to receive a copy of your personal data. You may also have your data rectified or deleted, restrict our processing of that information, and object to the processing of your personal data. You may also choose to withdraw your consent. Please note that even after you have chosen to withdraw your consent we may be able to continue to process your personal information to the extent required or permitted by law. You may also lodge a complaint in relation to our processing of your personal data with a local supervisory authority. We must ensure that your personal information is accurate and up to date. Therefore, please advise us of any changes to your information by contacting us at the address indicated above.

11. Links to other websites

As part of our service, we may provide links to or compatibility with other websites or applications. However, we are not responsible for the privacy practices employed by those websites or the information or content they contain. This Privacy Notice applies solely to information collected by us through the website and the service. Therefore, this Privacy Notice does not apply to your use of a third party website accessed by selecting a link on our website or via our service. To the extent that you access or use the service through or on another website or application, then the privacy notice of that other website or application will apply to your access or use of that site or application. We encourage our users to read the privacy statements of other websites before proceeding to use them.

12. Changes to our Privacy Notice

We reserve the right to change this Privacy Notice at any time. We will notify you of significant changes to this Privacy Notice here on this page. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. Users are encouraged to periodically check the website and this Privacy Notice for updates.