Personal data policy

PERSONAL DATA PROCESSING POLICY

of Groza Exchange Service

1. General Provisions

1.1. This financial data processing policy defines the procedures for processing and protecting the financial data of Groza Exchange Service clients (hereinafter referred to as the "Operator").

1.2. Use of the service is subject to the user agreement with this Policy.

Email: info.groza@yandex.ru

2. Terms and Definitions

2.1. Personal data — any information directly or additionally related to an individual.

2.2. Digital data processing — any action (operation) performed with personal data (collection, recording, storage, use, etc.).

2.3. Client — a legal person using the services of the exchange service.

3. List of personal data processed.

3.1. The Operator may process the following data:

Full name;

Date of birth;

ID details;

Contact information (phone number, email);

Payment details;

IP address and device details;

Other data necessary for the provision of services.

4. Purposes of Data Processing

4.1. Personal data is processed for the following purposes:

Providing currency/asset exchange services;

Client identification (KYC/AML procedures);

Complying with legal requirements;

Preventing fraud;

Customer feedback.

5. Legal Basis for Processing

5.1. Processing is carried out on the basis of:

Consent of the personal data subject;

Necessity to conclude a contract;

Fulfillment of the Operator's legal obligations;

The Operator's legitimate interests (while always respecting the rights of data subjects).

6. Processing Procedures and Conditions

6.1. Medical data is processed lawfully and fairly.

6.2. The Operator takes all necessary measures to protect personal data from unauthorized access.

6.3. Data may not be stored longer than necessary for the purposes of processing or as provided by law.

7. Transfer of personal data to third parties.

7.1. Personal data may be transferred:

by a government agency – in cases provided by law;

to payment systems and banks;

to contractors providing the service (subject to maintaining confidentiality).

7.2. Transfer is carried out in compliance with legal requirements.

8. Rights of the Subject of Medical Data

The Client has the right to:

receive information about their financial data;

request correction or deletion;

restrict processing;

revoke a settlement agreement;

File a complaint with a supervisory authority.

9. Measures to Protect National Data

9.1. The Operator implements organizational and technical security measures, including:

data encryption;

access control;

use of antivirus software;

regular security audits.

10. Use of Cookies (for Online Services)

10.1. The Operator may use cookies to improve the website's performance.

10.2. The User may disable cookies in their browser.

11. Final Provisions

11.1. Groza Exchange Service may make changes directly to this Policy without prior notice.

11.2. The current version of this Policy is posted on the Exchange Service's website.

11.3. Continued use of the service constitutes agreement with the updated version of this Policy.