CoinGate Data Processing Agreement

Date last updated: June 4, 2020

Natural or legal person who accepted the Terms and Conditions for use of the CoinGate crypto currency payment processing platform (“Data Controller”);

and

UAB DECENTRALIZED (operating the CoinGate platform), a private limited liability company, established and operating under the laws of Republic of Lithuania, company code: 303423510, address: A. Gostauto str. 8, LT-01108, Vilnius, Lithuania (“Data Processor”);

taking into account that:

The Data Processor provides crypto currency payment processing platform services to the Data Controller;

In the course of providing the above services to the Data Controller, the Data Processor has to process personal data on behalf of and for the interest of the Data Controller;

Article 28(3) of the European Union Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) („GDPR“) requires that processing by a processor shall be governed by a contract or other legal act under the EU or the EU Member State law, that is binding on the processor with regard to the controller and that sets out the subject-matter and duration of the processing, the nature and purpose of the processing, the type of personal data and categories of data subjects and the obligations and rights of the controller;

have agreed as follows:

1. GLOSSARY
The following terms in this Data processor agreement shall have the following meaning:

Applicable data protection laws – means any national or internationally binding data protection laws or regulations applicable at any time during the term of this Data processor agreement on, as the case may be, the Data Controller or the Data Processor, including GDPR

Data Controller – means an entity or a person that has accepted the Terms and Conditions for use of the CoinGate crypto currency payment processing platform and that determines the purposes and means of the processing of Personal Data;

Data Processor – means UAB Decentralized that processes Personal Data on behalf of the Data controller under this Data processor agreement;

Personal Data – means any information relating to an identified or identifiable natural person;

Sub-processor – means a third party subcontractor engaged by the Data Processor which, as part of the subcontractor’s role of delivering the services, will process Personal Data on behalf of the Data Controller.

2. DATA PROCESSING INSTRUCTIONS

2.1 The Data Processor shall process the personal data on documented instructions from the Data controller, including with regard to transfers of personal data to a third country or an international organisation, unless required to do so by EU or EU Member State law to which the processor is subject.

2.2 The Data Controller’s instructions to the Data Processor regarding the subject-matter and duration of the processing, the nature, and purpose of the processing, the type of Personal Data and categories of data subjects are as follows:

The subject-matter of data processing	Provision of CoinGate crypto currency payment processing platform to the Data Controller
The nature and purpose of the processing	To process and exchange crypto currency payments on behalf of the Data Controller
Duration of the processing	As long as the Data Controller has an account with the Data Processor plus 10 (ten) years following the termination of the account
Types of personal data	IP address, e-mail, address of transaction receipt, transaction amount, transaction date and time, transaction currency, other data provided by the purchaser, requests for repayment or overpayments, blockchain addresses, transfer amount, transfer recipient, information provided by data subjects
Categories of data subjects	The Data Controller’s clients: purchasers (natural persons)